CRIT
MINED107
Missing import: `queue` used but not imported
data_structures/queues/priority_queue_u…:96
CRIT
MINED107
Missing import: `queue` used but not imported
data_structures/binary_tree/diff_views_…:138
CRIT
MINED107
Missing import: `queue` used but not imported
data_structures/binary_tree/segment_tre…:207
CRIT
MINED107
Missing import: `queue` used but not imported
networking_flow/ford_fulkerson.py:44
CRIT
MINED107
Missing import: `queue` used but not imported
networking_flow/minimum_cut.py:20
CRIT
MINED107
Missing import: `html` used but not imported
web_programming/download_images_from_go…:53
CRIT
MINED107
Missing import: `string` used but not imported
graphs/minimum_spanning_tree_boruvka.py:66
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/breadth_first_search_zero_one_sh…:115
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/kahns_algorithm_topo.py:43
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/bidirectional_search.py:26
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/bi_directional_dijkstra.py:36
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/breadth_first_search.py:61
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/kahns_algorithm_long.py:16
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/breadth_first_search_shortest_pa…:42
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/breadth_first_search_2.py:42
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/breadth_first_search_shortest_pa…:50
CRIT
MINED107
Missing import: `queue` used but not imported
graphs/check_bipatrite.py:139
CRIT
MINED107
Missing import: `array` used but not imported
other/number_container_system.py:122
CRIT
MINED107
Missing import: `email` used but not imported
strings/is_valid_email_address.py:79
CRIT
MINED107
Missing import: `string` used but not imported
strings/min_cost_string_conversion.py:149
CRIT
MINED107
Missing import: `string` used but not imported
strings/is_isogram.py:22
HIGH
SEC029
[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT…
web_programming/instagram_crawler.py:98
HIGH
SEC029
[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTT…
web_programming/emails_from_url.py:70
HIGH
SEC032
[SEC032] Unrestricted File Upload — no extension/MIME validation: File upload accepts the…
sorts/external_sort.py:28
HIGH
SEC078
[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang …
maths/allocation_number.py:6
HIGH
MINED009
[MINED009] Floats For Money: Variable named price/amount/cost typed as float instead of D…
web_programming/currency_converter.py:179
HIGH
MINED009
[MINED009] Floats For Money: Variable named price/amount/cost typed as float instead of D…
financial/price_plus_tax.py:6
HIGH
MINED001
[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e…
data_structures/stacks/stack.py:8
HIGH
MINED001
[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e…
data_structures/queues/priority_queue_u…:7
HIGH
MINED001
[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows e…
data_structures/linked_list/has_loop.py:6
HIGH
MINED026
[MINED026] Fake Verification: assert True, expect(1).toBe(1), or other tautology used to …
data_structures/stacks/stack.py:175
HIGH
MINED026
[MINED026] Fake Verification: assert True, expect(1).toBe(1), or other tautology used to …
data_structures/linked_list/doubly_link…:203
HIGH
MINED026
[MINED026] Fake Verification: assert True, expect(1).toBe(1), or other tautology used to …
data_structures/linked_list/circular_li…:165
HIGH
MINED004
[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).
hashes/sha1.py:2
HIGH
MINED004
[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).
hashes/md5.py:2
HIGH
MINED004
[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).
data_structures/hashing/bloom_filter.py:62
HIGH
SEC128
[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call …
data_structures/binary_tree/lazy_segmen…:133
HIGH
SEC128
[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call …
computer_vision/mean_threshold.py:30
HIGH
SEC128
[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call …
computer_vision/cnn_classification.py:85
HIGH
MINED006
[MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and Syste…
cellular_automata/game_of_life.py:127
HIGH
MINED106
Phantom test coverage: test_add_vertex_exception_check
graphs/graph_adjacency_matrix.py:521
HIGH
MINED106
Phantom test coverage: test_add_and_remove_edges_repeatedly
graphs/graph_adjacency_matrix.py:487
HIGH
MINED106
Phantom test coverage: test_remove_edge
graphs/graph_adjacency_matrix.py:467
HIGH
MINED106
Phantom test coverage: test_add_edge
graphs/graph_adjacency_matrix.py:446
HIGH
MINED106
Phantom test coverage: test_contains_edge
graphs/graph_adjacency_matrix.py:412
HIGH
MINED106
Phantom test coverage: test_add_and_remove_vertices_repeatedly
graphs/graph_adjacency_matrix.py:375
HIGH
MINED106
Phantom test coverage: test_remove_vertices
graphs/graph_adjacency_matrix.py:351
HIGH
MINED106
Phantom test coverage: test_add_vertices
graphs/graph_adjacency_matrix.py:327
HIGH
MINED106
Phantom test coverage: test_contains_edge_exception_check
graphs/graph_adjacency_list.py:576
HIGH
MINED106
Phantom test coverage: test_remove_edge_exception_check
graphs/graph_adjacency_list.py:552
HIGH
MINED106
Phantom test coverage: test_add_edge_exception_check
graphs/graph_adjacency_list.py:538
HIGH
MINED106
Phantom test coverage: test_remove_vertex_exception_check
graphs/graph_adjacency_list.py:523
HIGH
MINED106
Phantom test coverage: test_add_vertex_exception_check
graphs/graph_adjacency_list.py:509
HIGH
MINED106
Phantom test coverage: test_add_and_remove_edges_repeatedly
graphs/graph_adjacency_list.py:475
HIGH
MINED106
Phantom test coverage: test_remove_edge
graphs/graph_adjacency_list.py:455
HIGH
MINED106
Phantom test coverage: test_add_edge
graphs/graph_adjacency_list.py:434
HIGH
MINED106
Phantom test coverage: test_contains_edge
graphs/graph_adjacency_list.py:400
HIGH
MINED106
Phantom test coverage: test_add_and_remove_vertices_repeatedly
graphs/graph_adjacency_list.py:363
HIGH
MINED106
Phantom test coverage: test_remove_vertices
graphs/graph_adjacency_list.py:339
HIGH
MINED106
Phantom test coverage: test_add_vertices
graphs/graph_adjacency_list.py:315
HIGH
MINED106
Phantom test coverage: test_vector
graphs/prim.py:118
HIGH
MINED106
Phantom test coverage: test_vector
graphs/boruvka.py:141
HIGH
MINED106
Phantom test coverage: test_greedy
other/greedy.py:42
HIGH
MINED106
Phantom test coverage: test_running_key_encrypt
ciphers/running_key_cipher.py:52
HIGH
MINED106
Phantom test coverage: test_end_to_end
ciphers/shuffled_shift_cipher.py:172
HIGH
MINED108
`self.ror` used but never assigned in __init__
hashes/sha256.py:146
HIGH
MINED108
`self.ror` used but never assigned in __init__
hashes/sha256.py:145
HIGH
MINED108
`self.ror` used but never assigned in __init__
hashes/sha256.py:165
HIGH
MINED108
`self.ror` used but never assigned in __init__
hashes/sha256.py:160
HIGH
MINED108
`self.hash` used but never assigned in __init__
hashes/sha256.py:188
HIGH
MINED108
`self.blocks` used but never assigned in __init__
hashes/sha256.py:133
HIGH
MINED108
`self.blocks` used but never assigned in __init__
hashes/sha256.py:128
HIGH
MINED108
`self.membership` used but never assigned in __init__
fuzzy_logic/fuzzy_operations.py:164
HIGH
MINED108
`self.text` used but never assigned in __init__
strings/boyer_moore_search.py:94
HIGH
MINED108
`self.match_in_pattern` used but never assigned in __init__
strings/boyer_moore_search.py:94
HIGH
MINED108
`self.patLen` used but never assigned in __init__
strings/boyer_moore_search.py:89
HIGH
MINED108
`self.textLen` used but never assigned in __init__
strings/boyer_moore_search.py:89
HIGH
MINED108
`self.mismatch_in_text` used but never assigned in __init__
strings/boyer_moore_search.py:90
HIGH
MINED108
`self.text` used but never assigned in __init__
strings/boyer_moore_search.py:75
HIGH
MINED108
`self.pattern` used but never assigned in __init__
strings/boyer_moore_search.py:75
HIGH
MINED108
`self.patLen` used but never assigned in __init__
strings/boyer_moore_search.py:74
HIGH
MINED108
`self.pattern` used but never assigned in __init__
strings/boyer_moore_search.py:53
HIGH
MINED108
`self.patLen` used but never assigned in __init__
strings/boyer_moore_search.py:52
HIGH
MINED108
`self._elements` used but never assigned in __init__
strings/autocomplete_using_trie.py:30
HIGH
MINED108
`self._elements` used but never assigned in __init__
strings/autocomplete_using_trie.py:25
HIGH
MINED108
`self.find_next_state` used but never assigned in __init__
strings/aho_corasick.py:77
HIGH
MINED108
`self.find_next_state` used but never assigned in __init__
strings/aho_corasick.py:81
HIGH
MINED108
`self.find_next_state` used but never assigned in __init__
strings/aho_corasick.py:53
HIGH
MINED108
`self.find_next_state` used but never assigned in __init__
strings/aho_corasick.py:57
HIGH
MINED108
`self.find_next_state` used but never assigned in __init__
strings/aho_corasick.py:26
HIGH
COMP001
[COMP001] High cognitive complexity: Function `solve_crossword` has cognitive complexity …
backtracking/crossword_puzzle_solver.py:82
HIGH
MINED115
Action `actions/setup-python` pinned to mutable ref `@v6`
.github/workflows/build.yml:18
HIGH
MINED115
Action `astral-sh/setup-uv` pinned to mutable ref `@v7`
.github/workflows/build.yml:14
HIGH
MINED115
Action `actions/checkout` pinned to mutable ref `@v6`
.github/workflows/build.yml:13
HIGH
MINED115
Action `actions/deploy-pages` pinned to mutable ref `@v5`
.github/workflows/sphinx.yml:56
HIGH
MINED115
Action `actions/upload-pages-artifact` pinned to mutable ref `@v5`
.github/workflows/sphinx.yml:44
HIGH
MINED115
Action `actions/configure-pages` pinned to mutable ref `@v6`
.github/workflows/sphinx.yml:42
HIGH
MINED115
Action `actions/setup-python` pinned to mutable ref `@v6`
.github/workflows/sphinx.yml:37
HIGH
MINED115
Action `astral-sh/setup-uv` pinned to mutable ref `@v7`
.github/workflows/sphinx.yml:36
HIGH
MINED115
Action `actions/checkout` pinned to mutable ref `@v6`
.github/workflows/sphinx.yml:35
HIGH
MINED115
Action `actions/setup-python` pinned to mutable ref `@v6`
.github/workflows/directory_writer.yml:12
HIGH
MINED115
Action `actions/checkout` pinned to mutable ref `@v6`
.github/workflows/directory_writer.yml:9
HIGH
MINED115
Action `astral-sh/setup-uv` pinned to mutable ref `@v7`
.github/workflows/ruff.yml:15
HIGH
MINED115
Action `actions/checkout` pinned to mutable ref `@v6`
.github/workflows/ruff.yml:14
HIGH
MINED115
Action `actions/setup-python` pinned to mutable ref `@v6`
.github/workflows/project_euler.yml:44
HIGH
MINED115
Action `astral-sh/setup-uv` pinned to mutable ref `@v7`
.github/workflows/project_euler.yml:43
HIGH
MINED115
Action `actions/checkout` pinned to mutable ref `@v6`
.github/workflows/project_euler.yml:42
HIGH
MINED115
Action `actions/setup-python` pinned to mutable ref `@v6`
.github/workflows/project_euler.yml:26
HIGH
MINED115
Action `astral-sh/setup-uv` pinned to mutable ref `@v7`
.github/workflows/project_euler.yml:25
HIGH
MINED115
Action `actions/checkout` pinned to mutable ref `@v6`
.github/workflows/project_euler.yml:24
HIGH
MINED115
Action `devcontainers/ci` pinned to mutable ref `@v0.3`
.github/workflows/devcontainer_ci.yml:16
HIGH
MINED115
Action `actions/checkout` pinned to mutable ref `@v6`
.github/workflows/devcontainer_ci.yml:15
HIGH
MINED118
Dockerfile FROM `mcr.microsoft.com/vscode/devcontainers/python (no tag)` not pinned by di…
.devcontainer/Dockerfile:3
HIGH
MINED131
pre-commit hook `https://github.com/pre-commit/mirrors-prettier` pinned to mutable rev `v…
.pre-commit-config.yaml:61
HIGH
MINED131
pre-commit hook `https://github.com/abravalheri/validate-pyproject` pinned to mutable rev…
.pre-commit-config.yaml:46
HIGH
MINED131
pre-commit hook `https://github.com/tox-dev/pyproject-fmt` pinned to mutable rev `v2.23.0`
.pre-commit-config.yaml:33
HIGH
MINED131
pre-commit hook `https://github.com/codespell-project/codespell` pinned to mutable rev `v…
.pre-commit-config.yaml:26
HIGH
MINED131
pre-commit hook `https://github.com/astral-sh/ruff-pre-commit` pinned to mutable rev `v0.…
.pre-commit-config.yaml:20
HIGH
MINED131
pre-commit hook `https://github.com/MarcoGorelli/auto-walrus` pinned to mutable rev `0.4.…
.pre-commit-config.yaml:15
HIGH
MINED131
pre-commit hook `https://github.com/pre-commit/pre-commit-hooks` pinned to mutable rev `v…
.pre-commit-config.yaml:5
HIGH
GHSA-gm62-xv2j-4w53
urllib3: GHSA-gm62-xv2j-4w53
uv.lock
HIGH
GHSA-38jv-5279-wg99
urllib3: GHSA-38jv-5279-wg99
uv.lock
HIGH
GHSA-2xpw-w6gg-jr37
urllib3: GHSA-2xpw-w6gg-jr37
uv.lock
HIGH
PYSEC-2026-141
urllib3: PYSEC-2026-141
uv.lock
HIGH
GHSA-whj4-6x5x-4v2j
pillow: GHSA-whj4-6x5x-4v2j
uv.lock
HIGH
GHSA-pwv6-vv43-88gr
pillow: GHSA-pwv6-vv43-88gr
uv.lock
HIGH
GHSA-cfh3-3jmp-rvhc
pillow: GHSA-cfh3-3jmp-rvhc
uv.lock
HIGH
PYSEC-2026-165
pillow: PYSEC-2026-165
uv.lock
HIGH
PYSEC-2025-61
pillow: PYSEC-2025-61
uv.lock
HIGH
PYSEC-2026-87
lxml: PYSEC-2026-87
uv.lock
HIGH
GHSA-hjqc-jx6g-rwp9
keras: GHSA-hjqc-jx6g-rwp9
uv.lock
HIGH
GHSA-c9rc-mg46-23w3
keras: GHSA-c9rc-mg46-23w3
uv.lock
HIGH
GHSA-4f3f-g24h-fr8m
keras: GHSA-4f3f-g24h-fr8m
uv.lock
HIGH
GHSA-3m4q-jmj6-r34q
keras: GHSA-3m4q-jmj6-r34q
uv.lock
HIGH
GHSA-36fq-jgmw-4r9c
keras: GHSA-36fq-jgmw-4r9c
uv.lock
HIGH
PYSEC-2026-73
keras: PYSEC-2026-73
uv.lock
HIGH
PYSEC-2025-123
keras: PYSEC-2025-123
uv.lock
HIGH
SEC013
[SEC013] Path Traversal — User Input in File Path: User-controlled input used in file pat…
hashes/sha1.py:157
HIGH
SEC013
[SEC013] Path Traversal — User Input in File Path: User-controlled input used in file pat…
digital_image_processing/histogram_equa…:60
HIGH
SEC013
[SEC013] Path Traversal — User Input in File Path: User-controlled input used in file pat…
ciphers/transposition_cipher_encrypt_de…:25
MED
SEC015
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. …
ciphers/diffie_hellman.py:225
MED
SEC015
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. …
ciphers/beaufort_cipher.py:14
MED
SEC015
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. …
ciphers/affine_cipher.py:79
MED
MINED111
Bare except continues silently
physics/newtons_second_law_of_motion.py:77
MED
MINED111
Bare except continues silently
hashes/enigma_machine.py:49
MED
AUC001
[AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks…
—
MED
DKR007
Docker build context has no .dockerignore
.dockerignore
MED
GHSA-pq67-6m6q-mj2v
urllib3: GHSA-pq67-6m6q-mj2v
uv.lock
MED
GHSA-48p4-8xcf-vxj5
urllib3: GHSA-48p4-8xcf-vxj5
uv.lock
MED
GHSA-gc5v-m9x4-r6x2
requests: GHSA-gc5v-m9x4-r6x2
uv.lock
MED
GHSA-9hjg-9r4m-mvj7
requests: GHSA-9hjg-9r4m-mvj7
uv.lock
MED
GHSA-6w46-j5rx-g56g
pytest: GHSA-6w46-j5rx-g56g
uv.lock
MED
GHSA-r73j-pqj5-w3x7
pillow: GHSA-r73j-pqj5-w3x7
uv.lock
MED
GHSA-5xmw-vc9v-4wf2
pillow: GHSA-5xmw-vc9v-4wf2
uv.lock
MED
GHSA-mq84-hjqx-cwf2
keras: GHSA-mq84-hjqx-cwf2
uv.lock
MED
GHSA-65pc-fj4g-8rjx
idna: GHSA-65pc-fj4g-8rjx
uv.lock
MED
GHSA-768j-98cg-p3fv
fonttools: GHSA-768j-98cg-p3fv
uv.lock
MED
DKR001
Docker final stage has no non-root USER
.devcontainer/Dockerfile:3
MED
WEB003
Public web service has no security.txt
.well-known/security.txt
LOW
COMP001
[COMP001] High cognitive complexity: Function `is_valid` has cognitive complexity 8 (Sona…
backtracking/crossword_puzzle_solver.py:4
LOW
COMP001
[COMP001] High cognitive complexity: Function `backtrack` has cognitive complexity 8 (Son…
backtracking/combination_sum.py:16
LOW
GHSA-5239-wwwm-4pmq
pygments: GHSA-5239-wwwm-4pmq
uv.lock
LOW
AIC003
Duplicated implementation block across source files
divide_and_conquer/heaps_algorithm_iter…:11
LOW
AIC003
Duplicated implementation block across source files
digital_image_processing/morphological_…:1
LOW
AIC003
Duplicated implementation block across source files
data_structures/queues/queue_by_two_sta…:39
LOW
AIC003
Duplicated implementation block across source files
data_structures/linked_list/singly_link…:341
LOW
AIC003
Duplicated implementation block across source files
data_compression/lempel_ziv_decompress.…:6
LOW
AIC003
Duplicated implementation block across source files
conversions/prefix_conversions_string.py:21
LOW
AIC003
Duplicated implementation block across source files
computer_vision/mosaic_augmentation.py:44
INFO
MINED079
[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) — off-…
strings/levenshtein_distance.py:33
INFO
MINED079
[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) — off-…
strings/damerau_levenshtein_distance.py:37
INFO
MINED079
[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) — off-…
sorts/iterative_merge_sort.py:70
INFO
MINED067
[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang f…
maths/allocation_number.py:6
INFO
MINED072
[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.
data_structures/stacks/stack.py:8
INFO
MINED072
[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.
data_structures/queues/priority_queue_u…:7
INFO
MINED072
[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.
data_structures/linked_list/has_loop.py:6
INFO
MINED062
[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.
data_structures/binary_tree/serialize_d…:7
INFO
MINED062
[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.
data_structures/binary_tree/mirror_bina…:13
INFO
MINED062
[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.
data_compression/lz77.py:37
INFO
MINED047
[MINED047] Emoji In Source: Emoji ✅ ❌ 🚀 in code/comments — common AI output unless explic…
ciphers/gronsfeld_cipher.py:14
INFO
MINED049
[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.
other/password.py:88
INFO
MINED049
[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.
hashes/enigma_machine.py:56
INFO
MINED049
[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.
ciphers/diffie.py:52
INFO
MINED043
[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr…
computer_vision/horn_schunck.py:9
INFO
MINED043
[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr…
ciphers/fractionated_morse_cipher.py:9
INFO
MINED043
[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr…
ciphers/a1z26.py:6
INFO
MINED064
[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services.
cellular_automata/one_dimensional.py:67
INFO
MINED064
[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services.
boolean_algebra/quine_mc_cluskey.py:140
INFO
MINED064
[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services.
backtracking/all_permutations.py:81
INFO
MINED050
[MINED050] Stub Only Function: Function declared but body is just pass, return None, rais…
backtracking/knight_tour.py:81
INFO
MINED050
[MINED050] Stub Only Function: Function declared but body is just pass, return None, rais…
backtracking/combination_sum.py:49
INFO
MINED050
[MINED050] Stub Only Function: Function declared but body is just pass, return None, rais…
backtracking/all_combinations.py:33