{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-0de96c024a728d0b", "name": "Possibly dead Python function: count_hidden_token", "shortDescription": {"text": "Possibly dead Python function: count_hidden_token"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc256ad2748ab9d6", "name": "Possibly dead Python function: compare_results", "shortDescription": {"text": "Possibly dead Python function: compare_results"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae5a0c73a79630df", "name": "Possibly dead Python function: rewrite_file", "shortDescription": {"text": "Possibly dead Python function: rewrite_file"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d8a638864e72d4f6", "name": "Possibly dead Python function: test_ttft", "shortDescription": {"text": "Possibly dead Python function: test_ttft"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a904160de9f98871", "name": "Possibly dead Python function: test_decode", "shortDescription": {"text": "Possibly dead Python function: test_decode"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8daf66029b9fc2db", "name": "Possibly dead Python function: test_prefix_cache", "shortDescription": {"text": "Possibly dead Python function: test_prefix_cache"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a9cfe6577f3225b", "name": "Possibly dead Python function: test_tool_call", "shortDescription": {"text": "Possibly dead Python function: test_tool_call"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5b06648aa41e5222", "name": "Possibly dead Python function: test_reasoning", "shortDescription": {"text": "Possibly dead Python function: test_reasoning"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13f7a838d0f182f6", "name": "Possibly dead Python function: test_long_gen", "shortDescription": {"text": "Possibly dead Python function: test_long_gen"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0d9b916ab7d2ac4b", "name": "Possibly dead Python function: generate_github_issue", "shortDescription": {"text": "Possibly dead Python function: generate_github_issue"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8501690ab48dff7d", "name": "Possibly dead Python function: generate_reddit_post", "shortDescription": {"text": "Possibly dead Python function: generate_reddit_post"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0ca8b7cce140dbc", "name": "Possibly dead Python function: generate_tweet", "shortDescription": {"text": "Possibly dead Python function: generate_tweet"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6cb1adea49939614", "name": "Possibly dead Python function: generate_discord_message", "shortDescription": {"text": "Possibly dead Python function: generate_discord_message"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c7d0cc255ade833b", "name": "Possibly dead Python function: generate_issue_reply", "shortDescription": {"text": "Possibly dead Python function: generate_issue_reply"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30b4451d236be127", "name": "Possibly dead Python function: has_pending", "shortDescription": {"text": "Possibly dead Python function: has_pending"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d1cd44c01ecc408", "name": "Possibly dead Python function: is_tpu", "shortDescription": {"text": "Possibly dead Python function: is_tpu"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c7184eee5f1c1cd", "name": "Possibly dead Python function: is_xpu", "shortDescription": {"text": "Possibly dead Python function: is_xpu"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-608a9f97a65f9ee4", "name": "Possibly dead Python function: is_cpu", "shortDescription": {"text": "Possibly dead Python function: is_cpu"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9dfa2c8d2fac6bd", "name": "Possibly dead Python function: is_out_of_tree", "shortDescription": {"text": "Possibly dead Python function: is_out_of_tree"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c8e6217f50ba586", "name": "Possibly dead Python function: is_cuda_alike", "shortDescription": {"text": "Possibly dead Python function: is_cuda_alike"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7beb32267e6bd5d8", "name": "Possibly dead Python function: is_sleep_mode_available", "shortDescription": {"text": "Possibly dead Python function: is_sleep_mode_available"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db0b21cb47994c64", "name": "Possibly dead Python function: init_device", "shortDescription": {"text": "Possibly dead Python function: init_device"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b52447ef593d6eb1", "name": "Possibly dead Python function: determine_available_memory", "shortDescription": {"text": "Possibly dead Python function: determine_available_memory"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7243dc1879b7faa", "name": "Possibly dead Python function: compile_or_warm_up_model", "shortDescription": {"text": "Possibly dead Python function: compile_or_warm_up_model"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72685c504adc5758", "name": "Possibly dead Python function: check_health", "shortDescription": {"text": "Possibly dead Python function: check_health"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5639ad2e47805b47", "name": "Possibly dead Python function: add_lora", "shortDescription": {"text": "Possibly dead Python function: add_lora"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b07df85f17c6324", "name": "Possibly dead Python function: remove_lora", "shortDescription": {"text": "Possibly dead Python function: remove_lora"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b0c8aed81603849", "name": "Possibly dead Python function: pin_lora", "shortDescription": {"text": "Possibly dead Python function: pin_lora"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b6c6e3b646cd231", "name": "Insecure pattern 'subprocess_shell_true' in scripts/pr_validate/README.md:189", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in scripts/pr_validate/README.md:189"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5aa6988b39e1d1cd", "name": "Insecure pattern 'exec_used' in scripts/pr_validate/steps/codex_review.py:362", "shortDescription": {"text": "Insecure pattern 'exec_used' in scripts/pr_validate/steps/codex_review.py:362"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f7595eb07c3d724", "name": "Insecure pattern 'subprocess_shell_true' in scripts/pr_validate/steps/supply_chain.py:79", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in scripts/pr_validate/steps/supply_chain.py:79"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0879b4b30be2a87", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a856a97c89417dc8", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/github-script@v7 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d3e9ecf49532a58", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3da7733b0dbf1162", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4f658c0c00de0d4", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "peaceiris/actions-gh-pages@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-448d8837178ae57a", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b451e126ff3a81e", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc1c6dcb00af79ac", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a53bf972e19b52fd", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ffa33751be3d771", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-164cef65c0e68da0", "name": "Very large file: tests/test_upstream_regression.py (1406 lines)", "shortDescription": {"text": "Very large file: tests/test_upstream_regression.py (1406 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c25df537769dbde8", "name": "Very large file: tests/test_pr_validate_codex.py (1811 lines)", "shortDescription": {"text": "Very large file: tests/test_pr_validate_codex.py (1811 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-52d52d9834c4280f", "name": "Very large file: tests/test_no_mllm_flag.py (2606 lines)", "shortDescription": {"text": "Very large file: tests/test_no_mllm_flag.py (2606 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07df09f260eb64e8", "name": "Very large file: tests/test_postprocessor.py (2814 lines)", "shortDescription": {"text": "Very large file: tests/test_postprocessor.py (2814 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-64223040ba2fe9ec", "name": "Very large file: tests/test_diffusion_engine.py (3038 lines)", "shortDescription": {"text": "Very large file: tests/test_diffusion_engine.py (3038 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a65b3797f436500c", "name": "Very large file: tests/test_cli_chat.py (2259 lines)", "shortDescription": {"text": "Very large file: tests/test_cli_chat.py (2259 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1600044b45648bb9", "name": "Very large file: tests/test_server_utils.py (1372 lines)", "shortDescription": {"text": "Very large file: tests/test_server_utils.py (1372 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49a5cf33cc81e4c1", "name": "Very large file: tests/test_tool_parsers.py (2374 lines)", "shortDescription": {"text": "Very large file: tests/test_tool_parsers.py (2374 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79cb059eddbecbca", "name": "Very large file: tests/test_community_bench.py (1662 lines)", "shortDescription": {"text": "Very large file: tests/test_community_bench.py (1662 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-35cd3f981d5fa8df", "name": "Very large file: tests/test_harmony_parsers.py (1544 lines)", "shortDescription": {"text": "Very large file: tests/test_harmony_parsers.py (1544 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-100dfa6ec8b8c54b", "name": "Very large file: tests/test_no_out_of_band_routing.py (1307 lines)", "shortDescription": {"text": "Very large file: tests/test_no_out_of_band_routing.py (1307 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7105305c0374e23", "name": "Very large file: scripts/bench_vs_ollama.py (1566 lines)", "shortDescription": {"text": "Very large file: scripts/bench_vs_ollama.py (1566 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b32090e4e994ed5", "name": "Very large file: vllm_mlx/scheduler.py (3881 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/scheduler.py (3881 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-51ab05f62b1df81f", "name": "Very large file: vllm_mlx/cli.py (4918 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/cli.py (4918 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a369f440fdd3531c", "name": "Very large file: vllm_mlx/server.py (1378 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/server.py (1378 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2a15cf3f2661e6f", "name": "Very large file: vllm_mlx/memory_cache.py (1629 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/memory_cache.py (1629 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86dac046f5739eff", "name": "Very large file: vllm_mlx/benchmark.py (1732 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/benchmark.py (1732 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-026d680e7e016d3b", "name": "Very large file: vllm_mlx/models/mllm.py (2280 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/models/mllm.py (2280 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c95cffaa5acc765", "name": "Very large file: vllm_mlx/models/deepseek_v4.py (2187 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/models/deepseek_v4.py (2187 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76479077df6588e4", "name": "Very large file: vllm_mlx/routes/chat.py (1845 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/routes/chat.py (1845 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4084c4c69cce5e68", "name": "Very large file: vllm_mlx/runtime/diffusion_lane.py (1490 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/runtime/diffusion_lane.py (1490 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb1c7b74c1e5e31d", "name": "Very large file: vllm_mlx/service/postprocessor.py (1184 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/service/postprocessor.py (1184 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4393f4ecd6524ac6", "name": "Very large file: vllm_mlx/service/helpers.py (1264 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/service/helpers.py (1264 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e180dcfc5dfb3c20", "name": "Very large file: vllm_mlx/engine/batched.py (1958 lines)", "shortDescription": {"text": "Very large file: vllm_mlx/engine/batched.py (1958 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-63f9ecd0a634749f", "name": "Very large file: evals/run_eval.py (1753 lines)", "shortDescription": {"text": "Very large file: evals/run_eval.py (1753 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c7659ce6e2b0e01f", "name": "40 TODO/FIXME markers", "shortDescription": {"text": "40 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 1948 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 32 placeholder/mock markers across 16 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b968955d37d3cbeb", "name": "Agent authority lacks a verifier contract: .claude/todo.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/todo.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8eb252a1d4c93963", "name": "Agent instruction contains unpinned remote install: .claude/todo.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/todo.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17c03442b2af711d", "name": "Legacy-named symbol `test_cache_returns_deep_copy` in tests/test_mllm_cache.py:383", "shortDescription": {"text": "Legacy-named symbol `test_cache_returns_deep_copy` in tests/test_mllm_cache.py:383"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-723528c681e9241b", "name": "Commented-code block (5 lines) in tests/test_metal_error_recovery.py:188", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_metal_error_recovery.py:188"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7bf50269ddaf24fe", "name": "Commented-code block (5 lines) in tests/test_suffix_decoding_tier.py:159", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_suffix_decoding_tier.py:159"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7b59f8919063f32e", "name": "Commented-code block (7 lines) in tests/test_routes.py:691", "shortDescription": {"text": "Commented-code block (7 lines) in tests/test_routes.py:691"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d4bbb76d4a9a647a", "name": "Legacy-named symbol `num_tokens_old` in tests/test_prefix_cache_persistence.py:10", "shortDescription": {"text": "Legacy-named symbol `num_tokens_old` in tests/test_prefix_cache_persistence.py:10"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0016c450819e61ea", "name": "Commented-code block (6 lines) in tests/test_prefix_cache_persistence.py:606", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_prefix_cache_persistence.py:606"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2f9ea12c2e3bb8ea", "name": "Commented-code block (5 lines) in tests/test_embeddings_timeout_admission.py:364", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_embeddings_timeout_admission.py:364"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ee83d2d6908c092c", "name": "Commented-code block (5 lines) in tests/conftest.py:61", "shortDescription": {"text": "Commented-code block (5 lines) in tests/conftest.py:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-068deaa02cbcb006", "name": "Commented-code block (5 lines) in tests/test_engine_step_thread.py:495", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_engine_step_thread.py:495"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a81d60af19d47653", "name": "Commented-code block (5 lines) in tests/test_tool_parser_wire_formats.py:36", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_tool_parser_wire_formats.py:36"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-40337e9778ea6b15", "name": "Legacy-named symbol `TestCombinedLegacy` in tests/test_legacy_functions_field.py:141", "shortDescription": {"text": "Legacy-named symbol `TestCombinedLegacy` in tests/test_legacy_functions_field.py:141"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ff48c7728947e9c", "name": "Commented-code block (5 lines) in tests/test_tool_call_streaming_parity.py:165", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_tool_call_streaming_parity.py:165"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6c8022954173bced", "name": "Commented-code block (6 lines) in tests/test_routes_cached_tokens.py:143", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_routes_cached_tokens.py:143"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9a8791416b7ebeb5", "name": "Commented-code block (5 lines) in tests/test_cli_argcomplete.py:66", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_cli_argcomplete.py:66"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2a9001c0440534a4", "name": "Legacy-named symbol `call_v2` in tests/test_native_tool_format.py:310", "shortDescription": {"text": "Legacy-named symbol `call_v2` in tests/test_native_tool_format.py:310"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-45da9dfda96da011", "name": "Commented-code block (5 lines) in tests/test_pr_validate_codex.py:115", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_pr_validate_codex.py:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-39c846278c3d1194", "name": "Commented-code block (5 lines) in tests/test_hermes_harness_contract.py:56", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_hermes_harness_contract.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7f236c677fd6ae5d", "name": "Commented-code block (5 lines) in tests/test_suffix_decoding.py:36", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_suffix_decoding.py:36"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cf3d5dd3e8ebf42e", "name": "Commented-code block (10 lines) in tests/test_prompt_lookup.py:163", "shortDescription": {"text": "Commented-code block (10 lines) in tests/test_prompt_lookup.py:163"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-224e2b07df3f4486", "name": "Commented-code block (7 lines) in tests/test_gemma4_tool_parser.py:194", "shortDescription": {"text": "Commented-code block (7 lines) in tests/test_gemma4_tool_parser.py:194"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-babc0fb24781f0ae", "name": "Commented-code block (5 lines) in tests/test_batched_engine_output_router.py:406", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_batched_engine_output_router.py:406"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5a7b13c7cba9516d", "name": "Commented-code block (6 lines) in tests/test_telemetry_cli.py:196", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_telemetry_cli.py:196"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-80ba60d399b82b9e", "name": "Commented-code block (5 lines) in tests/test_anthropic_stream_reasoning.py:105", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_anthropic_stream_reasoning.py:105"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4c65070154711d97", "name": "Legacy-named symbol `test_audit_no_false_positive_when_field_unused` in tests/test_cli_config_fidelity.py:213", "shortDescription": {"text": "Legacy-named symbol `test_audit_no_false_positive_when_field_unused` in tests/test_cli_config_fidelity.py:213"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c8eb383bd0c79d54", "name": "Legacy-named symbol `test_rapid_mlx_dir_preferred_over_legacy` in tests/test_mcp_config_discovery.py:50", "shortDescription": {"text": "Legacy-named symbol `test_rapid_mlx_dir_preferred_over_legacy` in tests/test_mcp_config_discovery.py:50"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54907128f8299629", "name": "Commented-code block (8 lines) in tests/test_chat_streaming_guided.py:195", "shortDescription": {"text": "Commented-code block (8 lines) in tests/test_chat_streaming_guided.py:195"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0c96a5260ed110f7", "name": "Commented-code block (5 lines) in tests/test_aliases_contract.py:394", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_aliases_contract.py:394"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4894df0d8785bc15", "name": "Commented-code block (6 lines) in tests/test_modality_field.py:90", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_modality_field.py:90"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2276d3dd508be0d2", "name": "Commented-code block (5 lines) in tests/test_dflash_integration.py:27", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_dflash_integration.py:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-38d2d95d14317902", "name": "Commented-code block (8 lines) in tests/test_mlx_compat.py:121", "shortDescription": {"text": "Commented-code block (8 lines) in tests/test_mlx_compat.py:121"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5b07d3ddaca97811", "name": "Commented-code block (6 lines) in tests/test_check_mlx_upstream_calls.py:115", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_check_mlx_upstream_calls.py:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c955c37143176b3", "name": "Legacy-named symbol `test_block_table_copy` in tests/test_paged_cache.py:76", "shortDescription": {"text": "Legacy-named symbol `test_block_table_copy` in tests/test_paged_cache.py:76"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d3bbcf714469395", "name": "Commented-code block (7 lines) in tests/test_no_mllm_flag.py:151", "shortDescription": {"text": "Commented-code block (7 lines) in tests/test_no_mllm_flag.py:151"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b061992bf0440ca7", "name": "Commented-code block (8 lines) in tests/test_mllm_batch_generator.py:177", "shortDescription": {"text": "Commented-code block (8 lines) in tests/test_mllm_batch_generator.py:177"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-12156e3a1f868c02", "name": "Commented-code block (7 lines) in tests/test_model_auto_config.py:120", "shortDescription": {"text": "Commented-code block (7 lines) in tests/test_model_auto_config.py:120"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-365de4240a8839b3", "name": "Commented-code block (5 lines) in tests/test_chat_streaming_spec.py:271", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_chat_streaming_spec.py:271"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-25c88cdabe8c4d0c", "name": "Legacy-named symbol `test_575_qwen3_fast_path_no_tags_enable_thinking_false_legacy` in tests/test_reasoning_parsers.py:7", "shortDescription": {"text": "Legacy-named symbol `test_575_qwen3_fast_path_no_tags_enable_thinking_false_legacy` in tests/test_reasoning_parsers.py:727"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0bbca8d2e08fe4ac", "name": "Commented-code block (6 lines) in tests/test_telemetry_emit.py:399", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_telemetry_emit.py:399"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-39d85cc2d0ddf1e1", "name": "Commented-code block (6 lines) in tests/test_telemetry_queue.py:126", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_telemetry_queue.py:126"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e60df46f6bb244c", "name": "Commented-code block (8 lines) in tests/test_postprocessor.py:630", "shortDescription": {"text": "Commented-code block (8 lines) in tests/test_postprocessor.py:630"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-af216527383e376f", "name": "Commented-code block (5 lines) in tests/test_diffusion_engine.py:222", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_diffusion_engine.py:222"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec21971b892e2631", "name": "Commented-code block (5 lines) in tests/test_paired_compat.py:366", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_paired_compat.py:366"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9fa67176aae75b6", "name": "Commented-code block (6 lines) in tests/test_chat_route_tool_tag_leak.py:123", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_chat_route_tool_tag_leak.py:123"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7b1354ae5ae698d1", "name": "Commented-code block (8 lines) in tests/regression_suite.py:395", "shortDescription": {"text": "Commented-code block (8 lines) in tests/regression_suite.py:395"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7861c552a4ef99b8", "name": "Legacy-named symbol `_harmony_legacy` in tests/test_output_router.py:819", "shortDescription": {"text": "Legacy-named symbol `_harmony_legacy` in tests/test_output_router.py:819"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba92117fa2efe438", "name": "Commented-code block (5 lines) in tests/test_prompt_cache_snapshot.py:431", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_prompt_cache_snapshot.py:431"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-25e7ba73cf4e6fd4", "name": "Commented-code block (5 lines) in tests/test_cli_chat.py:663", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_cli_chat.py:663"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-647396b4e0d24c7c", "name": "Legacy-named symbol `fake_uncovered_parser_v2` in tests/test_tool_parser_coverage.py:73", "shortDescription": {"text": "Legacy-named symbol `fake_uncovered_parser_v2` in tests/test_tool_parser_coverage.py:73"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e62af5f964f70a99", "name": "Legacy-named symbol `test_fetch_returns_deep_copy` in tests/test_prefix_cache.py:215", "shortDescription": {"text": "Legacy-named symbol `test_fetch_returns_deep_copy` in tests/test_prefix_cache.py:215"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-726920cdb92943aa", "name": "Commented-code block (5 lines) in tests/test_config_and_middleware.py:537", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_config_and_middleware.py:537"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8c0dc2636aebaddc", "name": "Commented-code block (5 lines) in tests/test_model_profiles_ssot.py:332", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_model_profiles_ssot.py:332"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e9019a140beeaee2", "name": "Commented-code block (5 lines) in tests/test_batching.py:739", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_batching.py:739"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1ddc8b79e1537a69", "name": "Commented-code block (6 lines) in tests/test_tool_parsers.py:1213", "shortDescription": {"text": "Commented-code block (6 lines) in tests/test_tool_parsers.py:1213"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-44057d2eee8ec9a6", "name": "Commented-code block (7 lines) in tests/test_pr_validate_runner.py:290", "shortDescription": {"text": "Commented-code block (7 lines) in tests/test_pr_validate_runner.py:290"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-536938ef00a24225", "name": "Commented-code block (7 lines) in tests/test_community_bench.py:1380", "shortDescription": {"text": "Commented-code block (7 lines) in tests/test_community_bench.py:1380"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e0ae73e63d007b97", "name": "Commented-code block (7 lines) in tests/test_no_out_of_band_routing.py:61", "shortDescription": {"text": "Commented-code block (7 lines) in tests/test_no_out_of_band_routing.py:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-489fe72181010e30", "name": "Commented-code block (5 lines) in tests/test_sampler_fast_path.py:55", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_sampler_fast_path.py:55"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-faf4fff98397b973", "name": "Commented-code block (6 lines) in tests/integrations/test_anthropic_sdk.py:38", "shortDescription": {"text": "Commented-code block (6 lines) in tests/integrations/test_anthropic_sdk.py:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-99391455517eb850", "name": "Commented-code block (5 lines) in tests/parsers/streaming_reconstructor.py:116", "shortDescription": {"text": "Commented-code block (5 lines) in tests/parsers/streaming_reconstructor.py:116"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f0dad3e8e33c7bcc", "name": "Commented-code block (5 lines) in tests/parsers/fake_tokenizer.py:92", "shortDescription": {"text": "Commented-code block (5 lines) in tests/parsers/fake_tokenizer.py:92"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2760c6137ddaa04f", "name": "Commented-code block (11 lines) in tests/parsers/_harmony_markers.py:30", "shortDescription": {"text": "Commented-code block (11 lines) in tests/parsers/_harmony_markers.py:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b20ad08265a1fd4", "name": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_444_harmony_tool_call_leak.py:180", "shortDescription": {"text": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_444_harmony_tool_call_leak.py:180"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-708d8ae69b6f6d87", "name": "Commented-code block (8 lines) in tests/parsers/regressions/test_issue_447_gemma4_thought_marker_leak.py:101", "shortDescription": {"text": "Commented-code block (8 lines) in tests/parsers/regressions/test_issue_447_gemma4_thought_marker_leak.py:101"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5b6d01e1d72cd682", "name": "Commented-code block (5 lines) in tests/parsers/regressions/test_issue_513_harmony_streamable_parser.py:88", "shortDescription": {"text": "Commented-code block (5 lines) in tests/parsers/regressions/test_issue_513_harmony_streamable_parser.py:88"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2adbb49a709d5bf1", "name": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_448_hermes_function_prefix_leak.py:163", "shortDescription": {"text": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_448_hermes_function_prefix_leak.py:163"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-61456ece7685a7cc", "name": "Commented-code block (10 lines) in tests/parsers/regressions/test_issue_468_tool_choice_required_harmony_compound.py:72", "shortDescription": {"text": "Commented-code block (10 lines) in tests/parsers/regressions/test_issue_468_tool_choice_required_harmony_compound.py:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fcaf5c2a0239265f", "name": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_455_harmony_commentary_tool_channel.py:181", "shortDescription": {"text": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_455_harmony_commentary_tool_channel.py:181"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b089d8aacbf4dbf9", "name": "Commented-code block (8 lines) in scripts/release_smoke.py:77", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/release_smoke.py:77"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d8d5f7fce956d8a9", "name": "Commented-code block (5 lines) in scripts/audit_tool_parser_coverage.py:45", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/audit_tool_parser_coverage.py:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d81b39c5f5d23f2c", "name": "Commented-code block (7 lines) in scripts/rename_aliases.py:156", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/rename_aliases.py:156"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-218dfa6ffe8b7ed7", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/dev_test.py:51", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/dev_test.py:51"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-220af13c723129ef", "name": "Commented-code block (8 lines) in scripts/bench_suffix_decoding.py:43", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/bench_suffix_decoding.py:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4e0e33336d0174d3", "name": "Commented-code block (11 lines) in scripts/sweep_alias_refs.py:162", "shortDescription": {"text": "Commented-code block (11 lines) in scripts/sweep_alias_refs.py:162"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-923d72492c129a03", "name": "Commented-code block (6 lines) in scripts/bench_attention.py:123", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/bench_attention.py:123"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a7e94a32b8b822a3", "name": "Commented-code block (5 lines) in scripts/bench_suffix_decoding_integrated.py:257", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/bench_suffix_decoding_integrated.py:257"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5385ffdcba430d16", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/add_mtp_weights.py:73", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/add_mtp_weights.py:73"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d9c9e00d35203ca", "name": "Commented-code block (5 lines) in scripts/bench_readme_refresh.py:64", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/bench_readme_refresh.py:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8162d449f15276e4", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/bench_readme_refresh.py:310", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/bench_readme_refresh.py:310"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0dbbe4236fbc8dcb", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/bench_vs_ollama.py:1322", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/bench_vs_ollama.py:1322"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52df680c003ade24", "name": "Commented-code block (8 lines) in scripts/microbench_parsers.py:42", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/microbench_parsers.py:42"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-51016d2284731ef3", "name": "Commented-code block (5 lines) in scripts/bench_dflash.py:59", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/bench_dflash.py:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eef6f642b0f996b3", "name": "Commented-code block (7 lines) in scripts/pr_validate/base.py:25", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/pr_validate/base.py:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2b22b48d0f7a203b", "name": "Commented-code block (7 lines) in scripts/pr_validate/runner.py:43", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/pr_validate/runner.py:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8dad6bbfc74d7723", "name": "Commented-code block (5 lines) in scripts/pr_validate/steps/fetch.py:67", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/pr_validate/steps/fetch.py:67"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6cd0ffdee82edd18", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/fetch.py:141", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/fetch.py:141"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf27667d57a50ea1", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/full_unit.py:50", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/full_unit.py:50"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5fa597b9fab59f35", "name": "Commented-code block (6 lines) in scripts/pr_validate/steps/cl_description_quality.py:75", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/pr_validate/steps/cl_description_quality.py:75"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-29ca7e217f1afa01", "name": "Commented-code block (5 lines) in scripts/pr_validate/steps/codex_review.py:68", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/pr_validate/steps/codex_review.py:68"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-972085885af5b1d7", "name": "Commented-code block (5 lines) in scripts/pr_validate/steps/stress_e2e_bench.py:49", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/pr_validate/steps/stress_e2e_bench.py:49"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-223846f1df8ba968", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/targeted_tests.py:221", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/targeted_tests.py:221"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90b907cdb0083e6a", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/supply_chain.py:83", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/supply_chain.py:83"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-432fc20152a5fe83", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/lint.py:91", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/lint.py:91"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e619c564a8b88b37", "name": "Commented-code block (5 lines) in vllm_mlx/mllm_batch_generator.py:28", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/mllm_batch_generator.py:28"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ae80f33684b2d5e3", "name": "Commented-code block (9 lines) in vllm_mlx/_version_check.py:229", "shortDescription": {"text": "Commented-code block (9 lines) in vllm_mlx/_version_check.py:229"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-179db31dc9bd4a5f", "name": "Commented-code block (7 lines) in vllm_mlx/__init__.py:21", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/__init__.py:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-be11c01b1b19a02e", "name": "Commented-code block (5 lines) in vllm_mlx/model_auto_config.py:59", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/model_auto_config.py:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-470461fa2df3bdd6", "name": "Commented-code block (8 lines) in vllm_mlx/output_router.py:56", "shortDescription": {"text": "Commented-code block (8 lines) in vllm_mlx/output_router.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cf765802bb1a8d7e", "name": "Commented-code block (5 lines) in vllm_mlx/mllm_scheduler.py:32", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/mllm_scheduler.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20959850562e5323", "name": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/mllm_scheduler.py:820", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/mllm_scheduler.py:820"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-689942e4c31b12cc", "name": "Commented-code block (5 lines) in vllm_mlx/scheduler.py:23", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/scheduler.py:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-55c9a19d0e71f210", "name": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/scheduler.py:487", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/scheduler.py:487"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6fe91d3642a51f27", "name": "Commented-code block (10 lines) in vllm_mlx/model_aliases.py:20", "shortDescription": {"text": "Commented-code block (10 lines) in vllm_mlx/model_aliases.py:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9825583631d430cc", "name": "Commented-code block (8 lines) in vllm_mlx/_sampler_fast_path.py:98", "shortDescription": {"text": "Commented-code block (8 lines) in vllm_mlx/_sampler_fast_path.py:98"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d1608c69140e8e62", "name": "Commented-code block (5 lines) in vllm_mlx/engine_core.py:58", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/engine_core.py:58"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-577e18fcb96da9cf", "name": "Commented-code block (5 lines) in vllm_mlx/turboquant.py:60", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/turboquant.py:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0d51461d03c4f908", "name": "Commented-code block (7 lines) in vllm_mlx/cli.py:24", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/cli.py:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4f3bb9a4183fa125", "name": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/cli.py:3353", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/cli.py:3353"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c628d14e4c3b0a57", "name": "Commented-code block (10 lines) in vllm_mlx/request.py:65", "shortDescription": {"text": "Commented-code block (10 lines) in vllm_mlx/request.py:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7c22aff26ea34871", "name": "Commented-code block (7 lines) in vllm_mlx/output_router_harmony.py:65", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/output_router_harmony.py:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f4292d53b53b7bbc", "name": "Commented-code block (6 lines) in vllm_mlx/server.py:149", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/server.py:149"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-30e676ec6b78085a", "name": "Commented-code block (5 lines) in vllm_mlx/prefix_cache.py:697", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/prefix_cache.py:697"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7c261f0900922655", "name": "Commented-code block (6 lines) in vllm_mlx/memory_cache.py:1243", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/memory_cache.py:1243"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3e123e5536d2574e", "name": "Commented-code block (7 lines) in vllm_mlx/_mlx_compat.py:65", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/_mlx_compat.py:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b25b91b03a4cd550", "name": "Commented-code block (6 lines) in vllm_mlx/multimodal_processor.py:123", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/multimodal_processor.py:123"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e08deb3d71372e5a", "name": "Commented-code block (6 lines) in vllm_mlx/_download_gate.py:62", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/_download_gate.py:62"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c4a1431166e88aac", "name": "Commented-code block (6 lines) in vllm_mlx/doctor/baseline.py:117", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/doctor/baseline.py:117"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dcf67e2bc4d1d1f3", "name": "Commented-code block (7 lines) in vllm_mlx/doctor/cli.py:25", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/doctor/cli.py:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ef218e4e49e2021b", "name": "Commented-code block (7 lines) in vllm_mlx/models/mllm.py:748", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/models/mllm.py:748"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1245507a0cc3d9d3", "name": "Commented-code block (5 lines) in vllm_mlx/models/deepseek_v4.py:12", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/models/deepseek_v4.py:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-acc901958f48ef6d", "name": "Commented-code block (7 lines) in vllm_mlx/models/gemma4_text.py:136", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/models/gemma4_text.py:136"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dab9a0887251ae72", "name": "Commented-code block (5 lines) in vllm_mlx/config/server_config.py:33", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/config/server_config.py:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eb9c77e8923ed55f", "name": "Commented-code block (5 lines) in vllm_mlx/api/anthropic_adapter.py:89", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/api/anthropic_adapter.py:89"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-27dd5d5515902ba6", "name": "Commented-code block (6 lines) in vllm_mlx/api/models.py:213", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/api/models.py:213"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-474a364a29f422af", "name": "Legacy-named symbol `tc_copy` in vllm_mlx/api/utils.py:1034", "shortDescription": {"text": "Legacy-named symbol `tc_copy` in vllm_mlx/api/utils.py:1034"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bdaf5f4430bee1f7", "name": "Commented-code block (9 lines) in vllm_mlx/api/utils.py:101", "shortDescription": {"text": "Commented-code block (9 lines) in vllm_mlx/api/utils.py:101"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9679b8163f01411b", "name": "Commented-code block (6 lines) in vllm_mlx/api/guided.py:14", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/api/guided.py:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6a78d83c25e9755b", "name": "Commented-code block (5 lines) in vllm_mlx/mcp/config.py:16", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/mcp/config.py:16"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-99401fb4baed3b99", "name": "Commented-code block (7 lines) in vllm_mlx/utils/tokenizer.py:31", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/utils/tokenizer.py:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fc396879fde17c8a", "name": "Commented-code block (6 lines) in vllm_mlx/utils/chat_template.py:148", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/utils/chat_template.py:148"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2afddea10537fca5", "name": "Commented-code block (6 lines) in vllm_mlx/utils/mamba_cache.py:14", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/utils/mamba_cache.py:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1909427d6ca1bb14", "name": "Commented-code block (6 lines) in vllm_mlx/speculative/suffix_decoding.py:167", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/speculative/suffix_decoding.py:167"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-70164b095f020407", "name": "Commented-code block (8 lines) in vllm_mlx/speculative/dflash/server.py:70", "shortDescription": {"text": "Commented-code block (8 lines) in vllm_mlx/speculative/dflash/server.py:70"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-122ce0a4d4c74fde", "name": "Commented-code block (5 lines) in vllm_mlx/tool_parsers/mistral_tool_parser.py:98", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/tool_parsers/mistral_tool_parser.py:98"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f0917b1989dea3ad", "name": "Commented-code block (7 lines) in vllm_mlx/tool_parsers/hermes_tool_parser.py:196", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/tool_parsers/hermes_tool_parser.py:196"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fedb34f2a3b2543a", "name": "Commented-code block (11 lines) in vllm_mlx/tool_parsers/harmony_tool_parser.py:32", "shortDescription": {"text": "Commented-code block (11 lines) in vllm_mlx/tool_parsers/harmony_tool_parser.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b6c829efff8fa57b", "name": "Commented-code block (12 lines) in vllm_mlx/tool_parsers/gemma4_tool_parser.py:21", "shortDescription": {"text": "Commented-code block (12 lines) in vllm_mlx/tool_parsers/gemma4_tool_parser.py:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4d8975ba3aaddafe", "name": "Commented-code block (5 lines) in vllm_mlx/tool_parsers/abstract_tool_parser.py:54", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/tool_parsers/abstract_tool_parser.py:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3558a3fbc2c663b4", "name": "Commented-code block (8 lines) in vllm_mlx/routes/anthropic.py:63", "shortDescription": {"text": "Commented-code block (8 lines) in vllm_mlx/routes/anthropic.py:63"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d4ec4b7b690c87a7", "name": "Commented-code block (6 lines) in vllm_mlx/routes/models.py:37", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/routes/models.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4e337a3e12fda5cf", "name": "Commented-code block (7 lines) in vllm_mlx/routes/chat.py:77", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/routes/chat.py:77"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-352c311d86d4215f", "name": "Commented-code block (7 lines) in vllm_mlx/routes/embeddings.py:65", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/routes/embeddings.py:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31301291460ae4f6", "name": "Commented-code block (6 lines) in vllm_mlx/routes/completions.py:59", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/routes/completions.py:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-35b5516213fe0ffd", "name": "Commented-code block (11 lines) in vllm_mlx/agents/testing.py:1022", "shortDescription": {"text": "Commented-code block (11 lines) in vllm_mlx/agents/testing.py:1022"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2e83f4ec747cccd8", "name": "Legacy-named symbol `base_url_no_v1` in vllm_mlx/agents/base.py:147", "shortDescription": {"text": "Legacy-named symbol `base_url_no_v1` in vllm_mlx/agents/base.py:147"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3fadcafaf01c4787", "name": "Commented-code block (9 lines) in vllm_mlx/runtime/diffusion_lane.py:56", "shortDescription": {"text": "Commented-code block (9 lines) in vllm_mlx/runtime/diffusion_lane.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f4dfc26afb6aaad6", "name": "Commented-code block (7 lines) in vllm_mlx/service/postprocessor.py:88", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/service/postprocessor.py:88"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5502d78ef2033191", "name": "Commented-code block (10 lines) in vllm_mlx/service/helpers.py:172", "shortDescription": {"text": "Commented-code block (10 lines) in vllm_mlx/service/helpers.py:172"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1047d5bd099b27cd", "name": "Commented-code block (10 lines) in vllm_mlx/engine/batched.py:330", "shortDescription": {"text": "Commented-code block (10 lines) in vllm_mlx/engine/batched.py:330"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-649bc3d16bb637e7", "name": "Commented-code block (15 lines) in vllm_mlx/engine/base.py:32", "shortDescription": {"text": "Commented-code block (15 lines) in vllm_mlx/engine/base.py:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5a9760153faaf65f", "name": "Commented-code block (5 lines) in vllm_mlx/share/ws_tunnel.py:72", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/share/ws_tunnel.py:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-58c8b873a11a8bd5", "name": "Commented-code block (5 lines) in vllm_mlx/share/cli.py:53", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/share/cli.py:53"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dd16215f39375fbc", "name": "Commented-code block (5 lines) in vllm_mlx/share/warning.py:31", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/share/warning.py:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3186cf2f63f98f63", "name": "Commented-code block (7 lines) in vllm_mlx/patches/qwen3_next_mtp.py:84", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/patches/qwen3_next_mtp.py:84"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e59696611caf15aa", "name": "Commented-code block (6 lines) in vllm_mlx/reasoning/deepseek_r1_parser.py:68", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/reasoning/deepseek_r1_parser.py:68"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1256b73c5de01689", "name": "Commented-code block (10 lines) in vllm_mlx/reasoning/glm4_parser.py:66", "shortDescription": {"text": "Commented-code block (10 lines) in vllm_mlx/reasoning/glm4_parser.py:66"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f07b37d6b0cae928", "name": "Commented-code block (7 lines) in vllm_mlx/reasoning/think_parser.py:120", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/reasoning/think_parser.py:120"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f51bc8df5040a68b", "name": "Commented-code block (15 lines) in vllm_mlx/reasoning/harmony_parser.py:28", "shortDescription": {"text": "Commented-code block (15 lines) in vllm_mlx/reasoning/harmony_parser.py:28"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-88590d986ed40b4e", "name": "Commented-code block (7 lines) in vllm_mlx/reasoning/gemma4_parser.py:116", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/reasoning/gemma4_parser.py:116"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a65614ef87dc7c2c", "name": "Commented-code block (8 lines) in vllm_mlx/reasoning/qwen3_parser.py:77", "shortDescription": {"text": "Commented-code block (8 lines) in vllm_mlx/reasoning/qwen3_parser.py:77"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2be975fbe18cd6a2", "name": "Commented-code block (7 lines) in vllm_mlx/telemetry/consent.py:48", "shortDescription": {"text": "Commented-code block (7 lines) in vllm_mlx/telemetry/consent.py:48"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a4cac27b62021d06", "name": "Commented-code block (6 lines) in vllm_mlx/telemetry/queue.py:65", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/telemetry/queue.py:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-64ecbab97bd9ec89", "name": "Commented-code block (11 lines) in vllm_mlx/telemetry/schema.py:44", "shortDescription": {"text": "Commented-code block (11 lines) in vllm_mlx/telemetry/schema.py:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fbf2da76ab5a7419", "name": "Commented-code block (6 lines) in vllm_mlx/telemetry/transport.py:184", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/telemetry/transport.py:184"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b00d555bf9010317", "name": "Commented-code block (5 lines) in vllm_mlx/telemetry/state.py:106", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/telemetry/state.py:106"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eaeee42ba093b614", "name": "Commented-code block (8 lines) in vllm_mlx/telemetry/emit.py:54", "shortDescription": {"text": "Commented-code block (8 lines) in vllm_mlx/telemetry/emit.py:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-34e6cb5bef06a86b", "name": "Commented-code block (5 lines) in vllm_mlx/community_bench/hardware.py:80", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/community_bench/hardware.py:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-754ea8e482554621", "name": "Commented-code block (10 lines) in vllm_mlx/community_bench/submission.py:356", "shortDescription": {"text": "Commented-code block (10 lines) in vllm_mlx/community_bench/submission.py:356"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-275b506ccaf09cf6", "name": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/community_bench/submission.py:172", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/community_bench/submission.py:172"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-246ddd53700fe3b1", "name": "Commented-code block (5 lines) in vllm_mlx/community_bench/__init__.py:25", "shortDescription": {"text": "Commented-code block (5 lines) in vllm_mlx/community_bench/__init__.py:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-321f593c0847e141", "name": "Commented-code block (6 lines) in vllm_mlx/community_bench/runner.py:142", "shortDescription": {"text": "Commented-code block (6 lines) in vllm_mlx/community_bench/runner.py:142"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5ceca625eb1a761d", "name": "Network/subprocess call without timeout or try/except \u2014 examples/mcp_tool_use.py:49", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/mcp_tool_use.py:49"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d167455549fbdfb1", "name": "Network/subprocess call without timeout or try/except \u2014 examples/mcp_chat.py:25", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/mcp_chat.py:25"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-53c2d9b95eb371c8", "name": "Commented-code block (7 lines) in community-benchmarks/scripts/validate.py:91", "shortDescription": {"text": "Commented-code block (7 lines) in community-benchmarks/scripts/validate.py:91"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/demo_race.py:clear_screen, scripts/demo_dflash.py:clear_screen\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/bench_readme_refresh.py:start, scripts/bench_readme_refresh.py:start, scripts/bench_readme_refresh.py:start, scripts/bench_readme_refresh.py:start\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af0beb3cad60a2f0", "name": "FastAPI POST `create_chat_completion` without auth dependency \u2014 vllm_mlx/speculative/dflash/server.py:146", "shortDescription": {"text": "FastAPI POST `create_chat_completion` without auth dependency \u2014 vllm_mlx/speculative/dflash/server.py:146"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8605f02638e1454c", "name": "FastAPI POST `cancel_request` without auth dependency \u2014 vllm_mlx/routes/health.py:116", "shortDescription": {"text": "FastAPI POST `cancel_request` without auth dependency \u2014 vllm_mlx/routes/health.py:116"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3d847c62756701a3", "name": "FastAPI DELETE `delete_request` without auth dependency \u2014 vllm_mlx/routes/health.py:153", "shortDescription": {"text": "FastAPI DELETE `delete_request` without auth dependency \u2014 vllm_mlx/routes/health.py:153"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8d778219c5a9d320", "name": "FastAPI POST `clear_cache` without auth dependency \u2014 vllm_mlx/routes/health.py:159", "shortDescription": {"text": "FastAPI POST `clear_cache` without auth dependency \u2014 vllm_mlx/routes/health.py:159"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-904b6438a88ab16a", "name": "FastAPI DELETE `clear_all_caches` without auth dependency \u2014 vllm_mlx/routes/health.py:246", "shortDescription": {"text": "FastAPI DELETE `clear_all_caches` without auth dependency \u2014 vllm_mlx/routes/health.py:246"}, "fullDescription": {"text": "`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-251e3dbd600caba5", "name": "Unused endpoint: GET /v1/models", "shortDescription": {"text": "Unused endpoint: GET /v1/models"}, "fullDescription": {"text": "`vllm_mlx/speculative/dflash/server.py` declares `GET /v1/models` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff99ecd9b3a77326", "name": "Unused endpoint: POST /v1/chat/completions", "shortDescription": {"text": "Unused endpoint: POST /v1/chat/completions"}, "fullDescription": {"text": "`vllm_mlx/speculative/dflash/server.py` declares `POST /v1/chat/completions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-50d20b703a1dd1f9", "name": "Unused endpoint: POST /v1/messages", "shortDescription": {"text": "Unused endpoint: POST /v1/messages"}, "fullDescription": {"text": "`vllm_mlx/routes/anthropic.py` declares `POST /v1/messages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e51d72bee485df7b", "name": "Unused endpoint: POST /v1/messages/count_tokens", "shortDescription": {"text": "Unused endpoint: POST /v1/messages/count_tokens"}, "fullDescription": {"text": "`vllm_mlx/routes/anthropic.py` declares `POST /v1/messages/count_tokens` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a6d91f2236825bf", "name": "Unused endpoint: ANY /", "shortDescription": {"text": "Unused endpoint: ANY /"}, "fullDescription": {"text": "`vllm_mlx/routes/health.py` declares `ANY /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7681502f6b2af867", "name": "Unused endpoint: POST /v1/requests/{request_id}/cancel", "shortDescription": {"text": "Unused endpoint: POST /v1/requests/{request_id}/cancel"}, "fullDescription": {"text": "`vllm_mlx/routes/health.py` declares `POST /v1/requests/{request_id}/cancel` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c2d80666c0412098", "name": "Unused endpoint: DELETE /v1/requests/{request_id}", "shortDescription": {"text": "Unused endpoint: DELETE /v1/requests/{request_id}"}, "fullDescription": {"text": "`vllm_mlx/routes/health.py` declares `DELETE /v1/requests/{request_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-316e2f339e23cf1a", "name": "Unused endpoint: POST /v1/cache/clear", "shortDescription": {"text": "Unused endpoint: POST /v1/cache/clear"}, "fullDescription": {"text": "`vllm_mlx/routes/health.py` declares `POST /v1/cache/clear` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4beadb34770367c", "name": "Unused endpoint: GET /v1/status", "shortDescription": {"text": "Unused endpoint: GET /v1/status"}, "fullDescription": {"text": "`vllm_mlx/routes/health.py` declares `GET /v1/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ecd974a9a2d5da3", "name": "Unused endpoint: GET /v1/cache/stats", "shortDescription": {"text": "Unused endpoint: GET /v1/cache/stats"}, "fullDescription": {"text": "`vllm_mlx/routes/health.py` declares `GET /v1/cache/stats` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc287d031bda8bc9", "name": "Unused endpoint: DELETE /v1/cache", "shortDescription": {"text": "Unused endpoint: DELETE /v1/cache"}, "fullDescription": {"text": "`vllm_mlx/routes/health.py` declares `DELETE /v1/cache` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7abcfd953746f26", "name": "Unused endpoint: GET /v1/mcp/tools", "shortDescription": {"text": "Unused endpoint: GET /v1/mcp/tools"}, "fullDescription": {"text": "`vllm_mlx/routes/mcp_routes.py` declares `GET /v1/mcp/tools` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-417451ec5c986a5b", "name": "Unused endpoint: GET /v1/mcp/servers", "shortDescription": {"text": "Unused endpoint: GET /v1/mcp/servers"}, "fullDescription": {"text": "`vllm_mlx/routes/mcp_routes.py` declares `GET /v1/mcp/servers` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d04c5ca9747e290", "name": "Unused endpoint: POST /v1/mcp/execute", "shortDescription": {"text": "Unused endpoint: POST /v1/mcp/execute"}, "fullDescription": {"text": "`vllm_mlx/routes/mcp_routes.py` declares `POST /v1/mcp/execute` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a7f66f8775b4788", "name": "Unused endpoint: POST /v1/audio/transcriptions", "shortDescription": {"text": "Unused endpoint: POST /v1/audio/transcriptions"}, "fullDescription": {"text": "`vllm_mlx/routes/audio.py` declares `POST /v1/audio/transcriptions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4adf0a221779df1b", "name": "Unused endpoint: POST /v1/audio/speech", "shortDescription": {"text": "Unused endpoint: POST /v1/audio/speech"}, "fullDescription": {"text": "`vllm_mlx/routes/audio.py` declares `POST /v1/audio/speech` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-097e1ea06cfa2759", "name": "Unused endpoint: GET /v1/audio/voices", "shortDescription": {"text": "Unused endpoint: GET /v1/audio/voices"}, "fullDescription": {"text": "`vllm_mlx/routes/audio.py` declares `GET /v1/audio/voices` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b823f760160fbef3", "name": "Unused endpoint: GET /v1/models/{model_id}", "shortDescription": {"text": "Unused endpoint: GET /v1/models/{model_id}"}, "fullDescription": {"text": "`vllm_mlx/routes/models.py` declares `GET /v1/models/{model_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ebe36b9073da7dfc", "name": "Unused endpoint: POST /v1/embeddings", "shortDescription": {"text": "Unused endpoint: POST /v1/embeddings"}, "fullDescription": {"text": "`vllm_mlx/routes/embeddings.py` declares `POST /v1/embeddings` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4308371aa2afefb3", "name": "Unused endpoint: POST /v1/completions", "shortDescription": {"text": "Unused endpoint: POST /v1/completions"}, "fullDescription": {"text": "`vllm_mlx/routes/completions.py` declares `POST /v1/completions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/17870"}, "properties": {"repository": "raullenchai/Rapid-MLX", "repoUrl": "https://github.com/raullenchai/Rapid-MLX", "branch": "main"}, "results": [{"ruleId": "scanner-0de96c024a728d0b", "level": "note", "message": {"text": "Possibly dead Python function: count_hidden_token"}, "properties": {"repobilityId": "488aacbd4df44b47", "scanner": "scanner-primary", "fingerprint": "0de96c024a728d0b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/demo_race.py:99"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc256ad2748ab9d6", "level": "note", "message": {"text": "Possibly dead Python function: compare_results"}, "properties": {"repobilityId": "597834459897d864", "scanner": "scanner-primary", "fingerprint": "fc256ad2748ab9d6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/autoresearch_bench.py:326"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ae5a0c73a79630df", "level": "note", "message": {"text": "Possibly dead Python function: rewrite_file"}, "properties": {"repobilityId": "e27790290940683f", "scanner": "scanner-primary", "fingerprint": "ae5a0c73a79630df", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/sweep_alias_refs.py:130"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d8a638864e72d4f6", "level": "note", "message": {"text": "Possibly dead Python function: test_ttft"}, "properties": {"repobilityId": "3e576b07d3e24dbf", "scanner": "scanner-primary", "fingerprint": "d8a638864e72d4f6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/benchmark_minmax.py:137"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a904160de9f98871", "level": "note", "message": {"text": "Possibly dead Python function: test_decode"}, "properties": {"repobilityId": "9fd8138e9e2c7df9", "scanner": "scanner-primary", "fingerprint": "a904160de9f98871", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/benchmark_minmax.py:181"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8daf66029b9fc2db", "level": "note", "message": {"text": "Possibly dead Python function: test_prefix_cache"}, "properties": {"repobilityId": "65e8c8379c6cbcc8", "scanner": "scanner-primary", "fingerprint": "8daf66029b9fc2db", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/benchmark_minmax.py:215"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a9cfe6577f3225b", "level": "note", "message": {"text": "Possibly dead Python function: test_tool_call"}, "properties": {"repobilityId": "bb0a4d11b91e5050", "scanner": "scanner-primary", "fingerprint": "0a9cfe6577f3225b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/benchmark_minmax.py:268"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5b06648aa41e5222", "level": "note", "message": {"text": "Possibly dead Python function: test_reasoning"}, "properties": {"repobilityId": "d2314962d0958a65", "scanner": "scanner-primary", "fingerprint": "5b06648aa41e5222", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/benchmark_minmax.py:420"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-13f7a838d0f182f6", "level": "note", "message": {"text": "Possibly dead Python function: test_long_gen"}, "properties": {"repobilityId": "8b2ad1df2010f1b5", "scanner": "scanner-primary", "fingerprint": "13f7a838d0f182f6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/benchmark_minmax.py:480"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0d9b916ab7d2ac4b", "level": "note", "message": {"text": "Possibly dead Python function: generate_github_issue"}, "properties": {"repobilityId": "34309c8a8b3a9c18", "scanner": "scanner-primary", "fingerprint": "0d9b916ab7d2ac4b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/agent_promo_gen.py:26"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8501690ab48dff7d", "level": "note", "message": {"text": "Possibly dead Python function: generate_reddit_post"}, "properties": {"repobilityId": "f7413b0c843b7a1a", "scanner": "scanner-primary", "fingerprint": "8501690ab48dff7d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/agent_promo_gen.py:92"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d0ca8b7cce140dbc", "level": "note", "message": {"text": "Possibly dead Python function: generate_tweet"}, "properties": {"repobilityId": "09792a4256d9d693", "scanner": "scanner-primary", "fingerprint": "d0ca8b7cce140dbc", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/agent_promo_gen.py:132"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6cb1adea49939614", "level": "note", "message": {"text": "Possibly dead Python function: generate_discord_message"}, "properties": {"repobilityId": "aed9d8fd644c10c8", "scanner": "scanner-primary", "fingerprint": "6cb1adea49939614", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/agent_promo_gen.py:156"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c7d0cc255ade833b", "level": "note", "message": {"text": "Possibly dead Python function: generate_issue_reply"}, "properties": {"repobilityId": "7473de7b275ef363", "scanner": "scanner-primary", "fingerprint": "c7d0cc255ade833b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/agent_promo_gen.py:181"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30b4451d236be127", "level": "note", "message": {"text": "Possibly dead Python function: has_pending"}, "properties": {"repobilityId": "800e88b64da7288d", "scanner": "scanner-primary", "fingerprint": "30b4451d236be127", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/mllm_batch_generator.py:1001"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d1cd44c01ecc408", "level": "note", "message": {"text": "Possibly dead Python function: is_tpu"}, "properties": {"repobilityId": "d7f55d37f0c8bd1a", "scanner": "scanner-primary", "fingerprint": "1d1cd44c01ecc408", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/vllm_platform.py:141"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c7184eee5f1c1cd", "level": "note", "message": {"text": "Possibly dead Python function: is_xpu"}, "properties": {"repobilityId": "81f7733515817a2d", "scanner": "scanner-primary", "fingerprint": "2c7184eee5f1c1cd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/vllm_platform.py:144"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-608a9f97a65f9ee4", "level": "note", "message": {"text": "Possibly dead Python function: is_cpu"}, "properties": {"repobilityId": "4821f8579d972bc6", "scanner": "scanner-primary", "fingerprint": "608a9f97a65f9ee4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/vllm_platform.py:147"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a9dfa2c8d2fac6bd", "level": "note", "message": {"text": "Possibly dead Python function: is_out_of_tree"}, "properties": {"repobilityId": "f52e0a0c3b0de242", "scanner": "scanner-primary", "fingerprint": "a9dfa2c8d2fac6bd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/vllm_platform.py:153"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c8e6217f50ba586", "level": "note", "message": {"text": "Possibly dead Python function: is_cuda_alike"}, "properties": {"repobilityId": "cb9610962cc1f073", "scanner": "scanner-primary", "fingerprint": "8c8e6217f50ba586", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/vllm_platform.py:156"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7beb32267e6bd5d8", "level": "note", "message": {"text": "Possibly dead Python function: is_sleep_mode_available"}, "properties": {"repobilityId": "3c2ff4a6d7152c57", "scanner": "scanner-primary", "fingerprint": "7beb32267e6bd5d8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/vllm_platform.py:159"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-db0b21cb47994c64", "level": "note", "message": {"text": "Possibly dead Python function: init_device"}, "properties": {"repobilityId": "544e8ad9b5fda4e3", "scanner": "scanner-primary", "fingerprint": "db0b21cb47994c64", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/worker.py:77"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b52447ef593d6eb1", "level": "note", "message": {"text": "Possibly dead Python function: determine_available_memory"}, "properties": {"repobilityId": "0b3fb444d6745381", "scanner": "scanner-primary", "fingerprint": "b52447ef593d6eb1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/worker.py:113"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7243dc1879b7faa", "level": "note", "message": {"text": "Possibly dead Python function: compile_or_warm_up_model"}, "properties": {"repobilityId": "04c41bd06bd0789a", "scanner": "scanner-primary", "fingerprint": "b7243dc1879b7faa", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/worker.py:161"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72685c504adc5758", "level": "note", "message": {"text": "Possibly dead Python function: check_health"}, "properties": {"repobilityId": "c90f963d99aa5a4c", "scanner": "scanner-primary", "fingerprint": "72685c504adc5758", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/worker.py:191"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5639ad2e47805b47", "level": "note", "message": {"text": "Possibly dead Python function: add_lora"}, "properties": {"repobilityId": "002f0e776bdf4bf8", "scanner": "scanner-primary", "fingerprint": "5639ad2e47805b47", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/worker.py:222"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b07df85f17c6324", "level": "note", "message": {"text": "Possibly dead Python function: remove_lora"}, "properties": {"repobilityId": "1c5c29b93c729e8e", "scanner": "scanner-primary", "fingerprint": "7b07df85f17c6324", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/worker.py:226"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b0c8aed81603849", "level": "note", "message": {"text": "Possibly dead Python function: pin_lora"}, "properties": {"repobilityId": "276fcd9244943acc", "scanner": "scanner-primary", "fingerprint": "7b0c8aed81603849", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/worker.py:229"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-1b6c6e3b646cd231", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in scripts/pr_validate/README.md:189"}, "properties": {"repobilityId": "f64350a171b20385", "scanner": "scanner-primary", "fingerprint": "1b6c6e3b646cd231", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/pr_validate/README.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-5aa6988b39e1d1cd", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in scripts/pr_validate/steps/codex_review.py:362"}, "properties": {"repobilityId": "61621fe60610052f", "scanner": "scanner-primary", "fingerprint": "5aa6988b39e1d1cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/pr_validate/steps/codex_review.py"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-3f7595eb07c3d724", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in scripts/pr_validate/steps/supply_chain.py:79"}, "properties": {"repobilityId": "799fea8eb8a67d88", "scanner": "scanner-primary", "fingerprint": "3f7595eb07c3d724", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/pr_validate/steps/supply_chain.py"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-a0879b4b30be2a87", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "23085c75307a2d4d", "scanner": "scanner-primary", "fingerprint": "a0879b4b30be2a87", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/pr-validate.yml"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-a0879b4b30be2a87", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "73b8b7b2eb62e0a1", "scanner": "scanner-primary", "fingerprint": "a0879b4b30be2a87", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/pr-validate.yml"}, "region": {"startLine": 140}}}]}, {"ruleId": "scanner-a856a97c89417dc8", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "91d5eb127a5b6a9d", "scanner": "scanner-primary", "fingerprint": "a856a97c89417dc8", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/spam-issue-guard.yml"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f57d208548fcef", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f57d208548fcef", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f57d208548fcef", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a3c03147ef1f40b5", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "04f57d208548fcef", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 152}}}]}, {"ruleId": "scanner-1d3e9ecf49532a58", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a46e506d29c4cbb0", "scanner": "scanner-primary", "fingerprint": "1d3e9ecf49532a58", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sidecar-build.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-1d3e9ecf49532a58", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "10c8dd0d7f1149da", "scanner": "scanner-primary", "fingerprint": "1d3e9ecf49532a58", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sidecar-build.yml"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-1d3e9ecf49532a58", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "72fa73c65cecf804", "scanner": "scanner-primary", "fingerprint": "1d3e9ecf49532a58", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sidecar-build.yml"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-1d3e9ecf49532a58", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "439d7762ef6218eb", "scanner": "scanner-primary", "fingerprint": "1d3e9ecf49532a58", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sidecar-build.yml"}, "region": {"startLine": 159}}}]}, {"ruleId": "scanner-3da7733b0dbf1162", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "6c513b9427b938d6", "scanner": "scanner-primary", "fingerprint": "3da7733b0dbf1162", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sidecar-build.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4f658c0c00de0d4", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "af3e674d747facd0", "scanner": "scanner-primary", "fingerprint": "e4f658c0c00de0d4", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/pages.yml"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-448d8837178ae57a", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "13af6451e15656fc", "scanner": "scanner-primary", "fingerprint": "448d8837178ae57a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/pages.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b451e126ff3a81e", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "315ee0320c9883b4", "scanner": "scanner-primary", "fingerprint": "0b451e126ff3a81e", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate-community-submission.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-fc1c6dcb00af79ac", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "e06242eaaa2adbf9", "scanner": "scanner-primary", "fingerprint": "fc1c6dcb00af79ac", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/auto-release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0fde4c5793055812", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d4aba79c11c91c79", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d4f43aa73f8f2e55", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "26eca5024249c767", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-a53bf972e19b52fd", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bf870f7f60e0da5e", "scanner": "scanner-primary", "fingerprint": "a53bf972e19b52fd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-7ffa33751be3d771", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "491a3ad29cbaf189", "scanner": "scanner-primary", "fingerprint": "7ffa33751be3d771", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-164cef65c0e68da0", "level": "note", "message": {"text": "Very large file: tests/test_upstream_regression.py (1406 lines)"}, "properties": {"repobilityId": "8b21831e4de072b7", "scanner": "scanner-primary", "fingerprint": "164cef65c0e68da0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c25df537769dbde8", "level": "note", "message": {"text": "Very large file: tests/test_pr_validate_codex.py (1811 lines)"}, "properties": {"repobilityId": "5aa844f23e62767d", "scanner": "scanner-primary", "fingerprint": "c25df537769dbde8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-52d52d9834c4280f", "level": "note", "message": {"text": "Very large file: tests/test_no_mllm_flag.py (2606 lines)"}, "properties": {"repobilityId": "5c8491a07ff30b04", "scanner": "scanner-primary", "fingerprint": "52d52d9834c4280f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-07df09f260eb64e8", "level": "note", "message": {"text": "Very large file: tests/test_postprocessor.py (2814 lines)"}, "properties": {"repobilityId": "68ef2fa8e2fa5c26", "scanner": "scanner-primary", "fingerprint": "07df09f260eb64e8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-64223040ba2fe9ec", "level": "note", "message": {"text": "Very large file: tests/test_diffusion_engine.py (3038 lines)"}, "properties": {"repobilityId": "33872694d1115f27", "scanner": "scanner-primary", "fingerprint": "64223040ba2fe9ec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a65b3797f436500c", "level": "note", "message": {"text": "Very large file: tests/test_cli_chat.py (2259 lines)"}, "properties": {"repobilityId": "fd06c84ed02beee1", "scanner": "scanner-primary", "fingerprint": "a65b3797f436500c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1600044b45648bb9", "level": "note", "message": {"text": "Very large file: tests/test_server_utils.py (1372 lines)"}, "properties": {"repobilityId": "5d9f8ed522037412", "scanner": "scanner-primary", "fingerprint": "1600044b45648bb9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-49a5cf33cc81e4c1", "level": "note", "message": {"text": "Very large file: tests/test_tool_parsers.py (2374 lines)"}, "properties": {"repobilityId": "2196d407008c0c3e", "scanner": "scanner-primary", "fingerprint": "49a5cf33cc81e4c1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-79cb059eddbecbca", "level": "note", "message": {"text": "Very large file: tests/test_community_bench.py (1662 lines)"}, "properties": {"repobilityId": "09944ed5599cbebe", "scanner": "scanner-primary", "fingerprint": "79cb059eddbecbca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-35cd3f981d5fa8df", "level": "note", "message": {"text": "Very large file: tests/test_harmony_parsers.py (1544 lines)"}, "properties": {"repobilityId": "a516caaf854da3a3", "scanner": "scanner-primary", "fingerprint": "35cd3f981d5fa8df", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-100dfa6ec8b8c54b", "level": "note", "message": {"text": "Very large file: tests/test_no_out_of_band_routing.py (1307 lines)"}, "properties": {"repobilityId": "11fe17d5f0a48eb8", "scanner": "scanner-primary", "fingerprint": "100dfa6ec8b8c54b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f7105305c0374e23", "level": "note", "message": {"text": "Very large file: scripts/bench_vs_ollama.py (1566 lines)"}, "properties": {"repobilityId": "f1fcfbf5247dc5af", "scanner": "scanner-primary", "fingerprint": "f7105305c0374e23", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1b32090e4e994ed5", "level": "note", "message": {"text": "Very large file: vllm_mlx/scheduler.py (3881 lines)"}, "properties": {"repobilityId": "e099a4ebf4442da2", "scanner": "scanner-primary", "fingerprint": "1b32090e4e994ed5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-51ab05f62b1df81f", "level": "note", "message": {"text": "Very large file: vllm_mlx/cli.py (4918 lines)"}, "properties": {"repobilityId": "bf7abb609ed6d498", "scanner": "scanner-primary", "fingerprint": "51ab05f62b1df81f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a369f440fdd3531c", "level": "note", "message": {"text": "Very large file: vllm_mlx/server.py (1378 lines)"}, "properties": {"repobilityId": "4d296e1e891fe9d9", "scanner": "scanner-primary", "fingerprint": "a369f440fdd3531c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d2a15cf3f2661e6f", "level": "note", "message": {"text": "Very large file: vllm_mlx/memory_cache.py (1629 lines)"}, "properties": {"repobilityId": "c11fb1f64da41077", "scanner": "scanner-primary", "fingerprint": "d2a15cf3f2661e6f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-86dac046f5739eff", "level": "note", "message": {"text": "Very large file: vllm_mlx/benchmark.py (1732 lines)"}, "properties": {"repobilityId": "8b13294699ce9f40", "scanner": "scanner-primary", "fingerprint": "86dac046f5739eff", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-026d680e7e016d3b", "level": "note", "message": {"text": "Very large file: vllm_mlx/models/mllm.py (2280 lines)"}, "properties": {"repobilityId": "f71decddc308a2d2", "scanner": "scanner-primary", "fingerprint": "026d680e7e016d3b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6c95cffaa5acc765", "level": "note", "message": {"text": "Very large file: vllm_mlx/models/deepseek_v4.py (2187 lines)"}, "properties": {"repobilityId": "a5ddc034d023ac94", "scanner": "scanner-primary", "fingerprint": "6c95cffaa5acc765", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-76479077df6588e4", "level": "note", "message": {"text": "Very large file: vllm_mlx/routes/chat.py (1845 lines)"}, "properties": {"repobilityId": "bfa880eb47d41ec3", "scanner": "scanner-primary", "fingerprint": "76479077df6588e4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4084c4c69cce5e68", "level": "note", "message": {"text": "Very large file: vllm_mlx/runtime/diffusion_lane.py (1490 lines)"}, "properties": {"repobilityId": "e8b1239a7e1a7e46", "scanner": "scanner-primary", "fingerprint": "4084c4c69cce5e68", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-bb1c7b74c1e5e31d", "level": "note", "message": {"text": "Very large file: vllm_mlx/service/postprocessor.py (1184 lines)"}, "properties": {"repobilityId": "989a555440ee7d3d", "scanner": "scanner-primary", "fingerprint": "bb1c7b74c1e5e31d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4393f4ecd6524ac6", "level": "note", "message": {"text": "Very large file: vllm_mlx/service/helpers.py (1264 lines)"}, "properties": {"repobilityId": "b01ee5dd356bc3f4", "scanner": "scanner-primary", "fingerprint": "4393f4ecd6524ac6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e180dcfc5dfb3c20", "level": "note", "message": {"text": "Very large file: vllm_mlx/engine/batched.py (1958 lines)"}, "properties": {"repobilityId": "4c3c252d0f5f58a4", "scanner": "scanner-primary", "fingerprint": "e180dcfc5dfb3c20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-63f9ecd0a634749f", "level": "note", "message": {"text": "Very large file: evals/run_eval.py (1753 lines)"}, "properties": {"repobilityId": "bd4bcfbcde3b7cb0", "scanner": "scanner-primary", "fingerprint": "63f9ecd0a634749f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c7659ce6e2b0e01f", "level": "note", "message": {"text": "40 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "c7659ce6e2b0e01f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "8f79b32d48b801fe", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "4863a2054bbb56dc", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "986cce2324eb8793", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "a4ac842345f46072", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "2a576506f06a0d3f", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-b968955d37d3cbeb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/todo.md"}, "properties": {"repobilityId": "f59495320665ae87", "scanner": "scanner-primary", "fingerprint": "b968955d37d3cbeb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/todo.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8eb252a1d4c93963", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/todo.md"}, "properties": {"repobilityId": "b1f211a553e35145", "scanner": "scanner-primary", "fingerprint": "8eb252a1d4c93963", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/todo.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-17c03442b2af711d", "level": "note", "message": {"text": "Legacy-named symbol `test_cache_returns_deep_copy` in tests/test_mllm_cache.py:383"}, "properties": {"repobilityId": "9997baa92b93d6e9", "scanner": "scanner-primary", "fingerprint": "17c03442b2af711d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-723528c681e9241b", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_metal_error_recovery.py:188"}, "properties": {"repobilityId": "e8e71dd5c2229fff", "scanner": "scanner-primary", "fingerprint": "723528c681e9241b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7bf50269ddaf24fe", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_suffix_decoding_tier.py:159"}, "properties": {"repobilityId": "43653cd05eaf6d94", "scanner": "scanner-primary", "fingerprint": "7bf50269ddaf24fe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7b59f8919063f32e", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/test_routes.py:691"}, "properties": {"repobilityId": "c418df9bef92a216", "scanner": "scanner-primary", "fingerprint": "7b59f8919063f32e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d4bbb76d4a9a647a", "level": "note", "message": {"text": "Legacy-named symbol `num_tokens_old` in tests/test_prefix_cache_persistence.py:10"}, "properties": {"repobilityId": "14e35c41672bc79d", "scanner": "scanner-primary", "fingerprint": "d4bbb76d4a9a647a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0016c450819e61ea", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_prefix_cache_persistence.py:606"}, "properties": {"repobilityId": "b7fcb76fe0978655", "scanner": "scanner-primary", "fingerprint": "0016c450819e61ea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2f9ea12c2e3bb8ea", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_embeddings_timeout_admission.py:364"}, "properties": {"repobilityId": "9bb609a983b4d56e", "scanner": "scanner-primary", "fingerprint": "2f9ea12c2e3bb8ea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ee83d2d6908c092c", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/conftest.py:61"}, "properties": {"repobilityId": "9e394691852b7267", "scanner": "scanner-primary", "fingerprint": "ee83d2d6908c092c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-068deaa02cbcb006", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_engine_step_thread.py:495"}, "properties": {"repobilityId": "cc27aed4b30109be", "scanner": "scanner-primary", "fingerprint": "068deaa02cbcb006", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a81d60af19d47653", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_tool_parser_wire_formats.py:36"}, "properties": {"repobilityId": "4e7c4cc8fa3f9672", "scanner": "scanner-primary", "fingerprint": "a81d60af19d47653", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-40337e9778ea6b15", "level": "note", "message": {"text": "Legacy-named symbol `TestCombinedLegacy` in tests/test_legacy_functions_field.py:141"}, "properties": {"repobilityId": "322dc50d6851be2c", "scanner": "scanner-primary", "fingerprint": "40337e9778ea6b15", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6ff48c7728947e9c", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_tool_call_streaming_parity.py:165"}, "properties": {"repobilityId": "6f916778d82cc53c", "scanner": "scanner-primary", "fingerprint": "6ff48c7728947e9c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6c8022954173bced", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_routes_cached_tokens.py:143"}, "properties": {"repobilityId": "088e1edd008ff61c", "scanner": "scanner-primary", "fingerprint": "6c8022954173bced", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9a8791416b7ebeb5", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_cli_argcomplete.py:66"}, "properties": {"repobilityId": "54603025f1ff9939", "scanner": "scanner-primary", "fingerprint": "9a8791416b7ebeb5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2a9001c0440534a4", "level": "note", "message": {"text": "Legacy-named symbol `call_v2` in tests/test_native_tool_format.py:310"}, "properties": {"repobilityId": "e9a0de0336213a50", "scanner": "scanner-primary", "fingerprint": "2a9001c0440534a4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-45da9dfda96da011", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_pr_validate_codex.py:115"}, "properties": {"repobilityId": "0c80cb4e379bd175", "scanner": "scanner-primary", "fingerprint": "45da9dfda96da011", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-39c846278c3d1194", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_hermes_harness_contract.py:56"}, "properties": {"repobilityId": "c88e4605798cf6b3", "scanner": "scanner-primary", "fingerprint": "39c846278c3d1194", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7f236c677fd6ae5d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_suffix_decoding.py:36"}, "properties": {"repobilityId": "0110f0989d7612b0", "scanner": "scanner-primary", "fingerprint": "7f236c677fd6ae5d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cf3d5dd3e8ebf42e", "level": "none", "message": {"text": "Commented-code block (10 lines) in tests/test_prompt_lookup.py:163"}, "properties": {"repobilityId": "c4bfad3490d8baae", "scanner": "scanner-primary", "fingerprint": "cf3d5dd3e8ebf42e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-224e2b07df3f4486", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/test_gemma4_tool_parser.py:194"}, "properties": {"repobilityId": "b4a4dc8b3c822e0b", "scanner": "scanner-primary", "fingerprint": "224e2b07df3f4486", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-babc0fb24781f0ae", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_batched_engine_output_router.py:406"}, "properties": {"repobilityId": "9ed5a808ca93733f", "scanner": "scanner-primary", "fingerprint": "babc0fb24781f0ae", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5a7b13c7cba9516d", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_telemetry_cli.py:196"}, "properties": {"repobilityId": "10545c3641e589ee", "scanner": "scanner-primary", "fingerprint": "5a7b13c7cba9516d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-80ba60d399b82b9e", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_anthropic_stream_reasoning.py:105"}, "properties": {"repobilityId": "02f788f5380157d9", "scanner": "scanner-primary", "fingerprint": "80ba60d399b82b9e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4c65070154711d97", "level": "note", "message": {"text": "Legacy-named symbol `test_audit_no_false_positive_when_field_unused` in tests/test_cli_config_fidelity.py:213"}, "properties": {"repobilityId": "3880c4abf6fa6b7b", "scanner": "scanner-primary", "fingerprint": "4c65070154711d97", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c8eb383bd0c79d54", "level": "note", "message": {"text": "Legacy-named symbol `test_rapid_mlx_dir_preferred_over_legacy` in tests/test_mcp_config_discovery.py:50"}, "properties": {"repobilityId": "d0dabd8e59b3dc98", "scanner": "scanner-primary", "fingerprint": "c8eb383bd0c79d54", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-54907128f8299629", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/test_chat_streaming_guided.py:195"}, "properties": {"repobilityId": "7fcf4bc8e4c4ef46", "scanner": "scanner-primary", "fingerprint": "54907128f8299629", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0c96a5260ed110f7", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_aliases_contract.py:394"}, "properties": {"repobilityId": "210cadafa72114ce", "scanner": "scanner-primary", "fingerprint": "0c96a5260ed110f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4894df0d8785bc15", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_modality_field.py:90"}, "properties": {"repobilityId": "4a465a98d9cfbe4d", "scanner": "scanner-primary", "fingerprint": "4894df0d8785bc15", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2276d3dd508be0d2", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_dflash_integration.py:27"}, "properties": {"repobilityId": "beda97bc5711acfc", "scanner": "scanner-primary", "fingerprint": "2276d3dd508be0d2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-38d2d95d14317902", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/test_mlx_compat.py:121"}, "properties": {"repobilityId": "9287267d0773be4d", "scanner": "scanner-primary", "fingerprint": "38d2d95d14317902", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5b07d3ddaca97811", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_check_mlx_upstream_calls.py:115"}, "properties": {"repobilityId": "a545e60e231110b5", "scanner": "scanner-primary", "fingerprint": "5b07d3ddaca97811", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c955c37143176b3", "level": "note", "message": {"text": "Legacy-named symbol `test_block_table_copy` in tests/test_paged_cache.py:76"}, "properties": {"repobilityId": "24b30bcd3c27b960", "scanner": "scanner-primary", "fingerprint": "2c955c37143176b3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1d3bbcf714469395", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/test_no_mllm_flag.py:151"}, "properties": {"repobilityId": "d396ddad70bb3200", "scanner": "scanner-primary", "fingerprint": "1d3bbcf714469395", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b061992bf0440ca7", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/test_mllm_batch_generator.py:177"}, "properties": {"repobilityId": "b37430c0524a0bf2", "scanner": "scanner-primary", "fingerprint": "b061992bf0440ca7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-12156e3a1f868c02", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/test_model_auto_config.py:120"}, "properties": {"repobilityId": "e498a078dfd8ab9d", "scanner": "scanner-primary", "fingerprint": "12156e3a1f868c02", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-365de4240a8839b3", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_chat_streaming_spec.py:271"}, "properties": {"repobilityId": "f07e129b426a6b04", "scanner": "scanner-primary", "fingerprint": "365de4240a8839b3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-25c88cdabe8c4d0c", "level": "note", "message": {"text": "Legacy-named symbol `test_575_qwen3_fast_path_no_tags_enable_thinking_false_legacy` in tests/test_reasoning_parsers.py:727"}, "properties": {"repobilityId": "22da39df7d0cabe7", "scanner": "scanner-primary", "fingerprint": "25c88cdabe8c4d0c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0bbca8d2e08fe4ac", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_telemetry_emit.py:399"}, "properties": {"repobilityId": "7b161967ea06e66f", "scanner": "scanner-primary", "fingerprint": "0bbca8d2e08fe4ac", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-39d85cc2d0ddf1e1", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_telemetry_queue.py:126"}, "properties": {"repobilityId": "b2978511db0cc794", "scanner": "scanner-primary", "fingerprint": "39d85cc2d0ddf1e1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e60df46f6bb244c", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/test_postprocessor.py:630"}, "properties": {"repobilityId": "bc510022526bdfff", "scanner": "scanner-primary", "fingerprint": "1e60df46f6bb244c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-af216527383e376f", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_diffusion_engine.py:222"}, "properties": {"repobilityId": "e05ac0a8d663fbd9", "scanner": "scanner-primary", "fingerprint": "af216527383e376f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ec21971b892e2631", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_paired_compat.py:366"}, "properties": {"repobilityId": "81fb07b6fd3911cd", "scanner": "scanner-primary", "fingerprint": "ec21971b892e2631", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c9fa67176aae75b6", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_chat_route_tool_tag_leak.py:123"}, "properties": {"repobilityId": "ea18f01a621830f9", "scanner": "scanner-primary", "fingerprint": "c9fa67176aae75b6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7b1354ae5ae698d1", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/regression_suite.py:395"}, "properties": {"repobilityId": "6c23fd098a6732dc", "scanner": "scanner-primary", "fingerprint": "7b1354ae5ae698d1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7861c552a4ef99b8", "level": "note", "message": {"text": "Legacy-named symbol `_harmony_legacy` in tests/test_output_router.py:819"}, "properties": {"repobilityId": "aefd7585763ce589", "scanner": "scanner-primary", "fingerprint": "7861c552a4ef99b8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ba92117fa2efe438", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_prompt_cache_snapshot.py:431"}, "properties": {"repobilityId": "c421f3db475c3922", "scanner": "scanner-primary", "fingerprint": "ba92117fa2efe438", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-25e7ba73cf4e6fd4", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_cli_chat.py:663"}, "properties": {"repobilityId": "dc0d2fb5db331f12", "scanner": "scanner-primary", "fingerprint": "25e7ba73cf4e6fd4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-647396b4e0d24c7c", "level": "note", "message": {"text": "Legacy-named symbol `fake_uncovered_parser_v2` in tests/test_tool_parser_coverage.py:73"}, "properties": {"repobilityId": "c8d22092fda7c7ab", "scanner": "scanner-primary", "fingerprint": "647396b4e0d24c7c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e62af5f964f70a99", "level": "note", "message": {"text": "Legacy-named symbol `test_fetch_returns_deep_copy` in tests/test_prefix_cache.py:215"}, "properties": {"repobilityId": "7351a0f945dca4ff", "scanner": "scanner-primary", "fingerprint": "e62af5f964f70a99", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-726920cdb92943aa", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_config_and_middleware.py:537"}, "properties": {"repobilityId": "8cdaf1edb070171b", "scanner": "scanner-primary", "fingerprint": "726920cdb92943aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8c0dc2636aebaddc", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_model_profiles_ssot.py:332"}, "properties": {"repobilityId": "10af8b28c3fa65c6", "scanner": "scanner-primary", "fingerprint": "8c0dc2636aebaddc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e9019a140beeaee2", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_batching.py:739"}, "properties": {"repobilityId": "4ace02400df52225", "scanner": "scanner-primary", "fingerprint": "e9019a140beeaee2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1ddc8b79e1537a69", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/test_tool_parsers.py:1213"}, "properties": {"repobilityId": "fcebb813d9ab45d6", "scanner": "scanner-primary", "fingerprint": "1ddc8b79e1537a69", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-44057d2eee8ec9a6", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/test_pr_validate_runner.py:290"}, "properties": {"repobilityId": "8dd7746bd454724a", "scanner": "scanner-primary", "fingerprint": "44057d2eee8ec9a6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-536938ef00a24225", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/test_community_bench.py:1380"}, "properties": {"repobilityId": "843bca43ff5bcfb2", "scanner": "scanner-primary", "fingerprint": "536938ef00a24225", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e0ae73e63d007b97", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/test_no_out_of_band_routing.py:61"}, "properties": {"repobilityId": "a59131afbb7de43e", "scanner": "scanner-primary", "fingerprint": "e0ae73e63d007b97", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-489fe72181010e30", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_sampler_fast_path.py:55"}, "properties": {"repobilityId": "0cf174d4265674c2", "scanner": "scanner-primary", "fingerprint": "489fe72181010e30", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-faf4fff98397b973", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/integrations/test_anthropic_sdk.py:38"}, "properties": {"repobilityId": "cab016c4fd51a426", "scanner": "scanner-primary", "fingerprint": "faf4fff98397b973", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-99391455517eb850", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/parsers/streaming_reconstructor.py:116"}, "properties": {"repobilityId": "539b2e102c737f51", "scanner": "scanner-primary", "fingerprint": "99391455517eb850", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f0dad3e8e33c7bcc", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/parsers/fake_tokenizer.py:92"}, "properties": {"repobilityId": "83617739022603d5", "scanner": "scanner-primary", "fingerprint": "f0dad3e8e33c7bcc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2760c6137ddaa04f", "level": "none", "message": {"text": "Commented-code block (11 lines) in tests/parsers/_harmony_markers.py:30"}, "properties": {"repobilityId": "0ae0cacb8f40d7f0", "scanner": "scanner-primary", "fingerprint": "2760c6137ddaa04f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1b20ad08265a1fd4", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_444_harmony_tool_call_leak.py:180"}, "properties": {"repobilityId": "44c7a0bd46c0e58d", "scanner": "scanner-primary", "fingerprint": "1b20ad08265a1fd4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-708d8ae69b6f6d87", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/parsers/regressions/test_issue_447_gemma4_thought_marker_leak.py:101"}, "properties": {"repobilityId": "8da85a48f1b3eea9", "scanner": "scanner-primary", "fingerprint": "708d8ae69b6f6d87", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5b6d01e1d72cd682", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/parsers/regressions/test_issue_513_harmony_streamable_parser.py:88"}, "properties": {"repobilityId": "d9db0039d7ef809f", "scanner": "scanner-primary", "fingerprint": "5b6d01e1d72cd682", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2adbb49a709d5bf1", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_448_hermes_function_prefix_leak.py:163"}, "properties": {"repobilityId": "369e9bdd41e24ad3", "scanner": "scanner-primary", "fingerprint": "2adbb49a709d5bf1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-61456ece7685a7cc", "level": "none", "message": {"text": "Commented-code block (10 lines) in tests/parsers/regressions/test_issue_468_tool_choice_required_harmony_compound.py:72"}, "properties": {"repobilityId": "1307637c8d601339", "scanner": "scanner-primary", "fingerprint": "61456ece7685a7cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fcaf5c2a0239265f", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/parsers/regressions/test_issue_455_harmony_commentary_tool_channel.py:181"}, "properties": {"repobilityId": "e7f42c050ecd314f", "scanner": "scanner-primary", "fingerprint": "fcaf5c2a0239265f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b089d8aacbf4dbf9", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/release_smoke.py:77"}, "properties": {"repobilityId": "a56ad2181cc1857f", "scanner": "scanner-primary", "fingerprint": "b089d8aacbf4dbf9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d8d5f7fce956d8a9", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/audit_tool_parser_coverage.py:45"}, "properties": {"repobilityId": "83856b2b8e526417", "scanner": "scanner-primary", "fingerprint": "d8d5f7fce956d8a9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d81b39c5f5d23f2c", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/rename_aliases.py:156"}, "properties": {"repobilityId": "44bc173158fc798a", "scanner": "scanner-primary", "fingerprint": "d81b39c5f5d23f2c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-218dfa6ffe8b7ed7", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/dev_test.py:51"}, "properties": {"repobilityId": "073f896464c50c41", "scanner": "scanner-primary", "fingerprint": "218dfa6ffe8b7ed7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-220af13c723129ef", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/bench_suffix_decoding.py:43"}, "properties": {"repobilityId": "e80a1a407643f511", "scanner": "scanner-primary", "fingerprint": "220af13c723129ef", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4e0e33336d0174d3", "level": "none", "message": {"text": "Commented-code block (11 lines) in scripts/sweep_alias_refs.py:162"}, "properties": {"repobilityId": "3ac76aa48598d5da", "scanner": "scanner-primary", "fingerprint": "4e0e33336d0174d3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-923d72492c129a03", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/bench_attention.py:123"}, "properties": {"repobilityId": "37d74e1f7ef8365c", "scanner": "scanner-primary", "fingerprint": "923d72492c129a03", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a7e94a32b8b822a3", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/bench_suffix_decoding_integrated.py:257"}, "properties": {"repobilityId": "9213c3eebc41c077", "scanner": "scanner-primary", "fingerprint": "a7e94a32b8b822a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5385ffdcba430d16", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/add_mtp_weights.py:73"}, "properties": {"repobilityId": "f7d0d0cf3c3a2602", "scanner": "scanner-primary", "fingerprint": "5385ffdcba430d16", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7d9c9e00d35203ca", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/bench_readme_refresh.py:64"}, "properties": {"repobilityId": "1d99d36e7dcfb235", "scanner": "scanner-primary", "fingerprint": "7d9c9e00d35203ca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8162d449f15276e4", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/bench_readme_refresh.py:310"}, "properties": {"repobilityId": "3594c91270b925f1", "scanner": "scanner-primary", "fingerprint": "8162d449f15276e4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0dbbe4236fbc8dcb", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/bench_vs_ollama.py:1322"}, "properties": {"repobilityId": "e8359cf38c38e927", "scanner": "scanner-primary", "fingerprint": "0dbbe4236fbc8dcb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-52df680c003ade24", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/microbench_parsers.py:42"}, "properties": {"repobilityId": "636a314b9618c166", "scanner": "scanner-primary", "fingerprint": "52df680c003ade24", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-51016d2284731ef3", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/bench_dflash.py:59"}, "properties": {"repobilityId": "d6891691fbff1ef4", "scanner": "scanner-primary", "fingerprint": "51016d2284731ef3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eef6f642b0f996b3", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/pr_validate/base.py:25"}, "properties": {"repobilityId": "6389e56ef3721c0f", "scanner": "scanner-primary", "fingerprint": "eef6f642b0f996b3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2b22b48d0f7a203b", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/pr_validate/runner.py:43"}, "properties": {"repobilityId": "5cc2205315f38c19", "scanner": "scanner-primary", "fingerprint": "2b22b48d0f7a203b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8dad6bbfc74d7723", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/pr_validate/steps/fetch.py:67"}, "properties": {"repobilityId": "206bb9f1f998ee6b", "scanner": "scanner-primary", "fingerprint": "8dad6bbfc74d7723", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6cd0ffdee82edd18", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/fetch.py:141"}, "properties": {"repobilityId": "7aa49b19aff0b224", "scanner": "scanner-primary", "fingerprint": "6cd0ffdee82edd18", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-cf27667d57a50ea1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/full_unit.py:50"}, "properties": {"repobilityId": "52bec05374cc4abc", "scanner": "scanner-primary", "fingerprint": "cf27667d57a50ea1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5fa597b9fab59f35", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/pr_validate/steps/cl_description_quality.py:75"}, "properties": {"repobilityId": "c3596def490228c2", "scanner": "scanner-primary", "fingerprint": "5fa597b9fab59f35", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-29ca7e217f1afa01", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/pr_validate/steps/codex_review.py:68"}, "properties": {"repobilityId": "ca55245ccda8bb81", "scanner": "scanner-primary", "fingerprint": "29ca7e217f1afa01", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-972085885af5b1d7", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/pr_validate/steps/stress_e2e_bench.py:49"}, "properties": {"repobilityId": "35642b5782c1a558", "scanner": "scanner-primary", "fingerprint": "972085885af5b1d7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-223846f1df8ba968", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/targeted_tests.py:221"}, "properties": {"repobilityId": "d5a802b2d6f3e948", "scanner": "scanner-primary", "fingerprint": "223846f1df8ba968", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-90b907cdb0083e6a", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/supply_chain.py:83"}, "properties": {"repobilityId": "5b9fc4eb65b6039a", "scanner": "scanner-primary", "fingerprint": "90b907cdb0083e6a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-432fc20152a5fe83", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/pr_validate/steps/lint.py:91"}, "properties": {"repobilityId": "260066fcefc9c898", "scanner": "scanner-primary", "fingerprint": "432fc20152a5fe83", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e619c564a8b88b37", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/mllm_batch_generator.py:28"}, "properties": {"repobilityId": "39a7aaf17b22b2f8", "scanner": "scanner-primary", "fingerprint": "e619c564a8b88b37", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ae80f33684b2d5e3", "level": "none", "message": {"text": "Commented-code block (9 lines) in vllm_mlx/_version_check.py:229"}, "properties": {"repobilityId": "5e7b996332510c85", "scanner": "scanner-primary", "fingerprint": "ae80f33684b2d5e3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-179db31dc9bd4a5f", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/__init__.py:21"}, "properties": {"repobilityId": "2dec6d2a58cc8ce7", "scanner": "scanner-primary", "fingerprint": "179db31dc9bd4a5f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-be11c01b1b19a02e", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/model_auto_config.py:59"}, "properties": {"repobilityId": "6aff68075652468c", "scanner": "scanner-primary", "fingerprint": "be11c01b1b19a02e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-470461fa2df3bdd6", "level": "none", "message": {"text": "Commented-code block (8 lines) in vllm_mlx/output_router.py:56"}, "properties": {"repobilityId": "143b65a11ea976c3", "scanner": "scanner-primary", "fingerprint": "470461fa2df3bdd6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cf765802bb1a8d7e", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/mllm_scheduler.py:32"}, "properties": {"repobilityId": "0bc37ca6310f6d24", "scanner": "scanner-primary", "fingerprint": "cf765802bb1a8d7e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-20959850562e5323", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/mllm_scheduler.py:820"}, "properties": {"repobilityId": "eafe9183d20311ef", "scanner": "scanner-primary", "fingerprint": "20959850562e5323", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-689942e4c31b12cc", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/scheduler.py:23"}, "properties": {"repobilityId": "95e10e6696f52fcc", "scanner": "scanner-primary", "fingerprint": "689942e4c31b12cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-55c9a19d0e71f210", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/scheduler.py:487"}, "properties": {"repobilityId": "c233fa0b20e98ff2", "scanner": "scanner-primary", "fingerprint": "55c9a19d0e71f210", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6fe91d3642a51f27", "level": "none", "message": {"text": "Commented-code block (10 lines) in vllm_mlx/model_aliases.py:20"}, "properties": {"repobilityId": "b2fe107d530dcc72", "scanner": "scanner-primary", "fingerprint": "6fe91d3642a51f27", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9825583631d430cc", "level": "none", "message": {"text": "Commented-code block (8 lines) in vllm_mlx/_sampler_fast_path.py:98"}, "properties": {"repobilityId": "8b1dcb517b3a2e42", "scanner": "scanner-primary", "fingerprint": "9825583631d430cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d1608c69140e8e62", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/engine_core.py:58"}, "properties": {"repobilityId": "1f69f35b45d94902", "scanner": "scanner-primary", "fingerprint": "d1608c69140e8e62", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-577e18fcb96da9cf", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/turboquant.py:60"}, "properties": {"repobilityId": "d6ae7be649c7229c", "scanner": "scanner-primary", "fingerprint": "577e18fcb96da9cf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0d51461d03c4f908", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/cli.py:24"}, "properties": {"repobilityId": "ef4553de012ce73e", "scanner": "scanner-primary", "fingerprint": "0d51461d03c4f908", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4f3bb9a4183fa125", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/cli.py:3353"}, "properties": {"repobilityId": "90e13df625ea1a36", "scanner": "scanner-primary", "fingerprint": "4f3bb9a4183fa125", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c628d14e4c3b0a57", "level": "none", "message": {"text": "Commented-code block (10 lines) in vllm_mlx/request.py:65"}, "properties": {"repobilityId": "1c46c039e5cecbef", "scanner": "scanner-primary", "fingerprint": "c628d14e4c3b0a57", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7c22aff26ea34871", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/output_router_harmony.py:65"}, "properties": {"repobilityId": "9414b590a9271783", "scanner": "scanner-primary", "fingerprint": "7c22aff26ea34871", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f4292d53b53b7bbc", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/server.py:149"}, "properties": {"repobilityId": "2184b2987072be70", "scanner": "scanner-primary", "fingerprint": "f4292d53b53b7bbc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-30e676ec6b78085a", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/prefix_cache.py:697"}, "properties": {"repobilityId": "83afe1708faa9823", "scanner": "scanner-primary", "fingerprint": "30e676ec6b78085a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7c261f0900922655", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/memory_cache.py:1243"}, "properties": {"repobilityId": "dcdce2f67c37f812", "scanner": "scanner-primary", "fingerprint": "7c261f0900922655", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3e123e5536d2574e", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/_mlx_compat.py:65"}, "properties": {"repobilityId": "cbb8084892b7eaab", "scanner": "scanner-primary", "fingerprint": "3e123e5536d2574e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b25b91b03a4cd550", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/multimodal_processor.py:123"}, "properties": {"repobilityId": "d5e72ef2d85e9752", "scanner": "scanner-primary", "fingerprint": "b25b91b03a4cd550", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e08deb3d71372e5a", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/_download_gate.py:62"}, "properties": {"repobilityId": "796802fa8e7ceddd", "scanner": "scanner-primary", "fingerprint": "e08deb3d71372e5a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c4a1431166e88aac", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/doctor/baseline.py:117"}, "properties": {"repobilityId": "05dd4152a300db59", "scanner": "scanner-primary", "fingerprint": "c4a1431166e88aac", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dcf67e2bc4d1d1f3", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/doctor/cli.py:25"}, "properties": {"repobilityId": "54f7255bb2211a18", "scanner": "scanner-primary", "fingerprint": "dcf67e2bc4d1d1f3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ef218e4e49e2021b", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/models/mllm.py:748"}, "properties": {"repobilityId": "737315471447dea3", "scanner": "scanner-primary", "fingerprint": "ef218e4e49e2021b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1245507a0cc3d9d3", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/models/deepseek_v4.py:12"}, "properties": {"repobilityId": "1c7f76dc8740fc30", "scanner": "scanner-primary", "fingerprint": "1245507a0cc3d9d3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-acc901958f48ef6d", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/models/gemma4_text.py:136"}, "properties": {"repobilityId": "9387cb18e009f11c", "scanner": "scanner-primary", "fingerprint": "acc901958f48ef6d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dab9a0887251ae72", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/config/server_config.py:33"}, "properties": {"repobilityId": "f76852b453888ec5", "scanner": "scanner-primary", "fingerprint": "dab9a0887251ae72", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eb9c77e8923ed55f", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/api/anthropic_adapter.py:89"}, "properties": {"repobilityId": "a49a8b6f4c48a3cd", "scanner": "scanner-primary", "fingerprint": "eb9c77e8923ed55f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-27dd5d5515902ba6", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/api/models.py:213"}, "properties": {"repobilityId": "007083f4cbb0d60b", "scanner": "scanner-primary", "fingerprint": "27dd5d5515902ba6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-474a364a29f422af", "level": "note", "message": {"text": "Legacy-named symbol `tc_copy` in vllm_mlx/api/utils.py:1034"}, "properties": {"repobilityId": "d7c16682914cc724", "scanner": "scanner-primary", "fingerprint": "474a364a29f422af", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-bdaf5f4430bee1f7", "level": "none", "message": {"text": "Commented-code block (9 lines) in vllm_mlx/api/utils.py:101"}, "properties": {"repobilityId": "b2ef37ac52ae9916", "scanner": "scanner-primary", "fingerprint": "bdaf5f4430bee1f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9679b8163f01411b", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/api/guided.py:14"}, "properties": {"repobilityId": "889d15e3db54b504", "scanner": "scanner-primary", "fingerprint": "9679b8163f01411b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6a78d83c25e9755b", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/mcp/config.py:16"}, "properties": {"repobilityId": "4fb3dfb154424595", "scanner": "scanner-primary", "fingerprint": "6a78d83c25e9755b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-99401fb4baed3b99", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/utils/tokenizer.py:31"}, "properties": {"repobilityId": "335378eae994bd72", "scanner": "scanner-primary", "fingerprint": "99401fb4baed3b99", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fc396879fde17c8a", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/utils/chat_template.py:148"}, "properties": {"repobilityId": "57242e2e4a70649b", "scanner": "scanner-primary", "fingerprint": "fc396879fde17c8a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2afddea10537fca5", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/utils/mamba_cache.py:14"}, "properties": {"repobilityId": "51a809125deffd8a", "scanner": "scanner-primary", "fingerprint": "2afddea10537fca5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1909427d6ca1bb14", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/speculative/suffix_decoding.py:167"}, "properties": {"repobilityId": "df163b26700bda1c", "scanner": "scanner-primary", "fingerprint": "1909427d6ca1bb14", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-70164b095f020407", "level": "none", "message": {"text": "Commented-code block (8 lines) in vllm_mlx/speculative/dflash/server.py:70"}, "properties": {"repobilityId": "493fdd8f99eb1047", "scanner": "scanner-primary", "fingerprint": "70164b095f020407", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-122ce0a4d4c74fde", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/tool_parsers/mistral_tool_parser.py:98"}, "properties": {"repobilityId": "6d47da2a723bc95e", "scanner": "scanner-primary", "fingerprint": "122ce0a4d4c74fde", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f0917b1989dea3ad", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/tool_parsers/hermes_tool_parser.py:196"}, "properties": {"repobilityId": "449dbabaef715bbc", "scanner": "scanner-primary", "fingerprint": "f0917b1989dea3ad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fedb34f2a3b2543a", "level": "none", "message": {"text": "Commented-code block (11 lines) in vllm_mlx/tool_parsers/harmony_tool_parser.py:32"}, "properties": {"repobilityId": "d8a91b631583f9c3", "scanner": "scanner-primary", "fingerprint": "fedb34f2a3b2543a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b6c829efff8fa57b", "level": "none", "message": {"text": "Commented-code block (12 lines) in vllm_mlx/tool_parsers/gemma4_tool_parser.py:21"}, "properties": {"repobilityId": "00ca4abc58319638", "scanner": "scanner-primary", "fingerprint": "b6c829efff8fa57b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4d8975ba3aaddafe", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/tool_parsers/abstract_tool_parser.py:54"}, "properties": {"repobilityId": "dd344d4fce4fec34", "scanner": "scanner-primary", "fingerprint": "4d8975ba3aaddafe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3558a3fbc2c663b4", "level": "none", "message": {"text": "Commented-code block (8 lines) in vllm_mlx/routes/anthropic.py:63"}, "properties": {"repobilityId": "5a57d69473d3e5b1", "scanner": "scanner-primary", "fingerprint": "3558a3fbc2c663b4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d4ec4b7b690c87a7", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/routes/models.py:37"}, "properties": {"repobilityId": "58fb09c05e495c71", "scanner": "scanner-primary", "fingerprint": "d4ec4b7b690c87a7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4e337a3e12fda5cf", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/routes/chat.py:77"}, "properties": {"repobilityId": "df871d6b2d18f062", "scanner": "scanner-primary", "fingerprint": "4e337a3e12fda5cf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-352c311d86d4215f", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/routes/embeddings.py:65"}, "properties": {"repobilityId": "c6cdc7d9b6a93f4b", "scanner": "scanner-primary", "fingerprint": "352c311d86d4215f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31301291460ae4f6", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/routes/completions.py:59"}, "properties": {"repobilityId": "c4ad304c4ea0c5bc", "scanner": "scanner-primary", "fingerprint": "31301291460ae4f6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-35b5516213fe0ffd", "level": "none", "message": {"text": "Commented-code block (11 lines) in vllm_mlx/agents/testing.py:1022"}, "properties": {"repobilityId": "7c615a46a96929cb", "scanner": "scanner-primary", "fingerprint": "35b5516213fe0ffd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2e83f4ec747cccd8", "level": "note", "message": {"text": "Legacy-named symbol `base_url_no_v1` in vllm_mlx/agents/base.py:147"}, "properties": {"repobilityId": "59748e3ff1a20b72", "scanner": "scanner-primary", "fingerprint": "2e83f4ec747cccd8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3fadcafaf01c4787", "level": "none", "message": {"text": "Commented-code block (9 lines) in vllm_mlx/runtime/diffusion_lane.py:56"}, "properties": {"repobilityId": "06360c9a49a0d592", "scanner": "scanner-primary", "fingerprint": "3fadcafaf01c4787", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f4dfc26afb6aaad6", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/service/postprocessor.py:88"}, "properties": {"repobilityId": "874926122495cedd", "scanner": "scanner-primary", "fingerprint": "f4dfc26afb6aaad6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5502d78ef2033191", "level": "none", "message": {"text": "Commented-code block (10 lines) in vllm_mlx/service/helpers.py:172"}, "properties": {"repobilityId": "8e08848238dac323", "scanner": "scanner-primary", "fingerprint": "5502d78ef2033191", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1047d5bd099b27cd", "level": "none", "message": {"text": "Commented-code block (10 lines) in vllm_mlx/engine/batched.py:330"}, "properties": {"repobilityId": "d1ce72cc59d19abb", "scanner": "scanner-primary", "fingerprint": "1047d5bd099b27cd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-649bc3d16bb637e7", "level": "none", "message": {"text": "Commented-code block (15 lines) in vllm_mlx/engine/base.py:32"}, "properties": {"repobilityId": "81c53b053e120f1a", "scanner": "scanner-primary", "fingerprint": "649bc3d16bb637e7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5a9760153faaf65f", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/share/ws_tunnel.py:72"}, "properties": {"repobilityId": "f5bc43bff81b4281", "scanner": "scanner-primary", "fingerprint": "5a9760153faaf65f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-58c8b873a11a8bd5", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/share/cli.py:53"}, "properties": {"repobilityId": "eeceee19e9d78653", "scanner": "scanner-primary", "fingerprint": "58c8b873a11a8bd5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dd16215f39375fbc", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/share/warning.py:31"}, "properties": {"repobilityId": "e86a39df83e7ad9b", "scanner": "scanner-primary", "fingerprint": "dd16215f39375fbc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3186cf2f63f98f63", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/patches/qwen3_next_mtp.py:84"}, "properties": {"repobilityId": "544701471002525b", "scanner": "scanner-primary", "fingerprint": "3186cf2f63f98f63", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e59696611caf15aa", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/reasoning/deepseek_r1_parser.py:68"}, "properties": {"repobilityId": "17b0dce1d322a130", "scanner": "scanner-primary", "fingerprint": "e59696611caf15aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1256b73c5de01689", "level": "none", "message": {"text": "Commented-code block (10 lines) in vllm_mlx/reasoning/glm4_parser.py:66"}, "properties": {"repobilityId": "348d7149df999ea9", "scanner": "scanner-primary", "fingerprint": "1256b73c5de01689", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f07b37d6b0cae928", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/reasoning/think_parser.py:120"}, "properties": {"repobilityId": "2ad71eaaf7fb6234", "scanner": "scanner-primary", "fingerprint": "f07b37d6b0cae928", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f51bc8df5040a68b", "level": "none", "message": {"text": "Commented-code block (15 lines) in vllm_mlx/reasoning/harmony_parser.py:28"}, "properties": {"repobilityId": "dd9e428f7764cc25", "scanner": "scanner-primary", "fingerprint": "f51bc8df5040a68b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-88590d986ed40b4e", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/reasoning/gemma4_parser.py:116"}, "properties": {"repobilityId": "4f75644a9ec8afa2", "scanner": "scanner-primary", "fingerprint": "88590d986ed40b4e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a65614ef87dc7c2c", "level": "none", "message": {"text": "Commented-code block (8 lines) in vllm_mlx/reasoning/qwen3_parser.py:77"}, "properties": {"repobilityId": "24fcc29ceabf063a", "scanner": "scanner-primary", "fingerprint": "a65614ef87dc7c2c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2be975fbe18cd6a2", "level": "none", "message": {"text": "Commented-code block (7 lines) in vllm_mlx/telemetry/consent.py:48"}, "properties": {"repobilityId": "2ba231cc81fa2de8", "scanner": "scanner-primary", "fingerprint": "2be975fbe18cd6a2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a4cac27b62021d06", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/telemetry/queue.py:65"}, "properties": {"repobilityId": "837057c08ce61e1b", "scanner": "scanner-primary", "fingerprint": "a4cac27b62021d06", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-64ecbab97bd9ec89", "level": "none", "message": {"text": "Commented-code block (11 lines) in vllm_mlx/telemetry/schema.py:44"}, "properties": {"repobilityId": "16076079f4a73d91", "scanner": "scanner-primary", "fingerprint": "64ecbab97bd9ec89", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fbf2da76ab5a7419", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/telemetry/transport.py:184"}, "properties": {"repobilityId": "1d08cb29ab77d8ac", "scanner": "scanner-primary", "fingerprint": "fbf2da76ab5a7419", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b00d555bf9010317", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/telemetry/state.py:106"}, "properties": {"repobilityId": "a6fd418a0397608f", "scanner": "scanner-primary", "fingerprint": "b00d555bf9010317", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eaeee42ba093b614", "level": "none", "message": {"text": "Commented-code block (8 lines) in vllm_mlx/telemetry/emit.py:54"}, "properties": {"repobilityId": "2392eefbca2d8516", "scanner": "scanner-primary", "fingerprint": "eaeee42ba093b614", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-34e6cb5bef06a86b", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/community_bench/hardware.py:80"}, "properties": {"repobilityId": "769e37e119ab134c", "scanner": "scanner-primary", "fingerprint": "34e6cb5bef06a86b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-754ea8e482554621", "level": "none", "message": {"text": "Commented-code block (10 lines) in vllm_mlx/community_bench/submission.py:356"}, "properties": {"repobilityId": "b35dc85234e918ce", "scanner": "scanner-primary", "fingerprint": "754ea8e482554621", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-275b506ccaf09cf6", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 vllm_mlx/community_bench/submission.py:172"}, "properties": {"repobilityId": "cd44b201ea07e253", "scanner": "scanner-primary", "fingerprint": "275b506ccaf09cf6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-246ddd53700fe3b1", "level": "none", "message": {"text": "Commented-code block (5 lines) in vllm_mlx/community_bench/__init__.py:25"}, "properties": {"repobilityId": "ac4312c85bc0e21b", "scanner": "scanner-primary", "fingerprint": "246ddd53700fe3b1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-321f593c0847e141", "level": "none", "message": {"text": "Commented-code block (6 lines) in vllm_mlx/community_bench/runner.py:142"}, "properties": {"repobilityId": "5d96e81915f84dd1", "scanner": "scanner-primary", "fingerprint": "321f593c0847e141", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5ceca625eb1a761d", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/mcp_tool_use.py:49"}, "properties": {"repobilityId": "eed9e36f1313f785", "scanner": "scanner-primary", "fingerprint": "5ceca625eb1a761d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d167455549fbdfb1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 examples/mcp_chat.py:25"}, "properties": {"repobilityId": "33cd7536da064c2d", "scanner": "scanner-primary", "fingerprint": "d167455549fbdfb1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-53c2d9b95eb371c8", "level": "none", "message": {"text": "Commented-code block (7 lines) in community-benchmarks/scripts/validate.py:91"}, "properties": {"repobilityId": "24e81905e089e8fe", "scanner": "scanner-primary", "fingerprint": "53c2d9b95eb371c8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "37c873ab6d107a0d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8fd02de587dd32de", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "70a2da6c98d848f2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "8b01c6b4ecf1dc2c", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "5bc983991ab9474f", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4925ea8a6490b2d8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "9ca1ad467a22e2b4", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7f7f8645bb7dd645", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8f80dc0d9c1182a1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9a6d402a4468a2a8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d4c93bc3412db2a2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "310ae17b6ceac2a1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bef8e0c7f192a569", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7ee1f666d6ca820f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ba0b326fb71cd690", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ace45ce2b173202b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e1e04c2965d777ce", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8df0d0edbdedf61c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4bc7c1e9d67edf80", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "528520bd904eaf1d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-af0beb3cad60a2f0", "level": "error", "message": {"text": "FastAPI POST `create_chat_completion` without auth dependency \u2014 vllm_mlx/speculative/dflash/server.py:146"}, "properties": {"repobilityId": "b3d0192de05043c3", "scanner": "scanner-primary", "fingerprint": "af0beb3cad60a2f0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/speculative/dflash/server.py"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-8605f02638e1454c", "level": "error", "message": {"text": "FastAPI POST `cancel_request` without auth dependency \u2014 vllm_mlx/routes/health.py:116"}, "properties": {"repobilityId": "e0c879f345063adc", "scanner": "scanner-primary", "fingerprint": "8605f02638e1454c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/routes/health.py"}, "region": {"startLine": 116}}}]}, {"ruleId": "scanner-3d847c62756701a3", "level": "error", "message": {"text": "FastAPI DELETE `delete_request` without auth dependency \u2014 vllm_mlx/routes/health.py:153"}, "properties": {"repobilityId": "e5c435f375463f3c", "scanner": "scanner-primary", "fingerprint": "3d847c62756701a3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/routes/health.py"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-8d778219c5a9d320", "level": "error", "message": {"text": "FastAPI POST `clear_cache` without auth dependency \u2014 vllm_mlx/routes/health.py:159"}, "properties": {"repobilityId": "ebe18cac44aa1b0a", "scanner": "scanner-primary", "fingerprint": "8d778219c5a9d320", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/routes/health.py"}, "region": {"startLine": 159}}}]}, {"ruleId": "scanner-904b6438a88ab16a", "level": "error", "message": {"text": "FastAPI DELETE `clear_all_caches` without auth dependency \u2014 vllm_mlx/routes/health.py:246"}, "properties": {"repobilityId": "e0588cde06c656ca", "scanner": "scanner-primary", "fingerprint": "904b6438a88ab16a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vllm_mlx/routes/health.py"}, "region": {"startLine": 246}}}]}, {"ruleId": "scanner-251e3dbd600caba5", "level": "note", "message": {"text": "Unused endpoint: GET /v1/models"}, "properties": {"repobilityId": "7d479df8842be9a7", "scanner": "scanner-primary", "fingerprint": "251e3dbd600caba5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ff99ecd9b3a77326", "level": "note", "message": {"text": "Unused endpoint: POST /v1/chat/completions"}, "properties": {"repobilityId": "7feab09b416ebed9", "scanner": "scanner-primary", "fingerprint": "ff99ecd9b3a77326", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-50d20b703a1dd1f9", "level": "note", "message": {"text": "Unused endpoint: POST /v1/messages"}, "properties": {"repobilityId": "450cace33b5e3132", "scanner": "scanner-primary", "fingerprint": "50d20b703a1dd1f9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e51d72bee485df7b", "level": "note", "message": {"text": "Unused endpoint: POST /v1/messages/count_tokens"}, "properties": {"repobilityId": "407f95604ca17fc0", "scanner": "scanner-primary", "fingerprint": "e51d72bee485df7b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1a6d91f2236825bf", "level": "note", "message": {"text": "Unused endpoint: ANY /"}, "properties": {"repobilityId": "a7c47fd1de59b631", "scanner": "scanner-primary", "fingerprint": "1a6d91f2236825bf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7681502f6b2af867", "level": "note", "message": {"text": "Unused endpoint: POST /v1/requests/{request_id}/cancel"}, "properties": {"repobilityId": "8c825713a893f042", "scanner": "scanner-primary", "fingerprint": "7681502f6b2af867", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c2d80666c0412098", "level": "note", "message": {"text": "Unused endpoint: DELETE /v1/requests/{request_id}"}, "properties": {"repobilityId": "a4dfc9c0c3a3e2b0", "scanner": "scanner-primary", "fingerprint": "c2d80666c0412098", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-316e2f339e23cf1a", "level": "note", "message": {"text": "Unused endpoint: POST /v1/cache/clear"}, "properties": {"repobilityId": "f147ce38b3764770", "scanner": "scanner-primary", "fingerprint": "316e2f339e23cf1a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e4beadb34770367c", "level": "note", "message": {"text": "Unused endpoint: GET /v1/status"}, "properties": {"repobilityId": "4b2cee01ce71b411", "scanner": "scanner-primary", "fingerprint": "e4beadb34770367c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7ecd974a9a2d5da3", "level": "note", "message": {"text": "Unused endpoint: GET /v1/cache/stats"}, "properties": {"repobilityId": "2c94d6489d34c0ad", "scanner": "scanner-primary", "fingerprint": "7ecd974a9a2d5da3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bc287d031bda8bc9", "level": "note", "message": {"text": "Unused endpoint: DELETE /v1/cache"}, "properties": {"repobilityId": "0319b54be3f0ad63", "scanner": "scanner-primary", "fingerprint": "bc287d031bda8bc9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b7abcfd953746f26", "level": "note", "message": {"text": "Unused endpoint: GET /v1/mcp/tools"}, "properties": {"repobilityId": "5d5a39fb33d8ea7b", "scanner": "scanner-primary", "fingerprint": "b7abcfd953746f26", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-417451ec5c986a5b", "level": "note", "message": {"text": "Unused endpoint: GET /v1/mcp/servers"}, "properties": {"repobilityId": "4a138b7b8442b162", "scanner": "scanner-primary", "fingerprint": "417451ec5c986a5b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5d04c5ca9747e290", "level": "note", "message": {"text": "Unused endpoint: POST /v1/mcp/execute"}, "properties": {"repobilityId": "24933cd2d9b6e8c3", "scanner": "scanner-primary", "fingerprint": "5d04c5ca9747e290", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3a7f66f8775b4788", "level": "note", "message": {"text": "Unused endpoint: POST /v1/audio/transcriptions"}, "properties": {"repobilityId": "126602cc8f4fb13c", "scanner": "scanner-primary", "fingerprint": "3a7f66f8775b4788", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4adf0a221779df1b", "level": "note", "message": {"text": "Unused endpoint: POST /v1/audio/speech"}, "properties": {"repobilityId": "97e20f0bbb0df838", "scanner": "scanner-primary", "fingerprint": "4adf0a221779df1b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-097e1ea06cfa2759", "level": "note", "message": {"text": "Unused endpoint: GET /v1/audio/voices"}, "properties": {"repobilityId": "1320d330e5da45a6", "scanner": "scanner-primary", "fingerprint": "097e1ea06cfa2759", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b823f760160fbef3", "level": "note", "message": {"text": "Unused endpoint: GET /v1/models/{model_id}"}, "properties": {"repobilityId": "42e74903c50606e8", "scanner": "scanner-primary", "fingerprint": "b823f760160fbef3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ebe36b9073da7dfc", "level": "note", "message": {"text": "Unused endpoint: POST /v1/embeddings"}, "properties": {"repobilityId": "bf24d1f0ffc7ecd2", "scanner": "scanner-primary", "fingerprint": "ebe36b9073da7dfc", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4308371aa2afefb3", "level": "note", "message": {"text": "Unused endpoint: POST /v1/completions"}, "properties": {"repobilityId": "4a32fdcb23441975", "scanner": "scanner-primary", "fingerprint": "4308371aa2afefb3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}