Universal Rust multiplexer with a typed SDK — drive any CLI or TUI app from code. Native on Linux, macOS, and Windows.
This report summarizes scanner evidence for Helvesec/rmux, a Rust project with 2,676 GitHub stars. SynthScan examined 775,776 lines of code across 1902 source files, recording 697 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 1.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 492 finding(s).
Are imports declared and package/API names verified? 98 finding(s).
Are wrappers, guards, and repeated structures necessary? 188 finding(s).
Which changes need focused human review? 697 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 697 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | rust-toolchain.toml | 1 | # Pins the toolchain used across the workspace, and ensures the wasm32 target is | COMMENT |
| LOW | crates/rmux-pty/src/lib.rs | 1 | #![deny(missing_docs)] | COMMENT |
| LOW | crates/rmux-pty/src/windows_console_input.rs | 241 | /// | COMMENT |
| LOW | crates/rmux-pty/src/pty.rs | 421 | /// Writes all bytes to the PTY master while write progress continues. | COMMENT |
| LOW | crates/rmux-core/tests/parser_traces.rs | 1 | //! Golden parser-trace fixtures. | COMMENT |
| LOW | crates/rmux-core/tests/fuzz_grid_ansi.rs | 1 | //! Adversarial fuzz of the InputParser + Screen pipeline. | COMMENT |
| LOW | crates/rmux-core/src/dec_modes.rs | 1 | //! Re-assert DEC private terminal modes from a tracked mode bitmap. | COMMENT |
| LOW | crates/rmux-core/src/dec_modes.rs | 21 | /// Appends the DEC private *interactive* mode setters implied by `mode_bits` | COMMENT |
| LOW | crates/rmux-core/src/window.rs | 61 | pub const WINDOW_ALERTFLAGS: AlertFlags = | COMMENT |
| LOW | crates/rmux-core/src/options.rs | 61 | /// The canonical option name. | COMMENT |
| LOW | crates/rmux-core/src/screen.rs | 961 | } | COMMENT |
| LOW | crates/rmux-core/src/terminal_passthrough.rs | 21 | pub enum TerminalPassthroughKind { | COMMENT |
| LOW | crates/rmux-core/src/buffers.rs | 21 | } | COMMENT |
| LOW | crates/rmux-core/src/command_queue.rs | 1 | //! tmux-style command queue data model. | COMMENT |
| LOW | crates/rmux-core/src/formats.rs | 1 | //! tmux-compatible format expansion engine. | COMMENT |
| LOW | crates/rmux-core/src/box_lines.rs | 1 | //! tmux-compatible popup and menu border line styles. | COMMENT |
| LOW | crates/rmux-core/src/target_find.rs | 1 | //! tmux-style unresolved target lookup over live in-memory session state. | COMMENT |
| LOW | …tes/rmux-core/src/target_find/session_recency_tests.rs | 201 | #[test] | COMMENT |
| LOW | crates/rmux-core/src/formats/expand.rs | 141 | // checks if there are more `#`s followed by `[`. | COMMENT |
| LOW | crates/rmux-core/src/formats/tests/operators.rs | 741 | // New tests — truncation and padding | COMMENT |
| LOW | crates/rmux-core/src/identity/mod.rs | 1 | //! Identity vocabulary surface used by `rmux-core` consumers. | COMMENT |
| LOW | crates/rmux-core/src/input/commands.rs | 1 | //! Terminal input command types surfaced by the VT parser tables. | COMMENT |
| LOW | crates/rmux-core/src/input/colour.rs | 1 | //! Colour representation matching tmux colour model. | COMMENT |
| LOW | crates/rmux-core/src/input/writer.rs | 61 | // ─── Character operations ────────────────────────────────── | COMMENT |
| LOW | crates/rmux-core/src/input/writer.rs | 101 | // ─── Attributes ──────────────────────────────────────────── | COMMENT |
| LOW | crates/rmux-core/src/terminal/mod.rs | 1 | //! Crate-private terminal parser boundary. | COMMENT |
| LOW | crates/rmux-core/src/hooks/types.rs | 21 | /// Stable identity used to address a hook scope after target resolution. | COMMENT |
| LOW | crates/rmux-core/src/events/coalescing.rs | 1 | //! Per-pane snapshot-revision coalescing used to bound notification rate. | COMMENT |
| LOW | crates/rmux-core/src/events/coalescing.rs | 21 | //! - When several distinct revisions arrive inside one coalescing window, | COMMENT |
| LOW | crates/rmux-core/src/events/coalescing.rs | 61 | COMMENT | |
| LOW | crates/rmux-core/src/session/recency.rs | 1 | use std::sync::atomic::{AtomicU64, Ordering}; | COMMENT |
| LOW | crates/rmux-core/src/session/recency.rs | 21 | /// Only a lifetime or accepted-interaction event mints a new token. Renaming a | COMMENT |
| LOW | crates/rmux-core/src/session/accessors.rs | 201 | /// | COMMENT |
| LOW | crates/rmux-core/src/session/accessors.rs | 221 | /// Records that an attached client interacted with the session, leaving | COMMENT |
| LOW | crates/rmux-client/src/lib.rs | 1 | #![deny(missing_docs)] | COMMENT |
| LOW | crates/rmux-client/src/connection.rs | 81 | /// Result of attempting to connect to the RMUX server. | COMMENT |
| LOW | crates/rmux-client/src/connection.rs | 221 | } | COMMENT |
| LOW | crates/rmux-client/src/attach_windows/input.rs | 101 | last_mouse_button_state: u32, | COMMENT |
| LOW | crates/rmux-client/src/attach_windows/input.rs | 541 | /// Removes bracketed-paste markers embedded in pasted content before the burst | COMMENT |
| LOW | crates/rmux-client/src/attach_windows/input.rs | 561 | return; | COMMENT |
| LOW | crates/rmux-sdk/tests/pane_foreground_events_windows.rs | 1 | //! End-to-end coverage for issue #85 on Windows: pane foreground state must | COMMENT |
| LOW | crates/rmux-sdk/tests/events.rs | 1 | //! Pane event vocabulary roundtrip and shape checks. | COMMENT |
| LOW | crates/rmux-sdk/tests/terminal_automation.rs | 241 | } | COMMENT |
| LOW | crates/rmux-sdk/tests/terminal_automation.rs | 261 | /// | COMMENT |
| LOW | crates/rmux-sdk/tests/contract.rs | 1 | //! Compile-only contract assertions for SDK vocabulary and the facade error. | COMMENT |
| LOW | crates/rmux-sdk/tests/info.rs | 1 | //! Info-snapshot DTO roundtrip and shape checks. | COMMENT |
| LOW | crates/rmux-sdk/examples/collect_until_exit.rs | 1 | //! Collect-until-exit example: gather bounded raw pane output until the | COMMENT |
| LOW | crates/rmux-sdk/examples/nested_detection.rs | 1 | //! Nested-detection example: refuse to spawn an rmux client when the | COMMENT |
| LOW | crates/rmux-sdk/examples/wait_for_text.rs | 1 | //! Wait-for-text example: drive `Pane::wait_for_text` to react to | COMMENT |
| LOW | crates/rmux-sdk/examples/sdk_demo_run_detached.rs | 1 | //! Demonstrates spawning a long-running app detached. | COMMENT |
| LOW | crates/rmux-sdk/examples/sdk_demo_create_session.rs | 1 | //! Demonstrates the `Rmux::ensure_session` builder pattern. | COMMENT |
| LOW | crates/rmux-sdk/examples/sdk_demo_list_sessions.rs | 1 | //! Demonstrates `Rmux::list_sessions()` + `Rmux::has_session()`. | COMMENT |
| LOW | crates/rmux-sdk/examples/pane_events_stream.rs | 1 | //! Pane-events stream example: consume the live pane-output byte stream | COMMENT |
| LOW | crates/rmux-sdk/examples/detach_safety_net.rs | 1 | //! Safety-net example: map a matched detach chord to an explicit host | COMMENT |
| LOW | crates/rmux-sdk/examples/detach_safety_net.rs | 21 | //! # What this example exercises | COMMENT |
| LOW | crates/rmux-sdk/examples/detach_safety_net.rs | 41 | COMMENT | |
| LOW | crates/rmux-sdk/examples/detach_safety_net.rs | 61 | /// | COMMENT |
| LOW | crates/rmux-sdk/examples/sdk_demo_reconnect.rs | 1 | //! Demonstrates picking up an existing session by name. | COMMENT |
| LOW | crates/rmux-sdk/examples/sdk_demo_resize_pane.rs | 1 | //! Demonstrates `Pane::resize()`. | COMMENT |
| LOW | crates/rmux-sdk/examples/sdk_demo_helpers/mod.rs | 1 | //! Shared boilerplate for `sdk_demo_*.rs` examples. | COMMENT |
| 324 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/rmux-core/tests/fuzz_grid_ansi.rs | 24 | // ─── deterministic PRNG ───────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/tests/fuzz_grid_ansi.rs | 62 | // ─── escape-sequence corpus generators ────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/tests/fuzz_grid_ansi.rs | 211 | // ─── parser/screen driver ─────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/tests/fuzz_grid_ansi.rs | 225 | // ─── tests ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/tests/fuzz_grid_ansi.rs | 461 | // ─── #{=N} truncation: ZWJ / skin tone / emoji boundaries ─────────── | COMMENT |
| MEDIUM | crates/rmux-core/tests/fuzz_grid_ansi.rs | 461 | // ─── #{=N} truncation: ZWJ / skin tone / emoji boundaries ─────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/dispatch.rs | 16 | // ─── C0 dispatch ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/dispatch.rs | 57 | // ─── ESC dispatch ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/dispatch.rs | 130 | // ─── CSI dispatch ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/dispatch.rs | 464 | // ─── OSC dispatch ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/dispatch.rs | 536 | // ─── DCS dispatch ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 192 | // ─── ground ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 205 | // ─── esc_enter ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 230 | // ─── esc_intermediate ────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 243 | // ─── csi_enter ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 260 | // ─── csi_parameter ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 277 | // ─── csi_intermediate ────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 291 | // ─── csi_ignore ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 304 | // ─── dcs_enter ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 321 | // ─── dcs_parameter ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 338 | // ─── dcs_intermediate ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/states.rs | 352 | // ─── dcs_handler ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/states.rs | 360 | // ─── dcs_escape ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/states.rs | 368 | // ─── dcs_ignore ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 379 | // ─── osc_string ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 392 | // ─── apc_string ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 403 | // ─── rename_string ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/states.rs | 414 | // ─── consume_st ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests.rs | 261 | // ─── State machine tests ─────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 85 | // ─── Mode operations ─────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 91 | // ─── Scroll region ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 95 | // ─── Alternate screen ────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 101 | // ─── Attributes ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 105 | // ─── Tab handling ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 117 | // ─── Title/path ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 125 | // ─── Cursor save/restore ─────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 131 | // ─── Alignment test ──────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 135 | // ─── Full reset ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 139 | // ─── Synchronized output ─────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 145 | // ─── Cursor style ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 149 | // ─── OSC handlers ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 179 | // ─── DCS handlers ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 186 | // ─── APC handlers ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 190 | // ─── Paste/focus/notify ──────────────────────────────────── | COMMENT |
| MEDIUM⚡ | crates/rmux-core/src/input/writer.rs | 194 | // ─── Query responses ─────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/writer.rs | 12 | // ─── Character output ────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/writer.rs | 31 | // ─── Cursor movement ─────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/writer.rs | 43 | // ─── Line operations ─────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/writer.rs | 61 | // ─── Character operations ────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/writer.rs | 69 | // ─── Erase operations ────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/writer.rs | 216 | // ─── Title stack ─────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/writer.rs | 222 | // ─── Pane notification ───────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests/winops_and_resets.rs | 21 | // ─── Hardening: DECSCUSR n=0 clears blinking set ───────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests/winops_and_resets.rs | 30 | // ─── Hardening: SGR all standard colours ────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests/winops_and_resets.rs | 50 | // ─── Hardening: ESC dispatch clears INPUT_LAST ──────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests/winops_and_resets.rs | 62 | // ─── Hardening: CSI dispatch clears INPUT_LAST ──────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests/winops_and_resets.rs | 74 | // ─── Hardening: DCS ignore state ────────────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests/winops_and_resets.rs | 90 | // ─── Hardening: PM goes to consume_st ───────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests/winops_and_resets.rs | 105 | // ─── Hardening: RIS resets cell state ───────────────────────────── | COMMENT |
| MEDIUM | crates/rmux-core/src/input/tests/winops_and_resets.rs | 120 | // ─── Hardening: input buffer max size ───────────────────────────── | COMMENT |
| 27 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/check-changelog-release.py | 4 | CODE | |
| LOW | scripts/tmux-compat-linux-check.py | 10 | CODE | |
| LOW | scripts/check-perf-baseline.py | 4 | CODE | |
| LOW | scripts/check-tmux-release-ledger.py | 4 | CODE | |
| LOW | scripts/check-perf-current.py | 4 | CODE | |
| LOW | scripts/toml_reader.py | 26 | CODE | |
| LOW | scripts/retain-linux-package-history.py | 4 | CODE | |
| LOW | scripts/perf_artifact.py | 4 | CODE | |
| LOW | scripts/perf-diff.py | 9 | CODE | |
| LOW | scripts/bench/collect.py | 4 | CODE | |
| LOW | scripts/bench/render.py | 4 | CODE | |
| LOW | scripts/bench/bench_unix.py | 16 | CODE | |
| LOW | scripts/release/channel-target-evidence.py | 4 | CODE | |
| LOW | scripts/release/receipt-recovery.py | 4 | CODE | |
| LOW | scripts/release/promotion-simulation.py | 4 | CODE | |
| LOW | scripts/release/canonical-artifact-binding.py | 4 | CODE | |
| LOW | scripts/release/snap-candidate-status.py | 4 | CODE | |
| LOW | scripts/release/strict_json.py | 8 | CODE | |
| LOW | scripts/release/validate-contracts.py | 4 | CODE | |
| LOW | scripts/release/verify-downstream-repository.py | 4 | CODE | |
| LOW | scripts/release/measure-actions-run.py | 4 | CODE | |
| LOW | scripts/release/prepare-channel-retry.py | 4 | CODE | |
| LOW | scripts/release/verify-exact-file-set.py | 4 | CODE | |
| LOW | scripts/release/downstream_summary.py | 3 | CODE | |
| LOW | scripts/release/release_tag_policy.py | 4 | CODE | |
| LOW | scripts/release/policy_audit_contract.py | 4 | CODE | |
| LOW | scripts/release/candidate_artifact_resolution.py | 3 | CODE | |
| LOW | scripts/release/canonical_contract.py | 4 | CODE | |
| LOW | scripts/release/channel-policy.py | 4 | CODE | |
| LOW | scripts/release/downstream_payload.py | 4 | CODE | |
| LOW | scripts/release/github_repository_writer.py | 3 | CODE | |
| LOW | scripts/release/linux_repository_recovery_model.py | 4 | CODE | |
| LOW | scripts/release/channel-execution.py | 4 | CODE | |
| LOW | scripts/release/build-downstream-receipt-reference.py | 4 | CODE | |
| LOW | scripts/release/channel_request.py | 4 | CODE | |
| LOW | scripts/release/downstream_result.py | 4 | CODE | |
| LOW | scripts/release/channel-request.py | 4 | CODE | |
| LOW | scripts/release/publication-receipt.py | 4 | CODE | |
| LOW | scripts/release/downstream_result_reference.py | 3 | CODE | |
| LOW | scripts/release/publication_authorization.py | 3 | CODE | |
| LOW | scripts/release/canonical-wasm-bundle.py | 4 | CODE | |
| LOW | scripts/release/shadow_contract.py | 4 | CODE | |
| LOW | scripts/release/signed-tag-proof.py | 4 | CODE | |
| LOW | scripts/release/publication_release_state.py | 4 | CODE | |
| LOW | scripts/release/local_action_policy.py | 4 | CODE | |
| LOW | scripts/release/workflow_actions_expression.py | 3 | CODE | |
| LOW | scripts/release/downstream_plan.py | 4 | CODE | |
| LOW | scripts/release/canonical-build-record.py | 4 | CODE | |
| LOW | scripts/release/collect-downstream-repository.py | 4 | CODE | |
| LOW | scripts/release/verify-fast-run.py | 4 | CODE | |
| LOW | scripts/release/github_actions.py | 4 | CODE | |
| LOW | scripts/release/release_publish_security.py | 4 | CODE | |
| LOW | scripts/release/owned_repository_payload.py | 3 | CODE | |
| LOW | scripts/release/publish-owned-repository.py | 4 | CODE | |
| LOW | scripts/release/release_authority.py | 4 | CODE | |
| LOW | scripts/release/verify-candidate-artifacts.py | 4 | CODE | |
| LOW | scripts/release/promotion-authorization.py | 4 | CODE | |
| LOW | scripts/release/promotion_contract.py | 4 | CODE | |
| LOW | scripts/release/github_release_api.py | 4 | CODE | |
| LOW | scripts/release/policy_audit_model.py | 4 | CODE | |
| 37 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/check-changelog-release.py | 26 | def workspace_release_heading() -> str: | CODE |
| LOW | scripts/tmux-compat-linux-check.py | 160 | def compare_key_table_contract(self, table: str) -> None: | CODE |
| LOW | scripts/check-perf-current.py | 71 | def validate_absolute_budgets(source: dict[str, object]) -> None: | CODE |
| LOW | scripts/retain-linux-package-history.py | 214 | def authenticated_apt_packages( | CODE |
| LOW | scripts/retain-linux-package-history.py | 286 | def authenticated_rpm_packages( | CODE |
| LOW | scripts/perf_artifact.py | 135 | def validate_current_identity( | CODE |
| LOW | scripts/bench/render.py | 166 | def select_canonical_payloads(payloads: list[dict[str, Any]]) -> list[dict[str, Any]]: | CODE |
| LOW⚡ | scripts/bench/bench_unix.py | 284 | def split_window_h_detached_sh(adapter: Adapter) -> float: | CODE |
| LOW⚡ | scripts/bench/bench_unix.py | 292 | def split_window_v_detached_sh(adapter: Adapter) -> float: | CODE |
| LOW⚡ | scripts/bench/bench_unix.py | 300 | def split_window_h_attached_sh(adapter: Adapter) -> float: | CODE |
| LOW⚡ | scripts/bench/bench_unix.py | 308 | def split_window_v_attached_sh(adapter: Adapter) -> float: | CODE |
| LOW | scripts/bench/bench_unix.py | 410 | def send_keys_detached_round_trip(adapter: Adapter) -> float: | CODE |
| LOW | scripts/bench/bench_unix.py | 661 | def zellij_capture_scrollback(executable: str) -> float: | CODE |
| LOW | scripts/bench/bench_unix.py | 678 | def setup_zellij_list_windows(executable: str, name: str) -> None: | CODE |
| LOW | scripts/bench/bench_unix.py | 693 | def batched_zellij_list_windows(executable: str, iterations: int) -> MeasuredOperation: | CODE |
| LOW | scripts/bench/bench_unix.py | 771 | def batched_zellij_list_panes(executable: str, iterations: int) -> MeasuredOperation: | CODE |
| LOW | scripts/bench/bench_unix.py | 960 | def screen_capture_scrollback(executable: str) -> float: | CODE |
| LOW | scripts/bench/bench_unix.py | 979 | def setup_screen_list_windows(executable: str, name: str) -> None: | CODE |
| LOW | scripts/bench/bench_unix.py | 997 | def batched_screen_list_windows(executable: str, iterations: int) -> MeasuredOperation: | CODE |
| LOW | scripts/release/receipt-recovery.py | 136 | def verify_prior_failed_attempt( | CODE |
| LOW | scripts/release/receipt-recovery.py | 181 | def verify_live_receipt_chain( | CODE |
| LOW | scripts/release/validate-contracts.py | 325 | def validate_windows_coverage() -> None: | CODE |
| LOW | scripts/release/validate-contracts.py | 349 | def validate_candidate_workflow() -> None: | CODE |
| LOW | scripts/release/validate-contracts.py | 506 | def validate_measurement_budget() -> None: | CODE |
| LOW | scripts/release/prepare-channel-retry.py | 436 | def add_prepare_evidence_args( | CODE |
| LOW | scripts/release/downstream_summary.py | 193 | def validate_summary_for_plan( | CODE |
| LOW | scripts/release/release_tag_policy.py | 233 | def ssh_public_key_fingerprint(public_key: str) -> str: | CODE |
| LOW | scripts/release/policy_audit_contract.py | 279 | def _validate_policy_bundle_imports(root: Path, paths: tuple[str, ...]) -> None: | CODE |
| LOW | scripts/release/policy_audit_contract.py | 315 | def validate_repository_contracts(root: Path) -> None: | CODE |
| LOW | scripts/release/candidate_artifact_resolution.py | 250 | def resolve_candidate_artifacts(request: ResolutionRequest) -> dict[str, Any]: | CODE |
| LOW | scripts/release/candidate_artifact_resolution.py | 315 | def load_candidate_resolution( | CODE |
| LOW | scripts/release/canonical_contract.py | 77 | def validate_candidate_policy(value: Any) -> None: | CODE |
| LOW | scripts/release/downstream_payload.py | 219 | def validate_payload_document( | CODE |
| LOW | scripts/release/downstream_payload.py | 302 | def validate_receipt_predicate( | CODE |
| LOW | scripts/release/github_repository_writer.py | 214 | def recover_exact_signed_commit( | CODE |
| LOW | scripts/release/github_repository_writer.py | 386 | def repository_state_is_exact( | CODE |
| LOW | scripts/release/github_repository_writer.py | 452 | def publish_batched_signed_commits( | CODE |
| LOW | scripts/release/linux_repository_recovery_model.py | 57 | def validate_failed_receipt_run( | CODE |
| LOW | scripts/release/linux_repository_recovery_model.py | 166 | def reject_prior_linux_publication( | CODE |
| LOW | scripts/release/linux_repository_recovery_model.py | 182 | def reject_prior_recovery_result( | CODE |
| LOW | scripts/release/build-downstream-receipt-reference.py | 73 | def downstream_release_identity(value: dict[str, Any]) -> dict[str, Any]: | CODE |
| LOW | scripts/release/downstream_result.py | 97 | def validate_result_artifact_source( | CODE |
| LOW | scripts/release/downstream_result.py | 139 | def validate_retryable_previous(value: dict[str, Any]) -> None: | CODE |
| LOW | scripts/release/publication-receipt.py | 48 | def validate_authorization_predicate( | CODE |
| LOW | scripts/release/publication_authorization.py | 30 | def validate_authorization_envelope( | CODE |
| LOW | scripts/release/shadow_contract.py | 27 | def validate_candidate_policy(value: Any) -> None: | CODE |
| LOW | scripts/release/local_action_policy.py | 100 | def validate_local_action_policy(repository_root: Path, tracked: set[str]) -> None: | CODE |
| LOW | scripts/release/workflow_actions_expression.py | 201 | def find_actions_input_context(body: str) -> str | None: | CODE |
| LOW | scripts/release/collect-downstream-repository.py | 87 | def exact_installation_repositories( | CODE |
| LOW | scripts/release/release_publish_security.py | 35 | def require_publication_activation(path: Path) -> None: | CODE |
| LOW | scripts/release/release_publish_security.py | 69 | def verify_promotion_attestation( | CODE |
| LOW | scripts/release/release_authority.py | 97 | def validate_evidence_authority( | CODE |
| LOW | scripts/release/verify-candidate-artifacts.py | 94 | def verify_linux_glibc_tools_receipt(path: Path) -> None: | CODE |
| LOW | scripts/release/promotion_contract.py | 107 | def validate_candidate_policy(value: Any) -> None: | CODE |
| LOW | scripts/release/policy_audit_model.py | 411 | def validate_predicate_against_contract( | CODE |
| LOW | scripts/release/workflow_run_input_boundary.py | 29 | def find_direct_input_expressions(text: str) -> tuple[DirectInputExpression, ...]: | CODE |
| LOW | scripts/release/workflow_run_input_boundary.py | 40 | def validate_no_direct_input_expressions(paths: Iterable[Path]) -> None: | CODE |
| LOW | scripts/release/policy_audit_live_state.py | 16 | def normalize_required_checks(value: Any) -> list[dict[str, Any]]: | CODE |
| LOW | scripts/release/release_evidence.py | 128 | def validate_candidate_reference( | CODE |
| LOW | scripts/release/release_evidence.py | 187 | def validate_candidate_manifest(manifest: dict[str, Any]) -> list[dict[str, Any]]: | CODE |
| 21 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/tmux-compat-linux-check.py | 327 | except Exception: | CODE |
| HIGH | scripts/tmux-compat-linux-check.py | 333 | except Exception: | CODE |
| HIGH | scripts/tmux-compat-linux-check.py | 362 | except OSError: | CODE |
| HIGH | scripts/release/github_repository_writer.py | 498 | except (OSError, ValueError): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/check-changelog-release.py | 42 | CODE | |
| LOW | scripts/check-perf-baseline.py | 40 | CODE | |
| LOW | scripts/check-tmux-release-ledger.py | 141 | CODE | |
| LOW | scripts/toml_reader.py | 305 | CODE | |
| LOW | scripts/retain-linux-package-history.py | 104 | CODE | |
| LOW | scripts/bench/render.py | 134 | CODE | |
| LOW | scripts/release/policy_audit_contract.py | 279 | CODE | |
| LOW | scripts/release/downstream_payload.py | 392 | CODE | |
| LOW | scripts/release/github_repository_writer.py | 242 | CODE | |
| LOW | scripts/release/github_repository_writer.py | 140 | CODE | |
| LOW | scripts/release/local_action_policy.py | 100 | CODE | |
| LOW | scripts/release/workflow_actions_expression.py | 48 | CODE | |
| LOW | scripts/release/workflow_actions_expression.py | 139 | CODE | |
| LOW | scripts/release/workflow_actions_expression.py | 201 | CODE | |
| LOW | scripts/release/downstream_plan.py | 51 | CODE | |
| LOW | scripts/release/downstream_workflow_contract.py | 156 | CODE | |
| LOW | scripts/release/workflow_yaml_run_scalars.py | 373 | CODE | |
| LOW | scripts/release/receipt_recovery_topology.py | 496 | CODE | |
| LOW | scripts/release/linux_repository_recovery.py | 377 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/bench_screen_adapter_spec.rs | 596 | except Exception as error: | CODE |
| LOW | scripts/tmux-compat-linux-check.py | 259 | except Exception: | CODE |
| LOW⚡ | scripts/tmux-compat-linux-check.py | 327 | except Exception: | CODE |
| LOW⚡ | scripts/tmux-compat-linux-check.py | 333 | except Exception: | CODE |
| LOW⚡ | scripts/tmux-compat-linux-check.py | 339 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 106 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 131 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 251 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 460 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 507 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 704 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 782 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 1008 | except Exception: | CODE |
| LOW | scripts/bench/bench_unix.py | 1173 | except Exception as error: | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/rmux-core/src/style/types.rs | 39 | /// Absolutely centred. | COMMENT |
| MEDIUM | crates/rmux-proto/src/request.rs | 349 | /// Internal idle-only shutdown endpoint used by seamless upgrades. | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 1317 | # The downloaded test harness uses the default dynamic CRT; packaged | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 103 | <td align="center" width="25%"><a href="https://rmux.io/#demo-orchestration"><img src="https://rmux.io/demos/demo-or | CODE |
| MEDIUM | docs/i18n/README.fr.md | 104 | <td align="center" width="25%"><a href="https://rmux.io/#demo-orchestration"><img src="https://rmux.io/demos/demo-or | CODE |
| MEDIUM | docs/i18n/README.ja.md | 104 | <td align="center" width="25%"><a href="https://rmux.io/#demo-orchestration"><img src="https://rmux.io/demos/demo-or | CODE |
| MEDIUM | docs/i18n/README.zh-CN.md | 104 | <td align="center" width="25%"><a href="https://rmux.io/#demo-orchestration"><img src="https://rmux.io/demos/demo-or | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/toml_reader.py | 32 | __all__ = ["TOMLDecodeError", "load", "loads"] | CODE |
| LOW | scripts/release/channel-request.py | 6 | __all__ = ["pre_site_summary_digest"] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/build-web-crypto-wasm.sh | 15 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/rmux-server/src/tmux_shim.rs | 279 | std::fs::write(dir.join("tmux"), b"placeholder").expect("create shim file"); | CODE |