← Legacy view v2 (rp.*)

troyahmed18-max/trading-bot

https://github.com/troyahmed18-max/Trading-bot.git · lang: python · LOC: · source: user_submitted

Quality
42.3
Grade D
Security
100.0
Findings
15
0 critical · 6 high
Status
completed
May 27, 2026 21:40
high: 6 info: 4 medium: 4 low: 1
Top rules by occurrence
RuleSeverityCount
MINED108 self.attribute used but never assigned in __init__ high 5
SEC078 Python: requests without timeout high 2
MINED067 Python Requests No Timeout info 2
CFG006 [CFG006] Missing .gitignore: No .gitignore file. Risk of co… medium 1
CORE_NO_README No README file found medium 1
CORE_NO_CI No CI/CD configuration found medium 1
CORE_NO_TESTS No test files found high 1
CORE_NO_LICENSE No LICENSE file low 1
MINED111 Bare except continues silently medium 1
First 15 findings (severity-sorted)
high CORE_NO_TESTS No test files found 
No test files found
high MINED108 self.attribute used but never assigned in __init__ CWE-476
‏analyzer.py:22 · conf 1.00 
[MINED108] `self._fetch_coingecko` used but never assigned in __init__: Method `analyze` of class `MarketAnalyzer` reads `self._fetch_coingecko`, but no assignment to it exists in __init__ (and no cl…
high MINED108 self.attribute used but never assigned in __init__ CWE-476
‏analyzer.py:24 · conf 1.00 
[MINED108] `self._fetch_forex` used but never assigned in __init__: Method `analyze` of class `MarketAnalyzer` reads `self._fetch_forex`, but no assignment to it exists in __init__ (and no class-leve…
high MINED108 self.attribute used but never assigned in __init__ CWE-476
‏analyzer.py:26 · conf 1.00 
[MINED108] `self._fetch_stooq` used but never assigned in __init__: Method `analyze` of class `MarketAnalyzer` reads `self._fetch_stooq`, but no assignment to it exists in __init__ (and no class-leve…
high MINED108 self.attribute used but never assigned in __init__ CWE-476
‏analyzer.py:31 · conf 1.00 
[MINED108] `self._compute_indicators` used but never assigned in __init__: Method `analyze` of class `MarketAnalyzer` reads `self._compute_indicators`, but no assignment to it exists in __init__ (and…
high MINED108 self.attribute used but never assigned in __init__ CWE-476
‏analyzer.py:33 · conf 1.00 
[MINED108] `self._generate_signal` used but never assigned in __init__: Method `analyze` of class `MarketAnalyzer` reads `self._generate_signal`, but no assignment to it exists in __init__ (and no cl…
medium CFG006 [CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.
· conf 1.00 
[CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.
medium CORE_NO_CI No CI/CD configuration found 
No CI/CD configuration found
medium CORE_NO_README No README file found 
No README file found
medium MINED111 Bare except continues silently
‏analyzer.py:34 · conf 1.00 
[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.
low CORE_NO_LICENSE No LICENSE file 
No LICENSE file
info MINED067 Python Requests No Timeout CWE-400
‏analyzer.py:40 · conf 1.00 
[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever.
info MINED067 Python Requests No Timeout CWE-400
bot.py:24 · conf 1.00 
[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever.
info SEC078 Python: requests without timeout
‏analyzer.py:40 · conf 0.10 
[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-…
info SEC078 Python: requests without timeout
bot.py:24 · conf 0.10 
[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/12ca0e6d-f782-42bf-98ff-654d9820dd5d/.