encode/starlette

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and SystemExit from working.

[MINED106] Phantom test coverage: test_client_factory: Test function `test_client_factory` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line cover…

[MINED106] Phantom test coverage: test_lifespan_app_subclass: Test function `test_lifespan_app_subclass` runs code but contains no assert / expect / should call — it passes regardless of behaviour. A…

[MINED106] Phantom test coverage: test_config_types: Test function `test_config_types` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage …

[MINED106] Phantom test coverage: test_missing_env_file_raises: Test function `test_missing_env_file_raises` runs code but contains no assert / expect / should call — it passes regardless of behaviou…

[MINED106] Phantom test coverage: test_mutable_headers_merge_not_mapping: Test function `test_mutable_headers_merge_not_mapping` runs code but contains no assert / expect / should call — it passes re…

[MINED106] Phantom test coverage: test_websockets_should_raise: Test function `test_websockets_should_raise` runs code but contains no assert / expect / should call — it passes regardless of behaviou…

[MINED106] Phantom test coverage: test_handlers_annotations: Test function `test_handlers_annotations` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Add…

[MINED106] Phantom test coverage: test_request_disconnect: Test function `test_request_disconnect` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds li…

[MINED106] Phantom test coverage: test_request_url_outside_starlette_context: Test function `test_request_url_outside_starlette_context` runs code but contains no assert / expect / should call — it p…

[MINED106] Phantom test coverage: test_standalone_ws_route_does_not_match: Test function `test_standalone_ws_route_does_not_match` runs code but contains no assert / expect / should call — it passes …

[MINED106] Phantom test coverage: test_lifespan_state_unsupported: Test function `test_lifespan_state_unsupported` runs code but contains no assert / expect / should call — it passes regardless of be…

[MINED106] Phantom test coverage: test_raise_on_shutdown: Test function `test_raise_on_shutdown` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line…

[MINED106] Phantom test coverage: test_duplicated_param_names: Test function `test_duplicated_param_names` runs code but contains no assert / expect / should call — it passes regardless of behaviour.…

[MINED106] Phantom test coverage: test_mount_asgi_app_with_middleware_url_path_for: Test function `test_mount_asgi_app_with_middleware_url_path_for` runs code but contains no assert / expect / should…

[MINED106] Phantom test coverage: test_unknown_status: Test function `test_unknown_status` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line cover…

[MINED106] Phantom test coverage: test_error_on_startup: Test function `test_error_on_startup` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line c…

[MINED106] Phantom test coverage: test_exception_in_middleware: Test function `test_exception_in_middleware` runs code but contains no assert / expect / should call — it passes regardless of behaviou…

[MINED106] Phantom test coverage: test_timeout_deprecation: Test function `test_timeout_deprecation` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds …

[MINED106] Phantom test coverage: test_duplicate_close: Test function `test_duplicate_close` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line cov…

[MINED106] Phantom test coverage: test_send_json_invalid_mode: Test function `test_send_json_invalid_mode` runs code but contains no assert / expect / should call — it passes regardless of behaviour.…

[MINED106] Phantom test coverage: test_receive_json_invalid_mode: Test function `test_receive_json_invalid_mode` runs code but contains no assert / expect / should call — it passes regardless of beha…

[MINED106] Phantom test coverage: test_receive_text_before_accept: Test function `test_receive_text_before_accept` runs code but contains no assert / expect / should call — it passes regardless of be…

[MINED106] Phantom test coverage: test_receive_bytes_before_accept: Test function `test_receive_bytes_before_accept` runs code but contains no assert / expect / should call — it passes regardless of …

[MINED106] Phantom test coverage: test_receive_json_before_accept: Test function `test_receive_json_before_accept` runs code but contains no assert / expect / should call — it passes regardless of be…

[MINED106] Phantom test coverage: test_send_before_accept: Test function `test_send_before_accept` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds li…

[MINED108] `self.get` used but never assigned in __init__: Method `__call__` of class `Config` reads `self.get`, but no assignment to it exists in __init__ (and no class-level fallback). This raises …

[MINED108] `self._perform_cast` used but never assigned in __init__: Method `get` of class `Config` reads `self._perform_cast`, but no assignment to it exists in __init__ (and no class-level fallback…

[MINED108] `self.on_field_start` used but never assigned in __init__: Method `parse` of class `FormParser` reads `self.on_field_start`, but no assignment to it exists in __init__ (and no class-level …

[MINED108] `self.on_field_name` used but never assigned in __init__: Method `parse` of class `FormParser` reads `self.on_field_name`, but no assignment to it exists in __init__ (and no class-level fa…

[MINED108] `self.on_field_data` used but never assigned in __init__: Method `parse` of class `FormParser` reads `self.on_field_data`, but no assignment to it exists in __init__ (and no class-level fa…

[MINED108] `self.on_field_end` used but never assigned in __init__: Method `parse` of class `FormParser` reads `self.on_field_end`, but no assignment to it exists in __init__ (and no class-level fall…

[MINED108] `self.on_end` used but never assigned in __init__: Method `parse` of class `FormParser` reads `self.on_end`, but no assignment to it exists in __init__ (and no class-level fallback). This …

[MINED108] `self.on_part_begin` used but never assigned in __init__: Method `parse` of class `MultiPartParser` reads `self.on_part_begin`, but no assignment to it exists in __init__ (and no class-lev…

[MINED108] `self.on_part_data` used but never assigned in __init__: Method `parse` of class `MultiPartParser` reads `self.on_part_data`, but no assignment to it exists in __init__ (and no class-level…

[MINED108] `self.on_part_end` used but never assigned in __init__: Method `parse` of class `MultiPartParser` reads `self.on_part_end`, but no assignment to it exists in __init__ (and no class-level f…

[MINED108] `self.on_header_field` used but never assigned in __init__: Method `parse` of class `MultiPartParser` reads `self.on_header_field`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self.on_header_value` used but never assigned in __init__: Method `parse` of class `MultiPartParser` reads `self.on_header_value`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self.on_header_end` used but never assigned in __init__: Method `parse` of class `MultiPartParser` reads `self.on_header_end`, but no assignment to it exists in __init__ (and no class-lev…

[MINED108] `self.on_headers_finished` used but never assigned in __init__: Method `parse` of class `MultiPartParser` reads `self.on_headers_finished`, but no assignment to it exists in __init__ (and …

[MINED108] `self.on_end` used but never assigned in __init__: Method `parse` of class `MultiPartParser` reads `self.on_end`, but no assignment to it exists in __init__ (and no class-level fallback). …

[MINED108] `self._remove_converter` used but never assigned in __init__: Method `get_endpoints` of class `BaseSchemaGenerator` reads `self._remove_converter`, but no assignment to it exists in __init…

[MINED108] `self.get_endpoints` used but never assigned in __init__: Method `get_endpoints` of class `BaseSchemaGenerator` reads `self.get_endpoints`, but no assignment to it exists in __init__ (and …

[MINED108] `self._remove_converter` used but never assigned in __init__: Method `get_endpoints` of class `BaseSchemaGenerator` reads `self._remove_converter`, but no assignment to it exists in __init…

[MINED108] `self._remove_converter` used but never assigned in __init__: Method `get_endpoints` of class `BaseSchemaGenerator` reads `self._remove_converter`, but no assignment to it exists in __init…

[MINED108] `self.get_schema` used but never assigned in __init__: Method `OpenAPIResponse` of class `BaseSchemaGenerator` reads `self.get_schema`, but no assignment to it exists in __init__ (and no c…

[MINED108] `self.get_endpoints` used but never assigned in __init__: Method `get_schema` of class `SchemaGenerator` reads `self.get_endpoints`, but no assignment to it exists in __init__ (and no clas…

[MINED108] `self.parse_docstring` used but never assigned in __init__: Method `get_schema` of class `SchemaGenerator` reads `self.parse_docstring`, but no assignment to it exists in __init__ (and no …

[MINED108] `self.entered` used but never assigned in __init__: Method `__aenter__` of class `AwaitableOrContextManagerWrapper` reads `self.entered`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.entered` used but never assigned in __init__: Method `__aenter__` of class `AwaitableOrContextManagerWrapper` reads `self.entered`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.entered` used but never assigned in __init__: Method `__aexit__` of class `AwaitableOrContextManagerWrapper` reads `self.entered`, but no assignment to it exists in __init__ (and no …

[SEC013] Path Traversal — User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files.

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC030] Open Redirect — user-controlled redirect target: Redirect target is taken directly from user input without validating that the destination is local to the site. Attackers craft phishing URLs…

[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work comple…

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass…

[SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass…

[SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass…

Public web service has no security.txt

[COMP001] High cognitive complexity: Function `dispatch` has cognitive complexity 8 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested bran…

[COMP001] High cognitive complexity: Function `decode` has cognitive complexity 14 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested branc…

[COMP001] High cognitive complexity: Function `wrapped_app` has cognitive complexity 14 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested …

[COMP001] High cognitive complexity (and 18 more): Same pattern found in 18 additional files. Review if needed.

[MINED001] Bare Except Pass (and 3 more): Same pattern found in 3 additional files. Review if needed.

[MINED050] Stub Only Function (and 7 more): Same pattern found in 7 additional files. Review if needed.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED072] Python Pass Only Class (and 1 more): Same pattern found in 1 additional files. Review if needed.

[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.

[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.

[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input (and 1 more): Same pattern found in 1 additional files. Review if needed.

[SEC127] AI agent stub — TODO: implement / pass placeholder body (and 1 more): Same pattern found in 1 additional files. Review if needed.