Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
32 of your 47 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

rapidsai/cudf

https://github.com/rapidsai/cudf · scanned 2026-06-05 17:17 UTC (4 days, 21 hours ago) · 10 languages

725 raw signals (45 security + 680 graph) 11/13 scanners ran 36th percentile · Cpp · medium (20-100K LoC) System graph score 85 (lower by 23)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 21 hours ago · v2 · 256 actionable findings from 2 signal sources. 129 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
79.7
/100
Security checks
74
13 findings
System graph
85
100.0% cov · 243 findings
Critical
0
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 60.0 0.15 9.00
security_score 100.0 0.25 25.00
testing_score 0.0 0.20 0.00
documentation_score 74.0 0.15 11.10
practices_score 60.0 0.15 9.00
code_quality 79.0 0.10 7.90
Overall 1.00 62.0
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 19 Medium 5 Low 120 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 13 System graph 243 Crowd 0 Layer: Quality 192 Security 17 Cicd 3 Software 39 Api 1 Network 1 Hardware 2 Frontend 1
Scan summary Quality grade C+ (62/100). Dimensions: security 100, maintainability 60. 45 findings (31 security). 40,094 lines analyzed.

Showing 143 of 256 actionable findings. 385 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks software dependencies conf 0.90 ✓ Repobility 3 occurrences [MINED126] Workflow container/services image `rapidsai/ci-conda:26.08-latest` unpinned: `container/services image: rapidsai/ci-conda:26.08-latest` without `@sha256:...` pulls a mutable tag at workflow-run time. Treat workflow container references with the same supply-chain discipline as Dockerfile FROM lines.
Replace with `rapidsai/ci-conda:26.08-latest@sha256:<digest>`. Re-pin via Dependabot Docker scope.
2 files, 3 locations
.github/workflows/compute-sanitizer-run.yaml:31, 52 (2 hits)
.github/workflows/spark-rapids-jni.yaml:10
high Security checks software Resource exhaustion conf 1.00 [SEC035] Unbounded Resource Allocation — DoS risk: Allocating resources (buffers, recursion stack, large ranges) based on user input without an upper bound. Attackers send `size=10000000` to exhaust memory, or trigger expensive computation. CWE-770/400. Examples: CVE-2023-44487 (HTTP/2 Rapid Reset), countless YAML/XML billion-laughs variants.
Cap user-controlled sizes BEFORE allocation: size = min(int(request.args.get('n', 100)), MAX_SIZE) Set framework-level limits: Flask: app.config['MAX_CONTENT_LENGTH'] = 10 * 1024 * 1024 FastAPI: use middleware to enforce request size Django: DATA_UPLOAD_MAX_MEMORY_SIZE in settings.py …
cpp/benchmarks/transpose/transpose.cpp:42
high Security checks cicd CI/CD security conf 0.90 ✓ Repobility 25 occurrences GitHub Action is tag-pinned rather than SHA-pinned
[MINED115] Action `rapidsai/shared-workflows/.github/workflows/custom-job.yaml` pinned to mutable ref `@main`: `uses: rapidsai/shared-workflows/.github/workflows/custom-job.yaml@main` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/cha…
5 files, 25 locations
.github/workflows/test.yaml:35, 49, 64, 82, 100, 116, 132, 147, +8 more (16 hits)
.github/workflows/pr.yaml:46, 62, 75, 87 (4 hits)
.github/workflows/pr_issue_status_automation.yml:16, 28, 68 (3 hits)
.github/workflows/pandas-tests.yaml:33
.github/workflows/trigger-breaking-change-alert.yaml:21
CI/CD securitySupply chainGitHub Actions
high System graph cicd CI/CD security conf 1.00 77 occurrences GitHub Action tracks a moving branch
rapidsai/shared-actions/telemetry-dispatch-stash-base-env-vars@main can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
6 files, 77 locations
.github/workflows/pr.yaml:46, 62, 75, 87, 344, 357, 371, 383, +26 more (34 hits)
.github/workflows/build.yaml:50, 60, 77, 95, 111, 130, 149, 169, +14 more (22 hits)
.github/workflows/test.yaml:35, 49, 64, 82, 100, 116, 132, 147, +8 more (16 hits)
.github/workflows/pr_issue_status_automation.yml:16, 28, 68 (3 hits)
.github/workflows/pandas-tests.yaml:33
.github/workflows/trigger-breaking-change-alert.yaml:21
CI/CD securitySupply chainGithub actions
high System graph security security conf 1.00 Insecure pattern 'exec_used' in python/cudf/benchmarks/common/utils.py:185
Found a known-risky pattern (exec_used). Review and replace if possible.
python/cudf/benchmarks/common/utils.py:185 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in python/cudf/cudf/core/udf/udf_kernel_base.py:163
Found a known-risky pattern (exec_used). Review and replace if possible.
python/cudf/cudf/core/udf/udf_kernel_base.py:163 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in python/cudf/cudf/utils/queryutils.py:108
Found a known-risky pattern (exec_used). Review and replace if possible.
python/cudf/cudf/utils/queryutils.py:108 Exec used
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/column_accessor.py:410
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/column_accessor.py:410 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/dataframe.py:576
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/dataframe.py:576 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/frame.py:498
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/frame.py:498 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/groupby/groupby.py:2131
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/groupby/groupby.py:2131 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/index.py:324
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/index.py:324 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/indexed_frame.py:2905
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/indexed_frame.py:2905 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/multiindex.py:274
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/multiindex.py:274 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/reshape.py:529
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/reshape.py:529 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/series.py:633
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/series.py:633 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/core/single_column_frame.py:173
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/core/single_column_frame.py:173 Tls verify false
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in python/cudf/cudf/io/dlpack.py:54
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
python/cudf/cudf/io/dlpack.py:54 Tls verify false
medium Security checks quality Practices conf 1.00 [CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.
Add a .gitignore appropriate for your language/framework.
low Security checks quality Error handling conf 0.55 ✓ Repobility Broad exception handler needs review
This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.
ci/check_cudf_polars_ir.py:336 Error handlingquality
medium System graph hardware Security conf 1.00 Dockerfile runs as root: .devcontainer/Dockerfile
No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.
Container
medium System graph cicd CI/CD security conf 1.00 6 occurrences GitHub Actions workflow grants broad write permissions
CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.
6 files, 6 locations
.github/workflows/build.yaml
.github/workflows/pandas-tests.yaml
.github/workflows/pr.yaml
.github/workflows/spark-rapids-jni.yaml
.github/workflows/status.yaml
.github/workflows/test.yaml
CI/CD securitySupply chainGithub actions
medium System graph security Coverage conf 1.00 No auth library detected
The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). Either auth lives in custom code, in a separate service, or is missing.
auth
medium System graph network Security conf 1.00 Privileged port 10 in use
Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
.github/workflows/compute-sanitizer-trigger.yaml Ports
low System graph quality Maintenance conf 1.00 378 TODO/FIXME markers
High count of TODO/FIXME/HACK markers — track them as issues so they're not forgotten.
low System graph hardware Coverage conf 1.00 Containers defined but no K8s/orchestration manifest found
Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo.
Deployment
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/core/_compat.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/core/missing.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/core/mixins/reductions.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/core/mixins/scans.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/core/udf/_ops.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/core/udf/strings_utils.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/core/udf/templates.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf/cudf/tests/private_objects/_rmm_stats_script.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf_kafka/cudf_kafka/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf_polars/cudf_polars/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf_polars/cudf_polars/dsl/expr.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/cudf_polars/cudf_polars/streaming/benchmarks/pdsds_parameters/parameter_substitutions.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/custreamz/custreamz/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/dask_cudf/dask_cudf/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/libcudf/libcudf/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/libcudf_streaming/libcudf_streaming/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/pylibcudf/pylibcudf/_version.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph quality Integrity conf 1.00 15 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: docs/cudf/source/_ext/PandasCompat.py:run, docs/cudf/source/_ext/PandasCompat.py:run This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate.
15 occurrences
repo-level (15 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 21 places
Functions with the same first-5-line body hash: python/cudf_polars/cudf_polars/dsl/ir.py:do_evaluate, python/cudf_polars/cudf_polars/dsl/ir.py:do_evaluate, python/cudf_polars/cudf_polars/dsl/ir.py:do_evaluate, python/cudf_polars/cudf_polars/dsl/ir.py:do_evaluate This is *the* AI-coder failure mode…
duplicatesduplication
low System graph quality Integrity conf 1.00 2 occurrences Near-duplicate function bodies in 3 places
Functions with the same first-5-line body hash: python/dask_cudf/dask_cudf/_expr/groupby.py:aggregate, python/dask_cudf/dask_cudf/_expr/groupby.py:aggregate, python/dask_cudf/dask_cudf/_expr/groupby.py:aggregate This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see htt…
2 occurrences
repo-level (2 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 2 occurrences Near-duplicate function bodies in 6 places
Functions with the same first-5-line body hash: python/cudf_polars/cudf_polars/dsl/ir.py:get_hashable, python/cudf_polars/cudf_polars/dsl/ir.py:get_hashable, python/cudf_polars/cudf_polars/dsl/ir.py:get_hashable, python/cudf_polars/cudf_polars/dsl/ir.py:get_hashable This is *the* AI-coder failure …
2 occurrences
repo-level (2 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `bench_copy` in python/cudf/benchmarks/API/bench_multiindex.py:34
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cai_copy` in python/cudf/cudf/core/column/column.py:1078
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `df_copy` in python/cudf/cudf/tests/input_output/test_csv.py:1807
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `dtype_copy` in python/cudf/cudf/core/column/categorical.py:690
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `env_backup` in python/cudf_polars/tests/streaming/test_options.py:128
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `gmi_copy` in python/cudf/cudf/tests/indexes/multiindex/methods/test_copy.py:24
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `gpu_copy` in python/cudf/cudf/tests/series/methods/test_replace.py:329
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `idx_copy` in python/cudf/cudf/core/index.py:3327
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `idx_copy` in python/cudf/cudf/core/indexed_frame.py:231
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `on_old` in python/custreamz/custreamz/tests/test_dataframes.py:730
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `psr_copy` in python/cudf/cudf/tests/series/methods/test_where.py:90
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_convert_dtypes_dataframe_returns_copy` in python/cudf/cudf/tests/dataframe/methods/test_convert_dtypes.py:123
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_convert_dtypes_returns_copy` in python/cudf/cudf/tests/series/methods/test_convert_dtypes.py:158
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_cupy_asarray_zero_copy` in python/cudf/cudf_pandas_tests/test_cudf_pandas.py:662
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_dataframe_copy` in python/cudf/cudf/tests/dataframe/methods/test_to_string.py:142
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_dataframe_deep_copy` in python/cudf/cudf/tests/dataframe/methods/test_copy.py:43
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_df_series_dataframe_astype_copy` in python/cudf/cudf/tests/dataframe/methods/test_astype.py:14
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_index_assignment_no_shallow_copy` in python/cudf/cudf/tests/dataframe/test_attributes.py:352
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_index_astype_no_copy` in python/cudf/cudf/tests/indexes/index/methods/test_astype.py:24
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_index_copy` in python/cudf/cudf/tests/indexes/index/methods/test_copy.py:25
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_init_with_index_no_shallow_copy` in python/cudf/cudf/tests/dataframe/test_constructors.py:860
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_null_copy` in python/cudf/cudf/tests/series/indexing/test_setitem.py:408
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_parquet_reader_v2` in python/cudf/cudf/tests/input_output/test_parquet.py:1369
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_rangeindex_unique_shallow_copy` in python/cudf/cudf/tests/indexes/rangeindex/methods/test_unique.py:10
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_rename_shallow_copy` in python/cudf/cudf/tests/indexes/rangeindex/methods/test_rename.py:10
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_series_astype_no_copy` in python/cudf/cudf/tests/series/methods/test_astype.py:1389
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_series_from_series_index_no_shallow_copy` in python/cudf/cudf/tests/series/test_constructors.py:427
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_set_flags_copy_true_makes_deep_copy` in python/cudf/cudf/tests/test_flags.py:178
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_shallow_copy` in python/cudf_polars/tests/containers/test_column.py:123
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_shallow_copy` in python/cudf_polars/tests/containers/test_dataframe.py:102
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_struct_of_struct_copy` in python/cudf/cudf/tests/series/methods/test_copy.py:8
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_table_copy` in python/pylibcudf/tests/test_table.py:40
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_to_datetime_errors_ignore_deprecated` in python/cudf/cudf/tests/general_functions/test_to_datetime.py:308
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `web_v1` in python/cudf_polars/cudf_polars/streaming/benchmarks/pdsds_queries/q51.py:30
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph software Dead code conf 1.00 Possibly dead Python function: clear_doc
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/_ext/PandasCompat.py:102
low System graph software Dead code conf 1.00 Possibly dead Python function: default_factory
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/cudf_polars/cudf_polars/utils/config.py:152
low System graph software Dead code conf 1.00 Possibly dead Python function: depart_PandasCompat_node
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/_ext/PandasCompat.py:32
low System graph software Dead code conf 1.00 Possibly dead Python function: evaluate_polars_ir
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/cudf_polars/cudf_polars/engine/ray.py:338
low System graph software Dead code conf 1.00 Possibly dead Python function: group_key
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/cudf_polars/cudf_polars/streaming/benchmarks/utils.py:1468
low System graph software Dead code conf 1.00 Possibly dead Python function: inject
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/cudf_polars/cudf_polars/streaming/benchmarks/utils.py:1372
low System graph software Dead code conf 1.00 Possibly dead Python function: inner_func
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/dask_cudf/dask_cudf/core.py:55
low System graph software Dead code conf 1.00 Possibly dead Python function: linkcode_resolve
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/conf.py:658
low System graph software Dead code conf 1.00 Possibly dead Python function: merge_domaindata
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/_ext/PandasCompat.py:105
low System graph software Dead code conf 1.00 Possibly dead Python function: merge_PandasCompats
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/_ext/PandasCompat.py:85
low System graph software Dead code conf 1.00 Possibly dead Python function: process_doc
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/_ext/PandasCompat.py:109
low System graph software Dead code conf 1.00 Possibly dead Python function: purge_PandasCompats
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/_ext/PandasCompat.py:74
low System graph software Dead code conf 1.00 Possibly dead Python function: read_gdf
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/custreamz/custreamz/kafka.py:83
low System graph software Dead code conf 1.00 Possibly dead Python function: resolve_aliases
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/conf.py:368
low System graph software Dead code conf 1.00 Possibly dead Python function: setup_root
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/cudf_polars/cudf_polars/engine/ray.py:198
low System graph software Dead code conf 1.00 Possibly dead Python function: setup_worker
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/cudf_polars/cudf_polars/engine/ray.py:219
low System graph software Dead code conf 1.00 Possibly dead Python function: sort_key
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/cudf_polars/cudf_polars/streaming/benchmarks/utils.py:1471
low System graph software Dead code conf 1.00 Possibly dead Python function: visit_PandasCompat_node
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
docs/cudf/source/_ext/PandasCompat.py:28
low System graph software Dead code conf 1.00 Possibly dead Python function: write_orc_partition
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/dask_cudf/dask_cudf/io/orc.py:123
low System graph quality Integrity conf 1.00 Stub function `_construct_signature` (body is just `pass`/`return`) — python/cudf/cudf/core/udf/groupby_utils.py:242
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `_ExcelWriter__init__` (body is just `pass`/`return`) — python/cudf/cudf/pandas/_wrappers/pandas.py:302
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `create_module` (body is just `pass`/`return`) — python/cudf/cudf/pandas/module_accelerator.py:187
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `load_ipython_extension` (body is just `pass`/`return`) — python/cudf/cudf/pandas/magics.py:31
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `NRT_decref` (body is just `pass`/`return`) — python/cudf/cudf/core/udf/strings_typing.py:157
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `pytest_collection_modifyitems` (body is just `pass`/`return`) — python/cudf/benchmarks/common/config.py:50
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Complexity conf 1.00 Very large file: java/src/main/java/ai/rapids/cudf/ColumnVector.java (1754 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: java/src/main/java/ai/rapids/cudf/ColumnView.java (5732 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: java/src/main/java/ai/rapids/cudf/HostColumnVector.java (2206 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: java/src/main/java/ai/rapids/cudf/JCudfSerialization.java (2007 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: java/src/main/java/ai/rapids/cudf/Table.java (4944 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: java/src/test/java/ai/rapids/cudf/BinaryOpTest.java (1914 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: java/src/test/java/ai/rapids/cudf/ColumnVectorTest.java (6897 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: java/src/test/java/ai/rapids/cudf/IfElseTest.java (1170 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: java/src/test/java/ai/rapids/cudf/TableTest.java (10542 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/accessors/string.py (5618 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/column/column.py (4084 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/column/string.py (1894 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/dataframe.py (8880 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/frame.py (2165 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/groupby/groupby.py (4010 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/index.py (5592 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/indexed_frame.py (7353 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/multiindex.py (2232 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/reshape.py (1608 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/core/series.py (5424 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/io/parquet.py (2636 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/pandas/_wrappers/pandas.py (2832 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/pandas/fast_slow_proxy.py (1721 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/tests/dataframe/test_constructors.py (2019 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/tests/input_output/test_csv.py (2264 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/tests/input_output/test_orc.py (2102 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/tests/input_output/test_parquet.py (5037 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/tests/reshape/test_concat.py (2822 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/tests/series/accessors/test_str.py (2989 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/tests/series/test_binops.py (3245 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf/utils/ioutils.py (2325 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf/cudf_pandas_tests/test_cudf_pandas.py (2141 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf_polars/cudf_polars/dsl/ir.py (3388 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf_polars/cudf_polars/streaming/benchmarks/pdsds_parameters/parameter_substitutions.py (10051 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf_polars/cudf_polars/streaming/benchmarks/pdsh.py (1798 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/cudf_polars/cudf_polars/streaming/benchmarks/utils.py (2108 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/ae190262-9453-4f3c-a0c0-22f435cf5726/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/ae190262-9453-4f3c-a0c0-22f435cf5726/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.