hkuds/rag-anything

[MINED107] Missing import: `html` used but not imported: The file uses `html.something(...)` but never imports `html`. This raises NameError at runtime the first time the line executes.

[MINED107] Missing import: `queue` used but not imported: The file uses `queue.something(...)` but never imports `queue`. This raises NameError at runtime the first time the line executes.

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED106] Phantom test coverage: test_image_format_parsing: Test function `test_image_format_parsing` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Add…

[MINED106] Phantom test coverage: test_connection: Test function `test_connection` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage with…

[MINED106] Phantom test coverage: test_chat_completion: Test function `test_chat_completion` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line cov…

[MINED106] Phantom test coverage: test_connection: Test function `test_connection` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage with…

[MINED106] Phantom test coverage: test_chat_completion: Test function `test_chat_completion` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line cov…

[MINED106] Phantom test coverage: test_office_document_parsing: Test function `test_office_document_parsing` runs code but contains no assert / expect / should call — it passes regardless of behaviou…

[MINED106] Phantom test coverage: test_connection: Test function `test_connection` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage with…

[MINED106] Phantom test coverage: test_embedding: Test function `test_embedding` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage withou…

[MINED106] Phantom test coverage: test_chat: Test function `test_chat` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage without verifyin…

[MINED106] Phantom test coverage: test_text_format_parsing: Test function `test_text_format_parsing` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds …

[MINED106] Phantom test coverage: test_connection: Test function `test_connection` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage with…

[MINED106] Phantom test coverage: test_chat_completion: Test function `test_chat_completion` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line cov…

[MINED106] Phantom test coverage: test_stsong_light_is_valid_cid_font: Test function `test_stsong_light_is_valid_cid_font` runs code but contains no assert / expect / should call — it passes regardle…

[MINED106] Phantom test coverage: test_invalid_cid_font_names_raise: Test function `test_invalid_cid_font_names_raise` runs code but contains no assert / expect / should call — it passes regardless o…

[MINED106] Phantom test coverage: test_all_valid_cid_cjk_font_names: Test function `test_all_valid_cid_cjk_font_names` runs code but contains no assert / expect / should call — it passes regardless o…

[MINED106] Phantom test coverage: test_finalize_raises: Test function `test_finalize_raises` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line cov…

[MINED106] Phantom test coverage: test_deprecated_mineru_parse_method: Test function `test_deprecated_mineru_parse_method` runs code but contains no assert / expect / should call — it passes regardle…

[MINED106] Phantom test coverage: test_invalid_parser_type: Test function `test_invalid_parser_type` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds …

[MINED106] Phantom test coverage: test_get_parser_rejects_unknown_parser: Test function `test_get_parser_rejects_unknown_parser` runs code but contains no assert / expect / should call — it passes re…

[MINED106] Phantom test coverage: test_parse_pdf_raises_import_error_when_pdf_renderer_missing: Test function `test_parse_pdf_raises_import_error_when_pdf_renderer_missing` runs code but contains no …

[MINED106] Phantom test coverage: test_docling_env_accepted_but_ignored: Test function `test_docling_env_accepted_but_ignored` runs code but contains no assert / expect / should call — it passes rega…

[MINED106] Phantom test coverage: test_docling_unknown_kwargs: Test function `test_docling_unknown_kwargs` runs code but contains no assert / expect / should call — it passes regardless of behaviour.…

[MINED106] Phantom test coverage: test_invalid_env_type: Test function `test_invalid_env_type` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line c…

[MINED106] Phantom test coverage: test_invalid_env_contents: Test function `test_invalid_env_contents` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Add…

[MINED106] Phantom test coverage: test_unknown_language_raises: Test function `test_unknown_language_raises` runs code but contains no assert / expect / should call — it passes regardless of behaviou…

[MINED108] `self.embedding_func_factory` used but never assigned in __init__: Method `initialize_rag` of class `LMStudioRAGIntegration` reads `self.embedding_func_factory`, but no assignment to it ex…

[MINED108] `self._make_embedding_func` used but never assigned in __init__: Method `initialize_rag` of class `MiniMaxRAGIntegration` reads `self._make_embedding_func`, but no assignment to it exists …

[MINED108] `self._make_embedding_func` used but never assigned in __init__: Method `initialize_rag` of class `OllamaRAGIntegration` reads `self._make_embedding_func`, but no assignment to it exists i…

[MINED108] `self.embedding_func_factory` used but never assigned in __init__: Method `initialize_rag` of class `VLLMRAGIntegration` reads `self.embedding_func_factory`, but no assignment to it exists…

[MINED108] `self.logger` used but never assigned in __init__: Method `setup_logging` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no class-level …

[MINED108] `self.logger` used but never assigned in __init__: Method `fix_json_format` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self.logger` used but never assigned in __init__: Method `create_fallback_evaluation` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.get_accuracy_evaluation_prompt` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.get_accuracy_evaluation_prompt`, but no…

[MINED108] `self.get_comprehensive_evaluation_prompt` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.get_comprehensive_evaluation_promp…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.fix_json_format` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.fix_json_format`, but no assignment to it exists in __…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.create_fallback_evaluation` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.create_fallback_evaluation`, but no assignm…

[MINED108] `self.fix_json_format` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.fix_json_format`, but no assignment to it exists in __…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.create_fallback_evaluation` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.create_fallback_evaluation`, but no assignm…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_single_answer` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no cla…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_rag_results` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_rag_results` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self.logger` used but never assigned in __init__: Method `evaluate_rag_results` of class `LLMAnswerEvaluator` reads `self.logger`, but no assignment to it exists in __init__ (and no class…

[MINED115] Action `actions/checkout` pinned to mutable ref `@v2`: `uses: actions/checkout@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED115] Action `actions/setup-python` pinned to mutable ref `@v2`: `uses: actions/setup-python@v2` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made …

[MINED115] Action `stefanzweifel/git-auto-commit-action` pinned to mutable ref `@v5`: `uses: stefanzweifel/git-auto-commit-action@v5` resolves at workflow-run time. Tags and branches can be re-pushed…

[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED115] Action `actions/setup-python` pinned to mutable ref `@v5`: `uses: actions/setup-python@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made …

[MINED115] Action `actions/upload-artifact` pinned to mutable ref `@v4`: `uses: actions/upload-artifact@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that…

[MINED115] Action `actions/download-artifact` pinned to mutable ref `@v4`: `uses: actions/download-artifact@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; …

[MINED115] Action `pypa/gh-action-pypi-publish` pinned to mutable ref `@release/v1`: `uses: pypa/gh-action-pypi-publish@release/v1` resolves at workflow-run time. Tags and branches can be re-pushed b…

[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED115] Action `actions/setup-python` pinned to mutable ref `@v5`: `uses: actions/setup-python@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made …

[MINED131] pre-commit hook `https://github.com/pre-commit/pre-commit-hooks` pinned to mutable rev `v5.0.0`: `.pre-commit-config.yaml` references `https://github.com/pre-commit/pre-commit-hooks` at `r…

[MINED131] pre-commit hook `https://github.com/astral-sh/ruff-pre-commit` pinned to mutable rev `v0.6.4`: `.pre-commit-config.yaml` references `https://github.com/astral-sh/ruff-pre-commit` at `rev: …

[MINED131] pre-commit hook `https://github.com/mgedmin/check-manifest` pinned to mutable rev `0.49`: `.pre-commit-config.yaml` references `https://github.com/mgedmin/check-manifest` at `rev: 0.49`. I…

[COMP001] High cognitive complexity: Function `attach_public_media_urls` has cognitive complexity 20 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to underst…

[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level.

[MINED109] Mutable default argument in `llm_model_func` (list): `def llm_model_func(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all …

[MINED109] Mutable default argument in `vision_model_func` (list): `def vision_model_func(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared acros…

[MINED109] Mutable default argument in `<lambda>` (list): `def <lambda>(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `<lambda>` (list): `def <lambda>(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `<lambda>` (list): `def <lambda>(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `llm_model_func` (list): `def llm_model_func(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all …

[MINED109] Mutable default argument in `vision_model_func` (list): `def vision_model_func(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared acros…

[MINED109] Mutable default argument in `llm_model_func` (list): `def llm_model_func(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all …

[MINED109] Mutable default argument in `vision_model_func` (list): `def vision_model_func(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared acros…

[MINED109] Mutable default argument in `llm_model_func` (list): `def llm_model_func(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all …

[MINED109] Mutable default argument in `vision_model_func` (list): `def vision_model_func(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared acros…

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED124] requirements.txt: `huggingface_hub` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typ…

[MINED124] requirements.txt: `lightrag-hku` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosq…

[MINED124] requirements.txt: `mineru[core]` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosq…

[MINED124] requirements.txt: `tqdm` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, ac…

[SEC034] Log Injection / Log Forging — unsanitized user input in log: User input is logged without sanitizing newlines or control characters. Attackers inject `\n` to forge fake log entries, hide tra…

[SEC034] Log Injection / Log Forging — unsanitized user input in log: User input is logged without sanitizing newlines or control characters. Attackers inject `\n` to forge fake log entries, hide tra…

Public web service has no security.txt

[COMP001] High cognitive complexity: Function `test_connection` has cognitive complexity 11 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nes…

[COMP001] High cognitive complexity: Function `set_prompt_language` has cognitive complexity 8 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — …

[COMP001] High cognitive complexity (and 2 more): Same pattern found in 2 additional files. Review if needed.

[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.

[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.

[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.

[MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) — file can be replaced/deleted between check and use.

[SEC020] Secret Printed to Logs (and 4 more): Same pattern found in 4 additional files. Review if needed.

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…