kulturpool/edmlib

[MINED106] Phantom test coverage: test_validation_cho_and_aggregation_id: Test function `test_validation_cho_and_aggregation_id` runs code but contains no assert / expect / should call — it passes re…

[MINED106] Phantom test coverage: test_validation_skos_pref_label: Test function `test_validation_skos_pref_label` runs code but contains no assert / expect / should call — it passes regardless of be…

[MINED106] Phantom test coverage: test_validation_skos_pref_label_multi_none_lang_tags_fail: Test function `test_validation_skos_pref_label_multi_none_lang_tags_fail` runs code but contains no assert…

[MINED106] Phantom test coverage: test_validation_skos_pref_label_single_missing_tag_raises: Test function `test_validation_skos_pref_label_single_missing_tag_raises` runs code but contains no assert…

[MINED106] Phantom test coverage: test_edm_type_validation: Test function `test_edm_type_validation` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds …

[MINED106] Phantom test coverage: test_providedcho_missing_identifier_raises: Test function `test_providedcho_missing_identifier_raises` runs code but contains no assert / expect / should call — it p…

[MINED106] Phantom test coverage: test_providedcho_empty_identifier_raises: Test function `test_providedcho_empty_identifier_raises` runs code but contains no assert / expect / should call — it passe…

[MINED106] Phantom test coverage: test_for_valid_statements: Test function `test_for_valid_statements` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Add…

[MINED106] Phantom test coverage: test_for_invalid_statements: Test function `test_for_invalid_statements` runs code but contains no assert / expect / should call — it passes regardless of behaviour.…

[MINED106] Phantom test coverage: test_invalid_uriref_raises_exception: Test function `test_invalid_uriref_raises_exception` runs code but contains no assert / expect / should call — it passes regard…

[MINED106] Phantom test coverage: test_parse_edm_xml: Test function `test_parse_edm_xml` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverag…

[MINED106] Phantom test coverage: test_construct_programmatically: Test function `test_construct_programmatically` runs code but contains no assert / expect / should call — it passes regardless of be…

[MINED106] Phantom test coverage: test_validation_edm_type_with_lang_raises: Test function `test_validation_edm_type_with_lang_raises` runs code but contains no assert / expect / should call — it pas…

[MINED106] Phantom test coverage: test_parser_empty_element_and_invalid_ref: Test function `test_parser_empty_element_and_invalid_ref` runs code but contains no assert / expect / should call — it pas…

[MINED106] Phantom test coverage: test_missing_edm_rights: Test function `test_missing_edm_rights` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds li…

[MINED108] `self.label` used but never assigned in __init__: Method `get_triples` of class `EDM_BaseClass` reads `self.label`, but no assignment to it exists in __init__ (and no class-level fallback)…

[MINED108] `self.model_fields` used but never assigned in __init__: Method `get_triples` of class `EDM_BaseClass` reads `self.model_fields`, but no assignment to it exists in __init__ (and no class-l…

[MINED108] `self.value` used but never assigned in __init__: Method `is_optional` of class `CARDINALITY` reads `self.value`, but no assignment to it exists in __init__ (and no class-level fallback). …

[MINED108] `self.get_rdf_graph` used but never assigned in __init__: Method `serialize` of class `EDM_Record` reads `self.get_rdf_graph`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self.get_rdf_graph` used but never assigned in __init__: Method `get_framed_json_ld` of class `EDM_Record` reads `self.get_rdf_graph`, but no assignment to it exists in __init__ (and no c…

[MINED108] `self.get_many_ref` used but never assigned in __init__: Method `get_single_ref` of class `EDM_Parser` reads `self.get_many_ref`, but no assignment to it exists in __init__ (and no class-l…

[MINED108] `self.get_single_ref` used but never assigned in __init__: Method `parse_single_class` of class `EDM_Parser` reads `self.get_single_ref`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.get_aggregation` used but never assigned in __init__: Method `parse_single_class` of class `EDM_Parser` reads `self.get_aggregation`, but no assignment to it exists in __init__ (and …

[MINED108] `self.get_instance_triples` used but never assigned in __init__: Method `parse_single_class` of class `EDM_Parser` reads `self.get_instance_triples`, but no assignment to it exists in __in…

[MINED108] `self.get_webresources` used but never assigned in __init__: Method `parse_many_class` of class `EDM_Parser` reads `self.get_webresources`, but no assignment to it exists in __init__ (and …

[MINED108] `self.get_many_ref` used but never assigned in __init__: Method `parse_many_class` of class `EDM_Parser` reads `self.get_many_ref`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self.get_instance_triples` used but never assigned in __init__: Method `parse_many_class` of class `EDM_Parser` reads `self.get_instance_triples`, but no assignment to it exists in __init…

[MINED108] `self.parse_single_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_single_class`, but no assignment to it exists in __init__ (and no clas…

[MINED108] `self.parse_single_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_single_class`, but no assignment to it exists in __init__ (and no clas…

[MINED108] `self.parse_many_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_many_class`, but no assignment to it exists in __init__ (and no class-le…

[MINED108] `self.parse_many_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_many_class`, but no assignment to it exists in __init__ (and no class-le…

[MINED108] `self.parse_many_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_many_class`, but no assignment to it exists in __init__ (and no class-le…

[MINED108] `self.parse_many_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_many_class`, but no assignment to it exists in __init__ (and no class-le…

[MINED108] `self.parse_many_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_many_class`, but no assignment to it exists in __init__ (and no class-le…

[MINED108] `self.parse_many_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_many_class`, but no assignment to it exists in __init__ (and no class-le…

[MINED108] `self.parse_many_class` used but never assigned in __init__: Method `parse` of class `EDM_Parser` reads `self.parse_many_class`, but no assignment to it exists in __init__ (and no class-le…

[MINED108] `self.value` used but never assigned in __init__: Method `is_optional` of class `CARDINALITY` reads `self.value`, but no assignment to it exists in __init__ (and no class-level fallback). …

[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED118] Dockerfile FROM `python:3.12.9` not pinned by digest: `FROM python:3.12.9` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is po…

[MINED126] Workflow container/services image `registry.kpool.at/kulturpool/development-operations/ci-cd/docker-images/poetry-packaging/poetry-packaging:1.1.1` unpinned: `container/services image: reg…

[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-…

[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work comple…

Docker build context has no .dockerignore

[MINED109] Mutable default argument in `cached_loader` (dict): `def cached_loader(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all ca…

[COMP001] High cognitive complexity: Function `get_triples` has cognitive complexity 13 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested …

[COMP001] High cognitive complexity: Function `get_rdf_graph` has cognitive complexity 12 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — neste…

[COMP001] High cognitive complexity: Function `assert_valid_statement` has cognitive complexity 10 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understan…

No LICENSE file

Compose service does not declare a runtime user

Compose service lacks no-new-privileges hardening

Dockerfile keeps pip download cache

[COMP001] High cognitive complexity (and 1 more): Same pattern found in 1 additional files. Review if needed.

[MINED043] Http Not Https (and 1 more): Same pattern found in 1 additional files. Review if needed.

[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.

[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.

[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever.