yt-dlp/yt-dlp

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).

[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).

[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).

[MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and SystemExit from working.

[MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and SystemExit from working.

[MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and SystemExit from working.

[MINED099] Hardcoded Secret: API key, AWS access key, GitHub token, Slack token, OpenAI key, or private key embedded directly in source. AI assistants frequently leak demo credentials.

[MINED106] Phantom test coverage: test_setup_variables: Test function `test_setup_variables` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line cov…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_CanGetThroughUnaltered: Test function `test_remove_marked_arrange_sponsors_CanGetThroughUnaltered` runs code but contains no asse…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithSponsors: Test function `test_remove_marked_arrange_sponsors_ChapterWithSponsors` runs code but contains no assert / e…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_SponsorBlockChapters: Test function `test_remove_marked_arrange_sponsors_SponsorBlockChapters` runs code but contains no assert /…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_UniqueNamesForOverlappingSponsors: Test function `test_remove_marked_arrange_sponsors_UniqueNamesForOverlappingSponsors` runs cod…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithCuts: Test function `test_remove_marked_arrange_sponsors_ChapterWithCuts` runs code but contains no assert / expect / …

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithSponsorsAndCuts: Test function `test_remove_marked_arrange_sponsors_ChapterWithSponsorsAndCuts` runs code but contains…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithSponsorCutInTheMiddle: Test function `test_remove_marked_arrange_sponsors_ChapterWithSponsorCutInTheMiddle` runs code …

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithCutHidingSponsor: Test function `test_remove_marked_arrange_sponsors_ChapterWithCutHidingSponsor` runs code but contai…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithAdjacentSponsors: Test function `test_remove_marked_arrange_sponsors_ChapterWithAdjacentSponsors` runs code but contai…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithAdjacentCuts: Test function `test_remove_marked_arrange_sponsors_ChapterWithAdjacentCuts` runs code but contains no as…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithOverlappingSponsors: Test function `test_remove_marked_arrange_sponsors_ChapterWithOverlappingSponsors` runs code but …

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithOverlappingCuts: Test function `test_remove_marked_arrange_sponsors_ChapterWithOverlappingCuts` runs code but contains…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithRunsOfOverlappingSponsors: Test function `test_remove_marked_arrange_sponsors_ChapterWithRunsOfOverlappingSponsors` ru…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithRunsOfOverlappingCuts: Test function `test_remove_marked_arrange_sponsors_ChapterWithRunsOfOverlappingCuts` runs code …

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_OverlappingSponsorsDifferentTitlesAfterCut: Test function `test_remove_marked_arrange_sponsors_OverlappingSponsorsDifferentTitles…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_SponsorsNoLongerOverlapAfterCut: Test function `test_remove_marked_arrange_sponsors_SponsorsNoLongerOverlapAfterCut` runs code bu…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_SponsorsStillOverlapAfterCut: Test function `test_remove_marked_arrange_sponsors_SponsorsStillOverlapAfterCut` runs code but cont…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChapterWithRunsOfOverlappingSponsorsAndCuts: Test function `test_remove_marked_arrange_sponsors_ChapterWithRunsOfOverlappingSpons…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_SponsorOverlapsMultipleChapters: Test function `test_remove_marked_arrange_sponsors_SponsorOverlapsMultipleChapters` runs code bu…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_CutOverlapsMultipleChapters: Test function `test_remove_marked_arrange_sponsors_CutOverlapsMultipleChapters` runs code but contai…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_SponsorsWithinSomeChaptersAndOverlappingOthers: Test function `test_remove_marked_arrange_sponsors_SponsorsWithinSomeChaptersAndO…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_CutsWithinSomeChaptersAndOverlappingOthers: Test function `test_remove_marked_arrange_sponsors_CutsWithinSomeChaptersAndOverlappi…

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChaptersAfterLastSponsor: Test function `test_remove_marked_arrange_sponsors_ChaptersAfterLastSponsor` runs code but contains no …

[MINED106] Phantom test coverage: test_remove_marked_arrange_sponsors_ChaptersAfterLastCut: Test function `test_remove_marked_arrange_sponsors_ChaptersAfterLastCut` runs code but contains no assert /…

[MINED108] `self._format_groups` used but never assigned in __init__: Method `__str__` of class `Changelog` reads `self._format_groups`, but no assignment to it exists in __init__ (and no class-level…

[MINED108] `self.format_module` used but never assigned in __init__: Method `_format_groups` of class `Changelog` reads `self.format_module`, but no assignment to it exists in __init__ (and no class-…

[MINED108] `self._format_group` used but never assigned in __init__: Method `format_module` of class `Changelog` reads `self._format_group`, but no assignment to it exists in __init__ (and no class-l…

[MINED108] `self._prepare_cleanup_misc_items` used but never assigned in __init__: Method `_format_group` of class `Changelog` reads `self._prepare_cleanup_misc_items`, but no assignment to it exists…

[MINED108] `self.format_single_change` used but never assigned in __init__: Method `_format_group` of class `Changelog` reads `self.format_single_change`, but no assignment to it exists in __init__ (…

[MINED108] `self.format_single_change` used but never assigned in __init__: Method `_format_group` of class `Changelog` reads `self.format_single_change`, but no assignment to it exists in __init__ (…

[MINED108] `self.format_single_change` used but never assigned in __init__: Method `_format_group` of class `Changelog` reads `self.format_single_change`, but no assignment to it exists in __init__ (…

[MINED108] `self._format_message_link` used but never assigned in __init__: Method `_prepare_cleanup_misc_items` of class `Changelog` reads `self._format_message_link`, but no assignment to it exists…

[MINED108] `self._format_message_link` used but never assigned in __init__: Method `format_single_change` of class `Changelog` reads `self._format_message_link`, but no assignment to it exists in __i…

[MINED108] `self._format_issues` used but never assigned in __init__: Method `format_single_change` of class `Changelog` reads `self._format_issues`, but no assignment to it exists in __init__ (and n…

[MINED108] `self._format_authors` used but never assigned in __init__: Method `format_single_change` of class `Changelog` reads `self._format_authors`, but no assignment to it exists in __init__ (and…

[MINED108] `self._format_message_link` used but never assigned in __init__: Method `format_single_change` of class `Changelog` reads `self._format_message_link`, but no assignment to it exists in __i…

[MINED108] `self._format_authors` used but never assigned in __init__: Method `format_single_change` of class `Changelog` reads `self._format_authors`, but no assignment to it exists in __init__ (and…

[MINED108] `self.repo_url` used but never assigned in __init__: Method `_format_message_link` of class `Changelog` reads `self.repo_url`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self.repo_url` used but never assigned in __init__: Method `_format_issues` of class `Changelog` reads `self.repo_url`, but no assignment to it exists in __init__ (and no class-level fall…

[MINED108] `self._commits` used but never assigned in __init__: Method `__iter__` of class `CommitRange` reads `self._commits`, but no assignment to it exists in __init__ (and no class-level fallback…

[MINED108] `self._commits` used but never assigned in __init__: Method `__len__` of class `CommitRange` reads `self._commits`, but no assignment to it exists in __init__ (and no class-level fallback)…

[MINED108] `self._commits` used but never assigned in __init__: Method `__contains__` of class `CommitRange` reads `self._commits`, but no assignment to it exists in __init__ (and no class-level fall…

[MINED108] `self._end` used but never assigned in __init__: Method `_get_commits_and_fixes` of class `CommitRange` reads `self._end`, but no assignment to it exists in __init__ (and no class-level fa…

[MINED108] `self._start` used but never assigned in __init__: Method `_get_commits_and_fixes` of class `CommitRange` reads `self._start`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self._start` used but never assigned in __init__: Method `_get_commits_and_fixes` of class `CommitRange` reads `self._start`, but no assignment to it exists in __init__ (and no class-leve…

[MINED108] `self._start` used but never assigned in __init__: Method `apply_overrides` of class `CommitRange` reads `self._start`, but no assignment to it exists in __init__ (and no class-level fallb…

[MINED108] `self._commits` used but never assigned in __init__: Method `apply_overrides` of class `CommitRange` reads `self._commits`, but no assignment to it exists in __init__ (and no class-level f…

[MINED108] `self._commits` used but never assigned in __init__: Method `apply_overrides` of class `CommitRange` reads `self._commits`, but no assignment to it exists in __init__ (and no class-level f…

[MINED108] `self._commits` used but never assigned in __init__: Method `apply_overrides` of class `CommitRange` reads `self._commits`, but no assignment to it exists in __init__ (and no class-level f…

[MINED112] FastAPI PATCH sys.platform has no auth: Handler `test_sanitize_path` is registered with router/app.patch(...) but no Depends/Security parameter is declared and no auth marker appears in th…

[SEC013] Path Traversal — User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files.

[SEC013] Path Traversal — User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files.

[SEC013] Path Traversal — User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files.

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC043] Secret stored in Odoo ir.config_parameter — broadly readable: ir.config_parameter is readable by any user with read access on the model — typically all internal users. Storing API keys, OAut…

[SEC043] Secret stored in Odoo ir.config_parameter — broadly readable: ir.config_parameter is readable by any user with read access on the model — typically all internal users. Storing API keys, OAut…

[SEC043] Secret stored in Odoo ir.config_parameter — broadly readable: ir.config_parameter is readable by any user with read access on the model — typically all internal users. Storing API keys, OAut…

[SEC061] JWT in source: Three-part JWT (likely signed token). Even if expired, may leak structure or claims. Ported from gitleaks jwt (MIT).

[SEC061] JWT in source: Three-part JWT (likely signed token). Even if expired, may leak structure or claims. Ported from gitleaks jwt (MIT).

[SEC061] JWT in source: Three-part JWT (likely signed token). Even if expired, may leak structure or claims. Ported from gitleaks jwt (MIT).

[SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).

[COMP001] High cognitive complexity: Function `sort_ies` has cognitive complexity 18 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested bra…

Docker final stage has no non-root USER

Docker build context has no .dockerignore

[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level.

[MINED109] Mutable default argument in `read_file` (list): `def read_file(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `read_file` (list): `def read_file(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `read_file` (list): `def read_file(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `_sort_formats` (list): `def _sort_formats(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all ca…

[MINED109] Mutable default argument in `test` (dict): `def test(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it i…

[MINED109] Mutable default argument in `get_info` (dict): `def get_info(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `_assemble_formats` (dict): `def _assemble_formats(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared acros…

[MINED109] Mutable default argument in `_extract_adaptive_formats` (dict): `def _extract_adaptive_formats(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time …

[MINED109] Mutable default argument in `_call_api` (dict): `def _call_api(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `_call_bamgrid_api` (dict): `def _call_bamgrid_api(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared acros…

[MINED109] Mutable default argument in `_entries` (list): `def _entries(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `_extract_embeds` (dict): `def _extract_embeds(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across al…

[MINED109] Mutable default argument in `_call_api` (dict): `def _call_api(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `_call_api` (dict): `def _call_api(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `_call_api` (dict): `def _call_api(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `_call_api` (dict): `def _call_api(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `_call_api` (dict): `def _call_api(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mut…

[MINED109] Mutable default argument in `_entries` (dict): `def _entries(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutat…

[MINED109] Mutable default argument in `_series_entries` (dict): `def _series_entries(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across al…

[MINED109] Mutable default argument in `_extract_cvp_info` (dict): `def _extract_cvp_info(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared acros…

[MINED109] Mutable default argument in `resf` (dict): `def resf(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it i…

[MINED109] Mutable default argument in `_set_from_options_callback` (dict): `def _set_from_options_callback(... = []/{}/set())` — Python's default value is constructed ONCE at function definition tim…

[MINED109] Mutable default argument in `_wait_for_video` (dict): `def _wait_for_video(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time and shared across al…

[MINED109] Mutable default argument in `_delete_downloaded_files` (dict): `def _delete_downloaded_files(... = []/{}/set())` — Python's default value is constructed ONCE at function definition time an…

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[SEC003] Hardcoded Secret: Hardcoded secret key found in source code.

[SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing man-in-the-middle attacks.

[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.

[SEC041] Tabnabbing — target="_blank" without rel="noopener noreferrer": <a target="_blank"> without rel="noopener noreferrer" leaks window.opener to the opened page. The opened page can then run win…

[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even admin-stored data — is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ …

[SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass…

[SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass…

[SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass…

Public web service has no security.txt

[COMP001] High cognitive complexity: Function `build_completion` has cognitive complexity 9 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nes…

[COMP001] High cognitive complexity: Function `_convert_code_blocks` has cognitive complexity 10 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand …

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service does not declare a runtime user

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

Compose service lacks no-new-privileges hardening

[SEC118] UUIDv1 / UUIDv3 used for security-sensitive identifier: UUIDv1 encodes the MAC address and timestamp, making it predictable. Used as a session token or password-reset key, it's enumerable.

[SEC132] String concat where the language has interpolation (AI style drift): String built by concatenation where the language has cleaner interpolation (Python f-strings since 3.6, JS template liter…

[SEC132] String concat where the language has interpolation (AI style drift): String built by concatenation where the language has cleaner interpolation (Python f-strings since 3.6, JS template liter…

[SEC132] String concat where the language has interpolation (AI style drift): String built by concatenation where the language has cleaner interpolation (Python f-strings since 3.6, JS template liter…

robots.txt does not advertise a sitemap

[COMP001] High cognitive complexity (and 391 more): Same pattern found in 391 additional files. Review if needed.

Dockerfile base image is selected through a build variable

Dockerfile base image is selected through a build variable

[MINED001] Bare Except Pass (and 3 more): Same pattern found in 3 additional files. Review if needed.

[MINED004] Weak Crypto (and 690 more): Same pattern found in 690 additional files. Review if needed.

[MINED043] Http Not Https (and 359 more): Same pattern found in 359 additional files. Review if needed.

[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.

[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.

[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.

[MINED047] Emoji In Source (and 5 more): Same pattern found in 5 additional files. Review if needed.

[MINED047] Emoji In Source: Emoji ✅ ❌ 🚀 in code/comments — common AI output unless explicitly requested.

[MINED047] Emoji In Source: Emoji ✅ ❌ 🚀 in code/comments — common AI output unless explicitly requested.

[MINED047] Emoji In Source: Emoji ✅ ❌ 🚀 in code/comments — common AI output unless explicitly requested.

[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.

[MINED050] Stub Only Function (and 19 more): Same pattern found in 19 additional files. Review if needed.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED053] Placeholder Default Username: [email protected] / [email protected] / admin/admin / changeme — typical AI placeholder credentials.

[MINED053] Placeholder Default Username: [email protected] / [email protected] / admin/admin / changeme — typical AI placeholder credentials.

[MINED057] Todo Bomb: Code path with a TODO/FIXME/HACK comment that gates correctness — left for later but never resolved.

[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.

[MINED072] Python Pass Only Class (and 2 more): Same pattern found in 2 additional files. Review if needed.

[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.

[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.

[MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in.

[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles.

[SEC002] Hardcoded API Key (and 4 more): Same pattern found in 4 additional files. Review if needed.

[SEC013] Path Traversal — User Input in File Path (and 1 more): Same pattern found in 1 additional files. Review if needed.

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input (and 346 more): Same pattern found in 346 additional files. Review if needed.

[SEC043] Secret stored in Odoo ir.config_parameter — broadly readable (and 6 more): Same pattern found in 6 additional files. Review if needed.

[SEC061] JWT in source (and 1 more): Same pattern found in 1 additional files. Review if needed.

[SEC103] LDAP injection — non-constant search filter (and 35 more): Same pattern found in 35 additional files. Review if needed.

[SEC127] AI agent stub — TODO: implement / pass placeholder body (and 1 more): Same pattern found in 1 additional files. Review if needed.

[SEC128] Async function without await — fire-and-forget Promise (AI mistake) (and 66 more): Same pattern found in 66 additional files. Review if needed.