ascending-llc/jarvis-registry

Pattern Findings

The scanner identified 5526 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers3563 hits · 3503 pts

Severity	File	Line	Snippet	Context
LOW⚡	registry-pkgs/tests/unit/test_access_control.py	18	async def test_returns_empty_when_user_missing():	CODE
LOW⚡	registry-pkgs/tests/unit/test_access_control.py	24	async def test_returns_empty_when_user_has_no_source_id():	CODE
LOW⚡	registry-pkgs/tests/unit/test_access_control.py	32	async def test_resolves_group_ids_including_google_source():	CODE
LOW	registry-pkgs/tests/unit/test_beanie_event_hooks.py	45	def test_every_declared_event_hook_is_actually_registered(document_class: type[Document]) -> None:	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	6	def test_metrics_client_instantiation():	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	17	def test_metrics_client_with_config():	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	40	def test_metrics_client_skips_disabled_metrics():	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	101	def test_record_unregistered_metric_logs_warning():	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	113	def test_create_metrics_client_factory():	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	89	def test_produces_decodable_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	95	def test_kid_is_set_in_header(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	101	def test_no_kid_omits_kid_from_header(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	122	def test_returns_claims_for_valid_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	128	def test_audience_none_skips_aud_verification(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	141	def test_wrong_audience_raises(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	147	def test_expired_token_raises(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	154	def test_leeway_allows_slightly_expired_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	162	def test_leeway_zero_rejects_slightly_expired_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	169	def test_bad_signature_raises(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	190	def test_returns_kid_from_header(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	195	def test_returns_none_when_kid_absent(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	200	def test_raises_on_malformed_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	221	def test_raises_on_malformed_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	235	def test_includes_standard_claims(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	249	def test_expiration_calculated_correctly(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	259	def test_custom_iat_used_when_provided(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	359	def test_returns_claims_without_verification(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	366	def test_decodes_expired_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	373	def test_decodes_token_signed_with_different_key(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	380	def test_raises_on_malformed_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	435	def test_wrong_audience_raises(self, jwks):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	442	def test_mismatched_key_raises(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	272	def test_token_type_included_when_provided(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	283	def test_token_type_omitted_when_none(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	294	def test_extra_claims_merged_into_payload(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	307	def test_extra_claims_can_override_standard_claims(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	320	def test_empty_extra_claims_dict_works(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	334	def test_payload_compatible_with_encode_jwt(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	400	def test_decodes_with_matching_jwk(self, jwks):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	407	def test_audience_none_skips_aud_verification(self, jwks):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	420	def test_expired_token_raises(self, jwks):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	475	def test_kid_matches_argument(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	495	def test_jwk_can_verify_token(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	102	def test_builds_url_and_resolves_db_name(	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	116	def test_raises_when_no_db_name_resolvable(self) -> None:	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	145	async def test_connect_db_creates_client(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	169	async def test_connect_db_uses_env_variables(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	195	async def test_connect_db_extracts_dbname_from_uri(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	211	async def test_connect_db_initializes_beanie(self, mock_ensure_collections):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	254	async def test_connect_db_uses_create_mongo_client(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	273	async def test_connect_db_raises_without_db_name(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	280	async def test_connect_db_only_once(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_mongodb.py	317	async def test_close_db_when_not_connected(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_mongodb.py	323	def test_get_client_when_connected(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_mongodb.py	331	def test_get_client_when_not_connected(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_mongodb.py	338	def test_get_database_when_connected(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	351	def test_get_database_when_not_connected(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	395	async def test_creates_only_missing_collections(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	407	async def test_does_nothing_when_all_collections_exist(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	418	async def test_creates_a_collection_shared_by_two_models_once(self):	CODE
3503 more matches not shown…

Decorative Section Separators271 hits · 970 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	81	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	83	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	114	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	116	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	182	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	184	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	206	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	208	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	227	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	229	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	351	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	353	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	386	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	388	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	451	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	453	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/test_jwt_utils.py	26	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/test_jwt_utils.py	28	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/oauth/test_oauth_service.py	615	# ----------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/oauth/test_oauth_service.py	617	# ----------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/oauth/test_oauth_service.py	703	# ----------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/oauth/test_oauth_service.py	705	# ----------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/oauth/test_oauth_service.py	947	# ----------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/oauth/test_oauth_service.py	949	# ----------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/oauth/test_oauth_service.py	1055	# ----------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/oauth/test_oauth_service.py	1057	# ----------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/oauth/test_oauth_service.py	84	# ----------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/oauth/test_oauth_service.py	86	# ----------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/oauth/test_oauth_service.py	242	# ----------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/oauth/test_oauth_service.py	244	# ----------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/oauth/test_oauth_service.py	332	# ----------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/oauth/test_oauth_service.py	334	# ----------------------------------------------------------------------	COMMENT
MEDIUM⚡	…istry-pkgs/tests/unit/oauth/test_flow_state_manager.py	45	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	…istry-pkgs/tests/unit/oauth/test_flow_state_manager.py	47	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	…istry-pkgs/tests/unit/oauth/test_flow_state_manager.py	76	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	…istry-pkgs/tests/unit/oauth/test_flow_state_manager.py	78	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/core/test_client_categories.py	85	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/core/test_client_categories.py	87	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_persistence.py	755	# ── on_error=skip semantics (skip-tolerated failures) ──────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/workflow/test_compiler.py	455	# ── StepConfig model validation ──────────────────────────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/workflow/test_compiler.py	494	# ── _step_kwargs mapping ─────────────────────────────────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/workflow/test_compiler.py	514	# ── compile_workflow honours StepConfig ──────────────────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/workflow/test_a2a_client.py	747	# ── Provider detection + call-scoped extra headers ────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	181	# ── A2ACallResult.render_text ────────────────────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	258	# ── call_a2a: Message path ───────────────────────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	278	# ── call_a2a: streaming Task path ────────────────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	318	# ── call_a2a: non-streaming Task path (Bug 1 regression) ─────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	340	# ── call_a2a: polling fallback (Bug 2) ───────────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	460	# ── call_a2a: error/empty paths ──────────────────────────────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/database/leased_job.py	69	# ======================================================================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/database/leased_job.py	71	# ======================================================================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/database/leased_job.py	123	# ======================================================================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/database/leased_job.py	125	# ======================================================================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/database/leased_job.py	305	# ======================================================================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/database/leased_job.py	307	# ======================================================================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/database/leased_job.py	391	# ======================================================================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/database/leased_job.py	393	# ======================================================================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/database/leased_job.py	488	# ======================================================================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/database/leased_job.py	490	# ======================================================================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	839	# ------------------------------------------------------------------	COMMENT
211 more matches not shown…

Excessive Try-Catch Wrapping655 hits · 671 pts

Severity	File	Line	Snippet	Context
LOW⚡	…stry-pkgs/tests/unit/telemetry/test_telemetry_setup.py	319	except Exception as e:	CODE
LOW⚡	…stry-pkgs/tests/unit/telemetry/test_telemetry_setup.py	327	except Exception as e:	CODE
LOW	…stry-pkgs/tests/unit/telemetry/test_telemetry_setup.py	29	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/database/mongodb.py	219	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/database/mongodb.py	231	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/database/leased_job.py	335	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/database/leased_job.py	370	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/database/leased_job.py	459	except Exception:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/database/leased_job.py	478	except Exception as exc:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/database/leased_job.py	482	except Exception:	CODE
LOW	…gistry-pkgs/src/registry_pkgs/database/redis_client.py	32	except Exception as e:	CODE
LOW	…gistry-pkgs/src/registry_pkgs/database/redis_client.py	44	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	69	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	121	except Exception:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	223	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	252	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	299	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	321	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	344	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	376	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	406	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	471	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_client.py	224	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_client.py	291	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	835	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	962	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	578	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	657	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	775	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	1150	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/redis_flow_storage.py	113	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/redis_flow_storage.py	130	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/redis_flow_storage.py	149	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/redis_flow_storage.py	161	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/redis_flow_storage.py	181	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/redis_flow_storage.py	208	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/user_service.py	23	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/user_service.py	38	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/user_service.py	43	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/user_service.py	84	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/user_service.py	135	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/token_service.py	225	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/headers.py	118	except Exception as exc:	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/headers.py	187	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/scopes.py	58	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/agentcore_jwt.py	108	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/agentcore_jwt.py	125	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	99	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	161	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	213	except Exception as encrypt_error:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	229	except Exception as encrypt_error:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	233	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	287	except Exception as decrypt_error:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	302	except Exception as decrypt_error:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	306	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	278	except Exception as exc:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	313	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	393	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	462	except Exception as exc:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	540	except Exception as exc:	CODE
595 more matches not shown…

Docstring Block Structure69 hits · 345 pts

Severity	File	Line	Snippet	Context
HIGH	registry-pkgs/src/registry_pkgs/oauth/oauth_utils.py	2	Get default redirect URI for OAuth callback. Constructs redirect URI using the caller-supplied base URL and th	STRING
HIGH	registry-pkgs/src/registry_pkgs/oauth/oauth_client.py	164	Exchange authorization code for access tokens using PKCE. Args: flow_metadata: OAuth flow	STRING
HIGH	registry-pkgs/src/registry_pkgs/oauth/oauth_client.py	233	Refresh OAuth tokens using refresh token. No ``scope`` is sent, so the original grant's scopes are kep	STRING
HIGH	registry-pkgs/src/registry_pkgs/oauth/oauth_client.py	313	Dynamically register OAuth client (RFC 7591). Args: server_url: Authorization server URL	STRING
HIGH	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	991	Decide what to do after a downstream 401. Args: rejected_access_token: The bearer token the downstr	STRING
HIGH	registry-pkgs/src/registry_pkgs/oauth/token_service.py	61	Store OAuth access token (encrypted) Args: user_id: User ID service_name: Serv	STRING
HIGH	registry-pkgs/src/registry_pkgs/oauth/headers.py	47	Build complete HTTP headers with ALL authentication types. Consolidates OAuth, apiKey, custom header, and Agent	STRING
HIGH	registry-pkgs/src/registry_pkgs/oauth/headers.py	222	Build complete headers with authentication for MCP server requests. Consolidates auth logic used by all proxy e	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	55	Encrypts a value using AES-CBC with a random IV. This implementation is compatible with the TypeScript encrypt	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	105	Decrypts an encrypted value using AES-CBC. This implementation is compatible with the TypeScript decryptV2 fun	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	53	Build a standardized JWT payload with common claims. Constructs a JWT payload dict with standard claims (sub, iss,	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	103	Encode a JWT using RS256 with an RSA private key. Args: payload: Claims dict to encode. Must contain at lea	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	131	Decode and verify a self-signed JWT using an RSA public key. Verifies the RS256 signature, expiry, and issuer. Audi	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	184	Decode a JWT without verifying its signature or any claims. Intended for inspecting the payload of externally-issue	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	209	Return the JWK entry whose ``kid`` matches the given key ID. Args: jwks: A JWKS dict with a ``"keys"`` arra	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	242	Decode and verify a JWT using a JSON Web Key (JWK). Used to verify tokens issued by external identity providers (Ke	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	299	Return the ``kid`` from the unverified JWT header. Args: token: Compact JWT string. The header is decoded w	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	318	Return the full unverified JWT header as a dict. Decodes the header segment without verifying the token's signature	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	339	Build a JSON Web Key Set (JWKS) dict from an RSA public key PEM. Constructs a JWKS response body containing a singl	STRING
HIGH	registry-pkgs/src/registry_pkgs/workflows/runner.py	199	Execute a workflow definition and return the completed run + per-node results. Callers must pre-create a ``Work	STRING
HIGH	…-pkgs/src/registry_pkgs/workflows/executor_resolver.py	147	Resolve each STEP node to an MCP server / A2A agent / A2A pool executor. The registry is keyed by ``node.id`` so tw	STRING
HIGH	…istry-pkgs/src/registry_pkgs/workflows/mcp_executor.py	92	Wrap an MCP server as a workflow executor via a direct downstream call. Args: mcp_server: Active	STRING
HIGH	registry-pkgs/src/registry_pkgs/models/enums.py	581	Validate the directive against the current status and return the resulting status. Idempotent transitions (paus	STRING
HIGH	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	532	Create A2AAgent from standard A2A agent card using SDK validation. Args: card_data: A2A ag	STRING
HIGH	…y-pkgs/src/registry_pkgs/models/extended_mcp_server.py	645	Create ExtendedMCPServer instance from server info dictionary. Args: server_info: Server i	STRING
HIGH	registry-pkgs/src/registry_pkgs/vector/repository.py	158	Save a model instance to vector database. Args: instance: Model instance to save	STRING
HIGH	…y-pkgs/src/registry_pkgs/vector/retrievers/reranker.py	21	Create reranker instance based on provider type. Args: reranker_type: Reranker provider (e.g., "bedroc	STRING
HIGH	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	305	Get Weaviate collection by name. Args: collection_name: Collection name (required, will us	STRING
HIGH	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	399	Check if collection exists in Weaviate. Args: collection_name: Collection name (required,	STRING
HIGH	…stry-pkgs/src/registry_pkgs/vector/adapters/factory.py	70	Create vector store adapter. Args: config: BackendConfig instance Returns: Vec	STRING
HIGH	auth-server/src/auth_server/providers/factory.py	23	Factory function to get the appropriate auth provider. Args: provider_type: Type of provider to create ('en	STRING
HIGH	auth-server/src/auth_server/providers/entra.py	193	Fetch user information from Microsoft Graph API. Args: access_token: OAuth2 access token R	STRING
HIGH	auth-server/src/auth_server/providers/base.py	27	Get user information from access token. Args: access_token: OAuth2 access token (required for Graph	STRING
HIGH	registry/src/registry/core/mcp_client.py	334	Perform MCP initialization using MCP client library and return the init_result. This is a pure transport layer	STRING
HIGH	registry/src/registry/core/mcp_client.py	501	Perform MCP initialization handshake using raw JSON-RPC for streamable-http transport. Args: target_ur	STRING
HIGH	registry/src/registry/auth/dependencies.py	21	Get current authenticated user from request state. Args: request: FastAPI request object Returns:	STRING
HIGH	…gistry/src/registry/auth/oauth/reconnection/manager.py	102	Try to reconnect single server Notes: tryReconnect() Args: user_id: User ID	STRING
HIGH	registry/src/registry/mcpgw/tools/server.py	109	Make a tool call to downstream MCP. This function only handles making the HTTP POST request and parsing the respons	STRING
HIGH	registry/src/registry/mcpgw/tools/server.py	374	Execute a specific downstream MCP tool. Args: ctx: The mcp.server.fastmcp.Context object that can be D	STRING
HIGH	registry/src/registry/mcpgw/tools/utils.py	147	Use the ServerSession.send_notification() method to schedule the forwarding of a notification from downstre	STRING
HIGH	registry/src/registry/mcpgw/tools/utils.py	207	Parse the Server-Send Event and check if it's a notification, a response, or something we don't care about. Ref	STRING
HIGH	registry/src/registry/mcpgw/tools/utils.py	245	Get target MCP server URL for proxying to MCP server. Consolidates URL building logic used across all proxy end	STRING
HIGH	registry/src/registry/api/v1/mcp/oauth_router.py	496	Get OAuth tokens Notes: GET /oauth/tokens/:flowId TypeScript implementation: Get tokens via flowManager.ge	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	229	Fetch and validate agent card from URL using SDK. Args: url: Agent endpoint URL	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	443	Get agent by ID. Args: agent_id: Agent ID Returns: Agent document	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	516	Create a new agent. Automatically fetches agent card from provided URL. Args: data: Agent	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	611	Update an existing agent. If URL is updated, automatically fetches new agent card. Args: a	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	802	Toggle agent enabled/disabled status. Args: agent_id: Agent ID enabled: New en	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	843	Refresh agent capabilities by fetching latest agent card from well-known endpoint. This method provide	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	874	Sync agent configuration from .well-known/agent-card.json endpoint using SDK. Args: agent_	STRING
HIGH	registry/src/registry/services/server_service.py	457	Create a new server. Args: data: Server creation data user_id: ID of the user	STRING
HIGH	registry/src/registry/services/server_service.py	671	Update a server. Args: server_id: Server document ID data: Update data (partia	STRING
HIGH	registry/src/registry/services/server_service.py	776	Fetch tools, resources, and prompts from server and update config. Args: server: Server do	STRING
HIGH	registry/src/registry/services/server_service.py	837	Toggle server enabled/disabled status. When enabling, fetch tools and sync to vector DB (upsert).	STRING
HIGH	registry/src/registry/services/server_service.py	900	Get server tools in toolFunctions format. Args: server_id: Server document ID	STRING
HIGH	registry/src/registry/services/server_service.py	1002	Consolidated method to retrieve tools, resources, prompts, and optionally capabilities from a server. A	STRING
HIGH	registry/src/registry/services/server_service.py	1162	Refresh server capabilities (prompts, resources, tools). Fetches the latest capabilities from the MCP	STRING
HIGH	registry/src/registry/services/workflow_service.py	369	Get workflow by ID. Args: workflow_id: Workflow ID Returns: WorkflowD	STRING
HIGH	registry/src/registry/services/workflow_service.py	406	Create a new workflow. Args: data: Workflow creation request Returns:	STRING
HIGH	registry/src/registry/services/workflow_service.py	461	Update an existing workflow. Args: workflow_id: Workflow ID data: Workflow upd	STRING
9 more matches not shown…

Modern AI Meta-Vocabulary116 hits · 296 pts

Severity	File	Line	Snippet	Context
MEDIUM	README.md	101	Jarvis Registry builds upon the excellent foundational work of the [agentic-community/mcp-gateway-registry](https://gith	CODE
MEDIUM	docs/token-refresh-service.md	445	3. Search existing [GitHub Issues](https://github.com/agentic-community/mcp-gateway-registry/issues)	CODE
MEDIUM	docs/anthropic-registry-import.md	322	- GitHub Issues: [mcp-gateway-registry/issues](https://github.com/agentic-community/mcp-gateway-registry/issues)	CODE
MEDIUM	docs/complete-setup-guide.md	176	git clone https://github.com/agentic-community/mcp-gateway-registry.git	CODE
MEDIUM	docs/complete-setup-guide.md	1159	- GitHub Issues: https://github.com/agentic-community/mcp-gateway-registry/issues	CODE
MEDIUM	docs/complete-setup-guide.md	1160	- Discussions: https://github.com/agentic-community/mcp-gateway-registry/discussions	CODE
MEDIUM	docs/faq.md	21	→ Details: [Gateway & Proxy](FEATURES.md#1-gateway-proxy) · [A2A Agent Workflow](FEATURES.md#5-a2a-agent-workflow-orches	CODE
MEDIUM	docs/faq.md	27	→ See: [A2A Agent Workflow Orchestration](FEATURES.md#5-a2a-agent-workflow-orchestration) · [A2A Agent Registry](feature	CODE
MEDIUM	docs/faq.md	155	→ See: [A2A Agent Workflow](FEATURES.md#5-a2a-agent-workflow-orchestration) · [A2A Agent Management](a2a-agent-managemen	CODE
MEDIUM	docs/macos-setup-guide.md	71	git clone https://github.com/agentic-community/mcp-gateway-registry.git	CODE
MEDIUM	docs/macos-setup-guide.md	377	git clone https://github.com/agentic-community/mcp-gateway-registry.git	CODE
MEDIUM	docs/index.md	42	\| [Chatbot, Copilot & IDE Integration](FEATURES.md#1-gateway-proxy) \| Connect chatbots, copilots, developer IDEs, an	CODE
MEDIUM	docs/index.md	44	\| [A2A Agent Workflow](FEATURES.md#5-a2a-agent-workflow-orchestration) \| Register and manage autonomous agents; orch	CODE
MEDIUM	docs/index.md	64	- Explore Agentic: [exploreagentic.ai](https://exploreagentic.ai/) — the field guide to enterprise agentic AI, publi	CODE
MEDIUM	docs/FEATURES.md	3	Jarvis Registry is the enterprise control plane for AI — connecting copilots, autonomous agents, and enterprise tools th	CODE
MEDIUM	docs/keycloak-integration.md	964	docker-compose.yml # Service orchestration	CODE
MEDIUM	docs/design/security-design.md	3	Security in the registry is layered. Each layer has a distinct responsibility, and they compose in a fixed order on ever	CODE
MEDIUM	docs/design/agentcore.md	71	git clone https://github.com/agentic-community/mcp-gateway-registry.git	CODE
MEDIUM	docs/features/a2a-gateway-registry.md	3	The A2A Agent Gateway & Registry is the central catalog for [autonomous agents](https://exploreagentic.ai/agentic-ai/) e	CODE
MEDIUM	docs/features/a2a-gateway-registry.md	9	An A2A agent is an autonomous service that exposes its capabilities through an agent card and a runtime endpoint. Unlike	CODE
MEDIUM	docs/features/auth-server.md	5	Rather than building its own identity store, the auth server is designed to federate with your existing enterprise Ident	CODE
MEDIUM	…s/explore-agentic/comparisons/agentspace-vs-copilot.md	31	Google launched Agentspace on December 13, 2024 <a href="#cite-3" class="cite-ref">[3]</a>, the company's enterprise-AI	CODE
MEDIUM	…s/explore-agentic/comparisons/agentspace-vs-copilot.md	88	Yes, the same product with a new label. Agentspace was folded into Gemini Enterprise at the October 9, 2025 launch <a hr	CODE
MEDIUM	…s/explore-agentic/comparisons/agentspace-vs-copilot.md	118	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/comparisons/moveworks-vs-glean.md	98	1. ServiceNow — ServiceNow to extend leading agentic AI with acquisition of Moveworks — https://newsroom.servicenow.	CODE
MEDIUM	docs/explore-agentic/comparisons/moveworks-vs-glean.md	116	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/comparisons/jarvis-vs-glean.md	72	Glean. The product was built for that exact shape. 100+ connectors on the catalog <a href="#cite-1" class="cite-ref">[1]	CODE
MEDIUM	docs/explore-agentic/comparisons/jarvis-vs-glean.md	106	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	…xplore-agentic/comparisons/jarvis-vs-copilot-studio.md	109	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	31	Agentforce is Salesforce's agentic-AI platform, the successor to Einstein. Three dates, three releases. Announced Septem	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	31	Agentforce is Salesforce's agentic-AI platform, the successor to Einstein. Three dates, three releases. Announced Septem	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	89	Four dates matter. Agentforce announced September 12, 2024 <a href="#cite-1" class="cite-ref">[1]</a>. GA October 25, 20	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	89	Four dates matter. Agentforce announced September 12, 2024 <a href="#cite-1" class="cite-ref">[1]</a>. GA October 25, 20	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	119	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/comparisons/mcp-vs-rag.md	1	# MCP vs RAG: two protocols for two different problems	COMMENT
MEDIUM⚡	docs/explore-agentic/comparisons/mcp-vs-rag.md	25	## The MCP vs RAG framing mistake	COMMENT
MEDIUM⚡	docs/explore-agentic/comparisons/mcp-vs-rag.md	29	For reference: MCP was released by Anthropic as an open JSON-RPC specification on November 25, 2024 <a href="#cite-1" cl	CODE
MEDIUM⚡	docs/explore-agentic/comparisons/mcp-vs-rag.md	37	## What RAG actually does	COMMENT
MEDIUM⚡	docs/explore-agentic/comparisons/mcp-vs-rag.md	43	## How MCP and RAG fit together in production	COMMENT
MEDIUM	docs/explore-agentic/comparisons/mcp-vs-rag.md	68	Different layers. MCP (Model Context Protocol) is a wire protocol. It standardises how an AI client invokes tools and fe	CODE
MEDIUM	docs/explore-agentic/comparisons/mcp-vs-rag.md	76	Yes. And this is now the canonical enterprise pattern <a href="#cite-4" class="cite-ref">[4]</a>. Your RAG pipeline (ret	CODE
MEDIUM	docs/explore-agentic/comparisons/mcp-vs-rag.md	104	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/comparisons/jarvis-vs-moveworks.md	36	Jarvis is an agent platform and MCP gateway listed on AWS Marketplace and Azure Marketplace as "Jarvis: Simplifying AI A	CODE
MEDIUM	docs/explore-agentic/comparisons/jarvis-vs-moveworks.md	126	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM⚡	docs/explore-agentic/playbooks/ai-agent-roi.md	91	Rarely. Never as the primary metric. It has one honest use: internal steering. Which teams adopted the tool, where resis	CODE
MEDIUM⚡	docs/explore-agentic/playbooks/ai-agent-roi.md	95	Three layers, plus one human. Layer one: a workflow metric system finance can audit directly. Your ITSM, ERP, or CRM. No	CODE
MEDIUM⚡	docs/explore-agentic/playbooks/ai-agent-roi.md	103	1. Gartner — Gartner Predicts Over 40% of Agentic AI Projects Will Be Canceled by End of 2027 — https://www.gartner.	CODE
MEDIUM⚡	docs/explore-agentic/playbooks/ai-agent-roi.md	104	2. The Futurum Group — Enterprise AI ROI Shifts as Agentic Priorities Surge — https://futurumgroup.com/press-release	CODE
MEDIUM	docs/explore-agentic/playbooks/ai-agent-roi.md	116	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/pillars/mcp.md	35	The spec defines three participants <a href="#cite-1" class="cite-ref">[1]</a>. A <strong>client</strong> renders the co	CODE
MEDIUM⚡	docs/explore-agentic/pillars/mcp.md	118	4. Anthropic — Donating the Model Context Protocol and establishing the Agentic AI Foundation — https://www.anthropi	CODE
MEDIUM⚡	docs/explore-agentic/pillars/mcp.md	123	9. Linux Foundation — Linux Foundation Announces the Formation of the Agentic AI Foundation (AAIF) — https://www.lin	CODE
MEDIUM⚡	docs/explore-agentic/pillars/mcp.md	130	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/pillars/index.md	51	The pillars are mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — read the canonical versions at [www.ex	CODE
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	16	Two editorial positions up front. Chunk strategy matters more than model choice on most corpora. And evaluation, specifi	CODE
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	44	## 02. The embedding model landscape in April 2026	COMMENT
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	104	## 06. When agentic RAG earns its seat	COMMENT
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	104	## 06. When agentic RAG earns its seat	COMMENT
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	122	Three commercial defaults, plus open source for the air-gapped case. Voyage 4-large (January 15, 2026; MoE with a shared	CODE
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	126	Almost certainly yes. It is the highest-ROI upgrade most RAG teams skip. Take the top 50 from your vector search, re-sco	CODE
56 more matches not shown…

Hallucination Indicators22 hits · 275 pts

Severity	File	Line	Snippet	Context
CRITICAL	…sts/unit/federation/test_azure_foundry_client_cache.py	12	from azure.core.exceptions import ClientAuthenticationError	CODE
CRITICAL	…registry_pkgs/federation/azure_foundry_client_cache.py	14	from azure.core.exceptions import ClientAuthenticationError	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_agent.py	189	ctx.request_context.lifespan_context.consent_store.has_agent_consent.assert_called_once_with(	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_agent.py	194	ctx.request_context.lifespan_context.pending_consent_store.save.assert_called_once()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_agent.py	265	ctx.request_context.lifespan_context.consent_store.has_agent_consent.assert_called_once_with(	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_agent.py	270	ctx.request_context.lifespan_context.pending_consent_store.save.assert_not_called()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_agent.py	220	ctx.request_context.lifespan_context.session_store.append.assert_called_once()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_agent.py	245	ctx.request_context.lifespan_context.consent_store.has_agent_consent.assert_not_called()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	275	ctx.request_context.lifespan_context.server_service.get_server_by_id.assert_not_awaited()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	286	ctx.request_context.lifespan_context.server_service.get_server_by_id.assert_not_awaited()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	407	ctx.request_context.lifespan_context.pending_consent_store.save.assert_called_once()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	416	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_called_once_with(	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	438	ctx.request_context.lifespan_context.pending_consent_store.save.assert_called_once()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	439	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_called_once_with(	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	444	ctx.request_context.lifespan_context.session_store.append.assert_called_once()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_server.py	314	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_not_called()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_server.py	549	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_not_called()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_server.py	595	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_not_called()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_server.py	773	ctx.request_context.lifespan_context.oauth_service.recover_from_unauthorized.assert_not_awaited()	CODE
CRITICAL	registry/src/registry/health/routes.py	105	return request.app.state.container.health_service.get_all_health_status()	CODE
CRITICAL	registry/src/registry/health/routes.py	111	return request.app.state.container.health_service.get_websocket_stats()	CODE
CRITICAL	registry/src/registry/api/proxy_routes.py	630	request.app.state.container.mcp_client_service.clear_session(session_key)	CODE

Unused Imports273 hits · 262 pts

Severity	File	Line	Context
LOW	registry-pkgs/tests/unit/oauth/test_discovery.py	59	CODE
LOW	registry-pkgs/tests/unit/oauth/test_discovery.py	59	CODE
LOW	registry-pkgs/tests/unit/oauth/test_discovery.py	59	CODE
LOW	registry-pkgs/tests/unit/oauth/test_discovery.py	59	CODE
LOW	registry-pkgs/tests/unit/oauth/test_discovery.py	65	CODE
LOW	registry-pkgs/tests/unit/oauth/test_discovery.py	65	CODE
LOW	…gistry-pkgs/tests/unit/core/test_structured_logging.py	3	CODE
LOW	…try-pkgs/tests/unit/models/test_federation_metadata.py	3	CODE
LOW	registry-pkgs/tests/unit/workflow/test_mcp_executor.py	1	CODE
LOW	…istry-pkgs/tests/unit/workflow/test_control_wrapper.py	1	CODE
LOW	…-pkgs/tests/unit/workflow/test_a2a_headers_provider.py	1	CODE
LOW	registry-pkgs/tests/unit/workflow/test_helpers.py	3	CODE
LOW	…-pkgs/tests/unit/federation/test_azure_foundry_auth.py	1	CODE
LOW	…sts/unit/federation/test_azure_foundry_client_cache.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	4	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	4	CODE
LOW	registry-pkgs/src/registry_pkgs/types.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/database/leased_job.py	51	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	9	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	9	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	9	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	10	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	11	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	12	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	12	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	12	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	13	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	14	CODE
LOW	…stry-pkgs/src/registry_pkgs/core/structured_logging.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/google/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/google/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	45	CODE
LOW	…gistry-pkgs/src/registry_pkgs/workflows/persistence.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/compiler.py	1	CODE
LOW	…gs/src/registry_pkgs/workflows/mcp_headers_provider.py	1	CODE
LOW	…gs/src/registry_pkgs/workflows/a2a_headers_provider.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/a2a_client.py	1	CODE
LOW	…-pkgs/src/registry_pkgs/workflows/executor_resolver.py	11	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/types.py	1	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/model_resolution.py	1	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/a2a_executor.py	1	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/mcp_executor.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/prompt.py	17	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/helpers.py	1	CODE
LOW	…try-pkgs/src/registry_pkgs/workflows/media_snapshot.py	13	CODE
213 more matches not shown…

Modern Structural Boilerplate212 hits · 216 pts

Severity	File	Line	Snippet	Context
LOW	registry-pkgs/src/registry_pkgs/__init__.py	7	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/database/mongodb.py	42	logger = logging.getLogger(__name__)	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/database/leased_job.py	66	logger = logging.getLogger(__name__)	CODE
LOW	…gistry-pkgs/src/registry_pkgs/database/redis_client.py	9	logger = logging.getLogger(__name__)	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/flow_state_manager.py	26	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_client.py	20	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/discovery.py	37	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	41	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/__init__.py	16	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/refresh_lock.py	23	logger = logging.getLogger(__name__)	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/redis_flow_storage.py	9	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/user_service.py	9	logger = logging.getLogger(__name__)	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/oauth/token_service.py	13	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/headers.py	20	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/scopes.py	20	logger = logging.getLogger(__name__)	CODE
LOW	…istry-pkgs/src/registry_pkgs/core/oauth_state_store.py	13	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_tokens.py	29	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/core/agentcore_jwt.py	11	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	23	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	18	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	23	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/core/consent_store.py	12	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/google/__init__.py	3	__all__ = [	CODE
LOW	…pkgs/src/registry_pkgs/google/cloud_identity_client.py	11	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	91	logger = logging.getLogger(__name__)	CODE
LOW	…gistry-pkgs/src/registry_pkgs/workflows/persistence.py	24	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/compiler.py	52	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/a2a_client.py	41	logger = logging.getLogger(__name__)	CODE
LOW	…-pkgs/src/registry_pkgs/workflows/executor_resolver.py	40	logger = logging.getLogger(__name__)	CODE
LOW	…try-pkgs/src/registry_pkgs/workflows/run_repository.py	47	logger = logging.getLogger(__name__)	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/model_resolution.py	18	logger = logging.getLogger(__name__)	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/a2a_executor.py	30	logger = logging.getLogger(__name__)	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/mcp_executor.py	24	logger = logging.getLogger(__name__)	CODE
LOW	…-pkgs/src/registry_pkgs/workflows/hitl/cancellation.py	18	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/hitl/serde.py	27	logger = logging.getLogger(__name__)	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/hitl/__init__.py	5	__all__ = [	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/control/queue.py	28	logger = logging.getLogger(__name__)	CODE
LOW	…ry-pkgs/src/registry_pkgs/workflows/control/wrapper.py	62	logger = logging.getLogger(__name__)	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/control/__init__.py	4	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	80	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	616	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	43	__all__ = [	CODE
LOW	…try-pkgs/src/registry_pkgs/models/skill_sync_source.py	61	async def update_timestamps(self) -> None:	CODE
LOW	…gs/src/registry_pkgs/models/model_gateway_selection.py	22	async def update_timestamp(self) -> None:	CODE
LOW	registry-pkgs/src/registry_pkgs/models/workflow.py	23	logger = logging.getLogger(__name__)	CODE
LOW	…gistry-pkgs/src/registry_pkgs/models/skill_sync_job.py	97	async def update_timestamps(self) -> None:	CODE
LOW	…y-pkgs/src/registry_pkgs/models/extended_mcp_server.py	72	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/models/model_source.py	86	async def update_timestamps(self) -> None:	CODE
LOW	…y-pkgs/src/registry_pkgs/models/_generated/__init__.py	11	__all__ = [	CODE
LOW	…registry_pkgs/federation/azure_foundry_client_cache.py	25	logger = logging.getLogger(__name__)	CODE
LOW	…-pkgs/src/registry_pkgs/telemetry/trace_propagation.py	21	logger = logging.getLogger(__name__)	CODE
LOW	…ry-pkgs/src/registry_pkgs/telemetry/span_attributes.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…ry-pkgs/src/registry_pkgs/telemetry/span_attributes.py	31	def set_span_attributes(span: Span, attributes: Mapping[str, object]) -> None:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	21	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	33	logger = logging.getLogger(__name__)	CODE
LOW	…y-pkgs/src/registry_pkgs/telemetry/workflow_metrics.py	10	logger = logging.getLogger(__name__)	CODE
LOW	…y-pkgs/src/registry_pkgs/telemetry/workflow_tracing.py	25	logger = logging.getLogger(__name__)	CODE
LOW⚡	…y-pkgs/src/registry_pkgs/telemetry/workflow_tracing.py	134	def _set_serialized_attribute(span: Span, key: str, value: object) -> None:	CODE
LOW	…try-pkgs/src/registry_pkgs/telemetry/metrics_client.py	14	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	18	logger = logging.getLogger(__name__)	CODE
152 more matches not shown…

Structural Annotation Overuse66 hits · 108 pts

Severity	File	Line	Snippet	Context
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	627	# Step 1: Get candidate documents	COMMENT
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	642	# Step 2: Rerank candidates via Bedrock (AWS config injected from store config)	COMMENT
LOW	workflow-worker/src/workflow_worker/main.py	197	# Step 1: Try to atomically claim the most urgent due schedule	COMMENT
LOW	workflow-worker/src/workflow_worker/main.py	215	# Step 2: Nothing due — find the nearest future deadline and sleep	COMMENT
LOW	docs/entra-id-setup.md	11	## Step 1: Create App Registration in Azure Portal	COMMENT
LOW	docs/entra-id-setup.md	34	## Step 2: Configure Authentication	COMMENT
LOW	docs/entra-id-setup.md	43	## Step 3: Create Client Secret	COMMENT
LOW	docs/entra-id-setup.md	56	## Step 4: Environment Configuration	COMMENT
LOW	docs/entra-id-setup.md	116	## Step 5: Test the Setup	COMMENT
LOW	docs/entra-id-setup.md	127	## Step 6: Optional Configurations	COMMENT
LOW	docs/complete-setup-guide.md	366	# Step 1: Run the Keycloak initialization	COMMENT
LOW	docs/complete-setup-guide.md	381	#Step 2: Disable SSL for Application Realm	COMMENT
LOW	docs/complete-setup-guide.md	395	# Step 3: Retrieve and save all client credentials (REQUIRED)	COMMENT
LOW	docs/quick-start.md	19	## Step 1: Clone and Configure	COMMENT
LOW	docs/quick-start.md	34	## Step 2: Configure Authentication Provider	COMMENT
LOW	docs/quick-start.md	55	## Step 3: Generate Secret Keys	COMMENT
LOW	docs/quick-start.md	64	## Step 4: Launch Services	COMMENT
LOW	docs/quick-start.md	76	## Step 5: Verify Installation	COMMENT
LOW	docs/service-management.md	342	# Step 1: Create a new access group	COMMENT
LOW	docs/service-management.md	349	# Step 2: Add servers to the group	COMMENT
LOW	docs/service-management.md	364	# Step 3: Create M2M service account	COMMENT
LOW	docs/service-management.md	376	# Step 4: Create human user	COMMENT
LOW	docs/service-management.md	387	# Step 5: Verify setup	COMMENT
LOW	docs/cognito.md	31	#### Step 1: Create User Pool	COMMENT
LOW	docs/cognito.md	56	#### Step 2: Configure App Client for Users	COMMENT
LOW	docs/cognito.md	83	#### Step 3: Create Users and Groups	COMMENT
LOW	docs/cognito.md	107	#### Step 1: Create M2M App Client	COMMENT
LOW	docs/cognito.md	117	#### Step 2: Create Resource Server and Custom Scopes	COMMENT
LOW	docs/cognito.md	135	#### Step 3: Assign Scopes to Agent App Client	COMMENT
LOW	docs/cognito.md	538	### Step 1: Copy Template to Environment File	COMMENT
LOW	docs/cognito.md	547	### Step 2: Configure Client Credentials	COMMENT
LOW	docs/cognito.md	579	### Step 3: Replace Placeholder Values	COMMENT
LOW	docs/cognito.md	590	### Step 4: Verify Configuration	COMMENT
LOW	docs/auth.md	42	### Step 1: Configure Environment	COMMENT
LOW	docs/auth.md	87	### Step 2: Run OAuth Setup	COMMENT
LOW	docs/auth.md	110	### Step 3: Use Generated Configuration	COMMENT
LOW	docs/auth.md	208	### Step 4: Test Your Connection	COMMENT
LOW	docs/auth.md	881	#### Step 1: Access the Admin Console	COMMENT
LOW	docs/auth.md	895	#### Step 2: Navigate to the Correct Realm	COMMENT
LOW	docs/auth.md	904	#### Step 3: Create the Required Groups	COMMENT
LOW	docs/auth.md	924	#### Step 4: Verify Group Creation	COMMENT
LOW⚡	docs/keycloak-integration.md	505	# Step 1: Create service account with appropriate permissions	COMMENT
LOW⚡	docs/keycloak-integration.md	510	# Step 2: Generate initial token	COMMENT
LOW⚡	docs/keycloak-integration.md	513	# Step 3: Validate setup	COMMENT
LOW⚡	docs/keycloak-integration.md	516	# Step 4: Document agent in inventory	COMMENT
LOW	docs/design/agentcore.md	59	## Step 1: Set Up the MCP Gateway Registry	COMMENT
LOW	docs/design/agentcore.md	95	## Step 2: Set Up Your AgentCore Gateway	COMMENT
LOW	docs/design/agentcore.md	151	## Step 3: Register the AgentCore Gateway with MCP Registry	COMMENT
LOW	docs/design/agentcore.md	305	## Step 4: Test the Registered Gateway	COMMENT
LOW	docs/design/federation.md	124	### Step 1: Get OAuth Token	COMMENT
LOW	docs/design/federation.md	145	### Step 2: Environment Configuration	COMMENT
LOW	docs/design/federation.md	151	### Step 3: Federation Configuration	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	85	# Step 1: Fetch all agents	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	94	# Step 2: Check for conflicts	COMMENT
LOW	scripts/migrate_a2a_agent_path_slug.py	123	# Step 3: Update all agent documents	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	146	# Step 4: Drop slug index	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	155	# Step 5: Remove slug field from all documents	COMMENT
LOW	registry/src/registry/health/service.py	639	# Step 1: Initialize session to get session ID	COMMENT
LOW	registry/src/registry/health/service.py	652	# Step 2: Add session ID to headers for ping	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	48	# Step 1: Disconnect existing connection	COMMENT
6 more matches not shown…

Redundant / Tautological Comments59 hits · 92 pts

Severity	File	Line	Snippet	Context
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	622	# Check if flow has expired	COMMENT
LOW	registry-pkgs/src/registry_pkgs/oauth/token_service.py	91	# Check if token exists	COMMENT
LOW	registry-pkgs/src/registry_pkgs/oauth/token_service.py	161	# Check if token exists	COMMENT
LOW	registry-pkgs/src/registry_pkgs/oauth/token_service.py	252	# Check if token is expired	COMMENT
LOW	registry-pkgs/src/registry_pkgs/oauth/token_service.py	292	# Check if token is expired	COMMENT
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	129	# Check if value is encrypted (contains colon separator)	COMMENT
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	331	# Check if only safe metadata fields are being updated	COMMENT
LOW	auth-server/src/auth_server/providers/entra.py	110	# Check if cache is still valid	COMMENT
LOW	auth-server/src/auth_server/utils/config_loader.py	84	# Check if it has a default value	COMMENT
LOW	scripts/publish_containers.sh	102	# Check if already logged in	COMMENT
LOW	scripts/publish_containers.sh	175	# Check if Dockerfile exists	COMMENT
LOW	scripts/publish_containers.sh	469	# Check if any action is specified	COMMENT
LOW	scripts/setup-atlassian-env.sh	8	# Check if required environment variables are set	COMMENT
LOW	scripts/docs-dev.sh	26	# Check if we're in the right directory	COMMENT
LOW	scripts/migrate_encrypt_oauth_client_secrets.py	72	# Check if server has oauth config with client_secret	COMMENT
LOW	scripts/migrate_encrypt_oauth_client_secrets.py	83	# Check if already encrypted	COMMENT
LOW	scripts/seed_mongodb.py	71	# Check if group already exists	COMMENT
LOW	scripts/seed_mongodb.py	142	# Check if user already exists	COMMENT
LOW	scripts/seed_mongodb.py	189	# Check if key already exists	COMMENT
LOW	scripts/seed_mongodb.py	257	# Check if token already exists	COMMENT
LOW	scripts/seed_mongodb.py	617	# Check if server already exists	COMMENT
LOW	scripts/run-oauth-setup.sh	63	# Check if this line sets one of our variables	COMMENT
LOW	registry/tests/unit/health/test_health_routes.py	205	# Check if both WebSocket and HTTP routes exist for same path	COMMENT
LOW	registry/src/registry/auth/oauth/token_manager.py	32	# Check if tokens are expired	COMMENT
LOW	…gistry/src/registry/auth/oauth/reconnection/manager.py	139	# Check if connection is valid	COMMENT
LOW⚡	…gistry/src/registry/auth/oauth/reconnection/manager.py	249	# Check if failed or timed out	COMMENT
LOW⚡	…gistry/src/registry/auth/oauth/reconnection/manager.py	251	# Check if it was cancelled	COMMENT
LOW⚡	…gistry/src/registry/auth/oauth/reconnection/manager.py	260	# Check if pending (active)	COMMENT
LOW⚡	registry/src/registry/health/service.py	525	# Check if we get any valid response (even auth errors indicate server is up)	COMMENT
LOW	registry/src/registry/health/service.py	339	# Check if any status changed	COMMENT
LOW	registry/src/registry/health/service.py	475	# Check if initialize succeeded	COMMENT
LOW	registry/src/registry/health/service.py	945	# Set status to 'checking' before performing the check	COMMENT
LOW	registry/src/registry/api/proxy_routes.py	1088	# Check if server is enabled	COMMENT
LOW	registry/src/registry/api/proxy_routes.py	1208	# Check if server is enabled	COMMENT
LOW	registry/src/registry/api/v1/a2a/agent_routes.py	341	# Check if duplicate path	COMMENT
LOW	registry/src/registry/api/v1/a2a/agent_routes.py	407	# Check if agent not found	COMMENT
LOW	registry/src/registry/api/v1/server/server_routes.py	458	# Check if authentication error	COMMENT
LOW	registry/src/registry/api/v1/server/server_routes.py	519	# Check if server not found	COMMENT
LOW	registry/src/registry/api/v1/server/server_routes.py	815	# Check if capabilities refresh failed	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	190	# Check if OAuth tokens exist	COMMENT
LOW	registry/src/registry/api/v1/mcp/oauth_router.py	663	# Check if user connection exists, if not create it	COMMENT
LOW	…gistry/src/registry/api/v1/workflow/workflow_routes.py	343	# Check if workflow not found	COMMENT
LOW	…gistry/src/registry/api/v1/workflow/workflow_routes.py	458	# Check if workflow not found	COMMENT
LOW	…gistry/src/registry/api/v1/workflow/workflow_routes.py	620	# Check if workflow not found	COMMENT
LOW	…gistry/src/registry/api/v1/workflow/workflow_routes.py	703	# Check if workflow not found	COMMENT
LOW	…gistry/src/registry/api/v1/workflow/workflow_routes.py	829	# Check if workflow or run not found	COMMENT
LOW	registry/src/registry/services/a2a_agent_service.py	545	# Check if path already exists	COMMENT
LOW	registry/src/registry/services/a2a_agent_service.py	736	# Check if new path conflicts with existing agent	COMMENT
LOW	registry/src/registry/services/a2a_agent_service.py	898	# Check if well-known is enabled	COMMENT
LOW	registry/src/registry/services/server_service.py	473	# Check if path+url combination already exists	COMMENT
LOW	registry/src/registry/services/server_service.py	481	# Check if serverName already exists	COMMENT
LOW	registry/src/registry/services/server_service.py	1026	# Check if server requires OAuth	COMMENT
LOW	…istry/src/registry/services/federation_sync_service.py	1609	# Check if this principal already has ACL on this resource	COMMENT
LOW	…try/src/registry/services/skill_sync_github_service.py	248	# Check if any member exceeds MAX_SKILL_FILE_SIZE	COMMENT
LOW	…stry/src/registry/services/oauth/connection_service.py	170	# Check if connection is stale	COMMENT
LOW	…istry/src/registry/services/search/embedded_service.py	97	# Check if local model exists	COMMENT
LOW	…istry/src/registry/services/search/embedded_service.py	299	# Check if service exists in metadata	COMMENT
LOW	…istry/src/registry/services/search/embedded_service.py	673	# Check if all requested tags are present	COMMENT
LOW	…gistry/src/registry/services/federation/asor_client.py	67	# Check if we have a valid cached token (only for client credentials)	COMMENT

Self-Referential Comments24 hits · 81 pts

Severity	File	Line	Snippet	Context
MEDIUM	registry-pkgs/tests/unit/test_mongodb.py	304	# Create a mock client	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	167	# Create a copy to avoid mutating the original	COMMENT
MEDIUM	auth-server/tests/unit/test_oauth_callback_session.py	169	# Create a state with resource	COMMENT
MEDIUM	auth-server/tests/unit/test_oauth_callback_session.py	203	# Create a state with resource	COMMENT
MEDIUM	…er/tests/integration/test_oauth_callback_token_flow.py	113	# Create a valid session cookie	COMMENT
MEDIUM	scripts/seed_mongodb.py	653	# Create a public entry	COMMENT
MEDIUM	.github/workflows/utils/generate_k8s_registry_env.py	32	# Create the YAML structure	COMMENT
MEDIUM	registry/tests/unit/core/test_mcp_client.py	1032	# Create a mock 401 response	COMMENT
MEDIUM	registry/tests/unit/core/test_mcp_client.py	1057	# Create a mock 401 response	COMMENT
MEDIUM	registry/tests/unit/core/test_mcp_client.py	1082	# Create a mock 403 response	COMMENT
MEDIUM	registry/tests/unit/health/test_health_service.py	44	# Create a real task that can be cancelled	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_oauth_router.py	19	# Create a mock MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_oauth_router.py	22	# Create a mock OAuth service and attach it to MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_oauth_router.py	26	# Create a mock Connection service and attach it to MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_connection_router.py	18	# Create a mock MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_connection_router.py	21	# Create a mock OAuth service and attach it to MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_connection_router.py	25	# Create a mock Connection service and attach it to MCP service	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	767	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	828	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	888	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	948	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	1005	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	1055	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	registry/src/registry/health/service.py	253	# This method is kept for compatibility but delegates to the optimized manager	COMMENT

Deep Nesting74 hits · 58 pts

Severity	File	Line	Context
LOW	…istry-pkgs/tests/unit/workflow/test_control_wrapper.py	431	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	348	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/oauth_service.py	681	CODE
LOW	…try-pkgs/src/registry_pkgs/oauth/redis_flow_storage.py	185	CODE
LOW	registry-pkgs/src/registry_pkgs/oauth/headers.py	37	CODE
LOW	registry-pkgs/src/registry_pkgs/core/header_utils.py	4	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	166	CODE
LOW	registry-pkgs/src/registry_pkgs/core/crypto_utils.py	241	CODE
LOW	…gistry-pkgs/src/registry_pkgs/workflows/persistence.py	300	CODE
LOW	…gistry-pkgs/src/registry_pkgs/workflows/persistence.py	222	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/compiler.py	114	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/compiler.py	123	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/a2a_executor.py	108	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/a2a_executor.py	202	CODE
LOW	…y-pkgs/src/registry_pkgs/models/extended_mcp_server.py	496	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	162	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	315	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	209	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	426	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	564	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	659	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	220	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	257	CODE
LOW	…stry_pkgs/vector/repositories/mcp_server_repository.py	39	CODE
LOW	…istry_pkgs/vector/repositories/a2a_agent_repository.py	29	CODE
LOW	…stry-pkgs/src/registry_pkgs/vector/adapters/factory.py	110	CODE
LOW	auth-server/src/auth_server/utils/config_loader.py	65	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1036	CODE
LOW	scripts/test_agent_direct.py	87	CODE
LOW	scripts/migrate_a2a_agent_path_slug.py	68	CODE
LOW	scripts/vector_sync.py	101	CODE
LOW	scripts/verify_workflow_control_e2e.py	1562	CODE
LOW	scripts/seed_mongodb.py	271	CODE
LOW	scripts/seed_mongodb.py	647	CODE
LOW	scripts/azure_foundry_sync.py	62	CODE
LOW	scripts/federation_job_admin.py	250	CODE
LOW	scripts/test_mcp_direct.py	271	CODE
LOW	scripts/backfill_mcp_server_normalized_names.py	101	CODE
LOW	scripts/verify/check_federation_metadata.py	161	CODE
LOW	registry/src/registry/container.py	615	CODE
LOW	registry/src/registry/core/mcp_client.py	920	CODE
LOW	registry/src/registry/core/mcp_client.py	1095	CODE
LOW	registry/src/registry/health/service.py	349	CODE
LOW	registry/src/registry/health/service.py	539	CODE
LOW	registry/src/registry/health/service.py	782	CODE
LOW	registry/src/registry/health/service.py	825	CODE
LOW	registry/src/registry/health/service.py	873	CODE
LOW	registry/src/registry/health/service.py	924	CODE
LOW	registry/src/registry/health/routes.py	16	CODE
LOW	registry/src/registry/mcpgw/tools/server.py	101	CODE
LOW	registry/src/registry/mcpgw/tools/server.py	368	CODE
LOW	registry/src/registry/api/proxy_routes.py	385	CODE
LOW	registry/src/registry/api/proxy_routes.py	674	CODE
LOW	registry/src/registry/api/redirect_routes.py	231	CODE
LOW	registry/src/registry/api/v1/server/server_routes.py	257	CODE
LOW	registry/src/registry/api/v1/mcp/consent_routes.py	135	CODE
LOW	registry/src/registry/services/a2a_agent_service.py	605	CODE
LOW	registry/src/registry/services/server_service.py	207	CODE
LOW	registry/src/registry/services/server_service.py	450	CODE
LOW	registry/src/registry/services/server_service.py	1282	CODE
14 more matches not shown…

Empty Error Handlers8 hits · 40 pts

Severity	File	Line	Snippet	Context
HIGH	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	132	except Exception: # nosec B110 - intentional suppression during teardown	CODE
HIGH	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	141	except Exception: # nosec B110 - intentional suppression during teardown	CODE
HIGH	workflow-worker/src/workflow_worker/main.py	228	except TimeoutError:	CODE
HIGH	workflow-worker/src/workflow_worker/executor.py	39	except TimeoutError:	CODE
HIGH	scripts/verify_workflow_control_e2e.py	951	except asyncio.CancelledError:	CODE
HIGH	registry/tests/unit/health/test_health_routes.py	155	except Exception:	CODE
HIGH	registry/src/registry/health/service.py	818	except (ValueError, KeyError, TypeError):	CODE
HIGH	registry/src/registry/health/service.py	866	except (ValueError, KeyError, TypeError):	CODE

Fake / Example Data36 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	238	subject="user@example.com",	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	243	assert payload["sub"] == "user@example.com"	CODE
LOW	docs/registry-auth-detailed.md	1946	log_auth_event('OAUTH2_LOGIN_SUCCESS', username='user@example.com',	CODE
LOW	docs/api-reference.md	919	"email": "admin@example.com",	CODE
LOW	docs/design/mcp_db_persistence_design.md	1780	"email": "user@example.com",	CODE
LOW	docs/design/mcp_db_persistence_design.md	1801	"email": "user@example.com",	CODE
LOW	docs/design/workflow-api-design.md	701	"customerName": "John Doe",	CODE
LOW	docs/design/workflow-api-design.md	716	"customerName": "John Doe",	CODE
LOW	docs/design/skills-sync-api.md	104	"authorName": "Jane Doe",	CODE
LOW	docs/design/skills-sync-api.md	274	"authorName": "Jane Doe",	CODE
LOW	auth-server/tests/unit/test_google_provider.py	29	"email": "user@example.com",	CODE
LOW⚡	auth-server/tests/unit/test_google_provider.py	59	"username": "user@example.com",	CODE
LOW⚡	auth-server/tests/unit/test_google_provider.py	60	"email": "user@example.com",	CODE
LOW⚡	auth-server/tests/unit/test_google_provider.py	78	assert info["email"] == "user@example.com"	CODE
LOW⚡	auth-server/tests/unit/test_google_provider.py	80	mock_log.assert_called_once_with("google", "user@example.com", exc)	CODE
LOW⚡	auth-server/tests/unit/test_google_provider.py	110	assert info["email"] == "user@example.com"	CODE
LOW⚡	auth-server/tests/unit/test_google_provider.py	150	assert claims["email"] == "user@example.com"	CODE
LOW⚡	auth-server/tests/unit/test_entra_provider.py	88	groups = await provider.get_user_groups("access-token", "user@example.com")	CODE
LOW⚡	auth-server/tests/unit/test_entra_provider.py	94	assert args[1] == "user@example.com"	CODE
LOW	auth-server/tests/integration/test_oauth_flow_routes.py	172	"contacts": ["admin@example.com"],	CODE
LOW	auth-server/tests/integration/test_oauth_flow_routes.py	352	"contacts": ["admin@example.com"],	CODE
LOW	scripts/seed_mongodb.py	93	"email": "admin@example.com",	CODE
LOW	registry/tests/unit/auth/test_auth_routes.py	314	"email": "test@test.com",	CODE
LOW	registry/tests/unit/auth/test_auth_routes.py	536	"email": "admin@example.com",	CODE
LOW	registry/tests/unit/auth/test_auth_routes.py	558	assert call_kwargs["email"] == "admin@example.com"	CODE
LOW	registry/tests/unit/auth/test_auth_routes.py	573	"email": "admin@example.com",	CODE
LOW⚡	…y/tests/unit/services/test_skill_sync_apply_service.py	395	(SimpleNamespace(name="Jane Doe", username="jane"), "Jane Doe"),	CODE
LOW⚡	…y/tests/unit/services/test_skill_sync_apply_service.py	413	service = _service(user_service=_user_service(SimpleNamespace(name="Jane Doe", username="jane")))	CODE
LOW	…y/tests/unit/services/test_skill_sync_apply_service.py	53	user_service=user_service or _user_service(SimpleNamespace(name="Jane Doe", username="jane")),	CODE
LOW	…y/tests/unit/services/test_skill_sync_apply_service.py	426	assert service._apply_discovered_skill.await_args.kwargs["author_name"] == "Jane Doe"	CODE
LOW	…y/tests/unit/services/test_skill_sync_apply_service.py	443	"Jane Doe",	CODE
LOW	…y/tests/unit/services/test_skill_sync_apply_service.py	450	assert skill_model.call_args.kwargs["authorName"] == "Jane Doe"	CODE
LOW	…y/tests/unit/services/test_skill_sync_apply_service.py	566	author_name="Jane Doe",	CODE
LOW	…y/tests/unit/services/test_skill_sync_apply_service.py	590	author_name="Jane Doe",	CODE
LOW	…y/tests/unit/services/test_skill_sync_apply_service.py	617	author_name="Jane Doe",	CODE
LOW	…y/tests/unit/services/test_skill_sync_apply_service.py	643	author_name="Jane Doe",	CODE

Cross-File Repetition7 hits · 35 pts

Severity	File	Snippet	Context
HIGH	registry/tests/unit/api/v1/test_agent_routes.py	an acl/db outage (runtimeerror from get_accessible_resource_ids) must surface as 503, not 500.	STRING
HIGH	registry/tests/unit/api/v1/test_federation_routes.py	an acl/db outage (runtimeerror from get_accessible_resource_ids) must surface as 503, not 500.	STRING
HIGH	registry/tests/unit/api/v1/test_server_routes.py	an acl/db outage (runtimeerror from get_accessible_resource_ids) must surface as 503, not 500.	STRING
HIGH	…try/tests/unit/api/v1/workflow/test_workflow_routes.py	an acl/db outage (runtimeerror from get_accessible_resource_ids) must surface as 503, not 500.	STRING
HIGH	registry/src/registry/schemas/a2a_agent_api_schemas.py	pydantic schemas for server management api v1 these schemas define the request and response models for the server manage	STRING
HIGH	registry/src/registry/schemas/acl_schema.py	pydantic schemas for server management api v1 these schemas define the request and response models for the server manage	STRING
HIGH	registry/src/registry/schemas/server_api_schemas.py	pydantic schemas for server management api v1 these schemas define the request and response models for the server manage	STRING

Verbosity Indicators18 hits · 33 pts

Severity	File	Line	Snippet	Context
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	627	# Step 1: Get candidate documents	COMMENT
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	642	# Step 2: Rerank candidates via Bedrock (AWS config injected from store config)	COMMENT
LOW	workflow-worker/src/workflow_worker/main.py	197	# Step 1: Try to atomically claim the most urgent due schedule	COMMENT
LOW	workflow-worker/src/workflow_worker/main.py	215	# Step 2: Nothing due — find the nearest future deadline and sleep	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	85	# Step 1: Fetch all agents	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	94	# Step 2: Check for conflicts	COMMENT
LOW	scripts/migrate_a2a_agent_path_slug.py	123	# Step 3: Update all agent documents	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	146	# Step 4: Drop slug index	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	155	# Step 5: Remove slug field from all documents	COMMENT
LOW	registry/src/registry/health/service.py	639	# Step 1: Initialize session to get session ID	COMMENT
LOW	registry/src/registry/health/service.py	652	# Step 2: Add session ID to headers for ping	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	48	# Step 1: Disconnect existing connection	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	53	# Step 2: Get server config	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	62	# Step 3: Handle OAuth authentication	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	67	# Step 4: Create connection if tokens are valid	COMMENT
LOW	…istry/src/registry/services/federation_sync_service.py	1544	# Step 1: Batch query existing ACL entries for all resources using $in over resourceId	COMMENT
LOW	…istry/src/registry/services/federation_sync_service.py	1592	# Step 2: Compute new ACL entries to INSERT	COMMENT
LOW	…istry/src/registry/services/federation_sync_service.py	1638	# Step 3: Batch insert new ACL entries in chunks	COMMENT

Over-Commented Block22 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	mkdocs.yml	201		COMMENT
LOW	registry-pkgs/src/registry_pkgs/scopes.yml	1	# Pure new RBAC scopes for registry server/agent/federation APIs.	COMMENT
LOW	registry-pkgs/src/registry_pkgs/models/workflow.py	221		COMMENT
LOW	registry-pkgs/src/registry_pkgs/models/workflow.py	621	# Set when the run transitions to PAUSED; used to enforce pause_timeout_seconds.	COMMENT
LOW	…y-pkgs/src/registry_pkgs/models/extended_mcp_server.py	181	"errorMessage": "...", # Registry field (root level)	COMMENT
LOW	docs/complete-setup-guide.md	361		COMMENT
LOW	docs/complete-setup-guide.md	401	# - Save credentials to .oauth-tokens/keycloak-client-secrets.txt	COMMENT
LOW	docs/complete-setup-guide.md	461	# Note: The script does not display the credentials at the end.	COMMENT
LOW	docs/complete-setup-guide.md	481		COMMENT
LOW	docs/complete-setup-guide.md	541	# Activate the virtual environment if not already active	COMMENT
LOW	docs/complete-setup-guide.md	621		COMMENT
LOW	docs/quick-start.md	81		COMMENT
LOW	docs/macos-setup-guide.md	201	2. Go to Settings > Resources > Virtual file shares	COMMENT
LOW	docs/keycloak-integration.md	781	```bash	COMMENT
LOW	docs/dynamic-tool-discovery.md	81		COMMENT
LOW	auth-server/src/auth_server/oauth2_providers.yml	1	providers:	COMMENT
LOW	.github/workflows/create_release.yaml	81	# gate it on startsWith(github.event.release.tag_name, 'asc') so it	COMMENT
LOW	registry/tests/unit/auth/test_auth_routes.py	141	assert providers == []	COMMENT
LOW	registry/tests/unit/auth/test_auth_routes.py	161	# }	COMMENT
LOW	registry/src/registry/health/service.py	661	# Check for auth failures first	COMMENT
LOW	…gistry/services/embedding_reindex_execution_service.py	41	_REINDEX_CONCURRENCY = 5	COMMENT
LOW	…istry/src/registry/services/search/external_service.py	281		COMMENT

Synthetic Comment Markers3 hits · 20 pts

Severity	File	Line	Snippet	Context
HIGH	docs/explore-agentic/glossary/guardian-agent.md	16	The phrase is Gartner's, but the pattern is older. Every production agent deployment eventually grows a second agent (or	CODE
HIGH	.github/workflows/create_release.yaml	20	# ── AI-generated GitHub Release via github/copilot-release-notes ─────────────	COMMENT
HIGH	registry/src/registry/health/service.py	615	# Skip health checks for stdio transport (as requested)	COMMENT

Magic Placeholder Names3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	frontend/src/pages/TokenGeneration.tsx	519	Authorization: Bearer YOUR_TOKEN_HERE	CODE
HIGH	frontend/src/pages/TokenGeneration.tsx	522	Replace YOUR_TOKEN_HERE with the token above.	CODE
HIGH	docs/anthropic-registry-import.md	153	SMITHERY_API_KEY=your-api-key-here	CODE

AI Structural Patterns15 hits · 12 pts

Severity	File	Line	Context
LOW	…-pkgs/src/registry_pkgs/testing/federation_metadata.py	39	CODE
LOW	auth-server/src/auth_server/providers/entra.py	25	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	731	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1036	CODE
LOW	registry/tests/unit/api/test_oauth_router.py	126	CODE
LOW	registry/tests/unit/api/test_connection_router.py	90	CODE
LOW	registry/src/registry/utils/crypto_utils.py	253	CODE
LOW	registry/src/registry/api/redirect_routes.py	231	CODE
LOW	registry/src/registry/api/v1/server/server_routes.py	106	CODE
LOW	registry/src/registry/api/v1/mcp/oauth_router.py	385	CODE
LOW	registry/src/registry/api/v1/mcp/oauth_router.py	938	CODE
LOW	registry/src/registry/api/v1/mcp/oauth_router.py	1208	CODE
LOW	…ry/src/registry/api/v1/federation/federation_routes.py	338	CODE
LOW	…istry/src/registry/services/federation_crud_service.py	130	CODE
LOW	registry/src/registry/services/workflow_service.py	728	CODE

AI Slop Vocabulary4 hits · 10 pts

Severity	File	Line	Snippet	Context
MEDIUM	frontend/src/components/WorkflowCanvas/convert.ts	692	// A more robust check is to just see if the backend provided any `position` object at all on the first node.	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	196	# For now, just return OAuth token status	COMMENT
MEDIUM	registry/src/registry/services/server_service.py	1196	# This is a more comprehensive health check than just HTTP GET	COMMENT
LOW	registry/src/registry/services/server_service.py	609	# If capabilities retrieval fails, just use empty capabilities	COMMENT

Cross-Language Confusion2 hits · 8 pts

Severity	File	Line	Snippet	Context
HIGH	scripts/backfill_mcp_server_normalized_names.py	56	compound unique index treats a missing field as null) — this is the common case for every	STRING
HIGH	…istry/src/registry/schemas/model_source_api_schemas.py	80	raise ValueError("field may not be null; omit it to leave unchanged")	CODE

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	registry-pkgs/tests/unit/telemetry/test_decorators.py	220	def my_function():	CODE
LOW	…istry-pkgs/tests/unit/telemetry/test_metrics_client.py	140	def my_function():	CODE

Dead Code1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/tests/unit/services/test_skill_sync_github_service.py	78		CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	docker/registry-entrypoint.sh	5	# Usage:	COMMENT

Maintenance and Governance Review

Risk Review · v3

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings