AI Slop Code RIsk Monitor

ministackorg/ministack

Ministack: Free, open-source local AWS emulator - 60+ services, Terraform compatible, real databases. Free forever. MIT licensed.

40.9 High pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for ministackorg/ministack, a Python project with 4,932 GitHub stars. SynthScan examined 428,730 lines of code across 265 source files, recording 13060 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 40.9 (High pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

40.9
Adjusted Signal
40.9
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
4.9K
Stars
Python
Language
428.7K
Lines of Code
265
Files
13.1K
Pattern Hits
2026-10-12
Scan Date
2.66
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 46.4/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 8317 finding(s).

Hallucinated Dependency & Supply Chain Risk 9.1/100 · LOW

Are imports declared and package/API names verified? 293 finding(s).

Agent Over-Engineering Ratio 84.9/100 · CRITICAL

Are wrappers, guards, and repeated structures necessary? 11970 finding(s).

PR Review Velocity Impact 92.7/100 · CRITICAL

Which changes need focused human review? 13060 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 705MEDIUM 2936LOW 9419

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 13060 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators2830 hits · 8176 pts
SeverityFileLineSnippetContext
MEDIUM⚡ministack/app.py1426# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡ministack/app.py1428# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡ministack/app.py2486# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡ministack/app.py2488# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py235# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py238# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py842# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py844# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py1545# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py1547# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py2307# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py2309# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py2746# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py2748# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py2937# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py2939# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/app.py568# ---------------------------------------------------------------------------STRING
MEDIUMministack/app.py570# ---------------------------------------------------------------------------STRING
MEDIUMministack/core/responses.py535# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/responses.py550# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡ministack/core/iam_evaluator.py715# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡ministack/core/iam_evaluator.py717# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py29# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py31# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py82# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py84# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py129# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py131# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py151# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py153# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py472# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py474# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py559# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py561# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py812# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py814# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py1079# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py1081# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py1190# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py1192# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py1227# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/iam_evaluator.py1229# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡ministack/core/lambda_runtime.py745 // ── require() intercept ────────────────────────────────────────────────COMMENT
MEDIUMministack/core/lambda_runtime.py131# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/lambda_runtime.py133# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/lambda_runtime.py367 // ── Lambda stub (REST-based, not JSON-RPC) ─────────────────────────────COMMENT
MEDIUMministack/core/lambda_runtime.py428 // ── OpenSearch stub (REST-JSON, not JSON-RPC) ─────────────────────────COMMENT
MEDIUM⚡ministack/core/lambda_runtime.py328# ---------------------------------------------------------------------------STRING
MEDIUM⚡ministack/core/lambda_runtime.py330# ---------------------------------------------------------------------------STRING
MEDIUMministack/core/lambda_runtime.py202# ---------------------------------------------------------------------------STRING
MEDIUMministack/core/lambda_runtime.py204# ---------------------------------------------------------------------------STRING
MEDIUMministack/core/lambda_runtime.py1695# ---------------------------------------------------------------------------STRING
MEDIUMministack/core/lambda_runtime.py1697# ---------------------------------------------------------------------------STRING
MEDIUM⚡ministack/core/pgproxy.py2470# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡ministack/core/pgproxy.py2472# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/pgproxy.py55# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/pgproxy.py57# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/pgproxy.py146# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/pgproxy.py148# ---------------------------------------------------------------------------COMMENT
MEDIUMministack/core/pgproxy.py227# ---------------------------------------------------------------------------COMMENT
2770 more matches not shown…
Hyper-Verbose Identifiers7514 hits · 4819 pts
SeverityFileLineSnippetContext
LOWCONTRIBUTING.md164def test_myservice_operation_one(mysvc):CODE
LOW⚡ministack/app.py1431async def _handle_cognito_body_request(method: str, path: str, headers: dict, body: bytes, query_params: dict):CODE
LOWministack/app.py83def _ws_resolve_iot_account_id(scope: dict, ws_headers: dict) -> str:CODE
LOWministack/app.py310def call_service_handler_sync(handler, method, path, headers, body, query_params, timeout: float | None = None):CODE
LOWministack/app.py742def _incomplete_request_body_response(method: str, path: str, headers: dict, query_params: dict):CODE
LOWministack/app.py909def _handle_unknown_localstack_request(path: str, request_id: str):CODE
LOWministack/app.py936def _handle_lambda_download_request(path: str, method: str):CODE
LOWministack/app.py963async def _handle_cognito_get_request(method: str, path: str, headers: dict, query_params: dict):CODE
LOWministack/app.py1012async def _handle_ses_messages_request(method: str, path: str, headers: dict, query_params: dict):CODE
LOWministack/app.py1083async def _handle_sqs_messages_request(method: str, path: str, headers: dict, query_params: dict):CODE
LOWministack/app.py1194async def _handle_sns_sms_messages_request(method: str, path: str, headers: dict, query_params: dict):CODE
LOWministack/app.py1327def _handle_elasticache_ca_request(method: str, path: str):CODE
LOWministack/app.py1401def _handle_transfer_sftp_ports_request(method: str, path: str):CODE
LOWministack/app.py1442async def _handle_admin_config_request(path: str, method: str, body: bytes):CODE
LOWministack/app.py1498async def _handle_post_body_shortcuts(CODE
LOWministack/app.py1694async def _handle_ecr_registry_request(method: str, path: str, headers: dict, body: bytes, query_params: dict):CODE
LOWministack/app.py1812def _resolve_custom_domain_request(host: str, path: str):CODE
LOWministack/app.py1829def _parse_cloudfront_dataplane_host(host: str) -> str | None:CODE
LOWministack/app.py1835async def _handle_cloudfront_dataplane_request(CODE
LOWministack/app.py1855async def _handle_execute_api_request(CODE
LOWministack/app.py1933def _is_potential_alb_request(host: str, path: str) -> bool:CODE
LOWministack/app.py1966def _function_url_auth_target(url_id: str) -> tuple[str, dict, tuple | None]:CODE
LOWministack/app.py1999async def _handle_lambda_url_request(host: str, path: str, method: str, headers: dict, body: bytes, query_params: dict):CODE
LOWministack/app.py2217def _iceberg_targets_glue_catalog(path, query_params):CODE
LOWministack/app.py2238async def _handle_special_data_plane_request(CODE
LOWministack/app.py2544async def _dispatch_service_request(CODE
LOWministack/app.py3174def _build_persistence_save_dict():CODE
LOWministack/core/responses.py33def _account_from_sts_session(access_key_id: str):CODE
LOWministack/core/responses.py378def _best_effort_region_from_arnish(value):CODE
LOWministack/core/responses.py594def expected_error_content_type(service: str, emitted_ct: str) -> str | None:CODE
LOWministack/core/responses.py719def install_docker_hub_fallback() -> None:CODE
LOW⚡ministack/core/iam_evaluator.py719def _role_name_from_assumed_arn(assumed_arn: str) -> str:CODE
LOWministack/core/iam_evaluator.py243def _op_string_equals_ignore_case(actual: str, expected: str) -> bool:CODE
LOWministack/core/iam_evaluator.py247def _op_string_not_equals_ignore_case(actual: str, expected: str) -> bool:CODE
LOWministack/core/iam_evaluator.py380def _evaluate_single_condition(operator: str, actual: Any,CODE
LOWministack/core/iam_evaluator.py662def _service_principal_matches(principal: Any, service: str) -> bool:CODE
LOWministack/core/iam_evaluator.py784def _resolve_managed_policy_document(policy_arn: str,CODE
LOWministack/core/iam_evaluator.py893def find_iam_access_key_account(access_key_id: str) -> str | None:CODE
LOWministack/core/lambda_runtime.py59def _lambda_function_account_region_from_arn(arn: str) -> tuple[str, str]:CODE
LOWministack/core/lambda_runtime.py73def _account_region_from_function_config(config: dict) -> tuple[str, str]:CODE
LOWministack/core/sigv4.py24def build_canonical_query_string(CODE
LOWministack/core/sigv4.py116def presigned_request_is_expired(CODE
LOWministack/core/iam_actions.py837def _kms_key_id_from_ciphertext(ciphertext_b64: str) -> str:CODE
LOWministack/core/iam_actions.py1650def eventbridge_resource_arns(body: bytes, region: str, account_id: str) -> list[str]:CODE
LOWministack/core/iam_actions.py1761def dynamodb_transaction_checks(CODE
LOWministack/services/cloudtrail.py226def _invalid_home_region_error(name: str, home_region: str):CODE
LOWministack/services/cloudtrail.py418def _is_non_aws_trail_arn_partition(raw: str) -> bool:CODE
LOW⚡ministack/services/mediaconnect.py295def _describe_flow_source_metadata(arn):CODE
LOW⚡ministack/services/mediaconnect.py302def _describe_flow_source_thumbnail(arn):CODE
LOWministack/services/sts.py110def _credential_error_response(error: CredentialResolutionError):CODE
LOW⚡ministack/services/lambda_microvms.py780def _create_microvm_shell_auth_token(microvm_id, body):CODE
LOWministack/services/lambda_microvms.py769def _create_microvm_auth_token(microvm_id, body):CODE
LOWministack/services/lambda_microvms.py896def _get_microvm_image_version(image_identifier, image_version):CODE
LOW⚡ministack/services/rds_iam_plugin.py160def configure_iam_auth_broker(container, resource_kind, resource_identifier, broker_host, broker_port):CODE
LOWministack/services/dsql.py955def _get_vpc_endpoint_service_name(identifier):CODE
LOW⚡ministack/services/rds.py1002def _legacy_scoped_rds_docker_volume_name(db_id, account_id=None, region=None):CODE
LOW⚡ministack/services/rds.py1010def _rds_cluster_docker_volume_name(cluster_id, account_id=None, region=None):CODE
LOW⚡ministack/services/rds.py2739def _mysql_gtid_history_ready(cluster):CODE
LOW⚡ministack/services/rds.py2746def _mysql_replication_server_id(account_id, region, cluster_id):CODE
LOW⚡ministack/services/rds.py2752def _global_cluster_member_for_cluster(cluster):CODE
7454 more matches not shown…
Empty Error Handlers569 hits · 2468 pts
SeverityFileLineSnippetContext
HIGHministack/app.py2482except Exception:CODE
HIGHministack/app.py2527except Exception:CODE
HIGHministack/app.py2046except ValueError:CODE
HIGHministack/app.py3485except OSError:CODE
HIGHministack/app.py3507except (ImportError, ValueError, OSError):CODE
HIGHministack/app.py822except Exception:CODE
HIGHministack/app.py2811except Exception:CODE
HIGHministack/core/responses.py54except Exception:CODE
HIGHministack/core/iam_evaluator.py284except (ValueError, AttributeError):CODE
HIGHministack/core/iam_evaluator.py288except (ValueError, TypeError, OSError):CODE
HIGHministack/core/persistence.py162except OSError:CODE
HIGHministack/core/lambda_runtime.py54except (AttributeError, TypeError):CODE
HIGHministack/core/lambda_runtime.py1450except Exception:CODE
HIGHministack/core/lambda_runtime.py1075except Exception:CODE
HIGHministack/core/lambda_runtime.py1293except queue.Empty:CODE
HIGHministack/core/lambda_runtime.py1503except Exception:CODE
HIGHministack/core/lambda_runtime.py1958except Exception:CODE
HIGHministack/core/lambda_runtime.py1477except Exception:CODE
HIGHministack/core/lambda_runtime.py1963except Exception:CODE
HIGHministack/core/lambda_runtime.py2226except Exception:CODE
HIGHministack/core/lambda_runtime.py2230except Exception:CODE
HIGHministack/core/lambda_runtime.py1268except Exception:CODE
HIGHministack/core/lambda_runtime.py1952except queue.Empty:CODE
HIGHministack/core/lambda_runtime.py1956except queue.Full:CODE
HIGHministack/core/node_pool.py58except Exception:CODE
HIGHministack/core/node_pool.py68except Exception:CODE
HIGHministack/core/concurrency.py145except RuntimeError:CODE
HIGHministack/core/concurrency.py188except Exception:CODE
HIGHministack/core/pgproxy.py2455except (asyncio.IncompleteReadError, ConnectionResetError, BrokenPipeError, OSError):CODE
HIGHministack/core/pgproxy.py2466except Exception:CODE
HIGHministack/core/tls.py57except ValueError:CODE
HIGHministack/core/rds_iam.py468except Exception:CODE
HIGHministack/core/router.py648except ValueError:CODE
HIGHministack/core/router.py50except Exception:CODE
HIGHministack/services/cloudtrail.py163except ValueError:CODE
HIGHministack/services/sts.py192except (json.JSONDecodeError, TypeError):CODE
HIGHministack/services/lambda_microvms.py490except Exception:CODE
HIGHministack/services/lambda_microvms.py744except Exception:CODE
HIGHministack/services/rds_iam_plugin.py151except Exception:CODE
HIGHministack/services/rds_iam_plugin.py156except Exception:CODE
HIGHministack/services/dsql.py246except Exception:CODE
HIGHministack/services/dsql.py347except RuntimeError:CODE
HIGHministack/services/dsql.py1170except RuntimeError:CODE
HIGHministack/services/dsql.py240except Exception:CODE
HIGHministack/services/rds.py1623except Exception:CODE
HIGHministack/services/rds.py1388except Exception:CODE
HIGHministack/services/rds.py2421except Exception:CODE
HIGHministack/services/rds.py2498except Exception:CODE
HIGHministack/services/rds.py2516except Exception:CODE
HIGHministack/services/rds.py2561except Exception:CODE
HIGHministack/services/rds.py2650except ValueError:CODE
HIGHministack/services/rds.py2978except Exception:CODE
HIGHministack/services/rds.py2419except Exception:CODE
HIGHministack/services/rds.py2543except Exception:CODE
HIGHministack/services/rds.py4234except json.JSONDecodeError:CODE
HIGHministack/services/rds.py6198except Exception:CODE
HIGHministack/services/rds.py6203except Exception:CODE
HIGHministack/services/rds.py526except Exception:CODE
HIGHministack/services/rds.py1261except Exception:CODE
HIGHministack/services/rds.py1607except Exception:CODE
509 more matches not shown…
Excessive Try-Catch Wrapping1036 hits · 711 pts
SeverityFileLineSnippetContext
LOW⚡ministack/app.py1421 except Exception as e:CODE
LOW⚡ministack/app.py2482 except Exception:CODE
LOW⚡ministack/app.py3077 except Exception as e:CODE
LOW⚡ministack/app.py3086 except Exception as e:CODE
LOW⚡ministack/app.py3093 except Exception as e:CODE
LOW⚡ministack/app.py3111 except Exception as e:CODE
LOW⚡ministack/app.py3116 except Exception as e:CODE
LOW⚡ministack/app.py3122 except Exception as e:CODE
LOWministack/app.py44 except Exception:CODE
LOWministack/app.py818 except Exception:CODE
LOWministack/app.py822 except Exception:CODE
LOWministack/app.py1051 except Exception:CODE
LOWministack/app.py1076 except Exception as e:CODE
LOWministack/app.py1137 except Exception:CODE
LOWministack/app.py1184 except Exception as e:CODE
LOWministack/app.py1229 except Exception:CODE
LOWministack/app.py1258 except Exception as e:CODE
LOWministack/app.py1336 except Exception as e:CODE
LOWministack/app.py1354 except Exception as e:CODE
LOWministack/app.py1385 except Exception as e:CODE
LOWministack/app.py1612 except Exception as e:CODE
LOWministack/app.py1850 except Exception as e:CODE
LOWministack/app.py1895 except Exception as e:CODE
LOWministack/app.py1928 except Exception as e:CODE
LOWministack/app.py2019 except Exception as e:CODE
LOWministack/app.py2053 except Exception as e:CODE
LOWministack/app.py2076 except Exception:CODE
LOWministack/app.py2157 except Exception as e:CODE
LOWministack/app.py2269 except Exception as e:CODE
LOWministack/app.py2378 except Exception:CODE
LOWministack/app.py2420 except Exception:CODE
LOWministack/app.py2428 except Exception:CODE
LOWministack/app.py2527 except Exception:CODE
LOWministack/app.py2717 except Exception as e:CODE
LOWministack/app.py2807 except Exception:CODE
LOWministack/app.py2811 except Exception:CODE
LOWministack/app.py2962 except Exception as e:CODE
LOWministack/app.py3049 except Exception as e:CODE
LOWministack/app.py3151 except Exception:CODE
LOWministack/app.py3203 except Exception:CODE
LOWministack/app.py3288 except Exception as e:CODE
LOWministack/app.py3344 except Exception as e:CODE
LOWministack/app.py3368 except Exception as e:CODE
LOWministack/app.py3380 except Exception as e:CODE
LOWministack/app.py3392 except Exception as e:CODE
LOWministack/core/responses.py54 except Exception:CODE
LOWministack/core/responses.py590 except Exception:CODE
LOWministack/core/iam_evaluator.py184 except Exception:CODE
LOWministack/core/iam_evaluator.py619 except Exception:CODE
LOWministack/core/persistence.py166 except Exception as e:CODE
LOWministack/core/persistence.py212 except Exception as e:CODE
MEDIUMministack/core/lambda_runtime.py1374def _read_response():CODE
LOW⚡ministack/core/lambda_runtime.py321 except Exception as e:CODE
LOWministack/core/lambda_runtime.py263 except Exception as e:CODE
LOWministack/core/lambda_runtime.py1075 except Exception:STRING
LOWministack/core/lambda_runtime.py1133 except Exception as e:STRING
LOWministack/core/lambda_runtime.py1268 except Exception:STRING
LOWministack/core/lambda_runtime.py1395 except Exception as e:STRING
LOWministack/core/lambda_runtime.py1450 except Exception:STRING
LOWministack/core/lambda_runtime.py1473 except Exception:STRING
976 more matches not shown…
Cross-Language Confusion133 hits · 701 pts
SeverityFileLineSnippetContext
HIGH⚡ministack/core/appsync_js.py166 return (o && o.s3) || null;CODE
HIGH⚡ministack/core/appsync_js.py166 return (o && o.s3) || null;CODE
HIGH⚡ministack/core/appsync_js.py174 for (const set of (result && result.sqlStatementResults) || []) {CODE
HIGH⚡ministack/core/appsync_js.py177 out.push(rows.map((r) => Object.fromEntries(CODE
HIGH⚡ministack/core/appsync_js.py179 const name = (cols[i] || {}).name || String(i);CODE
HIGH⚡ministack/core/appsync_js.py180 const [, value] = Object.entries(cell || {})[0] || [null, null];CODE
HIGH⚡ministack/core/appsync_js.py212 throw new EarlyReturn(value, returnOptions && returnOptions.skipTo);CODE
HIGH⚡ministack/core/appsync_js.py222 state.extensions.push({ op: "evictFromApiCache", typeName, fieldName, keys });CODE
HIGH⚡ministack/core/appsync_js.py226 state.extensions.push({ op: "setSubscriptionFilter", filter });CODE
HIGH⚡ministack/core/appsync_js.py229 state.extensions.push({ op: "setSubscriptionInvalidationFilter", filter });CODE
HIGH⚡ministack/core/appsync_js.py232 state.extensions.push({ op: "invalidateSubscriptions", payload });CODE
HIGH⚡ministack/core/appsync_js.py336 if (value === null || value === undefined) continue;CODE
HIGH⚡ministack/core/appsync_js.py336 if (value === null || value === undefined) continue;CODE
HIGH⚡ministack/core/appsync_js.py340 if (sub.length) parts.push(`(${sub.join(key === "and" ? " AND " : " OR ")})`);CODE
HIGH⚡ministack/core/appsync_js.py345 if (sub) parts.push(`NOT (${sub})`);CODE
HIGH⚡ministack/core/appsync_js.py350 if (operand === null || operand === undefined) continue;CODE
HIGH⚡ministack/core/appsync_js.py350 if (operand === null || operand === undefined) continue;CODE
HIGH⚡ministack/core/appsync_js.py355 parts.push(build(n, key, operand));CODE
HIGH⚡ministack/core/appsync_js.py409 if (orig && alias && alias !== orig) {CODE
HIGH⚡ministack/core/appsync_js.py410 ddbBindings.push(`const ${alias} = ${orig};`);CODE
HIGH⚡ministack/core/appsync_js.py418 ddbBindings.push(`const ${star.replace(/^\*\s*as\s*/, "")} = __ddb;`);CODE
HIGH⚡ministack/core/appsync_js.py422 if (orig) ddbBindings.push(`const ${alias || orig} = __ddb.${orig};`);CODE
HIGH⚡ministack/core/appsync_js.py422 if (orig) ddbBindings.push(`const ${alias || orig} = __ddb.${orig};`);CODE
HIGH⚡ministack/core/appsync_js.py425 ddbBindings.push(`const ${deflt} = __ddb;`);CODE
HIGH⚡ministack/core/appsync_js.py433;__exports.request = typeof request === "function" ? request : null;CODE
HIGH⚡ministack/core/appsync_js.py434;__exports.response = typeof response === "function" ? response : null;`;CODE
HIGH⚡ministack/core/appsync_js.py465 const value = handler(ctx) ?? null;CODE
HIGH⚡ministack/core/appsync_js.py473 return { status: "earlyReturn", value: e.value ?? null, appended,CODE
HIGH⚡ministack/core/appsync_js.py474 skipTo: e.skipTo ?? null, stash: ctx.stash ?? {} };CODE
HIGH⚡ministack/core/appsync_js.py482 message: String(e && e.message || e), errorType: "InternalError",CODE
HIGH⚡ministack/core/appsync_js.py482 message: String(e && e.message || e), errorType: "InternalError",CODE
HIGH⚡ministack/core/appsync_js.py483 data: null, errorInfo: null }, appended };CODE
HIGH⚡ministack/core/appsync_js.py495 message: String(e && e.message || e), errorType: "WorkerError",CODE
HIGH⚡ministack/core/appsync_js.py495 message: String(e && e.message || e), errorType: "WorkerError",CODE
HIGH⚡ministack/core/appsync_js.py496 data: null, errorInfo: null } };CODE
HIGHministack/core/appsync_js.py54 this.data = data ?? null;CODE
HIGHministack/core/appsync_js.py55 this.errorInfo = errorInfo ?? null;CODE
HIGHministack/core/appsync_js.py78 state.appended.push({ message, errorType: errorType || "UnknownError",CODE
HIGHministack/core/appsync_js.py79 data: data ?? null, errorInfo: errorInfo ?? null });CODE
HIGHministack/core/appsync_js.py155 if (v === null || v === undefined) return { NULL: true };CODE
HIGHministack/core/appsync_js.py155 if (v === null || v === undefined) return { NULL: true };CODE
HIGHministack/core/appsync_js.py300 if (v === null || v === undefined) return { NULL: true };CODE
HIGHministack/core/appsync_js.py300 if (v === null || v === undefined) return { NULL: true };CODE
HIGH⚡ministack/core/lambda_runtime.py1020 // If handler accepts callback (arity >= 3) or returned undefined,COMMENT
HIGH⚡ministack/core/lambda_runtime.py538 res.on("data", (c) => chunks.push(c));CODE
HIGH⚡ministack/core/lambda_runtime.py544 const type = parsed.__type || parsed.Code || "OpenSearchServiceError";CODE
HIGH⚡ministack/core/lambda_runtime.py547 parsed.Message || parsed.message || text || "OpenSearch service error"CODE
HIGH⚡ministack/core/lambda_runtime.py672 res.on("data", (c) => chunks.push(c));CODE
HIGH⚡ministack/core/lambda_runtime.py679 parsed.Message || parsed.message || text || "Service error"CODE
HIGH⚡ministack/core/lambda_runtime.py682 err.code = parsed.__type || parsed.Code || "ServiceError";CODE
HIGH⚡ministack/core/lambda_runtime.py733 if (typeof prop !== "string") return undefined;CODE
HIGH⚡ministack/core/lambda_runtime.py739 return undefined;CODE
HIGH⚡ministack/core/lambda_runtime.py800 region: process.env.AWS_REGION || process.env.FBT_AWS_REGION || "us-east-1",CODE
HIGH⚡ministack/core/lambda_runtime.py807 if (req.endpoint && req.endpoint.protocol === "http:") {CODE
HIGH⚡ministack/core/lambda_runtime.py808 if (opts && opts.agent instanceof https.Agent) {CODE
HIGH⚡ministack/core/lambda_runtime.py820 else if (options instanceof url.URL) options = url.parse(options.toString());CODE
HIGH⚡ministack/core/lambda_runtime.py823 const host = options.hostname || options.host || "";CODE
HIGH⚡ministack/core/lambda_runtime.py832 } else if (options.agent === undefined) {CODE
HIGH⚡ministack/core/lambda_runtime.py845 || (advertised && host === advertised)) {CODE
HIGH⚡ministack/core/lambda_runtime.py848 options.port = options.port && String(options.port) !== "443" ? options.port : msPort;CODE
73 more matches not shown…
Deep Nesting556 hits · 299 pts
SeverityFileLineSnippetContext
LOWministack/app.py963CODE
LOWministack/app.py1012CODE
LOWministack/app.py1083CODE
LOWministack/app.py1194CODE
LOWministack/app.py1442CODE
LOWministack/app.py1550CODE
LOWministack/app.py2080CODE
LOWministack/app.py2365CODE
LOWministack/app.py2544CODE
LOWministack/app.py2751CODE
LOWministack/app.py2967CODE
LOWministack/app.py3348CODE
LOWministack/core/responses.py378CODE
LOWministack/core/responses.py423CODE
LOWministack/core/responses.py347CODE
LOWministack/core/iam_evaluator.py89CODE
LOWministack/core/iam_evaluator.py436CODE
LOWministack/core/iam_evaluator.py678CODE
LOWministack/core/iam_evaluator.py750CODE
LOWministack/core/iam_evaluator.py1294CODE
LOWministack/core/lambda_runtime.py1568CODE
LOWministack/core/lambda_runtime.py1078CODE
LOWministack/core/lambda_runtime.py1297CODE
LOWministack/core/lambda_runtime.py1337CODE
LOWministack/core/lambda_runtime.py1930CODE
LOWministack/core/lambda_runtime.py2095CODE
LOWministack/core/lambda_runtime.py1374CODE
LOWministack/core/pgproxy.py240CODE
LOWministack/core/pgproxy.py319CODE
LOWministack/core/pgproxy.py383CODE
LOWministack/core/pgproxy.py634CODE
LOWministack/core/pgproxy.py767CODE
LOWministack/core/pgproxy.py962CODE
LOWministack/core/pgproxy.py1187CODE
LOWministack/core/pgproxy.py1578CODE
LOWministack/core/pgproxy.py1648CODE
LOWministack/core/pgproxy.py2044CODE
LOWministack/core/pgproxy.py2387CODE
LOWministack/core/pgproxy.py2412CODE
LOWministack/core/pgproxy.py512CODE
LOWministack/core/iam_actions.py269CODE
LOWministack/core/iam_actions.py323CODE
LOWministack/core/iam_actions.py348CODE
LOWministack/core/iam_actions.py492CODE
LOWministack/core/iam_actions.py616CODE
LOWministack/core/iam_actions.py857CODE
LOWministack/core/container_reaper.py123CODE
LOWministack/core/router.py26CODE
LOWministack/core/router.py694CODE
LOWministack/services/cloudtrail.py153CODE
LOWministack/services/sts.py178CODE
LOWministack/services/lambda_microvms.py973CODE
LOWministack/services/dsql.py1024CODE
LOWministack/services/dsql.py1196CODE
LOWministack/services/rds.py374CODE
LOWministack/services/rds.py1206CODE
LOWministack/services/rds.py1672CODE
LOWministack/services/rds.py2002CODE
LOWministack/services/rds.py2655CODE
LOWministack/services/rds.py2799CODE
496 more matches not shown…
Fake / Example Data145 hits · 107 pts
SeverityFileLineSnippetContext
LOWCHANGELOG.md796- **Cognito — `ListUsers` `Filter` matches values case-insensitively** — every comparison was an exact string match, so CODE
LOWministack/services/sts.py502 sig = _b64url(hmac.new(b"ministack-fake-key", f"{h}.{p}".encode(), hashlib.sha256).digest())CODE
LOW⚡tests/test_cognito.py2319 "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "John Doe",CODE
LOW⚡tests/test_cognito.py2373 assert attrs.get("name") == "John Doe"CODE
LOW⚡tests/test_cognito.py6615 Username="user@example.com",CODE
LOW⚡tests/test_cognito.py6619 UserPoolId=pid, Username="user@example.com", Password="Pass1234!", Permanent=TrueCODE
LOW⚡tests/test_cognito.py6649 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6673 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6703 cognito_idp.admin_disable_user(UserPoolId=pid, Username="user@example.com")CODE
LOW⚡tests/test_cognito.py6709 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6728 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6742 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6757 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6770 "us-east-1_pool", "client123", "user@example.com"CODE
LOW⚡tests/test_cognito.py6821 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6830 ChallengeResponses={"ANSWER": "SECRETCODE", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6895 ChallengeResponses={"ANSWER": "STILLWRONG", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6942 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6951 ChallengeResponses={"ANSWER": "magic-link-code", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6961 ChallengeResponses={"ANSWER": "123456", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6976 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6985 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py6995 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7012 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7021 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7031 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7044 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7080 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7088 ChallengeResponses={"ANSWER": "code", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7109 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7121 "us-east-1_pool", "client123", "user@example.com"CODE
LOW⚡tests/test_cognito.py7163 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7167 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7175 ChallengeResponses={"ANSWER": "", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7179 ChallengeResponses={"ANSWER": "", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7238 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7247 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7257 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7293 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7301 ChallengeResponses={"ANSWER": "", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7320 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7357 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7365 ChallengeResponses={"ANSWER": "code", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7375 ChallengeResponses={"ANSWER": "test", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7412 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7420 ChallengeResponses={"ANSWER": "code", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7456 "USERNAME": "user@example.com",CODE
LOW⚡tests/test_cognito.py7464 assert params.get("USER_ID_FOR_SRP") == "user@example.com"CODE
LOW⚡tests/test_cognito.py7556 AuthParameters={"USERNAME": "user@example.com", "SRP_A": srp_a})CODE
LOW⚡tests/test_cognito.py7561 AuthParameters={"USERNAME": "user@example.com", "CHALLENGE_NAME": "SRP_A", "SRP_A": srp_a})CODE
LOW⚡tests/test_cognito.py7566 "ChallengeResponses": {"USERNAME": "user@example.com", "ANSWER": "anything"}}CODE
LOW⚡tests/test_cognito.py7613 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7621 ChallengeResponses={"ANSWER": "123456", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7688 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7733 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7742 ChallengeResponses={"ANSWER": "code", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7846 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7856 ChallengeResponses={"ANSWER": f"attempt{i}", "USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7960 AuthParameters={"USERNAME": "user@example.com"},CODE
LOW⚡tests/test_cognito.py7968 ChallengeResponses={"ANSWER": "only-server-knows", "USERNAME": "user@example.com"},CODE
85 more matches not shown…
Overly Generic Function Names91 hits · 76 pts
SeverityFileLineSnippetContext
LOWministack/app.py263 async def handle_request(self, method, path, headers, body, query_params):CODE
LOWministack/services/cloudtrail.py781async def handle_request(method, path, headers, body_bytes, query_params):CODE
LOWministack/services/mediaconnect.py344async def handle_request(method, path, headers, body_bytes, query_params):CODE
LOWministack/services/sts.py178async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/lambda_microvms.py973async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/cloudfront_keyvaluestore.py129async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/dsql.py1229async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/rds.py11418async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/secretsmanager.py453async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/lambda_core.py465async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/backup.py835async def handle_request(method, path, headers, body_bytes, query_params):CODE
LOWministack/services/translate.py1039async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/elasticache.py913async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/alb.py1219async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/config.py387async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/ses.py130async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/emr.py653async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/dynamodb.py955async def handle_request(method: str, path: str, headers: dict, body: bytes, query_params: dict) -> tuple:CODE
LOWministack/services/imds.py163async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/opensearch.py1327async def handle_request(method, path, headers, body_bytes, query_params):CODE
LOW⚡ministack/services/cognito.py2128async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/waf.py385async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/cloudfront_dataplane.py700async def handle_request(dist: dict, method: str, path: str, raw_uri: str, raw_query_string: str,CODE
LOWministack/services/iam.py389async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/sqs.py345async def handle_request(method: str, path: str, headers: dict,CODE
LOWministack/services/eks.py2647async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/servicediscovery.py128async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/opensearchserverless.py971async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/ses_v2.py618async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/resource_groups.py576async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/cloudwatch_logs.py285async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/batch.py377async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/stepfunctions.py254async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/appsync_events.py581async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/msk.py595async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/s3files.py306async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/iotwireless.py108async def handle_request(CODE
LOW⚡ministack/services/appconfig.py1089async def handle_request(method, path, headers, body_bytes, query_params):CODE
LOWministack/services/bedrock_agent_runtime.py786async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/kinesis.py349async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/apigateway.py363async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/apigateway_v1.py1059async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/iot_jobs_data.py70async def handle_request(CODE
LOWministack/services/codebuild.py784async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/documentdb.py806async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/inspector2.py1174async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/mwaa.py684async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/eventbridge.py267async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/glue.py2662async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/bedrock_agent.py1498async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/location.py950async def handle_request(method, path, headers, body_bytes, query_params):CODE
LOW⚡ministack/services/transfer.py152async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/appsync.py995async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/pipes.py634async def handle_request(method, path, headers, body_bytes, query_params):CODE
LOWministack/services/dynamodb_streams.py46async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/cur.py234async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/acm.py222async def handle_request(method, path, headers, body, query_params):CODE
LOW⚡ministack/services/cloudwatch.py492async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/route53.py909async def handle_request(method, path, headers, body, query_params):CODE
LOWministack/services/ec2.py542async def handle_request(method, path, headers, body, query_params):CODE
31 more matches not shown…
Over-Commented Block89 hits · 53 pts
SeverityFileLineSnippetContext
LOWdocker-compose.yml41 interval: 5sCOMMENT
LOWdocker-compose.yml61 # retries: 5COMMENT
LOWministack/__init__.py1# Copyright (c) 2026 MiniStack Contributors. SPDX-License-Identifier: MITCOMMENT
LOWministack/app.py3001 # ministack-labelled container alive at boot is by definition anCOMMENT
LOWministack/app.py3021 logger.warning(COMMENT
LOWministack/core/responses.py541# ``application/x-amz-json-1.1``; query-protocol services answerCOMMENT
LOWministack/core/persistence.py21# On-disk state format versions. Files are wrapped asCOMMENT
LOWministack/core/lambda_runtime.py121# AWS never sends and diverge from the docker executor, which spawns freely.COMMENT
LOWministack/core/lambda_runtime.py141# The warm worker's env is fixed at spawn time, so its depth travels in theCOMMENT
LOWministack/core/concurrency.py221 # OS thread limit. `_run` never executes, so its `finally` never runsCOMMENT
LOWministack/core/__init__.py1# Copyright (c) 2026 MiniStack Contributors. SPDX-License-Identifier: MITCOMMENT
LOWministack/core/pgproxy.py1061# index creation is always asynchronous — plain CREATE INDEX fails withCOMMENT
LOWministack/core/iam_actions.py181# Sub-resource (query parameter) → IAM action, keyed by HTTP method. The valuesCOMMENT
LOWministack/core/router.py361 "host_patterns": [r"transfer\."],COMMENT
LOWministack/core/router.py1301 return "cognito-idp"COMMENT
LOWministack/core/router.py1341 if "granite" in path_lower or "cloudwatch" in path_lower:COMMENT
LOWministack/services/rds.py1321 # named volume even when standalone RDS persistence is disabled so stoppingCOMMENT
LOWministack/services/rds.py1721 # StopDBCluster stopped this standby's container along with theCOMMENT
LOWministack/services/rds.py4561 if reader_endpoint is endpoint:COMMENT
LOWministack/services/rds.py10101# Emulation scope: metadata only. Proxies, proxy endpoints, the default targetCOMMENT
LOWministack/services/dynamodb.py81_IMPORT_COMPLETE_AFTER_SEC = 1.0COMMENT
LOWministack/services/dynamodb.py241# Validation helpers — AWS-canonical limit + format enforcement.COMMENT
LOWministack/services/cognito.py441COMMENT
LOWministack/services/cognito.py461_pool_domain_map = AccountRegionScopedDict() # domain -> pool_idCOMMENT
LOWministack/services/cognito.py481# _roles: {authenticated: arn, unauthenticated: arn},COMMENT
LOWministack/services/cognito.py501# gained or lost. Effective tenant isolation is provided by the randomCOMMENT
LOWministack/services/cognito.py521_USER_AUTH_SESSION_TTL = 300 # 5 minutesCOMMENT
LOWministack/services/cognito.py541# 'challengeResult': bool | None, # None = pending (not yet verified)COMMENT
LOWministack/services/cognito.py5061# ===========================================================================COMMENT
LOWministack/services/cognito.py6701 # client authentication without invalidating the single-use code, soCOMMENT
LOWministack/services/iam.py81# them regardless of their own account. Ministack stores customerCOMMENT
LOWministack/services/iam.py101# ``NoSuchEntity`` by default so that typos surface locally the sameCOMMENT
LOWministack/services/lambda_durable.py41)COMMENT
LOWministack/services/cloudwatch_logs.py81# results, statistics}COMMENT
LOWministack/services/stepfunctions.py1901 # Lambda event under "Payload" (alongside "FunctionName"). Deliver onlyCOMMENT
LOWministack/services/stepfunctions.py4481# routing for one operation. Avoids a botocore runtime dependency.COMMENT
LOWministack/services/iotwireless.py121# present: the developer guide lists "the payload contains only the timestampCOMMENT
LOWministack/services/__init__.py1# Copyright (c) 2026 MiniStack Contributors. SPDX-License-Identifier: MITCOMMENT
LOWministack/services/apigateway.py121_PROXY_TIMEOUT_SECONDS = _timeout_from_env("MINISTACK_APIGW_PROXY_TIMEOUT_SECONDS", 30.0)COMMENT
LOWministack/services/apigateway.py141# response fully allows or denies all API requests that match the cachedCOMMENT
LOWministack/services/apigateway.py1721 # Apply the Lambda's headers, letting each override any case-insensitiveCOMMENT
LOWministack/services/apigateway_v1.py2921COMMENT
LOWministack/services/codebuild.py161 },COMMENT
LOWministack/services/codebuild.py181# ---------------------------------------------------------------------------COMMENT
LOWministack/services/glue.py381COMMENT
LOWministack/services/transfer.py501COMMENT
LOWministack/services/appsync.py981COMMENT
LOWministack/services/pipes.py381#COMMENT
LOWministack/services/acm.py41 # Strip _private_key before persisting — real AWS only exposes theCOMMENT
LOWministack/services/ec2.py2001# metadata-only record it has always been.COMMENT
LOWministack/services/lambda_svc.py141 parent = secrets.token_hex(8) # 16 hex charsCOMMENT
LOWministack/services/lambda_svc.py161# infinite loops"). So hop 17 is the first one dropped, and the depth checkCOMMENT
LOWministack/services/lambda_svc.py361 return {key: value for key, value in env.items() if key not in _RESERVED_RUNTIME_ENV_VARS}COMMENT
LOWministack/services/lambda_svc.py501# larger as base64 and forces a single-shot JSON parse on every restart,COMMENT
LOWministack/services/lambda_svc.py2921 config["StateReason"] = "The function is being updated."COMMENT
LOWministack/services/lambda_svc.py3221 if runtime.startswith("provided"):COMMENT
LOWministack/services/lambda_svc.py3241# redeploy:COMMENT
LOWministack/services/lambda_svc.py4261// Without USE_SSL the container talks to MiniStack over http://<gateway host>:<port>, but theCOMMENT
LOWministack/services/lambda_svc.py4481 # unlike the warm/local executors, nothing inside an RIE container stampsCOMMENT
LOWministack/services/lambda_svc.py4521 # The host MiniStack advertises for itself (custom-resource ResponseURLsCOMMENT
29 more matches not shown…
Self-Referential Comments17 hits · 38 pts
SeverityFileLineSnippetContext
MEDIUMministack/services/dynamodb.py5897 # Create the destination table from TableCreationParameters.COMMENT
MEDIUMministack/services/stepfunctions.py366 # Creating the same machine twice is idempotent on AWS and makes SDK retry safeCOMMENT
MEDIUMministack/services/cloudformation/changesets.py623 # Create a placeholder stack in REVIEW_IN_PROGRESSCOMMENT
MEDIUMtests/test_stepfunctions.py6802 # Create a Lambda that sleeps briefly to simulate real work.COMMENT
MEDIUMtests/test_eks.py737 # Create the 4 standard addons in one go.COMMENT
MEDIUMtests/test_mq.py370 # Create a userCOMMENT
MEDIUM⚡tests/test_appsync_events.py1272 # Create a throwaway API so we can open a connection.COMMENT
MEDIUMtests/test_rds_data.py1332 # Create a secret with JSON credentialsCOMMENT
MEDIUM⚡tests/test_lambda.py6910 # Create a queue directly in the internal stateCOMMENT
MEDIUM⚡tests/test_lambda.py9280 # Create a synthetic execution.COMMENT
MEDIUMtests/test_lambda.py4307 # Create a layer with a Python moduleCOMMENT
MEDIUMtests/test_lambda.py4318 # Create a function that imports from the layerCOMMENT
MEDIUMtests/test_lambda.py4427 # Create a layer with a Node.js module under nodejs/node_modules/COMMENT
MEDIUMtests/test_lambda.py4441 # Create a Node.js function that requires the layer packageCOMMENT
MEDIUMtests/test_lambda.py4478 # Create a layer with a Node.js package under nodejs/node_modules/COMMENT
MEDIUMtests/test_lambda.py4492 # Create an ESM handler that uses native import to load the layer package.COMMENT
MEDIUM⚡tests/test_cloudwatch_logs.py1800 # Create the parent log group first — _put_metric_filter would normallyCOMMENT
Cross-File Repetition3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHministack/services/eks.py0dispatch off the event loop. request paths here reach the docker daemon (container create/start/stop/ inspect), which blSTRING
HIGHministack/services/codebuild.py0dispatch off the event loop. request paths here reach the docker daemon (container create/start/stop/ inspect), which blSTRING
HIGHministack/services/glue.py0dispatch off the event loop. request paths here reach the docker daemon (container create/start/stop/ inspect), which blSTRING
Verbosity Indicators15 hits · 14 pts
SeverityFileLineSnippetContext
LOWministack/core/iam_evaluator.py575 # Step 1: explicit DenyCOMMENT
LOWministack/core/iam_evaluator.py587 # Step 2: explicit AllowCOMMENT
LOWministack/core/iam_evaluator.py599 # Step 3: implicit denyCOMMENT
LOW⚡tests/test_cognito.py2298 # Step 1: GET /oauth2/authorize → extract RelayState from redirect LocationCOMMENT
LOW⚡tests/test_cognito.py2314 # Step 2: POST /saml2/idpresponse with mock SAML assertionCOMMENT
LOW⚡tests/test_cognito.py2367 # Step 4: Verify user was created via AdminGetUserCOMMENT
LOW⚡tests/test_cognito.py2375 # Step 5: the federated refresh token refreshes the federated user's sessionCOMMENT
LOW⚡tests/test_cognito.py2713 # Step 3: MS must have called the IdP's token endpoint with the rightCOMMENT
LOW⚡tests/test_cognito.py2723 # Step 4: MS must redirect to the app callback with a MS-issued codeCOMMENT
LOW⚡tests/test_cognito.py2731 # Step 5: the federated user was provisioned under the OIDC providerCOMMENT
LOW⚡tests/test_cognito.py3445 # Step 1: username only.COMMENT
LOWtests/test_cognito.py2342 # Step 3: POST /oauth2/token with authorization_code grantCOMMENT
LOWtests/test_cognito.py2688 # Step 1: kick off authorize, grab the relay state from the IdP redirect.COMMENT
LOWtests/test_cognito.py2702 # Step 2: simulate the OIDC IdP calling back with code+state.COMMENT
LOWtests/test_cognito.py3462 # Step 2: password.COMMENT
Structural Annotation Overuse15 hits · 14 pts
SeverityFileLineSnippetContext
LOWministack/core/iam_evaluator.py575 # Step 1: explicit DenyCOMMENT
LOWministack/core/iam_evaluator.py587 # Step 2: explicit AllowCOMMENT
LOWministack/core/iam_evaluator.py599 # Step 3: implicit denyCOMMENT
LOW⚡tests/test_cognito.py2298 # Step 1: GET /oauth2/authorize → extract RelayState from redirect LocationCOMMENT
LOW⚡tests/test_cognito.py2314 # Step 2: POST /saml2/idpresponse with mock SAML assertionCOMMENT
LOW⚡tests/test_cognito.py2367 # Step 4: Verify user was created via AdminGetUserCOMMENT
LOW⚡tests/test_cognito.py2375 # Step 5: the federated refresh token refreshes the federated user's sessionCOMMENT
LOW⚡tests/test_cognito.py2713 # Step 3: MS must have called the IdP's token endpoint with the rightCOMMENT
LOW⚡tests/test_cognito.py2723 # Step 4: MS must redirect to the app callback with a MS-issued codeCOMMENT
LOW⚡tests/test_cognito.py2731 # Step 5: the federated user was provisioned under the OIDC providerCOMMENT
LOW⚡tests/test_cognito.py3445 # Step 1: username only.COMMENT
LOWtests/test_cognito.py2342 # Step 3: POST /oauth2/token with authorization_code grantCOMMENT
LOWtests/test_cognito.py2688 # Step 1: kick off authorize, grab the relay state from the IdP redirect.COMMENT
LOWtests/test_cognito.py2702 # Step 2: simulate the OIDC IdP calling back with code+state.COMMENT
LOWtests/test_cognito.py3462 # Step 2: password.COMMENT
Unused Imports15 hits · 12 pts
SeverityFileLineSnippetContext
LOWministack/core/appsync_js.py17CODE
LOWministack/core/appsync_graphql.py19CODE
LOWministack/core/node_pool.py24CODE
LOWministack/core/cloudfront_js.py8CODE
LOWministack/core/x509_utils.py23CODE
LOWministack/services/lambda_durable.py21CODE
LOWministack/services/iotwireless.py69CODE
LOWministack/services/iot_jobs_data.py28CODE
LOWministack/services/transfer.py35CODE
LOWministack/services/iot_data.py17CODE
LOWministack/services/iot.py65CODE
LOWtests/test_ministack.py531CODE
LOWtests/test_persistence.py521CODE
LOWtests/test_iot_data.py12CODE
LOWTestcontainers/python-testcontainers/test_ministack.py7CODE
Modern AI Meta-Vocabulary4 hits · 11 pts
SeverityFileLineSnippetContext
MEDIUMministack/services/bedrock_agent_runtime.py238 # emitted, even with enableTrace: no orchestration happens here (no modelCOMMENT
MEDIUMtests/test_bedrock_agent_runtime.py336 # No orchestration happens locally, so enableTrace must not produce anCOMMENT
MEDIUMtests/test_codebuild.py391 # The build runs in the project's image; the agent image only orchestrates.COMMENT
MEDIUM⚡tests/test_bedrock.py1250# Bedrock control-plane (guardrails, custom/imported models, provisionedCOMMENT
Modern Structural Boilerplate11 hits · 9 pts
SeverityFileLineSnippetContext
LOWministack/core/responses.py59def set_request_account_id(access_key_id: str) -> None:CODE
LOWministack/core/responses.py92def set_request_region(region: str | None) -> None:CODE
LOWministack/services/opensearch.py608def _set_vpc_options(rec: dict, options) -> None:CODE
LOWministack/services/cognito.py1365def _update_pending_challenge_result(session: dict, challenge_result: bool | None) -> None:CODE
LOWministack/services/cognito.py5116def _set_user_identities(user: dict, identities: list) -> None:CODE
LOWministack/services/cloudfront_dataplane.py520def _set_header_ci(headers: dict, name: str, value) -> None:CODE
LOWministack/services/ecs_metadata.py70def set_docker_id(token: str, docker_id: str) -> None:CODE
LOWministack/services/ecs_metadata.py76def set_task_status(task_arn: str, known_status=None, desired_status=None) -> None:CODE
LOWministack/services/ecs_metadata.py96def set_container_status(token: str, known_status: str) -> None:CODE
LOWministack/services/ecs_metadata.py103def set_all_container_status(task_arn: str, known_status: str) -> None:CODE
LOW⚡ministack/services/iot.py185def set_mtls_server_cert(cert_pem: str, key_pem: str) -> None:CODE
AI Slop Vocabulary6 hits · 9 pts
SeverityFileLineSnippetContext
LOWministack/services/dynamodb.py3328 work[attr] = operand # fallback: just set to operandCODE
LOWministack/services/cloudformation/provisioners.py7213 # Pre-check for duplicates to raise exception (not just return error response)COMMENT
MEDIUMtests/test_dynamodb.py2684 # is cheap and keeps the test robust if that ever changes.COMMENT
LOWtests/test_ecr.py586 # client still works after our /v2/ → ECR routing change. We just call it;COMMENT
MEDIUMtests/test_cloudfront_dataplane.py1406 # this test harness, so the gateway cert isn't trusted either).COMMENT
MEDIUMtests/test_firehose.py731 # Use a high Limit so the assertion is robust to other streams the sharedCOMMENT
Redundant / Tautological Comments4 hits · 5 pts
SeverityFileLineSnippetContext
LOWministack/services/s3tables.py683 # Check if namespace already exists.COMMENT
LOWministack/services/rds_data.py202 # Check if it's asking for a specific column (privilege check)COMMENT
LOWministack/services/cloudformation/engine.py1310 # Output value it is refused up front (see _validate_template_statics).COMMENT
LOWtests/test_emr.py513 # Set back to TrueCOMMENT
AI Structural Patterns6 hits · 3 pts
SeverityFileLineSnippetContext
LOWministack/services/rds.py5104CODE
LOWministack/services/ses.py519CODE
LOWministack/services/apigateway.py1601CODE
LOWministack/services/mwaa.py449CODE
LOWministack/services/athena.py1269CODE
LOWministack/services/s3.py3461CODE
Dead Code1 hit · 1 pts
SeverityFileLineSnippetContext
MEDIUMministack/services/lambda_svc.py1316CODE