🪄 Data Formulator is an interactive AI-powered data analysis system makes it easy to connect, explore and visualize data.
This report summarizes scanner evidence for microsoft/data-formulator, a Python project with 17,552 GitHub stars. SynthScan examined 154,462 lines of code across 571 source files, recording 3812 pattern matches distributed across 25 syntactic categories. The legacy adjusted pattern signal is 44.5 (High pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1760 finding(s).
Are imports declared and package/API names verified? 390 finding(s).
Are wrappers, guards, and repeated structures necessary? 3195 finding(s).
Which changes need focused human review? 3812 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 3812 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | py-src/data_formulator/agent_config.py | 39 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/agent_config.py | 41 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/agent_config.py | 48 | # ── Heavy: code-gen, multi-step, tool-using ───────────────────────────── | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/agent_config.py | 55 | # ── Light: single-turn extractors / classifiers / formatters ──────────── | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 51 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 53 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 103 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 105 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 133 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 135 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 201 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 203 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 244 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/error_handler.py | 246 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 61 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 63 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 92 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 94 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 927 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 929 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 1607 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 1609 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 2437 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/data_connector.py | 2439 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/data_connector.py | 348 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/data_connector.py | 350 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/data_connector.py | 791 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/data_connector.py | 793 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/data_connector.py | 2648 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/data_connector.py | 2650 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/analyst/agent.py | 1145 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/analyst/agent.py | 1147 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/analyst/agent.py | 1395 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/analyst/agent.py | 1397 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 85 | # ── Action-argument coercion ────────────────────────────────────────────── | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 106 | # ── Live tool-argument streaming (design-docs/36 §5) ─────────────────────── | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 261 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 263 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 331 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 333 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 353 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 355 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 498 | # ── No committing action → the run is over ──────────────── | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 584 | # ── Terminal action → the run pauses ────────────────────── | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 639 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 641 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 887 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 889 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 933 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 935 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 1547 | # ── Action present → cardinality guard (first-wins) ─────────── | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 1559 | # ── Only inspection tools → execute all and loop ─────────────── | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 2052 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 2054 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/skills/__init__.py | 206 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/skills/__init__.py | 212 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/skills/core/skill.py | 57 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/skills/core/skill.py | 59 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/skills/core/skill.py | 88 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/skills/core/skill.py | 90 | # ------------------------------------------------------------------ | COMMENT |
| 966 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .cursor/skills/path-safety/SKILL.md | 118 | def _enforce_deployment_restrictions(): | CODE |
| LOW | py-src/data_formulator/workspace_factory.py | 31 | def _build_azure_container_client(cfg: dict): | CODE |
| LOW | py-src/data_formulator/workspace_factory.py | 79 | def _get_user_workspaces_root(identity_id: str) -> Path: | CODE |
| LOW | py-src/data_formulator/error_handler.py | 76 | def classify_and_wrap_llm_error(exc: Exception) -> AppError: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 96 | def classify_and_raise_connector_error(error: Exception, *, operation: str = "") -> None: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1531 | def _update_user_connector_display_name(identity: str, connector_id: str, display_name: str) -> None: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1924 | def connector_get_catalog_tree(): | CODE |
| LOW | py-src/data_formulator/data_connector.py | 175 | def _lightweight_tree_for_response(tree: list[dict[str, Any]]) -> list[dict[str, Any]]: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 233 | def _is_sensitive_or_auth_param( | CODE |
| LOW | py-src/data_formulator/data_connector.py | 312 | def _resolve_connector_with_key(data: dict[str, Any]) -> tuple[str, "DataConnector"]: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 819 | def resolve_catalog_refresh_target( | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1000 | def discover_data_loader_options(): | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1474 | def _validate_connector_id_for_fs(connector_id: str) -> str: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1994 | def connector_get_catalog_progress(): | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2009 | def connector_get_cached_catalog_tree(): | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2066 | def connector_sync_catalog_metadata(): | CODE |
| LOW | py-src/data_formulator/desktop.py | 18 | def _configure_standard_streams() -> None: | CODE |
| LOW | py-src/data_formulator/desktop.py | 29 | def _signal_existing_instance(timeout: float = 1.0) -> bool: | CODE |
| LOW⚡ | py-src/data_formulator/analyst/agent.py | 1348 | def _build_focused_thread_context( | CODE |
| LOW⚡ | py-src/data_formulator/analyst/agent.py | 1353 | def _build_peripheral_thread_context( | CODE |
| LOW⚡ | py-src/data_formulator/analyst/agent.py | 1359 | def _build_available_charts_context( | CODE |
| LOW⚡ | py-src/data_formulator/analyst/agent.py | 1386 | def _build_lightweight_table_context( | CODE |
| LOW | py-src/data_formulator/analyst/agent.py | 92 | def _rescue_unpack_json_strings(data: dict) -> None: | CODE |
| LOW | py-src/data_formulator/analyst/agent.py | 687 | def _build_skill_body_message( | CODE |
| LOW⚡ | py-src/data_formulator/analyst/skills/core/skill.py | 259 | def _sanitize_clarification_options(cls, raw_options: Any) -> list[dict[str, Any]]: | CODE |
| LOW | py-src/data_formulator/analyst/skills/core/skill.py | 283 | def _sanitize_clarification_questions(cls, raw_questions: Any) -> list[dict[str, Any]]: | CODE |
| LOW | py-src/data_formulator/analyst/skills/core/skill.py | 314 | def _normalize_interact_action(cls, action: dict[str, Any]) -> dict[str, Any]: | CODE |
| LOW⚡ | py-src/data_formulator/analyst/skills/report/skill.py | 57 | def _strip_leaked_tool_syntax(text: str) -> str: | CODE |
| LOW | py-src/data_formulator/security/sanitize.py | 25 | def _extract_traceback_summary(message: str) -> str: | CODE |
| LOW | py-src/data_formulator/security/sanitize.py | 54 | def _structured_error_response(code: str, message: str, status_code: int): | CODE |
| LOW | py-src/data_formulator/data_operations/discovery.py | 67 | def ensure_no_auth_catalogs_cached(user_home: Any) -> None: | CODE |
| LOW | py-src/data_formulator/data_operations/actions.py | 8 | def build_data_operation_action(operation: DataOperation) -> dict[str, Any]: | CODE |
| LOW | py-src/data_formulator/data_operations/repository.py | 273 | def resolve_interaction_response( | CODE |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 22 | def field_metadata_to_semantic_types( | CODE |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 539 | def assign_aesthetic_channels(): | CODE |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 1225 | def _post_process_candlestick( | CODE |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 1581 | def _post_process_streamgraph(spec: dict, encodings: dict, config: dict | None) -> None: | CODE |
| LOW⚡ | py-src/data_formulator/workflows/chart_semantics.py | 570 | def resolve_channel_semantics( | CODE |
| LOW | py-src/data_formulator/workflows/chart_semantics.py | 184 | def _looks_like_year_integers(values: List[Any]) -> bool: | CODE |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 787 | def _build_connector_summary_block( | CODE |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 1236 | def _tool_replace_data_memory(self, args): | CODE |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 1629 | def _tool_show_user_data_preview(self, args, scratch_jail): | CODE |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 2062 | def _normalize_load_plan_candidate(self, candidate): | CODE |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 2164 | def _format_valid_sources_hint(self) -> str: | CODE |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 2197 | def _normalize_load_query_filters(filters): | CODE |
| LOW | py-src/data_formulator/agents/client_utils.py | 170 | def _salvage_tool_calls_from_content(response, tools): | CODE |
| LOW | py-src/data_formulator/agents/client_utils.py | 292 | def _strip_images_from_messages(self, messages): | CODE |
| LOW | py-src/data_formulator/agents/client_utils.py | 317 | def _is_image_deserialize_error(self, error_text: str, has_images: bool = False) -> bool: | CODE |
| LOW | py-src/data_formulator/agents/client_utils.py | 332 | def _is_reasoning_effort_error(self, error_text: str) -> bool: | CODE |
| LOW | py-src/data_formulator/agents/client_utils.py | 430 | def get_completion_with_tools(self, messages, tools, stream=False, | CODE |
| LOW | py-src/data_formulator/agents/agent_utils.py | 83 | def accumulate_reasoning_content( | CODE |
| LOW | py-src/data_formulator/agents/agent_utils.py | 109 | def _source_table_matches_catalog_entry( | CODE |
| LOW | py-src/data_formulator/agents/agent_utils.py | 124 | def build_catalog_metadata_lookups( | CODE |
| LOW | py-src/data_formulator/agents/agent_utils.py | 207 | def format_dataframe_sample_with_budget( | CODE |
| LOW | py-src/data_formulator/agents/agent_utils.py | 241 | def field_name_to_ts_variable_name(field_name): | CODE |
| LOW | py-src/data_formulator/agents/agent_utils.py | 292 | def extract_code_from_gpt_response(code_raw, language): | CODE |
| LOW | py-src/data_formulator/agents/agent_utils.py | 372 | def _fix_json_trailing_commas(s: str) -> str: | CODE |
| LOW | py-src/data_formulator/agents/agent_utils.py | 750 | def ensure_output_variable_in_code(code: str, output_variable: str) -> tuple[str, bool, str]: | CODE |
| LOW | py-src/data_formulator/agents/agent_utils_sql.py | 17 | def create_duckdb_conn_with_parquet_views(workspace, input_tables: list[dict]): | CODE |
| LOW | py-src/data_formulator/agents/context.py | 30 | def _get_workspace_metadata_lookups(workspace: Any) -> tuple[dict[str, str], dict[str, dict[str, str]], dict[str, str]]: | CODE |
| 1471 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | py-src/data_formulator/app.py | 410 | except Exception: | CODE |
| HIGH | py-src/data_formulator/app.py | 183 | except Exception: | CODE |
| HIGH | py-src/data_formulator/error_handler.py | 178 | except RuntimeError: | CODE |
| HIGH | py-src/data_formulator/error_handler.py | 232 | except RuntimeError: | CODE |
| HIGH | py-src/data_formulator/error_handler.py | 117 | except RuntimeError: | CODE |
| HIGH | py-src/data_formulator/data_connector.py | 2257 | except Exception: | CODE |
| HIGH | py-src/data_formulator/data_connector.py | 1736 | except Exception: | CODE |
| HIGH | py-src/data_formulator/data_connector.py | 1446 | except Exception: | CODE |
| HIGH | py-src/data_formulator/desktop.py | 158 | except (AttributeError, OSError): | CODE |
| HIGH | py-src/data_formulator/desktop.py | 25 | except (OSError, ValueError): | CODE |
| HIGH | py-src/data_formulator/analyst/agent.py | 102 | except (json.JSONDecodeError, ValueError): | CODE |
| HIGH | py-src/data_formulator/security/code_signing.py | 84 | except (ImportError, RuntimeError): | CODE |
| HIGH | py-src/data_formulator/security/log_sanitizer.py | 231 | except (TypeError, ValueError): | CODE |
| HIGH | py-src/data_formulator/auth/token_store.py | 293 | except Exception: | CODE |
| HIGH | py-src/data_formulator/auth/token_store.py | 305 | except Exception: | CODE |
| HIGH | py-src/data_formulator/auth/vault/__init__.py | 89 | except RuntimeError: | CODE |
| HIGH | py-src/data_formulator/data_operations/repository.py | 268 | except OSError: | CODE |
| HIGH | py-src/data_formulator/workflows/chart_semantics.py | 219 | except ImportError: | CODE |
| HIGH | py-src/data_formulator/workflows/chart_semantics.py | 325 | except ImportError: | CODE |
| HIGH | py-src/data_formulator/workflows/chart_semantics.py | 365 | except Exception: | CODE |
| HIGH | py-src/data_formulator/workflows/chart_semantics.py | 543 | except ImportError: | CODE |
| HIGH | …-src/data_formulator/agents/agent_data_loading_chat.py | 1048 | except Exception: | CODE |
| HIGH | py-src/data_formulator/agents/client_utils.py | 213 | except (AttributeError, TypeError): | CODE |
| HIGH | py-src/data_formulator/agents/reasoning_log.py | 188 | except Exception: | CODE |
| HIGH | py-src/data_formulator/agents/reasoning_log.py | 218 | except Exception: | CODE |
| HIGH | py-src/data_formulator/agents/agent_utils.py | 275 | except (ValueError, TypeError): | CODE |
| HIGH | py-src/data_formulator/agents/agent_utils.py | 625 | except Exception: | CODE |
| HIGH | py-src/data_formulator/agents/agent_utils.py | 421 | except ValueError: | CODE |
| HIGH | py-src/data_formulator/agents/context.py | 240 | except Exception: | CODE |
| HIGH | py-src/data_formulator/agents/agent_chart_restyle.py | 274 | except (TypeError, ValueError): | CODE |
| HIGH | py-src/data_formulator/agents/web_utils.py | 318 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/catalog_cache.py | 271 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/workspace_metadata.py | 178 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/workspace_metadata.py | 472 | except OSError: | CODE |
| HIGH | …ta_formulator/datalake/azure_blob_workspace_manager.py | 144 | except Exception: | CODE |
| HIGH | …ta_formulator/datalake/azure_blob_workspace_manager.py | 172 | except Exception: | CODE |
| HIGH | …ta_formulator/datalake/azure_blob_workspace_manager.py | 183 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/ephemeral_workspace.py | 61 | except (OSError, ValueError, TypeError, json.JSONDecodeError): | CODE |
| HIGH | py-src/data_formulator/datalake/workspace.py | 69 | except (RuntimeError, ImportError): | CODE |
| HIGH | py-src/data_formulator/datalake/workspace.py | 129 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/workspace_manager.py | 113 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/workspace_manager.py | 148 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/workspace_manager.py | 160 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/workspace_manager.py | 433 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/workspace_manager.py | 474 | except Exception: | CODE |
| HIGH | py-src/data_formulator/datalake/file_manager.py | 90 | except UnicodeDecodeError: | CODE |
| HIGH | py-src/data_formulator/datalake/file_manager.py | 97 | except (UnicodeDecodeError, UnicodeEncodeError): | CODE |
| HIGH | py-src/data_formulator/datalake/file_manager.py | 112 | except ImportError: | CODE |
| HIGH | py-src/data_formulator/sandbox/local_sandbox.py | 86 | except ImportError: | CODE |
| HIGH | py-src/data_formulator/sandbox/local_sandbox.py | 94 | except ImportError: | CODE |
| HIGH | py-src/data_formulator/sandbox/local_sandbox.py | 102 | except ImportError: | CODE |
| HIGH | py-src/data_formulator/sandbox/local_sandbox.py | 238 | except Exception: | CODE |
| HIGH | py-src/data_formulator/sandbox/local_sandbox.py | 291 | except Exception: | CODE |
| HIGH | py-src/data_formulator/sandbox/local_sandbox.py | 295 | except Exception: | CODE |
| HIGH | py-src/data_formulator/sandbox/local_sandbox.py | 308 | except Exception: | CODE |
| HIGH | py-src/data_formulator/sandbox/local_sandbox.py | 312 | except Exception: | CODE |
| HIGH | py-src/data_formulator/sandbox/docker_sandbox.py | 261 | except Exception: | CODE |
| HIGH | …rc/data_formulator/data_loader/superset_data_loader.py | 735 | except (json.JSONDecodeError, AttributeError): | CODE |
| HIGH | py-src/data_formulator/data_loader/mssql_data_loader.py | 482 | except Exception: | CODE |
| HIGH | py-src/data_formulator/data_loader/mssql_data_loader.py | 502 | except Exception: | CODE |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .cursor/skills/error-handling/SKILL.md | 77 | except Exception as e: | CODE |
| LOW | .cursor/skills/error-handling/SKILL.md | 117 | except Exception as e: | CODE |
| LOW | .cursor/skills/error-handling/SKILL.md | 267 | except Exception as e: | CODE |
| LOW | .cursor/skills/error-handling/SKILL.md | 285 | except Exception as e: | CODE |
| MEDIUM | .cursor/skills/error-handling/SKILL.md | 113 | def generate(): | CODE |
| MEDIUM | .cursor/skills/error-handling/SKILL.md | 263 | def my_table_op(): | CODE |
| LOW | py-src/data_formulator/_startup_spinner.py | 32 | except Exception: | CODE |
| LOW | py-src/data_formulator/app.py | 165 | except Exception as exc: # pragma: no cover - filesystem edge cases | CODE |
| LOW | py-src/data_formulator/app.py | 183 | except Exception: | CODE |
| LOW | py-src/data_formulator/app.py | 410 | except Exception: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 922 | except Exception as e: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1527 | except Exception as e: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1576 | except Exception: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1582 | except Exception as e: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1592 | except Exception: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1599 | except Exception as e: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1902 | except Exception as e: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1911 | except Exception as e: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1919 | except Exception as e: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 2432 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 322 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 517 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 532 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 544 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 555 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 623 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 670 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 704 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 717 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 756 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 858 | except Exception: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 876 | except Exception: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1029 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1131 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1260 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1271 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1361 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1408 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1442 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1446 | except Exception: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1514 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1713 | except Exception: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1732 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1736 | except Exception: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1767 | except Exception as exc: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1776 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1812 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1823 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1972 | except Exception: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 1987 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2057 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2120 | except Exception: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2151 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2179 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2221 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2257 | except Exception: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2267 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2320 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2355 | except Exception as e: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 2418 | except Exception as e: | CODE |
| 392 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | py-src/data_formulator/_startup_spinner.py | 14 | CODE | |
| LOW | py-src/data_formulator/workspace_factory.py | 24 | CODE | |
| LOW | py-src/data_formulator/workspace_factory.py | 26 | CODE | |
| LOW | py-src/data_formulator/agent_config.py | 32 | CODE | |
| LOW | py-src/data_formulator/app.py | 24 | CODE | |
| LOW | py-src/data_formulator/app.py | 25 | CODE | |
| LOW | py-src/data_formulator/app.py | 26 | CODE | |
| LOW | py-src/data_formulator/app.py | 26 | CODE | |
| LOW | py-src/data_formulator/app.py | 31 | CODE | |
| LOW | py-src/data_formulator/error_handler.py | 19 | CODE | |
| LOW | py-src/data_formulator/errors.py | 15 | CODE | |
| LOW | py-src/data_formulator/desktop.py | 214 | CODE | |
| LOW | py-src/data_formulator/analyst/tools.py | 20 | CODE | |
| LOW | py-src/data_formulator/analyst/__init__.py | 29 | CODE | |
| LOW | py-src/data_formulator/analyst/__init__.py | 29 | CODE | |
| LOW | py-src/data_formulator/analyst/__init__.py | 29 | CODE | |
| LOW | py-src/data_formulator/analyst/__init__.py | 29 | CODE | |
| LOW | py-src/data_formulator/analyst/__init__.py | 29 | CODE | |
| LOW | py-src/data_formulator/analyst/__init__.py | 29 | CODE | |
| LOW | py-src/data_formulator/analyst/__init__.py | 29 | CODE | |
| LOW | py-src/data_formulator/analyst/__init__.py | 38 | CODE | |
| LOW | py-src/data_formulator/analyst/skills/__init__.py | 25 | CODE | |
| LOW | py-src/data_formulator/analyst/skills/__init__.py | 35 | CODE | |
| LOW | py-src/data_formulator/analyst/skills/__init__.py | 35 | CODE | |
| LOW | py-src/data_formulator/analyst/skills/__init__.py | 35 | CODE | |
| LOW | py-src/data_formulator/analyst/skills/base.py | 39 | CODE | |
| LOW | py-src/data_formulator/analyst/skills/core/skill.py | 27 | CODE | |
| LOW | …c/data_formulator/analyst/skills/data_loading/skill.py | 1 | CODE | |
| LOW | …c/data_formulator/analyst/skills/data-loading/skill.py | 1 | CODE | |
| LOW | py-src/data_formulator/analyst/skills/report/skill.py | 31 | CODE | |
| LOW | py-src/data_formulator/security/url_allowlist.py | 38 | CODE | |
| LOW | py-src/data_formulator/security/log_sanitizer.py | 28 | CODE | |
| LOW | py-src/data_formulator/security/log_sanitizer.py | 30 | CODE | |
| LOW | py-src/data_formulator/security/path_safety.py | 14 | CODE | |
| LOW | py-src/data_formulator/security/sanitize.py | 6 | CODE | |
| LOW | py-src/data_formulator/security/sanitize.py | 11 | CODE | |
| LOW | py-src/data_formulator/auth/token_store.py | 12 | CODE | |
| LOW | py-src/data_formulator/auth/token_store.py | 17 | CODE | |
| LOW | py-src/data_formulator/auth/token_store.py | 17 | CODE | |
| LOW | py-src/data_formulator/auth/providers/oidc.py | 37 | CODE | |
| LOW | py-src/data_formulator/auth/providers/oidc.py | 51 | CODE | |
| LOW | py-src/data_formulator/auth/providers/github_oauth.py | 18 | CODE | |
| LOW | py-src/data_formulator/auth/providers/azure_easyauth.py | 17 | CODE | |
| LOW | py-src/data_formulator/auth/providers/__init__.py | 16 | CODE | |
| LOW | py-src/data_formulator/auth/providers/base.py | 10 | CODE | |
| LOW | py-src/data_formulator/auth/gateways/github_gateway.py | 12 | CODE | |
| LOW | py-src/data_formulator/auth/gateways/oidc_gateway.py | 20 | CODE | |
| LOW | …c/data_formulator/auth/gateways/kusto_oauth_gateway.py | 6 | CODE | |
| LOW | py-src/data_formulator/auth/vault/__init__.py | 17 | CODE | |
| LOW | py-src/data_formulator/auth/vault/base.py | 5 | CODE | |
| LOW | py-src/data_formulator/auth/vault/local_vault.py | 12 | CODE | |
| LOW | py-src/data_formulator/data_operations/models.py | 1 | CODE | |
| LOW | py-src/data_formulator/data_operations/discovery.py | 1 | CODE | |
| LOW | py-src/data_formulator/data_operations/actions.py | 1 | CODE | |
| LOW | py-src/data_formulator/data_operations/__init__.py | 1 | CODE | |
| LOW | py-src/data_formulator/data_operations/__init__.py | 2 | CODE | |
| LOW | py-src/data_formulator/data_operations/__init__.py | 2 | CODE | |
| LOW | py-src/data_formulator/data_operations/__init__.py | 2 | CODE | |
| LOW | py-src/data_formulator/data_operations/__init__.py | 7 | CODE | |
| LOW | py-src/data_formulator/data_operations/__init__.py | 7 | CODE | |
| 310 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | py-src/data_formulator/workspace_factory.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/__init__.py | 10 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/app.py | 124 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/error_handler.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 72 | def _set_catalog_progress(connector_id: str, message: str) -> None: | CODE |
| LOW⚡ | py-src/data_formulator/data_connector.py | 1531 | def _update_user_connector_display_name(identity: str, connector_id: str, display_name: str) -> None: | CODE |
| LOW | py-src/data_formulator/data_connector.py | 46 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/analyst/tools.py | 146 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/analyst/__init__.py | 40 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/analyst/agent.py | 66 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/analyst/skills/__init__.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/analyst/skills/__init__.py | 382 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/analyst/skills/base.py | 179 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/analyst/skills/core/skill.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | py-src/data_formulator/analyst/skills/report/skill.py | 45 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | py-src/data_formulator/security/url_allowlist.py | 44 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | py-src/data_formulator/security/code_signing.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/security/path_safety.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/security/sanitize.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/token_store.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/identity.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/providers/oidc.py | 53 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/providers/github_oauth.py | 28 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/providers/azure_easyauth.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/gateways/github_gateway.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/gateways/oidc_gateway.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/vault/__init__.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/auth/vault/local_vault.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/data_operations/discovery.py | 8 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/data_operations/__init__.py | 26 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/data_operations/executor.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …-src/data_formulator/agents/agent_data_loading_chat.py | 25 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/reasoning_log.py | 36 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/agent_data_load.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/agent_sort_data.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | …-src/data_formulator/agents/agent_starter_questions.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/__init__.py | 9 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/agents/context.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | py-src/data_formulator/agents/agent_simple.py | 17 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/agent_chart_restyle.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/agent_chart_restyle.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/web_utils.py | 13 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/agent_code_explanation.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/agents/agent_workflow_distill.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/datalake/table_names.py | 182 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/datalake/catalog_cache.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/datalake/workspace_metadata.py | 23 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/datalake/azure_blob_workspace.py | 64 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | py-src/data_formulator/datalake/parquet_utils.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/datalake/naming.py | 53 | __all__ = ["safe_source_id"] | CODE |
| LOW | …ta_formulator/datalake/azure_blob_workspace_manager.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | …ta_formulator/datalake/azure_blob_workspace_manager.py | 299 | def update_display_name(self, workspace_id: str, display_name: str) -> None: | CODE |
| LOW | py-src/data_formulator/datalake/__init__.py | 88 | __all__ = [ | CODE |
| LOW | py-src/data_formulator/datalake/ephemeral_workspace.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/datalake/workspace.py | 51 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/datalake/workspace_manager.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/datalake/workspace_manager.py | 439 | def update_display_name(self, workspace_id: str, display_name: str) -> None: | CODE |
| LOW | py-src/data_formulator/datalake/catalog_refresh.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | py-src/data_formulator/datalake/blob_disk_cache.py | 42 | logger = logging.getLogger(__name__) | CODE |
| 37 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | py-src/data_formulator/data_connector.py | 274 | CODE | |
| LOW | py-src/data_formulator/data_connector.py | 899 | CODE | |
| LOW | py-src/data_formulator/data_connector.py | 1034 | CODE | |
| LOW | py-src/data_formulator/data_connector.py | 1328 | CODE | |
| LOW | py-src/data_formulator/data_connector.py | 1848 | CODE | |
| LOW | py-src/data_formulator/data_connector.py | 1924 | CODE | |
| LOW | py-src/data_formulator/data_connector.py | 2066 | CODE | |
| LOW | py-src/data_formulator/data_connector.py | 2578 | CODE | |
| LOW | py-src/data_formulator/desktop.py | 56 | CODE | |
| LOW | py-src/data_formulator/analyst/agent.py | 357 | CODE | |
| LOW | py-src/data_formulator/analyst/agent.py | 802 | CODE | |
| LOW | py-src/data_formulator/analyst/agent.py | 937 | CODE | |
| LOW | py-src/data_formulator/analyst/agent.py | 1472 | CODE | |
| LOW | py-src/data_formulator/analyst/agent.py | 1925 | CODE | |
| LOW | py-src/data_formulator/analyst/agent.py | 2113 | CODE | |
| LOW | …c/data_formulator/analyst/skills/data_loading/skill.py | 29 | CODE | |
| LOW | …c/data_formulator/analyst/skills/data_loading/skill.py | 238 | CODE | |
| LOW | …c/data_formulator/analyst/skills/data-loading/skill.py | 29 | CODE | |
| LOW | …c/data_formulator/analyst/skills/data-loading/skill.py | 238 | CODE | |
| LOW | py-src/data_formulator/auth/token_store.py | 346 | CODE | |
| LOW | py-src/data_formulator/auth/providers/__init__.py | 30 | CODE | |
| LOW | py-src/data_formulator/data_operations/discovery.py | 88 | CODE | |
| LOW | py-src/data_formulator/data_operations/discovery.py | 142 | CODE | |
| LOW | py-src/data_formulator/data_operations/repository.py | 171 | CODE | |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 309 | CODE | |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 610 | CODE | |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 1032 | CODE | |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 1078 | CODE | |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 1735 | CODE | |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 1855 | CODE | |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 375 | CODE | |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 426 | CODE | |
| LOW | py-src/data_formulator/workflows/chart_semantics.py | 460 | CODE | |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 916 | CODE | |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 1131 | CODE | |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 1256 | CODE | |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 1385 | CODE | |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 1468 | CODE | |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 2197 | CODE | |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 2250 | CODE | |
| LOW | …-src/data_formulator/agents/agent_data_loading_chat.py | 2334 | CODE | |
| LOW | py-src/data_formulator/agents/client_utils.py | 57 | CODE | |
| LOW | py-src/data_formulator/agents/client_utils.py | 93 | CODE | |
| LOW | py-src/data_formulator/agents/client_utils.py | 224 | CODE | |
| LOW | py-src/data_formulator/agents/client_utils.py | 278 | CODE | |
| LOW | py-src/data_formulator/agents/agent_utils.py | 124 | CODE | |
| LOW | py-src/data_formulator/agents/agent_utils.py | 250 | CODE | |
| LOW | py-src/data_formulator/agents/agent_utils.py | 315 | CODE | |
| LOW | py-src/data_formulator/agents/agent_utils.py | 388 | CODE | |
| LOW | py-src/data_formulator/agents/agent_utils.py | 429 | CODE | |
| LOW | py-src/data_formulator/agents/agent_utils.py | 568 | CODE | |
| LOW | py-src/data_formulator/agents/context.py | 30 | CODE | |
| LOW | py-src/data_formulator/agents/context.py | 56 | CODE | |
| LOW | py-src/data_formulator/agents/agent_chart_restyle.py | 104 | CODE | |
| LOW | py-src/data_formulator/agents/agent_chart_restyle.py | 215 | CODE | |
| LOW | py-src/data_formulator/agents/agent_workflow_distill.py | 434 | CODE | |
| LOW | py-src/data_formulator/datalake/catalog_cache.py | 332 | CODE | |
| LOW | py-src/data_formulator/datalake/catalog_cache.py | 384 | CODE | |
| LOW | py-src/data_formulator/datalake/workspace_metadata.py | 555 | CODE | |
| LOW | …ta_formulator/datalake/azure_blob_workspace_manager.py | 117 | CODE | |
| 70 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | py-src/data_formulator/datalake/azure_blob_workspace.py | 482 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL⚡ | py-src/data_formulator/datalake/azure_blob_workspace.py | 622 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | py-src/data_formulator/datalake/azure_blob_workspace.py | 223 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | py-src/data_formulator/datalake/azure_blob_workspace.py | 674 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| CRITICAL | …ta_formulator/datalake/azure_blob_workspace_manager.py | 78 | from azure.core.exceptions import ResourceNotFoundError | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | py-src/data_formulator/workflows/create_vl_plots.py | 618 | Assemble a Vega-Lite chart specification from a dataframe, chart type, and encodings. Parameters: - df | STRING |
| HIGH | py-src/data_formulator/agents/web_utils.py | 57 | Validate a URL to prevent SSRF attacks. Performs the following checks: 1. Protocol validation (HTTP/HT | STRING |
| HIGH | py-src/data_formulator/agents/web_utils.py | 114 | Download HTML content from a given URL with SSRF protection. This function implements comprehensive SSRF p | STRING |
| HIGH | py-src/data_formulator/agents/web_utils.py | 356 | Fetch a remote resource (HTML page or data file) with SSRF protection and a size cap. Unlike ``download_html_c | STRING |
| HIGH | py-src/data_formulator/agents/web_utils.py | 485 | Render a JavaScript-heavy page with a headless browser and return the final HTML. This is an OPTIONAL fallback | STRING |
| HIGH | py-src/data_formulator/datalake/parquet_utils.py | 44 | Unicode-safe filename sanitisation for data files. Prevents path traversal by extracting the basename while preserv | STRING |
| HIGH | py-src/data_formulator/datalake/workspace.py | 534 | Get the filename for a table, suitable for use in generated code. Returns just the filename (e.g. "sal | STRING |
| HIGH | py-src/data_formulator/datalake/workspace.py | 556 | Read a table from the workspace as a pandas DataFrame. Automatically selects the appropriate reader ba | STRING |
| HIGH | py-src/data_formulator/datalake/workspace_manager.py | 366 | Open an existing workspace and return a Workspace instance. Args: workspace_id: Workspace | STRING |
| HIGH | py-src/data_formulator/datalake/file_manager.py | 208 | Save an uploaded file to the workspace. The file is stored as-is without conversion. Metadata is added to | STRING |
| HIGH | …rc/data_formulator/data_loader/external_data_loader.py | 458 | Fetch data from the external source as a PyArrow Table. This is the primary method for data fe | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | py-src/data_formulator/security/__init__.py | 1 | # Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | py-src/data_formulator/auth/__init__.py | 1 | # Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | py-src/data_formulator/auth/gateways/__init__.py | 1 | # Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | py-src/data_formulator/agents/semantic_types.py | 401 | # Name-based Heuristic Inference | COMMENT |
| LOW | py-src/data_formulator/datalake/azure_blob_workspace.py | 141 | root = datalake_root.strip("/") | COMMENT |
| LOW | py-src/data_formulator/datalake/azure_blob_workspace.py | 161 | scratch_base.mkdir(parents=True, exist_ok=True) | COMMENT |
| LOW | py-src/data_formulator/knowledge/__init__.py | 1 | # Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | …/data_formulator/data_loader/sample_datasets_loader.py | 61 | def auth_mode() -> str: | COMMENT |
| LOW | py-src/data_formulator/routes/__init__.py | 1 | # Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | docs/docs-cn/config-examples/superset/oauth_config.py | 421 | }, | COMMENT |
| LOW | src/icons.tsx | 161 | // component="svg" | COMMENT |
| LOW | src/app/LayoutProvider.tsx | 1 | // ════════════════════════════════════════════════════════════════════════ | COMMENT |
| LOW | src/app/layout.ts | 1 | // ════════════════════════════════════════════════════════════════════════ | COMMENT |
| LOW | src/app/layout.ts | 241 | // fragile: | COMMENT |
| LOW | src/app/layout.ts | 301 | // them on every density change; `src/index.css` seeds the reference values so | COMMENT |
| LOW | src/scss/EncodingShelf.scss | 141 | } | COMMENT |
| LOW | src/components/VirtualizedCatalogTree.tsx | 141 | COMMENT | |
| LOW | src/views/SimpleChartRecBox.tsx | 221 | // We just track the selections here. The agent is invoked when the LAST | COMMENT |
| LOW | src/views/SimpleChartRecBox.tsx | 241 | // breaks on binary/Excel and large files). `scratchPath` is the returned | COMMENT |
| LOW | src/views/SimpleChartRecBox.tsx | 261 | // linear chain (table → clarify → table → explain). Set once at run start, | COMMENT |
| LOW | src/views/SessionDistill.tsx | 61 | isLeafDerivedTable, | COMMENT |
| LOW | src/views/DataFormulator.tsx | 361 | // not entering a session: stay on the landing page until data lands. | COMMENT |
| LOW | src/views/DataFormulator.tsx | 581 | // Runs on every split-container resize, not just on discrete events: | COMMENT |
| LOW | src/views/DataLoadingChat.tsx | 1221 | // Monotonic session token. Bumped on every external reset; the | COMMENT |
| LOW | src/views/DataSourceSidebar.tsx | 461 | // browsing is a focused activity; users don't need multiple trees open | COMMENT |
| LOW | src/views/DataSourceSidebar.tsx | 2441 | // scales the paper from 75% → 100%, which reads as a | COMMENT |
| LOW | src/views/threadLayout.ts | 1 | // DataThread column geometry, at the reference density. | COMMENT |
| LOW | src/views/ChartQuickConfig.tsx | 221 | // Encoding-action value is a configuration *override* stored in | COMMENT |
| LOW | src/views/VisualizationView.tsx | 881 | : 'min(75vh, 800px)'; | COMMENT |
| LOW | src/views/InteractionEntryCard.tsx | 421 | // delegate) all read as "the agent talking" — wrap them in a bordered | COMMENT |
| LOW | src/views/DataThread.tsx | 501 | // A session can start with no data at all, so the first run has no table to | COMMENT |
| LOW | src/views/DataThread.tsx | 801 | // Build a flat sequence of timeline items: [trigger, table, charts, trigger, table, charts, ...] | COMMENT |
| LOW | src/views/DataThread.tsx | 821 | // We compare on table IDs rather than display names: names are derived | COMMENT |
| LOW | src/views/DataThread.tsx | 2881 | ? 2 | COMMENT |
| LOW | src/views/KnowledgePanel.tsx | 261 | // active workspace. When the workspace already has a distilled | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | py-src/data_formulator/data_connector.py | 2305 | # preview columns, so we keep this path lean and just return data. | COMMENT |
| MEDIUM | py-src/data_formulator/analyst/agent.py | 1540 | # ends with exactly ONE action; the harness enforces that here. | COMMENT |
| MEDIUM | py-src/data_formulator/workflows/create_vl_plots.py | 848 | # Uses the robust convert_temporal_data which handles datetime objects, | COMMENT |
| MEDIUM⚡ | py-src/data_formulator/workflows/chart_semantics.py | 267 | # Date string detection (mirrors TS looksLikeDateString, much more robust) | COMMENT |
| MEDIUM⚡ | public/df_global_energy.json | 1 | {"tables": [{"kind": "table", "id": "global-energy-20-small.csv", "displayId": "energy-co2", "names": ["Year", "Entity", | CODE |
| MEDIUM⚡ | public/df_global_energy.json | 1 | {"tables": [{"kind": "table", "id": "global-energy-20-small.csv", "displayId": "energy-co2", "names": ["Year", "Entity", | CODE |
| MEDIUM⚡ | public/df_global_energy.json | 1 | {"tables": [{"kind": "table", "id": "global-energy-20-small.csv", "displayId": "energy-co2", "names": ["Year", "Entity", | CODE |
| MEDIUM⚡ | public/df_stock_prices_live.json | 1 | {"tables": [{"kind": "table", "id": "history", "displayId": "stock-hist", "names": ["symbol", "date", "open", "high", "l | CODE |
| MEDIUM⚡ | public/df_stock_prices_live.json | 1 | {"tables": [{"kind": "table", "id": "history", "displayId": "stock-hist", "names": ["symbol", "date", "open", "high", "l | CODE |
| MEDIUM⚡ | public/df_unemployment.json | 1 | {"tables": [{"kind": "table", "id": "unemployment-across-industries", "displayId": "unemp-by-ind", "names": ["series", " | CODE |
| MEDIUM⚡ | public/df_unemployment.json | 1 | {"tables": [{"kind": "table", "id": "unemployment-across-industries", "displayId": "unemp-by-ind", "names": ["series", " | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | tests/backend/benchmarks/benchmark_sandbox.py | 26 | # Realistic Data Formulator code snippets (typical AI-generated transforms) | COMMENT |
| HIGH | src/components/ComponentType.tsx | 564 | title?: string, // AI-generated chart title (from the analyst's visualize action) | CODE |
| HIGH | src/views/SimpleChartRecBox.tsx | 2511 | // When a root table is focused, show a muted row of AI-generated starter | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …-src/data_formulator/agents/agent_data_loading_chat.py | 1494 | "'uv pip install playwright && python -m playwright install chromium', " | CODE |
| HIGH | py-src/data_formulator/agents/web_utils.py | 516 | "'uv pip install playwright && python -m playwright install chromium'." | CODE |
| HIGH⚡ | py-src/data_formulator/agents/web_utils.py | 491 | uv pip install playwright && python -m playwright install chromium | STRING |
| HIGH | py-src/data_formulator/routes/agents.py | 1085 | raw = raw.replace(': NaN,', ': null,').replace(': NaN}', ': null}').replace(':NaN,', ':null,').replace(' | CODE |
| HIGH⚡ | tests/backend/agents/test_agent_diagnostics.py | 222 | """The front-end currently does JSON.stringify(diagnostics, null, 2) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | py-src/data_formulator/agents/web_utils.py | 163 | # Create a custom adapter to hook into redirect handling | COMMENT |
| MEDIUM | tests/backend/benchmarks/benchmark_sandbox.py | 195 | # Create a temporary workspace directory | COMMENT |
| MEDIUM⚡ | tests/backend/data/test_workspace_manager.py | 458 | # Create a legacy source workspace (no workspace_meta.json) | COMMENT |
| MEDIUM⚡ | tests/backend/data/test_all_loader_verification.py | 104 | # Create a minimal stub that has params but doesn't connect | COMMENT |
| MEDIUM | tests/database-dockers/docker-compose.test.yml | 3 | # This file is intentionally additive: existing per-service docker-compose.yml | COMMENT |
| MEDIUM | tests/database-dockers/superset/init-superset.sh | 4 | # This file is kept as a reference if you need to customize init further. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/data_formulator/data_loader/sample_datasets_loader.py | 0 | read the file into duckdb and compute the spjq there. | STRING |
| HIGH | …ata_formulator/data_loader/local_folder_data_loader.py | 0 | read the file into duckdb and compute the spjq there. | STRING |
| HIGH | py-src/data_formulator/data_loader/s3_data_loader.py | 0 | read the file into duckdb and compute the spjq there. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 101 | # Check if values look like 4-digit years (1000-2999). | COMMENT |
| LOW | py-src/data_formulator/workflows/create_vl_plots.py | 107 | # Check if it looks like a discrete categorical variable | COMMENT |
| LOW | py-src/data_formulator/agents/agent_utils.py | 766 | # Check if output_variable appears as an assignment target (= but not ==, !=, <=, >=) | COMMENT |
| LOW | py-src/data_formulator/agents/web_utils.py | 29 | # Check if IP is private, loopback, link-local, multicast, reserved, or unspecified | COMMENT |
| LOW | py-src/data_formulator/agents/web_utils.py | 100 | # Check if this resolved IP is private/internal | COMMENT |
| LOW | py-src/data_formulator/datalake/file_manager.py | 256 | # Write the file | COMMENT |
| LOW | py-src/data_formulator/data_loader/kusto_data_loader.py | 239 | # Check if values look like datetime strings or timestamp numbers | COMMENT |
| LOW | tests/database-dockers/cosmosdb/test_cosmosdb_loader.py | 52 | # Check if the database exists (seed_data.py must have run) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CODESPACES.md | 7 | ### Step 1: Create a Codespace (~5 minutes) | COMMENT |
| LOW | CODESPACES.md | 15 | ### Step 2: Run the app | COMMENT |
| LOW | src/app/utils.tsx | 486 | // Step 2: Group by and aggregate | COMMENT |
| LOW | src/views/SessionDistill.tsx | 230 | // Step 1: drop tool_call events. | COMMENT |
| LOW | src/views/SessionDistill.tsx | 243 | // Step 2: shrink each create_table.sample_rows to 1 row. | COMMENT |
| LOW | src/views/SessionDistill.tsx | 260 | // Step 3: drop oldest threads (first in render order). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …-src/data_formulator/agents/agent_data_loading_chat.py | 894 | # Safety limit for the agentic loop. Web/scrape tasks (fetch_url -> read_file | COMMENT |
| MEDIUM | py-src/data_formulator/agents/context.py | 405 | # agentic, design 37 §3.6). | COMMENT |
| MEDIUM | docs/dev-guides/12-sandbox-session.md | 56 | ### 在非 agentic 场景中（传统方式，不受影响） | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/backend/auth/test_credential_vault.py | 140 | "username": "user@example.com", | CODE |
| LOW⚡ | tests/backend/data/test_superset_smart_filter.py | 206 | sl._access_token = "fake-token" | CODE |
| LOW⚡ | tests/backend/data/test_superset_smart_filter.py | 210 | sl._ensure_token = MagicMock(return_value="fake-token") | CODE |
| LOW | tests/backend/data/test_superset_catalog_sync.py | 36 | # Bypass JWT expiry check — "fake-token" is not a real JWT | COMMENT |
| LOW | tests/backend/data/test_superset_catalog_sync.py | 28 | loader._access_token = "fake-token" | CODE |
| LOW | src/i18n/locales/zh/upload.json | 23 | "placeholder": { | CODE |
| LOW | src/i18n/locales/zh/dataLoading.json | 19 | "placeholder": "描述要提取、上传或生成的数据...", | CODE |
| LOW | src/i18n/locales/en/upload.json | 23 | "placeholder": { | CODE |
| LOW | src/i18n/locales/en/dataLoading.json | 19 | "placeholder": "Describe data to extract, upload, or generate...", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/database-dockers/bigquery/start.sh | 4 | # Usage: | COMMENT |
| LOW | tests/database-dockers/mongodb/start.sh | 4 | # Usage: | COMMENT |
| LOW | tests/database-dockers/postgres/start.sh | 4 | # Usage: | COMMENT |
| LOW | tests/database-dockers/cosmosdb/start.sh | 4 | # Usage: | COMMENT |
| LOW | tests/database-dockers/mysql/start.sh | 4 | # Usage: | COMMENT |
| LOW | tests/database-dockers/superset/start.sh | 4 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | public/df_global_energy.json | 1 | {"tables": [{"kind": "table", "id": "global-energy-20-small.csv", "displayId": "energy-co2", "names": ["Year", "Entity", | CODE |
| MEDIUM⚡ | public/df_stock_prices_live.json | 1 | {"tables": [{"kind": "table", "id": "history", "displayId": "stock-hist", "names": ["symbol", "date", "open", "high", "l | CODE |
| MEDIUM⚡ | public/df_unemployment.json | 1 | {"tables": [{"kind": "table", "id": "unemployment-across-industries", "displayId": "unemp-by-ind", "names": ["series", " | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/app/utils.tsx | 486 | // Step 2: Group by and aggregate | COMMENT |
| LOW | src/views/SessionDistill.tsx | 230 | // Step 1: drop tool_call events. | COMMENT |
| LOW | src/views/SessionDistill.tsx | 243 | // Step 2: shrink each create_table.sample_rows to 1 row. | COMMENT |
| LOW | src/views/SessionDistill.tsx | 260 | // Step 3: drop oldest threads (first in render order). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/database-dockers/mongodb/init_data.js | 65 | print("Test database initialized: products(12), customers(10), orders(10), app_settings(4)"); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | py-src/data_formulator/analyst/agent.py | 357 | CODE | |
| LOW | py-src/data_formulator/agents/agent_diagnostics.py | 59 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/data_formulator/data_loader/databricks_data_loader.py | 101 | # TODO: implement databricks_oauth_gateway.py (Authorization Code + PKCE | COMMENT |