← Legacy view v2 (rp.*)

sevagdoke/tradebot

https://github.com/sevagdoke/tradebot.git · lang: python · LOC: · source: user_submitted

Quality

43.4

Grade D

Security

100.0

Findings

0 critical · 1 high

Status

completed

May 28, 2026 23:29

medium: 5 high: 1 low: 1

Top rules by occurrence

Rule	Severity	Count
`MINED124` requirements.txt entry has no version pin	medium	2
`CORE_NO_LICENSE` No LICENSE file	low	1
`CFG006` [CFG006] Missing .gitignore: No .gitignore file. Risk of co…	medium	1
`CORE_NO_README` No README file found	medium	1
`CORE_NO_CI` No CI/CD configuration found	medium	1
`CORE_NO_TESTS` No test files found	high	1

First 7 findings (severity-sorted)

high CORE_NO_TESTS No test files found

No test files found

medium CFG006 [CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.

· conf 1.00

[CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.

medium CORE_NO_CI No CI/CD configuration found

No CI/CD configuration found

medium CORE_NO_README No README file found

No README file found

medium MINED124 requirements.txt entry has no version pin CWE-1357

requirements.txt:1 · conf 0.90

[MINED124] requirements.txt: `discord.py` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosqua…

medium MINED124 requirements.txt entry has no version pin CWE-1357

requirements.txt:2 · conf 0.90

[MINED124] requirements.txt: `python-dotenv` has no version pin: Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typos…

low CORE_NO_LICENSE No LICENSE file

No LICENSE file

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/73b18c72-d51e-4e0c-bd57-6e0e83b55a1f/.