The Microsoft community Windows Package Manager manifest repository
This report summarizes scanner evidence for microsoft/winget-pkgs with 11,266 GitHub stars. SynthScan examined 19,459,318 lines of code across 744483 source files, recording 9969 pattern matches distributed across 11 syntactic categories. The legacy adjusted pattern signal is 0.6 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 9949 finding(s).
Are imports declared and package/API names verified? 10 finding(s).
Are wrappers, guards, and repeated structures necessary? 11 finding(s).
Which changes need focused human review? 9969 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 9969 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Tools/ManualValidation/ManualValidationPipeline.cs | 781 | System.Diagnostics.Process.Start(ManifestUrl); | COMMENT |
| LOW | Tools/ManualValidation/ManualValidationPipeline.cs | 1881 | //Composite settings; | COMMENT |
| LOW | Tools/ManualValidation/ManualValidationPipeline.cs | 2141 | //////////////////////====================--------------------====================//////////////////// | COMMENT |
| LOW | .github/workflows/unattended-artifact-triage.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"6e531a5d8a60cf0121641412bb47aa0d5924cfffa974f46ff51ea367c39 | COMMENT |
| LOW | .github/workflows/unattended-artifact-triage.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/unattended-artifact-triage.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 (source v9) | COMMENT |
| LOW | .github/workflows/unattended-artifact-triage.lock.yml | 741 | id: pre_agent_audit | COMMENT |
| LOW | .github/workflows/label-reconciliation-assist.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"9c56074f7e75378fe7dff22de153e0fa56430c3658e7871459f0d6575a7 | COMMENT |
| LOW | .github/workflows/label-reconciliation-assist.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/label-reconciliation-assist.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 (source v9) | COMMENT |
| LOW | .github/workflows/label-reconciliation-assist.lock.yml | 821 | # --allow-tool shell(cat) | COMMENT |
| LOW | .github/workflows/missing-dependency-assist.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"7eddd964f5b521addb2ea2fcf90199e6c9ccef338fdc39e834fc168c89c | COMMENT |
| LOW | .github/workflows/missing-dependency-assist.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/missing-dependency-assist.lock.yml | 41 | # - actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 | COMMENT |
| LOW | .github/workflows/missing-dependency-assist.lock.yml | 841 | # --allow-tool safeoutputs | COMMENT |
| LOW | …thub/workflows/transient-security-explanation.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"da9213bafa2172beea74a2a6b019414c39b2a3c543147d0bb02fac9edde | COMMENT |
| LOW | …thub/workflows/transient-security-explanation.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | …thub/workflows/transient-security-explanation.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 (source v9) | COMMENT |
| LOW | …thub/workflows/transient-security-explanation.lock.yml | 781 | # Copilot CLI tool arguments (sorted): | COMMENT |
| LOW | .github/workflows/manifest-metadata-review.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"5e54a415317d63bdaca1e6d90a6689ecc3141a9a2ffe7ce87ff693beccd | COMMENT |
| LOW | .github/workflows/manifest-metadata-review.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/manifest-metadata-review.lock.yml | 41 | # - actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 | COMMENT |
| LOW | .github/workflows/manifest-metadata-review.lock.yml | 781 | run: bash "${RUNNER_TEMP}/gh-aw/actions/clean_git_credentials.sh" | COMMENT |
| LOW | .github/workflows/wingetbot-pr-triage.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"e6ac4cf4d3576bc6e02c15fd9c710fddca5d538c2107d24a7cda5b54f70 | COMMENT |
| LOW | .github/workflows/wingetbot-pr-triage.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/wingetbot-pr-triage.lock.yml | 41 | # - actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 | COMMENT |
| LOW | .github/workflows/wingetbot-pr-triage.lock.yml | 861 | id: pre_agent_audit | COMMENT |
| LOW | .github/workflows/elevation-requirement-review.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"4f8604a01e49519aec52fbb8ec4bde327d7aa2aa6b2c9796fb68e1351a7 | COMMENT |
| LOW | .github/workflows/elevation-requirement-review.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/elevation-requirement-review.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 (source v9) | COMMENT |
| LOW | .github/workflows/elevation-requirement-review.lock.yml | 801 | # --allow-tool shell(github:*) | COMMENT |
| LOW | .github/workflows/domain-validation-assist.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"70b9b6c8e7884db3079759e79952cf0c62bb61773305cb3640563f3c875 | COMMENT |
| LOW | .github/workflows/domain-validation-assist.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/domain-validation-assist.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 (source v9) | COMMENT |
| LOW | …ithub/workflows/manifest-validation-diagnosis.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"a9940198f17cd1767dc6fbcd4b4ef1e6b42c21d17b4e60f203d27cc1bc3 | COMMENT |
| LOW | …ithub/workflows/manifest-validation-diagnosis.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | …ithub/workflows/manifest-validation-diagnosis.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 (source v9) | COMMENT |
| LOW | …ithub/workflows/manifest-validation-diagnosis.lock.yml | 801 | # --allow-tool shell(cat) | COMMENT |
| LOW | .github/workflows/spellCheck.yaml | 1 | name: Spell Checking | COMMENT |
| LOW | .github/workflows/spellCheck.yaml | 21 | # | COMMENT |
| LOW | doc/tools/YamlCreate.md | 41 | # manual - Never downloads any files. All InstallerSha256 values must be entered manually | COMMENT |
| LOW | …derickQiu/wnr/1.23.0/RoderickQiu.wnr.locale.en-US.yaml | 1 | # Created with YamlCreate.ps1 v2.4.3 $debug=AUSU.CRLF.7-4-6.Win32NT | COMMENT |
| LOW | …derickQiu/wnr/1.23.0/RoderickQiu.wnr.locale.en-US.yaml | 21 | # Tags: | COMMENT |
| LOW | …/r/Runebook/Tome/0.6.0/Runebook.Tome.locale.zh-CN.yaml | 1 | # Created with YamlCreate.ps1 v2.4.6 $debug=NVS1.CRLF.7-5-1.Win32NT | COMMENT |
| LOW | …nsX/OpenCodex/2.0.1/RyensX.OpenCodex.locale.zh-CN.yaml | 1 | # Created with YamlCreate.ps1 v2.7.2 $debug=NVS1.CRLF.7-6-2.Win32NT | COMMENT |
| LOW | …layer/24.0.4/RealNetworks.RealPlayer.locale.zh-CN.yaml | 1 | # Created with YamlCreate.ps1 v2.7.1 $debug=NVS1.CRLF.7-5-4.Win32NT | COMMENT |
| LOW | …eckboard/1.9.94/RivaFarabi.Deckboard.locale.en-US.yaml | 1 | # Created with YamlCreate.ps1 v2.4.3 $debug=AUSU.CRLF.7-4-6.Win32NT | COMMENT |
| LOW | …eckboard/1.9.94/RivaFarabi.Deckboard.locale.en-US.yaml | 21 | # Tags: | COMMENT |
| LOW | …nnoon/OC-Claw/1.8.4/rainnoon.OC-Claw.locale.zh-CN.yaml | 1 | # Created with YamlCreate.ps1 v2.7.2 $debug=NVS1.CRLF.7-6-1.Win32NT | COMMENT |
| LOW | …/RyzenControllerTeam.RyzenController.locale.en-US.yaml | 1 | # Created with YamlCreate.ps1 v2.4.3 $debug=AUSU.CRLF.7-4-6.Win32NT | COMMENT |
| LOW | …/RyzenControllerTeam.RyzenController.locale.en-US.yaml | 21 | # Tags: | COMMENT |
| LOW | …/RyzenControllerTeam.RyzenController.locale.en-US.yaml | 1 | # Created with YamlCreate.ps1 v2.4.3 $debug=AUSU.CRLF.7-4-6.Win32NT | COMMENT |
| LOW | …/RyzenControllerTeam.RyzenController.locale.en-US.yaml | 21 | # Tags: | COMMENT |
| LOW | …/RyzenControllerTeam.RyzenController.locale.en-US.yaml | 1 | # Created with YamlCreate.ps1 v2.4.3 $debug=AUSU.CRLF.7-4-6.Win32NT | COMMENT |
| LOW | …/RyzenControllerTeam.RyzenController.locale.en-US.yaml | 21 | # Tags: | COMMENT |
| LOW | …etixLine/1.0.9.4/rere43.CCometixLine.locale.en-US.yaml | 1 | # Created with YamlCreate.ps1 v2.7.1 $debug=NVS1.CRLF.7-5-4.Win32NT | COMMENT |
| LOW | …ild 1125) stable/RoonLabs.RoonBridge.locale.en-US.yaml | 21 | Tags: | COMMENT |
| LOW | …ter/7.5.1/RenewedVision.ProPresenter.locale.en-US.yaml | 1 | # Created with YamlCreate.ps1 v2.4.3 $debug=AUSU.CRLF.7-4-6.Win32NT | COMMENT |
| LOW | …ter/7.5.1/RenewedVision.ProPresenter.locale.en-US.yaml | 21 | # Tags: | COMMENT |
| LOW | …irect/0.7.3.0/rcmaehl.MSEdgeRedirect.locale.en-US.yaml | 21 | # Tags: | COMMENT |
| 9430 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ils/coreutils/0.9.0/uutils.coreutils.locale.en-US.yaml | 48 | - It's worth noting that many of these CVEs are not memory-safety issues but differences in behavior from GNU coreut | CODE |
| MEDIUM | …ape/Inkscape/1.3.2/Inkscape.Inkscape.locale.en-US.yaml | 36 | - The data that was lost when saving these shapes with Inkscape 1.3.1 in an Inkscape SVG file can be recovered in Inks | CODE |
| LOW | …ovide/Neovide/0.15.0/Neovide.Neovide.locale.en-US.yaml | 29 | We are also looking for feedback on theese new settings, so don't forget to share you favourite defaults here #3077 | CODE |
| MEDIUM | …baj/Mermaid/0.30.0/NoahSabaj.Mermaid.locale.en-US.yaml | 27 | ReleaseNotes: "## Mermaid 0.30.0\n\n\n### Added\n\n• **`/usage` shows what the session cost.** Below the token counts it | CODE |
| MEDIUM | …GrafanaLabs/k6/0.51.0/GrafanaLabs.k6.locale.en-US.yaml | 21 | ReleaseNotes: "k6 v0.51.0 is here 🎉! Some special mentions included in this release:- A new experimental streams module\ | CODE |
| LOW | …er/NetPad/0.9.0/TareqImbasher.NetPad.locale.en-US.yaml | 106 | helps! Also don't forget to star the repo if you haven't already, thank you! | CODE |
| LOW | …r/NetPad/0.11.0/TareqImbasher.NetPad.locale.en-US.yaml | 91 | helps! Also don't forget to star the repo if you haven't already, thank you! | CODE |
| LOW | …ext/0.9.0/TareqImbasher.NetPad.vNext.locale.en-US.yaml | 106 | helps! Also don't forget to star the repo if you haven't already, thank you! | CODE |
| LOW | …xt/0.11.0/TareqImbasher.NetPad.vNext.locale.en-US.yaml | 91 | helps! Also don't forget to star the repo if you haven't already, thank you! | CODE |
| LOW | …ext/0.8.0/TareqImbasher.NetPad.vNext.locale.en-US.yaml | 92 | If you're enjoying NetPad and would like to support open-source, please consider sponsoring the project, it really hel | CODE |
| LOW | …xt/0.10.0/TareqImbasher.NetPad.vNext.locale.en-US.yaml | 93 | helps! Also don't forget to star the repo if you haven't already, thank you! | CODE |
| LOW | …er/NetPad/0.8.0/TareqImbasher.NetPad.locale.en-US.yaml | 92 | If you're enjoying NetPad and would like to support open-source, please consider sponsoring the project, it really hel | CODE |
| LOW | …r/NetPad/0.10.0/TareqImbasher.NetPad.locale.en-US.yaml | 91 | helps! Also don't forget to star the repo if you haven't already, thank you! | CODE |
| LOW | …ests/s/sxyazi/yazi/0.3.3/sxyazi.yazi.locale.en-US.yaml | 35 | Windows Terminal Preview v1.22.2362.0 now supports the Sixel image format. Yazi provided an adaptation for this in #15 | CODE |
| MEDIUM | …/hledger/1.33.1/simonmichael.hledger.locale.en-US.yaml | 34 | ReleaseNotes: "Release notes\nhledger 1.33.1\n- process >=1.6.19.0 seems not strictly needed and is no longer required,\ | CODE |
| MEDIUM | …el/hledger/1.34/simonmichael.hledger.locale.en-US.yaml | 34 | ReleaseNotes: "Release notes\nhledger 1.34\nBreaking changes- check ordereddates no longer supports --date2. Also (not a | CODE |
| LOW | …Sidero/omnictl/0.47.0/Sidero.omnictl.locale.en-US.yaml | 69 | - 951c0de fix: don't forget to close grpc connections in tests | CODE |
| LOW | …Sidero/omnictl/0.46.2/Sidero.omnictl.locale.en-US.yaml | 36 | - 1710ea0 fix: don't forget to close grpc connections in tests | CODE |
| LOW | …tellarium/25.4/Stellarium.Stellarium.locale.en-US.yaml | 111 | - Changed core: Don't forget to run markdownToHTML on an SC description section | CODE |
| MEDIUM | …e/1.1.20/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.1.3/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.3.9/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.27/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.1.4/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.11/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.29/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.28/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.3.1/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.10/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.19/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.3.8/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.26/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.1.5/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.21/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.1.2/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.2.23/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.2.15/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.2.12/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.2.13/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.2.14/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.2.3/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.2.4/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.3.14/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.4.1/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.2.5/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.3.12/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.2.2/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.1.7/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.24/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.23/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.1.9/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.3.4/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.3.3/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.12/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.13/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.3.2/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.1.8/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 31 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.3.5/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …le/1.1.1/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| MEDIUM | …e/1.1.22/Oven-sh.Bun.BaselineProfile.locale.en-US.yaml | 32 | # or you can use npm | COMMENT |
| 218 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …k/0.6.0/rullerzhou-afk.clawd-on-desk.locale.en-US.yaml | 80 | - Theme ecosystem — fully pluggable theme system replacing hardcoded constants. Themes now define state-to-asset mappi | CODE |
| MEDIUM | …baj/Mermaid/0.26.0/NoahSabaj.Mermaid.locale.en-US.yaml | 27 | ReleaseNotes: "## Mermaid 0.26.0\n\n\n### Added\n\n• **One integration test binary.** The 23 integration test crates und | CODE |
| MEDIUM | …GitButler/0.20.0/GitButler.GitButler.locale.en-US.yaml | 19 | ReleaseNotes: "ReleaseNotes: |-\n ## GitButler for AI agents\n \n GitButler can now be used directly by your coding a | CODE |
| MEDIUM | …GitButler/0.20.0/GitButler.GitButler.locale.en-US.yaml | 19 | ReleaseNotes: "ReleaseNotes: |-\n ## GitButler for AI agents\n \n GitButler can now be used directly by your coding a | CODE |
| MEDIUM⚡ | …rragrunt/0.92.0/Gruntwork.Terragrunt.locale.en-US.yaml | 31 | $ terragrunt scaffold github.com/gruntwork-io/terragrunt//test/fixtures/scaffold/with-shell-commands | CODE |
| MEDIUM⚡ | …rragrunt/0.92.0/Gruntwork.Terragrunt.locale.en-US.yaml | 38 | $ terragrunt scaffold github.com/gruntwork-io/terragrunt//test/fixtures/scaffold/with-hooks | CODE |
| MEDIUM⚡ | …rragrunt/0.92.0/Gruntwork.Terragrunt.locale.en-US.yaml | 46 | $ terragrunt scaffold github.com/gruntwork-io/terragrunt//test/fixtures/scaffold/with-hooks --non-interactive | CODE |
| MEDIUM⚡ | …rragrunt/0.92.0/Gruntwork.Terragrunt.locale.en-US.yaml | 56 | $ terragrunt scaffold github.com/gruntwork-io/terragrunt//test/fixtures/scaffold/with-hooks --non-interactive --no-hoo | CODE |
| MEDIUM⚡ | …rragrunt/0.92.0/Gruntwork.Terragrunt.locale.en-US.yaml | 63 | $ terragrunt scaffold github.com/gruntwork-io/terragrunt//test/fixtures/scaffold/with-shell-commands --non-interactive | CODE |
| MEDIUM | …ixer-23.javascript-package-delegator.locale.en-US.yaml | 28 | * dc22ca19507458c113f3104a43a514df3da41918 feat(create): support scoped initializers and optimize pnpm mapping\n\n# Us | COMMENT |
| MEDIUM | …ixer-23.javascript-package-delegator.locale.en-US.yaml | 79 | * bdaca9fe4e81b290868b4f6d79a8dd526d62511c \docs(create): add create command to documentation\n\n# Add create command | COMMENT |
| MEDIUM | …udeCode/2.1.202/Anthropic.ClaudeCode.locale.en-US.yaml | 57 | - Changed /review <pr> back to a fast single-pass review; use /code-review <level> <pr#> for the multi-agent review at | CODE |
| MEDIUM | …uan025/Chaty/2.1.8/Fangyuan025.Chaty.locale.en-US.yaml | 28 | ReleaseNotes: "## A book that closed the app now imports\n\nA 348-page book in Chinese closed the app every time it was\ | CODE |
| MEDIUM | …s/o/OpenAI/Codex/0.45.0/OpenAI.Codex.locale.en-US.yaml | 36 | - #4706 Fix command output truncation that sometimes used too much of the context window | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.150.0/OpenAI.Codex.locale.en-US.yaml | 45 | - #39702 Wait for turn completion events in multi-agent resume tests @copyberry | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.150.0/OpenAI.Codex.locale.en-US.yaml | 54 | - #39722 Track multi-agent v2 spawn calls in analytics @copyberry | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.150.0/OpenAI.Codex.locale.en-US.yaml | 86 | - #39804 Use multi-agent V1 for Amazon Bedrock models @copyberry | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.150.0/OpenAI.Codex.locale.en-US.yaml | 97 | - #39847 Include context window IDs in response metadata @copyberry | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.140.0/OpenAI.Codex.locale.en-US.yaml | 50 | - #27007 multi-agent: add path-based v2 activity tracking @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.140.0/OpenAI.Codex.locale.en-US.yaml | 56 | - #27173 app-server: reject direct input to multi-agent v2 sub-agents @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.140.0/OpenAI.Codex.locale.en-US.yaml | 84 | - #27375 [codex] Tag multi-agent spawn metrics with version @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.140.0/OpenAI.Codex.locale.en-US.yaml | 125 | - #27488 [codex] Add new context window tool @pakrym-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.140.0/OpenAI.Codex.locale.en-US.yaml | 141 | - #27569 multi-agent: move concurrency guidance into v2 usage hints @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.144.0/OpenAI.Codex.locale.en-US.yaml | 102 | - #31621 tui: warn on Ultra with high multi-agent concurrency @shijie-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.125.0/OpenAI.Codex.locale.en-US.yaml | 87 | - #18879 [rollout_trace] Trace sessions and multi-agent edges @cassirer-openai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.161.0/OpenAI.Codex.locale.en-US.yaml | 52 | - #49267 Support remote agent message boards in multi-agent sessions @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.161.0/OpenAI.Codex.locale.en-US.yaml | 73 | - #49345 Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock @celia-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.161.0/OpenAI.Codex.locale.en-US.yaml | 78 | - #49369 Update Bedrock GPT-6 Sol catalog tests to expect multi-agent V2 @celia-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.161.0/OpenAI.Codex.locale.en-US.yaml | 109 | - #49560 Add an opt-in model catalog to multi-agent context @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.100.0/OpenAI.Codex.locale.en-US.yaml | 97 | - #11516 Clamp auto-compact limit to context window @aibrahim-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.100.0/OpenAI.Codex.locale.en-US.yaml | 98 | - #11520 Update context window after model switch @aibrahim-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.113.0/OpenAI.Codex.locale.en-US.yaml | 111 | - #13896 Fix TUI context window display before first TokenCount @etraut-openai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.157.0/OpenAI.Codex.locale.en-US.yaml | 95 | - #47235 Route multi-agent spawning through SpawnRequest @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.136.0/OpenAI.Codex.locale.en-US.yaml | 90 | - #24903 Reap stale multi-agent slots @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.132.0/OpenAI.Codex.locale.en-US.yaml | 61 | - #23147 Make multi-agent v2 tool namespace configurable @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.138.0/OpenAI.Codex.locale.en-US.yaml | 59 | - #26254 feat: catalog multi-agent v2 config @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.138.0/OpenAI.Codex.locale.en-US.yaml | 106 | - #26210 Encrypt multi-agent v2 message payloads @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.117.0/OpenAI.Codex.locale.en-US.yaml | 109 | - #15313 feat: change multi-agent to use path-like system instead of uuids @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.117.0/OpenAI.Codex.locale.en-US.yaml | 137 | - #15515 feat: structured multi-agent output @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.117.0/OpenAI.Codex.locale.en-US.yaml | 150 | - #15570 feat: custom watcher for multi-agent v2 @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.117.0/OpenAI.Codex.locale.en-US.yaml | 151 | - #15575 feat: custom watcher for multi-agent v2 @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.117.0/OpenAI.Codex.locale.en-US.yaml | 152 | - #15576 feat: custom watcher for multi-agent v2 @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.149.0/OpenAI.Codex.locale.en-US.yaml | 132 | - #39102 Raise the GPT-5.6 maximum context window @copyberry | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.128.0/OpenAI.Codex.locale.en-US.yaml | 53 | - #19360 feat: surface multi-agent thread limit in spawn description @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.143.0/OpenAI.Codex.locale.en-US.yaml | 79 | - #29067 Namespace multi-agent v2 tools under collaboration @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.143.0/OpenAI.Codex.locale.en-US.yaml | 112 | - #29519 core: persist initial context window metadata @bolinfest | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.143.0/OpenAI.Codex.locale.en-US.yaml | 119 | - #29664 refactor: extract context window token status @bolinfest | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 58 | - #25266 Set multi-agent v2 dogfood defaults @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 79 | - #25636 [codex] Rename multi-agent v2 assign_task to followup_task @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 116 | - #25720 Add multi-agent runtime metadata types @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 117 | - #25721 Persist multi-agent runtime metadata @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 118 | - #25722 Resolve per-thread multi-agent runtime @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 119 | - #25841 session: keep startup prewarm aligned with resolved multi-agent runtime @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 121 | - #25723 Test remote multi-agent runtime selector override @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 152 | - #25953 feat: add skills extension scaffold @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.152.0/OpenAI.Codex.locale.en-US.yaml | 79 | - #41380 Clarify proactive multi-agent delegation guidance @copyberry | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.152.0/OpenAI.Codex.locale.en-US.yaml | 103 | - #41457 Source proactive multi-agent instructions from the model catalog @copyberry | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.152.0/OpenAI.Codex.locale.en-US.yaml | 112 | - #41570 Fix proactive multi-agent instruction grammar @copyberry | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.139.0/OpenAI.Codex.locale.en-US.yaml | 55 | - #26994 Rename multi-agent v2 close_agent to interrupt_agent @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.139.0/OpenAI.Codex.locale.en-US.yaml | 67 | - #27037 [codex] Calm multi-agent v2 usage prompts @jif-oai | CODE |
| 42 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …kj/DSHDesktop/0.2.0/iuikj.DSHDesktop.locale.en-US.yaml | 9 | Description: dsh-desktop wraps the local DeepSeek Harness Web GUI (default http://127.0.0.1:3080) into an Electron deskt | CODE |
| MEDIUM | …baj/Mermaid/0.30.0/NoahSabaj.Mermaid.locale.en-US.yaml | 27 | ReleaseNotes: "## Mermaid 0.30.0\n\n\n### Added\n\n• **`/usage` shows what the session cost.** Below the token counts it | CODE |
| MEDIUM | …Server/2.15.0/NATSAuthors.NATSServer.locale.en-US.yaml | 27 | ReleaseNotes: "## Changelog\r\n\r\nRefer to the [2.15 Upgrade Guide](https://docs.nats.io/release-notes/upgrade-to-2.15) | CODE |
| MEDIUM | …ne/26.08.4/NortheBridge.LuminalShine.locale.en-US.yaml | 54 | - Direct-to-Encoder architecture (#152): corrected the capture description to show DWM rendering into LuminalVGD, fram | CODE |
| MEDIUM | …ests/n/nao1215/gup/1.1.3/nao1215.gup.locale.en-US.yaml | 37 | - 26ad3de Merge pull request #252 from nao1215/fix/robust-cli-safety | CODE |
| MEDIUM | …tCommander/4.8.31/GNU.MidnightCommander.installer.yaml | 11 | # When running the installer with an "elevate-able" account, but DIDN'T elevate before, a | COMMENT |
| MEDIUM | …GrafanaLabs/k6/0.48.0/GrafanaLabs.k6.locale.en-US.yaml | 45 | - browser#1074 adds a new browser.closeContext() method to facilitate closing the current active browser context. | CODE |
| MEDIUM | …xie/Classic/5.71.4/Sandboxie.Classic.locale.en-US.yaml | 28 | Sandboxie-Plus 1.16.4 / Classic 5.71.4 has been released on October 2nd, 2025. This version introduces a new protectio | CODE |
| MEDIUM | …Sandboxie/Plus/1.16.4/Sandboxie.Plus.locale.en-US.yaml | 28 | Sandboxie-Plus 1.16.4 / Classic 5.71.4 has been released on October 2nd, 2025. This version introduces a new protectio | CODE |
| MEDIUM | …/StablyAI/Orca/1.4.173/StablyAI.Orca.locale.en-US.yaml | 60 | Note: 1.4.172 was cut with #12673 + #12746 but never published (build failed on the relay watcher harness). Prefer 1.4 | CODE |
| MEDIUM | …S/SOPS/3.13.3/SecretsOPerationS.SOPS.locale.en-US.yaml | 72 | The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the a | CODE |
| MEDIUM | …odeDesktop/1.3.0/SST.OpenCodeDesktop.locale.en-US.yaml | 72 | - System Prompt (#18140): Cleaner AI responses with a streamlined fallback system prompt that removes unnecessary boil | CODE |
| MEDIUM | …ts/s/SST/opencode/1.3.0/SST.opencode.locale.en-US.yaml | 66 | - System Prompt (#18140): Cleaner AI responses with a streamlined fallback system prompt that removes unnecessary boil | CODE |
| MEDIUM | …/SnoopWpf/Snoop/5.1.0/SnoopWpf.Snoop.locale.en-US.yaml | 29 | - #416 - Copy delve type name into clipboard (thanks @miloush) | CODE |
| MEDIUM | …/CopilotCLI/1.33.0/Amazon.CopilotCLI.locale.en-US.yaml | 42 | - Allow decryption of secrets with CMK (#5576): In v1.32.1, a security patch restricted kms:Decrypt to ECS Execution R | CODE |
| MEDIUM | …OpenCowork/1.0.7/AIDotNet.OpenCowork.locale.en-US.yaml | 44 | - Improved C# native worker OpenAI Audio Models with robust deserialization and error handling | CODE |
| MEDIUM | …/0.8.1/AmintaCCCP.GithubStarsManager.locale.en-US.yaml | 52 | | #344 | Add global Q&A history drawer and session switcher to the repository detail view for seamless browsing of AI | CODE |
| MEDIUM | …v/Harnest/0.12.0/AlexGladkov.Harnest.locale.en-US.yaml | 28 | `install` генерит `~/.claude/agents/profile-router.md` (claude-code). Точка входа любого чистого флоу:детектит профиль | CODE |
| MEDIUM | …ng2kim/wmux/3.45.0/openwong2kim.wmux.locale.en-US.yaml | 30 | ReleaseNotes: "### Added\n\n• **The unread-glow dim is now adjustable.** A pane holding an unvisited\n notification use | CODE |
| MEDIUM | ….4.0master-c6302a1/OpenRCT2.OpenRCT2.locale.en-US.yaml | 76 | - Fix: [#14920] Ghosts for rides and shops do not auto-elevate when obscured. | CODE |
| MEDIUM | …s/o/OpenAI/Codex/0.24.0/OpenAI.Codex.locale.en-US.yaml | 57 | - #2699 Fixed a bug that causes token refresh to not work in a seamless manner | CODE |
| MEDIUM | …s/o/OpenAI/Codex/0.80.0/OpenAI.Codex.locale.en-US.yaml | 85 | - #8888 fix: leverage find_resource! macro in load_sse_fixture_with_id @bolinfest | CODE |
| MEDIUM | …s/o/OpenAI/Codex/0.80.0/OpenAI.Codex.locale.en-US.yaml | 87 | - #8887 fix: leverage codex_utils_cargo_bin() in codex-rs/core/tests/suite @bolinfest | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.128.0/OpenAI.Codex.locale.en-US.yaml | 72 | - #19266 [codex] add non-local thread store regression harness @wiltzius-openai | CODE |
| MEDIUM | …s/o/OpenAI/Codex/0.39.0/OpenAI.Codex.locale.en-US.yaml | 40 | - [#3822] chore: update "Codex CLI harness, sandboxing, and approvals" section (#3822) | CODE |
| MEDIUM | …s/o/OpenAI/Codex/0.28.0/OpenAI.Codex.locale.en-US.yaml | 52 | - #3062 fix: leverage windows-11-arm for Windows ARM builds | CODE |
| MEDIUM | …s/o/OpenAI/Codex/0.81.0/OpenAI.Codex.locale.en-US.yaml | 75 | - #8983 feat: testing harness for collab 1 @jif-oai | CODE |
| MEDIUM⚡ | …/o/OpenAI/Codex/0.137.0/OpenAI.Codex.locale.en-US.yaml | 108 | - #25683 [codex] Add comprehensive root formatting check @anp-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.142.0/OpenAI.Codex.locale.en-US.yaml | 49 | - #28508 [tests] Keep Apps out of generic core test harness @jif-oai | CODE |
| MEDIUM | …/o/OpenAI/Codex/0.141.0/OpenAI.Codex.locale.en-US.yaml | 51 | - #28120 bazel: add PowerShell to Wine test harness @anp-oai | CODE |
| MEDIUM | …odeWhale/0.8.62/HunterBown.CodeWhale.locale.en-US.yaml | 41 | - Agent clarification questions (#3102). Agents now have a first-class request_user_input tool to ask the user structu | CODE |
| MEDIUM | …odeWhale/0.8.65/HunterBown.CodeWhale.locale.en-US.yaml | 42 | - Config modularization (#3311). ProviderKind (#3505), harness posture (#3507), and provider default seeds (#3503) mov | CODE |
| MEDIUM | …vision/libsrt/1.5.6/Haivision.libsrt.locale.en-US.yaml | 19 | ReleaseNotes: "## Security Notice\r\n\r\nThis release includes important security updates that address two significant C | CODE |
| MEDIUM | …vision/libsrt/1.5.6/Haivision.libsrt.locale.en-US.yaml | 19 | ReleaseNotes: "## Security Notice\r\n\r\nThis release includes important security updates that address two significant C | CODE |
| MEDIUM | …ertrand/zxc/0.14.1/hellobertrand.zxc.locale.en-US.yaml | 11 | ReleaseNotes: "# Release Notes\r\n\r\nv0.14.1 is a hardening release:every decode path got stricter, block decompression | CODE |
| MEDIUM | …ft.Gaming.GDK.XboxGamePackageManager.locale.en-US.yaml | 21 | ReleaseNotes: "## What's Changed\r\n• Task 1/6:Integration test suite foundation (strategy, project, mock harness, CI) b | CODE |
| MEDIUM | …m/Microsoft/APM/0.12.3/Microsoft.APM.locale.en-US.yaml | 42 | - fix(install): restore static-target deploy path; tighten test fixtures for #1154 strict harness detection by @daniel | CODE |
| MEDIUM | …/6.0.0.3/JustArchiNET.ArchiSteamFarm.locale.en-US.yaml | 40 | ReleaseNotes: "Changelog\nChanges since V5.5.3.4:- [!] ASF V6 comes with modern System.Text.Json replacement of previous | CODE |
| LOW | …AP/262.5752.1/JetBrains.DataGrip.EAP.locale.en-US.yaml | 54 | - Custom colors now work differently. Before, the fixed #RRGGBB hex code looked the same across all IDE themes, meanin | CODE |
| MEDIUM | …EAP/251.23536.35/JetBrains.Rider.EAP.locale.en-US.yaml | 38 | Support for C# string interpolation is now available in the decompiler, making the output more readable and aligned wi | CODE |
| MEDIUM | …nuxCmd/1.0.1/caomengxuan666.WinuxCmd.locale.en-US.yaml | 34 | ReleaseNotes: "Windows binaries for v1.0.1\n\n### Architectures:\n• **x64**:Windows 64-bit\n• **ARM64**:Windows ARM64 (c | CODE |
| MEDIUM | …fests/c/Carvel/ytt/0.49.1/Carvel.ytt.locale.en-US.yaml | 32 | ReleaseNotes: "Installation\nBy downloading binary from the release\nFor instance, if you are using Linux on an AMD64 ar | CODE |
| MEDIUM | …fests/c/Carvel/ytt/0.49.1/Carvel.ytt.locale.en-US.yaml | 32 | ReleaseNotes: "Installation\nBy downloading binary from the release\nFor instance, if you are using Linux on an AMD64 ar | CODE |
| MEDIUM | …ts/c/CrewHaus/CLI/0.7.0/CrewHaus.CLI.locale.en-US.yaml | 26 | ReleaseNotes: "**Tools a harness can run without spending a token.** A CrewHaus harness could\ncall 22 builtin tools; it | CODE |
| MEDIUM | …ts/c/cataggar/ghr/0.9.0/cataggar.ghr.locale.en-US.yaml | 26 | - Improved documentation site (#218, #221, #222, #223, #229): the documentation at cataggar.github.io/ghr has been ref | CODE |
| MEDIUM | …Fabric/1.4.445/danielmiessler.Fabric.locale.en-US.yaml | 23 | PR #2091 by jimscard and ksylvan: Update Dockerfile for best practices and critical CVE fixes | CODE |
| MEDIUM | …21.3527.65.5/valinet.ExplorerPatcher.locale.en-US.yaml | 22 | ReleaseNotes: 1 Taskbar10_ The Windows 10 taskbar option is now no longer available on 26002+. (#3053, e57a6b0) This is | CODE |
| MEDIUM | …t/EmEditor/25.4.0/Emurasoft.EmEditor.locale.en-US.yaml | 43 | ReleaseNotesUrl: https://www.emeditor.com/emeditor-core/emeditor-v25-4-0-released-faster-more-robust-snippets-and-chat-w | CODE |
| MEDIUM | …sp/0.20.0/BlackwellSystems.agent-lsp.locale.en-US.yaml | 25 | • **MQL4/MQL5 support via `mql-lsp-server` (32nd CI-verified language)** ([#30](https://github.com/blackwell-systems/a | CODE |
| MEDIUM | …sts/k/Kindel/mcec/3.0.16/Kindel.mcec.locale.en-US.yaml | 37 | - Epic #84: clipboard tool + WinPrint hero harness by @tig in #140 | CODE |
| MEDIUM | …/kubescape/4.0.9/kubescape.kubescape.locale.en-US.yaml | 63 | - b79ec88 Merge pull request #2085 from Varadraj75/test/compliance-results-comprehensive | CODE |
| MEDIUM | …LiveKitCLI/2.18.8/LiveKit.LiveKitCLI.locale.en-US.yaml | 15 | ReleaseNotes: "## What's Changed\r\n• fix(deps):bump protocol for the merged simulation overall_score by @u9g in https:/ | CODE |
| MEDIUM | …n/Python/3/3/3.3.2/Python.Python.3.3.locale.en-US.yaml | 51 | - Issue #17732: Ignore distutils.cfg options pertaining to install paths if a virtual environment is active. | CODE |
| MEDIUM | …ge/WasmEdge/0.18.0/WasmEdge.WasmEdge.locale.en-US.yaml | 33 | ReleaseNotes: "### 0.18.0 (2026-10-05)\n\nBreaking changes:\n\n• [CAPI]\n • The `WasmEdge_ModuleInstanceAddFunction()`, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …fests/g/GitHub/cli/2.99.0/GitHub.cli.locale.en-US.yaml | 49 | # Create a linked branch for an issue and check it out in a worktree | COMMENT |
| MEDIUM | …o/OpenTofu/Tofu/1.10.0/OpenTofu.Tofu.locale.en-US.yaml | 60 | # Create a targets.txt file | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.10.0.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.10.4.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.16.0.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.14.0.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.15.0.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.10.3.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.10.2.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.16.2.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …/Lirikpro/Zush/3.9.5.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.10.1.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.12.1.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.13.1.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| MEDIUM | …Lirikpro/Zush/3.16.1.0/Lirikpro.Zush.locale.en-US.yaml | 4 | # This file is the SEO payload of the whole exercise: winget-pkgs manifests are mirrored by | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …k/1.3.0/rullerzhou-afk.clawd-on-desk.locale.en-US.yaml | 43 | - Session titles (#1127; issue #1125) — shows AI-generated Claude Code CLI | CODE |
| HIGH | …p/GDevelop/5.5.239/GDevelop.GDevelop.locale.en-US.yaml | 50 | - Ensure behaviors used in events generated by AI are automatically added to objects | CODE |
| HIGH | …etMyIP/0.24.0/Timthreetwelve.GetMyIP.locale.en-US.yaml | 103 | In each case I have reviewed what was generated by Copilot and made changes where necessary. | CODE |
| HIGH | …etMyIP/0.23.2/Timthreetwelve.GetMyIP.locale.en-US.yaml | 53 | In each case I have reviewed what was generated by Copilot and made changes where necessary. | CODE |
| HIGH | …owy/AppFlowy/0.8.8/AppFlowy.AppFlowy.locale.en-US.yaml | 48 | - Fixed numbered lists generated by AI to maintain the same index as the input | CODE |
| HIGH | …ind/12.2.15.1146/EdrawSoft.EdrawMind.locale.en-US.yaml | 33 | After the content is generated by AI, when inserted into the canvas theme, it supports analyzing the hierarchical stru | CODE |
| HIGH | …ind/12.2.14.1140/EdrawSoft.EdrawMind.locale.en-US.yaml | 33 | After the content is generated by AI, when inserted into the canvas theme, it supports analyzing the hierarchical stru | CODE |
| HIGH | …m-221/Alethon/0.3.0/plum-221.Alethon.locale.en-US.yaml | 30 | Honest note: repainted pixels are generated by AI, not the real content hidden underneath. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …SmartMeeting/1.0.6/Zoneyet.SmartMeeting.installer.yaml | 1 | # =============================================== | COMMENT |
| MEDIUM | …SmartMeeting/1.0.6/Zoneyet.SmartMeeting.installer.yaml | 5 | # =============================================== | COMMENT |
| MEDIUM | …/1.8.0/TRGamer-tech.FluentTaskScheduler.installer.yaml | 2 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/1.8.0/TRGamer-tech.FluentTaskScheduler.installer.yaml | 7 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/1.8.1/TRGamer-tech.FluentTaskScheduler.installer.yaml | 2 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/1.8.1/TRGamer-tech.FluentTaskScheduler.installer.yaml | 7 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …odium/1.97.0.25037/VSCodium.VSCodium.locale.en-US.yaml | 30 | ReleaseNotes: "update vscode to 1.97.0\nWhat's Changed\n- feat(1.97): update patches by @daiyam in #2166\n- fix(reh): mo | CODE |
| MEDIUM | …greenwell/lstr/0.4.0/bgreenwell.lstr.locale.en-US.yaml | 28 | ReleaseNotes: "Release Notes\nAdded\n• Added comprehensive sorting options for both classic and interactive modes:\n • | CODE |
| MEDIUM | …greenwell/lstr/0.4.0/bgreenwell.lstr.locale.en-US.yaml | 28 | ReleaseNotes: "Release Notes\nAdded\n• Added comprehensive sorting options for both classic and interactive modes:\n • | CODE |
| MEDIUM | …nifests/p/pnpm/pnpm/10.2.0/pnpm.pnpm.locale.en-US.yaml | 28 | ReleaseNotes: "See breaking changes in v10\nMinor Changes\n- Packages executed via pnpm dlx and pnpm create are allowed | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ity/2022/2022.2.9f1/Unity.Unity.2022.locale.en-US.yaml | 35 | - Burst: FunctionPointerMarkdig.Syntax.Inlines.HtmlEntityInlinedelegateMarkdig.Syntax.Inlines.HtmlEntityInline()::Invo | CODE |
| CRITICAL | …SNAP/13.0.0/EuropeanSpaceAgency.SNAP.locale.en-US.yaml | 55 | SNAP-3877 NullPointerException in code that uses org.esa.snap.engine_utilities.datamodel.AbstractMetadata.getBandAbsMe | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/manifest-metadata-review.md | 499 | `CHANGEME`, lorem ipsum, `example.com`, or an explicit `<placeholder>`. | CODE |
| LOW | …/GrafanaLabs/k6/1.3.0/GrafanaLabs.k6.locale.en-US.yaml | 127 | await frame.getByLabel('Email').fill('user@example.com'); | CODE |
| LOW | …/GrafanaLabs/k6/1.3.0/GrafanaLabs.k6.locale.en-US.yaml | 134 | await paymentFrame.getByLabel('Cardholder name').fill('John Doe'); | CODE |
| LOW | …assCode/4.4.0/antonreshetov.massCode.locale.en-US.yaml | 28 | - feat(devtools): add Lorem Ipsum generator by @antonreshetov in #645 | CODE |
| LOW | …pane/24.0.0/Firstversionist.Polypane.locale.en-US.yaml | 90 | - Fix Command bar: Lorem ipsum generator always returned 3 sentences | CODE |
| LOW | …ul/Monghoul/1.12.0/Monghoul.Monghoul.locale.en-US.yaml | 47 | - Generated data matches the field name — A string field called email, phone, city or avatar starts on a matching gene | CODE |
| LOW | …/b/BiomeJS/Biome/2.3.2/BiomeJS.Biome.locale.en-US.yaml | 40 | "Lorem ipsum dolor sit amet consectetur adipiscing elit." + | CODE |
| LOW | …/b/BiomeJS/Biome/2.3.2/BiomeJS.Biome.locale.en-US.yaml | 40 | "Lorem ipsum dolor sit amet consectetur adipiscing elit." + | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …uxCmd/0.16.3/caomengxuan666.WinuxCmd.locale.en-US.yaml | 63 | ### Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …r/20260203/PioneerDevelopers.Pioneer.locale.en-US.yaml | 92 | - Only add systems once in system search function GetNearbyStarSystemsByName (#6244) | CODE |