microsoft/vibevoice

[COMP001] High cognitive complexity: Function `main` has cognitive complexity 32 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested branche…

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED106] Phantom test coverage: test_transcription_with_recovery: Test function `test_transcription_with_recovery` runs code but contains no assert / expect / should call — it passes regardless of …

[MINED106] Phantom test coverage: test_transcription_with_hotwords: Test function `test_transcription_with_hotwords` runs code but contains no assert / expect / should call — it passes regardless of …

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.available_voices` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.available_voices`, but no assignment to it exists in __init__ (…

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.available_voices` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.available_voices`, but no assignment to it exists in __init__ (…

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.available_voices` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.available_voices`, but no assignment to it exists in __init__ (…

[MINED108] `self.available_voices` used but never assigned in __init__: Method `setup_voice_presets` of class `VoiceMapper` reads `self.available_voices`, but no assignment to it exists in __init__ (…

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `get_voice_path` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no clas…

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `get_voice_path` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no clas…

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `get_voice_path` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no clas…

[MINED108] `self.voice_presets` used but never assigned in __init__: Method `get_voice_path` of class `VoiceMapper` reads `self.voice_presets`, but no assignment to it exists in __init__ (and no clas…

[MINED108] `self._prepare_generation_config` used but never assigned in __init__: Method `transcribe_batch` of class `VibeVoiceASRBatchInference` reads `self._prepare_generation_config`, but no assig…

[MINED108] `self.transcribe_batch` used but never assigned in __init__: Method `transcribe_with_batching` of class `VibeVoiceASRBatchInference` reads `self.transcribe_batch`, but no assignment to it …

[MINED108] `self._format_transcription` used but never assigned in __init__: Method `__getitem__` of class `VibeVoiceASRDataset` reads `self._format_transcription`, but no assignment to it exists in …

[MINED108] `self._ensure_audio_encoder_dtype` used but never assigned in __init__: Method `forward` of class `VibeVoiceAudioEncoder` reads `self._ensure_audio_encoder_dtype`, but no assignment to it …

[MINED108] `self.ctx` used but never assigned in __init__: Method `get_hf_config` of class `VibeVoiceProcessingInfo` reads `self.ctx`, but no assignment to it exists in __init__ (and no class-level f…

[MINED108] `self.ctx` used but never assigned in __init__: Method `get_feature_extractor` of class `VibeVoiceProcessingInfo` reads `self.ctx`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self.get_tokenizer` used but never assigned in __init__: Method `get_audio_token_info` of class `VibeVoiceProcessingInfo` reads `self.get_tokenizer`, but no assignment to it exists in __i…

[MINED108] `self.get_hf_config` used but never assigned in __init__: Method `get_mm_max_tokens_per_item` of class `VibeVoiceProcessingInfo` reads `self.get_hf_config`, but no assignment to it exists …

[MINED108] `self.info` used but never assigned in __init__: Method `_get_max_audio_samples` of class `VibeVoiceDummyInputsBuilder` reads `self.info`, but no assignment to it exists in __init__ (and n…

[MINED108] `self.info` used but never assigned in __init__: Method `get_dummy_text` of class `VibeVoiceDummyInputsBuilder` reads `self.info`, but no assignment to it exists in __init__ (and no class-…

[MINED108] `self._get_max_audio_samples` used but never assigned in __init__: Method `get_dummy_mm_data` of class `VibeVoiceDummyInputsBuilder` reads `self._get_max_audio_samples`, but no assignment …

[MINED108] `self._get_dummy_audios` used but never assigned in __init__: Method `get_dummy_mm_data` of class `VibeVoiceDummyInputsBuilder` reads `self._get_dummy_audios`, but no assignment to it exis…

Agent control bridge may listen on a network interface without visible auth

Agent control bridge may listen on a network interface without visible auth

[AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks but does not define .repobility/access.yml or equivalent authorization documentation.

[AUC012] FastAPI interactive docs may be exposed by framework defaults: FastAPI exposes /docs, /redoc, and /openapi.json by default. Public production APIs should explicitly disable those defaults, p…

No CI/CD configuration found

[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level.

[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

Public web service has no security.txt

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

[AUC005] No authorization-focused tests detected: No test files with common authorization, ownership, 403, admin, or super_admin assertions were found.

[COMP001] High cognitive complexity: Function `get_voice_path` has cognitive complexity 8 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — neste…

[COMP001] High cognitive complexity: Function `main` has cognitive complexity 8 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested branches…

[COMP001] High cognitive complexity (and 5 more): Same pattern found in 5 additional files. Review if needed.

[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[SEC011] Unsafe PyTorch Model Loading: torch.load() uses pickle internally and can execute arbitrary code from untrusted model files.

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even admin-stored data — is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ …

[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even admin-stored data — is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ …

[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even admin-stored data — is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ …