Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
159 of your 218 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.
Upstream (GitHub) caused delay on this scan — not Repobility.
  • GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
  • Clone from GitHub took 34.78s for a 74.8 MB repo slow.
  • Repobility's analysis ran in 18.5s after the clone landed.

Vector35/binaryninja-api

https://github.com/Vector35/binaryninja-api · scanned 2026-06-05 23:53 UTC (4 days, 3 hours ago) · 10 languages

631 raw signals (205 security + 426 graph) 11/13 scanners ran 46th percentile · C · huge (>500K LoC) System graph score 90 (lower by 25)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 3 hours ago · v2 · 251 actionable findings from 2 signal sources. 167 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
82.3
/100
Security checks
75
60 findings
System graph
90
77.8% cov · 191 findings
Critical
0
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 60.0 0.15 9.00
security_score 100.0 0.25 25.00
testing_score 26.0 0.20 5.20
documentation_score 67.0 0.15 10.05
practices_score 85.0 0.15 12.75
code_quality 27.0 0.10 2.70
Overall 1.00 64.7
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 10 Medium 11 Low 92 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 60 System graph 191 Crowd 0 Layer: Quality 210 Security 7 Cicd 2 Software 29 Api 1 Frontend 2
Scan summary Quality grade C+ (65/100). Dimensions: security 100, maintainability 60. 205 findings (18 security). 733,052 lines analyzed.

Showing 112 of 251 actionable findings. 418 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks quality Quality conf 1.00 ✓ Repobility 17 occurrences [MINED107] Missing import: `ast` used but not imported: The file uses `ast.something(...)` but never imports `ast`. This raises NameError at runtime the first time the line executes.
Add `import ast` at the top of the file.
12 files, 16 locations
python/types.py:276, 2593, 2758 (3 hits)
python/binaryview.py:3768, 11115 (2 hits)
python/function.py:2857, 4026 (2 hits)
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:818
plugins/warp/api/python/warp.py:151
python/callingconvention.py:56
python/collaboration/user.py:81
python/lineardisassembly.py:49
low Security checks quality Quality conf 1.00 ✓ Repobility [MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and SystemExit from working.
Review and fix per the pattern semantics. See CWE-705 / for context.
scripts/install_api.py:125
high Security checks quality Quality conf 1.00 ✓ Repobility [MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can contain "../" — directory escape.
Review and fix per the pattern semantics. See CWE-22 / A01:2021 for context.
scripts/install_api.py:181
high Security checks quality Quality conf 1.00 ✓ Repobility 3 occurrences [MINED106] Phantom test coverage: test_bit: Test function `test_bit` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage without verifying anything.
Add an explicit assertion that captures the test's intent, or remove the test.
3 files, 3 locations
python/highlevelil.py:4279
python/lowlevelil.py:5593
python/mediumlevelil.py:5827
high Security checks quality Quality conf 1.00 ✓ Repobility [MINED106] Phantom test coverage: test_inner: Test function `test_inner` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage without verifying anything.
Add an explicit assertion that captures the test's intent, or remove the test.
python/deprecation.py:284
high Security checks quality Quality conf 1.00 ✓ Repobility 25 occurrences [MINED108] `self.keys` used but never assigned in __init__: Method `get` of class `_AssociatedDataStore` reads `self.keys`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance.
Initialize `self.keys = <default>` in __init__, or add a class-level default.
2 files, 25 locations
python/filemetadata.py:43, 44, 45, 46, 47, 48, 52, 60, +12 more (23 hits)
python/associateddatastore.py:32, 39 (2 hits)
high Security checks security auth conf 0.78 Consent is collected in UI without visible backend audit persistence
Persist consent as a backend record with subject, actor, purpose, scope, legal text version, timestamp, IP address, user agent, and revocation state.
docs/about/rust-binaryninjacore.html:8072
low Security checks cicd CI/CD security conf 0.90 ✓ Repobility 7 occurrences GitHub Action is tag-pinned rather than SHA-pinned
[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lo…
2 files, 7 locations
.github/workflows/rust.yml:22, 39, 53, 63, 72 (6 hits)
.github/workflows/rust_testing.yml:30
CI/CD securitySupply chainGitHub Actions
medium Security checks cicd CI/CD security conf 0.90 ✓ Repobility 12 occurrences GitHub Action is tag-pinned rather than SHA-pinned
[MINED115] Action `actions-rust-lang/setup-rust-toolchain` pinned to mutable ref `@v1`: `uses: actions-rust-lang/setup-rust-toolchain@v1` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect …
2 files, 12 locations
.github/workflows/rust.yml:24, 29, 41, 46, 55, 65 (10 hits)
.github/workflows/rust_testing.yml:37, 42 (2 hits)
CI/CD securitySupply chainGitHub Actions
high System graph security security conf 1.00 Insecure pattern 'eval_used' in python/bncompleter.py:598
Found a known-risky pattern (eval_used). Review and replace if possible.
python/bncompleter.py:598 Eval used
high System graph security security conf 1.00 Insecure pattern 'eval_used' in python/scriptingprovider.py:685
Found a known-risky pattern (eval_used). Review and replace if possible.
python/scriptingprovider.py:685 Eval used
medium Security checks quality Quality conf 1.00 ✓ Repobility 3 occurrences [MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too.
Use None as the default and create the collection inside the function: `def __init__(x=None): x = x or []`
3 files, 3 locations
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:49
python/mediumlevelil.py:871
python/workflow.py:708
medium Security checks quality Quality conf 1.00 ✓ Repobility 6 occurrences [MINED109] Mutable default argument in `load` (dict): `def load(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too.
Use None as the default and create the collection inside the function: `def load(x=None): x = x or []`
3 files, 6 locations
python/transform.py:297, 320, 343, 944 (4 hits)
python/binaryview.py:3510
python/commonil.py:39
medium Security checks security path traversal conf 1.00 [SEC012] ZipSlip — Archive Path Traversal: Archive extraction without path validation allows writing files outside the target directory.
Validate extracted paths with os.path.realpath() and ensure they stay within the target directory.
scripts/download_headless.py:81
low Security checks quality Quality conf 1.00 [SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws — wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated.
Catch the specific exception type, log at error level with full exception info, and return a failure-shaped result. If the operation is genuinely best-effort, log at warning and document why in a comment so the next reader (or scanner) knows.
api-docs/cppdocs/binaryninja-darkmode.js:38
medium Security checks quality Quality Average file size is 677 lines (recommend <300)
Refactor large files by extracting related functions into separate modules. Target files with 300+ lines first. Use the Single Responsibility Principle — each module should have one clear purpose.
low Security checks quality Error handling conf 0.55 ✓ Repobility 25 occurrences Broad exception handler needs review
This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.
11 files, 25 locations
python/scriptingprovider.py:839, 864, 907, 927, 994, 1052, 1076, 1087, +1 more (9 hits)
python/bncompleter.py:70, 82, 135, 426, 599 (5 hits)
arch/x86/code_generator/parse-iform-types.py:22, 376 (2 hits)
python/platform.py:221, 273 (2 hits)
python/binaryview.py:5911
python/collaboration/merge.py:229
python/function.py:4017
python/interaction.py:845
Error handlingquality
high Security checks quality Quality conf 0.80 localStorage write failures are swallowed silently
Handle QuotaExceededError explicitly, show a toast or error state, and guide the user to export/clear old local data. Log non-quota failures for diagnostics.
api-docs/cppdocs/binaryninja-darkmode.js:48
medium System graph security security conf 1.00 Insecure pattern 'subprocess_shell_true' in api-docs/cppdocs/build_min_docs.py:30
Found a known-risky pattern (subprocess_shell_true). Review and replace if possible.
api-docs/cppdocs/build_min_docs.py:30 Subprocess shell true
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — api-docs/cppdocs/build_min_docs.py:27
`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — python/scriptingprovider.py:1309
`subprocess.check_output(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — scripts/download_headless.py:61
`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — scripts/verify_hashes.py:17
`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph security Coverage conf 1.00 No auth library detected
The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). Either auth lives in custom code, in a separate service, or is missing.
auth
low Security checks quality Quality conf 0.60 30 occurrences Duplicated implementation block across source files
Duplicate implementation blocks are maintenance debt. Keep them visible, but they are not a high-severity defect unless the duplicated logic is security-sensitive or drifting.
12 files, 19 locations
platform/mac/platform_mac.cpp:9, 12, 13 (3 hits)
plugins/warp/build.rs:1, 2, 25 (3 hits)
platform/mac-kernel/platform_mac_kernel.cpp:9, 12 (2 hits)
platform/windows-kernel/platform_windows_kernel.cpp:10, 78 (2 hits)
plugins/svd/build.rs:1, 2 (2 hits)
arch/riscv/build.rs:1
lang/rust/pseudorust.h:16
platform/freebsd/platform_freebsd.cpp:7
duplicationquality
low System graph quality Maintenance conf 1.00 908 TODO/FIXME markers
High count of TODO/FIXME/HACK markers — track them as issues so they're not forgotten.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: arch/armv7/thumb2_disasm/arm_pcode_parser/filter.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: arch/mips/mips/unittest/unitTest.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: docs/cpp.min.js
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/examples/cli_dis.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: python/examples/pe_stat.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: scripts/test_build_extern.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph software Dead code candidate conf 1.00 File has no detected symbols: stubs/generate_stubs.py
Source file with no class/function declarations — possible config, dead code, or scratch file.
low System graph quality Tests conf 1.00 Low test-to-source ratio
62 tests / 449 src (ratio 0.14).
low System graph quality Integrity conf 1.00 16 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: scripts/check_docstring_formatting.py:get_docstrings_from_file_regex, scripts/check_docstring_formatting.py:get_docstrings_from_file This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Co…
16 occurrences
repo-level (16 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 2 occurrences Near-duplicate function bodies in 3 places
Functions with the same first-5-line body hash: python/filemetadata.py:undoable_transaction, python/filemetadata.py:undo, python/binaryview.py:undoable_transaction This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or docu…
2 occurrences
repo-level (2 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 4 places
Functions with the same first-5-line body hash: python/filemetadata.py:navigate, python/filemetadata.py:nav, python/filemetadata.py:nav, python/filemetadata.py:navigate This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or…
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 5 places
Functions with the same first-5-line body hash: arch/armv7/thumb2_disasm/arm_pcode_parser/parse.py:block0, arch/armv7/thumb2_disasm/arm_pcode_parser/parse.py:block0, arch/armv7/thumb2_disasm/arm_pcode_parser/parse.py:block0, arch/armv7/thumb2_disasm/arm_pcode_parser/parse.py:block0 This is *the* A…
duplicatesduplication
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `csky_le_v1` in python/platform.py:93
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `do_copy` in python/mediumlevelil.py:4085
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `from_buffer_copy` in plugins/warp/api/python/warp.py:21
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `from_buffer_copy` in python/downloadprovider.py:394
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `from_buffer_copy` in python/metadata.py:55
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `from_buffer_copy` in python/websocketprovider.py:210
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `immutable_copy` in python/function.py:1358
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `immutable_copy` in python/highlevelil.py:4937
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `immutable_copy` in python/typearchive.py:247
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `immutable_copy` in python/typelibrary.py:378
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `immutable_copy` in python/types.py:597
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `is_deprecated` in python/binaryview.py:1508
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `is_deprecated` in python/deprecation.py:163
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `to_copy` in python/examples/wf_unflatten.py:98
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph software Dead code conf 1.00 Possibly dead Python function: begin_namespace
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/database.py:87
low System graph software Dead code conf 1.00 Possibly dead Python function: block0
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/parse.py:286
low System graph software Dead code conf 1.00 Possibly dead Python function: block1
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/parse.py:216
low System graph software Dead code conf 1.00 Possibly dead Python function: builtin_value
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:638
low System graph software Dead code conf 1.00 Possibly dead Python function: config_initiated
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sphinx_rtd/__init__.py:27
low System graph software Dead code conf 1.00 Possibly dead Python function: delete_type
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/typecontainer.py:180
low System graph software Dead code conf 1.00 Possibly dead Python function: edgeStringency
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/generator.py:1076
low System graph software Dead code conf 1.00 Possibly dead Python function: end_namespace
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/database.py:91
low System graph software Dead code conf 1.00 Possibly dead Python function: expr1
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:516
low System graph software Dead code conf 1.00 Possibly dead Python function: expr2
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:543
low System graph software Dead code conf 1.00 Possibly dead Python function: expr3
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:552
low System graph software Dead code conf 1.00 Possibly dead Python function: func_call
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:674
low System graph software Dead code conf 1.00 Possibly dead Python function: getVarWidth
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/generator.py:608
low System graph software Dead code conf 1.00 Possibly dead Python function: measureBitmask
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/generator.py:368
low System graph software Dead code conf 1.00 Possibly dead Python function: rename_type
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
python/typecontainer.py:169
low System graph software Dead code conf 1.00 Possibly dead Python function: resolve_input_types
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/arm64/misc/neon_intrins.py:101
low System graph software Dead code conf 1.00 Possibly dead Python function: setup
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
api-docs/source/conf.py:198
low System graph software Dead code conf 1.00 Possibly dead Python function: setup
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
sphinx_rtd/__init__.py:35
low System graph software Dead code conf 1.00 Possibly dead Python function: sliceable
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:622
low System graph software Dead code conf 1.00 Possibly dead Python function: statement
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/armv7/thumb2_disasm/arm_pcode_parser/codegencpp.py:403
low System graph software Dead code conf 1.00 Possibly dead Python function: type_to_binja_types
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
arch/arm64/misc/neon_intrins.py:65
low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — sphinx_rtd/static/js/theme.js:1
Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak
Fq console leak
low System graph quality Integrity conf 1.00 Stub function `_fill_core_result` (body is just `pass`/`return`) — python/interaction.py:47
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `_init` (body is just `pass`/`return`) — python/platform.py:172
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `add_action` (body is just `pass`/`return`) — python/plugin.py:1103
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `data_written` (body is just `pass`/`return`) — python/binaryview.py:314
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `nop` (body is just `pass`/`return`) — python/websocketprovider.py:34
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `notify_output` (body is just `pass`/`return`) — python/scriptingprovider.py:123
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `perform_destroy_instance` (body is just `pass`/`return`) — python/downloadprovider.py:375
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `perform_encode` (body is just `pass`/`return`) — python/transform.py:291
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `perform_free_object` (body is just `pass`/`return`) — python/datarender.py:185
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Integrity conf 1.00 Stub function `progress` (body is just `pass`/`return`) — python/collaboration/examples/multitool.py:287
Likely an AI scaffold that was never filled in. Remove or implement.
Empty handlerDead code
low System graph quality Complexity conf 1.00 Very large file: arch/armv7/armv7_disasm/test.py (1635 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: arch/riscv/disasm/src/lib.rs (3184 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: arch/riscv/src/lib.rs (3160 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: plugins/bntl_utils/src/process.rs (1304 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: plugins/pdb-ng/src/symbol_parser.rs (2119 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: plugins/pdb-ng/src/type_parser.rs (2461 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/architecture.py (3527 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/binaryview.py (12204 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/callingconvention.py (1777 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/examples/pseudo_python.py (1181 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/function.py (4358 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/highlevelil.py (5000 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/lowlevelil.py (6520 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/mediumlevelil.py (6905 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/plugin.py (1219 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/scriptingprovider.py (2019 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/types.py (3874 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: python/variable.py (1399 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/architecture.rs (2901 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/binary_view.rs (3621 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/calling_convention.rs (2408 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/disassembly.rs (1380 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/function.rs (3090 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/high_level_il/instruction.rs (1302 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/low_level_il/lifting.rs (1719 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/low_level_il/operation.rs (2332 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/medium_level_il/instruction.rs (2041 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
low System graph quality Complexity conf 1.00 Very large file: rust/src/types.rs (1864 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/ba8c1155-b910-4ac6-8158-d21018b737ac/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/ba8c1155-b910-4ac6-8158-d21018b737ac/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.