microsoft/apm

Pattern Findings

The scanner identified 40776 distinct pattern matches across 24 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators8351 hits · 29915 pts

Severity	File	Line	Snippet	Context
MEDIUM	…tch-docs_src_content_docs_enterprise_apm-policy_md.txt	413	"snippet": "# ── Result data classes ───────────────────────────────────────────",	CODE
MEDIUM	…docs_src_content_docs_enterprise_apm-policy_md_c4.json	1	{"claim_id":"c4","claim_text":"MCP transport policy accepts http and stdio but blocks sse and streamable-http by default	CODE
MEDIUM⚡	tests/test_gitlab_git_transport.py	109	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/test_gitlab_git_transport.py	111	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/test_gitlab_git_transport.py	36	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/test_gitlab_git_transport.py	38	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/test_gitlab_git_transport.py	608	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/test_gitlab_git_transport.py	610	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/test_apm_resolver.py	478	# ===========================================================================	COMMENT
MEDIUM	tests/test_apm_resolver.py	480	# ===========================================================================	COMMENT
MEDIUM⚡	tests/test_lockfile.py	756	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/test_lockfile.py	758	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/test_github_downloader.py	2337	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/test_github_downloader.py	2339	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/test_apm_package_models.py	682	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/test_apm_package_models.py	685	# ------------------------------------------------------------------	COMMENT
MEDIUM	tests/unit/test_plugin_parser.py	1598	# ------------------------------------------------------------------	COMMENT
MEDIUM	tests/unit/test_plugin_parser.py	1602	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_mcp_overlays.py	444	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_mcp_overlays.py	446	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_mcp_overlays.py	586	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_mcp_overlays.py	588	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_mcp_overlays.py	700	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_mcp_overlays.py	702	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_mcp_overlays.py	845	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_mcp_overlays.py	847	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/unit/test_mcp_overlays.py	13	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tests/unit/test_mcp_overlays.py	15	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	54	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	56	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	98	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	100	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	132	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	134	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	399	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	401	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	482	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	484	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	534	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	536	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	594	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	596	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	662	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	664	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	681	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	683	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	711	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	713	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	831	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	833	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	958	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	960	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	1032	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	1034	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	1103	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	1105	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	1134	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	1136	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	1310	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	1312	# ---------------------------------------------------------------------------	COMMENT
8291 more matches not shown…

Hyper-Verbose Identifiers27687 hits · 23032 pts

Severity	File	Line	Snippet	Context
LOW	.apm/instructions/tests.instructions.md	298	def test_write_report_is_deterministic_atomic_and_printable_ascii():	CODE
LOW	…tch-docs_src_content_docs_reference_cli_install_md.txt	176	"snippet": " def _add_dependency_to_config(self, package_ref: str) -> None:",	CODE
LOW	…docs_src_content_docs_reference_cli_install_md_c3.json	1	{"claim_id":"c3","claim_text":"With no arguments installs everything from apm.yml; with PACKAGE_REF arguments adds those	CODE
LOW	…e-batch-docs_src_content_docs_guides_registries_md.txt	806	"snippet": "def get_config_json_default_registry() -> str \| None:",	CODE
LOW	…e-batch-docs_src_content_docs_guides_registries_md.txt	812	"snippet": "def _route_unscoped_to_default_registry(",	CODE
LOW	…nce/docs_src_content_docs_guides_registries_md_c9.json	1	{"claim_id":"c9","claim_text":"When a default registry is configured, plain owner/repo#<ref> shorthand entries route thr	CODE
LOW	…h-docs_src_content_docs_reference_package-types_md.txt	509	"snippet": "def merge_structured_entry_into_current_deps(",	CODE
LOW	…cs_src_content_docs_reference_package-types_md_c4.json	1	{"claim_id":"c4","claim_text":"In HYBRID packages, apm.yml.description and SKILL.md description are independent fields t	CODE
LOW	…tch-docs_src_content_docs_enterprise_apm-policy_md.txt	851	"snippet": "def _coerce_unmanaged_directories_for_union(value: tuple[str, ...] \| None) -> tuple[str, ...]:",	CODE
LOW	…docs_src_content_docs_enterprise_apm-policy_md_c8.json	1	{"claim_id":"c8","claim_text":"Deny list merge rule: child adds to parent's deny list (union).","evidence":[{"file":"src	CODE
LOW	tests/test_collision_integration.py	34	def test_collision_detection_with_helpful_error(self, tmp_path):	CODE
LOW	tests/test_collision_integration.py	71	def test_qualified_path_resolves_collision(self, tmp_path):	CODE
LOW	tests/test_collision_integration.py	107	def test_no_collision_with_single_dependency(self, tmp_path):	CODE
LOW	tests/test_collision_integration.py	124	def test_local_overrides_all_dependencies_no_collision(self, tmp_path):	CODE
LOW⚡	tests/test_token_manager.py	63	def test_scheme_allowlist_is_case_insensitive(self):	CODE
LOW⚡	tests/test_token_manager.py	72	def test_gh_token_used_when_no_other_tokens(self):	CODE
LOW⚡	tests/test_token_manager.py	79	def test_github_apm_pat_takes_precedence_over_gh_token(self):	CODE
LOW⚡	tests/test_token_manager.py	122	def test_modules_precedence_order(self):	CODE
LOW⚡	tests/test_token_manager.py	130	def test_no_tokens_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	140	def test_success_returns_password(self):	CODE
LOW⚡	tests/test_token_manager.py	150	def test_no_password_line_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	159	def test_empty_password_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	168	def test_nonzero_exit_code_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	174	def test_timeout_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	179	def test_file_not_found_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	184	def test_os_error_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	197	def test_path_appended_to_stdin(self):	CODE
LOW⚡	tests/test_token_manager.py	207	def test_path_leading_slash_stripped(self):	CODE
LOW⚡	tests/test_token_manager.py	215	def test_path_none_preserves_legacy_stdin(self):	CODE
LOW⚡	tests/test_token_manager.py	222	def test_path_with_newline_is_rejected(self):	CODE
LOW⚡	tests/test_token_manager.py	266	def test_git_terminal_prompt_disabled(self):	CODE
LOW⚡	tests/test_token_manager.py	274	def test_git_askpass_set_to_empty(self):	CODE
LOW⚡	tests/test_token_manager.py	283	def test_rejects_password_prompt_as_token(self):	CODE
LOW⚡	tests/test_token_manager.py	292	def test_rejects_username_prompt_as_token(self):	CODE
LOW⚡	tests/test_token_manager.py	301	def test_rejects_token_with_spaces(self):	CODE
LOW⚡	tests/test_token_manager.py	310	def test_rejects_token_with_tabs(self):	CODE
LOW⚡	tests/test_token_manager.py	319	def test_rejects_excessively_long_token(self):	CODE
LOW⚡	tests/test_token_manager.py	328	def test_accepts_valid_ghp_token(self):	CODE
LOW⚡	tests/test_token_manager.py	338	def test_accepts_valid_gho_token(self):	CODE
LOW⚡	tests/test_token_manager.py	375	def test_ineligible_host_skips_subprocess(self):	CODE
LOW⚡	tests/test_token_manager.py	383	def test_nonzero_exit_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	388	def test_invalid_output_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	393	def test_timeout_returns_none(self):	CODE
LOW⚡	tests/test_token_manager.py	401	def test_none_and_empty_unsupported(self):	CODE
LOW⚡	tests/test_token_manager.py	408	def test_github_com_supported(self):	CODE
LOW⚡	tests/test_token_manager.py	414	def test_ghes_supported_when_matches_default_host(self):	CODE
LOW⚡	tests/test_token_manager.py	418	def test_ghes_unsupported_when_mismatches_default_host(self):	CODE
LOW⚡	tests/test_token_manager.py	422	def test_ghes_unsupported_when_no_default_host(self):	CODE
LOW⚡	tests/test_token_manager.py	464	def test_empty_string_invalid(self):	CODE
LOW⚡	tests/test_token_manager.py	467	def test_none_coerced_invalid(self):	CODE
LOW⚡	tests/test_token_manager.py	471	def test_whitespace_only_invalid(self):	CODE
LOW⚡	tests/test_token_manager.py	483	def test_password_for_prompt_invalid(self):	CODE
LOW⚡	tests/test_token_manager.py	488	def test_username_for_prompt_invalid(self):	CODE
LOW⚡	tests/test_token_manager.py	493	def test_newline_in_token_invalid(self):	CODE
LOW⚡	tests/test_token_manager.py	496	def test_tab_in_token_invalid(self):	CODE
LOW⚡	tests/test_token_manager.py	503	def test_returns_env_token_without_credential_fill(self):	CODE
LOW	tests/test_token_manager.py	93	def test_github_token_takes_precedence_over_gh_token(self):	CODE
LOW	tests/test_token_manager.py	107	def test_all_three_tokens_apm_pat_wins(self):	CODE
LOW	tests/test_token_manager.py	234	def test_path_with_carriage_return_is_rejected(self):	CODE
LOW	tests/test_token_manager.py	245	def test_path_with_whitespace_is_rejected(self):	CODE
27627 more matches not shown…

Unused Imports2129 hits · 1762 pts

Severity	File	Line	Context
LOW	tests/test_gitlab_git_transport.py	13	CODE
LOW	tests/test_apm_resolver.py	12	CODE
LOW	tests/test_enhanced_discovery.py	17	CODE
LOW	tests/test_enhanced_discovery.py	17	CODE
LOW	tests/test_enhanced_discovery.py	25	CODE
LOW	tests/test_codex_docker_args_fix.py	12	CODE
LOW	tests/basic_workflow_test.py	15	CODE
LOW	tests/test_codex_empty_string_and_defaults.py	14	CODE
LOW	tests/test_runnable_prompts.py	4	CODE
LOW	tests/test_runnable_prompts.py	5	CODE
LOW	tests/test_runnable_prompts.py	7	CODE
LOW	tests/test_runnable_prompts.py	7	CODE
LOW	tests/test_console.py	3	CODE
LOW	tests/test_console.py	6	CODE
LOW	tests/test_console.py	8	CODE
LOW	tests/manual_workflow_script.py	11	CODE
LOW	tests/test_github_downloader_token_precedence.py	6	CODE
LOW	tests/test_runtime_manager_token_precedence.py	4	CODE
LOW	tests/test_runtime_manager_token_precedence.py	7	CODE
LOW	tests/test_apm_package_models.py	6	CODE
LOW	tests/test_apm_package_models.py	6	CODE
LOW	tests/test_apm_package_models.py	12	CODE
LOW	tests/test_virtual_package_multi_install.py	3	CODE
LOW	tests/test_distributed_compilation.py	3	CODE
LOW	tests/workflow_contracts.py	3	CODE
LOW	tests/test_empty_string_and_defaults.py	13	CODE
LOW	tests/unit/test_mcp_overlays.py	5	CODE
LOW	tests/unit/test_kiro_mcp.py	3	CODE
LOW	tests/unit/test_copilot_adapter_phase3.py	24	CODE
LOW	tests/unit/test_package_manager_base.py	10	CODE
LOW	tests/unit/test_target_filter.py	3	CODE
LOW	tests/unit/test_path_security.py	9	CODE
LOW	tests/unit/test_init_command.py	3	CODE
LOW	tests/unit/test_init_command.py	11	CODE
LOW	tests/unit/test_workflow_runner_phase3w4.py	6	CODE
LOW	tests/unit/test_diagnostics.py	5	CODE
LOW	tests/unit/test_content_hash.py	3	CODE
LOW	tests/unit/test_content_hash.py	4	CODE
LOW	tests/unit/test_version.py	12	CODE
LOW	tests/unit/test_bootstrap_mirror.py	3	CODE
LOW	tests/unit/test_governance_consumers.py	3	CODE
LOW	tests/unit/test_external_scanners.py	12	CODE
LOW	tests/unit/test_mcp_integrator_coverage.py	4	CODE
LOW	tests/unit/test_lockfile_v2_bump.py	8	CODE
LOW	tests/unit/test_runtime_factory.py	3	CODE
LOW	tests/unit/test_runtime_factory.py	3	CODE
LOW	tests/unit/test_reflink_phase3w5.py	14	CODE
LOW	tests/unit/test_mcp_integrator_overlay.py	6	CODE
LOW	tests/unit/test_compile_rich_output.py	1	CODE
LOW	tests/unit/test_compile_rich_output.py	5	CODE
LOW	tests/unit/test_path_home_override.py	11	CODE
LOW	tests/unit/test_tls_docs_scope.py	10	CODE
LOW	tests/unit/test_git_cache_phase3w4.py	6	CODE
LOW	tests/unit/test_deps_clean_command.py	8	CODE
LOW	tests/unit/test_lifecycle_executor_paths.py	14	CODE
LOW	tests/unit/test_shared_apm_workflow_contract.py	3	CODE
LOW	tests/unit/test_dev_dependencies.py	9	CODE
LOW	tests/unit/test_dep_targets_persistence.py	3	CODE
LOW	tests/unit/test_mcp_integrator_install_hermetic.py	6	CODE
LOW	tests/unit/test_registry_entry_alias_traversal.py	3	CODE
2069 more matches not shown…

Cross-File Repetition160 hits · 800 pts

Severity	File	Line	Snippet	Context
HIGH	tests/test_enhanced_discovery.py	0	create an apm.yml file with the specified dependencies.	STRING
HIGH	tests/integration/test_apm_dependencies.py	0	create an apm.yml file with the specified dependencies.	STRING
HIGH	tests/unit/test_ado_path_structure.py	0	create an apm.yml file with the specified dependencies.	STRING
HIGH	tests/basic_workflow_test.py	0	safely remove a directory with retry logic for windows. args: path (str): path to directory to remove	STRING
HIGH	tests/integration/test_registry.py	0	safely remove a directory with retry logic for windows. args: path (str): path to directory to remove	STRING
HIGH	tests/integration/test_integration.py	0	safely remove a directory with retry logic for windows. args: path (str): path to directory to remove	STRING
HIGH	tests/unit/test_prune_command.py	0	create a temp dir, chdir into it, restore cwd on exit.	STRING
HIGH	tests/unit/test_deps_clean_command.py	0	create a temp dir, chdir into it, restore cwd on exit.	STRING
HIGH	tests/unit/test_outdated_command.py	0	create a temp dir, chdir into it, restore cwd on exit.	STRING
HIGH	tests/unit/test_deps_update_command.py	0	create a temp dir, chdir into it, restore cwd on exit.	STRING
HIGH	tests/unit/install/test_install_pkg_policy_rollback.py	0	create a temp dir, chdir into it, restore cwd on exit.	STRING
HIGH	tests/unit/install/test_no_policy_flag.py	0	create a temp dir, chdir into it, restore cwd on exit.	STRING
HIGH	tests/unit/test_audit_policy_command.py	0	\ name: test-project version: '1.0.0' dependencies: apm: - owner/repo#v1.0.0	STRING
HIGH	tests/unit/test_audit_ci_auto_discovery.py	0	\ name: test-project version: '1.0.0' dependencies: apm: - owner/repo#v1.0.0	STRING
HIGH	tests/unit/test_audit_ci_command.py	0	\ name: test-project version: '1.0.0' dependencies: apm: - owner/repo#v1.0.0	STRING
HIGH	tests/unit/test_audit_policy_command.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00z' dependencies: - repo_url: owner/repo resolved_ref: v1.0.0 d	STRING
HIGH	tests/unit/test_audit_ci_command.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00z' dependencies: - repo_url: owner/repo resolved_ref: v1.0.0 d	STRING
HIGH	tests/unit/policy/test_ci_checks.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00z' dependencies: - repo_url: owner/repo resolved_ref: v1.0.0 d	STRING
HIGH	tests/integration/test_audit_silent_skip_e2e.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00z' dependencies: - repo_url: owner/repo resolved_ref: v1.0.0 d	STRING
HIGH	tests/unit/test_audit_ci_auto_discovery.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00z' dependencies: - repo_url: owner/repo resolved_ref: v1.0.0 d	STRING
HIGH	tests/unit/install/test_services_rendering.py	0	convert a dict of old-style integrator kwargs to an integratorbundle.	STRING
HIGH	tests/unit/install/test_services_phase3.py	0	convert a dict of old-style integrator kwargs to an integratorbundle.	STRING
HIGH	tests/unit/install/test_services_branches.py	0	convert a dict of old-style integrator kwargs to an integratorbundle.	STRING
HIGH	tests/unit/install/test_services_rendering.py	0	reset the in-process config cache before and after every test.	STRING
HIGH	tests/unit/install/test_services.py	0	reset the in-process config cache before and after every test.	STRING
HIGH	tests/unit/install/phases/test_integrate_phase.py	0	reset the in-process config cache before and after every test.	STRING
HIGH	tests/unit/install/phases/test_targets_phase.py	0	reset the in-process config cache before and after every test.	STRING
HIGH	tests/unit/core/test_experimental.py	0	reset the in-process config cache before and after every test.	STRING
HIGH	tests/unit/integration/test_copilot_cowork_target.py	0	reset the in-process config cache before and after every test.	STRING
HIGH	tests/unit/commands/test_experimental_command.py	0	reset the in-process config cache before and after every test.	STRING
HIGH	tests/unit/commands/test_helpers_version.py	0	reset the in-process config cache before and after every test.	STRING
HIGH	tests/unit/install/test_services.py	0	directly inject a dict into the config cache -- no disk i/o.	STRING
HIGH	tests/unit/install/phases/test_targets_phase.py	0	directly inject a dict into the config cache -- no disk i/o.	STRING
HIGH	tests/unit/core/test_experimental.py	0	directly inject a dict into the config cache -- no disk i/o.	STRING
HIGH	tests/unit/integration/test_copilot_cowork_target.py	0	directly inject a dict into the config cache -- no disk i/o.	STRING
HIGH	tests/unit/install/test_services.py	0	return a frozen targetprofile with resolved_deploy_root set for cowork. args: cowork_root: the resolved cowork skills ro	STRING
HIGH	tests/unit/install/phases/test_integrate_phase.py	0	return a frozen targetprofile with resolved_deploy_root set for cowork. args: cowork_root: the resolved cowork skills ro	STRING
HIGH	tests/unit/install/phases/test_targets_phase.py	0	return a frozen targetprofile with resolved_deploy_root set for cowork. args: cowork_root: the resolved cowork skills ro	STRING
HIGH	tests/unit/integration/test_skill_integrator.py	0	return a frozen targetprofile with resolved_deploy_root set for cowork. args: cowork_root: the resolved cowork skills ro	STRING
HIGH	tests/unit/marketplace/test_drift_check.py	0	\ name: my-project description: a project. version: 1.0.0 marketplace: owner: name: acme packages: - name: local-tool so	STRING
HIGH	tests/unit/commands/test_marketplace_doctor.py	0	\ name: my-project description: a project. version: 1.0.0 marketplace: owner: name: acme packages: - name: local-tool so	STRING
HIGH	tests/unit/commands/test_pack.py	0	\ name: my-project description: a project. version: 1.0.0 marketplace: owner: name: acme packages: - name: local-tool so	STRING
HIGH	tests/unit/commands/test_pack_cli_flags.py	0	\ name: my-project description: a project. version: 1.0.0 marketplace: owner: name: acme packages: - name: local-tool so	STRING
HIGH	tests/unit/marketplace/test_builder_logging.py	0	\ name: test description: x version: 1.0.0 marketplace: owner: name: acme packages: - name: remote-tool source: acme/rem	STRING
HIGH	tests/unit/marketplace/test_builder_security.py	0	\ name: test description: x version: 1.0.0 marketplace: owner: name: acme packages: - name: remote-tool source: acme/rem	STRING
HIGH	tests/unit/marketplace/test_builder.py	0	\ name: test description: x version: 1.0.0 marketplace: owner: name: acme packages: - name: remote-tool source: acme/rem	STRING
HIGH	tests/unit/commands/test_marketplace_doctor.py	0	\ name: test-marketplace description: test marketplace version: 1.0.0 owner: name: test owner packages: - name: solo sou	STRING
HIGH	tests/unit/commands/test_marketplace_check.py	0	\ name: test-marketplace description: test marketplace version: 1.0.0 owner: name: test owner packages: - name: solo sou	STRING
HIGH	tests/unit/commands/test_marketplace_outdated.py	0	\ name: test-marketplace description: test marketplace version: 1.0.0 owner: name: test owner packages: - name: solo sou	STRING
HIGH	tests/unit/commands/test_pack_cli_flags.py	0	--marketplace-output was removed in v0.16 (breaking change, #1318).	STRING
HIGH	tests/unit/commands/test_pack_cli_surface.py	0	--marketplace-output was removed in v0.16 (breaking change, #1318).	STRING
HIGH	tests/unit/commands/test_pack_phase3.py	0	--marketplace-output was removed in v0.16 (breaking change, #1318).	STRING
HIGH	tests/unit/policy/test_discovery_phase3w4.py	0	unsupported algorithm raises projectpolicyconfigerror.	STRING
HIGH	tests/unit/policy/test_discovery_policy_resolution.py	0	unsupported algorithm raises projectpolicyconfigerror.	STRING
HIGH	tests/integration/test_uninstall_policy_pack_flow.py	0	unsupported algorithm raises projectpolicyconfigerror.	STRING
HIGH	tests/integration/test_commands_auth_flow.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00+00:00' dependencies: []	STRING
HIGH	tests/integration/test_pack_install_flow.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00+00:00' dependencies: []	STRING
HIGH	tests/integration/test_pack_install_phase3w4.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00+00:00' dependencies: []	STRING
HIGH	…integration/test_wave7_marketplace_install_coverage.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00+00:00' dependencies: []	STRING
HIGH	tests/integration/test_wave6_init_pack_coverage.py	0	\ lockfile_version: '1' generated_at: '2025-01-01t00:00:00+00:00' dependencies: []	STRING
100 more matches not shown…

Empty Error Handlers153 hits · 765 pts

Severity	File	Line	Snippet	Context
HIGH	tests/test_apm_package_models.py	2027	except Exception:	CODE
HIGH	tests/unit/test_lockfile_self_entry.py	165	except RuntimeError:	CODE
HIGH	tests/unit/test_config_command.py	25	except (FileNotFoundError, OSError):	CODE
HIGH	tests/unit/test_config_command.py	1042	except (FileNotFoundError, OSError):	CODE
HIGH	tests/unit/test_protocol_fallback_warning.py	71	except (RuntimeError, GitCommandError):	CODE
HIGH	tests/unit/test_protocol_fallback_warning.py	420	except (RuntimeError, GitCommandError):	CODE
HIGH	tests/unit/test_protocol_fallback_warning.py	204	except (RuntimeError, GitCommandError):	CODE
HIGH	tests/unit/test_protocol_fallback_warning.py	248	except (RuntimeError, GitCommandError):	CODE
HIGH	tests/unit/test_protocol_fallback_warning.py	313	except (RuntimeError, GitCommandError):	CODE
HIGH	tests/unit/test_protocol_fallback_warning.py	368	except (RuntimeError, GitCommandError):	CODE
HIGH	tests/unit/test_reference_registry_shorthand.py	190	except ValueError:	CODE
HIGH	tests/unit/test_package_identity.py	306	except ValueError:	CODE
HIGH	tests/unit/test_auth_scoping.py	230	except RuntimeError:	CODE
HIGH	tests/unit/test_auth_scoping.py	583	except (RuntimeError, GitCommandError):	CODE
HIGH	tests/unit/install/test_install_local_bundle.py	31	except ImportError:	CODE
HIGH	tests/unit/security/test_executables.py	127	except AttributeError:	CODE
HIGH	tests/unit/integration/test_hook_integrator.py	3484	except ValueError:	CODE
HIGH	tests/unit/deps/test_outdated_ref_cache.py	121	except RuntimeError:	CODE
HIGH	tests/unit/compilation/test_watcher_phase3.py	482	except (ImportError, SystemExit):	CODE
HIGH	tests/unit/compilation/test_watcher_phase3.py	484	except Exception:	CODE
HIGH	tests/unit/compilation/test_watcher_events.py	482	except (ImportError, SystemExit):	CODE
HIGH	tests/unit/compilation/test_watcher_events.py	484	except Exception:	CODE
HIGH	tests/integration/test_policy_coverage.py	551	except Exception:	CODE
HIGH	tests/integration/test_integration_runtime_coverage.py	1959	except RuntimeError:	CODE
HIGH	tests/integration/test_skill_bundle_live.py	87	except (FileNotFoundError, subprocess.TimeoutExpired):	CODE
HIGH	tests/integration/test_install_subdir_dedup_e2e.py	450	except (FileNotFoundError, subprocess.SubprocessError, OSError):	CODE
HIGH	tests/integration/test_install_local_bundle_e2e.py	1042	except ImportError:	CODE
HIGH	tests/integration/test_install_local_bundle_e2e.py	1050	except ImportError:	CODE
HIGH	tests/integration/test_tls_frozen_hook.py	122	except Exception:	CODE
HIGH	tests/integration/test_github_downloader_phase3w4.py	337	except UnicodeDecodeError:	CODE
HIGH	tests/integration/_tls_ca_server.py	40	except Exception:	CODE
HIGH	tests/integration/test_remaining_modules_coverage.py	1000	except RuntimeError:	CODE
HIGH	tests/integration/test_remaining_modules_coverage.py	1020	except RuntimeError:	CODE
HIGH	tests/integration/test_tls_custom_ca.py	155	except Exception:	CODE
HIGH	tests/integration/test_tls_custom_ca.py	192	except Exception:	CODE
HIGH	tests/integration/test_deps_models_validation.py	1367	except ValueError:	CODE
HIGH	…/integration/test_github_downloader_validation_flow.py	349	except UnicodeDecodeError:	CODE
HIGH	tests/integration/test_compilation_coverage.py	471	except Exception:	CODE
HIGH	tests/integration/test_wave3_integrators_coverage.py	624	except Exception:	CODE
HIGH	scripts/benchmark_manifest_ops.py	250	except OSError:	CODE
HIGH	scripts/perf/measure_dotnet_skills.py	86	except OSError:	CODE
HIGH	scripts/perf/measure_dotnet_skills.py	61	except OSError:	CODE
HIGH	scripts/perf/measure_dotnet_skills.py	95	except OSError:	CODE
HIGH	scripts/perf/measure_dotnet_skills.py	100	except OSError:	CODE
HIGH	src/apm_cli/config.py	39	except FileExistsError:	CODE
HIGH	src/apm_cli/version.py	66	except Exception:	CODE
HIGH	src/apm_cli/version.py	39	except (ImportError, PackageNotFoundError):	CODE
HIGH	src/apm_cli/version.py	97	except Exception:	CODE
HIGH	src/apm_cli/cli.py	465	except Exception:	CODE
HIGH	src/apm_cli/install/drift.py	721	except RuntimeError:	CODE
HIGH	src/apm_cli/install/deployed_paths.py	53	except ValueError:	CODE
HIGH	src/apm_cli/install/sources.py	882	except Exception:	CODE
HIGH	src/apm_cli/install/sources.py	745	except Exception:	CODE
HIGH	src/apm_cli/install/skill_path_migration.py	184	except OSError:	CODE
HIGH	src/apm_cli/install/validation.py	370	except Exception:	CODE
HIGH	src/apm_cli/install/validation.py	744	except Exception:	CODE
HIGH	src/apm_cli/install/validation.py	837	except Exception:	CODE
HIGH	src/apm_cli/install/mcp/command.py	41	except ImportError:	CODE
HIGH	src/apm_cli/install/phases/lockfile.py	47	except Exception:	CODE
HIGH	src/apm_cli/install/phases/resolve.py	263	except (OSError, ValueError):	CODE
93 more matches not shown…

Self-Referential Comments220 hits · 684 pts

Severity	File	Line	Snippet	Context
MEDIUM	install.sh	1343	printf ' %s init my-app # Create a new APM project\n' "$_apm_run_hint"	CODE
MEDIUM	install.sh	2056	printf ' %s init my-app # Create a new APM project\n' "$_apm_run_hint"	CODE
MEDIUM	.apm/docs-index.yml	3	# This file is the LOAD-BEARING ARTIFACT for the docs-sync agentic	COMMENT
MEDIUM	tests/test_gitlab_git_transport.py	267	# Create a file outside the work dir.	COMMENT
MEDIUM	tests/test_gitlab_git_transport.py	271	# Create a symlink inside the work dir pointing outside.	COMMENT
MEDIUM⚡	tests/test_apm_resolver.py	302	# Create a mock dependency graph	COMMENT
MEDIUM	tests/test_apm_resolver.py	172	# Create a simple tree without cycles	COMMENT
MEDIUM	tests/test_apm_resolver.py	198	# Create a circular dependency: A -> B -> A	COMMENT
MEDIUM	tests/test_apm_resolver.py	212	# Create the cycle by making B depend back on A (existing node)	COMMENT
MEDIUM	tests/manual_workflow_script.py	24	# Create a temporary directory for testing	COMMENT
MEDIUM	tests/noninteractive_workflow_test.py	20	# Create a temporary directory for testing	COMMENT
MEDIUM	tests/test_github_downloader.py	1111	# Create the subdirectory structure that download_subdirectory_package expects	COMMENT
MEDIUM	tests/test_distributed_compilation.py	150	# Create a primitive collection	COMMENT
MEDIUM	tests/test_distributed_compilation.py	172	# Create a primitive collection	COMMENT
MEDIUM	tests/unit/test_plugin_parser.py	483	# Create a symlink inside agents/	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_phase3.py	500	# Create an adapter with runtime substitution disabled by monkeypatching	COMMENT
MEDIUM	tests/unit/test_prune_command.py	678	# Create the deployed file	STRING
MEDIUM	tests/unit/test_content_hash.py	149	# Create a symlink	COMMENT
MEDIUM⚡	tests/unit/test_git_cache_phase3w4.py	337	# Create a fake shard directory in db_root	COMMENT
MEDIUM	tests/unit/test_symlink_containment.py	33	# Create a file outside the project	COMMENT
MEDIUM	tests/unit/test_deps.py	92	# Create a test configuration file	COMMENT
MEDIUM⚡	tests/unit/test_init_phase3w5.py	489	# Create a dir with invalid plugin name (contains uppercase)	COMMENT
MEDIUM⚡	tests/unit/test_git_cache_branch_coverage.py	337	# Create a fake shard directory in db_root	COMMENT
MEDIUM⚡	tests/unit/test_install_scanning.py	181	# Create a directory outside the package with a critical file	COMMENT
MEDIUM⚡	tests/unit/test_install_command.py	910	# Create a minimal apm.yml with a direct dep	COMMENT
MEDIUM	tests/unit/test_install_command.py	318	# Create a directory with a specific name to test project name detection	COMMENT
MEDIUM	tests/unit/test_install_command.py	1141	# Create a fake home with no manifest so the command errors early	COMMENT
MEDIUM⚡	tests/unit/test_init_command_selection.py	489	# Create a dir with invalid plugin name (contains uppercase)	COMMENT
MEDIUM	tests/unit/test_runtime_manager.py	304	# Create a fake script where the code looks for it	COMMENT
MEDIUM	tests/unit/test_vscode_adapter.py	150	# Create a config with an existing server	COMMENT
MEDIUM⚡	tests/unit/test_skill_bundle.py	252	# Create a dir named ".."; on most filesystems this isn't creatable	COMMENT
MEDIUM	tests/unit/test_env_variables.py	23	# Create a temporary MCP configuration file	COMMENT
MEDIUM	tests/unit/test_env_variables.py	69	# Create the adapter and configure the server	COMMENT
MEDIUM	tests/unit/test_conflict_detection.py	15	# Create a mock adapter	COMMENT
MEDIUM⚡	tests/unit/test_local_content_install.py	165	# Create a root-level SKILL.md that must be ignored	COMMENT
MEDIUM⚡	tests/unit/test_local_deps.py	457	# Create a local package	COMMENT
MEDIUM	tests/unit/test_local_deps.py	403	# Create a lockfile so pack_bundle doesn't fail on missing lockfile	COMMENT
MEDIUM	tests/unit/test_local_deps.py	434	# Create an empty lockfile	COMMENT
MEDIUM	tests/unit/test_local_deps.py	508	# Create a Claude Skill package (SKILL.md but no apm.yml)	COMMENT
MEDIUM	tests/unit/test_local_deps.py	537	# Create a directory without apm.yml or SKILL.md	COMMENT
MEDIUM	tests/unit/test_local_deps.py	554	# Create a local package	COMMENT
MEDIUM	tests/unit/test_local_deps.py	599	# Create a secret file outside the package	COMMENT
MEDIUM	tests/unit/test_local_deps.py	604	# Create a local package with a symlink pointing outside	COMMENT
MEDIUM⚡	tests/unit/test_copilot_adapter_compatibility.py	478	# Create an adapter with runtime substitution disabled by monkeypatching	COMMENT
MEDIUM	tests/unit/test_unpack_security.py	131	# Create a symlink inside the bundle pointing to a file with critical content	COMMENT
MEDIUM	tests/unit/test_packer.py	513	# Create a file with hidden chars inside the project tree	COMMENT
MEDIUM⚡	tests/unit/install/test_install_local_bundle.py	827	# Create a tarball that contains junk -- no plugin.json.	COMMENT
MEDIUM	tests/unit/install/test_skill_path_migration.py	460	# Create a file outside the project root to serve as the "escape" target.	COMMENT
MEDIUM	tests/unit/install/test_sources_phase3.py	263	# Create a minimal apm.yml in the install path	COMMENT
MEDIUM⚡	tests/unit/install/test_services_phase3.py	146	# Create a regular cowork target that will fail the first relative_to check,	COMMENT
MEDIUM	tests/unit/install/test_local_content_symlink_deref.py	365	# Create a symlink from dir_a/link_to_b -> dir_b (in-package, not escaping)	COMMENT
MEDIUM	tests/unit/install/test_validation_proxy.py	253	# Create a virtual dep_ref mock (simulating a virtual package).	COMMENT
MEDIUM	tests/unit/install/test_validation_proxy.py	297	# Create a virtual dep_ref mock (simulating a virtual package).	COMMENT
MEDIUM	tests/unit/install/test_sources_materialisation.py	282	# Create a minimal apm.yml in the install path	COMMENT
MEDIUM⚡	tests/unit/install/test_services_branches.py	145	# Create a regular cowork target that will fail the first relative_to check,	COMMENT
MEDIUM	tests/unit/install/test_drift.py	733	# Create the local package dir so path resolution succeeds.	COMMENT
MEDIUM⚡	tests/unit/core/test_plugin_manifest.py	653	# Create a malformed plugin.json at the root	COMMENT
MEDIUM⚡	tests/unit/cache/test_git_cache.py	302	# Create a checkout with old mtime	COMMENT
MEDIUM⚡	tests/unit/cache/test_git_cache.py	310	# Create a recent checkout	COMMENT
MEDIUM	tests/unit/cache/test_locking.py	135	# Create a valid shard (should NOT be removed)	COMMENT
160 more matches not shown…

Excessive Try-Catch Wrapping545 hits · 561 pts

Severity	File	Line	Snippet	Context
LOW	.apm/instructions/cli.instructions.md	83	except Exception as e:	CODE
MEDIUM	tests/manual_workflow_script.py	49	print(f"Error: {result}")	CODE
MEDIUM⚡	tests/manual_workflow_script.py	66	print(f"Error: {result}")	CODE
LOW⚡	tests/manual_workflow_script.py	67	except Exception as e:	CODE
MEDIUM⚡	tests/manual_workflow_script.py	68	print(f"Error: {e}")	CODE
LOW	tests/test_apm_package_models.py	2027	except Exception:	CODE
MEDIUM	tests/unit/test_diagnostics.py	649	def add():	CODE
LOW	tests/unit/test_diagnostics.py	652	except Exception as e:	CODE
LOW	tests/unit/test_thread_safety.py	107	except Exception as exc:	CODE
MEDIUM	tests/unit/test_thread_safety.py	101	def _worker() -> None:	CODE
LOW	tests/unit/install/test_install_local_bundle.py	382	except Exception as exc:	CODE
LOW	tests/unit/install/test_validation_rate_limit.py	45	except Exception:	CODE
MEDIUM	tests/unit/install/test_validation_rate_limit.py	42	def _throttled_fallback(host, op, **kwargs):	CODE
LOW	tests/unit/install/test_install_cmd_auth_rendering.py	74	except Exception:	CODE
LOW	tests/unit/install/test_validation_tls.py	144	except Exception:	CODE
LOW	tests/unit/install/test_validation_tls.py	147	except Exception:	CODE
MEDIUM	tests/unit/install/test_validation_tls.py	141	def _retrying_fallback(host, op, **kwargs):	CODE
LOW	tests/unit/install/test_validation_transient_probe.py	43	except Exception:	CODE
MEDIUM	tests/unit/install/test_validation_transient_probe.py	40	def _retry_after_unauthenticated_failure(host, operation, **kwargs):	CODE
LOW⚡	tests/unit/install/test_drift.py	641	except Exception as exc: # pragma: no cover -- only inspecting message	CODE
MEDIUM	tests/unit/core/test_auth_validation.py	918	def _resolve():	CODE
LOW⚡	tests/unit/core/test_auth_validation.py	921	except Exception as exc:	CODE
MEDIUM	tests/unit/core/test_auth_phase3.py	1024	def _resolve():	CODE
LOW⚡	tests/unit/core/test_auth_phase3.py	1027	except Exception as exc:	CODE
MEDIUM	tests/unit/deps/test_shared_clone_cache.py	216	def worker() -> None:	CODE
MEDIUM	tests/unit/deps/test_shared_clone_cache.py	479	def thread_a() -> None:	CODE
MEDIUM	tests/unit/deps/test_shared_clone_cache.py	510	def thread_b() -> None:	CODE
LOW	tests/unit/deps/test_shared_clone_cache.py	220	except Exception as e:	CODE
LOW	tests/unit/deps/test_shared_clone_cache.py	507	except Exception as e:	CODE
LOW	tests/unit/deps/test_shared_clone_cache.py	537	except Exception as e:	CODE
LOW⚡	…sts/unit/deps/test_gitlab_sparse_transport_contract.py	335	except Exception as exc:	CODE
LOW	tests/unit/compilation/test_watcher_phase3.py	484	except Exception:	CODE
LOW	tests/unit/compilation/test_watcher_events.py	484	except Exception:	CODE
LOW	tests/unit/compilation/test_compilation.py	426	except Exception as e:	CODE
LOW	tests/integration/test_registry.py	134	except Exception as exc:	CODE
LOW	tests/integration/test_tls_r3_verify.py	153	except Exception: # pragma: no cover - environment guard	CODE
LOW⚡	tests/integration/test_wave2_adapters_coverage.py	1524	except Exception as exc:	CODE
LOW	tests/integration/test_policy_coverage.py	551	except Exception:	CODE
LOW	tests/integration/test_ado_bearer_e2e.py	62	except Exception:	CODE
LOW	tests/integration/test_guardrailing_hero_e2e.py	237	except Exception as e:	CODE
LOW	tests/integration/test_tls_frozen_hook.py	122	except Exception:	CODE
LOW	tests/integration/_tls_ca_server.py	40	except Exception:	CODE
LOW	…s/integration/test_gitlab_sparse_transport_contract.py	183	except Exception as exc:	CODE
LOW	…s/integration/test_gitlab_sparse_transport_contract.py	262	except Exception as exc:	CODE
LOW	tests/integration/test_tls_custom_ca.py	155	except Exception:	CODE
LOW⚡	tests/integration/test_tls_custom_ca.py	192	except Exception:	CODE
LOW	tests/integration/test_compilation_coverage.py	471	except Exception:	CODE
LOW⚡	tests/integration/test_wave3_integrators_coverage.py	624	except Exception:	CODE
LOW⚡	…ts/integration/test_transport_selection_integration.py	120	except Exception:	CODE
LOW⚡	tests/integration/test_mcp_registry_e2e.py	712	except Exception:	CODE
LOW⚡	tests/integration/test_mcp_registry_e2e.py	729	except Exception:	CODE
LOW⚡	tests/integration/test_mcp_registry_e2e.py	743	except Exception:	CODE
LOW	tests/integration/test_mcp_registry_e2e.py	63	except Exception:	CODE
LOW	tests/integration/test_mcp_registry_e2e.py	341	except Exception as e:	CODE
LOW⚡	tests/red_team/install/test_failure_isolation.py	46	except Exception:	CODE
LOW⚡	tests/red_team/parser/test_timeout_subprocess.py	73	except Exception as exc:	CODE
LOW⚡	tests/red_team/parser/test_toplevel_shape.py	66	except Exception as exc:	CODE
LOW⚡	tests/red_team/parser/test_toplevel_shape.py	84	except Exception as exc:	CODE
LOW	tests/red_team/parser/test_toplevel_shape.py	121	except Exception as exc:	CODE
LOW	tests/red_team/parser/test_nonascii_control.py	40	except Exception as exc:	CODE
485 more matches not shown…

Deep Nesting566 hits · 440 pts

Severity	File	Line	Context
LOW	tests/test_github_downloader.py	867	CODE
LOW	tests/test_runtime_manager_token_precedence.py	45	CODE
LOW	tests/test_runtime_manager_token_precedence.py	63	CODE
LOW	tests/test_runtime_manager_token_precedence.py	112	CODE
LOW	tests/test_empty_string_and_defaults.py	132	CODE
LOW	tests/test_empty_string_and_defaults.py	211	CODE
LOW	tests/test_empty_string_and_defaults.py	283	CODE
LOW	tests/unit/test_version.py	73	CODE
LOW	tests/unit/test_version.py	126	CODE
LOW	tests/unit/test_version.py	142	CODE
LOW	tests/unit/test_version.py	158	CODE
LOW	tests/unit/test_version.py	175	CODE
LOW	tests/unit/test_version.py	204	CODE
LOW	tests/unit/test_version.py	296	CODE
LOW	tests/unit/test_shared_apm_workflow_contract.py	421	CODE
LOW	tests/unit/test_shared_apm_workflow_contract.py	792	CODE
LOW	tests/unit/test_install_update_refs.py	292	CODE
LOW	tests/unit/test_auth.py	1030	CODE
LOW	tests/unit/test_auth.py	1511	CODE
LOW	tests/unit/test_auth.py	1733	CODE
LOW	tests/unit/test_cli_lazy_dispatch.py	39	CODE
LOW	tests/unit/test_windows_native_symlink_probe.py	201	CODE
LOW	tests/unit/test_command_helpers.py	581	CODE
LOW	tests/unit/test_command_helpers.py	591	CODE
LOW	tests/unit/test_windows_unit_diagnostics.py	66	CODE
LOW	tests/unit/test_install_update.py	689	CODE
LOW	tests/unit/test_package_identity.py	275	CODE
LOW	tests/unit/test_install_tui.py	125	CODE
LOW	tests/unit/test_build_spec.py	137	CODE
LOW	tests/unit/test_workflow_actor_contract.py	438	CODE
LOW	tests/unit/test_guardrailing_hero_topology.py	65	CODE
LOW	tests/unit/test_triage_panel_lock.py	193	CODE
LOW	tests/unit/test_public_release_metadata.py	60	CODE
LOW	tests/unit/test_public_release_metadata.py	239	CODE
LOW	tests/unit/test_global_mcp_scope.py	307	CODE
LOW	tests/unit/test_surviving_deps_reintegration.py	199	CODE
LOW	tests/unit/test_surviving_deps_reintegration.py	271	CODE
LOW	tests/unit/install/test_install_transaction.py	621	CODE
LOW	tests/unit/install/test_unix_install_ownership.py	94	CODE
LOW	tests/unit/install/test_unix_install_ownership.py	1314	CODE
LOW	tests/unit/install/test_install_exit_owner_invariant.py	39	CODE
LOW	tests/unit/integration/test_data_driven_dispatch.py	148	CODE
LOW	tests/unit/integration/test_data_driven_dispatch.py	172	CODE
LOW	tests/unit/integration/test_data_driven_dispatch.py	195	CODE
LOW	tests/unit/integration/test_mcp_integrator.py	1062	CODE
LOW	tests/unit/integration/test_dep_target_intersection.py	372	CODE
LOW	tests/unit/scripts/test_architecture_runner.py	395	CODE
LOW	tests/unit/scripts/test_lifecycle_evidence.py	126	CODE
LOW	tests/unit/scripts/test_lifecycle_evidence.py	199	CODE
LOW	tests/unit/scripts/test_lifecycle_evidence.py	345	CODE
LOW	tests/unit/scripts/test_lifecycle_evidence.py	632	CODE
LOW	tests/unit/scripts/test_lifecycle_evidence.py	673	CODE
LOW	tests/unit/scripts/test_lifecycle_evidence.py	729	CODE
LOW	tests/unit/scripts/test_lifecycle_evidence.py	933	CODE
LOW	…sts/unit/deps/test_gitlab_sparse_transport_contract.py	252	CODE
LOW	tests/unit/commands/test_audit_error_handling.py	472	CODE
LOW	tests/unit/commands/test_audit_error_handling.py	522	CODE
LOW	tests/unit/commands/test_install_phase3.py	271	CODE
LOW	tests/unit/commands/test_install_phase3.py	368	CODE
LOW	tests/unit/commands/test_install_phase3.py	407	CODE
506 more matches not shown…

Docstring Block Structure65 hits · 325 pts

Severity	File	Line	Snippet	Context
HIGH	src/apm_cli/config.py	228	Persist a default install target after validation. Args: target: Target token or comma-separated target lis	STRING
HIGH	src/apm_cli/config.py	254	Normalize and validate a self-update channel name. Args: channel: Channel token supplied by the user or env	STRING
HIGH	src/apm_cli/factory.py	50	Create a client adapter based on the specified type. Args: client_type (str): Type of client adapte	STRING
HIGH	src/apm_cli/factory.py	90	Create a package manager adapter based on the specified type. Args: manager_type (str, optional): T	STRING
HIGH	src/apm_cli/install/mcp/integration.py	143	Run MCP server integration after APM package installation. Mirrors the LSP integration pattern: 1. Collect dire	STRING
HIGH	src/apm_cli/install/phases/local_content.py	185	Copy a local package to apm_modules/. Args: dep_ref: DependencyReference with is_local=True. instal	STRING
HIGH	src/apm_cli/core/install_audit.py	91	Collapse the ``--audit``/``--no-audit`` CLI flags into one override. Args: no_audit: ``True`` when ``--no-a	STRING
HIGH	src/apm_cli/core/experimental.py	182	Check whether an experimental flag is currently enabled. Derives directly from ``get_config()`` (already cached in	STRING
HIGH	src/apm_cli/core/target_detection.py	594	Parse, validate, and normalize a target value from any entry point. Single source of truth for the ``target`` field	STRING
HIGH	src/apm_cli/core/script_runner.py	575	Discover prompt files by name across local and dependencies. Supports both simple names and qualified paths:	STRING
HIGH	src/apm_cli/core/script_runner.py	1003	Resolve prompt file path, checking local directory first, then common directories, then dependencies. Symlinks	STRING
HIGH	src/apm_cli/cache/git_cache.py	389	Resolve a ref to SHA via git ls-remote. Args: url: Repository URL. ref: Ref to resolve	STRING
HIGH	src/apm_cli/cache/paths.py	45	Resolve the cache root directory. Args: no_cache: If True, returns a temporary directory that will be	STRING
HIGH	src/apm_cli/cache/locking.py	82	Atomically move staged to final under lock. Protocol: 1. Acquire the file lock. 2. Re-check that *fin	STRING
HIGH	src/apm_cli/cache/url_normalize.py	46	Normalize a Git repository URL for cache key derivation. The result is a canonical string suitable for hashing. It	STRING
HIGH	src/apm_cli/security/executables.py	656	Run the interactive approval flow for packages with executables. Args: declarations: Executable declaration	STRING
HIGH	src/apm_cli/security/external/options.py	134	Validate passthrough args against an adapter allowlist (fail-closed). A token is rejected when it (a) names or ca	STRING
HIGH	src/apm_cli/security/external/runner.py	51	Resolve, validate, run, and merge external scanners. Args: external: Scanner names to run (e.g. ``("skillsp	STRING
HIGH	src/apm_cli/security/external/sarif_ingest.py	97	Convert a parsed SARIF 2.1.0 document into findings grouped by file. Args: document: A parsed SARIF documen	STRING
HIGH	src/apm_cli/security/external/base.py	61	Run the scanner over paths and return findings grouped by file. Args: paths: Files or directories	STRING
HIGH	src/apm_cli/integration/copilot_cowork_paths.py	176	Encode an absolute cowork path as a ``cowork://`` lockfile entry. Args: absolute: Absolute path to a deploy	STRING
HIGH	src/apm_cli/integration/copilot_cowork_paths.py	199	Decode a ``cowork://`` lockfile entry to an absolute ``Path``. Args: lockfile_path: A string like ``cowork:	STRING
HIGH	src/apm_cli/integration/utils.py	5	Normalize a repo URL to owner/repo format. Handles various URL formats: - Full URLs: https://github.com/owner/r	STRING
HIGH	src/apm_cli/marketplace/client.py	1168	Fetch and parse a marketplace manifest. Uses the JSON sidecar cache for ``kind in ("github", "gitlab", "ado", "	STRING
HIGH	src/apm_cli/marketplace/version_resolver.py	65	Resolve a semver range to the highest matching git tag. Lists tags on owner_repo, filters to those matching *tag_	STRING
HIGH	src/apm_cli/marketplace/resolver.py	739	Resolve a plugin's source to a canonical ``owner/repo[#ref]`` string. Handles 4 source types: relative, github, url	STRING
HIGH	src/apm_cli/marketplace/resolver.py	873	Resolve a marketplace plugin reference to a canonical string and plugin row. For non-GitHub, non-ADO marketplace ho	STRING
HIGH	src/apm_cli/runtime/factory.py	56	Get a runtime adapter by name. Args: runtime_name: Name of the runtime to get ('llm', 'codex')	STRING
HIGH	src/apm_cli/runtime/factory.py	82	Get the best available runtime based on preference order. Args: model_name: Optional model name for	STRING
HIGH	src/apm_cli/bundle/packer.py	45	Create a self-contained bundle from installed APM dependencies. Args: project_root: Root of the project con	STRING
HIGH	src/apm_cli/bundle/unpacker.py	44	Extract and apply an APM bundle to a project directory. Additive-only semantics (v1): only writes files listed in t	STRING
HIGH	src/apm_cli/utils/exclude.py	21	Validate and normalize exclude patterns, rejecting dangerous ones. Args: patterns: Raw patterns from apm.ym	STRING
HIGH	src/apm_cli/models/apm_package.py	430	Construct a package from already interpreted manifest data. This is the public construction owner for manifest	STRING
HIGH	src/apm_cli/models/plugin.py	91	Load a plugin from its installation directory. Plugin structure: plugin.json can be in root, .github/plugin/, o	STRING
HIGH	src/apm_cli/models/validation.py	55	Parse a string value into a PackageContentType enum. Args: value: String value to parse (e.g., "ins	STRING
HIGH	src/apm_cli/models/dependency/reference.py	496	Get the canonical filesystem path where this package should be installed. This is the single source of truth fo	STRING
HIGH	src/apm_cli/models/dependency/reference.py	737	Parse an object-style dependency entry from apm.yml. Supports the Cargo-inspired object format: -	STRING
HIGH	src/apm_cli/models/dependency/reference.py	1771	Parse a dependency string into a DependencyReference. Supports formats: - user/repo - user/repo	STRING
HIGH	src/apm_cli/primitives/parser.py	12	Parse a SKILL.md file. SKILL.md files are package meta-guides that describe how to use the package. They have a	STRING
HIGH	src/apm_cli/primitives/parser.py	53	Parse a primitive file. Determines the primitive type based on file extension and parses accordingly. Args:	STRING
HIGH	src/apm_cli/adapters/client/vscode.py	144	Configure an MCP server in VS Code mcp.json file. This method updates the .vscode/mcp.json file to add or updat	STRING
HIGH	src/apm_cli/adapters/client/base.py	493	Parse registry arguments without losing named-group boundaries. Typed v0.1 entries read ``value`` while untyped	STRING
HIGH	src/apm_cli/adapters/client/base.py	767	Merge one package identity into a typed non-container launcher argv. Package detection is semantic and type-awa	STRING
HIGH	src/apm_cli/registry/client.py	473	List all available servers in the registry. Calls ``GET /v0.1/servers`` per the MCP Registry spec. Arg	STRING
HIGH	src/apm_cli/registry/client.py	507	Search for servers in the registry using the spec ``?search=`` query param. Calls ``GET /v0.1/servers?search=<q	STRING
HIGH	src/apm_cli/registry/client.py	604	Get detailed information about a specific server version. Calls ``GET /v0.1/servers/{urlencoded-serverName}/ver	STRING
HIGH	src/apm_cli/registry/client.py	680	Find a server by its name using the search API. Args: name (str): Name of the server to find.	STRING
HIGH	src/apm_cli/registry/client.py	705	Find a server by exact name match. The legacy UUID strategy was removed because the MCP Registry v0.1 s	STRING
HIGH	src/apm_cli/registry/client.py	746	Extract the repository name from various identifier formats. This method handles various naming patterns by ext	STRING
HIGH	src/apm_cli/registry/integration.py	45	Get detailed information about a specific package. Args: name (str): Name of the package.	STRING
HIGH	src/apm_cli/registry/integration.py	67	Get the latest version of a package. Args: name (str): Name of the package. Returns:	STRING
HIGH	src/apm_cli/deps/github_downloader.py	832	Download a single file from repository (GitHub or Azure DevOps). Args: dep_ref: Parsed dependency r	STRING
HIGH	src/apm_cli/deps/github_downloader.py	995	Download a single file as a virtual APM package. Creates a minimal APM package structure with the file placed i	STRING
HIGH	src/apm_cli/deps/github_downloader.py	1380	Download a subdirectory from a repo as an APM package. Used for Claude Skills or APM packages nested in monorep	STRING
HIGH	src/apm_cli/deps/github_downloader.py	1817	Download a GitHub repository and validate it as an APM package. For virtual packages (individual files or colle	STRING
HIGH	src/apm_cli/deps/plugin_parser.py	430	Parse a plugin.json manifest file. Args: plugin_json_path: Path to the plugin.json file Returns:	STRING
HIGH	src/apm_cli/deps/plugin_parser.py	1487	Create a minimal ``plugin.json`` dict from ``apm.yml`` identity fields. Reads ``apm.yml`` and extracts ``name``, ``	STRING
HIGH	src/apm_cli/deps/shared_clone_cache.py	92	Return a path to a shared clone, cloning on first access. Args: repository_url: Credential-free URL	STRING
HIGH	src/apm_cli/deps/_shared.py	195	Check validation_result, clean up target_path on failure, and return the package. Args: validation_resu	STRING
HIGH	src/apm_cli/deps/download_strategies.py	138	HTTP GET with selectable retries for transient HTTP failures. Args: url: Request URL he	STRING
5 more matches not shown…

Over-Commented Block225 hits · 196 pts

Severity	File	Line	Snippet	Context
LOW	install.sh	1	#!/bin/bash	COMMENT
LOW	.apm/docs-index.yml	1	# docs-index.yml -- corpus map for the docs-sync skill	COMMENT
LOW	…s/docs-corpus-audit/scripts/scan-cross-corpus-drift.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.apm/skills/docs-grounding-verifier/evals/run-evals.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…/skills/docs-grounding-verifier/scripts/verify-page.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…s/docs-grounding-verifier/scripts/retrieve-evidence.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.apm/skills/cut-release/scripts/bump-version.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…m/skills/cut-release/scripts/list-changes-since-tag.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.apm/skills/cut-release/scripts/verify-lint-mirror.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tests/conftest.py	1	# Root conftest.py -- shared pytest configuration	COMMENT
LOW	tests/unit/test_uninstall_transitive_cleanup.py	161	# This fixture's pkg-c (created via _make_apm_modules_dir, which	COMMENT
LOW	tests/unit/test_shepherd_owner_touch_gate.py	1101		COMMENT
LOW	tests/unit/test_self_entry_caller_guards.py	121	# Self-entry's owner string would have been '<self>' if not skipped.	COMMENT
LOW	tests/unit/install/phases/test_targets_phase_v2.py	1	"""Unit tests for the v2 targets phase three-guard collapse (#1154).	COMMENT
LOW	tests/unit/core/test_error_renderer.py	1	"""Unit tests for the unified error renderer (#1154).	COMMENT
LOW	tests/unit/core/test_target_resolution_v2.py	1	"""Unit tests for the target resolution v2 algorithm (#1154).	COMMENT
LOW	tests/unit/core/test_target_resolution_v2.py	21	# Priority: flag > yaml_targets > auto-detect signals.	COMMENT
LOW	tests/unit/core/test_target_resolution_v2.py	41	# Resolves --target all to (signals U yaml_targets), NOT all 7	COMMENT
LOW	tests/unit/integration/test_mcp_integrator.py	1441	assert "active targets: copilot" in out	COMMENT
LOW	tests/unit/marketplace/test_schema_conformance.py	201	assert src["path"] == "tools/claude-plugin"	COMMENT
LOW	tests/integration/test_diff_aware_install_e2e.py	321	# ---------------------------------------------------------------------------	COMMENT
LOW	tests/integration/test_target_resolution_e2e.py	1	"""E2E integration tests for target resolution overhaul (#1154).	COMMENT
LOW	tests/integration/marketplace/__init__.py	1	# Integration tests for apm marketplace commands.	COMMENT
LOW	tests/spec_conformance/critical_paths.txt	1	# Critical paths for the OpenAPM Mode B (silent-extension) detector.	COMMENT
LOW	tests/spec_conformance/mode_b_detector.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tests/perf/test_architecture_linter_scaling.py	161		COMMENT
LOW	.agents/skills/autopilot-pr-merge-worker/apm.yml	1	name: autopilot-pr-merge-worker	COMMENT
LOW	…s/docs-corpus-audit/scripts/scan-cross-corpus-drift.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…ents/skills/docs-grounding-verifier/evals/run-evals.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…/skills/docs-grounding-verifier/scripts/verify-page.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…s/docs-grounding-verifier/scripts/retrieve-evidence.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.agents/skills/cut-release/scripts/bump-version.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…s/skills/cut-release/scripts/list-changes-since-tag.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…gents/skills/cut-release/scripts/verify-lint-mirror.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…s/public/specs/manifests/openapm-v0.1.requirements.yml	1	# OpenAPM v0.1 -- machine-readable requirements manifest.	COMMENT
LOW	scripts/test-auth-acceptance.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/test-auth-acceptance.sh	21	# A7 ADO_APM_PAT Azure DevOps PAT	COMMENT
LOW	scripts/test-auth-acceptance.sh	41	# =============================================================================	COMMENT
LOW	scripts/test-auth-acceptance.sh	61	# 17 \| Fine-grained wrong owner \| A2 \| H1 \| V3 \| Fails, no crash	COMMENT
LOW	scripts/test-auth-acceptance.sh	81	# export AUTH_TEST_EMU_REPO="emu-org/internal-repo" # optional	COMMENT
LOW	scripts/test-auth-acceptance.sh	101	# =============================================================================	COMMENT
LOW	scripts/test-auth-acceptance.sh	821	$SCENARIO_OK && record_pass "$name" \|\| record_fail "$name"	COMMENT
LOW	scripts/test-auth-acceptance.sh	841	# The resolver must:	COMMENT
LOW	scripts/test-auth-acceptance.sh	981	# If private deps were included, verify token sources appear in verbose	COMMENT
LOW	scripts/run_mutation_pilot.py	161	# `mutmut run` filtered to those method patterns raises	COMMENT
LOW	scripts/lint-auth-signals.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/lint-auth-signals.sh	41	# Exempt sites (tracked here, not via inline annotations, so the boundary is	COMMENT
LOW	scripts/bootstrap_requirements.py	81	HEADER = """\	COMMENT
LOW	scripts/github-token-helper.sh	1	#!/bin/bash	COMMENT
LOW	scripts/test-integration.sh	1	#!/bin/bash	COMMENT
LOW	scripts/test-integration.sh	21	# - invoke pytest tests/integration/ exactly once	COMMENT
LOW	scripts/test-release-validation.sh	1	#!/bin/bash	COMMENT
LOW	scripts/e2e/marketplace_local_e2e.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…ckages/apm-guide/.apm/skills/apm-usage/dependencies.md	481	# from host env at server-start (no plaintext on disk).	COMMENT
LOW	packages/autopilot/autopilot-pr-merge-worker/apm.yml	1	name: autopilot-pr-merge-worker	COMMENT
LOW	.github/workflows/cli-consistency-checker.lock.yml	1	# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"8bd377006c8b27de4952f56cf53d08674e063f87a063eadb64acfa9bbe7	COMMENT
LOW	.github/workflows/cli-consistency-checker.lock.yml	21	# gh aw compile	COMMENT
LOW	.github/workflows/cli-consistency-checker.lock.yml	41	# - actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0	COMMENT
LOW	.github/workflows/docs-sync.md	1	---	COMMENT
LOW	.github/workflows/docs-sync.md	21	# `gh pr diff` which return inert text	COMMENT
165 more matches not shown…

Structural Annotation Overuse115 hits · 170 pts

Severity	File	Line	Snippet	Context
LOW	.apm/skills/docs-impact-architect/SKILL.md	39	## Step 1: read the corpus map, not the corpus	COMMENT
LOW	.apm/skills/docs-impact-architect/SKILL.md	45	## Step 2: classify the structural shape	COMMENT
LOW	.apm/skills/docs-impact-architect/SKILL.md	60	## Step 3: design the TOC delta	COMMENT
LOW	.apm/skills/docs-impact-architect/SKILL.md	101	## Step 4: validate against the 3-promise narrative	COMMENT
LOW	.apm/skills/docs-impact-architect/SKILL.md	111	## Step 5: emit the architect report	COMMENT
LOW	.apm/skills/docs-impact-localizer/SKILL.md	36	## Step 1: load page contents	COMMENT
LOW	.apm/skills/docs-impact-localizer/SKILL.md	42	## Step 2: narrow scope inside each page	COMMENT
LOW	.apm/skills/docs-impact-localizer/SKILL.md	63	## Step 3: detect cross-page conflicts	COMMENT
LOW	.apm/skills/docs-impact-localizer/SKILL.md	77	## Step 4: emit the per-page task brief	COMMENT
LOW	.apm/skills/docs-impact-classifier/SKILL.md	31	## Step 1: L0 deterministic path gate (no LLM)	COMMENT
LOW	.apm/skills/docs-impact-classifier/SKILL.md	51	## Step 2: L1 symbol extraction + corpus grep (no LLM)	COMMENT
LOW	.apm/skills/docs-impact-classifier/SKILL.md	67	## Step 3: L2 LLM verdict (1 call, bounded context)	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	128	# Step 1: install pinned to an older commit SHA.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	142	# Step 2: bump apm.yml to point at main.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	145	# Step 3: run `apm deps update` with no positional args.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	151	# Step 4: lockfile SHA must differ from old.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	161	# Step 5: deployed files must still exist (re-integrated).	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	280	# Step 2: bump the user manifest to main.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	283	# Step 3: run `apm deps update -g` from a directory with no project.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	299	# Step 5: scope was respected -- no project lockfile in cwd.	COMMENT
LOW	tests/integration/test_deps_update_e2e.py	268	# Step 1: install -g to populate ~/.apm/apm.lock.yaml.	COMMENT
LOW⚡	tests/integration/test_producer_journey.py	101	# Step 1: consumer init	COMMENT
LOW⚡	tests/integration/test_producer_journey.py	106	# Step 2: bolt on a marketplace	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	162	# Step 1: Setup Copilot runtime (equivalent to: apm runtime setup copilot)	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	196	# Step 2: Initialize project (equivalent to: apm init my-ai-native-project)	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	568	# Step 1: Setup LLM runtime (equivalent to: apm runtime setup llm)	COMMENT
LOW	tests/integration/test_golden_scenario_e2e.py	584	# Step 2: Use existing project or create new one	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	309	# Step 6: Execute agentic workflows (equivalent to: apm run start --param name="<YourGitHubHandle>")	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	410	# Step 1: Setup Codex runtime	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	491	# Step 3: Compile Agent Primitives	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	496	# Step 4: Install dependencies	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	642	# Step 3: Compile Agent Primitives	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	647	# Step 4: Install dependencies	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	716	# Step 1: Setup Gemini runtime (npm install -g @google/gemini-cli)	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	802	# Step 3: Compile Agent Primitives	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	807	# Step 4: Install dependencies (targets gemini since .gemini/ exists)	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	815	# Step 5: Run with Gemini CLI	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	279	# Step 4: Compile Agent Primitives for any coding agent (equivalent to: apm compile)	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	293	# Step 5: Install MCP dependencies (equivalent to: apm install)	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	433	# Step 2: Use existing project or create new one	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	507	# Step 5: Run with Codex CLI (equivalent to: apm run debug --param name="<YourGitHubHandle>")	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	658	# Step 5: Run with LLM runtime (equivalent to: apm run llm --param name="<YourGitHubHandle>")	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	743	# Step 2: Create test project	STRING
LOW	tests/integration/test_guardrailing_hero_e2e.py	93	# Step 1: apm init my-project	COMMENT
LOW	tests/integration/test_guardrailing_hero_e2e.py	108	# Step 2: apm install microsoft/apm-sample-package	COMMENT
LOW	tests/integration/test_guardrailing_hero_e2e.py	126	# Step 3: install a virtual instruction from this SSO-authorized repository	COMMENT
LOW	tests/integration/test_guardrailing_hero_e2e.py	150	# Step 4: apm compile	COMMENT
LOW	tests/integration/test_guardrailing_hero_e2e.py	188	# Step 5: apm run design-review	COMMENT
LOW⚡	tests/integration/test_agent_skills_target.py	826	# Step 1: Legacy install so the lockfile records .github/skills/.	COMMENT
LOW⚡	tests/integration/test_agent_skills_target.py	833	# Step 2: Hand-edit the legacy file so its content diverges from what	COMMENT
LOW⚡	tests/integration/test_agent_skills_target.py	837	# Step 3: Converged install — integrate writes the canonical content	COMMENT
LOW⚡	tests/integration/test_mcp_registry_e2e.py	218	# Step 1: Set up Codex runtime	COMMENT
LOW⚡	tests/integration/test_mcp_registry_e2e.py	227	# Step 2: Create test project with MCP dependencies	COMMENT
LOW	tests/integration/test_mcp_registry_e2e.py	271	# Step 3: Test installation with environment variable prompting	COMMENT
LOW	tests/integration/test_mcp_registry_e2e.py	287	# Step 4: Verify Codex configuration was updated	COMMENT
LOW	.agents/skills/docs-impact-architect/SKILL.md	39	## Step 1: read the corpus map, not the corpus	COMMENT
LOW	.agents/skills/docs-impact-architect/SKILL.md	45	## Step 2: classify the structural shape	COMMENT
LOW	.agents/skills/docs-impact-architect/SKILL.md	60	## Step 3: design the TOC delta	COMMENT
LOW	.agents/skills/docs-impact-architect/SKILL.md	101	## Step 4: validate against the 3-promise narrative	COMMENT
LOW	.agents/skills/docs-impact-architect/SKILL.md	111	## Step 5: emit the architect report	COMMENT
55 more matches not shown…

Modern Structural Boilerplate158 hits · 154 pts

Severity	File	Line	Snippet	Context
LOW	tests/unit/test_audit_policy_command.py	33	def _setup_clean_project(project: Path) -> None:	CODE
LOW	tests/unit/test_audit_ci_auto_discovery.py	41	def _setup_project_with_unmanaged_file(project: Path) -> None:	CODE
LOW	tests/unit/test_audit_ci_command.py	34	def _setup_clean_project(project: Path) -> None:	CODE
LOW	tests/unit/test_audit_ci_command.py	65	def _setup_failing_project(project: Path) -> None:	STRING
LOW	tests/unit/install/test_pipeline_ownership_snapshot.py	127	def _set_dependencies(fixture: LocalInstall, dependencies: list[str \| dict[str, Any]]) -> None:	CODE
LOW	…unit/install/phases/test_resolve_ref_resolver_reuse.py	62	def _set_noninteractive_git_policy(monkeypatch) -> None:	CODE
LOW	tests/unit/integration/test_skill_integrator.py	32	def _setup_agents_orphan_cleanup(project_root: Path, skill_names: list[str]) -> None:	CODE
LOW	tests/unit/integration/test_scope_install_uninstall.py	28	def _set_home(monkeypatch, home: Path) -> None:	CODE
LOW	tests/unit/integration/test_scope_integration.py	25	def _set_home(monkeypatch, home: Path) -> None:	CODE
LOW	tests/unit/deps/test_download_strategies_phase3.py	1278	def _setup_host_info(self, host_mock: MagicMock) -> None:	CODE
LOW	tests/unit/deps/test_download_strategies_selection.py	1044	def _setup_host_info(self, host_mock: MagicMock) -> None:	CODE
LOW	tests/unit/compilation/test_compile_cli_surface.py	597	def _setup_project_dir(self) -> None:	CODE
LOW	tests/unit/compilation/test_compile_cli_phase3.py	600	def _setup_project_dir(self) -> None:	CODE
LOW	…ts/unit/policy/test_policy_serialization_properties.py	259	def _set_nested(data: dict[str, Any], path: tuple[str, ...], value: Any) -> None:	CODE
LOW	tests/integration/test_audit_silent_skip_e2e.py	64	def _setup_clean_project(project: Path, *, fetch_failure_default: str \| None = None) -> None:	CODE
LOW	tests/integration/release_homebrew_update_harness.py	51	def update_tap(workflow_path: Path, release_path: Path, tap_repo: Path) -> None:	CODE
LOW	tests/integration/test_remaining_modules_coverage.py	1643	def _setup_project(self, root: Path) -> None:	CODE
LOW	…ts/integration/test_primitive_target_covering_array.py	239	def _set_project_targets(project: LocalPackage, targets: tuple[str, ...]) -> None:	CODE
LOW	…itecture_linter/checks/transport_sparse_and_updates.py	527	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…/architecture_linter/checks/contracts_test_taxonomy.py	1929	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	scripts/architecture_linter/checks/tree_index.py	313	__all__ = [	CODE
LOW	scripts/architecture_linter/checks/python_semantics.py	264	__all__ = [	CODE
LOW	…architecture_linter/checks/mutation_hook_membership.py	213	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…itecture_linter/checks/install_deployment_analyzers.py	196	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…ripts/architecture_linter/checks/marketplace_legacy.py	566	__all__ = [	CODE
LOW	…architecture_linter/checks/transport_cache_identity.py	229	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…ure_linter/checks/marketplace_integration_analyzers.py	56	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…ts/architecture_linter/checks/registry_owner_guards.py	699	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…tecture_linter/checks/mutation_mcp_target_and_scope.py	753	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…pts/architecture_linter/checks/install_dry_run_plan.py	83	__all__ = ["_GUARD_DRY_RUN_PLAN", "check_prospective_dry_run_plan"]	CODE
LOW	…/architecture_linter/checks/agent_plugin_projection.py	406	__all__ = ["check_projection_boundary"]	CODE
LOW	…/architecture_linter/checks/transport_auth_platform.py	1724	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…ts/architecture_linter/checks/install_policy_intent.py	184	__all__ = ["EXTRA_RULES"]	CODE
LOW	…e_linter/checks/marketplace_component_and_admission.py	117	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…hitecture_linter/checks/marketplace_tag_and_version.py	448	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…_linter/checks/marketplace_package_and_registration.py	480	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	scripts/architecture_linter/checks/registry_legacy.py	577	__all__ = [	CODE
LOW	…ture_linter/checks/marketplace_catalog_and_contract.py	771	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…rchitecture_linter/checks/repository_cache_identity.py	721	__all__ = [	CODE
LOW	…hitecture_linter/checks/contracts_generation_footer.py	81	__all__ = ["check_generation_footer_authority"]	CODE
LOW	…/architecture_linter/checks/transport_revision_pins.py	131	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…s/architecture_linter/checks/mutation_hook_contract.py	884	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…tecture_linter/checks/transport_network_and_runtime.py	623	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…/architecture_linter/checks/registry_semantic_rules.py	924	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…itecture_linter/checks/marketplace_bundle_and_audit.py	387	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	scripts/architecture_linter/groups/mutation_writes.py	36	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	scripts/architecture_linter/groups/contracts_tests.py	18	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…architecture_linter/groups/marketplace_integrations.py	8	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…ipts/architecture_linter/groups/registry_delegation.py	20	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…ripts/architecture_linter/groups/install_deployment.py	5	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW	…ripts/architecture_linter/groups/transport_platform.py	51	__all__ = ["COLLECTORS", "RULES"]	CODE
LOW⚡	src/apm_cli/config.py	501	def set_copilot_cowork_skills_dir(path: str) -> None:	CODE
LOW	src/apm_cli/config.py	142	def set_auto_integrate(enabled: bool) -> None:	CODE
LOW	src/apm_cli/config.py	160	def set_temp_dir(path: str) -> None:	CODE
LOW	src/apm_cli/config.py	356	def set_allow_protocol_fallback(enabled: bool) -> None:	CODE
LOW	src/apm_cli/config.py	384	def set_prefer_ssh(enabled: bool) -> None:	CODE
LOW	src/apm_cli/config.py	549	def set_registry_url(name: str, url: str) -> None:	CODE
LOW	src/apm_cli/config.py	558	def set_registry_token(name: str, token: str) -> None:	CODE
LOW	src/apm_cli/config.py	617	def set_registry_default(name: str, is_default: bool) -> None:	CODE
LOW	src/apm_cli/config.py	693	def set_audit_on_install(mode: str) -> None:	CODE
98 more matches not shown…

AI Slop Vocabulary53 hits · 149 pts

Severity	File	Line	Snippet	Context
MEDIUM	apm.yml	10	# instead of auto-detecting whichever harness their machine signals.	COMMENT
MEDIUM	apm.yml	11	# Contributors on another harness opt in with `apm install --target <name>`.	COMMENT
MEDIUM	…docs_src_content_docs_reference_cli_install_md_c7.json	1	{"claim_id":"c7","claim_text":"--target accepts: copilot, claude, cursor, opencode, codex, gemini, windsurf, agent-skill	CODE
MEDIUM⚡	tests/unit/test_install_command.py	920	# v2 target resolution requires a harness signal (#1154).	COMMENT
MEDIUM	tests/unit/test_install_command.py	980	# v2 target resolution requires a harness signal (#1154).	COMMENT
MEDIUM⚡	tests/unit/test_view_command.py	727	# More robust: "info" should not be in the commands listing	COMMENT
LOW⚡	tests/unit/test_registry_operations_state.py	216	# Should not raise, just return empty	COMMENT
LOW⚡	tests/unit/test_registry_operations_phase3.py	216	# Should not raise, just return empty	COMMENT
MEDIUM⚡	tests/unit/test_generic_git_urls.py	816	"""Dict format remains the robust choice for ambiguous nested + virtual.	STRING
MEDIUM	tests/unit/core/test_error_renderer.py	13	# (a) "what APM saw" headline (e.g. 'no harness detected', 'multiple	STRING
MEDIUM⚡	tests/unit/integration/test_copilot_app_ws.py	28	# Server harness	COMMENT
MEDIUM	tests/unit/integration/test_dep_target_intersection.py	345	# Every merge-based harness APM ships, so the routing regression below is	COMMENT
MEDIUM	tests/unit/integration/test_dep_target_intersection.py	417	# double-activation risk), unlike every other harness pair. That	COMMENT
MEDIUM	tests/unit/integration/test_dep_target_intersection.py	456	# Each harness gets exactly its own file's command -- no leak, no dupes.	COMMENT
MEDIUM	tests/unit/integration/test_dep_target_intersection.py	489	# Only the active harness is installed, and it receives only its own file.	COMMENT
LOW	tests/unit/deps/test_apm_resolver_parallel.py	60	# All packages are pre-laid-out; just return the install path.	COMMENT
MEDIUM	tests/unit/deps/test_shared_clone_cache.py	364	# New paradigm: SharedCloneCache holds bare clones; consumers	COMMENT
MEDIUM	tests/unit/compilation/test_context_optimizer.py	528	# With coverage-first optimization, efficiency comparison is more nuanced	COMMENT
LOW⚡	tests/integration/test_integrators_validation_rules.py	1344	# Should not raise, just return silently	COMMENT
MEDIUM	tests/integration/test_plugin_skill_subset_pack_e2e.py	319	# so the assertion is robust against terminal-width line breaks.	COMMENT
MEDIUM	…gration/test_copilot_native_plugin_binary_lifecycle.py	277	# satisfies harness detection and writes project-local (tmp) config;	COMMENT
LOW⚡	tests/integration/test_copilot_app_targets_coverage.py	774	# some form of user support. Use an unknown name: should just return [].	COMMENT
MEDIUM	tests/integration/test_global_scope_e2e.py	42	# Mark the home dir as a copilot harness so install --global passes	COMMENT
MEDIUM	tests/integration/test_install_root_redirect_e2e.py	76	# integrated harness file all live in ``deploy``.	COMMENT
MEDIUM	tests/integration/test_hook_wipe_target_scope_e2e.py	308	# The now-undeclared harness (codex) must be untouched entirely: its	COMMENT
MEDIUM	tests/integration/test_hook_wipe_target_scope_e2e.py	320	# The currently-declared harness (claude) IS in scope: pkg-b's entry	COMMENT
MEDIUM	tests/integration/test_selective_install_mcp.py	129	# Mark project as a copilot harness so target detection succeeds	COMMENT
MEDIUM⚡	tests/integration/test_integrators_end_to_end.py	1425	# Without any harness signals, gate fails closed → empty list	COMMENT
MEDIUM	tests/integration/test_target_resolution_e2e.py	15	# - Exit code 2 for every target-resolution user error (no harness,	STRING
MEDIUM	tests/integration/test_compilation_coverage.py	512	# Create comprehensive .apm structure	COMMENT
MEDIUM⚡	tests/red_team/parser/test_toplevel_shape.py	41	# Top-levels that already degrade safely (control group -- must stay robust).	COMMENT
MEDIUM	…docs_src_content_docs_reference_cli_install_md_c7.json	1	{"claim_id":"c7","claim_text":"--target accepts: copilot, claude, cursor, opencode, codex, gemini, windsurf, agent-skill	CODE
MEDIUM	docs/package-lock.json	7812	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE
MEDIUM	scripts/test-dependency-integration.sh	4	# Used in CI pipeline for comprehensive dependency validation	COMMENT
MEDIUM	src/apm_cli/core/script_runner.py	292	# More robust approach: split by runtime commands to separate env vars from command	COMMENT
MEDIUM	src/apm_cli/core/errors.py	87	" apm install <pkg> --target claude # deploy to a specific harness\n"	CODE
MEDIUM	src/apm_cli/integration/mcp_integrator.py	490	# Pass through harness-specific extra keys for adapters to merge	COMMENT
MEDIUM	src/apm_cli/integration/mcp_integrator.py	568	# Pass through harness-specific extra keys for adapters to merge	COMMENT
MEDIUM	src/apm_cli/marketplace/resolver.py	363	# too, so the guard is robust even if a future upstream refactor lets	COMMENT
MEDIUM	src/apm_cli/runtime/manager.py	170	# Set up comprehensive GitHub token environment for all runtimes	COMMENT
LOW	src/apm_cli/primitives/models.py	201	# No conflict, just add the primitive	COMMENT
MEDIUM	src/apm_cli/adapters/client/copilot.py	434	# so secrets are not baked into the persisted config when the harness	COMMENT
MEDIUM	src/apm_cli/adapters/client/base.py	181	# Config keys that ``_extra`` passthrough must NEVER set on a rendered harness	COMMENT
MEDIUM	src/apm_cli/adapters/client/base.py	183	# plus harness-specific aliases that mirror a modeled field under a different	COMMENT
MEDIUM	src/apm_cli/deps/host_backends.py	212	# is safe and makes URL construction robust against partially	COMMENT
LOW	src/apm_cli/deps/dependency_graph.py	149	# If this is the first occurrence, just add it	COMMENT
MEDIUM⚡	src/apm_cli/commands/targets.py	61	# agent-skills is a meta-target (multi-harness fan-out), not a	COMMENT
MEDIUM⚡	src/apm_cli/commands/targets.py	62	# harness in itself. Excluded from the apm targets table; visible	COMMENT
MEDIUM⚡	src/apm_cli/commands/targets.py	66	# On ambiguous-harness, show all detected signals (the user ran	COMMENT
MEDIUM⚡	src/apm_cli/commands/targets.py	68	# On no-harness error, report empty active list.	COMMENT
MEDIUM	src/apm_cli/commands/uninstall/engine.py	1330	# Phase 2 rebuild loop below iterates -- so a harness dropped from	COMMENT
MEDIUM	src/apm_cli/commands/compile/cli.py	432	# "nothing declared" and compiling every harness.	COMMENT
MEDIUM	src/apm_cli/compilation/context_optimizer.py	410	"""Generate comprehensive compilation results for output formatting.	STRING

Redundant / Tautological Comments91 hits · 138 pts

Severity	File	Line	Snippet	Context
LOW	install.sh	1226	# Check if Python is available	COMMENT
LOW	install.sh	1329	# Check if apm is now available	COMMENT
LOW	install.sh	1486	# Check if we got a valid response (should contain tag_name)	COMMENT
LOW	tests/unit/test_selective_install.py	35	# Check if dep_str ends with "/<pkg>" to ensure path boundary matching	COMMENT
LOW	tests/unit/test_artifactory_support.py	1322	# Set limit to 0 MB so any archive is too large	COMMENT
LOW	tests/unit/test_env_variables.py	99	# Check if the input variable for the API key is present	COMMENT
LOW⚡	tests/unit/test_unpacker.py	652	# Set external_attr to Unix symlink mode (S_IFLNK = 0o120000)	COMMENT
LOW⚡	tests/unit/cache/test_git_cache.py	306	# Set mtime to 60 days ago	COMMENT
LOW	tests/unit/primitives/test_primitives.py	611	# Write files	STRING
LOW	tests/unit/compilation/test_coverage_guarantees.py	159	# Check if instruction applies to this file	COMMENT
LOW	tests/unit/compilation/test_coverage_guarantees.py	375	# Check if this directory has any files that match instruction patterns	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	188	# Check if copilot is in PATH	COMMENT
LOW⚡	tests/integration/test_audit_scan_hermetic.py	267	# Write file with strippable content	COMMENT
LOW⚡	tests/integration/test_wave2_commands_coverage.py	810	# Set last_compile to now so the first event also triggers debounce	COMMENT
LOW	…s/integration/test_virtual_package_orphan_detection.py	81	# Check if level2 has apm.yml or .apm (GitHub 2-level structure)	COMMENT
LOW	tests/integration/test_mcp_registry_e2e.py	52	# Check if server has packages (healthy) vs remote-only (unhealthy)	COMMENT
LOW	tests/integration/test_mcp_registry_e2e.py	410	# Check if Copilot configuration was created	COMMENT
LOW⚡	tests/integration/marketplace/test_init_integration.py	31	# Write files into the isolated filesystem's CWD	COMMENT
LOW	scripts/test-auth-acceptance.sh	302	# Check if a required env var is set; skip scenario if not	COMMENT
LOW	scripts/common.sh	14	# Check if current branch is a feature branch	COMMENT
LOW	scripts/common.sh	53	# Check if a file exists and report	COMMENT
LOW	scripts/common.sh	66	# Check if a directory exists and has files	COMMENT
LOW	scripts/build-binary.sh	52	# Check if PyInstaller is available via uv	COMMENT
LOW	scripts/build-binary.sh	58	# Check if UPX is available (optional, for compression)	COMMENT
LOW	scripts/build-binary.sh	79	# Check if build was successful (onedir mode creates dist/apm/apm)	COMMENT
LOW	scripts/setup-plan.sh	23	# Check if on feature branch	COMMENT
LOW	scripts/check-task-prerequisites.sh	22	# Check if on feature branch	COMMENT
LOW	scripts/check-task-prerequisites.sh	25	# Check if feature directory exists	COMMENT
LOW	scripts/update-agent-context.sh	49	# Check if this is the SDD repo itself	COMMENT
LOW	scripts/update-agent-context.sh	109	# Check if new tech already exists	COMMENT
LOW	scripts/get-feature-paths.sh	14	# Check if on feature branch	COMMENT
LOW	scripts/test-integration.sh	131	# Check if we're in CI with pre-built artifacts (binary exists in ./dist/)	COMMENT
LOW	scripts/test-integration.sh	286	# Check if uv is available, otherwise use pip	COMMENT
LOW	scripts/test-integration.sh	290	# Check if .venv already exists (CI mode where workflow already ran uv sync)	COMMENT
LOW	scripts/create-new-feature.sh	92	# Output results for the LLM to use (legacy key: value format)	COMMENT
LOW	scripts/runtime/setup-llm.sh	38	# Check if Python is available	COMMENT
LOW	scripts/runtime/setup-common.sh	113	# Check if shell RC already contains the runtime directory	COMMENT
LOW	.github/workflows/build-release.yml	761	# Check if tag matches stable semver pattern (e.g., v1.2.3, v0.2.0)	COMMENT
LOW	src/apm_cli/core/script_runner.py	54	# Check if this is a virtual package (before loading config)	COMMENT
LOW	src/apm_cli/core/script_runner.py	183	# Check if this command needs subprocess execution (has compiled content)	COMMENT
LOW	src/apm_cli/core/script_runner.py	257	# Check if this is a runtime command before transformation	COMMENT
LOW	src/apm_cli/core/script_runner.py	597	# Check if this is a qualified path (contains /)	COMMENT
LOW	src/apm_cli/core/script_runner.py	673	# Check if owner directory exists	COMMENT
LOW	src/apm_cli/core/script_runner.py	715	# Check if owner is in the path	COMMENT
LOW	src/apm_cli/core/script_runner.py	719	# Check if prompt name matches	COMMENT
LOW	src/apm_cli/core/script_runner.py	828	# Check if already installed	COMMENT
LOW	src/apm_cli/core/conflict_detector.py	44	# Check if any existing server has the same UUID	COMMENT
LOW⚡	src/apm_cli/core/conflict_detector.py	67	# Check if any existing server resolves to the same canonical name	COMMENT
LOW	src/apm_cli/core/conflict_detector.py	166	# Check if any existing server resolves to the same canonical name	COMMENT
LOW	src/apm_cli/integration/cleanup.py	137	# Check if directory is empty -- safe to rmdir.	COMMENT
LOW	src/apm_cli/integration/cleanup.py	188	# Check if it was in the stale set (already processed	COMMENT
LOW	src/apm_cli/integration/skill_integrator.py	287	# Check if package type allows skill installation (T4 routing)	COMMENT
LOW	src/apm_cli/integration/skill_integrator.py	826	# Check if this is a user-authored skill (not managed by APM)	COMMENT
LOW	src/apm_cli/integration/skill_integrator.py	1527	# Check if this is a native Skill (already has SKILL.md at root)	COMMENT
LOW	src/apm_cli/output/formatters.py	555	# Check if root placement was used (indicates coverage fallback)	COMMENT
LOW	src/apm_cli/output/formatters.py	968	# Check if constitution is included	COMMENT
LOW	src/apm_cli/models/validation.py	365	# Check if directory exists	COMMENT
LOW	src/apm_cli/models/validation.py	912	# Check if .apm directory has any content	COMMENT
LOW	src/apm_cli/models/validation.py	919	# Check if directory has any markdown files	COMMENT
LOW	src/apm_cli/models/dependency/types.py	65	# Check if it looks like a commit SHA (40 hex chars or 7+ hex chars)	COMMENT
31 more matches not shown…

Modern AI Meta-Vocabulary45 hits · 132 pts

Severity	File	Line	Snippet	Context
MEDIUM	.apm/docs-index.yml	3	# This file is the LOAD-BEARING ARTIFACT for the docs-sync agentic	COMMENT
MEDIUM	.apm/agents/agentic-workflows.agent.md	33	- Configuration: https://github.com/github/gh-aw/blob/main/.github/aw/github-agentic-workflows.md	CODE
MEDIUM⚡	.apm/agents/agentic-workflows.agent.md	55	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/create-agentic-workflow.md	CODE
MEDIUM⚡	.apm/agents/agentic-workflows.agent.md	65	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/update-agentic-workflow.md	CODE
MEDIUM⚡	.apm/agents/agentic-workflows.agent.md	75	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/debug-agentic-workflow.md	CODE
MEDIUM⚡	.apm/agents/agentic-workflows.agent.md	85	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/upgrade-agentic-workflows.md	CODE
MEDIUM	.apm/agents/agentic-workflows.agent.md	105	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/create-shared-agentic-workflow.md	CODE
MEDIUM	.apm/agents/agentic-workflows.agent.md	147	# Initialize repository for agentic workflows	COMMENT
MEDIUM	.apm/agents/agentic-workflows.agent.md	196	- Always reference the instructions file at https://github.com/github/gh-aw/blob/main/.github/aw/github-agentic-workflow	CODE
MEDIUM	tests/unit/test_plugin_exporter_schema.py	26	# don't duplicate the apm.yml + lockfile + .apm/ scaffolding.	COMMENT
MEDIUM	tests/unit/install/test_architecture_invariants.py	157	PR #999 (Ruff guardrails) raised 1980 -> 2100 for noqa directives	STRING
MEDIUM⚡	tests/unit/install/test_lsp_integration.py	210	# Basic orchestration	COMMENT
MEDIUM	…s/unit/integration/test_cursor_hook_native_contract.py	859	# proves the guarantee holds through that real orchestration path, and that	COMMENT
MEDIUM⚡	tests/unit/marketplace/test_init_template.py	83	# render_marketplace_block (apm.yml marketplace: block scaffold)	COMMENT
MEDIUM⚡	tests/unit/registry/test_resolver_e2e_http.py	39	# Test HTTP server scaffolding	COMMENT
MEDIUM	tests/unit/commands/test_plugin_init_command.py	134	# Legacy Claude scaffold does not include Agent Plugins $schema or extensions	COMMENT
MEDIUM	tests/unit/commands/test_marketplace_init.py	74	# Single collapsed success line for scaffold-and-inject path.	COMMENT
MEDIUM	…s/integration/test_install_compile_claude_dedup_e2e.py	120	# CLAUDE.md to keep Claude's context window lean.	STRING
MEDIUM⚡	tests/integration/test_marketplace_adapters_coverage.py	292	# 2. marketplace/audit.py -- pure classification + orchestration	COMMENT
MEDIUM⚡	tests/integration/test_golden_scenario_e2e.py	309	# Step 6: Execute agentic workflows (equivalent to: apm run start --param name="<YourGitHubHandle>")	STRING
MEDIUM	tests/integration/test_golden_scenario_e2e.py	16	# 5. Install MCP dependencies and execute agentic workflows (*.prompt.md files)	STRING
MEDIUM⚡	…gents/skills/pr-description-skill/scripts/run_evals.py	244	# orchestration	COMMENT
MEDIUM	docs/src/content/docs/enterprise/lifecycle-scripts.md	317	apm lifecycle init # scaffold lifecycle: block in apm.yml	CODE
MEDIUM	docs/src/content/docs/contributing/development-guide.md	302	### Architecture guardrails	COMMENT
MEDIUM	…src/content/docs/integrations/runtime-compatibility.md	19	\| [Google Gemini CLI](https://github.com/google-gemini/gemini-cli) \| Google's Gemini CLI \| Gemini models, sandboxed	CODE
MEDIUM	scripts/test-release-validation.sh	291	# surface Copilot reads directly). Validate that compiled guardrails	COMMENT
MEDIUM	…ripts/architecture_linter/checks/marketplace_legacy.py	229	# B9: plugin scaffolding shares the preferred-format seam and canonical reload.	COMMENT
MEDIUM⚡	packages/pr-description-skill/scripts/run_evals.py	244	# orchestration	COMMENT
MEDIUM	.github/workflows/agentics-maintenance.yml	24	# This file defines the generated agentic maintenance workflow for this repository.	COMMENT
MEDIUM	.github/workflows/shared/apm.md	3	# Install Microsoft APM packages in your agentic workflow.	COMMENT
MEDIUM	.github/agents/agentic-workflows.agent.md	33	- Configuration: https://github.com/github/gh-aw/blob/main/.github/aw/github-agentic-workflows.md	CODE
MEDIUM⚡	.github/agents/agentic-workflows.agent.md	55	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/create-agentic-workflow.md	CODE
MEDIUM⚡	.github/agents/agentic-workflows.agent.md	65	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/update-agentic-workflow.md	CODE
MEDIUM⚡	.github/agents/agentic-workflows.agent.md	75	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/debug-agentic-workflow.md	CODE
MEDIUM⚡	.github/agents/agentic-workflows.agent.md	85	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/upgrade-agentic-workflows.md	CODE
MEDIUM	.github/agents/agentic-workflows.agent.md	105	Prompt file: https://github.com/github/gh-aw/blob/main/.github/aw/create-shared-agentic-workflow.md	CODE
MEDIUM	.github/agents/agentic-workflows.agent.md	147	# Initialize repository for agentic workflows	COMMENT
MEDIUM	.github/agents/agentic-workflows.agent.md	196	- Always reference the instructions file at https://github.com/github/gh-aw/blob/main/.github/aw/github-agentic-workflow	CODE
MEDIUM	src/apm_cli/integration/targets.py	754	# Antigravity CLI (agy) -- Google's Gemini-derived agentic CLI.	COMMENT
MEDIUM⚡	src/apm_cli/marketplace/audit.py	212	# Fetchers and orchestration	COMMENT
MEDIUM	src/apm_cli/deps/github_downloader.py	257	# Artifactory orchestration is encapsulated in a dedicated facade	COMMENT
MEDIUM⚡	src/apm_cli/deps/artifactory_orchestrator.py	136	# Download orchestration	COMMENT
MEDIUM	src/apm_cli/commands/_helpers.py	656	# Preserve legacy Claude scaffold byte-for-byte	COMMENT
MEDIUM	src/apm_cli/commands/_helpers.py	665	# Agent Plugins v1 canonical scaffold	COMMENT
MEDIUM	src/apm_cli/commands/_helpers.py	718	# Issue #887: scaffold with explicit consent for local content	COMMENT

Cross-Language Confusion25 hits · 131 pts

Severity	File	Line	Snippet	Context
HIGH⚡	tests/test_lockfile.py	504	"""Lockfiles with mcp_configs: (null) should get an empty dict, not raise TypeError."""	STRING
HIGH⚡	tests/unit/test_intellij_mcp.py	199	self.mcp_json.write_text('{"servers": null}', encoding="utf-8")	CODE
HIGH	tests/unit/test_windows_compat_gate_workflow.py	180	assert checkout["with"]["ref"] == "${{ github.event.pull_request.head.sha \|\| github.sha }}"	CODE
HIGH⚡	tests/unit/test_ado_path_structure.py	594	# Must use path_parts[0], not org_name (which was undefined)	COMMENT
HIGH⚡	tests/unit/test_runtime_detection.py	42	"dev": "npm run build && copilot -p prompt.md",	CODE
HIGH⚡	tests/unit/test_runtime_detection.py	43	"ai": "export MODEL=gpt-4 && llm prompt.md",	CODE
HIGH	tests/unit/test_windows_installer_launchers.py	39	assert "command -v apm && apm --version" in test_script	CODE
HIGH	tests/unit/test_windows_native_symlink_workflow.py	16	EXACT_HEAD = "${{ github.event.pull_request.head.sha \|\| github.sha }}"	CODE
HIGH	tests/unit/test_transport_selection.py	536	The downloader's locked-down git_env sets GIT_CONFIG_GLOBAL=/dev/null,	STRING
HIGH	tests/unit/test_ado_live_workflow_contract.py	82	"${{ inputs.ado_pat_e2e && inputs.ado_repo \|\| '' }}"	CODE
HIGH	tests/unit/test_ado_live_workflow_contract.py	85	"${{ inputs.ado_pat_e2e && secrets.AUTH_TEST_ADO_APM_PAT \|\| '' }}"	CODE
HIGH⚡	tests/unit/install/test_mcp_warnings.py	271	warn_shell_metachars({"RUN": "true && bad"}, logger)	CODE
HIGH⚡	tests/unit/install/test_mcp_warnings.py	276	warn_shell_metachars({"FALLBACK": "a \|\| b"}, logger)	CODE
HIGH	tests/unit/install/test_drift.py	403	_write(project / rel, b'{"hooks":{"PreToolUse":null}}')	CODE
HIGH⚡	tests/integration/test_golden_scenario_e2e.py	157	4. cd my-ai-native-project && apm compile	STRING
HIGH	…gration/test_copilot_native_plugin_binary_lifecycle.py	87	" if (marker && message.method) fs.appendFileSync(marker, message.method + '\\n');\n"	CODE
HIGH	tests/integration/test_guardrailing_hero_e2e.py	5	1. apm init my-project && cd my-project	STRING
HIGH	…ntegration/test_architecture_unix_install_ownership.py	68	if [ -d "$_apm_lib_dir" ] && [ "$(ls -A "$_apm_lib_dir" 2>/dev/null)" ]; then	CODE
HIGH	…ts/integration/test_unix_installer_path_integration.py	90	" shift \|\| true\n"	CODE
HIGH	…ts/integration/test_unix_installer_path_integration.py	375	[shell, *startup_args, "command -v apm >/dev/null && apm --version"],	CODE
HIGH	…ts/integration/test_unix_installer_path_integration.py	483	[fish, "-ic", "command -v apm >/dev/null && apm --version"],	CODE
HIGH	…ts/integration/test_unix_installer_path_integration.py	598	[shell, "-lc", 'test "$APM_SENTINEL" = kept && apm --version'],	CODE
HIGH	…itecture_linter/checks/transport_sparse_and_updates.py	315	nonempty_guard = 'if [ -d "$_apm_lib_dir" ] && [ "$(ls -A "$_apm_lib_dir" 2>/dev/null)" ]; then'	CODE
HIGH	src/apm_cli/marketplace/builder.py	363	unchanged, skipped}]}, bundle: null}	STRING
HIGH	src/apm_cli/deps/bare_cache.py	143	- Tier 1 (SHA refs): ``git init --bare && git remote add	STRING

Hallucination Indicators9 hits · 100 pts

Severity	File	Line	Snippet	Context
CRITICAL	tests/unit/test_plugin_parser.py	26	from apm_cli.utils.helpers import find_plugin_json	CODE
CRITICAL	tests/unit/install/phases/test_finalize_user_compile.py	93	assert ctx.logger.info.call_args.kwargs.get("symbol") == "info"	CODE
CRITICAL⚡	tests/integration/test_plugin_e2e.py	32	from apm_cli.utils.helpers import find_plugin_json	CODE
CRITICAL⚡	src/apm_cli/install/primitive_classification.py	120	from apm_cli.utils.helpers import find_plugin_json	CODE
CRITICAL	src/apm_cli/install/drift.py	398	from apm_cli.utils.helpers import find_plugin_json	CODE
CRITICAL	src/apm_cli/install/validation.py	205	from apm_cli.utils.helpers import find_plugin_json	CODE
CRITICAL	src/apm_cli/install/validation.py	257	from apm_cli.utils.helpers import find_plugin_json	CODE
CRITICAL	src/apm_cli/install/phases/local_content.py	255	from apm_cli.utils.helpers import find_plugin_json	CODE
CRITICAL	src/apm_cli/marketplace/version_check.py	167	from apm_cli.utils.helpers import find_plugin_json	CODE

Verbosity Indicators67 hits · 95 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/integration/test_deps_update_e2e.py	128	# Step 1: install pinned to an older commit SHA.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	142	# Step 2: bump apm.yml to point at main.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	145	# Step 3: run `apm deps update` with no positional args.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	151	# Step 4: lockfile SHA must differ from old.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	161	# Step 5: deployed files must still exist (re-integrated).	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	280	# Step 2: bump the user manifest to main.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	283	# Step 3: run `apm deps update -g` from a directory with no project.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	289	# Step 4: ~/.apm/apm.lock.yaml must reflect the new SHA.	COMMENT
LOW⚡	tests/integration/test_deps_update_e2e.py	299	# Step 5: scope was respected -- no project lockfile in cwd.	COMMENT
LOW	tests/integration/test_deps_update_e2e.py	268	# Step 1: install -g to populate ~/.apm/apm.lock.yaml.	COMMENT
LOW⚡	tests/integration/test_producer_journey.py	101	# Step 1: consumer init	COMMENT
LOW⚡	tests/integration/test_producer_journey.py	106	# Step 2: bolt on a marketplace	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	162	# Step 1: Setup Copilot runtime (equivalent to: apm runtime setup copilot)	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	196	# Step 2: Initialize project (equivalent to: apm init my-ai-native-project)	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	568	# Step 1: Setup LLM runtime (equivalent to: apm runtime setup llm)	COMMENT
LOW	tests/integration/test_golden_scenario_e2e.py	584	# Step 2: Use existing project or create new one	COMMENT
LOW⚡	tests/integration/test_golden_scenario_e2e.py	309	# Step 6: Execute agentic workflows (equivalent to: apm run start --param name="<YourGitHubHandle>")	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	410	# Step 1: Setup Codex runtime	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	491	# Step 3: Compile Agent Primitives	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	496	# Step 4: Install dependencies	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	642	# Step 3: Compile Agent Primitives	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	647	# Step 4: Install dependencies	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	716	# Step 1: Setup Gemini runtime (npm install -g @google/gemini-cli)	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	802	# Step 3: Compile Agent Primitives	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	807	# Step 4: Install dependencies (targets gemini since .gemini/ exists)	STRING
LOW⚡	tests/integration/test_golden_scenario_e2e.py	815	# Step 5: Run with Gemini CLI	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	279	# Step 4: Compile Agent Primitives for any coding agent (equivalent to: apm compile)	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	293	# Step 5: Install MCP dependencies (equivalent to: apm install)	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	433	# Step 2: Use existing project or create new one	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	507	# Step 5: Run with Codex CLI (equivalent to: apm run debug --param name="<YourGitHubHandle>")	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	658	# Step 5: Run with LLM runtime (equivalent to: apm run llm --param name="<YourGitHubHandle>")	STRING
LOW	tests/integration/test_golden_scenario_e2e.py	743	# Step 2: Create test project	STRING
LOW	tests/integration/test_guardrailing_hero_e2e.py	93	# Step 1: apm init my-project	COMMENT
LOW	tests/integration/test_guardrailing_hero_e2e.py	108	# Step 2: apm install microsoft/apm-sample-package	COMMENT
LOW	tests/integration/test_guardrailing_hero_e2e.py	126	# Step 3: install a virtual instruction from this SSO-authorized repository	COMMENT
LOW	tests/integration/test_guardrailing_hero_e2e.py	150	# Step 4: apm compile	COMMENT
LOW	tests/integration/test_guardrailing_hero_e2e.py	188	# Step 5: apm run design-review	COMMENT
LOW⚡	tests/integration/test_agent_skills_target.py	826	# Step 1: Legacy install so the lockfile records .github/skills/.	COMMENT
LOW⚡	tests/integration/test_agent_skills_target.py	833	# Step 2: Hand-edit the legacy file so its content diverges from what	COMMENT
LOW⚡	tests/integration/test_agent_skills_target.py	837	# Step 3: Converged install — integrate writes the canonical content	COMMENT
LOW⚡	tests/integration/test_mcp_registry_e2e.py	218	# Step 1: Set up Codex runtime	COMMENT
LOW⚡	tests/integration/test_mcp_registry_e2e.py	227	# Step 2: Create test project with MCP dependencies	COMMENT
LOW	tests/integration/test_mcp_registry_e2e.py	271	# Step 3: Test installation with environment variable prompting	COMMENT
LOW	tests/integration/test_mcp_registry_e2e.py	287	# Step 4: Verify Codex configuration was updated	COMMENT
LOW	scripts/test-release-validation.sh	221	# Step 1: apm init my-project	COMMENT
LOW	scripts/test-release-validation.sh	243	# Step 2: apm install microsoft/apm-sample-package	COMMENT
LOW	scripts/test-release-validation.sh	259	# Step 3: apm install github/awesome-copilot/skills/review-and-refactor	COMMENT
LOW	scripts/test-release-validation.sh	275	# Step 4: apm compile	COMMENT
LOW	scripts/test-release-validation.sh	303	# Step 5: apm run design-review (from installed package)	COMMENT
LOW	src/apm_cli/cache/url_normalize.py	65	# Step 2: Convert SCP-like to ssh:// form	COMMENT
LOW	src/apm_cli/cache/url_normalize.py	103	# Step 5: Strip default ports	COMMENT
LOW	src/apm_cli/cache/url_normalize.py	115	# Step 1: Strip trailing slash and one trailing .git suffix from path.	COMMENT
LOW⚡	src/apm_cli/integration/mcp_integrator_install.py	720	# Step 1: Get all installed runtimes on the system	COMMENT
LOW⚡	src/apm_cli/integration/mcp_integrator_install.py	725	# Step 2: Get runtimes referenced in apm.yml scripts	COMMENT
LOW⚡	src/apm_cli/integration/mcp_integrator_install.py	730	# Step 3: Target runtimes BOTH installed AND referenced in scripts	COMMENT
LOW⚡	src/apm_cli/deps/bare_cache.py	458	# Step 1: check first -- no network if SHA already present.	COMMENT
LOW⚡	src/apm_cli/deps/bare_cache.py	465	# Step 2: shallow fetch by full SHA (only for full 40-char SHAs).	COMMENT
LOW⚡	src/apm_cli/deps/bare_cache.py	508	# Step 3: broaden shallow -- fetch all refs without a SHA argument.	COMMENT
LOW⚡	src/apm_cli/commands/uninstall/cli.py	511	# Step 5: Capture pre-uninstall MCP state (lockfile already read above)	COMMENT
LOW⚡	src/apm_cli/commands/uninstall/cli.py	516	# Step 8: Collect deployed files for removed packages (before lockfile mutation)	COMMENT
7 more matches not shown…

Magic Placeholder Names14 hits · 95 pts

Severity	File	Line	Snippet	Context
HIGH	tests/unit/test_env_variables.py	59	{"description": "YOUR_API_KEY", "name": "AGENTQL_API_KEY"}	CODE
HIGH	tests/unit/test_runtime_args.py	35	"value_hint": "<YOUR_API_KEY>",	CODE
HIGH	tests/unit/test_runtime_args.py	35	"value_hint": "<YOUR_API_KEY>",	CODE
HIGH⚡	tests/unit/test_runtime_args.py	58	self.assertEqual(server_config["args"][2], "<YOUR_API_KEY>")	CODE
HIGH⚡	tests/unit/test_runtime_args.py	58	self.assertEqual(server_config["args"][2], "<YOUR_API_KEY>")	CODE
HIGH⚡	tests/unit/test_runtime_args.py	86	"value": "<YOUR_API_KEY>",	CODE
HIGH⚡	tests/unit/test_runtime_args.py	86	"value": "<YOUR_API_KEY>",	CODE
HIGH⚡	tests/unit/test_runtime_args.py	87	"default": "<YOUR_API_KEY>",	CODE
HIGH⚡	tests/unit/test_runtime_args.py	87	"default": "<YOUR_API_KEY>",	CODE
HIGH⚡	tests/unit/test_runtime_args.py	89	"value_hint": "<YOUR_API_KEY>",	CODE
HIGH⚡	tests/unit/test_runtime_args.py	89	"value_hint": "<YOUR_API_KEY>",	CODE
HIGH⚡	tests/unit/test_runtime_args.py	122	self.assertEqual(server_config["args"][2], "<YOUR_API_KEY>")	CODE
HIGH⚡	tests/unit/test_runtime_args.py	122	self.assertEqual(server_config["args"][2], "<YOUR_API_KEY>")	CODE
HIGH	…src/content/docs/integrations/runtime-compatibility.md	149	export GOOGLE_API_KEY=your_api_key	CODE

AI Structural Patterns57 hits · 38 pts

Severity	File	Line	Context
LOW	tests/unit/test_mcp_integrator_overlay.py	56	CODE
LOW	tests/unit/test_outdated_phase3w5.py	28	CODE
LOW	tests/unit/test_triage_fetch_queue.py	33	CODE
LOW	tests/unit/test_output_formatters_rendering.py	124	CODE
LOW	tests/unit/test_unix_installer_checksums.py	28	CODE
LOW	tests/unit/test_plugin_exporter.py	102	CODE
LOW	tests/unit/test_mcp_integrator_phase3w4.py	56	CODE
LOW	tests/unit/test_outdated_marketplace_detection.py	28	CODE
LOW	tests/unit/install/test_sources_phase3.py	53	CODE
LOW	tests/unit/install/test_sources_materialisation.py	54	CODE
LOW	tests/unit/integration/test_skill_integrator.py	330	CODE
LOW	tests/unit/integration/test_skill_integrator.py	1007	CODE
LOW	tests/unit/marketplace/test_builder_json.py	19	CODE
LOW	tests/unit/deps/test_download_strategies_phase3.py	107	CODE
LOW	tests/unit/deps/test_download_strategies_selection.py	111	CODE
LOW	tests/unit/commands/test_deps_cli_phase3w4.py	47	CODE
LOW	tests/unit/commands/test_deps_cli_branch_coverage.py	47	CODE
LOW	tests/integration/test_ado_e2e.py	61	CODE
LOW	…sts/integration/test_install_services_orchestration.py	118	CODE
LOW	tests/integration/test_install_services_phase3w5.py	118	CODE
LOW	tests/integration/test_download_strategies_selection.py	26	CODE
LOW	tests/integration/test_deps_resolver_resolution.py	35	CODE
LOW	…ts/integration/test_mcp_integrator_characterisation.py	13	CODE
LOW	tests/integration/test_wave4_pure_logic_coverage.py	59	CODE
LOW	tests/integration/test_wave5_e2e_coverage.py	29	CODE
LOW	tests/integration/test_download_strategies_phase3w5.py	24	CODE
LOW	tests/integration/test_download_copilot_end_to_end.py	103	CODE
LOW	src/apm_cli/install/services.py	207	CODE
LOW	src/apm_cli/install/services.py	796	CODE
LOW	src/apm_cli/install/manifest_reconcile.py	247	CODE
LOW	src/apm_cli/install/manifest_reconcile.py	540	CODE
LOW	src/apm_cli/install/pipeline.py	371	CODE
LOW	src/apm_cli/install/lsp/integration.py	245	CODE
LOW	src/apm_cli/install/mcp/integration.py	117	CODE
LOW	src/apm_cli/install/helpers/ref_reuse.py	324	CODE
LOW	src/apm_cli/core/target_catalog.py	30	CODE
LOW	src/apm_cli/integration/hook_integrator.py	1657	CODE
LOW	src/apm_cli/integration/skill_transformer.py	34	CODE
LOW	src/apm_cli/integration/lsp_integrator.py	300	CODE
LOW	src/apm_cli/integration/lsp_integrator.py	771	CODE
LOW	src/apm_cli/integration/mcp_integrator_install.py	1084	CODE
LOW	src/apm_cli/integration/canvas_integrator.py	152	CODE
LOW	src/apm_cli/integration/mcp_integrator.py	1463	CODE
LOW	src/apm_cli/integration/skill_integrator.py	748	CODE
LOW	src/apm_cli/integration/skill_integrator.py	906	CODE
LOW	src/apm_cli/integration/skill_integrator.py	1005	CODE
LOW	src/apm_cli/integration/skill_integrator.py	1258	CODE
LOW	src/apm_cli/integration/skill_integrator.py	1397	CODE
LOW	src/apm_cli/marketplace/tag_pattern.py	101	CODE
LOW	src/apm_cli/marketplace/version_resolver.py	49	CODE
LOW	src/apm_cli/marketplace/ref_resolver.py	215	CODE
LOW	src/apm_cli/models/apm_package.py	622	CODE
LOW	src/apm_cli/models/dependency/identity.py	184	CODE
LOW	src/apm_cli/deps/apm_resolver.py	97	CODE
LOW	src/apm_cli/commands/install.py	255	CODE
LOW	src/apm_cli/commands/install.py	548	CODE
LOW	src/apm_cli/policy/policy_checks.py	1182	CODE

Fake / Example Data36 hits · 34 pts

Severity	File	Line	Snippet	Context
LOW	pyproject.toml	13	{name = "Daniel Meppiel", email = "user@example.com"}	CODE
LOW	tests/test_codex_empty_string_and_defaults.py	254	"LITERAL_EMAIL": "user@example.com",	CODE
LOW	tests/test_codex_empty_string_and_defaults.py	273	assert env_block["LITERAL_EMAIL"] == "user@example.com"	CODE
LOW	tests/unit/test_gemini_mcp.py	407	"LITERAL_EMAIL": "user@example.com",	CODE
LOW	tests/unit/test_gemini_mcp.py	425	self.assertEqual(env_block["LITERAL_EMAIL"], "user@example.com")	CODE
LOW⚡	tests/unit/test_plugin_parser.py	909	"author": {"name": "Foo Bar", "email": "foo@bar.com"},	CODE
LOW	tests/unit/test_cursor_mcp.py	432	"LITERAL_EMAIL": "user@example.com",	CODE
LOW	tests/unit/test_cursor_mcp.py	450	self.assertEqual(env_block["LITERAL_EMAIL"], "user@example.com")	CODE
LOW⚡	tests/unit/test_plugin_synthesis.py	32	"author": "Jane Doe",	CODE
LOW⚡	tests/unit/test_plugin_synthesis.py	42	assert result["author"] == {"name": "Jane Doe"}	CODE
LOW⚡	tests/unit/test_plugin_synthesis.py	248	"name": "Jane Doe",	CODE
LOW⚡	tests/unit/test_plugin_synthesis.py	258	"name": "Jane Doe",	CODE
LOW⚡	tests/unit/test_plugin_synthesis.py	267	{"name": "test", "version": "1.0.0", "author": {"name": "Jane Doe"}},	CODE
LOW⚡	tests/unit/test_plugin_synthesis.py	272	assert result["author"] == {"name": "Jane Doe"}	CODE
LOW	tests/unit/test_plugin_synthesis.py	162	"author": "Acme Corp",	CODE
LOW⚡	tests/unit/test_plugin_exporter_schema.py	100	"name": "Acme Inc",	CODE
LOW⚡	tests/unit/core/test_plugin_manifest.py	138	apm = _minimal_apm_yml(tmp_path, author="Jane Doe")	CODE
LOW⚡	tests/unit/core/test_plugin_manifest.py	143	assert manifest["author"] == {"name": "Jane Doe"}	CODE
LOW	tests/unit/marketplace/test_yml_schema.py	94	assert result.owner.name == "Acme Corp"	CODE
LOW⚡	tests/unit/marketplace/test_marketplace_models.py	545	data = {"name": "Test", "owner": "John Doe", "plugins": []}	CODE
LOW⚡	tests/unit/marketplace/test_marketplace_models.py	547	assert manifest.owner_name == "John Doe"	CODE
LOW	tests/unit/compilation/test_link_resolver.py	743	(compiled_dir / "AGENTS.md").write_text("placeholder", encoding="utf-8")	CODE
LOW	tests/unit/compilation/test_link_resolver.py	777	source_file.write_text("placeholder", encoding="utf-8")	CODE
LOW	tests/unit/compilation/test_link_resolver.py	806	source_file.write_text("placeholder", encoding="utf-8")	CODE
LOW	tests/unit/compilation/test_link_resolver.py	830	source_file.write_text("placeholder", encoding="utf-8")	CODE
LOW⚡	tests/integration/test_yml_schema_validation.py	87	assert _parse_author(" Jane Doe ", 1) == {"name": "Jane Doe"}	STRING
LOW	tests/integration/test_bare_cache_integration.py	51	_git(src, "config", "user.email", "test@test.com")	CODE
LOW	tests/integration/test_bare_cache_integration.py	124	_git(src, "config", "user.email", "test@test.com")	CODE
LOW⚡	tests/integration/test_remaining_modules_coverage.py	408	assert cfg.packages[0].author == {"name": "Jane Doe"}	CODE
LOW	tests/integration/test_remaining_modules_coverage.py	427	"name": "Jane Doe",	CODE
LOW	tests/integration/test_remaining_modules_coverage.py	482	with pytest.raises(MarketplaceYmlError, match="placeholder"):	CODE
LOW⚡	tests/integration/test_remaining_modules_coverage.py	404	author: "Jane Doe"	STRING
LOW⚡	…/integration/test_architecture_owner_rule_mutations.py	629	new="structural_errors: tuple[str, ...] = ('placeholder',)",	CODE
LOW	tests/integration/test_integrators_hooks_phase3c.py	294	mock_auth.resolve_for_dep.return_value = MagicMock(token="fake-token")	CODE
LOW	tests/integration/test_integrators_hooks_execution.py	294	mock_auth.resolve_for_dep.return_value = MagicMock(token="fake-token")	CODE
LOW	docs/src/content/docs/producer/pack-a-bundle.md	93	The `author` field accepts a plain string (`"Jane Doe"` maps to `{name: "Jane Doe"}`) or a	CODE

Example Usage Blocks2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…s/docs-corpus-audit/scripts/scan-cross-corpus-drift.sh	13	# Usage:	COMMENT
LOW	…s/docs-corpus-audit/scripts/scan-cross-corpus-drift.sh	13	# Usage:	COMMENT

Dead Code1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/integration/test_git_cache_hermetic.py	915		CODE

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	tests/unit/scripts/test_architecture_runner.py	166	def helper(x):	CODE
LOW	src/apm_cli/core/experimental.py	12	def my_function():	STRING

Maintenance and Governance Review

Risk Review · v3

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings