{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-14T00:18:26.176423Z","repo":{"ref":{"host":"github.com","owner":"youssofal","name":"MTPLX"},"default_branch":"main","clone_url":"https://github.com/youssofal/MTPLX.git","html_url":"https://github.com/youssofal/MTPLX","description":"The fastest way to run Qwen 3.8 Flash Next, Qwen 3.8 27B and Ternary Bonsai 2 27B on a Mac: 125 tok/s in OpenCode on an M5 Max, and a 27B model on 16 GB Macs. Native MTP speculative decoding on Apple Silicon, exact at any temperature. OpenAI and Anthropic compatible local server.","stars":2704,"forks":213,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":38902,"primary_language":"Python","license_spdx":"Apache-2.0","created_at":"2026-05-02T00:59:09Z","pushed_at":"2026-11-07T10:32:58Z","security_policy_url":"https://github.com/youssofal/MTPLX/security/policy","distribution":{"owner_created_at":"2020-06-04T10:49:34Z","owner_type":"User","release_assets":[{"name":"mtplx-2.12.3-py3-none-any.whl","size":3358973,"download_count":30,"release_tag":"v2.12.3","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.3/mtplx-2.12.3-py3-none-any.whl"},{"name":"MTPLX-2.12.3.dmg","size":64904587,"download_count":2572,"release_tag":"v2.12.3","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.3/MTPLX-2.12.3.dmg"},{"name":"mtplx-2.12.3.tar.gz","size":5743167,"download_count":1783,"release_tag":"v2.12.3","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.3/mtplx-2.12.3.tar.gz"},{"name":"SHA256SUMS","size":265,"download_count":28,"release_tag":"v2.12.3","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.3/SHA256SUMS"},{"name":"mtplx-2.12.2-py3-none-any.whl","size":3328884,"download_count":91,"release_tag":"v2.12.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.2/mtplx-2.12.2-py3-none-any.whl"},{"name":"MTPLX-2.12.2.dmg","size":65945789,"download_count":8963,"release_tag":"v2.12.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.2/MTPLX-2.12.2.dmg"},{"name":"mtplx-2.12.2.tar.gz","size":5636233,"download_count":4474,"release_tag":"v2.12.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.2/mtplx-2.12.2.tar.gz"},{"name":"SHA256SUMS","size":265,"download_count":165,"release_tag":"v2.12.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.2/SHA256SUMS"},{"name":"mtplx-2.12.1-py3-none-any.whl","size":3326480,"download_count":4,"release_tag":"v2.12.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.1/mtplx-2.12.1-py3-none-any.whl"},{"name":"MTPLX-2.12.1.dmg","size":65976921,"download_count":192,"release_tag":"v2.12.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.1/MTPLX-2.12.1.dmg"},{"name":"mtplx-2.12.1.tar.gz","size":5628853,"download_count":39,"release_tag":"v2.12.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.1/mtplx-2.12.1.tar.gz"},{"name":"SHA256SUMS","size":265,"download_count":6,"release_tag":"v2.12.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.1/SHA256SUMS"},{"name":"mtplx-2.12.0-py3-none-any.whl","size":3065667,"download_count":41,"release_tag":"v2.12.0","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.0/mtplx-2.12.0-py3-none-any.whl"},{"name":"MTPLX-2.12.0.dmg","size":67624677,"download_count":4730,"release_tag":"v2.12.0","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.0/MTPLX-2.12.0.dmg"},{"name":"mtplx-2.12.0.tar.gz","size":4966412,"download_count":2120,"release_tag":"v2.12.0","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.0/mtplx-2.12.0.tar.gz"},{"name":"SHA256SUMS","size":265,"download_count":81,"release_tag":"v2.12.0","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.0/SHA256SUMS"},{"name":"mtplx-2.11.3-py3-none-any.whl","size":2851130,"download_count":41,"release_tag":"v2.11.3","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.3/mtplx-2.11.3-py3-none-any.whl"},{"name":"MTPLX-2.11.3.dmg","size":66390487,"download_count":4421,"release_tag":"v2.11.3","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.3/MTPLX-2.11.3.dmg"},{"name":"mtplx-2.11.3.tar.gz","size":4429375,"download_count":1786,"release_tag":"v2.11.3","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.3/mtplx-2.11.3.tar.gz"},{"name":"SHA256SUMS","size":378,"download_count":52,"release_tag":"v2.11.3","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.3/SHA256SUMS"},{"name":"mtplx-2.11.2-py3-none-any.whl","size":2783662,"download_count":32,"release_tag":"v2.11.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.2/mtplx-2.11.2-py3-none-any.whl"},{"name":"MTPLX-2.11.2.dmg","size":67337786,"download_count":5387,"release_tag":"v2.11.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.2/MTPLX-2.11.2.dmg"},{"name":"mtplx-2.11.2.tar.gz","size":4281336,"download_count":2085,"release_tag":"v2.11.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.2/mtplx-2.11.2.tar.gz"},{"name":"SHA256SUMS","size":378,"download_count":74,"release_tag":"v2.11.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.2/SHA256SUMS"},{"name":"mtplx-2.11.1-py3-none-any.whl","size":2749389,"download_count":15,"release_tag":"v2.11.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.1/mtplx-2.11.1-py3-none-any.whl"},{"name":"MTPLX-2.11.1.dmg","size":59191287,"download_count":2271,"release_tag":"v2.11.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.1/MTPLX-2.11.1.dmg"},{"name":"mtplx-2.11.1.tar.gz","size":4206786,"download_count":695,"release_tag":"v2.11.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.1/mtplx-2.11.1.tar.gz"},{"name":"SHA256SUMS","size":279,"download_count":23,"release_tag":"v2.11.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.11.1/SHA256SUMS"},{"name":"mtplx-2.10.2-py3-none-any.whl","size":2444600,"download_count":20,"release_tag":"v2.10.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.2/mtplx-2.10.2-py3-none-any.whl"},{"name":"MTPLX-2.10.2.dmg","size":58784825,"download_count":3163,"release_tag":"v2.10.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.2/MTPLX-2.10.2.dmg"},{"name":"mtplx-2.10.2.tar.gz","size":3726812,"download_count":1034,"release_tag":"v2.10.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.2/mtplx-2.10.2.tar.gz"},{"name":"SHA256SUMS","size":265,"download_count":32,"release_tag":"v2.10.2","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.2/SHA256SUMS"},{"name":"mtplx-2.10.1-py3-none-any.whl","size":2437705,"download_count":38,"release_tag":"v2.10.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.1/mtplx-2.10.1-py3-none-any.whl"},{"name":"MTPLX-2.10.1.dmg","size":58780267,"download_count":2189,"release_tag":"v2.10.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.1/MTPLX-2.10.1.dmg"},{"name":"mtplx-2.10.1.tar.gz","size":3715560,"download_count":771,"release_tag":"v2.10.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.1/mtplx-2.10.1.tar.gz"},{"name":"SHA256SUMS","size":265,"download_count":36,"release_tag":"v2.10.1","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.1/SHA256SUMS"},{"name":"mtplx-2.10.0-py3-none-any.whl","size":2355762,"download_count":19,"release_tag":"v2.10.0","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.0/mtplx-2.10.0-py3-none-any.whl"},{"name":"MTPLX-2.10.0.dmg","size":58691370,"download_count":1578,"release_tag":"v2.10.0","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.0/MTPLX-2.10.0.dmg"},{"name":"mtplx-2.10.0.tar.gz","size":3545840,"download_count":444,"release_tag":"v2.10.0","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.0/mtplx-2.10.0.tar.gz"},{"name":"SHA256SUMS","size":265,"download_count":18,"release_tag":"v2.10.0","url":"https://github.com/youssofal/MTPLX/releases/download/v2.10.0/SHA256SUMS"}]}},"commit_sha":"eb580fce3fe4465bafb261420e6fed794515dd61","profile":{"lines_by_language":{"Python":511233,"Swift":114948,"TypeScript":6221,"Shell":3214,"C++":2672,"C":618,"JavaScript":286},"files_by_category":{"source":861,"test":632,"docs":164,"config":161,"other":63,"binary":31,"oversized":5,"generated":1},"source_lines":401655,"test_lines":237537},"pillars":{"ai_provenance":{"score":2.6,"confidence":0.95,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.0259,"suspected_share":0.4661,"estimated_share":0.0259,"ai_artifacts":1.0,"flagged_work_units":69.0,"flagged_releases":14.0},"summary":"Explicit AI attribution on 3% of first-party code added; an estimated 3% including velocity signals."},"quality":{"score":67.7,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":39.7,"duplication":55.0,"lint":81.1,"testing":90.0,"docs":100.0,"type_safety":1.2,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.59, CI runs tests; 31% of function code in complex or long functions; 10% duplicated lines. Weakest area: type safety."},"security":{"score":54.4,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":64.8,"sast":91.9,"dependencies":28.7,"ci_actions":4.2,"posture":80.0,"scorecard":null},"summary":"Security posture is weak: 69 known vulnerabilities in 10 dependencies; 85 high-severity SAST findings; 15 high-severity workflow issues. Weakest area: ci actions."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":40.0,"checked":40.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":1951.0,"attributed_commits":69.0,"attributed_commit_share":0.035366478728856995,"effective_loc":734943.0,"attributed_loc":19013.0,"attributed_loc_share":0.025870033458377045,"tools_detected":2.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"OpenAI Codex: 61 attributed commits, 17,099 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attribution-summary","description":"Claude Code: 8 attributed commits, 1,914 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"dba84f4d5bdd386f3e0d40ebeaeecb0854455bf3","url":"https://github.com/youssofal/MTPLX/commit/dba84f4d5bdd386f3e0d40ebeaeecb0854455bf3","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"d2d95c4cb0f132a2d8a6e4f0ddc337d4ef4897ab","url":"https://github.com/youssofal/MTPLX/commit/d2d95c4cb0f132a2d8a6e4f0ddc337d4ef4897ab","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"b7d357d929740ecfc8b06246519c30da85562c55","url":"https://github.com/youssofal/MTPLX/commit/b7d357d929740ecfc8b06246519c30da85562c55","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"8d7f71e8be83f0bba468501c64807e81e28cb1ff","url":"https://github.com/youssofal/MTPLX/commit/8d7f71e8be83f0bba468501c64807e81e28cb1ff","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"7c9acd6c01e34d438f7e93f86a9f7ddae07db121","url":"https://github.com/youssofal/MTPLX/commit/7c9acd6c01e34d438f7e93f86a9f7ddae07db121","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"9061619013916287d5877d7beec51c769463d444","url":"https://github.com/youssofal/MTPLX/commit/9061619013916287d5877d7beec51c769463d444","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"6d76af544effcd182ae064298c78f8e8250ff741","url":"https://github.com/youssofal/MTPLX/commit/6d76af544effcd182ae064298c78f8e8250ff741","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"c0240b58269f4464b7df19e067affb5e5309390b","url":"https://github.com/youssofal/MTPLX/commit/c0240b58269f4464b7df19e067affb5e5309390b","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"1190dad5e18c8d111ca52fb8c3522ebfa69e8041","url":"https://github.com/youssofal/MTPLX/commit/1190dad5e18c8d111ca52fb8c3522ebfa69e8041","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"306b24e76cf7605a7be07f273c827aa65f886425","url":"https://github.com/youssofal/MTPLX/commit/306b24e76cf7605a7be07f273c827aa65f886425","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"096404b21dd90843d0af7c3e3e1d61bbfad94ecb","url":"https://github.com/youssofal/MTPLX/commit/096404b21dd90843d0af7c3e3e1d61bbfad94ecb","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"1ae398a1f246cc557b1a5f6dd6671dc0a621ffb6","url":"https://github.com/youssofal/MTPLX/commit/1ae398a1f246cc557b1a5f6dd6671dc0a621ffb6","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"452b2e4ff95b0c0e1acf2e860fe69332efadbd61","url":"https://github.com/youssofal/MTPLX/commit/452b2e4ff95b0c0e1acf2e860fe69332efadbd61","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"dd92795339c310e5ea3b770c83765af824406d69","url":"https://github.com/youssofal/MTPLX/commit/dd92795339c310e5ea3b770c83765af824406d69","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"aee28241ffc08b22291afa0dacbf5acedfb1ad1a","url":"https://github.com/youssofal/MTPLX/commit/aee28241ffc08b22291afa0dacbf5acedfb1ad1a","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"0404995ffaf971d82cb91fa8e1af4e72a119d6fb","url":"https://github.com/youssofal/MTPLX/commit/0404995ffaf971d82cb91fa8e1af4e72a119d6fb","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"48331a8ebcaab17218878bc16c3d713b3cd23b05","url":"https://github.com/youssofal/MTPLX/commit/48331a8ebcaab17218878bc16c3d713b3cd23b05","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"2f28ca1fc0de7ee7872dd10fb0186ff267aaa940","url":"https://github.com/youssofal/MTPLX/commit/2f28ca1fc0de7ee7872dd10fb0186ff267aaa940","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"87dbeea39735555f341107963fa4ed901bac85be","url":"https://github.com/youssofal/MTPLX/commit/87dbeea39735555f341107963fa4ed901bac85be","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"48424b45fb7ba47ca314601b164769b06d5734be","url":"https://github.com/youssofal/MTPLX/commit/48424b45fb7ba47ca314601b164769b06d5734be","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"15056607ae7a8958fbb80075bd5f64eaace20de4","url":"https://github.com/youssofal/MTPLX/commit/15056607ae7a8958fbb80075bd5f64eaace20de4","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"4ace5d0be5a5591974ba3fa55cbe90be994ae7e9","url":"https://github.com/youssofal/MTPLX/commit/4ace5d0be5a5591974ba3fa55cbe90be994ae7e9","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"c9a2a52ca88aa2836ec7cd3a7394517418267048","url":"https://github.com/youssofal/MTPLX/commit/c9a2a52ca88aa2836ec7cd3a7394517418267048","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"3434960ce7dab314fd6fa1f66bf64935f1cbd02f","url":"https://github.com/youssofal/MTPLX/commit/3434960ce7dab314fd6fa1f66bf64935f1cbd02f","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: on merged branch (406b5f768e)","ref":"c90be3cbb87e0e6182cefbe6cf274b96ef7ad0a8","url":"https://github.com/youssofal/MTPLX/commit/c90be3cbb87e0e6182cefbe6cf274b96ef7ad0a8","weight":0.9}],"data":{"attributed_loc_by_commit":{"919a2b914df364f9a9063115b1b7d43e6ec370e0":1386,"b856423f337e087eed180cc3f21c1d78def5713a":693,"d3d3a11dcb1647d2b7786a47639f4b657240fdcb":400,"9337cdde8a5edd52f31e5a880c76aaab7c40af35":220,"4a2cdea959217e56aeb5b771e83077a864aee170":150,"f1875e37cff76d6592905046c5de4560930487fd":107,"a1d8ac45d39430790340297b6ab97aff1f2f4234":2182,"566a975f1b3bfd819563a61a4952895a5c9e5bd1":505,"33925c1e64adf753738f0f841d1192294762b1cc":108,"8cb856b9c77b47b2fc32bc2764a2f4a16f6cdd7c":224,"e00f66e07344ec45e768f3124cf57e8957261be5":35,"20bc3032f79e0da2808e500874bd655224000a4b":3566,"5f3afb44925e3b68e1793977b9fc4da7ec4cab9c":147,"6bd9fce2bf7b051aaf82e0a0d03a056af66de685":165,"dd3ed9551cde9effe41efede863ab84854767f1e":28,"665022934a362b737e855efd4a12855816dd2c3c":698,"85011444f43210d97a33872a138269224cb02a18":320,"efefd492638a5048dc9350b3847f6a8bc2d94887":197,"361bbb8013e326415d072ec15c85c18f84a0f9c7":0,"bcef96830e2cd44b8b6078072722dfc7d5be912c":389,"8f33923b80c7e1cf1527579a6dff518d2c99ee09":60,"da557785a2fcdc2512f907b8bc8e34ef132e6379":43,"9c31bf74a08584b838ac0f80cecfacf8688202be":22,"e8d0e11e91562fa312191d069f3b4cd8a9a192bb":664,"93e7205072f42028e7aa85a4a2845d335e8fbb3f":545,"7622b04d2d8b5941570e702d5ee49a7a594bea81":103,"4130461fd2ba2d050d116e490675acee04091175":88,"4a59fef7cd7cd4b132ead5a897aeae1ba1d40276":1,"a33ad0fd164b71660788cc9ffdcf20dc739ce268":2530,"54494292d6b51cc40d04a907faaf16df901085b9":80,"89957674d7aff08ee1055bc47bccbe9021dd2f83":433,"2a780e433700df5769a3b4e007e9e263f498a38e":214,"a726d43313b4c98899298d4d6511d53ee6c2e996":79,"0cc94fa5e79068b3e93a6a7fc726621a4c949730":16,"fe410d76cb8e0e2972f97305af56ea8149759b9f":372,"e6c209bba0b56d3f7182f168eb3ddb8ab4280f41":234,"255b5e2ff31e61eb0f6068fc769e6d982ee657c0":8,"4028eabb2405f6673ca01ec3dc6be8ed11bda73a":8,"7e811947f180332bf123e698db5d74d6680160d2":83,"879c6c14ea77037eaab49ae3cddac8649ff0289c":7,"94c499317399a2e607dddf6f379a313600d81614":21,"219abbcb20f82dac7a3c1e6733134abfec37c1b8":83,"8aacc7d6a123c058ab45e5c623f5a3722cb6cafc":7,"c955571b5b97f19d083429704dcae84d7058321e":21,"c90be3cbb87e0e6182cefbe6cf274b96ef7ad0a8":416,"3434960ce7dab314fd6fa1f66bf64935f1cbd02f":101,"4ace5d0be5a5591974ba3fa55cbe90be994ae7e9":9,"c9a2a52ca88aa2836ec7cd3a7394517418267048":70,"15056607ae7a8958fbb80075bd5f64eaace20de4":72,"48424b45fb7ba47ca314601b164769b06d5734be":194,"87dbeea39735555f341107963fa4ed901bac85be":104,"2f28ca1fc0de7ee7872dd10fb0186ff267aaa940":21,"48331a8ebcaab17218878bc16c3d713b3cd23b05":21,"0404995ffaf971d82cb91fa8e1af4e72a119d6fb":89,"aee28241ffc08b22291afa0dacbf5acedfb1ad1a":109,"dd92795339c310e5ea3b770c83765af824406d69":8,"452b2e4ff95b0c0e1acf2e860fe69332efadbd61":56,"1ae398a1f246cc557b1a5f6dd6671dc0a621ffb6":106,"096404b21dd90843d0af7c3e3e1d61bbfad94ecb":21,"306b24e76cf7605a7be07f273c827aa65f886425":179,"1190dad5e18c8d111ca52fb8c3522ebfa69e8041":27,"6d76af544effcd182ae064298c78f8e8250ff741":6,"c0240b58269f4464b7df19e067affb5e5309390b":23,"9061619013916287d5877d7beec51c769463d444":48,"7c9acd6c01e34d438f7e93f86a9f7ddae07db121":54,"8d7f71e8be83f0bba468501c64807e81e28cb1ff":24,"b7d357d929740ecfc8b06246519c30da85562c55":2,"d2d95c4cb0f132a2d8a6e4f0ddc337d4ef4897ab":8,"dba84f4d5bdd386f3e0d40ebeaeecb0854455bf3":3},"tools":{"openai-codex":{"name":"OpenAI Codex","commits":61,"loc":17099,"first_seen":1777835296,"last_seen":1788576744},"claude-code":{"name":"Claude Code","commits":8,"loc":1914,"first_seen":1783540175,"last_seen":1784572011}},"monthly":{"2026-05":{"loc":95479,"attributed_loc":11131},"2026-06":{"loc":167260,"attributed_loc":0},"2026-07":{"loc":80186,"attributed_loc":1914},"2026-08":{"loc":181556,"attributed_loc":2611},"2026-09":{"loc":189538,"attributed_loc":3357},"2026-10":{"loc":16817,"attributed_loc":0},"2026-11":{"loc":4107,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":1.0,"workflow_agents":0.0,"tools_configured":1.0,"earliest_adoption":1788250700.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":".claude/settings.json (claude-code configuration)","ref":".claude/settings.json","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/.claude/settings.json","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":".claude/settings.json","added_at":1788250700}],"workflows":[],"tools":["claude-code"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":451.0,"flagged_units":69.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":501580.0,"flagged_loc":352420.0,"flagged_loc_share":0.7026197216794928,"max_loc_per_hour":6693.689320388349,"median_loc_per_hour":201.86567164179107,"pr_timed_units":0.0,"excluded_import_loc":233363.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"27,578 lines of first-party code in ~4.1h (6,694 lines/hour, 3 commit session)","ref":"31850777fadc32976a4d88b4ea50e53a4e6ca24d","url":"https://github.com/youssofal/MTPLX/commit/31850777fadc32976a4d88b4ea50e53a4e6ca24d","weight":0.6},{"kind":"velocity-burst","description":"14,392 lines of first-party code in ~4.4h (3,284 lines/hour, 2 commit session)","ref":"512dd669115fbfd363ffb4adb4fe24bd83b34793","url":"https://github.com/youssofal/MTPLX/commit/512dd669115fbfd363ffb4adb4fe24bd83b34793","weight":0.6},{"kind":"velocity-burst","description":"7,553 lines of first-party code in ~2.3h (3,276 lines/hour, 20 commit session)","ref":"1b1848a9a054406a8730242bed1cd8653f6a80e8","url":"https://github.com/youssofal/MTPLX/commit/1b1848a9a054406a8730242bed1cd8653f6a80e8","weight":0.6},{"kind":"velocity-burst","description":"11,889 lines of first-party code in ~4.0h (2,972 lines/hour, 1 commit session)","ref":"7f0576400316e8b3faf5188cf6d5684ca3dc18f1","url":"https://github.com/youssofal/MTPLX/commit/7f0576400316e8b3faf5188cf6d5684ca3dc18f1","weight":0.6},{"kind":"velocity-burst","description":"10,570 lines of first-party code in ~3.6h (2,949 lines/hour, 36 commit session)","ref":"277ce2270f82ccef397a46e950145e654561ecf9","url":"https://github.com/youssofal/MTPLX/commit/277ce2270f82ccef397a46e950145e654561ecf9","weight":0.6},{"kind":"velocity-burst","description":"20,387 lines of first-party code in ~7.3h (2,805 lines/hour, 70 commit session)","ref":"5478586a82a6aa7a04efa7aeca6f8296cb38312f","url":"https://github.com/youssofal/MTPLX/commit/5478586a82a6aa7a04efa7aeca6f8296cb38312f","weight":0.6},{"kind":"velocity-burst","description":"8,857 lines of first-party code in ~3.5h (2,527 lines/hour, 61 commit session)","ref":"d0a4d6c4b0d37a2d3d2ffd00f28d274cd0f89a10","url":"https://github.com/youssofal/MTPLX/commit/d0a4d6c4b0d37a2d3d2ffd00f28d274cd0f89a10","weight":0.6},{"kind":"velocity-burst","description":"2,182 lines of first-party code in ~0.9h (2,436 lines/hour, 1 commit session)","ref":"a1d8ac45d39430790340297b6ab97aff1f2f4234","url":"https://github.com/youssofal/MTPLX/commit/a1d8ac45d39430790340297b6ab97aff1f2f4234","weight":0.6},{"kind":"velocity-burst","description":"8,584 lines of first-party code in ~3.6h (2,375 lines/hour, 19 commit session)","ref":"e36f5ffba2bd64fe478f5692e528640b8382815a","url":"https://github.com/youssofal/MTPLX/commit/e36f5ffba2bd64fe478f5692e528640b8382815a","weight":0.6},{"kind":"velocity-burst","description":"10,682 lines of first-party code in ~5.2h (2,059 lines/hour, 3 commit session)","ref":"efebec60c55a029e8d16eba97ac358dbc2aa682d","url":"https://github.com/youssofal/MTPLX/commit/efebec60c55a029e8d16eba97ac358dbc2aa682d","weight":0.6},{"kind":"velocity-burst","description":"12,681 lines of first-party code in ~6.2h (2,043 lines/hour, 24 commit session)","ref":"65e384dd0b6d79830646e539aadd2f31701faed1","url":"https://github.com/youssofal/MTPLX/commit/65e384dd0b6d79830646e539aadd2f31701faed1","weight":0.6},{"kind":"velocity-burst","description":"9,466 lines of first-party code in ~4.7h (2,001 lines/hour, 26 commit session)","ref":"cefc2216eed9deaa42b72dd97140f9b19db66d7c","url":"https://github.com/youssofal/MTPLX/commit/cefc2216eed9deaa42b72dd97140f9b19db66d7c","weight":0.6},{"kind":"velocity-burst","description":"15,750 lines of first-party code in ~8.1h (1,949 lines/hour, 79 commit session)","ref":"60b22b47cf50ac661deba4fca30c13fe8f02ac52","url":"https://github.com/youssofal/MTPLX/commit/60b22b47cf50ac661deba4fca30c13fe8f02ac52","weight":0.5847370230319697},{"kind":"velocity-burst","description":"5,431 lines of first-party code in ~2.8h (1,910 lines/hour, 13 commit session)","ref":"81b4c093e98d61109b2cdfa96e2290554f572baa","url":"https://github.com/youssofal/MTPLX/commit/81b4c093e98d61109b2cdfa96e2290554f572baa","weight":0.5729126782574722},{"kind":"velocity-burst","description":"1,693 lines of first-party code in ~0.9h (1,839 lines/hour, 3 commit session)","ref":"a218729c50f6ad06f9da5b3e4e3799af85310971","url":"https://github.com/youssofal/MTPLX/commit/a218729c50f6ad06f9da5b3e4e3799af85310971","weight":0.5517320458660229}],"data":{"flagged_loc_by_commit":{"427ccfbb588bede2b5986d98aa1379ae011a4c1a":507,"bf621c7bc3ac55e13dede7daa67bfdd0c5c0022d":834,"9064635f3c82a5acf8e21c35aff91a917647ec73":490,"68580440ea04c355b2fb605e9ef035730ff4c2f4":311,"99c0a3b77acd5b74636c06cea9ba3fe92a551f6f":103,"4ab3b4e1778af05232714db21f070ce0d8008e05":155,"a9f74a9dceb724987617d2b4e883b0574fc00101":213,"b969a676b26894b20598f546f7cdfdcc92954985":46,"4287d4274a726d0773681e64e06cc5ee15080036":186,"a6edb8a9389c2ca65d5e754de1039cffa9be13bd":418,"25d12867aa76c18cf160f2279949bf8d141ec921":389,"76d1b654f55c4e47883ab3f45688d50797391776":32,"c55f25b0d1f36f60d8feba56acdb9034ec635e43":589,"fee7a823959901985fdfa0e03e2547bd6d19d234":219,"5c52c654cb51f5e59dd965daf6b76f17dd9cb4bd":797,"a3fd88f6ce807e5a2d077eddaf74806040d9d44c":67,"4ef758f25d41fc67d3365245d51ae1f3f4a8e616":124,"5a3f2c895fde2263d6b3cfef359e7bd149b7ae65":48,"bd3e2ee5597c3aa66c6b51f070537e9ea156dabd":139,"60324a3308949b01e4fa879e0cdbd0f05d605eef":1,"a2f9d8569b49e58ff893d18f2b681adbb91107f9":1,"069f138193dd0019e0f468991526ef2e6d55366a":33,"9338b229a55abffb29c8e0b288121e540479761c":4,"2fae0e3fb30c9bd7c43287af202c0094a71ca1d8":64,"1eda382ca2fe3d1fd86d6cf8a44750806369ca92":115,"f70e8030134592cc05dca1e52b52b7046dfc8b74":2136,"7f0576400316e8b3faf5188cf6d5684ca3dc18f1":11889,"a1d8ac45d39430790340297b6ab97aff1f2f4234":2182,"8c2203e5daefa2ee5deb0d3367db64bb0f34dcae":1364,"6f6168f1f0bd4b348a027768eef37b3c8b4b7ec2":2215,"5850102e1cc0642790281fa45848eb6aee350e97":144,"643074722878526ee826672485400ed60f41679a":3911,"20bc3032f79e0da2808e500874bd655224000a4b":3566,"5f3afb44925e3b68e1793977b9fc4da7ec4cab9c":147,"6bd9fce2bf7b051aaf82e0a0d03a056af66de685":165,"dd3ed9551cde9effe41efede863ab84854767f1e":28,"665022934a362b737e855efd4a12855816dd2c3c":698,"85011444f43210d97a33872a138269224cb02a18":320,"efefd492638a5048dc9350b3847f6a8bc2d94887":197,"2fef55fdc2786f69d12989d4c8036f75e75dd698":2128,"ba2bc37d362a90d6dee6d72043e9a58e96f8a06a":1979,"ff52eb67a396b8fa5fd17a7ea9940583059e9f00":12,"6f308e8e05d06aa238b065ad119b75f90cf55f99":2671,"e8e3610940d533a7a2dbe3cb07980124bb06641e":3750,"393e66a7ea654615f9f1622e12ddb1151fbe0779":1576,"deb4374b37b7a42e7c79f2c958555d1a6c574614":308,"e7a113a4ceee3bb974d3a92753e1c406000b4cda":3596,"fab04067c37a0acc8be89119aa98290727c7623f":211,"67191d28fd194716b73cfd864627785ba9531c95":48,"9c5f73193b46fc26338a6a67e23beef762137f1b":489,"78e4fa3986c092eb4d2f83c1d58f0fd9e1bdde6e":1447,"dafc34476576d95e06b9792a39e2c49d17620449":88,"76f1553d97b0b9a83e98df947fc4ce7d56812e50":82,"56375e134440473d2944c9c99bfa4a0346775b73":76,"78a6d12a63bf149d0fa1a22a31def2a3d880a92d":272,"87b1c30e80695a2a755c5d7909224b84a70282c0":101,"474471307883e1ddbec9a642ac12226e99b5cfdc":71,"dfe3d5dcbe388aec04996e187b4ab6cecb12a98f":123,"a32599b242b61b2217d8064b27ca973e274d11a2":130,"fb8a315b0f64b127c63e506402d26c2850c45d79":110,"eb8e2341b12074f9002ec5d4db4c927988a2a55a":454,"0efa3bad076f0388b9e541f001bec8f3842f38bd":5,"886e4c281017565f6c9fa4213c98a356fd4862b3":7,"aa0ccb44613062d7ad8c32ba9aa758fb173c055f":13,"dc2adfcb0f32de26ed7a77dc3a72204ec44e16d0":13,"1919e3bd6af3197969e9b850c9fb03aaead8ba96":111,"15cb9504d67c54402d9accd8b7302b08f4fb5e59":123,"af6bc43aaa5f05dc66b81edc787876baee715c30":132,"3b85bd8e028c70a565b6e25dc6df7fa89498cef2":263,"cc0b51d2b147bbf84f5fcfc6e5f8f0eaf6784014":273,"41be3b29b9ca47a0c037a17a6167da7b7d64f052":301,"8dc8ed57fbb3aa2cac0f24a94bd35aaa9038ab75":214,"f4b44a9fe552058bbc6316719a14e7e8df2fb7c3":390,"d44f912547a8850d5c0c8c54ef76512e1fab9c19":224,"073d1ca08d957e26352c10467dd1d3ab26c68ffd":603,"58eab90dd685f691f923eb3049bddb792ad02420":18,"c92522a1599b2f7569dec1300f63f483760d3bbd":13,"4fad4bb4b3c528f42a99d8233b968e32bd96a9bd":48,"fa94c8b8a0eedbaed5bbc0ecbe45693795aedfa1":343,"44470ba40761f344e0f86706ecc661896bc2c5b8":2,"a68a1ceb95a8178c60f96b2f984f811f32da91f5":182,"42104646c5c7ce8c360242383a3a1abcb09ce264":609,"b01f1af2011937dae679cbb5fd26c392c1f93bf9":340,"f4ee0d81c000e9900d7b4a9ea2b23d26985baf41":1018,"ee8541e2e3a0056e3bd470c1a2cfc02b051b3ddc":856,"2745318e5232c84a8f116cfa30c91c0755a35081":5,"b493b8f6212b20e3e2df0fc86d694188e969777c":643,"9f06e19f6a42e3937d0b9e37a42cf3aa086d8582":1274,"dcd6386bdea3a522d18ebc3e65aae739206b850e":1473,"8202b5dc6a6353111e0e6790e43ae33fe763cea7":1775,"2538b50402a645e04e4ad7f2c435ad5c28169565":1379,"eea459e63a31ab1050dbf474f6a7fb68a07ea33d":1676,"f474863655b608a796562596bc6c172777ea11eb":6,"42eedfd499c5ab03442c97cf1eef6c3c09535a85":1047,"a297db8380ccdec6b332d06b6cc4feabd18a35d4":6,"62a28e23461390124c2cf44950fec80c01d7842f":5,"a6175d946c7857cf797645a57e66876d0a8e3ed1":289,"015602362389d49b734deb6026b3574e0433c031":2390,"7fcc50d0438d41120da090e5e16e0cc56fde1748":241,"64b8b30a4d6281a12c1f9d71fb9a788b7d5c037f":197,"ec00045ef0faf917bd50cfab03ad78b53fb49516":492,"1cce757715d5defc95e846046b91a0e5847331f2":169,"c436460beabfe56c7eb5f689a2ddc309b6fd2eb1":122,"9d4c5a01697e0d57180ee1a386be13217855003b":71,"701f4f4152b453bd9d2398fe747e76e56b554733":735,"b5e6cd2705464e5547a53aa69721a7b7b56c7905":77,"2bd953f200641f0e638ab2be6d2d3b28b9a415ce":27,"dfb438fa246e93f1689c52ab0f9ab1d20ddf0b25":543,"75f1a8a5ccc2e2f1ae89bea0a3da38081f2a37ed":548,"78315ea161edc64314be9da73be971201af297a4":10,"2be7f9da7a5014435a84a53c05f3936d759b415e":658,"0a22f3e29046a64cf885c6cd0830ffe6acbf1691":595,"dd0c9fd120b619e0dba41e0ca2a21042efc7b2f3":445,"e6b0f895798aa0bc7f956732433b45993deba40a":129,"482fb42313a8f219470fd84a332074fe0d0f646f":783,"79bd0b43bc35981bc6925a81f351dc2a1fcb679c":22,"95af19df2f6e6645c08fe455a8ed9defd2229f34":15,"9d8eee6f72fd9695fd832e52975527b976106680":41,"8aadb160bb885a7a09f3826877c6c7ae83db7929":37,"1443cd828be72275a975ead20f1c3a47b6ea67e8":506,"570488773fdeab3e0da05919939e412e0243d99c":541,"36554e017dd60fd262f819ab70e3f7c0e6f883e3":433,"3489a7e9fc42bad96f863ffdf0f5ec04748f622a":451,"c508b222b4b6fc8da00634c7b631486ea54dcd68":110,"d53cc7b5a3933ac884a232ae47e3914b9e3cf0ef":104,"8a4b8823e74a06eff62efbd70869d3d7bedb7a57":7,"3fa0f7dea35ad8d0b634311d5182db385429391a":43,"45dc46a3331786965c69dd0d7cd8a9695e18a219":20,"71853530d54697c0c204c8f23cb75a1e3c4b4018":677,"cfe7484af237f6bb99640a526dc43d32e84707bd":238,"853d44e5d5a5b88575d13fef67bdeedee4fa9200":317,"3c7e2623cdae6dab97a7c1aaee55c40fa5564a94":661,"3ae87806f35458c25d9581f00172b9d6e6e76d03":131,"49944e41edd337034790a52e86b294f5a0dae5b1":132,"0d5fee58e5e82b488368012d20f9418622761a6c":206,"25edf8db2c28a70ba2a83e656672d72601861c21":164,"40e6fd7c8a950a06e63aa360a62e7b17e45753cb":372,"b608b1ce4af16e149679c1d9f25471363e671669":177,"c304e31c0209ca80824312ca7e3c56e94b81d207":956,"bc42effce5ac2bb45e021586882dda4380d65f5e":680,"81b4c093e98d61109b2cdfa96e2290554f572baa":720,"efa49bcaa2700e9659aa156af98253bd6498a588":1616,"dde8b491fd62504e597f4ff33b27cab9078fd19e":62,"a218729c50f6ad06f9da5b3e4e3799af85310971":15,"cdfac1fcb22f4d3510adbd01afeba1a6a5ff9f19":159,"e08f7b5b2067a4fef4dbe4bc3ff3df3a5f99b5cb":637,"197f7879e00eb49fd99ae4a27be59bf6ed9c4970":265,"26a8596fe9bc0ee94345112cd035fd0bd88b265f":240,"d9eec81b4826346a740a0a2589b407194a45fba7":16,"d631dcc766e92aae132b9f18f6cba9e747d8a180":77,"3c3991e431a36805c7e9d5a9e8af77ddbc326292":83,"919cbd0dbec7534ca9e04b533d98564128c36e39":304,"f304f0b943e85cde233658df2085381a954df2f6":116,"497efb5d0e59496bb446316a27c87f5607c14f61":4,"dfcd39f0927ad818414a41427771628dc47cd12c":13,"15a321f83db886d45fc7a250779e8090f46a994d":63,"7d0a7a23a9cb1474e0ea2a4d8e1a4aedcd4cc5b0":10,"f70e1c15c7ea374c768c83a247fe78abaece4c1f":638,"a3aac51b549ed27f97d768171a8b556ebd7b1545":8,"1327a5f6ed40c4e3a4f56f4cf9b3ef8f47e3c877":609,"e737c730515d471955b59c5d1d5197bcebd670e8":7,"5ef37e2f5ca649fea52811269352a309feb02d58":13,"ef16eee1d2e6ac4ed3a9d8b26cc65909ab554b2c":423,"64fdaf8786cb8f948274e5cdd6a0301d52c957b9":3,"f9f53b80759f71a880e9dfd4a9115be75ed1860a":3,"abacded8b27628f3ed34f965b70a8c9de0689ed1":279,"6d6c431e2ac683ff446988ec1d74815190a71ca2":262,"7839b28bb8b0de2986161bdd23fa5befd034e17f":517,"ed3888ff76e9a6737aa3296e6c7f6e3f95ec209e":425,"2f61994e1c87864ec6797aeaeb24c4f1d3b9b0e8":122,"6fa4ddc7656f020e1c97499219a123899dc453cd":65,"5ef4305c5f103f5b25d9df1bc41f081fdc37b8e1":108,"8f0e1d66435cd2114f781ff8fc5ad9f0765f35c9":159,"c4fdcb0782cf164cb26fabbcd3556bd585fb8185":56,"83a63f0e5e0194b53f41b3406780d0d5c24f75b0":16,"dc855bb0e56824a10142f05c076bc74c26100b1d":528,"f659080928936a3ca326e5f81c1946c91b33fe19":1,"ed83f39f1018eb3fa24bbaabbee5d49a728f14e9":311,"f4f1df7f0d065f51930bb02004d18616f90a3f89":340,"3542466af51ba8758620df37ac0176634d984d85":142,"59fdc36bca101bba68b34bc7a3c88f4034270c9d":229,"b96c5e6f9e740dcbc8675c4572cb99f60e77f8c7":645,"c6bd864d74fdc2d8c9142b3d822e4ddedb673e80":143,"8850a8017f9e6e35bb68d4ea86fd9cbbdb81a853":3,"3a5adedc728c116a0ee8ee01232f2c63982531b3":182,"52390829289f541b272eae85e7eba74255155218":60,"1cd4295333813f45028c9eded2af17656ff1484d":66,"16442c35d82e66109bba1359d5fb50b6f30d44b3":8,"5ef4269251ff430ce390f91f81d3dcbf4522369f":10,"e24d6d94f950e3a73e9120c01054112b438f0140":22,"79038d3ac6bedcb21f68a1bfbab755fb3ded6467":39,"28a988805e547e2a422c36810a3d4e8229952554":71,"50b1e4f250ce500bb9ce70a689feef0c5c39ca05":275,"3a0a2f37e70d4afe3b6fb8be427512c765251f7e":237,"e9c8e65ecb2f2b6e0f73ee1c7cfb5096c088bff2":54,"d1d6e165a8d1f5dae251cb19720b8beeaec0c73e":51,"376cf2f28922ef4a31f75427f65080f4f19cebc6":215,"7c269e64bad1c8bc8bd12938619547eac3641707":114,"772191a76e61e87f6d4147c7bc4276bd3fe9d43a":34,"d119f366d63a256f605c34d194839134cf0134c1":171,"956d95a3ca7913e550e4c66c86cc41160674a830":273,"478a781c65b383324c949b59eb236f5f006ed956":335,"8d3c78b5cbc1b3d7805dd13c669d1cf79f28e92f":447,"124738ece247b5704971162a8096aa6e0d91a0eb":153,"9f7e4a4a9044c767917d625816909e01c0785b92":285,"b7582c82c2f69793a6d0ae7a82b3c8e26df878ba":225,"7b83469b7c943af6432ea0ec5c6ddd8fafb5988a":698,"eeadf4471c04a4ae8f86c1783179967666bdbe84":221,"72c011bd05d2a15a7a3096a92205c1a14fbc8634":274,"d673e0d436ffb2a69c0e94f7af0a67e106132306":170,"df0f2ff533b1af868d490806379956355d97f3be":802,"c714ad38081a2a9478ae036bcaf8498248c07884":217,"a5499512b94c4d33317ca18cb073de5bb2431242":279,"d92920cd8147cae5831cfe4aef343d738494c267":164,"3c359ac653dc3c6ea19cdc1301834efe45466c84":685,"042a6da3ebffbce6acd2cdf130a678e8e7ffbc26":159,"839f7abe4ad528f20664f052f05ca9fb61f76e27":506,"de9d22630ad741ac21e7c7b98d8d33b5b48576fb":416,"f8744ef9c93bc488cca9dd9511de13d23a2850fb":755,"5b1760505e3e8683cd270b45c72e6b2d87e3b60e":99,"dc858a08cf2cf35ea907e9208b37484a22d06de5":273,"8de3714a87b5851b85d4845c370f7e7dc42a6263":353,"5b15fbe143250820798902f67ab020eae6e0272d":280,"f33e70121fd8e01db6410cbad2750926905a6b5f":413,"1074172ed71271c5224d45445883ab4cd619c77f":739,"b57294c426f9570260d459d44cb4f56b796f76d9":109,"277ce2270f82ccef397a46e950145e654561ecf9":18,"6fd0c676686ed3a9ee6566e45a52813b03f87f5f":535,"15deee1913a9ff7ebef490deb51580d6af713a6d":766,"367a871b575b88abd7c3deb29fdcf9c7c4cc758d":451,"e7befabc69571381aac1dc602899f2842e6b6994":180,"8c4a513be0fbdc13010bbab3b0e07a32803199f6":827,"6618ac3dd238d74c9f54a413cbed8a3fd14b57a0":559,"511f9639e9ebf7efc1e812cb34dfe0243e8313f4":159,"bec6df7e521a7e7dd50697fadaf307537a065861":96,"9340fd145733ea03fb7c0fd4e6dd863134486cbe":555,"b4124caa9004608bef1f8305492c49a6d6f405c5":138,"1e843c884dff777decf787d360ff3cd32748efb9":28,"d475fc1a0827a0290731033cbbd62d996c8cc3fc":46,"9b594bec0e8082ac40458a695bbde0e05187739e":6,"6fb7f52635dd14ec9003b21911ea74b9a983ceb2":6,"a5699c8c150100d3827ceb58acd33e061ed655e3":129,"640158ba21b50cf58b18dd5aa1364d8fa88df2db":1684,"02c470baa9bfc78ec547f0dbd69e447d4f822e88":184,"966eb1ea9eb01b35570f38bbe057cb186a764ba5":1,"09bbbb8e01fe58730abbf2d9f2959c32485d5568":595,"3b9ef263177bd5c1e8f03c3324f9fa7e69c6ed14":925,"cd4f1c56d4f500a095c048c20072e2a5b36d79d8":18,"bed10fd897ac0764e8041581c69beeca8c7f58d0":153,"eacff6a37665e2b973dc981764e0d8ff218f8b3e":172,"7523ed5953d5ac0f790041ffac78bfc928670b6d":216,"8c358ff3c7c018a7691a75dd9eb74a21b062a6af":145,"a9031c39a9a814de778a691cd6b22dfa7cd48492":65,"123873d5dc4a3ffb09806113dfdd8b51d8f944d8":6,"38d5d03411585a91cac4f0450a828e637f6f8cd6":254,"93ce5e41f8f8a95cb4f84103199b125be7b76dcb":124,"04eb7019969f91b7102b9acbf99ed68d5e1b1f94":835,"57483f01f35bd8357bf0d0ff0c76d525b1aa842d":619,"e2cc8559f0197729d8926bdddf27bfb7b887ed42":152,"0e1706b92ad4642de1e2cef274ee099bfeffb886":1638,"90f76fa1136bd93fe1a09a7de5b64b7ed753544c":103,"93c17891cb411773ed0f28b8daabf30e22067f50":98,"b52978348c4625cd78afe53e5ef54e81d72b14d5":105,"efacfafa7432db53b8c2f34cd071191fdfdf5f59":77,"d6cf74b869f8a9b12d74f66ab257d68bc7eab658":414,"ac227c988eb4f90597b8ed42246eb63c1a37319f":592,"8d764f24a0e8fafb75333df314229f03b322315e":854,"82919066b9cdbd3229825154e49baa8b3f84802c":16,"3a433b3ff218b4f04ddc19c187275ae62af84965":995,"60c31506be52296e9fd8a021c53078b2207d6c76":69,"0cf5a6e6243373cac52aeea5d7e38f034f80136f":280,"c21f739da72308c519375df70f05f2cfab5f465f":61,"b39002cdd261b8d512bc202e1ecabda9bd7e6246":1200,"cefc2216eed9deaa42b72dd97140f9b19db66d7c":223,"a40febcd46c4214fd6305b36c9e542cd79206075":199,"e47404c0bcc6720169e52544e495e8f9a16d0042":6,"a0118123b6d8ee2d928936f0fd3eafdec742ca4c":309,"c0f777512c008f44d5e77000eb2074dea787f546":604,"e3c41ba6db63e8a3ab61eedc4011294c1c0104f0":142,"3784fdc7c1d826a9700dcaf52e09e21f89ffc9b8":950,"ba4a7d4f7876cd8f01a016969f5d89b6d64c9017":343,"6bcc01d85a403fb6e7cf5afe6640f5ee84ca416a":1457,"c3a24f26576525376c30b6ef2ca963dc88ecdd8e":2025,"62ada6a6b8c8be7b80b9b0ff8594dddd6f78dcdf":305,"e4bf6b0f1d5e4e08814ddfff6df72f5afefb5faf":84,"b6634049457bd693306fbf0946a60966e614b27d":34,"c95ef549ef79c7f3cb1bc070405278e363629415":459,"6fdb10c2ca54ce77428254b557c0e630a54ee4cc":351,"f75e9ea5188bf92ce132e864ae407e14dd9baf24":26,"8a2d22cb8a993e4e99414bded89d682f8eb4ef30":9,"903531ea1b1f757dee74c630de2d2fcc7aad022a":125,"12b5478779e4ba093e9c9ca0df5023da1d6543f6":8,"e4f9296a40a5c63c80d4f8b96a681e35f9c81430":72,"1b1848a9a054406a8730242bed1cd8653f6a80e8":45,"d35bd8102aa0bf771c84bd8fd46711d114ae9276":669,"20c6e911ff542c098ab0cedd26957820ff5cd207":67,"769103770fe66ecb4c63645e695e3c8f9ced2e06":525,"fd0e1462e4c547b5dfe8644b41d5ea3b3fe9474f":1029,"e8cb57ab0a77c89048f333089fd18cd94d406762":129,"69b8033db163502f762db3bc90da1ff114f97b92":12,"03ece458264c547607d7889d4fcaeccff28fb9d2":339,"06193fc143b3a37db8412329d1b1dea79896f819":85,"c4b171b6ccd7737402931d73f14d8b7712f67776":18,"fe9a78ca902d3921032b5092be1abc21ed7f0eb8":203,"18eabf0dd33f6ee0e462e4e4e2976d67a2c23823":225,"e6c436894959e29e11abac2732c5a9c2fd87332f":111,"a360bd0e08e8acc6c1cd5e1619823a42c1afe817":201,"8e2ac67ec1e5f44fbbe48ad0acfdc1a9aefcbe1f":166,"b66e7e64a369f95e7168fcfa945c04345fcab515":88,"b15551f4355840b0d44373f66e7b70f99dd17172":445,"262592b68e9d375b65ca3a805a5eb718d4c5be24":329,"4cf91994d9c61a7ed0d3b53bcf61a160669cda6a":70,"947dfa705a161ca504770ddbf5e2d8edff7b6d16":159,"a9bb6f337db1a2414a8b9ee1863002ce123f63b0":153,"9760a15c36644477f28177dc56059a7b9c2652bb":321,"2980f443e3a528fbf6d27cbd0b4b984613e6737c":276,"41e145e7ea431268d56e54a7902f1475f2e45bd4":191,"7be2149c8b04265f0531a5d6525f6a31c2d2af74":286,"111fc9da5a5b6af4cfbc497c4d09531a6d8ffe0f":606,"4fb88e468f407978a62f880bfae3dd2507b83fdc":24,"ed87c0623b07af4b9758e34ae8e5d6b072d4568b":759,"81721967881d77974f11cdd355f6127c92558081":2279,"977eb7dfb53702f22f33d3fa7edfb3041fe82406":264,"4fba12cacf53d53207323cadf680431fe6487685":30,"d09a4c34ae11dcb0feeedff6f03eb50febf27b86":150,"44c2ddfff19738250f5fd81f5973a2fcfd8e832b":166,"aeeb90d1940b18cd7a858ab609c099d575882068":254,"a105a1a337ed15f03033d9aba87ba9217a9f9d2a":348,"cd8dd53d004742b0d46c8776d2547ec85bceddd9":192,"08c673aa8854929d274c9908c03902b06449ec67":6,"04de122720c959de43a69140ebc07942cb0c3fe5":553,"d5d759d3afea385c3b626cb1586d8e5f2653e026":841,"5789a2d97b7e25a82523baba4aea7e58da79ea39":23,"18087e7446cb182591839ab69a67f965523adc27":177,"688990365067c0f2b6b6c83ad1dc7980fe013f24":1083,"49b39a506a00077cbb3f173e3b7825a41b5b0f8e":16,"7fdc59f459b52d420e52d882b6f639ac062f7765":115,"6da2aee2ebe9530591a220c8bdb58e748d0c322e":93,"8a607884d2f1e1fc1e08dae8463244c9e806a4b9":1540,"6d049452758b8b4f793101efd70f0decc0e85b0b":2,"073c40d633540cf54159c4acd5ae34b5e003f50c":44,"123856daaf62f59508401c9cadb1482b7d71a8ac":904,"89228b8202c673a03849c74404c87792bd99d30e":95,"7294f5a1d83a92b72003655fb0ef0771ac42fb84":223,"b9b53bb3165743993b8797301331b3fb9514dae6":462,"19afd94d2f94a2f935ed4dc2a2c1e78c16ec2a1d":108,"35eb5b65ffad22a6e1fc2bb0427404dbd82da792":11,"eb18beec44fd3a9d8c8505d32055405c289724e3":648,"ac3997d6762eb33f08e36970b322984d88192f3d":1392,"192724d72a089a641f49f6c16472f720e3f0dff1":848,"84bfc1a4f44f354c2528b6e575efb6a97fa1f9bb":918,"7a18ac5d3b3ebc0b4491fb55d5e4b30ca1c32b47":13,"e36f5ffba2bd64fe478f5692e528640b8382815a":69,"cecd3cd2dc33cf36a1ac927cd3b8478f04a5f844":2,"a69e79324427c26aa50c07249fe573caf2eef66a":2,"22c6b472614078b4c7a9b00fc07faee36661cddb":126,"373350df7dec5e4be455ec679ab0d16681a3ec22":223,"135f2fa37db91b77fcbb1237e6f1ce4852ca15d3":4,"5a9fe002a875f15531573b7f9960e1d85f77c2f8":17,"224fbf857c6ac521d32a2b9d1db16777b79a5700":3,"030c6c0c0580ec7c04dfda7348c3d133c3f4e5ca":818,"85d584f23cefd832f7cc3747321ed1ea25dc6d3c":419,"cf8ca6b0bb000769f68f0dcb092214bb33a98e24":712,"adb8ad5cf7bbd5321aca576e7c43413a65f0fd4f":184,"39b0d4134157c99b6ea6e2d8c968c0663a8cc165":184,"a9132a257a9e819e944a64704be12f1311e0220b":620,"8f6013992b775b7141497bb4686434c06a7f6b02":277,"51d913df4c5bd523618f5b0a65be80e294ca595e":556,"5cd4c606d8c84f4368c4f27dc1370e9aa32d9756":99,"f20c9fd71ee2e24f38dbd7f6d58733e3c14f1976":178,"ac8009e8e8e2533b2f19dcd8725a8b3195f0fe67":327,"2221dacd202705397c69b22783ce4023babef850":408,"301fe89be00f04492786e21bc88f430b1d40ae7b":339,"dbcee1f000587dfb0396cd2232266079c1486769":162,"7ea4051f4722a8fee15c373e21f35d00fa0ed3d8":14,"3550bdf32ae8cc0ce4bb4e3176511b68215bcd11":81,"d02bfc10528e5b2374c002f4b892dbb815f27de0":149,"02c41af61b89e7aee2e4802417fcc94deba2a1ee":61,"325a69a8217dd31c92df0b48bef49c873e56735c":439,"610d5198a90b994f3d29df6c531fd28ecde7fdc8":45,"bf4c0fb3d0d704a8af16938383a111dd2eb17dc1":459,"acc87466065239657167a65b629b7ac0284936ae":388,"f0adae5a80efb97ffe222a28d5e8165a88b5ed09":80,"ee8bd21dade682ec42623fb4bff4769e02ca532f":610,"7acc7d503aa6ea938d2db5a6cd379bcbcc9a37d5":321,"48c5cfb8bdef77bf12bd51252a1826ba0ddf796e":38,"73628baa68eb0175bb0e7189ade0151e4d4cb26f":382,"0e1ca3fb6f251f4e0f28dc1b1b8540794f7fca8a":170,"8efc12b3b4a02b34978c13a75ae51e719a760ae4":445,"2da67d658d5eb9a026c92cda8a5c0836d675a555":71,"304c23e0bdec5e57b5233431dc17da0bd7803156":202,"f0ccef02bd41d21559368da72d82f3a7421eef5d":117,"19a50dbc65e5d58ead734d75ca9beb874e0fb0aa":590,"597038f3a72ccd4eebb7c8eb4cee9470f03cc26c":249,"4893302312c1cf98d35b2260f509b24aaa4f0804":361,"1c731382ff358f9ac5b96f43b298494b88163bd3":293,"654145d2fca5a1d898504a704357e1418b2e3348":103,"ec332fbed2683a125a2a76573d316cac1c1ecdbc":45,"7af54698c5ebfb6bc8a6e5762819cdf0a2cfc70b":363,"ef0b73645146fb159bbcf6d19d2e7bd0cef9c53e":211,"150fb319e4499672969bf1e1337f04384b250603":5,"0ce668f56caf723703521571a00c6973cb81a603":54,"6ddaa911d70580b4661bdaa5daba8b4a950e4cba":280,"b63edebdb00fd4f86a8f0e8ce6f31c1ed3a9be21":156,"99ac17792d8e400467777ce0a0e7355b141712e2":1098,"7af7e30066185c6314305a9d57686a36022a18f5":22,"cf8b66755641d681ef340101aec39a3360208d68":249,"832d5256e57fbf6511d34e316c86cc1fb15be2cf":542,"011f23f9d0883c98c2654cdae139afc8384576e2":337,"cf57ff5bc75c60714b562cb88f67e5bf3dfb7664":82,"fb90abe280616e6d01f90013b7877112cb4f3af3":99,"4e89cd2384933bfb43ba4b6aeb221b700a7d4b25":2512,"9c96dd9ce69bf893e3fc7cdcb106d8f3583d4b94":194,"999c9df3712de504fc042b1a56b6b464fe75ff7b":385,"922282c77017bd90540748f4b517555f3d831893":196,"6a4481f4ce302dbbfa2098da473d7e89692398e4":181,"c7c3c6f298eda7d94fd8569eaffda8d416447f82":11,"eb6ec0c7ebb3faebaa55be043d09c62118a4e83e":755,"0ce7b79405e247120efca815710041ea72c1f898":369,"631d535d2a8dd5d939950e059f9f01b6e218b167":114,"54e01d1f50a4ae8a2f7f3e9b66d62d15fc18d4e8":486,"68d7446f8668b39066d3d2a29a13aee4bd44828c":307,"4106c529d5397041509ff766c69cf3fb62831bf0":319,"881df5e0771fe002ca2c096b0a3b82d77f1eb739":609,"f64f7544d4f24a63a880338556f1bbdb9cc19934":119,"5c05ac7687ab54b1aebb86291cac3ac1a34246b5":397,"e105c31722cbc9ebe149fadac80d28bec9bec738":55,"738ceaa8526addfd086a8fdcaa0eaf6208c96668":32,"209c551995dc3e5bffd467312aaae1bd5cbed515":92,"6b5980ddfb302939105a11278b353089249e5f90":256,"b9d4c84546d2ebb095d127fa530d2915148d9910":990,"dab44fbf3d14ecca5fb2b2a498c40a7d6a924422":2,"2b69e3523c4c356cbebc9d39ac742bd322d42c84":34,"5f3a9aa3378c3bddc1cd6288b2fd9c8852976aad":751,"670e6b8cbabbebc452ddaff3948e13ec444e91d1":23,"5c0a5f5c00204c4aa2f8a7074376227d1044cf8b":42,"328527cd15610182351a2bc83e5781b75262ba5e":52,"8ec59f7305d03fe0405bd9149cf6dfc71371c114":194,"b2e7c11108022897349421d60e0d8765cb4117c3":10,"fd9a790738c16e3a1b724092a9a830f59a62ca39":408,"2b00cb2730ab12b378868e5bd9b42d5fb1d74f9e":167,"de573a050fab2bbb66b81485c29bad4dde2d8d4a":4,"3045f98b566601da9d2eabdb3e9b3382e1b132b8":316,"1702049f2513f503db4c6eaccdd69ffacede1031":90,"2d56e17d3438324eb37cc581515a4841d09f8f08":163,"982e6abf22fed1e6fce0ccefb307ae07602a2ef0":177,"8f7c05c30c054bcd91ac75f40cd0dfae712e1c5f":298,"5478586a82a6aa7a04efa7aeca6f8296cb38312f":371,"75d8b4ee7a4d519090b3e36cf6a822b2fc06af4d":15,"edc6b6906604a661703e77862803bf33ee0faf4c":607,"b6a519edf5e7d135e2f3a66f5c54ebb8212c588d":69,"6d85215e132ed617234ca1e70a8304d42a141c9c":164,"988d38dbad057a62686aab67de51cd95e628d5e9":192,"29f09c26ae55caefb370eb9be8e257817a2ed3cf":165,"bbef82f1528e27659d5a729b955c63b41ebca233":179,"a5d9f8431257a6455f846b1bb1891197c4087c6f":242,"2bbef545ee499d8cee843cc7b6f55130016807b9":163,"089bf52a635b9ba2c44d57c9e2e272d56d172cb1":87,"d8a6a1cce3cf8b5bce989e470dbc6a4488afa061":89,"7377b120f38c2245818629a1a99cf6f32a0bbe2d":20,"d807d57e8018324d71435e43b7e279572fea463f":164,"eb4ac0ff0d1d0a217a43a8f4eea717e1aad9a154":217,"3acbf0547756831d9c821ee6dd7fe627e67654e7":40,"2d26629d9d2b4032c8e9788cc67d9fafa88e2729":64,"55de58a8cb10cbdd6b633bfa9fb269fe201c7105":208,"1b1116465f17ecb3e854a64860363d12baa80b1e":59,"d538130647341913daea247ad41132eeff48d2e7":309,"89ad4e50d67a95929a62b69156258f383a2006e7":189,"76770d74341249c50d348990ec30a63e935d6c51":35,"e6f560f674490e7d1c9f9e52dc9717d8ab191b22":97,"2ed99cfad7f7bca234f2367802abd6f8d56f5270":43,"dd2790e5567dda463b7b54e9b21d52c751e3acef":4,"cd102c13702cb714eee7970b8e3edc967d506a26":319,"23a94abf5e02dc8b1026b3bf2131e372f7e083c8":56,"0efddd897ff677060cf93ce80d5d0d4846728d13":16,"0a00fe764ffafe2e70e6757231e41616ba4a431d":1131,"97488de3f052387107b55296adc7c312973cf8b0":23,"6e3c9f3f326d7dc4f7619aa95ce7fbda138fe9de":8,"4b2ff6e115a1fb567a54c01e2aa3d010aa0764b4":32,"6675c5eb7dbe22c6240ec5a46566bae8149dc6e8":6,"766cc5fc334bb2abd779ad2039449f14aa7c82fd":161,"459e917a38a13b4de952a4f15dd281a8e7455ed9":139,"580f4172069388f9c4e7f6f853eaf453d9f575ab":108,"06119c669e3e0e01486ab651ec07c45cfd9c03db":120,"4a8423d236fb941f923e5be06d050fae4d0dcbce":101,"66b8b9f9e8a6b1723b0c57f9dedb954a6f5f2c8c":89,"6a4d99b58de13b0a20fd94300ecf1cc2cd0ff482":1,"3a612ef8aa20688a8b5b5ec109018388e34f8337":24,"005329cd35a6054140aec894dabb26affeca3cf5":30,"d3b564b345816417b0cd1db185f3554fea712add":1,"808a11e2be94eaf43cc730ade1e928572ee410d3":20,"b0d56705ffc898cad81555cf51e673871bbc78ca":429,"990a816d05ca936a0bb40ad13518101ab8988217":123,"1809ffb22860c85ee78435d1880f4078cb9d9067":447,"0b6402f64b0e4ce62614fa7200d35e4c3252c7dd":108,"ea808edfb843d864f621035c903cf147fe2236fa":196,"ed5a911e29848e72392ce10df9d6bc9b494b97d4":305,"be258bc88be6eada764314b9691965b184f8c2e5":163,"a075e78b5a685d974d64984e4a50267b35f75054":212,"c333f5faa5a7802f8922245ff7a484d5fa29242c":71,"bdbe5a6aceac1fe69317e6eea0866b22ce552571":73,"404084baedaae65b23cf3c545e594cba4d8a1642":58,"97a3a0734eb1023045a893db3512f8fcd03b84b0":44,"5749866c5a78675aa4306165402c2e054a56fc98":138,"08710f2aebc3ce3ecf4acc9f7c898d3916a71c31":185,"04f5299a8f9f782b9297ff32a8302d3ef9e59063":253,"d2c40afb6684b5c8869a640a44734dbbbff90272":219,"1fe1f9c9848af4dac002b3762076777cfb7c20f5":24,"d0a4d6c4b0d37a2d3d2ffd00f28d274cd0f89a10":3,"d1d651e9fd60100e4582902e08f86e75a7bea4cf":58,"1fe900c2b8404bbad991f899393472de54e0c179":804,"68dc6fb9750aaad953b2ce8245c7a0aee8d4668a":118,"7cff4049833f37a9a3e41ae9ce227cadb5cb8f80":17,"b36b106f1aea936072d71aa6cfaa53094da0e340":791,"64601c588df7d98b6910fd7c64ab9ce5914c8254":8,"d968d2da3be2f4ae58bb3d1c56c580c83972269d":349,"26805f5acaad2e73ace6e5aad9b928c0dd2d2a76":129,"d0246795fbce4bc5c3cfd2a6c2415aff92e6ffee":91,"20534b540963850f8f0f6f6ef1491cecf8ace9f8":31,"cc574afc9ff1ce676f482f2ec517a0cd178aad9e":26,"4cc7f1659e587c0dddb16184554669cb6042d798":217,"7acc06c8389f78280cd2a21a3df5adfb2dc6c7dd":15,"74de332ce78fb1299916d9093cbfa7d9f100b0cd":24,"aca994d7d2b69d4e814ec7fd7453236632c019a1":267,"e8412ba146c249deaac9cf897f5d764c0854743e":139,"0b6e76e239d980b768fae4b3accbe08f098d3f5b":448,"c7b93d31a022a3cf76945aba15ed45789f4e88cf":79,"fac0f16e69187e7b3a0391613cc62674e23fb991":1466,"8f0290e08da2157131066b00d5e6d7122ec047d9":32,"489f84e5a51e25fc8da3d390f1656d7d7fc50a09":47,"047fb7e860468a66d6e1eacada72175caa6e8c31":50,"8ee6b61258f3ee788778545f952d56d739e3cab5":15,"aa68928d1e2e82d95bf4492fa0a7bd38e0bfdd5c":987,"170a5dd45126bd6e5f7836c3729c9ccdbbf3ed93":781,"ae2746a50260f4a0d235fc81b8a664cfa823d561":41,"79279a9f4e64807f0b069962ba51b2de6188e82d":107,"86fc337dde62b488d8c9a730df3a6cb46c2de0f2":192,"888b8d680969ff0b1ab38f26fc6e3a281069de29":75,"a8da3b514aaa57a387621908a48622be91604854":174,"978c893ba30fe0c4c4879fc5b155baafe1e1ed3a":294,"a321aca8de47a42f14703125a1b8841727f3308e":205,"7cbac175d9825ddd30781eb0aaa765cd95a7513f":64,"50281efffed0f4135c47dd129232b2e609a796e9":6,"ca3416a25e3f150df0c92aee7869e7aab2fb67de":311,"072610551789fcd87c3db977b6f879dfa74093f6":313,"78301429ab1cb5f97357f4a42548e354f11689c3":33,"923f774e70eead975733848bd8316d9380de6848":132,"97cea671736d1e2a6e41ae01a2ebc7eb9268e11f":198,"162440d0d705c40fe65fb8d4a38d1364cc877b53":101,"8ed7e01e173dd2d6aff8e899b4c6253bc6a43c6e":89,"4ddd832b286c4e343c6e7bd0558ee37e71f88fc4":46,"da34464d6cb81cfe4dcdcec10602735970da5de0":129,"77dca62fc5b00f8a87133b651b1c323e1d50801b":388,"801f00c199a7f94b726b617fe5b03c4c6c2d8544":58,"1f5d9084dca0ec8a8fc68ffd4ab01559429929b8":405,"cc17af844e1d4b3595984508b4e38a8868628e94":118,"0a0373bf18c855dd05eff0c18b25686b5232a0cf":76,"88ff2dc2573c21e2cf1c86e8d4dfb691b5701379":154,"849dbd22ec1c9b190b1c362689ef76d9dae18856":79,"30e39003ae1286580582974681ce21c41cbeeaf2":296,"28ae566f95a5132762a39e8b2a32c4aa651b5707":91,"f1f8d2eb8ce8303b85376069007d2e2c7029dda1":22,"44abe72bf84ec06fec34e8ae8bc336c74c0982b2":63,"205a5bbd15871113269cd00648c7a0d88921fe6f":23,"0768523d35ecf7c8a4b13f807b35cd3378d8fcf1":24,"8648ff2172eb80d18bdb70081cc3c168be5e482c":312,"315cc451a335ee41d4caa995664ac377fa249246":1279,"c6022a91f0f7b1cf07df2827d660991796eb4c31":69,"34f22c9a3b8519fdfba248c9f4a0b1d6582dacc8":132,"292672c1e6beb17ba5861285695dc26d76a318c6":81,"724fcc8ce6e753801f1ec33e399519c92a9734ba":35,"3c33af5db8e69f919029ddf1d3e54a97ba69ff87":84,"fefd5410e2b9093916fbc0b53932542109209e5b":842,"53ff871a68db5e938682405aa3cca8df0168e48b":159,"d58c8a938a28850c16fa4c03a25a3557adb45a24":24,"c7e0eb912727918bde4b5c78a4773a57a2e0f406":82,"628b155f679e4506f22afd68e5aa34065620de03":20,"7628402337f8a23e95c22a0ef67ee473d2cdafe1":177,"6bcd24d668673d571335e20997f285a686bb2f77":35,"5028fe5f25cd4d08a56a937883b30e3b853c2d45":122,"895d13af8fb2ccfa7e57ece38597013baa11c66e":2,"6351c7707a5071c8611993f6b18553eac23107d3":438,"24e2cfe37be9692005535431482dfbee7be48824":209,"7ffc493c8e5696c3b7e1b670610cc00054335d60":133,"88d5a61bf290b2ccdb4d26210d3b59661fa71cd7":63,"0d80bd183a33b959acb04558d4809af33c878c08":11,"703d4f0988aafb16af91899199850a64f12900de":8,"60b22b47cf50ac661deba4fca30c13fe8f02ac52":137,"a8a389ee83f8e06f8b6d1deda57df29586fe8d80":278,"88f1d864ed61fa46af88f95e29cc319f3493e216":500,"49f59ee1903911858dd5af30052dd1403649ac0c":301,"42d4131b60a56ed8d87bdb961a7d5876e2c1a991":634,"2fa76760a94449e847312baa9d97127be96aa6a0":269,"09c82f76febd3c619466c5c54aa2c1a5167c2f0c":1642,"7dbce26bf405809d3eb5ff5b5bc247aafd0b424a":479,"2fca09b6cd62b8857a2c9a3c4579fbe82a96f895":352,"14935f64133a921e4dc24a86b25f92f494fa210e":635,"bb49567bb29fe0b75f02a949159a436a522763de":276,"cef41caa62338c8a26cc9e007d73de61193cbcd0":1024,"ffcdef6de80e050df8f734d7699075ec5d382fe1":643,"fcf1a4bc9e00ea06edf1aeaa32605097c3eef46e":889,"7560357a114aebf75934a6c5b3b3a26cc664e409":1110,"80342f1594d52bf10bfdf1b28b2d52ae86db26e9":935,"87a78343d37f7eff99d5fddd31c57ab65290982f":1035,"29a1ebb20d3527a661196934e8e722610428240c":381,"b4564216d13991c45066d2535383396b6139e4dc":23,"e673be2cb37e312aabc93378cb055be94ee34861":8,"39bbe57355a4eb747d6e91df86a26e48e422e0cb":4,"d23423da98281621919134f0286951b21ceae7c6":4,"3cdf26d07288557ca6de2ddc787043abe568853b":902,"8713cb35ab1ac2a9b177435cca3b0693a4680d25":294,"65e384dd0b6d79830646e539aadd2f31701faed1":63,"c6a9d0c7b1388c5a17181c4cf39ffe5a87f185b3":283,"87fd7a61bcd58d3b22d6fbe648576b8544eb7f3f":341,"167a58d069d35f862a8e31d2c6e8d796e0142122":54,"42657d34e408dc7c3b31be784b5ab43fc5cbbe57":287,"d000324fd17735515dd65bbe8e46fab6636dd2ea":673,"abfcaa81628af6c230b74804055fcbe9930fc7fc":451,"57fb21053c84281d8f8cd4c5e605078bfacf1dc1":88,"0d56bc6d1940906884fc1ec40f97c180a48ed43b":2,"780763ab40c27775763399246fe4972701020d93":271,"aaff92689ad042130aa9f11db586fd4730a5156d":472,"b6b4ab038571e988acf9e1d1041a81739949c59e":1429,"13128e2e1300bf07fa5aeacba33cd30f8b568012":207,"760f13b41dea23015af87acb8e9083e98d15bb24":43,"934af58a8782db76a96aa2f27e223f8701dbf21f":196,"7078f03af73d6051a59bde8d7e4a6ed4fe28406d":78,"447813b8eb7cbf7c02b8b4ad74af41f422b9e257":228,"4dbc84a8edd7ed1fd228dc0c1087156b8ff0018f":612,"4b45c03b49215a3de443de35eb8251943f02ca1a":185,"12a46670ea733f94af81014b4c219d67d62544d2":141,"ac5f8359a1858a28bb0a076b2ebef520379d958a":683,"51fb579984fce15e0d0ccbbe92352bbb1001a280":86,"31b1478ac334d78f2c36ed2469ccc66c3eb2f95c":392,"695aa34bbf4560f98eb2cfec7e5ecfc56e22901e":276,"2a5923379f9b78236a696c428d2eea8875a50567":339,"cfd4bcc7fa0d921eeeadf998c1494bee7e8eaa58":1,"ffe204d94f6df3417fa394d1e6f719b53b79f1c3":60,"4b511adf63add793f8d4f23076bb0c7ac2532556":329,"029252b02c9f463b82d40e6d26ec3475db4caaaa":235,"376678365ce0af5eb090bdc0134e3735cfe1fefe":128,"01c092cd467576ade91c64d942134e4a02667948":80,"26e06f72036ff009a5adcff06f6bf48e5aa44160":186,"76e091f3e700ed675ed11e600b98d61c9dcd0a87":241,"dc21311d9fa7c033aac121296a127d25724bdcb9":158,"6fbaaa4170f27c635e94501ac15c4bd3ada20ed5":465,"3f5701ff993d39767d2ecec9f7295562341151dc":88,"4549c07ef7f9f44d3b4c7ca671f0b36e36ff6c2d":45,"ebe436bc426a3858c4fddc7f04b496668b1b5ff2":323,"3fb831502d3db5634b5b3cd6be5dc44f95fe7a42":73,"54fd44af929f234a73265ffd16f1e24c567d0609":128,"3d4d66c2456ef875b492177a050220507ac505f2":77,"a4205cbbe068b26399557864d330c14da9baacb2":171,"958c4b8441f332d397d36f6c40db2e3dcd7ac9ce":50,"5ecf4cfa859003ee85e89c6c490cfccb4cd57857":106,"ce359fc2d4d5995978e9b3f08d124d9304e0c153":64,"1b99104e1b8a768a05616d9b1448a63afe783523":18,"382eac3823908b65cd8fcdf80c32c0759b84bc98":94,"a0686dce5c7f43f2195fe34336242d2f13c5d55b":11,"785b681f2a1a1816ad605662000e9534461a8273":80,"2ca06eb0f76fc405b260c052fbc90b704ab59756":53,"81bde18dad4e6015fa439d9d9ebf99ecfb2b0d64":55,"7e10b8c98a363b6d2a16721ef31692f74454e3b6":2,"6a02e4089b878af2774bb95e61cb2488c6cf640e":510,"d901ba0a0f7e2b2452a0efce582b73dfa51628e2":84,"71badc7e76e6df47273ac48047c75422d143d48c":286,"334e7a1e36845e5347904158574c46b7a1afc02d":145,"261800ec73999e7c7872a2ea3565bf6e0b636c16":253,"c95112a85d183e25a74994ecc4f3fde6f48be13d":273,"3a1478b38ff122590d7a41f9f0c079a3f2e90481":240,"870f8e12a7a6f12f05f33b49c3349ebea117ffbb":170,"2b2f115cb9f2f9d0e3970761a3548fefecd89b97":162,"9b3faa2cfa1faef99754cd824ee12a7f6c430518":383,"c3ac6b5ab326c73ae5081ff13ea10de46c0cae74":130,"c691e4ef03cc1c267d54273d0eb0aa1fce9254c2":114,"8da3845cef62a3420583b8565a91afcd23de6b83":204,"533bfaae4cd6f9ece0a98e02edb630ccb0a31730":108,"fef7f21b61f941496925a330fe37b56e0ca43dc8":136,"80554d355c77b353a6b61afdf3169cf303d44deb":78,"e1e9fbae7da2b0ac394bdf463c11d39b17397fe6":5518,"38edf4990904ae8978d26072e28e872a9c6f6fa5":1,"4a59fef7cd7cd4b132ead5a897aeae1ba1d40276":1,"39b78054a5b1a2496ced74e906e65b8976ac6467":2354,"a33ad0fd164b71660788cc9ffdcf20dc739ce268":2530,"da9451f03cd427ea846a0d15c27c602fe9a6ae74":12540,"71d08e6b97ac047e5dd24b30e08ffc592eaec6a8":4604,"31850777fadc32976a4d88b4ea50e53a4e6ca24d":10434,"9247f13e7645cada69ebdc280b6e6a71551dcfc3":727,"4bff12623205a456651ae626442bdea655461a0a":296,"9211e9962bd3a146e798b3a8ec3846ed954c87df":101,"f475e79924cbbb9ca5917ea0cf69c9b97ed8d2b1":320,"4e5c16ee9df6b2b5a5a6b3f48569389ef3ba53bf":197,"022ffd4a6d04742aca82b72850ff1f50373fce3b":585,"e4e1c5a6efe24396cda2e4778bf3083b8252a187":516,"08c94194dfe8315aeac2e2da34e2d77ace614014":931,"8f74057b52664aed3f59c6fe12b174498dbb339b":272,"3621a2007beb834b90f0bbfd56b4c95ff392ae6a":326,"84ce04fca2e74f50b11e0c5c2499c633fea19543":690,"587458de720f7a4cb4fd563c3078d41db25543cf":501,"953ed8ab651012bb1544d2744efe083ba665b587":7,"ce51255a7af608a2916bb2de7c8dca7b61b9e69a":118,"df901abdc0cc48002493198ddec29e14176b65a5":550,"1194c6441694a7d03981cde609b9a3c34bd70437":486,"5210bba0c179036d4c7562ee4d83ee5dbfd8aed7":46,"92f712dbd3a68eb346aeaea61b8a349c239a5462":859,"3edae1ae7ad4fde233531adc57696ca752883a20":558,"c7a534f1f2edc58c6ead4b1c0c73f5dc4cb54baf":762,"dc7165be3217509391fb896b174e880594e97e17":182,"c8dd42d3921c712d19d92386a24ad968c6d33d52":10,"483747da982b59dcf341122d0ae0c12f3a213ad2":33,"738898e8909d2988d9b27bf417f855e71a99bb61":586,"404ec7b18e2b0d719a0c294b50acd1a60e37805e":1985,"d7e9df5fd6cc296368b05040664c0eb886021845":451,"f67e7156c84848d56698d053080df313e5a83430":153,"3c439ab436e45df4999942b54fb077bb3adb9afb":512,"bc5d85b18e688ef4e74a744bf4faeeb1dc677d80":513,"71e337a724b378088f81532d39b4377769a3b8db":9,"1774baa036e5f21b0b6bf64b26980f1f9455d741":1495,"68183e22ebc32d9b006d97bf5de01d97cb955bc4":16,"f9db50ba7a44d9ab9ee85e069574582df15caa79":855,"c969b7d85342e875144d10ce72417c152a7fbc8a":419,"d9144ead53d19accd1156598a716dad4b4e6fa92":30,"085ede46b7973fb27d7d7828cdec02e0aa6d8d6f":12,"0d239156300e2d7524da3a19777566fd6dea96e2":814,"f0eae74c7d73cd53da5598a7be369f4bcf9e1d83":294,"41f20552b36277fbe4dcfb953edd00df493210d0":231,"a416a42527acf33f93eb5822b4d3212c04b543d5":88,"0c6ebae51bbc54ab2f37bc281255f0219546d747":1477,"dfa66704776d13299a188cc4a7aa539dc773fcf5":1106,"efebec60c55a029e8d16eba97ac358dbc2aa682d":8099,"91bc2746661458a29be307177b4dbec875d85909":1906,"04b9c13d0c15a51a30200dd94a6221ee3db47fb6":517,"30b2702cd3fedf3eb3d4142a8423efc02f5d6c87":127,"7b2beda90ea3137044cf7b425fd3e41e5b68e8ab":384,"e857d2681a19c9e074bdff0aacfb3a70fefc8750":224,"80cfdac340e5d0191b5833b2a527c1850ca3b8a4":1601,"ec7b7c8300da758742ca4849ef82a85930641d50":201,"bcbfb900aa4ff62134fa3f666a56de9135b0e3e7":16,"d3dadc122c25c114c2c2716c7272e36a81e9c624":23,"3f10fb811d9d2df2cc50e85e443ac39398b69025":2942,"dfdd4aaca4b602b03433abff37e919ced2ed3836":48,"cab6170b69181f2da30785d0f797f5616bddb469":173,"d00a4306d474c968faa047830e6150d0acbf3ea2":332,"bf434038e8a433b5a038a45ad2622a10034a02b8":480,"ed49a7b7271a846391ca4d3a8c7edee3ddb05ba0":978,"8822862bc6913d241f200386d440ca04b65534f3":616,"70f1fc7c2677a015e075eb1617ab0f672bdd4e4d":712,"858ba7aebaba5c038b7875012680f7868df8313a":664,"8f22cf9492f96aafcc36bb31dabe2c1520345d2d":3605,"7afa705ab6811dfd9fd17a6dc1673ba581634d0b":2,"599f6016ddff32a0341fac01a2db22b0a575b726":16,"b65cfe6a8d8ba2b44a9e25aedcef9dfde3529b4f":4798,"8744c4461da419e727484db3cb6861617978abfb":1470,"d9c8a5fa07231e654c8a6b2e318c53d49e0a1e04":1297,"659cb0de1b79b9f6425d7c61f80f62c3c4465129":2714,"a3820d0a836396d70400a808c016c4cc679d02de":452,"ab1b08ca63330678b818c25f73aeeed4f08a65ed":1221,"c1c15edb76e2ba3d53473319acce8d5668d99d36":1788,"647c9f32157a7d9c586e719366313878d3ebac0b":1601,"1742ff2f09ef0f845a7a445e4504e533241d5e2d":265,"02d1d746ff46812bae61d06f27c76a1790537b49":1920,"3a291ccad44dd58fabcb9488579cf7806c4e94fe":1801,"437603decdaacfffda88e0ab9474865f9d4fad32":1426,"16dbc558ab1c8827fbcc9a5e85ec63dbe7427989":13760,"512dd669115fbfd363ffb4adb4fe24bd83b34793":632,"1f1e1d7a5c25ff7a29ab4de822141bb6a0b003e2":4261},"excluded_import_commits":["1891582985f2d4a2d58c3c7235dc918fc9eca175","488f26dcaed4d5ee752b20d81d161fe31269c82e","76b52bec6fb22856260355a8f723add67100bb1d","c4d6c51e5acfb08ba8059c2e6ad3e56becd05442","de6937eff889ad488e6f9fabed56b63f57c34a94","f2b27c039278d8d64eedec2d54b098ec1e11e7e0"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":56.0,"flagged_releases":14.0,"max_loc_per_day":65359.9},"findings":[],"evidence":[{"kind":"release-burst","description":"v0.1.0-preview → v0.1.0-preview.1: 21,924 lines in 2.68 days (8,184.7 lines/day)","ref":"v0.1.0-preview...v0.1.0-preview.1","url":"https://github.com/youssofal/MTPLX/compare/v0.1.0-preview...v0.1.0-preview.1","weight":0.4},{"kind":"release-burst","description":"v0.1.6 → v0.2.0: 6,812 lines in 1.46 days (4,653.8 lines/day)","ref":"v0.1.6...v0.2.0","url":"https://github.com/youssofal/MTPLX/compare/v0.1.6...v0.2.0","weight":0.4},{"kind":"release-burst","description":"v0.3.5 → v0.3.6: 5,121 lines in 1.22 days (4,213.6 lines/day)","ref":"v0.3.5...v0.3.6","url":"https://github.com/youssofal/MTPLX/compare/v0.3.5...v0.3.6","weight":0.4},{"kind":"release-burst","description":"v2.4.1 → v2.4.2: 19,003 lines in 0.95 days (19,945.6 lines/day)","ref":"v2.4.1...v2.4.2","url":"https://github.com/youssofal/MTPLX/compare/v2.4.1...v2.4.2","weight":0.4},{"kind":"release-burst","description":"v2.4.2 → v2.5.0: 24,887 lines in 1.18 days (21,093.2 lines/day)","ref":"v2.4.2...v2.5.0","url":"https://github.com/youssofal/MTPLX/compare/v2.4.2...v2.5.0","weight":0.4},{"kind":"release-burst","description":"v2.5.4 → v2.6.0: 24,133 lines in 4.32 days (5,585.6 lines/day)","ref":"v2.5.4...v2.6.0","url":"https://github.com/youssofal/MTPLX/compare/v2.5.4...v2.6.0","weight":0.4},{"kind":"release-burst","description":"v2.7.2 → v2.8.0: 19,165 lines in 0.47 days (41,043.4 lines/day)","ref":"v2.7.2...v2.8.0","url":"https://github.com/youssofal/MTPLX/compare/v2.7.2...v2.8.0","weight":0.4},{"kind":"release-burst","description":"v2.8.0 → v2.8.1: 5,924 lines in 0.09 days (65,359.9 lines/day)","ref":"v2.8.0...v2.8.1","url":"https://github.com/youssofal/MTPLX/compare/v2.8.0...v2.8.1","weight":0.4},{"kind":"release-burst","description":"v2.9.2 → v2.10.0: 29,051 lines in 4.06 days (7,154.7 lines/day)","ref":"v2.9.2...v2.10.0","url":"https://github.com/youssofal/MTPLX/compare/v2.9.2...v2.10.0","weight":0.4},{"kind":"release-burst","description":"v2.10.0 → v2.10.1: 18,454 lines in 0.93 days (19,836.8 lines/day)","ref":"v2.10.0...v2.10.1","url":"https://github.com/youssofal/MTPLX/compare/v2.10.0...v2.10.1","weight":0.4},{"kind":"release-burst","description":"v2.10.2 → v2.11.1: 54,950 lines in 3.13 days (17,558.3 lines/day)","ref":"v2.10.2...v2.11.1","url":"https://github.com/youssofal/MTPLX/compare/v2.10.2...v2.11.1","weight":0.4},{"kind":"release-burst","description":"v2.11.1 → v2.11.2: 7,546 lines in 2.14 days (3,530.4 lines/day)","ref":"v2.11.1...v2.11.2","url":"https://github.com/youssofal/MTPLX/compare/v2.11.1...v2.11.2","weight":0.4},{"kind":"release-burst","description":"v2.11.3 → v2.12.0: 55,706 lines in 7.05 days (7,902.2 lines/day)","ref":"v2.11.3...v2.12.0","url":"https://github.com/youssofal/MTPLX/compare/v2.11.3...v2.12.0","weight":0.4},{"kind":"release-burst","description":"v2.12.0 → v2.12.1: 73,921 lines in 8.68 days (8,512.2 lines/day)","ref":"v2.12.0...v2.12.1","url":"https://github.com/youssofal/MTPLX/compare/v2.12.0...v2.12.1","weight":0.4}],"data":{"releases":[{"from":"v0.1.0-preview","to":"v0.1.0-preview.1","loc":21924,"days":2.68,"loc_per_day":8184.7,"flagged":true},{"from":"v0.1.0-preview.1","to":"v0.1.0-preview.2","loc":1807,"days":0.33,"loc_per_day":5490.0,"flagged":false},{"from":"v0.1.0-preview.2","to":"v0.1.0-preview.3","loc":18,"days":0.04,"loc_per_day":432.0,"flagged":false},{"from":"v0.1.0-preview.3","to":"v0.1.4","loc":1502,"days":0.56,"loc_per_day":2671.0,"flagged":false},{"from":"v0.1.4","to":"v0.1.5","loc":2365,"days":0.38,"loc_per_day":6188.8,"flagged":false},{"from":"v0.1.5","to":"v0.1.6","loc":324,"days":0.2,"loc_per_day":1623.2,"flagged":false},{"from":"v0.1.6","to":"v0.2.0","loc":6812,"days":1.46,"loc_per_day":4653.8,"flagged":true},{"from":"v0.2.0","to":"v0.2.1","loc":493,"days":0.11,"loc_per_day":4423.2,"flagged":false},{"from":"v0.2.1","to":"v0.3.0","loc":5158,"days":2.4,"loc_per_day":2148.7,"flagged":false},{"from":"v0.3.0","to":"v0.3.1","loc":576,"days":0.6,"loc_per_day":957.0,"flagged":false},{"from":"v0.3.1","to":"v0.3.2","loc":1604,"days":0.34,"loc_per_day":4739.1,"flagged":false},{"from":"v0.3.2","to":"v0.3.3","loc":1363,"days":0.81,"loc_per_day":1688.1,"flagged":false},{"from":"v0.3.3","to":"v0.3.4","loc":1083,"days":1.17,"loc_per_day":923.6,"flagged":false},{"from":"v0.3.4","to":"v0.3.5","loc":831,"days":0.57,"loc_per_day":1451.5,"flagged":false},{"from":"v0.3.5","to":"v0.3.6","loc":5121,"days":1.22,"loc_per_day":4213.6,"flagged":true},{"from":"v0.3.6","to":"v0.3.7","loc":4272,"days":2.22,"loc_per_day":1928.5,"flagged":false},{"from":"v0.3.7","to":"v1.0.0","loc":159,"days":24.85,"loc_per_day":6.4,"flagged":false},{"from":"v1.0.0","to":"v1.0.1","loc":43,"days":0.16,"loc_per_day":272.2,"flagged":false},{"from":"v1.0.1","to":"v1.0.2","loc":652,"days":0.46,"loc_per_day":1426.7,"flagged":false},{"from":"v1.0.2","to":"v1.0.3","loc":1669,"days":0.27,"loc_per_day":6119.1,"flagged":false},{"from":"v1.0.3","to":"v1.0.4","loc":426,"days":0.66,"loc_per_day":645.0,"flagged":false},{"from":"v1.0.4","to":"v2.0.0","loc":2521,"days":24.5,"loc_per_day":102.9,"flagged":false},{"from":"v2.0.0","to":"v2.0.1","loc":1463,"days":0.54,"loc_per_day":2717.0,"flagged":false},{"from":"v2.0.1","to":"v2.0.2","loc":2802,"days":1.73,"loc_per_day":1616.8,"flagged":false},{"from":"v2.0.2","to":"v2.1.0","loc":1052,"days":8.03,"loc_per_day":131.0,"flagged":false},{"from":"v2.1.0","to":"v2.2.0","loc":2629,"days":1.88,"loc_per_day":1399.8,"flagged":false},{"from":"v2.2.0","to":"v2.3.0","loc":5403,"days":2.02,"loc_per_day":2671.2,"flagged":false},{"from":"v2.3.0","to":"v2.4.0","loc":28974,"days":10.15,"loc_per_day":2855.8,"flagged":false},{"from":"v2.4.0","to":"v2.4.1","loc":4367,"days":0.95,"loc_per_day":4616.2,"flagged":false},{"from":"v2.4.1","to":"v2.4.2","loc":19003,"days":0.95,"loc_per_day":19945.6,"flagged":true},{"from":"v2.4.2","to":"v2.5.0","loc":24887,"days":1.18,"loc_per_day":21093.2,"flagged":true},{"from":"v2.5.0","to":"v2.5.1","loc":412,"days":0.44,"loc_per_day":930.3,"flagged":false},{"from":"v2.5.1","to":"v2.5.2","loc":103,"days":0.21,"loc_per_day":481.2,"flagged":false},{"from":"v2.5.2","to":"v2.5.3","loc":1371,"days":2.34,"loc_per_day":586.5,"flagged":false},{"from":"v2.5.3","to":"v2.5.4","loc":3859,"days":0.94,"loc_per_day":4090.4,"flagged":false},{"from":"v2.5.4","to":"v2.6.0","loc":24133,"days":4.32,"loc_per_day":5585.6,"flagged":true},{"from":"v2.6.0","to":"v2.7.0","loc":4034,"days":3.68,"loc_per_day":1096.3,"flagged":false},{"from":"v2.7.0","to":"v2.7.1","loc":207,"days":0.04,"loc_per_day":4968.0,"flagged":false},{"from":"v2.7.1","to":"v2.7.2","loc":854,"days":1.48,"loc_per_day":575.4,"flagged":false},{"from":"v2.7.2","to":"v2.8.0","loc":19165,"days":0.47,"loc_per_day":41043.4,"flagged":true},{"from":"v2.8.0","to":"v2.8.1","loc":5924,"days":0.09,"loc_per_day":65359.9,"flagged":true},{"from":"v2.8.1","to":"v2.8.2","loc":359,"days":0.26,"loc_per_day":1388.0,"flagged":false},{"from":"v2.8.2","to":"v2.8.3","loc":1955,"days":0.79,"loc_per_day":2490.3,"flagged":false},{"from":"v2.8.3","to":"v2.9.0","loc":0,"days":1.73,"loc_per_day":0.0,"flagged":false},{"from":"v2.9.0","to":"v2.9.1","loc":5788,"days":2.11,"loc_per_day":2736.7,"flagged":false},{"from":"v2.9.1","to":"v2.9.2","loc":4957,"days":3.02,"loc_per_day":1639.3,"flagged":false},{"from":"v2.9.2","to":"v2.10.0","loc":29051,"days":4.06,"loc_per_day":7154.7,"flagged":true},{"from":"v2.10.0","to":"v2.10.1","loc":18454,"days":0.93,"loc_per_day":19836.8,"flagged":true},{"from":"v2.10.1","to":"v2.10.2","loc":1887,"days":1.86,"loc_per_day":1014.7,"flagged":false},{"from":"v2.10.2","to":"v2.11.1","loc":54950,"days":3.13,"loc_per_day":17558.3,"flagged":true},{"from":"v2.11.1","to":"v2.11.2","loc":7546,"days":2.14,"loc_per_day":3530.4,"flagged":true},{"from":"v2.11.2","to":"v2.11.3","loc":17102,"days":10.62,"loc_per_day":1609.8,"flagged":false},{"from":"v2.11.3","to":"v2.12.0","loc":55706,"days":7.05,"loc_per_day":7902.2,"flagged":true},{"from":"v2.12.0","to":"v2.12.1","loc":73921,"days":8.68,"loc_per_day":8512.2,"flagged":true},{"from":"v2.12.1","to":"v2.12.2","loc":553,"days":0.07,"loc_per_day":7692.7,"flagged":false},{"from":"v2.12.2","to":"v2.12.3","loc":12319,"days":34.89,"loc_per_day":353.1,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":355119.0,"index":0.013,"count:narrated_steps":1.0,"per_kloc:narrated_steps":0.003,"files:narrated_steps":1.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":3.0,"per_kloc:emoji_in_code":0.008,"files:emoji_in_code":3.0,"count:assistant_voice":1.0,"per_kloc:assistant_voice":0.003,"files:assistant_voice":1.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // Finally, surface any customModels whose localCandidate wasn't","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeLocalIndex.swift:90","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeLocalIndex.swift#L90","weight":0.0},{"kind":"stylometry:assistant_voice","description":"assistant-style phrasing left in code: Every pattern here is a complete first-party artifact name, compared","ref":"mtplx/default_models.py:613","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/default_models.py#L613","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":8.0,"secrets_low_confidence":5.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"apps/MTPLXApp/Tests/MTPLXAppCoreTests/SettingsRecoveryTests.swift","line":50,"fingerprint":"apps/MTPLXApp/Tests/MTPLXAppCoreTests/SettingsRecoveryTests.swift:generic-api-key:50"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"apps/MTPLXApp/Tests/MTPLXAppCoreTests/DaemonAPIKeyFileTests.swift","line":55,"fingerprint":"apps/MTPLXApp/Tests/MTPLXAppCoreTests/DaemonAPIKeyFileTests.swift:generic-api-key:55"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"docs/perf/receipts/deepseek-v4-sinkhorn-stage4.md","line":33,"fingerprint":"docs/perf/receipts/deepseek-v4-sinkhorn-stage4.md:generic-api-key:33"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"mtplx/kernels/sdpa_2pass_paged_q8.py","line":9,"fingerprint":"mtplx/kernels/sdpa_2pass_paged_q8.py:generic-api-key:9"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"mtplx/models/laguna_config.py","line":72,"fingerprint":"mtplx/models/laguna_config.py:generic-api-key:72"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"mtplx/vision/mrope.py","line":37,"fingerprint":"mtplx/vision/mrope.py:generic-api-key:37"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"tests/test_compiled_verify_evaluated_weights.py","line":517,"fingerprint":"tests/test_compiled_verify_evaluated_weights.py:generic-api-key:517"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"tests/test_gemma4_session_cache.py","line":37,"fingerprint":"tests/test_gemma4_session_cache.py:generic-api-key:37"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"tests/test_graphbank_compiled_verify.py","line":2571,"fingerprint":"tests/test_graphbank_compiled_verify.py:generic-api-key:2571"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"tests/test_tune_qwen4_exp_verify_strategy.py","line":102,"fingerprint":"tests/test_tune_qwen4_exp_verify_strategy.py:generic-api-key:102"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"tests/test_vision_session_cache.py","line":160,"fingerprint":"tests/test_vision_session_cache.py:generic-api-key:160"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"mtplx/server/openai.py","line":23462,"fingerprint":"mtplx/server/openai.py:generic-api-key:23462"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 0b6e76e239); removed from the current tree but still retrievable","path":"mtplx/graphbank.py","line":2344,"fingerprint":"0b6e76e239d980b768fae4b3accbe08f098d3f5b:mtplx/graphbank.py:generic-api-key:2344"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":180.0,"findings_high":85.0,"findings_medium":94.0,"findings_low":1.0,"weighted_findings":96.763,"scanned_lines":401655.0,"parse_errors":18.0},"findings":[{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"dashboard/src/lib/uplotTooltip.ts","line":87,"fingerprint":"javascript.browser.security.insecure-document-method:dashboard/src/lib/uplotTooltip.ts:87"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"dashboard/src/lib/uplotTooltip.ts","line":87,"fingerprint":"javascript.browser.security.insecure-innerhtml:dashboard/src/lib/uplotTooltip.ts:87"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/aria2_downloader.py","line":234,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/aria2_downloader.py:234"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/benchmarks/code_eval.py","line":293,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/benchmarks/code_eval.py:293"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/benchmarks/runners/preflight.py","line":36,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/benchmarks/runners/preflight.py:36"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"mtplx/cache_bank/cold_tier.py","line":3108,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:mtplx/cache_bank/cold_tier.py:3108"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"mtplx/cache_bank/cold_tier.py","line":3111,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:mtplx/cache_bank/cold_tier.py:3111"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/forge.py","line":1490,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/forge.py:1490"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/forge.py","line":2347,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/forge.py:2347"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/forge.py","line":3017,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/forge.py:3017"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/forge.py","line":3119,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/forge.py:3119"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":4839,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:4839"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":4921,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:4921"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":5208,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:5208"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":6807,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:6807"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":7872,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:7872"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":8332,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:8332"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":8518,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:8518"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'call' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":8569,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:8569"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":8673,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:8673"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":8758,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:8758"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'call' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":8808,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:8808"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'check_output' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":9140,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:9140"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-os-exec-audit","severity":"high","message":"Found dynamic content when spawning a process. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Ensure no external data reaches here. [confidence low]","path":"mtplx/commands/public.py","line":10423,"fingerprint":"python.lang.security.audit.dangerous-os-exec-audit:mtplx/commands/public.py:10423"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-os-exec-tainted-env-args","severity":"high","message":"Found user controlled content when spawning a process. This is dangerous because it allows a malicious actor to execute commands. [confidence medium]","path":"mtplx/commands/public.py","line":10423,"fingerprint":"python.lang.security.audit.dangerous-os-exec-tainted-env-args:mtplx/commands/public.py:10423"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":10523,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:10523"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":11326,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:11326"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/public.py","line":13591,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/public.py:13591"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/commands/trace_record.py","line":64,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/commands/trace_record.py:64"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/diagnostics.py","line":108,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/diagnostics.py:108"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/env.py","line":17,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/env.py:17"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/hardware.py","line":23,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/hardware.py:23"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/kpi/runtime_kpis.py","line":215,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/kpi/runtime_kpis.py:215"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/thermal.py","line":52,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/thermal.py:52"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/thermal.py","line":923,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/thermal.py:923"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/thermal.py","line":986,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/thermal.py:986"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/thermal.py","line":1355,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/thermal.py:1355"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/thermal.py","line":2294,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/thermal.py:2294"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/thermal.py","line":2347,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/thermal.py:2347"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"mtplx/ui/progress.py","line":109,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:mtplx/ui/progress.py:109"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/agent_session_gate.py","line":247,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/agent_session_gate.py:247"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/agent_user_path_qa.py","line":652,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/agent_user_path_qa.py:652"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/bonsai_memory_table.py","line":366,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/bonsai_memory_table.py:366"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/build_flash_next_quality_pack.py","line":62,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/build_flash_next_quality_pack.py:62"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/build_flash_next_quality_pack.py","line":120,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/build_flash_next_quality_pack.py:120"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/decodecliff_probe_20260830.py","line":105,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/decodecliff_probe_20260830.py:105"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/decodecliff_probe_20260830.py","line":296,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/decodecliff_probe_20260830.py:296"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/deepseek_v4_dispatch_census.py","line":135,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/deepseek_v4_dispatch_census.py:135"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/deepseek_v4_moe_tail_guarded_bracket.py","line":252,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/deepseek_v4_moe_tail_guarded_bracket.py:252"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/kvcache_soak_20260703.py","line":57,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/kvcache_soak_20260703.py:57"},{"rule_id":"opengrep/python.lang.security.audit.subprocess-shell-true","severity":"high","message":"Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead. [confidence medium]","path":"scripts/kvcache_soak_20260703.py","line":61,"fingerprint":"python.lang.security.audit.subprocess-shell-true:scripts/kvcache_soak_20260703.py:61"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/midform_gate.py","line":320,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/midform_gate.py:320"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'check_output' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/mtp_cost_probe.py","line":31,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/mtp_cost_probe.py:31"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/opencode_concurrency_qa.py","line":289,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/opencode_concurrency_qa.py:289"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/pillar_gate_qa.py","line":536,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/pillar_gate_qa.py:536"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/prodqa-20260703/candidate_truecold_20260703.py","line":61,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/prodqa-20260703/candidate_truecold_20260703.py:61"},{"rule_id":"opengrep/python.lang.security.audit.subprocess-shell-true","severity":"high","message":"Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead. [confidence medium]","path":"scripts/prodqa-20260703/candidate_truecold_20260703.py","line":66,"fingerprint":"python.lang.security.audit.subprocess-shell-true:scripts/prodqa-20260703/candidate_truecold_20260703.py:66"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/prodqa-20260703/cold_pair_recheck.py","line":32,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/prodqa-20260703/cold_pair_recheck.py:32"},{"rule_id":"opengrep/python.lang.security.audit.subprocess-shell-true","severity":"high","message":"Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead. [confidence medium]","path":"scripts/prodqa-20260703/cold_pair_recheck.py","line":35,"fingerprint":"python.lang.security.audit.subprocess-shell-true:scripts/prodqa-20260703/cold_pair_recheck.py:35"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/prodqa-20260703/pillar_ab_20260703.py","line":50,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/prodqa-20260703/pillar_ab_20260703.py:50"},{"rule_id":"opengrep/python.lang.security.audit.subprocess-shell-true","severity":"high","message":"Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead. [confidence medium]","path":"scripts/prodqa-20260703/pillar_ab_20260703.py","line":54,"fingerprint":"python.lang.security.audit.subprocess-shell-true:scripts/prodqa-20260703/pillar_ab_20260703.py:54"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qsa_indexer_prefill_numeric_check.py","line":89,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qsa_indexer_prefill_numeric_check.py:89"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qsa_prefill_battery_20260830.py","line":52,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qsa_prefill_battery_20260830.py:52"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qsa_prefill_battery_20260830.py","line":171,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qsa_prefill_battery_20260830.py:171"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qsa_prefill_flash_numeric_check.py","line":70,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qsa_prefill_flash_numeric_check.py:70"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qwen35b_mtp_batch_evalplus_guarded.py","line":91,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qwen35b_mtp_batch_evalplus_guarded.py:91"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qwen35b_mtp_batch_evalplus_guarded.py","line":199,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qwen35b_mtp_batch_evalplus_guarded.py:199"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qwen35b_mtp_batch_evalplus_guarded.py","line":218,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qwen35b_mtp_batch_evalplus_guarded.py:218"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qwen35b_mtp_batch_numerics_guarded.py","line":382,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qwen35b_mtp_batch_numerics_guarded.py:382"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qwen4_vision_compiled_parity.py","line":624,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qwen4_vision_compiled_parity.py:624"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qwen4exp_mtp_tiny_smoke.py","line":31,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qwen4exp_mtp_tiny_smoke.py:31"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qwen4exp_numeric_check.py","line":32,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qwen4exp_numeric_check.py:32"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/qwen4exp_numeric_check.py","line":477,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/qwen4exp_numeric_check.py:477"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'check_output' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/replay_chat_request.py","line":53,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/replay_chat_request.py:53"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/restamp_head_quant_packs.py","line":200,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/restamp_head_quant_packs.py:200"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/run_context_degradation_diagnostics.py","line":99,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/run_context_degradation_diagnostics.py:99"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/run_context_degradation_diagnostics.py","line":1894,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/run_context_degradation_diagnostics.py:1894"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/run_harness_check.py","line":32,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/run_harness_check.py:32"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-tainted-env-args","severity":"high","message":"Detected subprocess function 'Popen' with user controlled data. A malicious actor could leverage this to perform command injection. You may consider using 'shlex.quote()'. [confidence medium]","path":"scripts/run_harness_check.py","line":33,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-tainted-env-args:scripts/run_harness_check.py:33"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/streamscope_run.py","line":180,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/streamscope_run.py:180"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/streamscope_run.py","line":193,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/streamscope_run.py:193"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/streamscope_run.py","line":221,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/streamscope_run.py:221"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/walltime-lab/run_project.py","line":170,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/walltime-lab/run_project.py:170"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-tainted-env-args","severity":"high","message":"Detected subprocess function 'run' with user controlled data. A malicious actor could leverage this to perform command injection. You may consider using 'shlex.quote()'. [confidence medium]","path":"scripts/walltime-lab/run_project.py","line":171,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-tainted-env-args:scripts/walltime-lab/run_project.py:171"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"vllm_metal/metal/build.py","line":133,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:vllm_metal/metal/build.py:133"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift","line":30,"fingerprint":"swift.lang.crypto.insecure-random:apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift:30"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift","line":31,"fingerprint":"swift.lang.crypto.insecure-random:apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift:31"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift","line":33,"fingerprint":"swift.lang.crypto.insecure-random:apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift:33"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift","line":34,"fingerprint":"swift.lang.crypto.insecure-random:apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift:34"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift","line":35,"fingerprint":"swift.lang.crypto.insecure-random:apps/MTPLXApp/Sources/MTPLXAppHost/Views/Benchmark/BenchConfettiParticle.swift:35"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"dashboard/src/lib/uplotTooltip.ts","line":79,"fingerprint":"javascript.lang.security.html-in-template-string:dashboard/src/lib/uplotTooltip.ts:79"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"dashboard/src/lib/uplotTooltip.ts","line":87,"fingerprint":"javascript.lang.security.html-in-template-string:dashboard/src/lib/uplotTooltip.ts:87"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/artifacts.py","line":855,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/artifacts.py:855"},{"rule_id":"opengrep/python.lang.security.audit.regex_dos","severity":"medium","message":"Detected usage of re.compile with an inefficient regular expression. This can lead to regular expression denial of service, which can result in service down time. Instead, check all regexes or use safer alternatives such as pyre2. [confidence low]","path":"mtplx/benchmarks/runners/aime.py","line":215,"fingerprint":"python.lang.security.audit.regex_dos:mtplx/benchmarks/runners/aime.py:215"},{"rule_id":"opengrep/python.lang.security.audit.regex_dos","severity":"medium","message":"Detected usage of re.compile with an inefficient regular expression. This can lead to regular expression denial of service, which can result in service down time. Instead, check all regexes or use safer alternatives such as pyre2. [confidence low]","path":"mtplx/benchmarks/runners/aime.py","line":225,"fingerprint":"python.lang.security.audit.regex_dos:mtplx/benchmarks/runners/aime.py:225"},{"rule_id":"opengrep/python.lang.security.audit.regex_dos","severity":"medium","message":"Detected usage of re.compile with an inefficient regular expression. This can lead to regular expression denial of service, which can result in service down time. Instead, check all regexes or use safer alternatives such as pyre2. [confidence low]","path":"mtplx/benchmarks/runners/aime.py","line":230,"fingerprint":"python.lang.security.audit.regex_dos:mtplx/benchmarks/runners/aime.py:230"},{"rule_id":"opengrep/python.lang.security.audit.logging.python-logger-credential-disclosure","severity":"medium","message":"Detected a python logger call with a potential hardcoded secret \"SessionBank SSD writer queue full; skipping prefix_len=%d token_hash=%s\" being logged. This may lead to secret credentials being exposed. Make sure that the logger is not logging  sensitive information. [confidence medium]","path":"mtplx/cache_bank/cold_tier.py","line":701,"fingerprint":"python.lang.security.audit.logging.python-logger-credential-disclosure:mtplx/cache_bank/cold_tier.py:701"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"mtplx/cache_bank/cold_tier.py","line":3108,"fingerprint":"python.lang.security.audit.formatted-sql-query:mtplx/cache_bank/cold_tier.py:3108"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"mtplx/cache_bank/cold_tier.py","line":3111,"fingerprint":"python.lang.security.audit.formatted-sql-query:mtplx/cache_bank/cold_tier.py:3111"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/commands/forge.py","line":3146,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/commands/forge.py:3146"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/commands/forge.py","line":3183,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/commands/forge.py:3183"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/commands/public.py","line":3345,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/commands/public.py:3345"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/commands/public.py","line":7760,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/commands/public.py:7760"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/commands/public.py","line":7780,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/commands/public.py:7780"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/commands/public.py","line":7812,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/commands/public.py:7812"},{"rule_id":"opengrep/python.lang.security.audit.non-literal-import","severity":"medium","message":"Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low]","path":"mtplx/commands/public.py","line":16131,"fingerprint":"python.lang.security.audit.non-literal-import:mtplx/commands/public.py:16131"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/commands/trace.py","line":926,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/commands/trace.py:926"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/commands/trace_record.py","line":17,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/commands/trace_record.py:17"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/daemon_client.py","line":97,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/daemon_client.py:97"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/diagnostics.py","line":174,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/diagnostics.py:174"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"mtplx/model_updates.py","line":82,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:mtplx/model_updates.py:82"},{"rule_id":"opengrep/python.lang.security.audit.non-literal-import","severity":"medium","message":"Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low]","path":"mtplx/runtime.py","line":562,"fingerprint":"python.lang.security.audit.non-literal-import:mtplx/runtime.py:562"},{"rule_id":"opengrep/python.lang.security.audit.logging.python-logger-credential-disclosure","severity":"medium","message":"Detected a python logger call with a potential hardcoded secret \"[tokenizer] restored the pre-tokenizer regex from %s: the loaded \"\n            \"tokenizer split combining marks off their letters (Devanagari, \"\n            \"Thai, vowelled Arabic tokenized 25-90%% longer than the model was \"\n          [confidence medium]","path":"mtplx/runtime.py","line":1499,"fingerprint":"python.lang.security.audit.logging.python-logger-credential-disclosure:mtplx/runtime.py:1499"},{"rule_id":"opengrep/python.lang.security.audit.logging.python-logger-credential-disclosure","severity":"medium","message":"Detected a python logger call with a potential hardcoded secret \"[tokenizer] pre-tokenizer repair skipped: %s\" being logged. This may lead to secret credentials being exposed. Make sure that the logger is not logging  sensitive information. [confidence medium]","path":"mtplx/runtime.py","line":1508,"fingerprint":"python.lang.security.audit.logging.python-logger-credential-disclosure:mtplx/runtime.py:1508"},{"rule_id":"opengrep/python.lang.security.audit.logging.python-logger-credential-disclosure","severity":"medium","message":"Detected a python logger call with a potential hardcoded secret \"[tokenizer] AutoTokenizer parse failed (%s); using tokenizer.json fallback\" being logged. This may lead to secret credentials being exposed. Make sure that the logger is not logging  sensitive information. [confidence medium]","path":"mtplx/runtime.py","line":1518,"fingerprint":"python.lang.security.audit.logging.python-logger-credential-disclosure:mtplx/runtime.py:1518"},{"rule_id":"opengrep/python.lang.security.audit.insecure-file-permissions","severity":"medium","message":"These permissions `0o755` are widely permissive and grant access to more people than may be necessary. A good default is `0o644` which gives read and write access to yourself and read access to everyone else. [confidence medium]","path":"mtplx/thermal.py","line":2481,"fingerprint":"python.lang.security.audit.insecure-file-permissions:mtplx/thermal.py:2481"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/agent_session_gate.py","line":127,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/agent_session_gate.py:127"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/agent_session_gate.py","line":165,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/agent_session_gate.py:165"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/agent_user_path_qa.py","line":70,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/agent_user_path_qa.py:70"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/agent_user_path_qa.py","line":423,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/agent_user_path_qa.py:423"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/agent_user_path_qa.py","line":512,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/agent_user_path_qa.py:512"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/aime_serve_gate.py","line":231,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/aime_serve_gate.py:231"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/aime_serve_gate.py","line":300,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/aime_serve_gate.py:300"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/aime_serve_gate.py","line":366,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/aime_serve_gate.py:366"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/aime_serve_gate.py","line":375,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/aime_serve_gate.py:375"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/aime_shape_memory_bench.py","line":69,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/aime_shape_memory_bench.py:69"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/build_flash_next_quality_pack.py","line":95,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/build_flash_next_quality_pack.py:95"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/check_prompt_scoring.py","line":82,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/check_prompt_scoring.py:82"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/code_eval_gate.py","line":222,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/code_eval_gate.py:222"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/decodecliff_probe_20260830.py","line":200,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/decodecliff_probe_20260830.py:200"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/decodecliff_pulse_cell_20260830.py","line":34,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/decodecliff_pulse_cell_20260830.py:34"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/deepseek_v4_attention_island_guarded.py","line":178,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/deepseek_v4_attention_island_guarded.py:178"},{"rule_id":"opengrep/python.lang.security.audit.insecure-file-permissions","severity":"medium","message":"These permissions `0o700` are widely permissive and grant access to more people than may be necessary. A good default is `0o644` which gives read and write access to yourself and read access to everyone else. [confidence medium]","path":"scripts/deepseek_v4_guard_window.py","line":156,"fingerprint":"python.lang.security.audit.insecure-file-permissions:scripts/deepseek_v4_guard_window.py:156"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/deepseek_v4_moe_tail_guarded_bracket.py","line":88,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/deepseek_v4_moe_tail_guarded_bracket.py:88"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/kvcache_soak_20260703.py","line":45,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/kvcache_soak_20260703.py:45"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/kvcache_soak_20260703.py","line":81,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/kvcache_soak_20260703.py:81"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/kvcache_warm_probe_20260703.py","line":77,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/kvcache_warm_probe_20260703.py:77"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/kvcache_warm_probe_20260703.py","line":141,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/kvcache_warm_probe_20260703.py:141"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/kvcache_warm_probe_20260703.py","line":196,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/kvcache_warm_probe_20260703.py:196"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/midform_gate.py","line":59,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/midform_gate.py:59"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/midform_gate.py","line":193,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/midform_gate.py:193"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/mtp_cost_probe.py","line":26,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/mtp_cost_probe.py:26"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/mtp_cost_probe.py","line":49,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/mtp_cost_probe.py:49"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/ocspeed-20260703/accept_depth_probe.py","line":116,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/ocspeed-20260703/accept_depth_probe.py:116"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/ocspeed-20260703/accept_depth_probe.py","line":120,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/ocspeed-20260703/accept_depth_probe.py:120"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/ocspeed-20260703/longgen_probe.py","line":41,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/ocspeed-20260703/longgen_probe.py:41"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/ocspeed-20260703/longgen_probe.py","line":48,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/ocspeed-20260703/longgen_probe.py:48"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/ocspeed-20260703/loop_degradation_probe.py","line":53,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/ocspeed-20260703/loop_degradation_probe.py:53"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/ocspeed-20260703/loop_degradation_probe.py","line":57,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/ocspeed-20260703/loop_degradation_probe.py:57"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/ocspeed-20260703/snapshot_tail.py","line":33,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/ocspeed-20260703/snapshot_tail.py:33"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/opencode_concurrency_qa.py","line":70,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/opencode_concurrency_qa.py:70"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/opencode_concurrency_qa.py","line":219,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/opencode_concurrency_qa.py:219"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/pillar_gate_qa.py","line":121,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/pillar_gate_qa.py:121"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/pillar_gate_qa.py","line":163,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/pillar_gate_qa.py:163"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/pillar_gate_qa.py","line":170,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/pillar_gate_qa.py:170"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/pillar_gate_qa.py","line":350,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/pillar_gate_qa.py:350"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/pillar_gate_qa.py","line":471,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/pillar_gate_qa.py:471"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/candidate_truecold_20260703.py","line":41,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/candidate_truecold_20260703.py:41"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/candidate_truecold_20260703.py","line":69,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/candidate_truecold_20260703.py:69"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/cold_pair_recheck.py","line":38,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/cold_pair_recheck.py:38"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/cold_pair_recheck.py","line":53,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/cold_pair_recheck.py:53"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/decode_gap_matrix.py","line":60,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/decode_gap_matrix.py:60"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/decode_gap_matrix.py","line":64,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/decode_gap_matrix.py:64"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/omlx_probe.py","line":25,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/omlx_probe.py:25"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/pillar_ab_20260703.py","line":61,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/pillar_ab_20260703.py:61"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/prodqa-20260703/pillar_ab_20260703.py","line":100,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/prodqa-20260703/pillar_ab_20260703.py:100"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/qwen35b_mtp_batch_numerics_guarded.py","line":138,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/qwen35b_mtp_batch_numerics_guarded.py:138"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/qwen35b_mtp_batch_numerics_guarded.py","line":221,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/qwen35b_mtp_batch_numerics_guarded.py:221"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/qwen4_vision_compiled_parity.py","line":538,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/qwen4_vision_compiled_parity.py:538"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/replay_chat_request.py","line":49,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/replay_chat_request.py:49"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/replay_chat_request.py","line":107,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/replay_chat_request.py:107"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/run_context_degradation_diagnostics.py","line":126,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/run_context_degradation_diagnostics.py:126"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/run_context_degradation_diagnostics.py","line":468,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/run_context_degradation_diagnostics.py:468"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/run_context_degradation_diagnostics.py","line":580,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/run_context_degradation_diagnostics.py:580"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/session_cache_followup_qa.py","line":38,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/session_cache_followup_qa.py:38"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/session_cache_followup_qa.py","line":153,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/session_cache_followup_qa.py:153"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/session_forensics.py","line":59,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/session_forensics.py:59"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/walltime-lab/run_project.py","line":44,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/walltime-lab/run_project.py:44"},{"rule_id":"opengrep/python.lang.security.audit.non-literal-import","severity":"medium","message":"Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low]","path":"vllm_metal/metal/build.py","line":33,"fingerprint":"python.lang.security.audit.non-literal-import:vllm_metal/metal/build.py:33"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"dashboard/src/lib/sse.ts","line":79,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:dashboard/src/lib/sse.ts:79"}],"evidence":[],"data":{"rulesets":["python","swift","typescript","javascript","bash","c"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":10.0,"vulnerabilities":69.0,"vulns_critical":6.0,"vulns_high":35.0,"vulns_medium":23.0,"vulns_low":4.0,"vulns_unknown":1.0,"penalty":75.0},"findings":[{"rule_id":"osv/GHSA-5x8w-8jj5-q52h","severity":"critical","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4330, GHSA-5x8w-8jj5-q52h","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-5x8w-8jj5-q52h"},{"rule_id":"osv/GHSA-8g5g-8vmr-9782","severity":"critical","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4332, GHSA-8g5g-8vmr-9782","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-8g5g-8vmr-9782"},{"rule_id":"osv/GHSA-v9pv-5gc8-w2m6","severity":"critical","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4339, GHSA-v9pv-5gc8-w2m6","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-v9pv-5gc8-w2m6"},{"rule_id":"osv/GHSA-xvh5-g6gv-559v","severity":"critical","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4363, GHSA-xvh5-g6gv-559v","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-xvh5-g6gv-559v"},{"rule_id":"osv/GHSA-332p-7hrc-92wf","severity":"critical","message":"pillow@12.3.0 (PyPI) is affected by GHSA-332p-7hrc-92wf","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-332p-7hrc-92wf"},{"rule_id":"osv/GHSA-w889-685w-c8fh","severity":"critical","message":"pillow@12.3.0 (PyPI) is affected by GHSA-w889-685w-c8fh","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-w889-685w-c8fh"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.28.2 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"dashboard/bun.lock","line":null,"fingerprint":"browserslist@4.28.2 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.28.2 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"dashboard/bun.lock","line":null,"fingerprint":"browserslist@4.28.2 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.12 (npm) is affected by GHSA-28wg-ghj8-5hjv","path":"dashboard/bun.lock","line":null,"fingerprint":"nanoid@3.3.12 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.12 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"dashboard/bun.lock","line":null,"fingerprint":"nanoid@3.3.12 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.14 (npm) is affected by GHSA-r28c-9q8g-f849","path":"dashboard/bun.lock","line":null,"fingerprint":"postcss@8.5.14 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"dashboard/bun.lock","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@6.4.2 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"dashboard/bun.lock","line":null,"fingerprint":"vite@6.4.2 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-v4x8-3wr5-3wq8","severity":"high","message":"filelock@3.29.0 (PyPI) is affected by GHSA-v4x8-3wr5-3wq8","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-v4x8-3wr5-3wq8"},{"rule_id":"osv/GHSA-27vj-qcqg-25rc","severity":"high","message":"fsspec@2026.4.0 (PyPI) is affected by PYSEC-2026-4217, GHSA-27vj-qcqg-25rc","path":"uv.lock","line":null,"fingerprint":"fsspec@2026.4.0 (PyPI):GHSA-27vj-qcqg-25rc"},{"rule_id":"osv/GHSA-27h8-gf7j-v5hc","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4326, GHSA-27h8-gf7j-v5hc","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-27h8-gf7j-v5hc"},{"rule_id":"osv/GHSA-4558-3h8r-v8xp","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4327, GHSA-4558-3h8r-v8xp","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-4558-3h8r-v8xp"},{"rule_id":"osv/GHSA-4rr5-89j8-mwwm","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4328, GHSA-4rr5-89j8-mwwm","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-4rr5-89j8-mwwm"},{"rule_id":"osv/GHSA-58r4-6rv3-gfh8","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4329, GHSA-58r4-6rv3-gfh8","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-58r4-6rv3-gfh8"},{"rule_id":"osv/GHSA-7mwm-ghpf-9vrm","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4331, GHSA-7mwm-ghpf-9vrm","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-7mwm-ghpf-9vrm"},{"rule_id":"osv/GHSA-cp9v-662q-vvx9","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4333, GHSA-cp9v-662q-vvx9","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-cp9v-662q-vvx9"},{"rule_id":"osv/GHSA-pchr-8j38-3x4p","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4334, GHSA-pchr-8j38-3x4p","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-pchr-8j38-3x4p"},{"rule_id":"osv/GHSA-xgh8-jp6q-p5x8","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4335, GHSA-xgh8-jp6q-p5x8","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-xgh8-jp6q-p5x8"},{"rule_id":"osv/GHSA-g842-9rc4-69pw","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4338, GHSA-g842-9rc4-69pw","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-g842-9rc4-69pw"},{"rule_id":"osv/GHSA-3j72-p6qg-6xp7","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4341, GHSA-3j72-p6qg-6xp7","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-3j72-p6qg-6xp7"},{"rule_id":"osv/GHSA-g4qv-2jxx-769h","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4342, GHSA-g4qv-2jxx-769h","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-g4qv-2jxx-769h"},{"rule_id":"osv/GHSA-9v9v-9qvf-h2hj","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4343, GHSA-9v9v-9qvf-h2hj","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-9v9v-9qvf-h2hj"},{"rule_id":"osv/GHSA-22hg-r758-rrw9","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-22hg-r758-rrw9","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-22hg-r758-rrw9"},{"rule_id":"osv/GHSA-5xm2-6676-qcp9","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-5xm2-6676-qcp9","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-5xm2-6676-qcp9"},{"rule_id":"osv/GHSA-65qm-jvmh-6pqg","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-65qm-jvmh-6pqg","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-65qm-jvmh-6pqg"},{"rule_id":"osv/GHSA-78g4-xqwv-q3g8","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-78g4-xqwv-q3g8","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-78g4-xqwv-q3g8"},{"rule_id":"osv/GHSA-c6hw-5grf-ff96","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-c6hw-5grf-ff96","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-c6hw-5grf-ff96"},{"rule_id":"osv/GHSA-f2g6-542v-9j58","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-f2g6-542v-9j58","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-f2g6-542v-9j58"},{"rule_id":"osv/GHSA-g7cr-3p24-7wf7","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-g7cr-3p24-7wf7","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-g7cr-3p24-7wf7"},{"rule_id":"osv/GHSA-gg2r-wvfm-q9rx","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-gg2r-wvfm-q9rx","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-gg2r-wvfm-q9rx"},{"rule_id":"osv/GHSA-j4m9-6w36-pw47","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-j4m9-6w36-pw47","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-j4m9-6w36-pw47"},{"rule_id":"osv/GHSA-jg86-v3jv-hrpm","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-jg86-v3jv-hrpm","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-jg86-v3jv-hrpm"},{"rule_id":"osv/GHSA-mrfp-p49p-3hf2","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-mrfp-p49p-3hf2","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-mrfp-p49p-3hf2"},{"rule_id":"osv/GHSA-p4wg-p73j-c528","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-p4wg-p73j-c528","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-p4wg-p73j-c528"},{"rule_id":"osv/GHSA-q45j-58j2-45rg","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-q45j-58j2-45rg","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-q45j-58j2-45rg"},{"rule_id":"osv/GHSA-xcvg-w56q-r89m","severity":"high","message":"pillow@12.3.0 (PyPI) is affected by GHSA-xcvg-w56q-r89m","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-xcvg-w56q-r89m"},{"rule_id":"osv/GHSA-w5vr-8v7q-w6rv","severity":"medium","message":"baseline-browser-mapping@2.10.30 (npm) is affected by GHSA-w5vr-8v7q-w6rv","path":"dashboard/bun.lock","line":null,"fingerprint":"baseline-browser-mapping@2.10.30 (npm):GHSA-w5vr-8v7q-w6rv"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.14 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"dashboard/bun.lock","line":null,"fingerprint":"postcss@8.5.14 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@6.4.2 (npm) is affected by GHSA-698v-4r3x-3vcv","path":"dashboard/bun.lock","line":null,"fingerprint":"vite@6.4.2 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-fx2h-pf6j-xcff","severity":"medium","message":"vite@6.4.2 (npm) is affected by GHSA-fx2h-pf6j-xcff","path":"dashboard/bun.lock","line":null,"fingerprint":"vite@6.4.2 (npm):GHSA-fx2h-pf6j-xcff"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@6.4.2 (npm) is affected by GHSA-r825-w8mm-5pxw","path":"dashboard/bun.lock","line":null,"fingerprint":"vite@6.4.2 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@6.4.2 (npm) is affected by GHSA-rq7h-c2jc-7f22","path":"dashboard/bun.lock","line":null,"fingerprint":"vite@6.4.2 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-v6wh-96g9-6wx3","severity":"medium","message":"vite@6.4.2 (npm) is affected by GHSA-v6wh-96g9-6wx3","path":"dashboard/bun.lock","line":null,"fingerprint":"vite@6.4.2 (npm):GHSA-v6wh-96g9-6wx3"},{"rule_id":"osv/GHSA-69hj-f68j-2879","severity":"medium","message":"filelock@3.29.0 (PyPI) is affected by GHSA-69hj-f68j-2879","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-69hj-f68j-2879"},{"rule_id":"osv/GHSA-8mx5-7m5m-r77g","severity":"medium","message":"filelock@3.29.0 (PyPI) is affected by GHSA-8mx5-7m5m-r77g","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-8mx5-7m5m-r77g"},{"rule_id":"osv/GHSA-cwqr-hh33-gh44","severity":"medium","message":"filelock@3.29.0 (PyPI) is affected by GHSA-cwqr-hh33-gh44","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-cwqr-hh33-gh44"},{"rule_id":"osv/GHSA-fq56-3cx3-fjxp","severity":"medium","message":"filelock@3.29.0 (PyPI) is affected by GHSA-fq56-3cx3-fjxp","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-fq56-3cx3-fjxp"},{"rule_id":"osv/GHSA-j8f7-rjxc-mr56","severity":"medium","message":"filelock@3.29.0 (PyPI) is affected by GHSA-j8f7-rjxc-mr56","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-j8f7-rjxc-mr56"},{"rule_id":"osv/GHSA-rfpc-qcw5-3pc4","severity":"medium","message":"filelock@3.29.0 (PyPI) is affected by GHSA-rfpc-qcw5-3pc4","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-rfpc-qcw5-3pc4"},{"rule_id":"osv/GHSA-654x-cwwv-5j9c","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4336, GHSA-654x-cwwv-5j9c","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-654x-cwwv-5j9c"},{"rule_id":"osv/GHSA-p8hx-v2p6-rp84","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4337, GHSA-p8hx-v2p6-rp84","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-p8hx-v2p6-rp84"},{"rule_id":"osv/GHSA-4rm8-3hmm-39fg","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by PYSEC-2026-4340, GHSA-4rm8-3hmm-39fg","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-4rm8-3hmm-39fg"},{"rule_id":"osv/GHSA-24rc-8hj2-v98c","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by GHSA-24rc-8hj2-v98c","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-24rc-8hj2-v98c"},{"rule_id":"osv/GHSA-254f-3936-288h","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by GHSA-254f-3936-288h","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-254f-3936-288h"},{"rule_id":"osv/GHSA-462x-pgg6-55fp","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by GHSA-462x-pgg6-55fp","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-462x-pgg6-55fp"},{"rule_id":"osv/GHSA-74r2-7ff9-mjj2","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by GHSA-74r2-7ff9-mjj2","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-74r2-7ff9-mjj2"},{"rule_id":"osv/GHSA-fc9g-5qg7-mf45","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by GHSA-fc9g-5qg7-mf45","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-fc9g-5qg7-mf45"},{"rule_id":"osv/GHSA-rfgq-q3w2-pmv2","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by GHSA-rfgq-q3w2-pmv2","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-rfgq-q3w2-pmv2"},{"rule_id":"osv/GHSA-vx6w-vv9f-6gvg","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by GHSA-vx6w-vv9f-6gvg","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-vx6w-vv9f-6gvg"},{"rule_id":"osv/GHSA-wqgw-9xfh-qf2g","severity":"medium","message":"pillow@12.3.0 (PyPI) is affected by GHSA-wqgw-9xfh-qf2g","path":"uv.lock","line":null,"fingerprint":"pillow@12.3.0 (PyPI):GHSA-wqgw-9xfh-qf2g"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.29.0 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"dashboard/bun.lock","line":null,"fingerprint":"@babel/core@7.29.0 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-9jrq-w75r-8gcw","severity":"low","message":"vite@6.4.2 (npm) is affected by GHSA-9jrq-w75r-8gcw","path":"dashboard/bun.lock","line":null,"fingerprint":"vite@6.4.2 (npm):GHSA-9jrq-w75r-8gcw"},{"rule_id":"osv/GHSA-567q-5qvw-pf92","severity":"low","message":"filelock@3.29.0 (PyPI) is affected by GHSA-567q-5qvw-pf92","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-567q-5qvw-pf92"},{"rule_id":"osv/GHSA-9vhv-jxww-xfm5","severity":"low","message":"filelock@3.29.0 (PyPI) is affected by GHSA-9vhv-jxww-xfm5","path":"uv.lock","line":null,"fingerprint":"filelock@3.29.0 (PyPI):GHSA-9vhv-jxww-xfm5"}],"evidence":[],"data":{"ecosystems":["PyPI","npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":6.0,"findings":24.0,"findings_high":15.0,"findings_medium":2.0,"findings_low":7.0,"penalty":190.1},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build.yml","line":15,"fingerprint":"unpinned-uses:.github/workflows/build.yml:15"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build.yml","line":16,"fingerprint":"unpinned-uses:.github/workflows/build.yml:16"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":15,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:15"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":16,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:16"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/hygiene.yml","line":15,"fingerprint":"unpinned-uses:.github/workflows/hygiene.yml:15"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/kernel-matrix.yml","line":36,"fingerprint":"unpinned-uses:.github/workflows/kernel-matrix.yml:36"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/kernel-matrix.yml","line":37,"fingerprint":"unpinned-uses:.github/workflows/kernel-matrix.yml:37"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/kernel-matrix.yml","line":83,"fingerprint":"unpinned-uses:.github/workflows/kernel-matrix.yml:83"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/kernel-matrix.yml","line":84,"fingerprint":"unpinned-uses:.github/workflows/kernel-matrix.yml:84"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/no-ai-attribution.yml","line":24,"fingerprint":"unpinned-uses:.github/workflows/no-ai-attribution.yml:24"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":26,"fingerprint":"unpinned-uses:.github/workflows/release.yml:26"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":41,"fingerprint":"unpinned-uses:.github/workflows/release.yml:41"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":48,"fingerprint":"unpinned-uses:.github/workflows/release.yml:48"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":64,"fingerprint":"unpinned-uses:.github/workflows/release.yml:64"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":68,"fingerprint":"unpinned-uses:.github/workflows/release.yml:68"},{"rule_id":"zizmor/dependabot-cooldown","severity":"medium","message":"insufficient cooldown in Dependabot updates [confidence high]","path":".github/dependabot.yml","line":3,"fingerprint":"dependabot-cooldown:.github/dependabot.yml:3"},{"rule_id":"zizmor/dependabot-cooldown","severity":"medium","message":"insufficient cooldown in Dependabot updates [confidence high]","path":".github/dependabot.yml","line":9,"fingerprint":"dependabot-cooldown:.github/dependabot.yml:9"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/build.yml","line":15,"fingerprint":"artipacked:.github/workflows/build.yml:15"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":15,"fingerprint":"artipacked:.github/workflows/ci.yml:15"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/hygiene.yml","line":15,"fingerprint":"artipacked:.github/workflows/hygiene.yml:15"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/kernel-matrix.yml","line":36,"fingerprint":"artipacked:.github/workflows/kernel-matrix.yml:36"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/kernel-matrix.yml","line":83,"fingerprint":"artipacked:.github/workflows/kernel-matrix.yml:83"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/no-ai-attribution.yml","line":24,"fingerprint":"artipacked:.github/workflows/no-ai-attribution.yml:24"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/release.yml","line":26,"fingerprint":"artipacked:.github/workflows/release.yml:26"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":1.0,"check:dependency_updates":1.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.005,"unpinned_manifests":0.0},"findings":[],"evidence":[{"kind":"posture","description":"Security policy: SECURITY.md","ref":"SECURITY.md","url":null,"weight":0.0},{"kind":"posture","description":"Dependency updates: .github/dependabot.yml","ref":".github/dependabot.yml","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":1.0,"binary_assets":20.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release v2.12.3 ships MTPLX-2.12.3.dmg (2572 downloads)","ref":"MTPLX-2.12.3.dmg","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.3/MTPLX-2.12.3.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v2.12.3 ships mtplx-2.12.3.tar.gz (1783 downloads)","ref":"mtplx-2.12.3.tar.gz","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.3/mtplx-2.12.3.tar.gz","weight":0.0},{"kind":"binary-release-asset","description":"release v2.12.2 ships MTPLX-2.12.2.dmg (8963 downloads)","ref":"MTPLX-2.12.2.dmg","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.2/MTPLX-2.12.2.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v2.12.2 ships mtplx-2.12.2.tar.gz (4474 downloads)","ref":"mtplx-2.12.2.tar.gz","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.2/mtplx-2.12.2.tar.gz","weight":0.0},{"kind":"binary-release-asset","description":"release v2.12.1 ships MTPLX-2.12.1.dmg (192 downloads)","ref":"MTPLX-2.12.1.dmg","url":"https://github.com/youssofal/MTPLX/releases/download/v2.12.1/MTPLX-2.12.1.dmg","weight":0.0}],"data":{"signals":["binary-release-assets"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":19528.0,"function_nloc":284413.0,"mean_ccn":4.26,"p90_ccn":9.0,"complex_functions":769.0,"long_functions":299.0,"many_param_functions":351.0,"risky_nloc_share":0.3082},"findings":[],"evidence":[{"kind":"complex-function","description":"generate_mtpk in mtplx/generation.py: complexity 990, 4837 lines","ref":"mtplx/generation.py","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/generation.py#L10630","weight":1.0},{"kind":"complex-function","description":"cmd_serve_public in mtplx/commands/public.py: complexity 188, 758 lines","ref":"mtplx/commands/public.py","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/commands/public.py#L9606","weight":1.0},{"kind":"complex-function","description":"b8 in mtplx/dashboard/_static/assets/index-D8G5hadf.js: complexity 173, 1 lines","ref":"mtplx/dashboard/_static/assets/index-D8G5hadf.js","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/dashboard/_static/assets/index-D8G5hadf.js#L48","weight":1.0},{"kind":"complex-function","description":"(anonymous) in mtplx/dashboard/_static/assets/index-D8G5hadf.js: complexity 161, 1 lines","ref":"mtplx/dashboard/_static/assets/index-D8G5hadf.js","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/dashboard/_static/assets/index-D8G5hadf.js#L48","weight":1.0},{"kind":"complex-function","description":"GM in mtplx/dashboard/_static/assets/index-D8G5hadf.js: complexity 150, 1 lines","ref":"mtplx/dashboard/_static/assets/index-D8G5hadf.js","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/dashboard/_static/assets/index-D8G5hadf.js#L48","weight":1.0},{"kind":"complex-function","description":"replacement in apps/MTPLXApp/Sources/MTPLXAppCore/Streaming/StreamingDocumentStore.swift: complexity 146, 154 lines","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Streaming/StreamingDocumentStore.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Streaming/StreamingDocumentStore.swift#L1319","weight":1.0},{"kind":"complex-function","description":"Ut in mtplx/dashboard/_static/assets/index-D8G5hadf.js: complexity 145, 1 lines","ref":"mtplx/dashboard/_static/assets/index-D8G5hadf.js","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/dashboard/_static/assets/index-D8G5hadf.js#L49","weight":1.0},{"kind":"complex-function","description":"_default_selfcheck in mtplx/a3b_mtp_batch.py: complexity 144, 1049 lines","ref":"mtplx/a3b_mtp_batch.py","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/a3b_mtp_batch.py#L851","weight":1.0},{"kind":"complex-function","description":"cmd_quickstart_public in mtplx/commands/public.py: complexity 135, 532 lines","ref":"mtplx/commands/public.py","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/commands/public.py#L14719","weight":1.0},{"kind":"complex-function","description":"compatibility_for_inspection in mtplx/backends/registry.py: complexity 128, 804 lines","ref":"mtplx/backends/registry.py","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/mtplx/backends/registry.py#L1462","weight":1.0}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":317407.0,"duplicated_lines":31586.0,"duplicated_share":0.0995,"files":861.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Benchmark/BenchmarkOrchestrator.swift:307 and apps/MTPLXApp/Sources/MTPLXAppCore/Benchmark/BenchmarkOrchestrator.swift:337","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Benchmark/BenchmarkOrchestrator.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Benchmark/BenchmarkOrchestrator.swift#L307","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift:258 and apps/MTPLXApp/Sources/MTPLXAppCore/Forge/HFPublisher.swift:27","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift#L258","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift:437 and apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift:449","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift#L437","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift:664 and apps/MTPLXApp/Sources/MTPLXAppCore/Onboarding/AutoTuner.swift:662","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeBuilder.swift#L664","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeDiscoveryService.swift:110 and apps/MTPLXApp/Sources/MTPLXAppCore/Onboarding/HardwareInspector.swift:187","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeDiscoveryService.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeDiscoveryService.swift#L110","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeOrchestrator.swift:111 and apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeOrchestrator.swift:228","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeOrchestrator.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Forge/ForgeOrchestrator.swift#L111","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Forge/HFPublisher.swift:121 and apps/MTPLXApp/Sources/MTPLXAppCore/Onboarding/ModelDownloader.swift:224","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Forge/HFPublisher.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Forge/HFPublisher.swift#L121","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Forge/HFPublisher.swift:153 and apps/MTPLXApp/Sources/MTPLXAppCore/Forge/HFPublisher.swift:161","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Forge/HFPublisher.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Forge/HFPublisher.swift#L153","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Models/AppConfiguration.swift:712 and apps/MTPLXApp/Sources/MTPLXAppCore/Stores/MTPLXBackendStore.swift:2782","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Models/AppConfiguration.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Models/AppConfiguration.swift#L712","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: apps/MTPLXApp/Sources/MTPLXAppCore/Models/DashboardModels.swift:675 and apps/MTPLXApp/Sources/MTPLXAppCore/Support/JSONValue.swift:64","ref":"apps/MTPLXApp/Sources/MTPLXAppCore/Models/DashboardModels.swift","url":"https://github.com/youssofal/MTPLX/blob/eb580fce3fe4465bafb261420e6fed794515dd61/apps/MTPLXApp/Sources/MTPLXAppCore/Models/DashboardModels.swift#L675","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":216.0,"weighted_findings":335.75,"scanned_lines":401655.0,"category:best-practice":77.0,"category:correctness":82.0,"category:maintainability":57.0},"findings":[{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"mtplx/cache_bank/cold_tier.py","line":1734,"fingerprint":"python.lang.best-practice.arbitrary-sleep:mtplx/cache_bank/cold_tier.py:1734"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"mtplx/commands/forge.py","line":1507,"fingerprint":"python.lang.best-practice.arbitrary-sleep:mtplx/commands/forge.py:1507"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"mtplx/commands/forge.py","line":3028,"fingerprint":"python.lang.best-practice.arbitrary-sleep:mtplx/commands/forge.py:3028"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"mtplx/commands/forge.py","line":3156,"fingerprint":"python.lang.best-practice.arbitrary-sleep:mtplx/commands/forge.py:3156"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"mtplx/commands/public.py","line":3882,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:mtplx/commands/public.py:3882"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"mtplx/commands/public.py","line":3883,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:mtplx/commands/public.py:3883"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"mtplx/commands/public.py","line":3884,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:mtplx/commands/public.py:3884"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"mtplx/commands/public.py","line":3885,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:mtplx/commands/public.py:3885"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"mtplx/commands/public.py","line":3886,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:mtplx/commands/public.py:3886"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"mtplx/opencode.py","line":950,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:mtplx/opencode.py:950"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"mtplx/prefill_bench.py","line":1146,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:mtplx/prefill_bench.py:1146"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"mtplx/session_bank.py","line":2493,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:mtplx/session_bank.py:2493"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"mtplx/thermal.py","line":636,"fingerprint":"python.lang.best-practice.arbitrary-sleep:mtplx/thermal.py:636"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"mtplx/thermal.py","line":1506,"fingerprint":"python.lang.best-practice.arbitrary-sleep:mtplx/thermal.py:1506"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"scripts/aime_shape_memory_bench.py","line":120,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:scripts/aime_shape_memory_bench.py:120"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"scripts/aime_shape_memory_bench.py","line":136,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:scripts/aime_shape_memory_bench.py:136"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/build_flash_next_quality_pack.py","line":161,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/build_flash_next_quality_pack.py:161"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/convert_qwen4_exp_fp8.py","line":302,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/convert_qwen4_exp_fp8.py:302"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":133,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:133"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":141,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:141"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":162,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:162"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":218,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:218"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":263,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:263"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":270,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:270"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":271,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:271"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":327,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:327"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":350,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:350"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/decodecliff_probe_20260830.py","line":370,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/decodecliff_probe_20260830.py:370"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/deepseek_v4_build_mtp_model.py","line":104,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/deepseek_v4_build_mtp_model.py:104"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/dense_vision_compiled_parity.py","line":671,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/dense_vision_compiled_parity.py:671"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/kvcache_soak_20260703.py","line":52,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/kvcache_soak_20260703.py:52"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/kvcache_soak_20260703.py","line":124,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/kvcache_soak_20260703.py:124"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/kvcache_soak_20260703.py","line":197,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/kvcache_soak_20260703.py:197"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/kvcache_soak_20260703.py","line":213,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/kvcache_soak_20260703.py:213"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/midform_gate.py","line":87,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/midform_gate.py:87"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/mtp_cost_probe.py","line":94,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/mtp_cost_probe.py:94"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/ocspeed-20260703/accept_depth_probe.py","line":138,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/ocspeed-20260703/accept_depth_probe.py:138"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/ocspeed-20260703/longgen_probe.py","line":70,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/ocspeed-20260703/longgen_probe.py:70"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/ocspeed-20260703/loop_degradation_probe.py","line":42,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/ocspeed-20260703/loop_degradation_probe.py:42"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/ocspeed-20260703/snapshot_tail.py","line":29,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/ocspeed-20260703/snapshot_tail.py:29"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/ocspeed-20260703/snapshot_tail.py","line":37,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/ocspeed-20260703/snapshot_tail.py:37"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/ocspeed-20260703/snapshot_tail.py","line":60,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/ocspeed-20260703/snapshot_tail.py:60"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/candidate_truecold_20260703.py","line":74,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/candidate_truecold_20260703.py:74"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/candidate_truecold_20260703.py","line":98,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/candidate_truecold_20260703.py:98"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/cold_pair_recheck.py","line":43,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/cold_pair_recheck.py:43"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/cold_pair_recheck.py","line":75,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/cold_pair_recheck.py:75"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/cold_pair_recheck.py","line":86,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/cold_pair_recheck.py:86"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/decode_gap_matrix.py","line":93,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/decode_gap_matrix.py:93"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/hermes_pty_driver.py","line":73,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/hermes_pty_driver.py:73"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/hermes_pty_driver.py","line":74,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/hermes_pty_driver.py:74"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/hermes_pty_driver.py","line":79,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/hermes_pty_driver.py:79"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/prodqa-20260703/pi_pty_driver.py","line":23,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/prodqa-20260703/pi_pty_driver.py:23"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/pi_pty_driver.py","line":63,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/pi_pty_driver.py:63"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/pi_pty_driver.py","line":64,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/pi_pty_driver.py:64"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/pi_pty_driver.py","line":67,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/pi_pty_driver.py:67"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/pillar_ab_20260703.py","line":66,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/pillar_ab_20260703.py:66"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/pillar_ab_20260703.py","line":77,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/pillar_ab_20260703.py:77"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/prodqa-20260703/pillar_ab_20260703.py","line":81,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/prodqa-20260703/pillar_ab_20260703.py:81"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/prodqa-20260703/pillar_ab_20260703.py","line":161,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/prodqa-20260703/pillar_ab_20260703.py:161"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/qsa_prefill_battery_20260830.py","line":86,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/qsa_prefill_battery_20260830.py:86"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/qsa_prefill_battery_20260830.py","line":94,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/qsa_prefill_battery_20260830.py:94"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/qsa_prefill_battery_20260830.py","line":122,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/qsa_prefill_battery_20260830.py:122"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/qwen35b_mtp_batch_numerics_guarded.py","line":154,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/qwen35b_mtp_batch_numerics_guarded.py:154"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/qwen4_vision_compiled_parity.py","line":664,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/qwen4_vision_compiled_parity.py:664"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/qwen4_vision_compiled_parity.py","line":704,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/qwen4_vision_compiled_parity.py:704"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/qwen4_vision_compiled_parity.py","line":1002,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/qwen4_vision_compiled_parity.py:1002"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/replay_chat_request.py","line":140,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/replay_chat_request.py:140"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/run_context_degradation_diagnostics.py","line":1531,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/run_context_degradation_diagnostics.py:1531"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/streamscope_run.py","line":220,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/streamscope_run.py:220"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/streamscope_run.py","line":500,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/streamscope_run.py:500"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"docs/laguna-mlxfast-port/bench/scratchpad_prefill_moe_combine_check.py","line":85,"fingerprint":"python.lang.maintainability.return-not-in-function:docs/laguna-mlxfast-port/bench/scratchpad_prefill_moe_combine_check.py:85"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"docs/laguna-mlxfast-port/bench/scratchpad_prefill_moe_combine_check.py","line":86,"fingerprint":"python.lang.maintainability.return-not-in-function:docs/laguna-mlxfast-port/bench/scratchpad_prefill_moe_combine_check.py:86"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"docs/laguna-mlxfast-port/bench/scratchpad_prefill_qk_rope_check.py","line":105,"fingerprint":"python.lang.maintainability.return-not-in-function:docs/laguna-mlxfast-port/bench/scratchpad_prefill_qk_rope_check.py:105"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"docs/laguna-mlxfast-port/bench/scratchpad_prefill_qk_rope_check.py","line":106,"fingerprint":"python.lang.maintainability.return-not-in-function:docs/laguna-mlxfast-port/bench/scratchpad_prefill_qk_rope_check.py:106"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"docs/laguna-mlxfast-port/bench/scratchpad_prefill_router_check.py","line":103,"fingerprint":"python.lang.maintainability.return-not-in-function:docs/laguna-mlxfast-port/bench/scratchpad_prefill_router_check.py:103"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"docs/laguna-mlxfast-port/bench/scratchpad_prefill_router_check.py","line":104,"fingerprint":"python.lang.maintainability.return-not-in-function:docs/laguna-mlxfast-port/bench/scratchpad_prefill_router_check.py:104"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"mtplx/backends/descriptors.py","line":282,"fingerprint":"python.lang.maintainability.return-not-in-function:mtplx/backends/descriptors.py:282"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"mtplx/backends/gemma4_assistant.py","line":380,"fingerprint":"python.lang.maintainability.return-not-in-function:mtplx/backends/gemma4_assistant.py:380"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant request.is_terminal() because request.is_terminal is always true.","path":"mtplx/batching/scheduler.py","line":319,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/batching/scheduler.py:319"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant request.is_terminal() because request.is_terminal is always true.","path":"mtplx/batching/scheduler.py","line":354,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/batching/scheduler.py:354"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant request.is_terminal() because request.is_terminal is always true.","path":"mtplx/batching/scheduler.py","line":356,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/batching/scheduler.py:356"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant request.is_terminal() because request.is_terminal is always true.","path":"mtplx/batching/scheduler.py","line":359,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/batching/scheduler.py:359"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/benchmarks/programming_prompts.py","line":210,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/benchmarks/programming_prompts.py:210"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant self.is_terminal() because self.is_terminal is always true.","path":"mtplx/benchmarks/runners/aime.py","line":2659,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/benchmarks/runners/aime.py:2659"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant self.is_terminal() because self.is_terminal is always true.","path":"mtplx/benchmarks/runners/aime.py","line":2669,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/benchmarks/runners/aime.py:2669"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant self.is_terminal() because self.is_terminal is always true.","path":"mtplx/benchmarks/runners/aime.py","line":2680,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/benchmarks/runners/aime.py:2680"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant self.is_terminal() because self.is_terminal is always true.","path":"mtplx/benchmarks/runners/aime.py","line":2715,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/benchmarks/runners/aime.py:2715"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant run.is_terminal() because run.is_terminal is always true.","path":"mtplx/benchmarks/runners/aime.py","line":4228,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/benchmarks/runners/aime.py:4228"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_terminal\" a function or an attribute? If it is a function, you may have meant run.is_terminal() because run.is_terminal is always true.","path":"mtplx/benchmarks/runners/aime.py","line":4254,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/benchmarks/runners/aime.py:4254"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"mtplx/benchmarks/runners/verify_profile.py","line":23,"fingerprint":"python.lang.maintainability.return-not-in-function:mtplx/benchmarks/runners/verify_profile.py:23"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/benchmarks/runners/verify_profile.py","line":205,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/benchmarks/runners/verify_profile.py:205"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/benchmarks/runners/verify_profile.py","line":207,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/benchmarks/runners/verify_profile.py:207"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_set\" a function or an attribute? If it is a function, you may have meant self._stop.is_set() because self._stop.is_set is always true.","path":"mtplx/cache_bank/cold_tier.py","line":2724,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/cache_bank/cold_tier.py:2724"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_dir\" a function or an attribute? If it is a function, you may have meant cand.is_dir() because cand.is_dir is always true.","path":"mtplx/cache_bank/reconcile.py","line":277,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/cache_bank/reconcile.py:277"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_dir\" a function or an attribute? If it is a function, you may have meant cand.is_dir() because cand.is_dir is always true.","path":"mtplx/cache_bank/reconcile.py","line":355,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/cache_bank/reconcile.py:355"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_dir\" a function or an attribute? If it is a function, you may have meant cand.is_dir() because cand.is_dir is always true.","path":"mtplx/cache_bank/reconcile.py","line":366,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/cache_bank/reconcile.py:366"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/public.py","line":3017,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/public.py:3017"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/public.py","line":3075,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/public.py:3075"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/public.py","line":3080,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/public.py:3080"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/public.py","line":3095,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/public.py:3095"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/public.py","line":3103,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/public.py:3103"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/public.py","line":3106,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/public.py:3106"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_primary\" a function or an attribute? If it is a function, you may have meant row.is_primary() because row.is_primary is always true.","path":"mtplx/commands/public.py","line":6161,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/commands/public.py:6161"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_primary\" a function or an attribute? If it is a function, you may have meant row.is_primary() because row.is_primary is always true.","path":"mtplx/commands/public.py","line":6240,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/commands/public.py:6240"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/public.py","line":12104,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/public.py:12104"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/public.py","line":14431,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/public.py:14431"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/commands/trace_report.py","line":300,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/commands/trace_report.py:300"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/daemon_client.py","line":423,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/daemon_client.py:423"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/daemon_client.py","line":429,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/daemon_client.py:429"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/daemon_client.py","line":434,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/daemon_client.py:434"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/daemon_client.py","line":438,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/daemon_client.py:438"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/gdn_capture.py","line":3032,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/gdn_capture.py:3032"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/gdn_capture.py","line":3034,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/gdn_capture.py:3034"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_primary\" a function or an attribute? If it is a function, you may have meant self.is_primary() because self.is_primary is always true.","path":"mtplx/hf_loader.py","line":1600,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/hf_loader.py:1600"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sliding\" a function or an attribute? If it is a function, you may have meant layer.self_attn.is_sliding() because layer.self_attn.is_sliding is always true.","path":"mtplx/laguna_alt_step.py","line":274,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/laguna_alt_step.py:274"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sliding\" a function or an attribute? If it is a function, you may have meant layer.self_attn.is_sliding() because layer.self_attn.is_sliding is always true.","path":"mtplx/laguna_compiled_step.py","line":156,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/laguna_compiled_step.py:156"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_primary\" a function or an attribute? If it is a function, you may have meant self.is_primary() because self.is_primary is always true.","path":"mtplx/model_updates.py","line":140,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/model_updates.py:140"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"mtplx/models/deepseek_v4.py","line":1415,"fingerprint":"python.lang.maintainability.return-not-in-function:mtplx/models/deepseek_v4.py:1415"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"mtplx/models/laguna.py","line":57,"fingerprint":"python.lang.maintainability.return-not-in-function:mtplx/models/laguna.py:57"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sliding\" a function or an attribute? If it is a function, you may have meant self.is_sliding() because self.is_sliding is always true.","path":"mtplx/models/laguna.py","line":240,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/laguna.py:240"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sliding\" a function or an attribute? If it is a function, you may have meant self.is_sliding() because self.is_sliding is always true.","path":"mtplx/models/laguna.py","line":241,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/laguna.py:241"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sliding\" a function or an attribute? If it is a function, you may have meant self.is_sliding() because self.is_sliding is always true.","path":"mtplx/models/laguna.py","line":244,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/laguna.py:244"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sliding\" a function or an attribute? If it is a function, you may have meant layer.self_attn.is_sliding() because layer.self_attn.is_sliding is always true.","path":"mtplx/models/laguna.py","line":446,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/laguna.py:446"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sliding\" a function or an attribute? If it is a function, you may have meant layer.self_attn.is_sliding() because layer.self_attn.is_sliding is always true.","path":"mtplx/models/laguna_fused.py","line":555,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/laguna_fused.py:555"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant self.is_linear() because self.is_linear is always true.","path":"mtplx/models/qwen4_exp.py","line":6265,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/qwen4_exp.py:6265"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant self.is_linear() because self.is_linear is always true.","path":"mtplx/models/qwen4_exp.py","line":6266,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/qwen4_exp.py:6266"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant self.is_linear() because self.is_linear is always true.","path":"mtplx/models/qwen4_exp.py","line":6282,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/qwen4_exp.py:6282"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/models/qwen4_exp.py","line":6526,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/qwen4_exp.py:6526"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/models/qwen4_exp.py","line":6871,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/qwen4_exp.py:6871"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/models/qwen4_exp.py","line":6982,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/models/qwen4_exp.py:6982"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/mtp_patch.py","line":846,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/mtp_patch.py:846"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/mtp_patch.py","line":908,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/mtp_patch.py:908"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/nax_verify.py","line":432,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/nax_verify.py:432"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/nax_verify.py","line":439,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/nax_verify.py:439"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/nax_verify.py","line":447,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/nax_verify.py:447"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/nax_verify.py","line":452,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/nax_verify.py:452"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_module\" a function or an attribute? If it is a function, you may have meant nn.Module.is_module() because nn.Module.is_module is always true.","path":"mtplx/proj_quant.py","line":149,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/proj_quant.py:149"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/qwen4_fixed_verify.py","line":294,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/qwen4_fixed_verify.py:294"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/qwen4_fixed_verify.py","line":322,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/qwen4_fixed_verify.py:322"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/qwen4_fixed_verify.py","line":339,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/qwen4_fixed_verify.py:339"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/qwen4_fixed_verify.py","line":340,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/qwen4_fixed_verify.py:340"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layers[ple[0]].is_linear() because layers[ple[0]].is_linear is always true.","path":"mtplx/qwen4_fixed_verify.py","line":344,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/qwen4_fixed_verify.py:344"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/qwen4_m4_stage3.py","line":417,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/qwen4_m4_stage3.py:417"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_linear\" a function or an attribute? If it is a function, you may have meant layer.is_linear() because layer.is_linear is always true.","path":"mtplx/qwen4_m4_stage3.py","line":446,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/qwen4_m4_stage3.py:446"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sliding\" a function or an attribute? If it is a function, you may have meant layer.is_sliding() because layer.is_sliding is always true.","path":"mtplx/step3p5_mtp_patch.py","line":375,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:mtplx/step3p5_mtp_patch.py:375"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/ui/onboarding.py","line":1345,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/ui/onboarding.py:1345"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/ui/onboarding.py","line":1351,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/ui/onboarding.py:1351"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"mtplx/ui/onboarding.py","line":1926,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:mtplx/ui/onboarding.py:1926"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/agent_session_gate.py","line":309,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/agent_session_gate.py:309"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/agent_session_gate.py","line":314,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/agent_session_gate.py:314"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/build_bonsai_mtplx_pack.py","line":410,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/build_bonsai_mtplx_pack.py:410"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/decodecliff_probe_20260830.py","line":68,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/decodecliff_probe_20260830.py:68"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/decodecliff_probe_20260830.py","line":70,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/decodecliff_probe_20260830.py:70"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/decodecliff_probe_20260830.py","line":72,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/decodecliff_probe_20260830.py:72"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/decodecliff_probe_20260830.py","line":225,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/decodecliff_probe_20260830.py:225"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/decodecliff_probe_20260830.py","line":295,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/decodecliff_probe_20260830.py:295"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/deepseek_v4_dispatch_census.py","line":98,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/deepseek_v4_dispatch_census.py:98"},{"rule_id":"opengrep/python.lang.best-practice.pass-body-range","severity":"medium","message":"`pass` is the body of for _ in r. Consider removing this or raise NotImplementedError() if this is a TODO","path":"scripts/ocspeed-20260703/accept_depth_probe.py","line":117,"fingerprint":"python.lang.best-practice.pass-body-range:scripts/ocspeed-20260703/accept_depth_probe.py:117"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/ocspeed-20260703/accept_depth_probe.py","line":162,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/ocspeed-20260703/accept_depth_probe.py:162"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/ocspeed-20260703/longgen_probe.py","line":68,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/ocspeed-20260703/longgen_probe.py:68"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/ocspeed-20260703/loop_degradation_probe.py","line":42,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/ocspeed-20260703/loop_degradation_probe.py:42"},{"rule_id":"opengrep/python.lang.best-practice.pass-body-range","severity":"medium","message":"`pass` is the body of for _ in r. Consider removing this or raise NotImplementedError() if this is a TODO","path":"scripts/ocspeed-20260703/loop_degradation_probe.py","line":54,"fingerprint":"python.lang.best-practice.pass-body-range:scripts/ocspeed-20260703/loop_degradation_probe.py:54"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/ocspeed-20260703/snapshot_tail.py","line":29,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/ocspeed-20260703/snapshot_tail.py:29"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/prodqa-20260703/candidate_truecold_20260703.py","line":100,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/prodqa-20260703/candidate_truecold_20260703.py:100"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/prodqa-20260703/cold_pair_recheck.py","line":87,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/prodqa-20260703/cold_pair_recheck.py:87"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/prodqa-20260703/decode_gap_matrix.py","line":27,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/prodqa-20260703/decode_gap_matrix.py:27"},{"rule_id":"opengrep/python.lang.best-practice.pass-body-range","severity":"medium","message":"`pass` is the body of for line in r. Consider removing this or raise NotImplementedError() if this is a TODO","path":"scripts/prodqa-20260703/decode_gap_matrix.py","line":61,"fingerprint":"python.lang.best-practice.pass-body-range:scripts/prodqa-20260703/decode_gap_matrix.py:61"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/prodqa-20260703/hermes_pty_driver.py","line":13,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/prodqa-20260703/hermes_pty_driver.py:13"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/prodqa-20260703/hermes_pty_driver.py","line":17,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/prodqa-20260703/hermes_pty_driver.py:17"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/prodqa-20260703/pi_pty_driver.py","line":8,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/prodqa-20260703/pi_pty_driver.py:8"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/prodqa-20260703/pi_pty_driver.py","line":11,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/prodqa-20260703/pi_pty_driver.py:11"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/qsa_prefill_battery_20260830.py","line":170,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/qsa_prefill_battery_20260830.py:170"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/qwen35b_mtp_batch_evalplus_guarded.py","line":95,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/qwen35b_mtp_batch_evalplus_guarded.py:95"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"scripts/qwen4_vision_compiled_parity.py","line":250,"fingerprint":"python.requests.best-practice.use-raise-for-status:scripts/qwen4_vision_compiled_parity.py:250"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"scripts/qwen4_vision_compiled_parity.py","line":250,"fingerprint":"python.requests.best-practice.use-timeout:scripts/qwen4_vision_compiled_parity.py:250"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"scripts/qwen4_vision_compiled_parity.py","line":250,"fingerprint":"python.requests.best-practice.use-raise-for-status:scripts/qwen4_vision_compiled_parity.py:250"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"scripts/qwen4_vision_compiled_parity.py","line":250,"fingerprint":"python.requests.best-practice.use-timeout:scripts/qwen4_vision_compiled_parity.py:250"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/qwen4_vision_compiled_parity.py","line":299,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/qwen4_vision_compiled_parity.py:299"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1566,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1566"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1582,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1582"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1587,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1587"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1612,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1612"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1620,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1620"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1655,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1655"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1674,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1674"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1698,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1698"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1702,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1702"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1706,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1706"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/train_mtp_adapter_c4.py","line":1710,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/train_mtp_adapter_c4.py:1710"},{"rule_id":"opengrep/python.lang.correctness.useless-eqeq","severity":"low","message":"This expression is always True: `number == number` or `number != number`. If testing for floating point NaN, use `math.isnan(number)`, or `cmath.isnan(number)` if the number is complex.","path":"mtplx/benchmarks/runners/aime.py","line":1127,"fingerprint":"python.lang.correctness.useless-eqeq:mtplx/benchmarks/runners/aime.py:1127"},{"rule_id":"opengrep/python.lang.correctness.useless-eqeq","severity":"low","message":"This expression is always True: `value == value` or `value != value`. If testing for floating point NaN, use `math.isnan(value)`, or `cmath.isnan(value)` if the number is complex.","path":"mtplx/cache_bank/cold_tier.py","line":257,"fingerprint":"python.lang.correctness.useless-eqeq:mtplx/cache_bank/cold_tier.py:257"},{"rule_id":"opengrep/python.lang.correctness.useless-eqeq","severity":"low","message":"This expression is always True: `value == value` or `value != value`. If testing for floating point NaN, use `math.isnan(value)`, or `cmath.isnan(value)` if the number is complex.","path":"mtplx/engine_session.py","line":189,"fingerprint":"python.lang.correctness.useless-eqeq:mtplx/engine_session.py:189"},{"rule_id":"opengrep/python.lang.correctness.useless-eqeq","severity":"low","message":"This expression is always True: `value == value` or `value != value`. If testing for floating point NaN, use `math.isnan(value)`, or `cmath.isnan(value)` if the number is complex.","path":"mtplx/kernel_selfcheck.py","line":162,"fingerprint":"python.lang.correctness.useless-eqeq:mtplx/kernel_selfcheck.py:162"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/ocspeed-20260703/abba_final.sh","line":22,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/ocspeed-20260703/abba_final.sh:22"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/ocspeed-20260703/abba_final.sh","line":26,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/ocspeed-20260703/abba_final.sh:26"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/ocspeed-20260703/abba_final.sh","line":30,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/ocspeed-20260703/abba_final.sh:30"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/ocspeed-20260703/abba_final.sh","line":40,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/ocspeed-20260703/abba_final.sh:40"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/ocspeed-20260703/abba_final.sh","line":44,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/ocspeed-20260703/abba_final.sh:44"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/ocspeed-20260703/abba_final.sh","line":47,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/ocspeed-20260703/abba_final.sh:47"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/ocspeed-20260703/abba_final.sh","line":48,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/ocspeed-20260703/abba_final.sh:48"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":237537.0,"source_lines":401655.0,"test_ratio":0.5914,"ci_files":6.0,"cochange_share":0.8553,"cochange_commits":235.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/build.yml","ref":".github/workflows/build.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/ci.yml","ref":".github/workflows/ci.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/hygiene.yml","ref":".github/workflows/hygiene.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/kernel-matrix.yml","ref":".github/workflows/kernel-matrix.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/no-ai-attribution.yml","ref":".github/workflows/no-ai-attribution.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/release.yml","ref":".github/workflows/release.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (pytest)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["pytest"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":1.0,"readme_lines":228.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0203,"check:low_escape_density":0.0,"escapes":5422.0,"escapes_per_kloc":19.357},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: dashboard/tsconfig.app.json","ref":"dashboard/tsconfig.app.json","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":11134.0,"other_lines":388860.0,"files_blamed":854.0,"blame_failures":0.0,"quality:ai_findings":7.0,"quality:ai_per_kloc":0.629,"quality:other_findings":192.0,"quality:other_per_kloc":0.494,"quality:ratio":1.27,"security:ai_findings":10.0,"security:ai_per_kloc":0.898,"security:other_findings":173.0,"security:other_per_kloc":0.445,"security:ratio":2.02},"findings":[],"evidence":[],"data":{"sampled":true,"comparable":true},"error":null}],"flags":[]}