Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
150 of your 224 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.
Upstream (GitHub) caused delay on this scan — not Repobility.
  • GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
  • Clone from GitHub took 42.64s for a 167.2 MB repo slow.
  • Repobility's analysis ran in 45.49s after the clone landed.

gnachman/iTerm2

https://github.com/gnachman/iTerm2 · scanned 2026-06-05 21:09 UTC (4 days, 11 hours ago) · 10 languages

614 raw signals (198 security + 416 graph) 11/13 scanners ran 38th percentile · C · huge (>500K LoC) System graph score 76 (lower by 12)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 11 hours ago · v2 · 262 actionable findings from 2 signal sources. 144 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
72.3
/100
Security checks
68
75 findings
System graph
77
100.0% cov · 187 findings
Critical
1
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 40.0 0.15 6.00
security_score 100.0 0.25 25.00
testing_score 32.0 0.20 6.40
documentation_score 71.0 0.15 10.65
practices_score 73.0 0.15 10.95
code_quality 50.0 0.10 5.00
Overall 1.00 64.0
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 11 Medium 16 Low 164 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 75 System graph 187 Crowd 0 Layer: Software 82 Quality 140 Security 14 Cicd 1 Api 1 Frontend 22 Network 2
Scan summary Quality grade C+ (64/100). Dimensions: security 100, maintainability 40. 198 findings (10 security). 557,527 lines analyzed.

Showing 187 of 262 actionable findings. 406 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Security checks quality Quality conf 1.00 ✓ Repobility [MINED035] Js New Function: new Function(...) compiles strings to functions.
Review and fix per the pattern semantics. See CWE-95 / for context.
WebExtensionsFramework/Resources/JavaScript/content-script-injector.js:49
high Security checks quality Quality conf 1.00 ✓ Repobility 5 occurrences [MINED107] Missing import: `sys` used but not imported: The file uses `sys.something(...)` but never imports `sys`. This raises NameError at runtime the first time the line executes.
Add `import sys` at the top of the file.
5 files, 5 locations
api/library/python/iterm2/gen_mainmenu.py:22
api/library/python/iterm2/gen_profile.py:1019
api/library/python/iterm2/iterm2/auth.py:146
api/library/python/iterm2/iterm2/binding.py:143
tools/ply/ply-3.4/example/BASIC/basinterp.py:363
low Security checks quality Quality conf 1.00 ✓ Repobility [MINED012] Curl Pipe Bash: curl ... | sh / bash — runs unverified network code.
Review and fix per the pattern semantics. See CWE-494 / A08:2021 for context.
sources/ShellIntegrationInstaller/iTermShellIntegrationDownloadAndRunViewController.m:35
high Security checks quality Quality conf 1.00 ✓ Repobility 3 occurrences [MINED038] Swift Try Bang: try! crashes on thrown error. Use try? or do/catch.
Review and fix per the pattern semantics. See CWE-755 / for context.
3 files, 3 locations
ModernTests/TriggerNullCharacterTests.swift:53
WebExtensionsFramework/Shared/BrowserExtensionTemplateLoader.swift:86
WebExtensionsFramework/Sources/BrowserExtensionContentScriptInjectionGenerator.swift:64
high Security checks quality Quality conf 1.00 ✓ Repobility 25 occurrences [MINED108] `self.emit_impl` used but never assigned in __init__: Method `emit` of class `Emitter` reads `self.emit_impl`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance.
Initialize `self.emit_impl = <default>` in __init__, or add a class-level default.
4 files, 25 locations
api/library/python/iterm2/iterm2/util.py:48, 54, 55, 62, 68, 69, 88, 118 (11 hits)
OtherResources/framer.py:192, 202, 208, 266, 268, 1077, 1103 (7 hits)
tests/osc4-and-friends.py:27, 28, 31, 32, 52 (5 hits)
api/library/python/iterm2/gen_mainmenu.py:39, 44 (2 hits)
high Security checks security secrets conf 1.00 [SEC021] Shell Trace Around Secret Handling: Shell xtrace is enabled near secret handling. CI and deployment logs can echo every command and expand secret values, turning a safe secret-store lookup into a credential leak.
Disable xtrace before reading secrets, re-enable it only after secret handling, and rotate any secret exposed in logs.
iTermAI/build.sh:3
low Security checks security Injection conf 1.00 [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts.
Escape with javax.naming.ldap.Rdn.escapeValue or equivalent. For python-ldap, use ldap.filter.escape_filter_chars. Better: use parameterized search APIs (Spring LdapTemplate filter encoders).
api/library/python/iterm2/iterm2/auth.py:62
high System graph security security conf 1.00 Insecure pattern 'eval_used' in sources/Browser/FindOnPage/find-nav.js:438
Found a known-risky pattern (eval_used). Review and replace if possible.
sources/Browser/FindOnPage/find-nav.js:438 Eval used
high System graph security security conf 1.00 Insecure pattern 'eval_used' in tools/ply/ply-3.4/ply/cpp.py:583
Found a known-risky pattern (eval_used). Review and replace if possible.
tools/ply/ply-3.4/ply/cpp.py:583 Eval used
high System graph security security conf 1.00 Insecure pattern 'eval_used' in tools/ply/ply-3.4/ply/yacc.py:1403
Found a known-risky pattern (eval_used). Review and replace if possible.
tools/ply/ply-3.4/ply/yacc.py:1403 Eval used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in OtherResources/framer.py:709
Found a known-risky pattern (exec_used). Review and replace if possible.
OtherResources/framer.py:709 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in tools/ply/ply-3.4/ply/lex.py:219
Found a known-risky pattern (exec_used). Review and replace if possible.
tools/ply/ply-3.4/ply/lex.py:219 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in tools/ply/ply-3.4/ply/yacc.py:1826
Found a known-risky pattern (exec_used). Review and replace if possible.
tools/ply/ply-3.4/ply/yacc.py:1826 Exec used
medium Security checks quality Error handling conf 1.00 3 occurrences [ERR002] Empty Catch Block: Empty catch blocks hide errors.
Log the error or rethrow it. Use console.error() at minimum.
3 files, 3 locations
WebExtensionsFramework/Resources/JavaScript/dom-nuke.js:147
sources/Browser/CopyMode/copy-mode-util.js:128
sources/Browser/Core/cloak-page-world.js:34
medium Security checks quality Quality conf 1.00 ✓ Repobility [MINED109] Mutable default argument in `async_subscribe_to_server_originated_rpc_notification` (dict): `def async_subscribe_to_server_originated_rpc_notification(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too.
Use None as the default and create the collection inside the function: `def async_subscribe_to_server_originated_rpc_notification(x=None): x = x or []`
api/library/python/iterm2/iterm2/notifications.py:295
medium Security checks quality Quality conf 1.00 ✓ Repobility 6 occurrences [MINED109] Mutable default argument in `async_subscribe_to_server_originated_rpc_notification` (list): `def async_subscribe_to_server_originated_rpc_notification(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too.
Use None as the default and create the collection inside the function: `def async_subscribe_to_server_originated_rpc_notification(x=None): x = x or []`
5 files, 6 locations
api/library/python/iterm2/iterm2/profile.py:6527, 6561 (2 hits)
api/library/python/iterm2/iterm2/notifications.py:295
api/library/python/iterm2/iterm2/statusbar.py:182
api/library/python/iterm2/iterm2/tab.py:47
tests/osc4-and-friends.py:7
medium Security checks quality Quality conf 1.00 ✓ Repobility [MINED109] Mutable default argument in `parse` (dict): `def parse(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too.
Use None as the default and create the collection inside the function: `def parse(x=None): x = x or []`
tools/ply/ply-3.4/ply/cpp.py:855
medium Security checks software dependencies conf 0.90 ✓ Repobility [MINED124] requirements.txt: `types-protobuf` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins.
Replace `types-protobuf` with `types-protobuf==<version>` and manage upgrades through PRs / Dependabot.
api/library/python/iterm2/requirements-dev.txt:6
low Security checks quality Quality conf 1.00 [SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws — wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated.
Catch the specific exception type, log at error level with full exception info, and return a failure-shaped result. If the operation is genuinely best-effort, log at warning and document why in a comment so the next reader (or scanner) knows.
sources/Browser/PageSaver/extract-resources.js:10
low Security checks quality Error handling conf 0.55 ✓ Repobility 21 occurrences Broad exception handler needs review
This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.
6 files, 21 locations
OtherResources/framer.py:713, 894, 911, 1008, 1026, 1157, 1172, 1181, +7 more (15 hits)
api/library/python/iterm2/iterm2/auth.py:5, 152 (2 hits)
tests/slowcat.py:38
tools/analyze_restorable_state.py:47
tools/basechars.py:39
tools/emoji.py:238
Error handlingquality
high Security checks software dependencies conf 0.70 Remote install command pipes network code directly to a shell
Publish a package-manager install path or add checksum/signature verification before execution. For docs, show the inspect-then-run flow and pin the downloaded artifact version.
README.md:79
medium System graph security security conf 1.00 Insecure pattern 'subprocess_shell_true' in tools/updateVersion.py:22
Found a known-risky pattern (subprocess_shell_true). Review and replace if possible.
tools/updateVersion.py:22 Subprocess shell true
medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in ThirdParty/Highlightr.framework/Versions/A/Resources/highlight.min.js:10
Found a known-risky pattern (weak_hash). Review and replace if possible.
ThirdParty/Highlightr.framework/Versions/A/Resources/highlight.min.js:10 Weak hash
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — api/library/python/iterm2/iterm2/auth.py:45
`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/bidi.py:15
`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/eastasian.py:98
`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/emoji.py:77
`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/perf/profile_stress_test.py:25
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/ply/ply-3.4/test/testlex.py:345
`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/updateVersion.py:22
`subprocess.check_output(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
low Security checks quality Quality conf 0.60 30 occurrences Duplicated implementation block across source files
Duplicate implementation blocks are maintenance debt. Keep them visible, but they are not a high-severity defect unless the duplicated logic is security-sensitive or drifting.
12 files, 16 locations
ModernTests/iTermSubStringTests.swift:198, 201, 202 (3 hits)
ModernTests/iTermRopeTest.swift:357, 358 (2 hits)
SearchableComboListView/SearchableComboView/SearchableComboTableViewController.swift:102, 286 (2 hits)
BetterFontPicker/BetterFontPicker/FontFamilyMemberPickerView.swift:76
ColorPicker/ColorPicker/CPKColorWell.h:1
ColorPicker/ColorPicker/CPKMainViewController.h:1
ColorPicker/ColorPicker/CPKPopover.h:1
ModernTests/IndirectValueTests.swift:4
duplicationquality
low System graph software Dead code candidate conf 1.00 File has no detected symbols: api/library/python/iterm2/docs/conf.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: api/library/python/iterm2/docs/customcontrol.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: api/library/python/iterm2/docs/examples/launch_and_run.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: api/library/python/iterm2/iterm2/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: api/library/python/iterm2/iterm2/api_pb2.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: api/library/python/iterm2/test.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/AdBlocking/adblock-css-injection.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/Autofill/autofill-fill-all.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/CopyMode/copy-mode.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/Core/challenge-frame-detection.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/Core/cloak-page-world.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/Core/log-errors.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/Core/monitor-context-menu.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/Core/monitor-selection.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/FindOnPage/custom-find.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/FindOnPage/find-constants.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/FindOnPage/find-security.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/Marks/navigate-to-named-mark.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/PasswordManager/focus-password.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/PasswordManager/probe-password.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/convert-to-markdown.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/enter-distraction-removal.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/enter-reader-mode.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/exit-distraction-removal.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/exit-reader-mode.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/extract-plain-text.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/load-readability.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/load-reader-mode.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/ReaderMode/remove-element-at-point.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/extend-selection-bigword.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/extend-selection-line.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/extend-selection-to-point.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/extend-selection-word.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/has-selection.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/insert-text.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/open-link-at-point.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/select-text.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: sources/Browser/WebViewAdditions/urls-at-point.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: tests/linebuffer-stress-test.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: tests/random_ascii.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: tests/ranges.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: tests/sketch_monte_carlo.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: tests/websocket/server.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: WebExtensionsFramework/test-extensions/count-logger/background.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: WebExtensionsFramework/test-extensions/custom-user-agent/background.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: WebExtensionsFramework/test-extensions/message-demo/background.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: WebExtensionsFramework/test-extensions/red-box/content.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: WebExtensionsFramework/test-extensions/storage-demo/background.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: WebExtensionsFramework/test-extensions/storage-ui-demo/background.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: WebExtensionsFramework/Tests/WebExtensionsFrameworkTests/Resources/storage-demo/background.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — WebExtensionsFramework/test-extensions/storage-ui-demo/content.js:63
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph quality Integrity conf 1.00 15 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: OtherResources/framer.py:writer, OtherResources/framer.py:write This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate.
15 occurrences
repo-level (15 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 4 occurrences Near-duplicate function bodies in 3 places
Functions with the same first-5-line body hash: OtherResources/framer.py:mainloop, OtherResources/framer.py:mainloop, OtherResources/framer.py:main This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they're…
4 occurrences
repo-level (4 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 5 places
Functions with the same first-5-line body hash: api/library/python/iterm2/iterm2/util.py:proto, api/library/python/iterm2/iterm2/util.py:proto, api/library/python/iterm2/iterm2/util.py:proto, api/library/python/iterm2/iterm2/util.py:proto This is *the* AI-coder failure mode (4× more duplication in…
duplicatesduplication
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `AppVersionTooOld` in api/library/python/iterm2/iterm2/capabilities.py:5
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `AppVersionTooOld` in api/library/python/iterm2/iterm2/prompt.py:239
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `AppVersionTooOld` in api/library/python/iterm2/iterm2/statusbar.py:246
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `AppVersionTooOld` in api/library/python/iterm2/iterm2/tab.py:211
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `array_copy` in ThirdParty/Highlightr.framework/Versions/A/Resources/highlight.min.js:6
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `local_write_only_copy` in api/library/python/iterm2/iterm2/profile.py:4245
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `local_write_only_copy` in api/library/python/iterm2/iterm2/session.py:602
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_yacc_rr_unused` in tools/ply/ply-3.4/test/testyacc.py:266
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `yacc_rr_unused` in tools/ply/ply-3.4/test/yacc_rr_unused.py:2
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `yacc_unused` in tools/ply/ply-3.4/test/yacc_unused.py:2
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph software Dead code conf 1.00 Possibly dead Python function: fmt
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:872
low System graph software Dead code conf 1.00 Possibly dead Python function: guid_param
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
api/library/python/iterm2/gen_binding.py:15
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_autopoll
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1292
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_deregister
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1278
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_eval
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:717
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_file
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:724
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_getenv
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:691
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_kill
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1341
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_login
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:600
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_poll
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1306
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_quit
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1359
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_register
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1264
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_reset1
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:668
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_reset2
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:673
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_run
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:639
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_runpy
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:699
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_save
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:679
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_send
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1317
low System graph software Dead code conf 1.00 Possibly dead Python function: menu_item_param
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
api/library/python/iterm2/gen_binding.py:12
low System graph software Dead code conf 1.00 Possibly dead Python function: monitor_process
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1382
low System graph software Dead code conf 1.00 Possibly dead Python function: movesel_param
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
api/library/python/iterm2/gen_binding.py:43
low System graph software Dead code conf 1.00 Possibly dead Python function: no_param
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
api/library/python/iterm2/gen_binding.py:5
low System graph software Dead code conf 1.00 Possibly dead Python function: paste_param
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
api/library/python/iterm2/gen_binding.py:35
low System graph software Dead code conf 1.00 Possibly dead Python function: read_line
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1487
low System graph software Dead code conf 1.00 Possibly dead Python function: snippet_param
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
api/library/python/iterm2/gen_binding.py:47
low System graph software Dead code conf 1.00 Possibly dead Python function: sort_ls
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:876
low System graph software Dead code conf 1.00 Possibly dead Python function: start_process
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
OtherResources/framer.py:1376
low System graph software Dead code conf 1.00 Possibly dead Python function: str_param
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
api/library/python/iterm2/gen_binding.py:8
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — sources/Browser/Core/log-errors.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — sources/Browser/Marks/show-named-mark-annotations.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — sources/Browser/Marks/update-mark-positions.js:3
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — tests/websocket/server.js:18
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/Resources/JavaScript/chrome-base.js:95
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/count-logger/background.js:9
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/custom-user-agent/background.js:13
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/custom-user-agent/content.js:3
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/message-demo/background.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/message-demo/content.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/red-box/content.js:22
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/storage-demo/background.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/storage-demo/content.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/storage-ui-demo/background.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/test-extensions/storage-ui-demo/content.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/Tests/WebExtensionsFrameworkTests/Resources/blue-circle/content.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/Tests/WebExtensionsFrameworkTests/Resources/red-box/content.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/Tests/WebExtensionsFrameworkTests/Resources/storage-demo/background.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — WebExtensionsFramework/Tests/WebExtensionsFrameworkTests/Resources/storage-demo/content.js:2
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph quality Integrity conf 1.00 Stub function `log` (body is just `pass`/`return`) — OtherResources/framer.py:63
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `p_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/example/yply/yparse.py:207
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `p_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/yacc_badid.py:70
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `p_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/yacc_error4.py:65
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `setup` (body is just `pass`/`return`) — tools/perf/stress_load.py:176
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_dup1.py:22
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_dup2.py:26
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_dup3.py:24
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_error3.py:20
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_error4.py:20
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_ignore.py:24
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_ignore2.py:22
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_literal1.py:20
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_literal2.py:20
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_many_tokens.py:21
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_re1.py:20
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_re2.py:20
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_re3.py:22
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_rule1.py:20
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_rule2.py:22
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_rule3.py:22
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_state1.py:33
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_state2.py:33
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_state3.py:35
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_state4.py:34
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_state5.py:34
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_state_noerror.py:33
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_state_norule.py:34
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_state_try.py:35
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_token1.py:14
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_token2.py:16
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_token3.py:19
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_token4.py:21
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_token5.py:24
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_token_dup.py:24
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_error` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/yacc_nested.py:15
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `t_NUMBER` (body is just `pass`/`return`) — tools/ply/ply-3.4/test/lex_doc1.py:18
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Complexity conf 1.00 Very large file: api/library/python/iterm2/iterm2/profile.py (6599 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: api/library/python/iterm2/iterm2/triggers.py (1734 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: OtherResources/framer.py (1605 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: sources/Browser/FindOnPage/find-engine.js (2022 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: sources/Browser/ReaderMode/Readability.js (2301 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: tests/apply_layout_integration_test.py (1565 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: tools/perf/run_stress_test.sh (1604 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: tools/ply/ply-3.4/ply/yacc.py (3276 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/a7bd62e2-d854-491f-aee4-ca48f1d47136/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/a7bd62e2-d854-491f-aee4-ca48f1d47136/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.