A security-focused library OS supporting kernel- and user-mode execution
This report summarizes scanner evidence for microsoft/litebox, a Rust project with 3,085 GitHub stars. SynthScan examined 113,946 lines of code across 316 source files, recording 460 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 5.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 391 finding(s).
Are imports declared and package/API names verified? 6 finding(s).
Are wrappers, guards, and repeated structures necessary? 65 finding(s).
Which changes need focused human review? 460 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 460 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | litebox_runner_optee_on_linux_userland/src/lib.rs | 21 | /// JSON-formatted command sequence to pass to the TA | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 281 | /// Helper macro to define open enumerations, which it expands to structs with | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 441 | /// | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 821 | pub handle_flags: TeeHandleFlag, | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 1461 | /// OP-TEE RPC shared memory types | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 1501 | Plugin = OPTEE_MSG_RPC_CMD_PLUGIN, | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 1541 | /// | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 1721 | /// | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 1741 | /// Unlike `OpteeMsgArgs`, all fields are plain `u32` so it can derive `FromBytes`/`IntoBytes`. | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 1821 | pub session: u32, | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 2021 | /// | COMMENT |
| LOW | litebox_common_optee/src/lib.rs | 2401 | } | COMMENT |
| LOW | litebox_common_lvbs/src/lib.rs | 161 | /// | COMMENT |
| LOW | litebox_common_lvbs/src/lib.rs | 841 | COMMENT | |
| LOW | litebox_common_lvbs/src/lib.rs | 861 | /// Directly set VTL0 protection on a frame range — no reservation, no | COMMENT |
| LOW | litebox_common_lvbs/src/lib.rs | 941 | /// Deliberately not part of [`Vtl0Gate`]: it is strictly more dangerous than | COMMENT |
| LOW | litebox_common_lvbs/src/lib.rs | 961 | /// the HEKI service, which is handed only [`Vtl0Gate`]. | COMMENT |
| LOW | litebox_common_lvbs/src/lib.rs | 981 | /// the window never reopens. | COMMENT |
| LOW | litebox_util_log_macros/src/lib.rs | 21 | #[derive(Debug, Clone)] | COMMENT |
| LOW | litebox_util_log_macros/src/lib.rs | 181 | if !input.is_empty() { | COMMENT |
| LOW | litebox_util_log_macros/src/lib.rs | 201 | /// - `mode` is `?`/`debug` for `Debug` or `%`/`display` for `Display` | COMMENT |
| LOW | litebox_util_log_macros/src/lib.rs | 221 | /// // ... | COMMENT |
| LOW | litebox_util_log_macros/src/lib.rs | 241 | /// | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 21 | //! non-blockingly, run the caller's closure under it, and release on | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 41 | //! requiring RPCs that would give untrusted code control over secure world execution. | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 61 | //! | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 81 | //! ### Security Consideration | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 121 | COMMENT | |
| LOW | litebox_shim_optee/src/session.rs | 161 | COMMENT | |
| LOW | litebox_shim_optee/src/session.rs | 361 | TaLoad, | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 381 | /// | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 401 | /// [`Self::disarm`] after the id is transferred to the session map via | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 441 | } | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 461 | /// Cached TA flags by UUID, populated on first successful session registration. | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 501 | pending_count: SpinMutex::new(0), | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 601 | } | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 661 | /// session. Returns the entry that survived the post-lock re-read so | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 761 | /// inside the manager; for single-instance TAs the instance is also | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 881 | /// instance — matched by `task_page_table_id` to distinguish the | COMMENT |
| LOW | litebox_shim_optee/src/session.rs | 921 | /// Acquires the UUID-level lock for `uuid` (see [`SessionToken`] for | COMMENT |
| LOW | litebox_shim_optee/src/lib.rs | 241 | struct GlobalState<Platform: OpteeShimPlatform> { | COMMENT |
| LOW | litebox_shim_optee/src/lib.rs | 261 | /// rather than queued. | COMMENT |
| LOW | litebox_shim_optee/src/lib.rs | 501 | /// The entrypoints for the TA (syscall handling, context loading, etc.) | COMMENT |
| LOW | litebox_shim_optee/src/lib.rs | 1621 | }, | COMMENT |
| LOW | litebox_shim_optee/src/msg_handler.rs | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | litebox_shim_optee/src/msg_handler.rs | 121 | let rpc = OpteeRpcArgs::from_header_and_raw_params(&rpc_header, rpc_params)?; | COMMENT |
| LOW | litebox_shim_optee/src/msg_handler.rs | 141 | /// `rpc_num_params` is our own negotiated value from `EXCHANGE_CAPABILITIES`. | COMMENT |
| LOW | litebox_shim_optee/src/msg_handler.rs | 161 | /// ```text | COMMENT |
| LOW | litebox_shim_optee/src/idk.rs | 201 | COMMENT | |
| LOW | litebox_shim_optee/src/rpc_context.rs | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | litebox_shim_optee/src/rpc_context.rs | 21 | //! |<------- TA size in TMEM.size -----------| | COMMENT |
| LOW | litebox_shim_optee/src/rpc_context.rs | 41 | //! `shm_ref`; the normal-world driver resolves it before asking the supplicant | COMMENT |
| LOW | litebox_shim_optee/src/loader/elf.rs | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | litebox_shim_optee/src/loader/ta_stack.rs | 21 | /// use `UteeParams` to pass input and out parameters. `UteeParams` supports | COMMENT |
| LOW | litebox_shim_optee/src/loader/ta_stack.rs | 41 | /// [ `UteeParams::vals[3]`] 16 | COMMENT |
| LOW | litebox_shim_optee/src/syscalls/ldelf.rs | 141 | /// | COMMENT |
| LOW | litebox_shim_optee/src/syscalls/ldelf.rs | 381 | } else { | COMMENT |
| LOW | litebox_packager/src/oci.rs | 61 | /// Host path to read the file data from. | COMMENT |
| LOW | litebox_packager/src/oci.rs | 241 | /// 4. Otherwise falls back to the image's ENTRYPOINT/CMD as the default command | COMMENT |
| 301 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | litebox_platform_lvbs/src/lib.rs | 84 | // 0xFFFF_FFFF_FFFF_FFFF ┌─────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | litebox_platform_lvbs/src/lib.rs | 87 | // 0xFFFF_E200_0000_0000 ├─────────────────────────────────┤ ← KERNEL_OFFSET | COMMENT |
| MEDIUM⚡ | litebox_platform_lvbs/src/lib.rs | 90 | // 0xFFFF_E0FF_FFFF_F000 ├─────────────────────────────────┤ ← VMAP_END | COMMENT |
| MEDIUM⚡ | litebox_platform_lvbs/src/lib.rs | 93 | // 0xFFFF_C100_0000_0000 ├─────────────────────────────────┤ ← VMAP_START | COMMENT |
| MEDIUM⚡ | litebox_platform_lvbs/src/lib.rs | 95 | // 0xFFFF_C000_0000_0000 ├─────────────────────────────────┤ | COMMENT |
| MEDIUM⚡ | litebox_platform_lvbs/src/lib.rs | 104 | // 0xFFFF_8000_0000_0000 └─────────────────────────────────┘ ← GVA_OFFSET | COMMENT |
| MEDIUM⚡ | litebox_platform_lvbs/src/lib.rs | 107 | // 0x0000_7FFF_FFFF_F000 ┌─────────────────────────────────┐ ← USER_ADDR_MAX | COMMENT |
| MEDIUM⚡ | litebox_platform_lvbs/src/lib.rs | 110 | // 0x0000_0000_0001_0000 └─────────────────────────────────┘ ← USER_ADDR_MIN | COMMENT |
| MEDIUM | litebox_shim_linux/src/syscalls/mm.rs | 501 | // ── Runtime ELF syscall patching ───────────────────────────────────── | COMMENT |
| MEDIUM | litebox_shim_linux/src/syscalls/mm.rs | 941 | // ── Runtime patching path (unpatched binaries) ─────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/unixbench_common.py | 19 | # ── UnixBench source ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/unixbench_common.py | 42 | # ── Workspace / path helpers ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/unixbench_common.py | 63 | # ── Download / build helpers ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/unixbench_common.py | 128 | # ── Tar post-processing ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/prepare_unixbench.py | 51 | # ── Preparation ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/prepare_unixbench.py | 184 | # ── Prepare each benchmark ────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/prepare_unixbench.py | 201 | # ── Write manifest ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/prepare_unixbench.py | 221 | # ── Summary ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 61 | # ── Benchmark Definitions ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 186 | # ── Result Parsing ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 230 | # ── Native Runner ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 285 | # ── LiteBox Runner ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 467 | # ── Comparison & Reporting ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 529 | # ── Path Resolution ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 576 | # ── Main ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 638 | # ── Validate flags ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 760 | # ── Run benchmarks ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 805 | # ── Print results ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 810 | # ── Save to JSON ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 836 | # ── Cleanup ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 168 | /// ┌─────────────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 177 | /// │ ┌──────────────────────────────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 181 | /// │ └──────────────────────────────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 184 | /// │ ┌──────────────────────────────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 186 | /// │ └──────────────────────────────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 189 | /// │ ┌──────────────────────────────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 194 | /// │ └──────────────────────────────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 198 | /// └─────────────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | litebox_runner_lvbs/src/main.rs | 200 | /// ┌─────────────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM | litebox_runner_lvbs/src/main.rs | 218 | /// └─────────────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | litebox/src/net/socket_channel.rs | 14 | //! ┌──────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | litebox/src/net/socket_channel.rs | 16 | //! │ ┌────────────────────────────────────────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | litebox/src/net/socket_channel.rs | 19 | //! │ └────────────────────────────────────────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | litebox/src/net/socket_channel.rs | 26 | //! │ ┌────────────────────────────────────────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | litebox/src/net/socket_channel.rs | 29 | //! │ └────────────────────────────────────────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | litebox/src/net/socket_channel.rs | 36 | //! │ ┌────────────────────────────────────────────────────────┐ │ | COMMENT |
| MEDIUM⚡ | litebox/src/net/socket_channel.rs | 38 | //! │ └────────────────────────────────────────────────────────┘ │ | COMMENT |
| MEDIUM⚡ | litebox/src/net/socket_channel.rs | 39 | //! └──────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM | litebox/src/fs/nine_p/fcall.rs | 42 | // ── Struct definition ───────────── | COMMENT |
| MEDIUM | litebox/src/fs/nine_p/fcall.rs | 76 | // ── Helper: FcallDecoder type with optional lifetime ───────────────────── | COMMENT |
| MEDIUM | litebox/src/fs/nine_p/fcall.rs | 80 | // ── Encode dispatch ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | litebox/src/fs/nine_p/fcall.rs | 104 | // ── Decode dispatch ────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | litebox_shim_linux/src/loader/elf.rs | 238 | let syscall_entry_point = self.file.task.global.platform.get_syscall_entry_point(); | CODE |
| CRITICAL | litebox_shim_linux/src/syscalls/process.rs | 821 | let mut limits = self.thread.process.limits.limits.write(); | CODE |
| CRITICAL | litebox_shim_linux/src/syscalls/process.rs | 845 | Ok(self.thread.process.limits.limits.read()[resource as usize]) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dev_tools/lock_viewer/server.py | 291 | except Exception: | CODE |
| MEDIUM | dev_bench/unixbench/unixbench_common.py | 119 | print(f"Error: cargo build failed (exit {result.returncode})") | CODE |
| MEDIUM | dev_bench/unixbench/prepare_unixbench.py | 159 | print(f"Error: packager not found at {packager}") | CODE |
| MEDIUM | dev_bench/unixbench/prepare_unixbench.py | 165 | print(f"Error: packager not found at {packager}") | CODE |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 552 | print(f"Error: cargo build failed (exit {result.returncode})") | CODE |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 645 | print("Error: --windows cannot be combined with --mode native") | CODE |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 657 | print("Error: --windows requires --prepared-dir (or a prepared/ directory)") | CODE |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 661 | print(f"Error: prepared directory not found at {prepared_dir}") | CODE |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 701 | print(f"Error: cargo build failed (exit {result.returncode})") | CODE |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 706 | print(f"Error: Windows runner not found at {runner_path}") | CODE |
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 717 | print("Error: litebox_runner_linux_userland not found.") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | litebox_shim_optee/src/syscalls/tee.rs | 223 | // (using its UUID) to leverage its functions. | COMMENT |
| MEDIUM | litebox_service_heki/src/mem_integrity.rs | 42 | /// module loader could still leverage other attack mechanisms like return-oriented programming (ROP). | COMMENT |
| MEDIUM | litebox_shim_linux/src/syscalls/process.rs | 41 | /// The purpose of the robust futex list is to ensure that if a thread accidentally fails to unlock a futex before | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 226 | # Essentially, we run a build on a target that simply does NOT have | COMMENT |
| MEDIUM | litebox/src/platform/mod.rs | 311 | /// Essentially, these types indicate "user" pointers (which are allowed to be null). Platforms with | COMMENT |
| MEDIUM | litebox/src/platform/mod.rs | 585 | /// leverage, then be sure to take such details into account. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | litebox_common_linux/src/errno/generated.rs | 7 | //! [`super::Errno`] type, so as to have them all be exposed, but still keep the auto-generated code | COMMENT |
| HIGH | litebox_shim_linux/src/syscalls/tests.rs | 242 | // Note the test was generated by copilot with minor fixes. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | litebox_common_linux/src/lib.rs | 2432 | // NOTE: This function is intended to be mostly trivial (in the future, we intend to replace | COMMENT |
| LOW⚡ | litebox_shim_linux/src/syscalls/tests.rs | 741 | // Step 1: W1 acquires the write lock on the main thread. | COMMENT |
| LOW⚡ | litebox_shim_linux/src/syscalls/tests.rs | 744 | // Step 2: Spawn a reader that will block (READERS_WAITING). | COMMENT |
| LOW⚡ | litebox_shim_linux/src/syscalls/tests.rs | 751 | // Step 3: Spawn W2 that will block (WRITERS_WAITING + other_writers_waiting). | COMMENT |
| LOW | litebox_shim_linux/src/syscalls/tests.rs | 763 | // Step 4: W1 unlocks. This triggers wake_writer_or_readers which | COMMENT |
| LOW | dev_bench/unixbench/README.md | 111 | ### Step 1: Prepare on Linux/WSL | COMMENT |
| LOW | dev_bench/unixbench/README.md | 127 | ### Step 2: Run on Windows | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | litebox_shim_linux/src/syscalls/tests.rs | 741 | // Step 1: W1 acquires the write lock on the main thread. | COMMENT |
| LOW⚡ | litebox_shim_linux/src/syscalls/tests.rs | 744 | // Step 2: Spawn a reader that will block (READERS_WAITING). | COMMENT |
| LOW⚡ | litebox_shim_linux/src/syscalls/tests.rs | 751 | // Step 3: Spawn W2 that will block (WRITERS_WAITING + other_writers_waiting). | COMMENT |
| LOW | litebox_shim_linux/src/syscalls/tests.rs | 763 | // Step 4: W1 unlocks. This triggers wake_writer_or_readers which | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | litebox_platform_linux_userland/src/lib.rs | 1173 | // TODO: implement VDSO in the shim, don't try to pass through the | COMMENT |
| LOW | litebox_shim_linux/src/syscalls/file.rs | 1961 | IoctlArg::TCSETS(_) => Ok(0), // TODO: implement | CODE |
| LOW | litebox_platform_linux_kernel/src/lib.rs | 59 | // TODO: implement pointer validation to ensure the pointers are in user space. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dev_tools/lock_viewer/server.py | 54 | CODE | |
| LOW | dev_tools/lock_viewer/server.py | 115 | CODE | |
| LOW | dev_bench/unixbench/run_unixbench.py | 578 | CODE | |
| LOW | .github/tools/determine_semver_packages.py | 55 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dev_bench/unixbench/unixbench_common.py | 16 | CODE | |
| LOW | dev_bench/unixbench/prepare_unixbench.py | 35 | CODE | |
| LOW | .github/tools/determine_semver_packages.py | 10 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | dev_bench/unixbench/run_unixbench.py | 242 | # Create a tmpdir for benchmarks that need it (fstime variants) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dev_tools/lock_viewer/server.py | 115 | def find_rust_function_bounds( | CODE |
| LOW | dev_bench/unixbench/unixbench_common.py | 65 | def ensure_unixbench_downloaded(workspace_root: Path) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dev_tools/lock_viewer/server.py | 75 | # Check if this is a summary line | COMMENT |