Distribute and run LLMs with a single file.
This report summarizes scanner evidence for mozilla-ai/llamafile, a C++ project with 26,218 GitHub stars. SynthScan examined 193,251 lines of code across 499 source files, recording 784 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 4.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 758 finding(s).
Are imports declared and package/API names verified? 8 finding(s).
Are wrappers, guards, and repeated structures necessary? 92 finding(s).
Which changes need focused human review? 784 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 784 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | diffusionfile/diffusionfile.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | llama.cpp.patches/ui-embed.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | llama.cpp.patches/fetch-ui-assets.sh | 1 | #!/bin/bash | COMMENT |
| LOW | llama.cpp.patches/fetch-ui-assets.sh | 81 | # | COMMENT |
| LOW | llama.cpp.patches/renames.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | agentfile/server_tools_adapter.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/server_tools_adapter.h | 21 | // | COMMENT |
| LOW | agentfile/server_tools_adapter.h | 41 | COMMENT | |
| LOW | agentfile/agentfile.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/agentfile.cpp | 21 | // http_fetch/web_search), entirely in-process: prompt in, answer out. | COMMENT |
| LOW | agentfile/agentfile.cpp | 41 | #include "llama.h" | COMMENT |
| LOW | agentfile/agentfile.cpp | 61 | COMMENT | |
| LOW | agentfile/util.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/util.h | 21 | COMMENT | |
| LOW | agentfile/tools/web_search.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/tools/web_search.h | 21 | // or its web UI. | COMMENT |
| LOW | agentfile/tools/get_datetime.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/tools/http_fetch.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/tools/http_fetch.h | 21 | // | COMMENT |
| LOW | agentfile/callbacks/progress.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/callbacks/session_recorder.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/callbacks/session_recorder.h | 21 | // entry's parent is the previous one. Token counts are zero: agent.cpp | COMMENT |
| LOW | agentfile/callbacks/confirmation.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/callbacks/confirmation.h | 21 | // call never runs without a trace. | COMMENT |
| LOW | agentfile/callbacks/error_recovery.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/callbacks/error_recovery.h | 21 | // ending. After kMaxConsecutiveFailures in a row, the next failure ends the | COMMENT |
| LOW | agentfile/callbacks/max_iterations.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/callbacks/trace.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | agentfile/callbacks/trace.h | 21 | // follow agent.cpp's examples/tracing: | COMMENT |
| LOW | transcribefile/cosmo_compat.c | 1 | // Cosmopolitan libc compatibility shims for transcribefile. | COMMENT |
| LOW | transcribefile/main.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/fa_helpers_test.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/fa_helpers_test.cpp | 21 | // These tests compare our AVX-512-optimized llamafile_fa_* helpers | COMMENT |
| LOW | tests/fa_helpers_test.cpp | 41 | #include <vector> | COMMENT |
| LOW | tests/backend_ops_harness.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/backend_ops_harness.cpp | 21 | // variants included) computed on each registered backend against the CPU | COMMENT |
| LOW | tests/transcribefile_smoke.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/extract_data_uris_test.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/gpu_backend_test.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/gpu_backend_test.cpp | 21 | // The device-count gate exercised here is the fix for issue #988: a backend | COMMENT |
| LOW | tests/sandbox_test.c | 1 | // -*- mode:c;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/sandbox_test.c | 21 | // Each case forks a child that installs one of the promise sets llamafile | COMMENT |
| LOW | tests/sandbox_test.c | 41 | #include <limits.h> | COMMENT |
| LOW | tests/integration/run_tests.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tests/integration/utils/prompts.py | 61 | # Canonical greeting liveness prompt -- confirms a mode responds with some | COMMENT |
| LOW | tests/sgemm/iqk_legacy_test.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/sgemm/sgemm_test_utils.h | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/sgemm/sgemm_test_utils.h | 201 | COMMENT | |
| LOW | tests/sgemm/sgemm_vecdot_test.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/sgemm/sgemm_vecdot_test.cpp | 21 | // ============================================================================ | COMMENT |
| LOW | tests/sgemm/sgemm_vecdot_test.cpp | 41 | // - Both implementations tend to perform similarly here since memory is | COMMENT |
| LOW | tests/sgemm/sgemm_vecdot_test.cpp | 61 | // - Lower is better | COMMENT |
| LOW | tests/sgemm/sgemm_matmul_test.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/sgemm/sgemm_matmul_test.cpp | 21 | // ============================================================================ | COMMENT |
| LOW | tests/sgemm/sgemm_matmul_test.cpp | 41 | // | COMMENT |
| LOW | tests/sgemm/sgemm_matmul_test.cpp | 61 | // Accuracy (ULP = Units in Last Place): | COMMENT |
| LOW | tests/sgemm/q8_0_layout_test.cpp | 1 | // q8_0_layout_test: Diagnostic for block_q8_0 vs block_q8_0_x4 memory layout | COMMENT |
| LOW | tests/sgemm/sgemm_sss_test.cpp | 1 | // -*- mode:c++;indent-tabs-mode:nil;c-basic-offset:4;coding:utf-8 -*- | COMMENT |
| LOW | tests/sgemm/sgemm_sss_test.cpp | 21 | // ============================================================================ | COMMENT |
| LOW | tests/sgemm/sgemm_sss_test.cpp | 41 | // - Single-precision accumulation | COMMENT |
| 584 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/integration/tests/test_tool_calling.py | 88 | def test_tool_call_correct_function(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_tool_calling.py | 122 | def test_tool_call_with_arguments(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_multimodal.py | 48 | def test_cli_multiple_images_with_markers(self, llamafile, mmproj, test_image, timeouts): | CODE |
| LOW | tests/integration/tests/test_multimodal.py | 60 | def test_cli_multiple_images_marker_mismatch(self, llamafile, mmproj, test_image, timeouts): | CODE |
| LOW | tests/integration/tests/test_multimodal.py | 124 | def test_server_describe_image(self, llamafile, mmproj, test_image, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_multimodal.py | 149 | def test_server_image_question(self, llamafile, mmproj, test_image, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_server.py | 13 | def test_server_starts_and_responds(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_server.py | 26 | def test_server_chat_completion(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_server.py | 51 | def test_server_chat_completion_math(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_server.py | 81 | def test_server_with_temperature_zero(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_server.py | 134 | def test_server_with_max_tokens(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_ssl.py | 148 | def test_https_server_rejects_plaintext( | CODE |
| LOW | tests/integration/tests/test_ssl.py | 179 | def test_download_model_over_https( | CODE |
| LOW | tests/integration/tests/test_combined.py | 15 | def test_combined_server_responds(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_combined.py | 37 | def test_combined_tui_and_server_simultaneously(self, llamafile, server_port, timeouts): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 77 | def _assert_sandbox_installed(pid: int): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 174 | def test_server_sandboxed_by_default(self, cpu_runner, server_port, timeouts, tmp_path): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 220 | def test_unsecure_flag_disables_sandbox(self, cpu_runner, server_port, timeouts, tmp_path): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 237 | def test_sandbox_status_always_logged(self, cpu_runner, server_port, timeouts, tmp_path): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 263 | def test_default_does_not_confine(self, cpu_runner, server_port, timeouts, tmp_path): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 280 | def test_confine_reads_confines_and_serves(self, cpu_runner, server_port, timeouts, tmp_path): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 333 | def test_embedded_zip_model_loads_under_sandbox( | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 380 | def test_cli_sandboxed_and_functional(self, cpu_runner, timeouts): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 397 | def test_chat_all_threads_sandboxed(self, cpu_runner, timeouts, tmp_path): | CODE |
| LOW | tests/integration/tests/test_sandbox.py | 443 | def test_combined_mode_skips_sandbox(self, cpu_runner, server_port, timeouts, tmp_path): | CODE |
| LOW⚡ | tests/integration/tests/test_agentfile.py | 423 | def test_tools_list_naming_nothing_is_rejected(tmp_path, spec): | CODE |
| LOW⚡ | tests/integration/tests/test_agentfile.py | 433 | def test_tools_default_is_none(tmp_path): | CODE |
| LOW⚡ | tests/integration/tests/test_agentfile.py | 442 | def test_tools_roster_lists_enabled_tools(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 209 | def test_http_fetch_reports_redirect_without_following(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 228 | def test_http_fetch_stops_reading_at_cap(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 246 | def test_http_fetch_skips_binary_type(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 262 | def test_http_fetch_sniffs_untyped_binary(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 276 | def test_http_fetch_returns_text_with_other_types(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 318 | def test_http_fetch_at_sign_stays_on_displayed_host(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 336 | def test_http_fetch_rejects_junk_after_port(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 351 | def test_http_fetch_relative_redirect_after_query(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 365 | def test_http_fetch_relative_redirect_with_url_in_query(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 393 | def test_web_search_null_fields_keep_results(http_server, tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 410 | def test_help_honors_searxng_url_flag(tmp_path, monkeypatch): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 454 | def test_bad_tools_runtime_fails_at_startup(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 463 | def test_read_only_preset_has_get_datetime(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 478 | def test_bad_count_flag_is_rejected(tmp_path, flag, value): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 487 | def test_context_is_capped_at_model_max(tmp_path, ctx_flag, wanted): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 513 | def test_session_tool_calls_have_paired_ids(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 528 | def test_unwritable_record_path_fails_before_load(tmp_path, flag): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 541 | def test_verbose_shows_model_load_error(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 553 | def test_very_verbose_shows_llama_info_log(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 570 | def test_quiet_yes_prints_audit_line(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 577 | def test_default_verbosity_has_progress_not_audit(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 588 | def test_guarded_call_without_terminal_ends_run(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 655 | def test_confirmation_yes_runs_the_call(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 664 | def test_declined_calls_end_the_run(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 675 | def test_typed_ahead_text_does_not_answer_the_prompt(tmp_path): | CODE |
| LOW | tests/integration/tests/test_agentfile.py | 682 | def test_interactive_follow_up_then_empty_line_ends(tmp_path): | CODE |
| LOW | tests/integration/tests/test_cli.py | 50 | def test_nothink_removes_thinking(self, llamafile, timeouts): | CODE |
| LOW | tests/integration/tests/test_cli.py | 61 | def test_nothink_shorter_output(self, llamafile, timeouts): | CODE |
| LOW | tests/integration/tests/test_help.py | 92 | def test_help_mentions_llamafile(self, executable, mode_args): | CODE |
| LOW | tests/integration/tests/test_help.py | 105 | def test_help_lists_llamafile_flags(self, executable, mode_args): | CODE |
| LOW | tests/integration/tests/test_help.py | 129 | def test_help_lists_sampling_and_common_args(self, executable, mode_args): | CODE |
| LOW | tests/integration/tests/test_help.py | 172 | def test_missing_model_exits_nonzero(self, executable): | CODE |
| 14 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | llamafile/metal.c | 142 | // generated by llama.cpp.patches/apply-patches.sh; ggml.c includes it | COMMENT |
| HIGH | third_party/mbedtls/error.c | 88 | /* Begin Auto-Generated Code. */ | COMMENT |
| HIGH | third_party/mbedtls/error.c | 422 | /* End Auto-Generated Code. */ | COMMENT |
| HIGH | third_party/mbedtls/error.c | 443 | /* Begin Auto-Generated Code. */ | COMMENT |
| HIGH | third_party/mbedtls/error.c | 634 | /* End Auto-Generated Code. */ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/integration/tests/test_gpu.py | 29 | except Exception: | CODE |
| HIGH | tests/integration/tests/test_gpu.py | 40 | except Exception: | CODE |
| HIGH | tests/integration/tests/test_gpu.py | 98 | except (ValueError, IndexError): | CODE |
| HIGH | tests/integration/tests/test_ssl.py | 92 | except requests.RequestException: | CODE |
| HIGH | tests/integration/tests/test_sandbox.py | 54 | except OSError: | CODE |
| HIGH | tests/integration/utils/llamafile.py | 479 | except requests.RequestException: | CODE |
| HIGH | tests/integration/utils/llamafile.py | 75 | except (BlockingIOError, IOError): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | llamafile/tinyblas_cpu.h | 25 | // ╚═╝ ╚═╝╚═╝ ╚═╝ ╚══╝ ╚═════╝ ╚═══╝╚═╝ ╚═╝╚═════╝ | COMMENT |
| MEDIUM | scripts/validate_docs.py | 22 | # ── helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/validate_docs.py | 32 | # ── 1. .gitbook.yaml ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/validate_docs.py | 61 | # ── 2. SUMMARY.md links ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/validate_docs.py | 89 | # ── 3. Relative links inside markdown files ─────────────────────────────────── | COMMENT |
| MEDIUM | scripts/validate_docs.py | 115 | # ── main ───────────────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/generate_github_pages_redirects.py | 150 | window.location.replace(target.toString()); | CODE |
| HIGH | scripts/generate_github_pages_redirects.py | 198 | const destination = redirectTargets[route] || docsBaseUrl.toString(); | CODE |
| HIGH | scripts/generate_github_pages_redirects.py | 202 | window.location.replace(target.toString()); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | agent.cpp.patches/apply-patches.sh | 13 | # Check if status is dirty, if so, exit | COMMENT |
| LOW | tools/generate_patches.sh | 103 | # Check if the diff is empty | COMMENT |
| LOW | llama.cpp.patches/apply-patches.sh | 27 | # Check if status is dirty, if so, exit | COMMENT |
| LOW | tests/integration/tests/test_tool_calling.py | 73 | # Check if model made a tool call | COMMENT |
| LOW | llamafile/release.sh | 16 | # Check if make install actually created ZIP_DIR | COMMENT |
| LOW | whisper.cpp.patches/apply-patches.sh | 13 | # Check if status is dirty, if so, exit | COMMENT |
| LOW | stable-diffusion.cpp.patches/apply-patches.sh | 13 | # Check if status is dirty, if so, exit | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | llama.cpp.patches/ui-embed.sh | 5 | # Usage: | COMMENT |
| LOW | tests/transcribefile_smoke.sh | 15 | # Usage: | COMMENT |
| LOW | tests/integration/run_tests.sh | 4 | # Usage: | COMMENT |
| LOW | tests/strsm/build_and_run.sh | 21 | # Usage: | COMMENT |
| LOW | llamafile/cuda.sh | 25 | # Usage: | COMMENT |
| LOW | llamafile/rocm.sh | 25 | # Usage: | COMMENT |
| LOW | llamafile/vulkan.sh | 21 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/api.md | 29 | Authorization: Bearer YOUR_API_KEY | CODE |
| HIGH | docs/api.md | 33 | X-Api-Key: YOUR_API_KEY | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/integration/tests/test_gpu.py | 15 | CODE | |
| LOW | tests/integration/tests/test_gpu.py | 50 | CODE | |
| LOW | tests/integration/tests/test_sandbox.py | 48 | CODE | |
| LOW | tests/integration/tests/test_sandbox.py | 119 | CODE | |
| LOW | tests/integration/tests/test_sandbox.py | 397 | CODE | |
| LOW | tests/integration/tests/test_agentfile.py | 51 | CODE | |
| LOW | tests/integration/tests/test_agentfile.py | 169 | CODE | |
| LOW | tests/integration/tests/test_agentfile.py | 71 | CODE | |
| LOW | tests/integration/utils/llamafile.py | 36 | CODE | |
| LOW | tests/integration/utils/llamafile.py | 543 | CODE | |
| LOW | scripts/validate_docs.py | 94 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | agentfile/agentfile.cpp | 19 | // agentfile: a self-contained agentic CLI. One APE binary runs an | COMMENT |
| MEDIUM | tests/run_integration_tests.sh | 24 | # reasoning trace + MXFP4 quantization give a threaded matmul rounding difference more | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | localscore/nvml.cpp | 129 | // TODO we need a more robust way to import symbols and versions. | COMMENT |
| MEDIUM | third_party/stb/stb_vorbis.c | 51 | // 1.10 - 2017-03-03 - more robust seeking; fix negative ilog(); clear error in open_memory | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/skills/llamafile/development.md | 62 | #### Step 1: Make Changes | COMMENT |
| LOW | docs/skills/llamafile/development.md | 72 | #### Step 2: Generate Patches | COMMENT |
| LOW | docs/skills/llamafile/development.md | 92 | #### Step 3: Verify Patches | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/integration/tests/test_gpu.py | 29 | except Exception: | CODE |
| LOW | tests/integration/tests/test_gpu.py | 40 | except Exception: | CODE |
| LOW | tests/integration/utils/llamafile.py | 99 | except Exception: | CODE |
| LOW | scripts/validate_docs.py | 44 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | llamafile/build-functions.sh | 22 | # This file contains common functions used by cuda.sh and rocm.sh | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/publish_docs.py | 10 | CODE | |
| LOW | scripts/generate_github_pages_redirects.py | 7 | CODE | |
| LOW | scripts/validate_docs.py | 14 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/ISSUE_TEMPLATE/07-refactor.yml | 9 | Don't forget to [check for existing refactor issue tickets](https://github.com/Mozilla-Ocho/llamafile/issues?q=i | CODE |
| LOW | .github/ISSUE_TEMPLATE/06-refactor.yml | 9 | Don't forget to [check for existing refactor issue tickets](https://github.com/Mozilla-Ocho/llamafile/issues?q=i | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/integration/utils/llamafile.py | 17 | logger = logging.getLogger(__name__) | CODE |