https://github.com/pytorch/torchtitan
· scanned 2026-05-15 18:26 UTC (2 weeks, 6 days ago)
· 10 languages
561 findings (401 legacy + 160 scanner) 81st percentile · Python · medium (20-100K LoC) Scanner says 90 (lower by 11)
Last scanned 2 weeks, 6 days ago · v1 · 398 findings from 1 source. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
60.0 | 0.15 | 9.00 |
security_score |
92.7 | 0.25 | 23.18 |
testing_score |
85.0 | 0.20 | 17.00 |
documentation_score |
86.0 | 0.15 | 12.90 |
practices_score |
80.0 | 0.15 | 12.00 |
code_quality |
50.0 | 0.10 | 5.00 |
| Overall | 1.00 | 79.1 |
Showing 155 of 398 findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
torchtitan/experiments/rl/grpo.py:237
error_handlinglegacy
bare-except-pass
· CWE-755
torchtitan/experiments/graph_trainer/storage.py:69
error_handlinglegacy
overcatch-baseexception
· CWE-705
torchtitan/models/llama3/parallelize.py:25
qualitylegacy
torchtitan/models/llama3/model.py:51
qualitylegacy
torchtitan/models/llama3/config_registry.py:29
qualitylegacy
torchtitan/models/gpt_oss/parallelize.py:28
qualitylegacy
torchtitan/models/gpt_oss/config_registry.py:24
qualitylegacy
torchtitan/models/flux/flux_datasets.py:101
qualitylegacy
torchtitan/experiments/transformers_modeling_backend/pipeline.py:10
qualitylegacy
torchtitan/experiments/transformers_modeling_backend/parallelize.py:29
qualitylegacy
torchtitan/experiments/graph_trainer/qwen3/parallelize.py:1
qualitylegacy
torchtitan/experiments/graph_trainer/llama3/parallelize.py:1
qualitylegacy
torchtitan/experiments/ft/trainer.py:282
qualitylegacy
torchtitan/models/common/token_dispatcher.py:350
qualitylegacy
python-input-call
torchtitan/config/configs.py:188
qualitylegacy
magic-number-default
torchtitan/config/configs.py:344
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configs.py:306
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configs.py:295
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configs.py:231
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configs.py:82
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configs.py:25
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/function.py:32
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configurable.py:138
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configurable.py:134
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configurable.py:38
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configurable.py:34
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configurable.py:33
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/config/configurable.py:21
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/protocols/sharding.py:60
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/protocols/sharding.py:35
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/protocols/model.py:55
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/protocols/module.py:42
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/tools/profiler.py:100
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/tools/utils.py:192
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/tools/utils.py:177
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/models/attention.py:219
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/models/attention.py:32
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/models/vllm_wrapper.py:140
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/actors/generator.py:123
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/actors/generator.py:92
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/actors/generator.py:33
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/actors/trainer.py:63
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/grpo.py:161
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/grpo.py:60
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/sum_digits.py:26
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/types.py:86
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/types.py:68
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/types.py:51
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/types.py:35
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/rl/types.py:12
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/ft/config/job_config.py:14
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/ft/checkpoint.py:58
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/ft/optimizer.py:27
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/ft/trainer.py:32
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/ft/manager.py:37
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/autoparallel/configs.py:21
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/autoparallel/configs.py:13
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/forge/engine.py:35
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/graph_trainer/qwen3/model.py:17
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/graph_trainer/llama3/model.py:17
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/graph_trainer/deepseek_v3/model.py:17
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/graph_trainer/simple_fsdp.py:42
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/graph_trainer/trainer.py:53
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/graph_trainer/configs.py:18
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/transformers_modeling_backend/model.py:87
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/transformers_modeling_backend/configs.py:12
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/float8.py:211
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/float8.py:178
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/float8.py:60
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/float8.py:38
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/__init__.py:42
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/__init__.py:22
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/mx.py:157
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/mx.py:113
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/mx.py:49
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/quantization/mx.py:27
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/metrics.py:278
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/tokenizer.py:515
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/tokenizer.py:113
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/tokenizer.py:20
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/checkpoint.py:166
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/dataloader.py:71
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/dataloader.py:45
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/optimizer.py:358
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/optimizer.py:93
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/optimizer.py:38
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/validate.py:69
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/validate.py:31
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/loss.py:228
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/loss.py:94
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/loss.py:82
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/loss.py:50
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/components/lr_scheduler.py:50
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/hf_datasets/multimodal/mm_datasets.py:482
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/hf_datasets/text_datasets.py:552
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/hf_datasets/text_datasets.py:241
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/embedding.py:26
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/decoder.py:66
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/decoder.py:50
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/rmsnorm.py:24
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/token_dispatcher.py:542
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/token_dispatcher.py:525
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/token_dispatcher.py:471
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/token_dispatcher.py:161
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/token_dispatcher.py:48
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/token_dispatcher.py:29
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/token_dispatcher.py:21
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/moe.py:321
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/moe.py:152
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/moe.py:77
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/linear.py:24
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/rope.py:39
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/attention.py:596
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/attention.py:553
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/attention.py:519
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/attention.py:497
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/attention.py:464
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/attention.py:261
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/attention.py:177
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/attention.py:75
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/common/feed_forward.py:41
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/deepseek_v3/model.py:183
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/deepseek_v3/model.py:143
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/deepseek_v3/model.py:36
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/model.py:30
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/layers.py:355
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/layers.py:299
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/layers.py:192
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/layers.py:169
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/layers.py:134
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/layers.py:117
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/layers.py:99
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/model/layers.py:45
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/tokenizer.py:27
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/flux_datasets.py:358
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/trainer.py:33
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/validate.py:48
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/configs.py:53
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/configs.py:26
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/flux/configs.py:10
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/qwen3_vl/model.py:53
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/qwen3_vl/vision_encoder.py:465
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/gpt_oss/model.py:183
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/gpt_oss/model.py:130
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/gpt_oss/model.py:40
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/gpt_oss/moe.py:227
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/gpt_oss/moe.py:130
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/qwen3/model.py:82
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/qwen3/model.py:36
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/llama4/model.py:116
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/llama4/model.py:72
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/llama3/model.py:66
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/models/llama3/model.py:32
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/trainer.py:53
error_handlinglegacy
php-error-suppress
· CWE-755
torchtitan/experiments/graph_trainer/passes.py:197
qualitylegacy
todo-bomb
This page is publicly accessible at:
https://repobility.com/scan/9eb441b0-4d1c-45b8-9825-0c639f48bd8b/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/9eb441b0-4d1c-45b8-9825-0c639f48bd8b/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.