An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.
This report summarizes scanner evidence for The-Vibe-Company/Quivr, a Go project with 39,583 GitHub stars. SynthScan examined 404,564 lines of code across 1893 source files, recording 1842 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 5.3 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1042 finding(s).
Are imports declared and package/API names verified? 616 finding(s).
Are wrappers, guards, and repeated structures necessary? 901 finding(s).
Which changes need focused human review? 1842 finding(s).
Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1842 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/python/tests/test_connector.py | 61 | def test_typed_requests_discovery_and_credential_check(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 84 | def test_request_refusals_do_not_call_source(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 102 | def test_classified_failures_not_due_and_unclassified_io(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 127 | def test_credentials_are_redacted_from_logs_and_response_validation(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 162 | def test_page_self_checks_and_credential_status_schema(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 182 | def test_typed_page_carries_new_connector_fields_on_supported_api(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 206 | def test_fetch_ordered_record_flag_is_optional_version_gated_and_still_validates_items(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 233 | def test_configuration_diagnostics_redact_before_truncation(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 243 | def test_grouped_exceptions_redact_multiline_secrets_before_layout(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 263 | def test_public_request_helpers_wrap_credentials_and_allow_public_sources(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 329 | def test_receive_dispatches_custom_route_and_rejects_incoherent_verdict(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 369 | def test_connector_routes_register_dispatch_and_validate_before_handler(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 429 | def test_connector_route_registration_requires_declared_nonduplicate_handlers(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 445 | def test_route_only_connector_refuses_legacy_receive_and_requires_routes(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 498 | def test_attachment_handlers_dispatch_and_enforce_declared_size(self): | CODE |
| LOW | sdks/python/tests/test_connector.py | 535 | def test_fetch_output_rejects_extension_and_manifest_storage_bounds(self): | CODE |
| LOW | sdks/python/tests/test_signing.py | 132 | def test_health_is_exempt_from_authentication(self): | CODE |
| LOW | sdks/python/tests/test_signing.py | 140 | def test_authentication_precedes_post_dispatch(self): | CODE |
| LOW | sdks/python/tests/test_signing.py | 172 | def test_missing_or_malformed_key_configuration_fails_closed_without_echoing_secret(self): | CODE |
| LOW | sdks/python/tests/test_signing.py | 197 | def test_key_rotation_accepts_overlap_and_rejects_retired_keys(self): | CODE |
| LOW | sdks/python/tests/test_server.py | 45 | def test_discovery_matches_the_manifest_bytes(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 70 | def test_unknown_route_and_wrong_method(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 74 | def test_successful_invocation_is_schema_valid(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 80 | def test_dict_responses_are_accepted(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 91 | def test_unexpected_exception_is_terminal_internal_error(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 95 | def test_invalid_response_is_caught_before_sending(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 100 | def test_response_over_the_declared_limit(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 103 | def test_invalid_request_body(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 110 | def test_undeclared_media_type(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 113 | def test_error_codes_are_checked(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 122 | def test_invalid_configuration_is_rejected_before_the_normalizer_runs(self): | CODE |
| LOW⚡ | sdks/python/tests/test_server.py | 128 | def test_validate_configuration_lists_every_problem(self): | CODE |
| LOW | sdks/python/tests/test_server.py | 151 | def test_records_carry_the_invocation_id(self): | CODE |
| LOW | sdks/python/tests/test_server.py | 189 | def test_disconnected_caller_does_not_raise_a_server_error(self): | CODE |
| LOW | sdks/python/tests/test_server.py | 227 | def test_persistent_responses_disable_nagle(self): | CODE |
| LOW | sdks/python/tests/test_server.py | 279 | def test_malformed_requests_get_an_envelope(self): | CODE |
| LOW | sdks/python/tests/test_server.py | 305 | def test_build_request_from_the_normative_fixture(self): | CODE |
| LOW | sdks/python/tests/test_ingestion.py | 53 | def test_normative_response_cases_match_the_contract_oracle(self): | CODE |
| LOW | sdks/python/tests/test_ingestion.py | 96 | def test_pages_require_manifest_opt_in_before_dispatch(self): | CODE |
| LOW | sdks/python/tests/test_ingestion.py | 108 | def test_unknown_space_is_rejected_before_the_handler_runs(self): | CODE |
| LOW | sdks/python/tests/test_ingestion.py | 118 | def test_provenance_bound_uses_stored_json_size(self): | CODE |
| LOW | sdks/python/tests/test_models.py | 59 | def test_every_fixture_schema_has_a_model(self): | CODE |
| LOW | sdks/python/tests/test_models.py | 62 | def test_schema_valid_fixtures_round_trip_exactly(self): | CODE |
| LOW | sdks/python/tests/test_models.py | 75 | def test_schema_outcome_matches_the_index(self): | CODE |
| LOW | sdks/python/tests/test_models.py | 80 | def test_decoding_rejects_unknown_fields_and_wrong_kinds(self): | CODE |
| LOW | sdks/python/tests/test_models.py | 92 | def test_unions_decode_by_kind(self): | CODE |
| LOW | sdks/python/tests/test_system_one.py | 11 | def test_dns_timeout_retains_no_paid_work_or_concurrency_slot(self): | CODE |
| LOW | sdks/python/tests/test_system_one.py | 34 | def test_bearer_credentials_require_https_or_numeric_loopback(self): | CODE |
| LOW⚡ | sdks/python/tests/test_blob.py | 30 | def test_checksum_mismatch_is_terminal(self): | CODE |
| LOW⚡ | sdks/python/tests/test_blob.py | 35 | def test_size_mismatch_is_terminal(self): | CODE |
| LOW⚡ | sdks/python/tests/test_blob.py | 41 | def test_missing_file_is_terminal(self): | CODE |
| LOW⚡ | sdks/python/tests/test_blob.py | 80 | def test_transient_failures_are_retryable(self): | CODE |
| LOW⚡ | sdks/python/tests/test_blob.py | 86 | def test_missing_blob_is_terminal(self): | CODE |
| LOW⚡ | sdks/python/tests/test_blob.py | 90 | def test_connection_refused_is_retryable(self): | CODE |
| LOW⚡ | sdks/python/tests/test_subscription.py | 85 | def test_discovery_lists_the_subscription_and_negotiates_plugin_api(self) -> None: | CODE |
| LOW⚡ | sdks/python/tests/test_subscription.py | 95 | def test_decides_each_evaluation(self) -> None: | CODE |
| LOW⚡ | sdks/python/tests/test_subscription.py | 104 | def test_refuses_invalid_requests_terminally(self) -> None: | CODE |
| LOW | sdks/python/tests/test_subscription.py | 116 | def test_checks_the_response_before_sending_it(self) -> None: | CODE |
| LOW | sdks/python/tests/test_subscription.py | 129 | def test_maps_handler_errors_to_the_envelope(self) -> None: | CODE |
| LOW | sdks/python/tests/test_subscription.py | 137 | def test_fixture_helpers_match_the_go_tooling(self) -> None: | CODE |
| 656 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | README.md | 152 | - metadata filters such as `source:wire` or `author:"Jane Doe"` (names mapped in the | CODE |
| LOW⚡ | sdks/python/tests/test_subscription.py | 161 | "extensions": {"example.editorial": {"schema_version": "1", "data": {"author": "Jane Doe"}}}, | CODE |
| LOW⚡ | sdks/python/tests/test_subscription.py | 168 | self.assertEqual(invocation.field("/extensions/example.editorial/data/author"), "Jane Doe") | CODE |
| LOW | plugins/rss/rss_test.go | 451 | paragraph := strings.Repeat("<p>Lorem ipsum dolor sit amet.</p>", 5000) // about 170 KiB of HTML per item, under the 10 | CODE |
| LOW | plugins/rss/rss_test.go | 451 | paragraph := strings.Repeat("<p>Lorem ipsum dolor sit amet.</p>", 5000) // about 170 KiB of HTML per item, under the 10 | CODE |
| LOW | plugins/rss/testdata/golden/atom.json | 64 | "email": "alex@example.org", | CODE |
| LOW | plugins/alerts/README.md | 43 | | `{"field": "author", "equals": "Jane Doe"}` | The article's metadata field has this value ([fields](#field-filters)) | | CODE |
| LOW | plugins/alerts/README.md | 354 | author:"Jane Doe" OR source:wire | CODE |
| LOW⚡ | plugins/alerts/tests/test_described.py | 150 | "extensions": {"example.news": {"schema_version": "1", "data": {"author": "Jane Doe", "categories": [" | CODE |
| LOW⚡ | plugins/alerts/tests/test_described.py | 155 | {"title": "Les dockers votent la grève au port", "source": "wire", "author": "Jane Doe", "categ | CODE |
| LOW⚡ | plugins/alerts/tests/test_rule.py | 101 | self.assertEqual(self.ask({"all": [T("grève"), {"field": "author", "equals": "Jane Doe"}]}), "match") | CODE |
| LOW | plugins/alerts/tests/notation-cases.json | 19 | "equals": "Jane Doe" | CODE |
| LOW | plugins/alerts/alerts/notation.py | 4 | author:"Jane Doe" OR source:wire | STRING |
| LOW⚡ | plugins/m365-mail/mapping_test.go | 9 | m.From.EmailAddress.Address = "desk@example.org" | CODE |
| LOW⚡ | plugins/m365-mail/mapping_test.go | 12 | m.Sender.EmailAddress.Address = "delegate@example.org" | CODE |
| LOW⚡ | plugins/m365-mail/mapping_test.go | 13 | s := session{cfg: config{Mailbox: "reader@example.org", Folder: "archive"}} | CODE |
| LOW | plugins/m365-mail/mail_test.go | 29 | const cfgJSON = `{"tenant_id":"00000000-0000-0000-0000-000000000000","mailbox":"monitoring@example.org","backfill_since" | CODE |
| LOW | plugins/m365-mail/harness_test.go | 34 | g := &fakeGraph{t: t, url: process.Start(t, "graph").URL, clientID: "11111111-1111-1111-1111-111111111111", mailbox: "m | CODE |
| LOW | plugins/m365-mail/harness_test.go | 94 | "from": map[string]any{"emailAddress": map[string]any{"name": "Desk", "address": "desk@example.org"}}, | CODE |
| LOW | plugins/m365-mail/harness_test.go | 95 | "toRecipients": []any{map[string]any{"emailAddress": map[string]any{"name": "Monitor", "address": "monitoring@example. | CODE |
| LOW | plugins/m365-mail/testdata/golden/attachments.json | 6 | "mailbox": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/attachments.json | 28 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/attachments.json | 41 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/attachments.json | 176 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/attachments.json | 186 | "address": "monitoring@example.org", | CODE |
| LOW | …/m365-mail/testdata/golden/no_backfill_starts_now.json | 6 | "mailbox": "monitoring@example.org", | CODE |
| LOW | …/m365-mail/testdata/golden/no_backfill_starts_now.json | 24 | "address": "desk@example.org", | CODE |
| LOW | …/m365-mail/testdata/golden/no_backfill_starts_now.json | 37 | "address": "monitoring@example.org", | CODE |
| LOW | …/m365-mail/testdata/golden/no_backfill_starts_now.json | 63 | "address": "desk@example.org", | CODE |
| LOW | …/m365-mail/testdata/golden/no_backfill_starts_now.json | 76 | "address": "monitoring@example.org", | CODE |
| LOW | …/m365-mail/testdata/golden/no_backfill_starts_now.json | 122 | "address": "desk@example.org", | CODE |
| LOW | …/m365-mail/testdata/golden/no_backfill_starts_now.json | 132 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 6 | "mailbox": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 24 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 37 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 54 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 67 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 84 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 97 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 114 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 127 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 172 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 182 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 234 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 244 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 309 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 319 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 354 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 367 | "address": "monitoring@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 413 | "address": "desk@example.org", | CODE |
| LOW | plugins/m365-mail/testdata/golden/delta_paging.json | 423 | "address": "monitoring@example.org", | CODE |
| LOW | …s/m365-mail/testdata/golden/foreign_link_restarts.json | 6 | "mailbox": "monitoring@example.org", | CODE |
| LOW | …s/m365-mail/testdata/golden/foreign_link_restarts.json | 24 | "address": "desk@example.org", | CODE |
| LOW | …s/m365-mail/testdata/golden/foreign_link_restarts.json | 37 | "address": "monitoring@example.org", | CODE |
| LOW | …s/m365-mail/testdata/golden/foreign_link_restarts.json | 86 | "address": "desk@example.org", | CODE |
| LOW | …s/m365-mail/testdata/golden/foreign_link_restarts.json | 96 | "address": "monitoring@example.org", | CODE |
| LOW⚡ | …gins/m365-mail/testdata/golden/bodies_and_headers.json | 131 | "address": "relay@example.org", | CODE |
| LOW⚡ | …gins/m365-mail/testdata/golden/bodies_and_headers.json | 140 | "address": "r@example.org", | CODE |
| LOW⚡ | …gins/m365-mail/testdata/golden/bodies_and_headers.json | 146 | "address": "r@example.org", | CODE |
| LOW⚡ | …gins/m365-mail/testdata/golden/bodies_and_headers.json | 152 | "address": "r@example.org", | CODE |
| 431 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | sdks/python/src/quivr_plugin/server.py | 589 | except KeyboardInterrupt: | CODE |
| HIGH | sdks/python/src/quivr_plugin/system_one.py | 205 | except OSError: | CODE |
| HIGH | plugins/newsml-g2/newsml_g2/normalizer.py | 132 | except (ValueError, OverflowError): | CODE |
| HIGH | plugins/pdf-text/pdf_text/normalizer.py | 123 | except Exception: | CODE |
| HIGH | deploy/cpu/text_encoder.py | 365 | except OSError: | CODE |
| HIGH | deploy/cpu/text_encoder.py | 470 | except KeyboardInterrupt: | CODE |
| HIGH | deploy/cpu/text_encoder.py | 169 | except OSError: | CODE |
| HIGH | deploy/cpu/text_encoder.py | 230 | except (BrokenPipeError, ConnectionResetError, OSError): | CODE |
| HIGH | deploy/railway/reset.py | 316 | except Exception: | CODE |
| HIGH | scripts/connector_restart.py | 63 | except ProcessLookupError: | CODE |
| HIGH | scripts/load_stack.py | 128 | except OSError: | CODE |
| HIGH | scripts/load_stack.py | 210 | except ProcessLookupError: | CODE |
| HIGH | scripts/load_stack.py | 218 | except ProcessLookupError: | CODE |
| HIGH | scripts/check.py | 92 | except ValueError: | CODE |
| HIGH | scripts/connector_x_restart.py | 75 | except ProcessLookupError: | CODE |
| HIGH | scripts/local.py | 295 | except ProcessLookupError:pass | CODE |
| HIGH | scripts/local.py | 732 | except Exception:pass | CODE |
| HIGH | scripts/local.py | 454 | except ProcessLookupError:pass | CODE |
| HIGH | scripts/local.py | 484 | except OSError:pass | CODE |
| HIGH | scripts/local.py | 738 | except Exception:pass | CODE |
| HIGH | scripts/local.py | 407 | except ProcessLookupError: pass | CODE |
| HIGH | scripts/ingestion_plugin.py | 72 | except (ProcessLookupError, PermissionError): | CODE |
| HIGH | scripts/ingestion_plugin.py | 76 | except subprocess.TimeoutExpired: | CODE |
| HIGH | scripts/ports.py | 61 | except (OSError, ValueError, IndexError, subprocess.SubprocessError): | CODE |
| HIGH | scripts/adapter_postgres.py | 82 | except subprocess.TimeoutExpired: | CODE |
| HIGH | scripts/measure_archive.py | 75 | except (OSError, ValueError, IndexError): | CODE |
| HIGH | scripts/normalizer_plugin.py | 335 | except (ProcessLookupError, PermissionError): | CODE |
| HIGH | scripts/migrations.py | 117 | except BaseUnavailable: | CODE |
| HIGH | scripts/measure_cold_index.py | 701 | except MeasurementError: | CODE |
| HIGH | scripts/measure_cold_index.py | 755 | except Exception: | CODE |
| HIGH | scripts/migration_policy.py | 230 | except Error: | CODE |
| HIGH | scripts/subscription_plugin.py | 289 | except (ProcessLookupError, PermissionError): | CODE |
| HIGH | scripts/measure_archive_hosted.py | 388 | except OSError: | CODE |
| HIGH | scripts/eval/news_set.py | 113 | except Exception: | CODE |
| HIGH | scripts/eval/news_set.py | 1027 | except Exception: | CODE |
| HIGH | scripts/eval/run.py | 799 | except (OSError, AttributeError): | CODE |
| HIGH | scripts/eval/jev.py | 125 | except ProcessLookupError: | CODE |
| HIGH | scripts/eval/modal_engine.py | 147 | except (control_store.LeaseLost, control_store.Unavailable): | CODE |
| HIGH | scripts/eval/modal_search.py | 248 | except control_store.LeaseLost: | CODE |
| HIGH | scripts/eval/modal_search.py | 201 | except control_store.LeaseLost: | CODE |
| HIGH | scripts/eval/results.py | 301 | except Unavailable: | CODE |
| HIGH | scripts/eval/results.py | 361 | except Unavailable: | CODE |
| HIGH | scripts/eval/search_trial.py | 655 | except control_store.LeaseLost: | CODE |
| HIGH | scripts/eval/search_trial.py | 173 | except OSError: | CODE |
| HIGH | scripts/eval/query_encoder_parity.py | 359 | except KeyboardInterrupt: | CODE |
| HIGH | scripts/eval/campaign.py | 107 | except ProcessLookupError: | CODE |
| HIGH | scripts/eval/embeddings.py | 233 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | scripts/eval/search_campaign.py | 537 | except control_store.Contention: | CODE |
| HIGH | scripts/eval/oss_bakeoff.py | 99 | except (urllib.error.URLError, TimeoutError): | CODE |
| HIGH | scripts/eval/oss_bakeoff.py | 362 | except (ValueError, OSError, AttributeError, TypeError): | CODE |
| HIGH | scripts/eval/engine_stack.py | 132 | except ProcessLookupError: | CODE |
| HIGH | scripts/eval/engine_stack.py | 139 | except ProcessLookupError: | CODE |
| HIGH | scripts/eval/engine_confirmation.py | 493 | except (control_store.LeaseLost, control_store.Unavailable): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/python/tests/test_connector.py | 263 | CODE | |
| LOW | sdks/python/tests/test_signing.py | 197 | CODE | |
| LOW | sdks/python/tests/test_subscription.py | 25 | CODE | |
| LOW | sdks/python/tests/test_subscription.py | 29 | CODE | |
| LOW | sdks/python/scripts/generate.py | 146 | CODE | |
| LOW | sdks/python/src/quivr_plugin/ingestion.py | 85 | CODE | |
| LOW | sdks/python/src/quivr_plugin/ingestion.py | 152 | CODE | |
| LOW | sdks/python/src/quivr_plugin/ingestion.py | 256 | CODE | |
| LOW | sdks/python/src/quivr_plugin/server.py | 483 | CODE | |
| LOW | sdks/python/src/quivr_plugin/server.py | 508 | CODE | |
| LOW | sdks/python/src/quivr_plugin/subscription.py | 154 | CODE | |
| LOW | sdks/python/src/quivr_plugin/manifest.py | 191 | CODE | |
| LOW | sdks/python/src/quivr_plugin/system_one.py | 182 | CODE | |
| LOW | sdks/python/src/quivr_plugin/connector.py | 240 | CODE | |
| LOW | sdks/python/src/quivr_plugin/connector.py | 407 | CODE | |
| LOW | sdks/python/src/quivr_plugin/_codec.py | 123 | CODE | |
| LOW | sdks/python/src/quivr_plugin/credential.py | 20 | CODE | |
| LOW | sdks/python/src/quivr_plugin/credential.py | 24 | CODE | |
| LOW | plugins/newsml-g2/newsml_g2/normalizer.py | 35 | CODE | |
| LOW | plugins/newsml-g2/newsml_g2/normalizer.py | 206 | CODE | |
| LOW | plugins/jev-rerank/tests/test_retrieval.py | 131 | CODE | |
| LOW | plugins/jev-rerank/tests/test_retrieval.py | 277 | CODE | |
| LOW | plugins/jev-rerank/tests/test_core_candidates.py | 24 | CODE | |
| LOW | plugins/jev-rerank/jev_rerank/retriever.py | 57 | CODE | |
| LOW | plugins/alerts/alerts/notation.py | 77 | CODE | |
| LOW | plugins/alerts/alerts/rule.py | 70 | CODE | |
| LOW | deploy/infrastructure.py | 51 | CODE | |
| LOW | deploy/infrastructure.py | 211 | CODE | |
| LOW | deploy/infrastructure.py | 227 | CODE | |
| LOW | deploy/infrastructure.py | 328 | CODE | |
| LOW | deploy/compose/reset.py | 19 | CODE | |
| LOW | deploy/railway/infrastructure.py | 173 | CODE | |
| LOW | deploy/railway/infrastructure.py | 239 | CODE | |
| LOW | deploy/railway/reset.py | 216 | CODE | |
| LOW | deploy/railway/core-entrypoint.py | 438 | CODE | |
| LOW | deploy/railway/provision.py | 62 | CODE | |
| LOW | deploy/modal/embedding_api.py | 72 | CODE | |
| LOW | deploy/modal/embedding_api.py | 78 | CODE | |
| LOW | …nts/skills/ship-pr-dev/scripts/collect_ship_context.py | 93 | CODE | |
| LOW | .agents/skills/review-code-dev/scripts/ocr.py | 40 | CODE | |
| LOW | …ure-learning-tools/scripts/inspect_project_guidance.py | 59 | CODE | |
| LOW | …d/templates/normalizer/__PLUGIN_MODULE__/normalizer.py | 42 | CODE | |
| LOW | scripts/measure.py | 249 | CODE | |
| LOW | scripts/test_image_context.py | 127 | CODE | |
| LOW | scripts/guides.py | 81 | CODE | |
| LOW | scripts/guides.py | 220 | CODE | |
| LOW | scripts/test_core_entrypoint.py | 73 | CODE | |
| LOW | scripts/test_core_entrypoint.py | 129 | CODE | |
| LOW | scripts/test_core_entrypoint.py | 172 | CODE | |
| LOW | scripts/test_core_entrypoint.py | 215 | CODE | |
| LOW | scripts/connector_restart.py | 14 | CODE | |
| LOW | scripts/connector_restart.py | 42 | CODE | |
| LOW | scripts/load_stack.py | 121 | CODE | |
| LOW | scripts/image_context.py | 63 | CODE | |
| LOW | scripts/image_context.py | 133 | CODE | |
| LOW | scripts/image_context.py | 250 | CODE | |
| LOW | scripts/m365_restart.py | 15 | CODE | |
| LOW | scripts/m365_restart.py | 57 | CODE | |
| LOW | scripts/connector_x_restart.py | 14 | CODE | |
| LOW | scripts/connector_x_restart.py | 54 | CODE | |
| 173 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/python/src/quivr_plugin/ingestion.py | 289 | except Exception: | CODE |
| LOW | sdks/python/src/quivr_plugin/ingestion.py | 341 | except Exception: | CODE |
| LOW | sdks/python/src/quivr_plugin/server.py | 308 | except Exception: # a failing check means not ready, never a dropped connection | CODE |
| LOW | sdks/python/src/quivr_plugin/server.py | 341 | except Exception: | CODE |
| LOW | sdks/python/src/quivr_plugin/server.py | 401 | except Exception: # an unexpected bug: report it, never crash the server | CODE |
| LOW | sdks/python/src/quivr_plugin/server.py | 460 | except Exception: # an unexpected bug: report it, never crash the server | CODE |
| LOW | sdks/python/src/quivr_plugin/server.py | 532 | except Exception: # last resort: every answer carries the envelope | CODE |
| LOW | sdks/python/src/quivr_plugin/system_one.py | 152 | except Exception: | CODE |
| MEDIUM | sdks/python/src/quivr_plugin/system_one.py | 149 | def run() -> None: | CODE |
| LOW | sdks/python/src/quivr_plugin/connector.py | 628 | except Exception: | CODE |
| LOW | sdks/python/src/quivr_plugin/credential.py | 94 | except Exception: | CODE |
| LOW | plugins/hosted-embed/tokenizer.go | 128 | except Exception: | CODE |
| LOW | plugins/pdf-text/pdf_text/normalizer.py | 88 | except Exception as exc: # unsupported algorithm or a broken encryption dictionary | CODE |
| LOW | plugins/pdf-text/pdf_text/normalizer.py | 98 | except Exception as exc: # pypdf raises PdfReadError and various parsing errors on damaged files | CODE |
| LOW | plugins/pdf-text/pdf_text/normalizer.py | 123 | except Exception: | CODE |
| LOW | plugins/pdf-text/pdf_text/normalizer.py | 131 | except Exception: # one damaged page does not lose the others | CODE |
| LOW | plugins/core-ingest/tokenizer.py | 45 | except Exception: | CODE |
| LOW | plugins/core-ingest/tokenizer.py | 51 | except Exception: | CODE |
| LOW | deploy/infrastructure.py | 183 | except Exception: | CODE |
| LOW | deploy/infrastructure.py | 222 | except Exception: | CODE |
| LOW | deploy/reset.py | 65 | except Exception: | CODE |
| LOW | deploy/reset_storage.py | 31 | except Exception: | CODE |
| LOW | deploy/cpu/text_encoder.py | 332 | except Exception: | CODE |
| LOW | deploy/cpu/text_encoder.py | 342 | except Exception: | CODE |
| LOW | deploy/cpu/text_encoder.py | 463 | except Exception: | CODE |
| MEDIUM | deploy/cpu/text_encoder.py | 78 | def _distribution_version(name): | CODE |
| LOW | deploy/compose/reset.py | 142 | except Exception: | CODE |
| LOW | deploy/railway/reset.py | 309 | except Exception: | CODE |
| LOW | deploy/railway/reset.py | 316 | except Exception: | CODE |
| LOW | deploy/modal/embedding_api.py | 135 | except Exception: | CODE |
| LOW | scripts/measure.py | 60 | except Exception as error: # timeouts, refused connections and non-200 are failures, retained | CODE |
| LOW | scripts/measure.py | 116 | except Exception as error: # sampling is diagnostic; keep the measurement running | CODE |
| LOW | scripts/measure.py | 156 | except Exception as error: | CODE |
| LOW⚡ | scripts/local.py | 732 | except Exception:pass | CODE |
| LOW⚡ | scripts/local.py | 734 | except Exception as error:(stack.directory/'dependency-inventory.json').write_text(json.dumps({'status':'not inv | CODE |
| LOW⚡ | scripts/local.py | 738 | except Exception:pass | CODE |
| MEDIUM | scripts/local.py | 286 | def owns_process(self,pid): | CODE |
| LOW | scripts/fake_api.py | 38 | except Exception: | CODE |
| LOW | scripts/fake_api.py | 46 | except Exception as error: | CODE |
| LOW⚡ | scripts/adapter_postgres.py | 112 | except Exception as error: | CODE |
| LOW⚡ | scripts/adapter_postgres.py | 121 | except Exception as error: | CODE |
| LOW⚡ | scripts/adapter_postgres.py | 126 | except Exception as error: | CODE |
| LOW | scripts/measure_archive.py | 437 | except Exception: | CODE |
| LOW | scripts/measure_archive.py | 532 | except Exception as error: | CODE |
| LOW | scripts/measure_archive.py | 541 | except Exception as error: | CODE |
| LOW | scripts/prepare_query_encoder.py | 135 | except Exception: | CODE |
| MEDIUM | scripts/prepare_query_encoder.py | 22 | def _read_lock(lock_path): | CODE |
| LOW | scripts/measure_cold_index.py | 748 | except Exception as error: | CODE |
| LOW | scripts/measure_cold_index.py | 755 | except Exception: | CODE |
| LOW | scripts/measure_cold_index.py | 795 | except Exception as error: | CODE |
| LOW | scripts/measure_cold_index.py | 1174 | except Exception as error: # Keep diagnostics controlled and generic. | CODE |
| MEDIUM | scripts/measure_cold_index.py | 728 | def connect(self) -> None: | CODE |
| LOW | scripts/load.py | 138 | except Exception as error: | CODE |
| LOW⚡ | scripts/load.py | 495 | except Exception as error: | CODE |
| LOW⚡ | scripts/load.py | 503 | except Exception as error: | CODE |
| LOW⚡ | scripts/load.py | 511 | except Exception as error: | CODE |
| MEDIUM | scripts/load.py | 135 | def guarded(self, function, *args): | CODE |
| LOW | scripts/measure_archive_hosted.py | 144 | except Exception: | CODE |
| LOW | scripts/eval/news_set.py | 113 | except Exception: | CODE |
| LOW | scripts/eval/news_set.py | 122 | except Exception as error: | CODE |
| 63 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/go/scripts/sync_schemas.py | 11 | CODE | |
| LOW | sdks/python/tests/test_server.py | 21 | CODE | |
| LOW | …thon/examples/static-source/static_source/connector.py | 2 | CODE | |
| LOW | sdks/python/scripts/generate.py | 14 | CODE | |
| LOW | sdks/python/src/quivr_plugin/_json.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/signing.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/ingestion.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/tracing.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/server.py | 17 | CODE | |
| LOW | sdks/python/src/quivr_plugin/models.py | 6 | CODE | |
| LOW | sdks/python/src/quivr_plugin/subscription.py | 22 | CODE | |
| LOW | sdks/python/src/quivr_plugin/manifest.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 7 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 22 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 23 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 23 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 23 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 23 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 24 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 24 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 24 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 25 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 25 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 25 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 25 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 25 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 25 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 25 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 34 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 36 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 36 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 36 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 37 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 37 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 37 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 37 | CODE | |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 37 | CODE | |
| LOW | sdks/python/src/quivr_plugin/system_one.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/logs.py | 8 | CODE | |
| LOW | sdks/python/src/quivr_plugin/connector.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/_codec.py | 6 | CODE | |
| LOW | sdks/python/src/quivr_plugin/errors.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/testing.py | 14 | CODE | |
| LOW | sdks/python/src/quivr_plugin/credential.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/blob.py | 2 | CODE | |
| LOW | sdks/python/src/quivr_plugin/schema.py | 2 | CODE | |
| LOW | plugins/newsml-g2/newsml_g2/normalizer.py | 2 | CODE | |
| LOW | plugins/jev-rerank/tests/test_retrieval.py | 1 | CODE | |
| 55 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/go/quivrplugin/connector.go | 101 | // CredentialStatus is a successful credential check. | COMMENT |
| LOW | plugins/core-ingest/parity_test.go | 21 | ) | COMMENT |
| LOW | deploy/railway/core-entrypoint.py | 21 | PLUGIN_PYTHON = '/opt/quivr-plugins/bin/python' | COMMENT |
| LOW | …s/skills/diagnosing-bugs/scripts/hitl-loop.template.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | internal/quarantine/run.go | 61 | // the reprocess is canceled. | COMMENT |
| LOW | internal/quarantine/run.go | 81 | // Version stays quarantined with its reason. | COMMENT |
| LOW | internal/quarantine/quarantine.go | 1 | // Package quarantine lists the Record Versions stuck in quarantine and | COMMENT |
| LOW | internal/quarantine/quarantine.go | 61 | COMMENT | |
| LOW | internal/app/run.go | 81 | Delivery DeliveryConfig `json:"delivery"` | COMMENT |
| LOW | internal/app/run.go | 101 | // conflict; a connector plugin needs https unless it is on loopback). API and | COMMENT |
| LOW | internal/app/run.go | 121 | // ChangeStreamPoll is how often an open change stream reads the journal | COMMENT |
| LOW | internal/normalization/normalization.go | 1 | // Package normalization invokes the pinned external normalizer for accepted | COMMENT |
| LOW | internal/processing/processing.go | 41 | // core.ingest plugin (THE-777). A Corpus still routed to a generation it | COMMENT |
| LOW | internal/plugins/pin.go | 41 | Endpoint string `json:"endpoint"` | COMMENT |
| LOW | internal/plugins/work.go | 21 | // plugin of the plan it is pinned to could not be reached, or could no longer | COMMENT |
| LOW | internal/plugins/devhost/fakeplugin/fakeplugin.go | 21 | "time" | COMMENT |
| LOW | internal/plugins/devhost/fakeplugin/connector.go | 21 | // "page_size": n}), the checkpoint is {"offset": n}, and a credential token | COMMENT |
| LOW | …nal/plugins/devhost/fakeplugin/fixture_subscription.go | 21 | } | COMMENT |
| LOW | internal/plugins/registry/plan.go | 161 | // recorded. | COMMENT |
| LOW | internal/plugins/registry/plan.go | 381 | // Roles are the plan's roles after the configuration applies. | COMMENT |
| LOW | internal/plugins/registry/registry.go | 61 | ErrNotFound = publicerr.NotFound | COMMENT |
| LOW | internal/plugins/registry/registry.go | 241 | // Manifest is the exact quivr-plugin.yaml the digest covers. Registrations | COMMENT |
| LOW | internal/plugins/registry/registry.go | 381 | PipelinePlans(ctx context.Context, limit int) ([]Plan, error) | COMMENT |
| LOW | internal/plugins/registry/registry.go | 401 | ClaimCheck(ctx context.Context, lease time.Duration) (Registration, bool, error) | COMMENT |
| LOW | internal/content/searchable.go | 121 | COMMENT | |
| LOW | internal/observability/rollup.go | 21 | // SeriesSearch is one public search; its key is mode and profile. | COMMENT |
| LOW | internal/operations/operations.go | 201 | type Store interface { | COMMENT |
| LOW | internal/backfill/run.go | 41 | BeginBackfill(ctx context.Context, org, id, plan string) (Target, error) | COMMENT |
| LOW | internal/backfill/backfill.go | 141 | // RecordEstimate keeps a dry run under the request key, replacing an | COMMENT |
| LOW | internal/adapters/postgres/searchable.go | 41 | return tx.Commit(ctx) | COMMENT |
| LOW | internal/adapters/postgres/searchable.go | 421 | // The event observes its Record after these writes. | COMMENT |
| LOW | internal/adapters/postgres/plugins.go | 41 | AND EXISTS (SELECT 1 FROM pipeline_plan_roles pr WHERE pr.plan_id=w.plan_id AND pr.registration_id=plugin_registrations | COMMENT |
| LOW | internal/adapters/postgres/delivery.go | 61 | // delivering was lost by a crashed worker (its lease expired): its attempt is | COMMENT |
| LOW | internal/adapters/postgres/evaluation.go | 361 | // journal lock, which disable and withdrawal also take, it rechecks the | COMMENT |
| LOW | internal/adapters/postgres/backfill.go | 21 | // $1 organization, $2 corpus, $3 generation, $4 accepted-after, | COMMENT |
| LOW | internal/adapters/postgres/eligibility.go | 1 | package postgres | COMMENT |
| LOW | internal/adapters/postgres/eligibility.go | 21 | // The primary key makes this scalar lookup equivalent; large reads retain | COMMENT |
| LOW | internal/adapters/postgres/facet_snapshots.go | 21 | // Fast facet counting (THE-1387). Exact aggregation reads every current | COMMENT |
| LOW | internal/adapters/pluginhttp/connector.go | 21 | const ( | COMMENT |
| LOW | internal/retrieval/plugin.go | 21 | COMMENT | |
| LOW | internal/retrieval/rebuild.go | 41 | // target projection or vector coverage, in stable order. | COMMENT |
| LOW | internal/orchestration/temporal/ingestion.go | 41 | // rather than its start-to-close bound (THE-745, THE-835), so a dead worker | COMMENT |
| LOW | internal/monitoring/delivery.go | 81 | ErrorMessage string | COMMENT |
| LOW | internal/monitoring/preview.go | 21 | // defaultPreviewBudget leaves response headroom inside the HTTP request's | COMMENT |
| LOW | internal/monitoring/preview.go | 81 | // PreviewResult is what a preview found. It is computed on request and never | COMMENT |
| LOW | internal/monitoring/evaluation.go | 21 | DecisionNotReady Decision = "not_ready" | COMMENT |
| LOW | internal/monitoring/monitoring.go | 161 | COMMENT | |
| LOW | internal/monitoring/monitoring.go | 181 | // CreateSubscription pins query, which must still be its Saved Query's | COMMENT |
| LOW | internal/monitoring/migration.go | 21 | COMMENT | |
| LOW | internal/monitoring/migration.go | 81 | COMMENT | |
| LOW | docs/inventory.toml | 1 | # Documentation inventory: the single list of living documentation pages. | COMMENT |
| LOW | docs/inventory.toml | 21 | # audience: who reads it | COMMENT |
| LOW | quivr-search/src/lib/notation.ts | 1 | // The text notation of keyword alerts, ported from the alerts plugin's | COMMENT |
| LOW | scripts/local.py | 41 | COMMENT | |
| LOW | scripts/plugin_sdk.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/plugin_sdk_go.sh | 1 | #!/usr/bin/env bash | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/local.py | 45 | # Shortened webhook retry policy of the local harness, like its other short intervals (dev and verify; | COMMENT |
| MEDIUM | scripts/local.py | 47 | # on loopback, so the harness also lifts the private-destination refusal (deployment default: refused). | COMMENT |
| MEDIUM | scripts/local.py | 60 | # Every harness service port comes from one allocator that never hands a port out twice and stays | COMMENT |
| MEDIUM | scripts/local.py | 156 | # Change-journal prune acceptance owns org_r, the only Organization the harness prunes. | COMMENT |
| MEDIUM | scripts/local.py | 199 | # and log directory. Only verify_keyless uses it; the harness always returns to config.json. | COMMENT |
| MEDIUM | scripts/local.py | 302 | # The harness spawned the worker and never reaps it, so once killed it stays a zombie: stopped, holding | COMMENT |
| MEDIUM | scripts/local.py | 476 | # Never leave the harness keyless for a later step, even when the scenario fails. Like the | COMMENT |
| MEDIUM | scripts/local.py | 638 | # Normalizer and alert-rule plugins, the keyless core, then the harness lifecycle. | COMMENT |
| MEDIUM | scripts/ports.py | 36 | # Per user: /tmp is shared on Linux, and leases only coordinate one user's harness runs. | COMMENT |
| MEDIUM⚡ | scripts/test_local.py | 233 | # The harness never reaps the processes it kills; /proc on Linux and ps on macOS must both see the zombie as gon | COMMENT |
| MEDIUM | scripts/test_local.py | 97 | # Start through the harness config boundary; the external launch is a real child. | STRING |
| MEDIUM | scripts/test_reset.py | 18 | # No existing harness reset checks this new external command's guard. | COMMENT |
| MEDIUM | scripts/test_reset.py | 324 | # harness stop helpers do not own this new reset boundary's stricter guard. | COMMENT |
| MEDIUM | scripts/inventory.py | 15 | # Declared supported platform of the local harness and CI. Nothing else is claimed. | COMMENT |
| MEDIUM | .github/workflows/measure.yml | 3 | # latency target or relevance deficit is a reported finding; only harness or | COMMENT |
| MEDIUM | .github/workflows/measure-adapters.yml | 4 | # pull requests that change what they measure. Only harness or dependency errors | COMMENT |
| MEDIUM | .github/workflows/measure-backfill.yml | 5 | # a finding in the summary; only harness or dependency errors fail this job. | COMMENT |
| MEDIUM | conformance/runner.py | 187 | # The existing harness owns its ports, dependencies and fake paid services. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | deploy/cpu/text_encoder.py | 356 | body = b'{"error":{"message":"overloaded","type":"server_error","code":"overloaded","param":null}}' | CODE |
| HIGH⚡ | scripts/test_image_context.py | 90 | (root / 'Dockerfile').write_text(f'FROM node AS build\nCOPY web ./\nFROM node\nRUN true \\\n && true\n{copy_line | CODE |
| HIGH⚡ | scripts/test_guides.py | 104 | code = 'n=$(cat count 2>/dev/null || echo 0); echo $((n+1)) > count; ' \ | CODE |
| HIGH | scripts/eval/news_set.py | 538 | Undefined kappa (all grades identical) is null, never fabricated as 1. | STRING |
| HIGH | scripts/eval/modal_engine.py | 182 | .run_commands('cd /repo && go mod download', 'cd /repo && python scripts/prepare_tokenizer.py', | CODE |
| HIGH | scripts/eval/modal_engine.py | 183 | 'cd /repo && python scripts/prepare_embeddings.py')) | CODE |
| HIGH | scripts/eval/test_campaign_reporting.py | 139 | return Response(b'{"data":{"comment":null}}') | CODE |
| HIGH⚡ | scripts/eval/test_news_providers.py | 812 | ('{"questions":null}', 'invalid_questions'), | CODE |
| HIGH | scripts/eval/test_news_providers.py | 776 | ('{"grades":null}', {'bad_values': 3}), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .agents/skills/wizard/template.sh | 11 | # ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/wizard/template.sh | 13 | # ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .agents/skills/wizard/template.sh | 182 | # ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .agents/skills/wizard/template.sh | 185 | # ────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .agents/skills/wizard/template.sh | 191 | # ── Example stage: replace with your real steps ─────────────────────────── | COMMENT |
| MEDIUM | .agents/skills/wizard/template.sh | 202 | # ────────────────────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | sdks/python/README.md | 152 | see [scaffold coverage and version ownership](../go/README.md#scaffold-and-version-ownership). | CODE |
| MEDIUM | .agents/skills/review-code-dev/companion.json | 7 | "notes": "## Alibaba delegation workflow\n\nBased on Alibaba open-code-review-delegate at v1.12.1 (Apache-2.0). Retain | CODE |
| MEDIUM | internal/plugins/cli/dev_test.go | 27 | // exit codes. The templates themselves are owned by the scaffold package. | COMMENT |
| MEDIUM | internal/plugins/scaffold/scaffold.go | 1 | // Package scaffold writes the Python plugin templates embedded in the quivr | COMMENT |
| MEDIUM | docs/dated/research/modern-search-devx.md | 160 | Cependant, la référence Python qualifie encore la création d'index FTS de **hautement expérimentale et susceptible de ch | CODE |
| MEDIUM | scripts/plugin_sdk.sh | 117 | # Push scaffold and neutral source, certified without external services. | COMMENT |
| MEDIUM | scripts/eval/engine_confirmation.py | 119 | # Include the schemas, migration SQL and all CLI scaffold fixtures embedded | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .agents/skills/triage/SKILL.md | 16 | > *This was generated by AI during triage.* | CODE |
| HIGH | .agents/skills/humanizer/README.md | 5 | Humanizer makes AI-written text sound like a person wrote it, without changing what it says. It is built on Wikipedia's | CODE |
| HIGH | .agents/skills/humanizer/SKILL.md | 397 | The patterns come from Wikipedia's ["Signs of AI writing"](https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/review-code-dev/SKILL.md | 108 | ### Step 1: Preview — Determine What to Review | COMMENT |
| LOW | .agents/skills/review-code-dev/SKILL.md | 128 | ### Step 2: Get Rules for Files | COMMENT |
| LOW | .agents/skills/review-code-dev/SKILL.md | 136 | ### Step 3: Get Diffs | COMMENT |
| LOW | .agents/skills/review-code-dev/SKILL.md | 158 | ### Step 4: Review Each File | COMMENT |
| LOW | .agents/skills/review-code-dev/SKILL.md | 171 | ### Step 5: Format Output | COMMENT |
| LOW | .agents/skills/review-code-dev/SKILL.md | 184 | ### Step 6: Classify and Report | COMMENT |
| LOW | .agents/skills/review-code-dev/SKILL.md | 196 | ### Step 7: Fix (Optional) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | scripts/eval/test_search_trial.py | 164 | wire.fp.raw._sock.settimeout.assert_called_once_with(1.) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/python/src/quivr_plugin/models.py | 1306 | __all__ = [ | CODE |
| LOW | sdks/python/src/quivr_plugin/__init__.py | 44 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/skills/diagnosing-bugs/scripts/hitl-loop.template.sh | 6 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/eval/news_set.py | 361 | CODE |