LocalAI is the open-source AI engine. Run any model - LLMs, vision, voice, image, video - on any hardware. No GPU required.
1295 matches across 18 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | backend/python/pocket-tts/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/vibevoice/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/kitten-tts/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/whisperx/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/chatterbox/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/coqui/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/moonshine/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/neutts/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/qwen-tts/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/kokoro/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/faster-whisper/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/fish-speech/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/voxcpm/backend.py | 0 | backendservicer is the class that implements the grpc service |
| HIGH | backend/python/pocket-tts/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/vibevoice/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/kitten-tts/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/rerankers/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/diffusers/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/whisperx/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/chatterbox/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/coqui/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/moonshine/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/transformers/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/neutts/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/qwen-tts/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/kokoro/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/fish-speech/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/voxcpm/test.py | 0 | testbackendservicer is the class that tests the grpc service |
| HIGH | backend/python/pocket-tts/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/vibevoice/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/kitten-tts/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/rerankers/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/diffusers/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/whisperx/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/chatterbox/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/coqui/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/moonshine/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/transformers/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/neutts/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/qwen-tts/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/kokoro/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/fish-speech/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/voxcpm/test.py | 0 | this method sets up the grpc service by starting the server |
| HIGH | backend/python/pocket-tts/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/vibevoice/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/kitten-tts/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/rerankers/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/diffusers/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/whisperx/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/chatterbox/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/coqui/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/moonshine/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/transformers/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/neutts/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/qwen-tts/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/kokoro/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/fish-speech/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/voxcpm/test.py | 0 | this method tears down the grpc service by terminating the server |
| HIGH | backend/python/pocket-tts/test.py | 0 | this method tests if the server starts up successfully |
| HIGH | backend/python/vibevoice/test.py | 0 | this method tests if the server starts up successfully |
| 61 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | backend/python/liquid-audio/backend.py | 146 | def LoadModel(self, request, context): |
| MEDIUM | backend/python/liquid-audio/backend.py | 222 | def Predict(self, request, context): |
| MEDIUM | backend/python/liquid-audio/backend.py | 233 | def PredictStream(self, request, context): |
| MEDIUM | backend/python/liquid-audio/backend.py | 305 | def TTS(self, request, context): |
| MEDIUM | backend/python/liquid-audio/backend.py | 521 | def AudioTranscription(self, request, context): |
| MEDIUM | backend/python/liquid-audio/backend.py | 622 | def _run_training(self, request, job): |
| LOW | backend/python/liquid-audio/backend.py | 126 | except Exception: |
| LOW | backend/python/liquid-audio/backend.py | 134 | except Exception: |
| LOW | backend/python/liquid-audio/backend.py | 137 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 216 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 226 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 237 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 297 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 361 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 377 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 566 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 630 | except Exception as exc: |
| LOW | backend/python/liquid-audio/backend.py | 691 | except Exception: |
| LOW | backend/python/pocket-tts/backend.py | 117 | except Exception as e: |
| LOW | backend/python/pocket-tts/backend.py | 120 | except Exception as err: |
| LOW | backend/python/pocket-tts/backend.py | 150 | except Exception as e: |
| MEDIUM | backend/python/pocket-tts/backend.py | 151 | print(f"Error loading voice from {voice_input}: {e}", file=sys.stderr) |
| LOW | backend/python/pocket-tts/backend.py | 220 | except Exception as err: |
| MEDIUM | backend/python/pocket-tts/backend.py | 221 | print(f"Error in TTS: {err}", file=sys.stderr) |
| MEDIUM | backend/python/pocket-tts/backend.py | 154 | def TTS(self, request, context): |
| LOW | backend/python/pocket-tts/test.py | 43 | except Exception as err: |
| LOW | backend/python/pocket-tts/test.py | 61 | except Exception as err: |
| LOW | backend/python/pocket-tts/test.py | 98 | except Exception as err: |
| LOW | backend/python/pocket-tts/test.py | 137 | except Exception as err: |
| LOW | backend/python/ace-step/backend.py | 291 | except Exception: |
| LOW | backend/python/ace-step/backend.py | 369 | except Exception as e: |
| LOW | backend/python/ace-step/backend.py | 391 | except Exception as err: |
| MEDIUM | backend/python/ace-step/backend.py | 308 | def LoadModel(self, request, context): |
| LOW | backend/python/vibevoice/backend.py | 272 | except Exception as e: |
| MEDIUM | backend/python/vibevoice/backend.py | 276 | print("Error loading the ASR model. Trying to use SDPA.", file=sys.stderr) |
| LOW | backend/python/vibevoice/backend.py | 330 | except Exception as e: |
| MEDIUM | backend/python/vibevoice/backend.py | 334 | print("Error loading the model. Trying to use SDPA. However, note that only flash_attention_2 ha |
| LOW | backend/python/vibevoice/backend.py | 359 | except Exception as err: |
| MEDIUM | backend/python/vibevoice/backend.py | 463 | print(f"Error accessing self.device: {e}, falling back to CPU", file=sys.stderr) |
| LOW | backend/python/vibevoice/backend.py | 577 | except Exception as err: |
| MEDIUM | backend/python/vibevoice/backend.py | 578 | print(f"Error in TTS: {err}", file=sys.stderr) |
| MEDIUM | backend/python/vibevoice/backend.py | 598 | print(f"Error: Audio file not found: {audio_path}", file=sys.stderr) |
| LOW | backend/python/vibevoice/backend.py | 691 | except Exception as e: |
| LOW | backend/python/vibevoice/backend.py | 717 | except Exception as err: |
| MEDIUM | backend/python/vibevoice/backend.py | 718 | print(f"Error in AudioTranscription: {err}", file=sys.stderr) |
| MEDIUM | backend/python/vibevoice/backend.py | 475 | def TTS(self, request, context): |
| LOW | backend/python/vibevoice/test.py | 48 | except Exception as err: |
| LOW | backend/python/vibevoice/test.py | 66 | except Exception as err: |
| LOW | backend/python/vibevoice/test.py | 90 | except Exception as err: |
| LOW | backend/python/vibevoice/test.py | 128 | except Exception as err: |
| LOW | backend/python/vibevoice/test.py | 203 | except Exception as err: |
| LOW | backend/python/kitten-tts/backend.py | 56 | except Exception as err: |
| LOW | backend/python/kitten-tts/backend.py | 74 | except Exception as err: |
| MEDIUM | backend/python/kitten-tts/backend.py | 62 | def TTS(self, request, context): |
| LOW | backend/python/kitten-tts/test.py | 41 | except Exception as err: |
| LOW | backend/python/kitten-tts/test.py | 59 | except Exception as err: |
| LOW | backend/python/kitten-tts/test.py | 78 | except Exception as err: |
| LOW | backend/python/rerankers/backend.py | 69 | except Exception as err: |
| LOW | backend/python/rerankers/test.py | 41 | except Exception as err: |
| LOW | backend/python/rerankers/test.py | 58 | except Exception as err: |
| 348 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | docker-compose.yaml | 21 | # - DEBUG=true |
| LOW | docker-compose.yaml | 41 | - phi-2 |
| LOW | docker-compose.yaml | 61 | # init: true |
| LOW | docker-compose.distributed.yaml | 1 | # Docker Compose for LocalAI Distributed Mode |
| LOW | docker-compose.distributed.yaml | 121 | nats: |
| LOW | docker-compose.distributed.yaml | 141 | # count: all |
| LOW | docker-compose.distributed.yaml | 161 | # gRPC file staging becomes a no-op (paths match). |
| LOW | .docker/install-base-deps.sh | 1 | #!/usr/bin/env bash |
| LOW | .docker/install-base-deps.sh | 21 | # CUDA_MINOR_VERSION ("8" | "0" | "") |
| LOW | .docker/apt-mirror.sh | 1 | #!/bin/sh |
| LOW | core/config/model_config.go | 121 | // RetryAfterSeconds advises clients how long to wait before |
| LOW | core/config/model_config.go | 141 | |
| LOW | core/config/model_config.go | 161 | // Mode selects passthrough (wire-perfect) or translate (full |
| LOW | core/config/model_config.go | 221 | // a Router block, requests addressed to it are reclassified at runtime |
| LOW | core/config/model_config.go | 241 | // in the system prompt the classifier model sees — short, action- |
| LOW | core/config/model_config.go | 261 | |
| LOW | core/config/model_config.go | 281 | // (Label + Description fields). Empty falls back to the built-in |
| LOW | core/config/model_config.go | 301 | // {"route": "name"}. |
| LOW | core/config/model_config.go | 321 | // nomic-embed-text-v1.5 is the recommended default. |
| LOW | core/config/model_config.go | 361 | |
| LOW | core/config/application_config.go | 41 | Federated bool |
| LOW | core/config/application_config.go | 61 | // action: block # upgrade default mask -> block |
| LOW | core/config/application_config.go | 161 | Distributed DistributedConfig |
| LOW | core/config/application_config.go | 261 | "/static/", |
| LOW | core/config/application_config.go | 1401 | // o.Metrics = meter |
| LOW | core/config/gallery.go | 1 | package config |
| LOW | core/config/meta/registry_coverage_test.go | 21 | // and land in the catch-all "other" section — which is what we just |
| LOW | core/gallery/backends.go | 101 | } |
| LOW | core/gallery/importers/vibevoice-cpp.go | 21 | // the HF repo name containing "vibevoice.cpp"/"vibevoice-cpp", or on the |
| LOW | core/gallery/importers/importers.go | 21 | // modality (e.g. pipeline_tag: "automatic-speech-recognition") but no |
| LOW | core/gallery/importers/importers.go | 141 | // files) route to vllm-omni rather than plain vllm. |
| LOW | core/gallery/importers/importers.go | 181 | Name() string |
| LOW | core/backend/ctx_propagation_test.go | 1 | package backend_test |
| LOW | core/cli/worker/worker_vllm.go | 21 | ) |
| LOW | core/schema/localai.go | 421 | // curated pref-only backends default to false unless they also show up on |
| LOW | core/schema/localai.go | 441 | // for external routers that want LocalAI's classifier opinion without |
| LOW | core/schema/localai.go | 461 | Router string `json:"router"` |
| LOW | core/schema/localai.go | 481 | Cached bool `json:"cached,omitempty"` |
| LOW | core/schema/localai.go | 501 | // SuggestedAction is derived from the action ordering used by the |
| LOW | core/schema/openai.go | 181 | Context context.Context `json:"-"` |
| LOW | core/http/app.go | 41 | //go:embed react-ui/dist/* |
| LOW | core/http/app.go | 61 | // @tag.name embeddings |
| LOW | core/http/app.go | 81 | // @tag.name mcp |
| LOW | core/http/app.go | 461 | baseTag := `<base href="` + httpMiddleware.SecureBaseHref(baseURL) + `" />` |
| LOW | core/http/app.go | 541 | routes.RegisterJINARoutes(e, requestExtractor, application.ModelConfigLoader(), application.ModelLoader(), application. |
| LOW | core/http/middleware/route_model_test.go | 161 | }) |
| LOW | core/http/middleware/node_header.go | 81 | // interfaces (CloseNotifier, SetReadDeadline, etc.) on the real writer. |
| LOW | core/http/middleware/request_test.go | 161 | // |
| LOW | core/http/middleware/request_test.go | 601 | // These tests cover the per-request reasoning_effort -> enable_thinking mapping. |
| LOW | core/http/middleware/request.go | 381 | // 2. specific tool: {"type":"function", "function":{"name":"..."}} (current spec) |
| LOW | core/http/middleware/request.go | 701 | case string: |
| LOW | core/http/middleware/node_header_concurrency_test.go | 1 | package middleware |
| LOW | core/http/middleware/route_model.go | 21 | ) |
| LOW | core/http/middleware/route_model.go | 41 | // the prompt via LocalAI's rerankers backend. Returning nil signals |
| LOW | core/http/middleware/route_model.go | 81 | // Evaluator renders the classifier model's chat template around |
| LOW | core/http/middleware/route_model.go | 101 | // SetXRequest, looks at the resolved model's Router config, and (when |
| LOW | core/http/middleware/route_model.go | 121 | // context so UsageMiddleware records the routing. |
| LOW | core/http/middleware/route_model.go | 241 | registry.Put(cfg.Name, fp, c) |
| LOW | core/http/middleware/route_model.go | 361 | // usecase-conflict check (score + chat/completion/embeddings on |
| LOW | core/http/middleware/route_model.go | 441 | // |
| 293 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | core/schema/localai.go | 176 | // ─── Face recognition ────────────────────────────────────────────── |
| MEDIUM | core/schema/localai.go | 303 | // ─── Voice (speaker) recognition ─────────────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/Quantize.jsx | 19 | // ── Reusable sub-components ────────────────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/Quantize.jsx | 191 | // ── Main page ──────────────────────────────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/FaceRecognition.jsx | 84 | // ──────────────────────────── Analyze ──────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/FaceRecognition.jsx | 218 | // ──────────────────────────── Compare ──────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/FaceRecognition.jsx | 333 | // ──────────────────────────── Enrollment (register / identify / forget) ──────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/FaceRecognition.jsx | 516 | // ──────────────────────────── Embedding ──────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/FaceRecognition.jsx | 570 | // ──────────────────────────── Small shared bits ──────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/VoiceRecognition.jsx | 86 | // ──────────────────────────── Analyze ──────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/VoiceRecognition.jsx | 196 | // ──────────────────────────── Compare ──────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/VoiceRecognition.jsx | 288 | // ──────────────────────────── Enrollment ──────────────────────────── |
| MEDIUM | core/http/react-ui/src/pages/VoiceRecognition.jsx | 472 | // ──────────────────────────── Embedding ──────────────────────────── |
| MEDIUM | core/services/facerecognition/registry_test.go | 134 | // ─── fake gRPC backend ─────────────────────────────────────────────── |
| MEDIUM | tests/e2e-backends/backend_test.go | 710 | // ─── face recognition specs ───────────────────────────────────────── |
| MEDIUM | tests/e2e-backends/backend_test.go | 899 | // ─── voice (speaker) recognition specs ────────────────────────────── |
| MEDIUM | backend/python/tinygrad/backend.py | 57 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/tinygrad/backend.py | 64 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/tinygrad/backend.py | 72 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/tinygrad/backend.py | 74 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/tinygrad/backend.py | 158 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/tinygrad/backend.py | 160 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/diffusers/backend.py | 243 | # ================================================================ |
| MEDIUM | backend/python/diffusers/backend.py | 247 | # ================================================================ |
| MEDIUM | backend/python/diffusers/backend.py | 449 | # ================================================================ |
| MEDIUM | backend/python/diffusers/backend.py | 452 | # ================================================================ |
| MEDIUM | backend/python/common/libbackend.sh | 34 | # ===================================================================== |
| MEDIUM | backend/python/trl/reward_functions.py | 14 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/trl/reward_functions.py | 16 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/trl/reward_functions.py | 102 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/trl/reward_functions.py | 104 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/trl/reward_functions.py | 116 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/trl/reward_functions.py | 118 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/trl/reward_functions.py | 178 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/trl/reward_functions.py | 180 | # --------------------------------------------------------------------------- |
| MEDIUM | backend/python/insightface/engines.py | 61 | # ─── Antispoofer (Silent-Face MiniFASNet) ────────────────────────────── |
| MEDIUM | backend/python/insightface/engines.py | 174 | # ─── InsightFaceEngine ──────────────────────────────────────────────── |
| MEDIUM | backend/python/insightface/engines.py | 375 | # ─── OnnxDirectEngine ───────────────────────────────────────────────── |
| MEDIUM | backend/python/insightface/engines.py | 481 | # ─── helpers ────────────────────────────────────────────────────────── |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …tp/react-ui/e2e/nodes-per-node-backend-actions.spec.js | 83 | async function expandNodeAndWaitForBackends(page) { |
| LOW | core/http/react-ui/src/utils/artifacts.js | 139 | export function renderMarkdownWithArtifacts(text, messageIndex) { |
| LOW | core/http/react-ui/src/utils/cmYamlComplete.js | 116 | export function createYamlCompletionSource(fields) { |
| LOW | core/http/react-ui/src/pages/Usage.jsx | 159 | function generateFutureBucketLabels(lastBucket, count, period) { |
| LOW | core/http/react-ui/src/pages/Middleware.jsx | 391 | function formatDecisionScoreSuffix(d, activeSet) { |
| LOW | core/http/react-ui/src/pages/BackendLogs.jsx | 283 | function DistributedBackendLogsResolver({ modelId, fromTimestamp }) { |
| LOW | core/http/static/talk.js | 138 | function updateStreamingTranscript(role, delta) { |
| LOW | core/http/static/talk.js | 148 | function finalizeStreamingTranscript(role, fullText) { |
| LOW | core/http/static/chat.js | 544 | function startTokensPerSecondInterval() { |
| LOW | core/http/static/chat.js | 640 | function stopTokensPerSecondInterval() { |
| LOW | core/http/static/chat.js | 707 | function updateMaxTokensPerSecondBadge(chatId, maxRate) { |
| LOW | core/http/static/chat.js | 729 | function scrollThinkingBoxToBottom() { |
| LOW | core/http/static/chat.js | 1015 | function processAndSendMessage(inputValue) { |
| LOW | core/http/static/assets/pdf.min.js | 22 | !function webpackUniversalModuleDefinition(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=t.pdfjs |
| LOW | backend/python/liquid-audio/backend.py | 53 | def _patch_liquid_audio_local_paths(): |
| LOW | backend/python/liquid-audio/backend.py | 68 | def _local_first_snapshot_download(repo_id, revision=None, **kwargs): |
| LOW | backend/python/liquid-audio/test.py | 51 | def test_load_finetune_mode_without_weights(self): |
| LOW | backend/python/pocket-tts/test.py | 104 | def test_tts_with_default_voice(self): |
| LOW | backend/python/ace-step/test.py | 34 | def test_sound_generation_minimal(self): |
| LOW | backend/python/tinygrad/test.py | 63 | def test_multi_call_and_thinking(self): |
| LOW | backend/python/tinygrad/test.py | 76 | def test_no_tool_call_is_passthrough(self): |
| LOW | backend/python/tinygrad/test.py | 111 | def test_keymap_renames_every_hf_key(self): |
| LOW | backend/python/tinygrad/test.py | 129 | def test_tied_embedding_fallback_when_lm_head_missing(self): |
| LOW | backend/python/tinygrad/test.py | 135 | def test_unknown_keys_are_skipped(self): |
| LOW | backend/python/tinygrad/test.py | 144 | def test_qkv_bias_models_rejected(self): |
| LOW | backend/python/diffusers/test.py | 195 | def test_resolve_pipeline_class_by_name(self): |
| LOW | backend/python/diffusers/test.py | 200 | def test_resolve_pipeline_class_by_name_case_insensitive(self): |
| LOW | backend/python/diffusers/test.py | 206 | def test_resolve_pipeline_class_by_task(self): |
| LOW | backend/python/diffusers/test.py | 216 | def test_resolve_pipeline_class_unknown_name_raises(self): |
| LOW | backend/python/diffusers/test.py | 226 | def test_resolve_pipeline_class_unknown_task_raises(self): |
| LOW | backend/python/diffusers/test.py | 236 | def test_resolve_pipeline_class_no_params_raises(self): |
| LOW | backend/python/diffusers/test.py | 270 | def test_discover_diffusers_classes_caches_results(self): |
| LOW | backend/python/diffusers/test.py | 278 | def test_discover_diffusers_classes_exclude_base(self): |
| LOW | backend/python/diffusers/test.py | 285 | def test_get_available_classes(self): |
| LOW | backend/python/diffusers/test.py | 108 | def test_camel_to_kebab_conversion(self): |
| LOW | backend/python/diffusers/test.py | 121 | def test_extract_task_keywords(self): |
| LOW | backend/python/diffusers/test.py | 141 | def test_discover_pipelines_finds_known_classes(self): |
| LOW | backend/python/diffusers/test.py | 162 | def test_discover_pipelines_caches_results(self): |
| LOW | backend/python/diffusers/test.py | 171 | def test_get_available_pipelines(self): |
| LOW | backend/python/diffusers/test.py | 252 | def test_get_pipeline_info_unknown_raises(self): |
| LOW | backend/python/diffusers/test.py | 259 | def test_discover_diffusers_classes_pipelines(self): |
| LOW | backend/python/diffusers/test.py | 300 | def test_load_pipeline_requires_model_id(self): |
| LOW | backend/python/diffusers/test.py | 307 | def test_resolve_with_model_id_uses_diffusion_pipeline_fallback(self): |
| LOW | backend/python/diffusers/test.py | 326 | def test_options_merged_into_pipeline_kwargs(self): |
| LOW | backend/python/diffusers/diffusers_dynamic_loader.py | 124 | def discover_diffusers_classes( |
| LOW | backend/python/chatterbox/backend.py | 40 | def split_text_at_word_boundary(text, max_length=250): |
| LOW | backend/python/vllm/test.py | 171 | def test_apply_engine_args_known_keys(self): |
| LOW | backend/python/vllm/test.py | 192 | def test_apply_engine_args_unknown_key_raises(self): |
| LOW | backend/python/vllm/test.py | 209 | def test_apply_engine_args_empty_passthrough(self): |
| LOW | backend/python/speaker-recognition/test.py | 52 | def test_pre_load_voice_calls_are_rejected(self): |
| LOW | backend/python/speaker-recognition/test.py | 58 | def test_load_without_deps_fails_cleanly(self): |
| LOW | backend/python/transformers/test.py | 156 | def test_sentencetransformers_embedding(self): |
| LOW | backend/python/mlx-distributed/coordinator.py | 63 | def broadcast_generation_params(self, max_tokens=200, temperature=0.6, top_p=1.0): |
| LOW | backend/python/mlx-distributed/backend.py | 459 | def _tool_module_from_tokenizer(self): |
| LOW | backend/python/mlx-distributed/test.py | 108 | def test_messages_to_dicts_roundtrip(self): |
| LOW | backend/python/mlx-distributed/test.py | 128 | def test_parse_tool_calls_with_shim(self): |
| LOW | backend/python/mlx-vlm/test.py | 161 | def test_messages_to_dicts_roundtrip(self): |
| LOW | backend/python/mlx-vlm/test.py | 186 | def test_parse_tool_calls_with_shim(self): |
| LOW | backend/python/trl/test.py | 40 | def test_list_checkpoints_empty(self): |
| LOW | backend/python/trl/reward_functions.py | 24 | def reasoning_accuracy_reward(completions, **kwargs): |
| 45 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | .devcontainer-scripts/utils.sh | 3 | # This file contains some really simple functions that are useful when building up customization scripts. |
| MEDIUM | backend/go/sam3-cpp/test.sh | 22 | # Create a test image (4x4 red pixel PNG) using base64 |
| MEDIUM | backend/python/pocket-tts/backend.py | 241 | # Define the signal handler function |
| MEDIUM | backend/python/vibevoice/backend.py | 739 | # Define the signal handler function |
| MEDIUM | backend/python/vibevoice/test.py | 102 | # Create a temporary directory for the output audio file |
| MEDIUM | backend/python/vibevoice/test.py | 142 | # Create a temporary directory for the audio file |
| MEDIUM | backend/python/kitten-tts/backend.py | 92 | # Define the signal handler function |
| MEDIUM | backend/python/rerankers/backend.py | 112 | # Define the signal handler function |
| MEDIUM | backend/python/nemo/backend.py | 112 | # Create a single segment with the full transcription |
| MEDIUM | backend/python/diffusers/backend.py | 1072 | # Define the signal handler function |
| MEDIUM | backend/python/diffusers/test.py | 343 | # Create a tiny source image for the request's src field |
| MEDIUM | backend/python/whisperx/backend.py | 152 | # Define the signal handler function |
| MEDIUM | backend/python/whisperx/test.py | 71 | # Create a temporary directory for the audio file |
| MEDIUM | backend/python/chatterbox/backend.py | 240 | # Define the signal handler function |
| MEDIUM | backend/python/coqui/backend.py | 108 | # Define the signal handler function |
| MEDIUM | backend/python/moonshine/backend.py | 143 | # Define the signal handler function |
| MEDIUM | backend/python/moonshine/test.py | 71 | # Create a temporary directory for the audio file |
| MEDIUM | backend/python/common/libbackend.sh | 338 | # This function is idempotent, so you can call it as many times as you want and it will |
| MEDIUM | backend/python/neutts/backend.py | 145 | # Define the signal handler function |
| MEDIUM | backend/python/qwen-tts/backend.py | 915 | # Define the signal handler function |
| MEDIUM | backend/python/rfdetr/backend.py | 154 | # Define the signal handler function |
| MEDIUM | backend/python/kokoro/backend.py | 99 | # Define the signal handler function |
| MEDIUM | backend/python/faster-whisper/backend.py | 101 | # Define the signal handler function |
| MEDIUM | backend/python/fish-speech/backend.py | 439 | # Define the signal handler function |
| MEDIUM | backend/python/voxcpm/backend.py | 312 | # Define the signal handler function |
| MEDIUM | .github/backend-matrix.yml | 4 | # This file is NOT a workflow — it has no top-level 'on:' or 'jobs:'. |
| MEDIUM | .github/workflows/gallery-agent.yaml | 162 | # Create a formatted list of added models with URLs |
| MEDIUM | .github/workflows/notify-releases.yaml | 25 | # Define the LocalAI API endpoint |
| MEDIUM | .github/workflows/notify-releases.yaml | 28 | # Create a JSON payload using jq to handle special characters |
| MEDIUM | .github/workflows/disabled/notify-models.yaml | 39 | # Define the LocalAI API endpoint |
| MEDIUM | .github/workflows/disabled/notify-models.yaml | 42 | # Create a JSON payload using jq to handle special characters |
| MEDIUM | .github/workflows/disabled/notify-models.yaml | 121 | # Define the LocalAI API endpoint |
| MEDIUM | .github/workflows/disabled/notify-models.yaml | 124 | # Create a JSON payload using jq to handle special characters |
| MEDIUM | .github/workflows/disabled/comment-pr.yaml | 39 | # Define the LocalAI API endpoint |
| MEDIUM | .github/workflows/disabled/comment-pr.yaml | 42 | # Create a JSON payload using jq to handle special characters |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/python/liquid-audio/backend.py | 118 | |
| LOW | backend/python/liquid-audio/backend.py | 244 | |
| LOW | backend/python/liquid-audio/backend.py | 385 | |
| LOW | backend/python/liquid-audio/backend.py | 521 | |
| LOW | backend/python/pocket-tts/backend.py | 54 | |
| LOW | backend/python/pocket-tts/backend.py | 154 | |
| LOW | backend/python/ace-step/backend.py | 82 | |
| LOW | backend/python/ace-step/backend.py | 102 | |
| LOW | backend/python/ace-step/backend.py | 308 | |
| LOW | backend/python/vibevoice/backend.py | 56 | |
| LOW | backend/python/vibevoice/backend.py | 475 | |
| LOW | backend/python/vibevoice/backend.py | 584 | |
| LOW | backend/python/nemo/backend.py | 47 | |
| LOW | backend/python/diffusers/backend.py | 170 | |
| LOW | backend/python/diffusers/backend.py | 497 | |
| LOW | backend/python/diffusers/backend.py | 664 | |
| LOW | backend/python/diffusers/backend.py | 872 | |
| LOW | backend/python/diffusers/diffusers_dynamic_loader.py | 124 | |
| LOW | backend/python/diffusers/diffusers_dynamic_loader.py | 313 | |
| LOW | backend/python/mlx-audio/backend.py | 67 | |
| LOW | backend/python/mlx-audio/backend.py | 303 | |
| LOW | backend/python/mlx-audio/backend.py | 382 | |
| LOW | backend/python/llama-cpp-quantization/backend.py | 362 | |
| LOW | backend/python/chatterbox/backend.py | 121 | |
| LOW | backend/python/vllm/backend.py | 359 | |
| LOW | backend/python/vllm/backend.py | 486 | |
| LOW | backend/python/speaker-recognition/engines.py | 117 | |
| LOW | backend/python/common/python_utils.py | 10 | |
| LOW | backend/python/transformers/backend.py | 63 | |
| LOW | backend/python/transformers/backend.py | 439 | |
| LOW | backend/python/transformers/backend.py | 505 | |
| LOW | backend/python/vllm-omni/backend.py | 73 | |
| LOW | backend/python/vllm-omni/backend.py | 350 | |
| LOW | backend/python/vllm-omni/backend.py | 474 | |
| LOW | backend/python/vllm-omni/backend.py | 658 | |
| LOW | backend/python/mlx-distributed/backend.py | 619 | |
| LOW | backend/python/mlx-distributed/backend.py | 399 | |
| LOW | backend/python/mlx-distributed/mlx_cache.py | 76 | |
| LOW | backend/python/mlx-distributed/mlx_cache.py | 169 | |
| LOW | backend/python/neutts/backend.py | 50 | |
| LOW | backend/python/mlx-vlm/backend.py | 58 | |
| LOW | backend/python/mlx-vlm/backend.py | 262 | |
| LOW | backend/python/trl/backend.py | 248 | |
| LOW | backend/python/trl/backend.py | 640 | |
| LOW | backend/python/trl/backend.py | 687 | |
| LOW | backend/python/trl/reward_functions.py | 182 | |
| LOW | backend/python/sglang/backend.py | 375 | |
| LOW | backend/python/qwen-asr/backend.py | 47 | |
| LOW | backend/python/qwen-asr/backend.py | 159 | |
| LOW | backend/python/qwen-tts/backend.py | 65 | |
| LOW | backend/python/qwen-tts/backend.py | 442 | |
| LOW | backend/python/qwen-tts/backend.py | 650 | |
| LOW | backend/python/mlx/backend.py | 252 | |
| LOW | backend/python/mlx/test_mlx_cache.py | 384 | |
| LOW | backend/python/mlx/test_mlx_cache.py | 394 | |
| LOW | backend/python/mlx/mlx_cache.py | 76 | |
| LOW | backend/python/mlx/mlx_cache.py | 169 | |
| LOW | backend/python/faster-whisper/backend.py | 54 | |
| LOW | backend/python/faster-qwen3-tts/backend.py | 48 | |
| LOW | backend/python/faster-qwen3-tts/test.py | 56 | |
| 8 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/python/vibevoice/backend.py | 13 | |
| LOW | backend/python/kitten-tts/backend.py | 14 | |
| LOW | backend/python/tinygrad/backend.py | 28 | |
| LOW | backend/python/tinygrad/backend.py | 52 | |
| LOW | backend/python/tinygrad/tool_parsers/mistral.py | 11 | |
| LOW | backend/python/tinygrad/tool_parsers/__init__.py | 7 | |
| LOW | backend/python/tinygrad/tool_parsers/__init__.py | 9 | |
| LOW | backend/python/tinygrad/tool_parsers/__init__.py | 9 | |
| LOW | backend/python/tinygrad/tool_parsers/__init__.py | 9 | |
| LOW | backend/python/tinygrad/tool_parsers/hermes.py | 17 | |
| LOW | backend/python/tinygrad/tool_parsers/llama3_json.py | 15 | |
| LOW | backend/python/tinygrad/tool_parsers/llama3_json.py | 19 | |
| LOW | backend/python/tinygrad/tool_parsers/qwen3_xml.py | 21 | |
| LOW | backend/python/tinygrad/tool_parsers/base.py | 2 | |
| LOW | backend/python/tinygrad/tool_parsers/base.py | 4 | |
| LOW | backend/python/tinygrad/tool_parsers/base.py | 73 | |
| LOW | backend/python/tinygrad/tool_parsers/base.py | 73 | |
| LOW | backend/python/tinygrad/tool_parsers/base.py | 73 | |
| LOW | backend/python/tinygrad/tool_parsers/base.py | 73 | |
| LOW | backend/python/diffusers/backend.py | 31 | |
| LOW | backend/python/diffusers/backend.py | 31 | |
| LOW | backend/python/diffusers/backend.py | 39 | |
| LOW | backend/python/diffusers/test.py | 7 | |
| LOW | backend/python/diffusers/diffusers_dynamic_loader.py | 33 | |
| LOW | backend/python/mlx-audio/backend.py | 8 | |
| LOW | backend/python/mlx-audio/backend.py | 9 | |
| LOW | backend/python/mlx-audio/backend.py | 10 | |
| LOW | backend/python/mlx-audio/backend.py | 11 | |
| LOW | backend/python/mlx-audio/backend.py | 12 | |
| LOW | backend/python/vllm/backend.py | 14 | |
| LOW | backend/python/vllm/backend.py | 30 | |
| LOW | backend/python/speaker-recognition/backend.py | 9 | |
| LOW | backend/python/speaker-recognition/engines.py | 20 | |
| LOW | backend/python/speaker-recognition/test.py | 10 | |
| LOW | backend/python/common/vllm_utils.py | 9 | |
| LOW | backend/python/common/vllm_utils.py | 9 | |
| LOW | backend/python/common/template/backend.py | 2 | |
| LOW | backend/python/common/template/backend.py | 3 | |
| LOW | backend/python/common/template/backend.py | 4 | |
| LOW | backend/python/transformers/backend.py | 14 | |
| LOW | backend/python/mlx-distributed/coordinator.py | 7 | |
| LOW | backend/python/mlx-distributed/coordinator.py | 8 | |
| LOW | backend/python/mlx-distributed/backend.py | 23 | |
| LOW | backend/python/mlx-vlm/backend.py | 11 | |
| LOW | backend/python/trl/backend.py | 251 | |
| LOW | backend/python/sglang/backend.py | 30 | |
| LOW | backend/python/sglang/backend.py | 31 | |
| LOW | backend/python/sglang/backend.py | 32 | |
| LOW | backend/python/sglang/backend.py | 34 | |
| LOW | backend/python/qwen-tts/backend.py | 12 | |
| LOW | backend/python/qwen-tts/backend.py | 14 | |
| LOW | backend/python/qwen-tts/test.py | 10 | |
| LOW | backend/python/rfdetr/backend.py | 21 | |
| LOW | backend/python/rfdetr/backend.py | 23 | |
| LOW | backend/python/insightface/backend.py | 15 | |
| LOW | backend/python/insightface/engines.py | 19 | |
| LOW | backend/python/insightface/test.py | 10 | |
| LOW | backend/python/insightface/smoke.py | 17 | |
| LOW | backend/python/mlx/test_mlx_cache.py | 17 | |
| LOW | backend/python/faster-qwen3-tts/test.py | 8 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/python/vibevoice/backend.py | 104 | # Check if ASR mode is enabled |
| LOW | backend/python/vibevoice/backend.py | 194 | # Check if the directory exists |
| LOW | backend/python/vibevoice/test.py | 15 | # Check if we should skip ASR tests (they require large models ~14B parameters total) |
| LOW | backend/python/vibevoice/test.py | 188 | # Check if segments is iterable (has length) |
| LOW | backend/python/diffusers/backend.py | 348 | # Check if loading from single file (GGUF) |
| LOW | backend/python/diffusers/backend.py | 401 | # Check if loading from single file (GGUF) |
| LOW | backend/python/diffusers/backend.py | 558 | # Check if ModelFile exists |
| LOW | backend/python/diffusers/backend.py | 629 | # Check if its a local file and not a directory ( we load lora differently for a safetensor file ) |
| LOW | backend/python/diffusers/diffusers_dynamic_loader.py | 485 | # Check if the class has from_single_file method |
| LOW | backend/python/mlx-audio/backend.py | 264 | # Check if model supports language codes (primarily Kokoro) |
| LOW | backend/python/mlx-audio/backend.py | 133 | # Check if model is loaded |
| LOW | backend/python/mlx-audio/backend.py | 156 | # Check if model supports language codes (primarily Kokoro) |
| LOW | backend/python/mlx-audio/backend.py | 235 | # Check if model is loaded |
| LOW | backend/python/llama-cpp-quantization/backend.py | 377 | # Check if the thread is still alive |
| LOW | backend/python/llama-cpp-quantization/backend.py | 384 | # Check if client disconnected |
| LOW | backend/python/chatterbox/backend.py | 53 | # Check if adding this word would exceed the limit |
| LOW | backend/python/chatterbox/backend.py | 194 | # Check if text exceeds 250 characters |
| LOW | backend/python/vllm/backend.py | 302 | # Check if we have one result at least |
| LOW | backend/python/moonshine/test.py | 111 | # Check if segments is iterable (has length) |
| LOW | backend/python/qwen-tts/backend.py | 436 | # Check if it looks like a file path (contains / or \ and ends with common text file extensions) |
| LOW | backend/python/qwen-tts/backend.py | 262 | # Check if it's a missing feature extractor/tokenizer error |
| LOW | backend/python/qwen-tts/backend.py | 466 | # Check if file exists and is readable |
| LOW | backend/python/qwen-tts/backend.py | 652 | # Check if dst is provided |
| LOW | backend/python/qwen-tts/backend.py | 701 | # Check if multi-voice mode is active (voices dict is populated) |
| LOW | backend/python/qwen-tts/backend.py | 770 | # Check if we should use cached prompt |
| LOW | backend/python/fish-speech/test.py | 95 | # Check if process died |
| LOW | .github/check_and_update.py | 32 | # Check if 'hasUnsafeFile' exists in the response |
| LOW | .github/check_and_update.py | 48 | # Check if the repo is flagged as dangerous by HF |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | core/gallery/importers/bark.go | 25 | // DiscoverModelConfig leaves HuggingFace nil. To keep detection robust, |
| MEDIUM | core/http/react-ui/src/pages/AgentChat.jsx | 116 | // Maps backend messageID → conversationId for robust SSE routing across navigations. |
| LOW | backend/python/llama-cpp-quantization/backend.py | 203 | # If the model_path is already a GGUF file, just use it as-is |
| MEDIUM | backend/python/speaker-recognition/engines.py | 71 | # checkpoint (Audeering wav2vec2-large-robust-24-ft-age-gender) uses a |
| MEDIUM | backend/cpp/turboquant/patch-grpc-server.sh | 78 | # stay robust if upstream adds more. Use a temp file to avoid relying on |
| MEDIUM | backend/cpp/ds4/dsml_parser.cpp | 333 | // Definitely a literal '<' now (no chance of more bytes arriving). |
| MEDIUM | .github/workflows/test-extra.yml | 597 | # harness. |
| MEDIUM | .github/workflows/test-extra.yml | 615 | # End-to-end transcription via the e2e-backends gRPC harness against |
| MEDIUM | .github/workflows/test-extra.yml | 637 | # TTSStream (PCM chunks) on the e2e-backends harness. |
| MEDIUM | .github/workflows/test-extra.yml | 919 | # End-to-end TTS via the e2e-backends gRPC harness. Builds the |
| MEDIUM | .github/workflows/test-extra.yml | 939 | # End-to-end transcription via the e2e-backends gRPC harness. The |
| MEDIUM | .github/workflows/test-extra.yml | 974 | # End-to-end audio transform via the e2e-backends gRPC harness. The |
| MEDIUM | .github/gallery-agent/testing.go | 220 | fmt.Sprintf("# %s Language Model\n\nDeveloped by %s, this model represents state-of-the-art performance in natural lan |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | core/http/auth/branding_routes_test.go | 83 | user := createTestUser(db, "user@example.com", auth.RoleUser, auth.ProviderGitHub) |
| LOW | core/http/auth/branding_routes_test.go | 92 | admin := createTestUser(db, "admin@example.com", auth.RoleAdmin, auth.ProviderGitHub) |
| LOW | core/http/auth/branding_routes_test.go | 101 | admin := createTestUser(db, "admin@example.com", auth.RoleAdmin, auth.ProviderGitHub) |
| LOW | core/http/auth/middleware_test.go | 85 | user = createTestUser(db, "user@example.com", auth.RoleUser, auth.ProviderGitHub) |
| LOW | core/http/auth/middleware_test.go | 177 | admin := createTestUser(db, "admin@example.com", auth.RoleAdmin, auth.ProviderGitHub) |
| LOW | core/http/auth/middleware_test.go | 186 | user := createTestUser(db, "user@example.com", auth.RoleUser, auth.ProviderGitHub) |
| LOW | core/http/auth/middleware_test.go | 202 | admin := createTestUser(db, "admin@example.com", auth.RoleAdmin, auth.ProviderGitHub) |
| LOW | core/http/auth/middleware_test.go | 211 | user := createTestUser(db, "user@example.com", auth.RoleUser, auth.ProviderGitHub) |
| LOW | core/http/auth/middleware_test.go | 220 | user := createTestUser(db, "user@example.com", auth.RoleUser, auth.ProviderGitHub) |
| LOW | core/http/auth/roles_test.go | 35 | role := auth.AssignRole(db, "admin@example.com", "admin@example.com") |
| LOW | core/http/auth/roles_test.go | 42 | role := auth.AssignRole(db, "Admin@Example.COM", "admin@example.com") |
| LOW | core/http/auth/roles_test.go | 49 | role := auth.AssignRole(db, "other@example.com", "admin@example.com") |
| LOW | core/http/auth/roles_test.go | 69 | user := createTestUser(db, "user@example.com", auth.RoleUser, auth.ProviderGitHub) |
| LOW | core/http/auth/roles_test.go | 71 | promoted := auth.MaybePromote(db, user, "admin@example.com") |
| LOW | core/http/auth/roles_test.go | 77 | user := createTestUser(db, "admin@example.com", auth.RoleAdmin, auth.ProviderGitHub) |
| LOW | core/http/auth/oauth_email_decision_test.go | 13 | Expect(emailForRoleDecision("admin@example.com", true)). |
| LOW | core/http/auth/oauth_email_decision_test.go | 14 | To(Equal("admin@example.com")) |
| LOW | core/http/auth/oauth_email_decision_test.go | 18 | Expect(emailForRoleDecision("admin@example.com", false)). |
| LOW | core/http/auth/oauth_email_decision_test.go | 46 | role := AssignRole(db, emailForRoleDecision("admin@example.com", false), "admin@example.com") |
| LOW | core/http/auth/oauth_email_decision_test.go | 52 | role := AssignRole(db, emailForRoleDecision("admin@example.com", true), "admin@example.com") |
| LOW | core/http/routes/auth_test.go | 1037 | admin := createRouteTestUser(db, "admin@example.com", auth.RoleAdmin) |
| LOW | core/http/routes/auth_test.go | 1062 | admin := createRouteTestUser(db, "admin@example.com", auth.RoleAdmin) |
| LOW | pkg/functions/parse_test.go | 2290 | Arguments: `{"name":"John Doe","age":30,"active":true,"score":95.5}`, |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | core/gallery/upgrade.go | 286 | // Step 1: Download the new backend into the tmp directory |
| LOW | core/gallery/upgrade.go | 304 | // Step 2: Validate — check that run.sh exists in the new content |
| LOW | core/gallery/upgrade.go | 311 | // Step 3: Atomic swap — rename current to backup, then tmp to current |
| LOW | core/gallery/upgrade.go | 327 | // Step 4: Write updated metadata, preserving alias from old metadata |
| LOW | core/gallery/upgrade.go | 360 | // Step 5: Re-register backends so the model loader picks up any changes |
| LOW | core/gallery/upgrade.go | 365 | // Step 6: Remove backup |
| LOW | core/gallery/backends.go | 445 | // if doesn't exist, it might be an alias, so we need to check if we have a matching alias in |
| LOW | core/application/startup.go | 521 | // Since env vars are applied via AppOptions in run.go, we need to check if they're set. |
| LOW | core/services/nodes/router_test.go | 739 | // Step 1: cached model found on old node |
| LOW | core/services/nodes/router.go | 243 | // Step 1: Find and atomically lock a node with this model loaded |
| LOW | core/services/nodes/router.go | 288 | // Step 2: Model not loaded — schedule loading with distributed lock to prevent duplicates |
| LOW | backend/python/llama-cpp-quantization/backend.py | 101 | # Step 1: Download / resolve model |
| LOW | backend/python/llama-cpp-quantization/backend.py | 112 | # Step 2: Convert to f16 GGUF |
| LOW | backend/python/llama-cpp-quantization/backend.py | 123 | # Step 3: Quantize |
| LOW | backend/python/trl/backend.py | 740 | # Step 1: Merge LoRA into base model |
| LOW | backend/python/trl/backend.py | 789 | # Step 2: Convert to GGUF using convert_hf_to_gguf.py |
| LOW | pkg/functions/parse_test.go | 191 | // Step 1: Replace single quotes around keys and values with double quotes |
| LOW | pkg/functions/parse_test.go | 193 | // Step 2: Replace double quotes inside values with placeholders |
| LOW | pkg/functions/parse_test.go | 224 | // Step 1: Replace single quotes around keys and values with double quotes |
| LOW | pkg/functions/parse_test.go | 226 | // Step 2: Replace double quotes inside values with placeholders |
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | core/http/static/assets/marked.js | 6 | !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?def |
| CRITICAL | core/http/static/assets/codemirror.min.js | 1 | !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define |
| CRITICAL | backend/cpp/llama-cpp/grpc-server.cpp | 1370 | if (params.speculative.has_dft() && !params.speculative.draft.mparams.path.empty()) { |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | core/http/views/agent-task-details.html | 373 | -H "Authorization: Bearer YOUR_API_KEY" \ |
| HIGH | core/http/views/agent-task-details.html | 394 | -H "Authorization: Bearer YOUR_API_KEY" \ |
| HIGH | core/http/views/agent-task-details.html | 417 | -H "Authorization: Bearer YOUR_API_KEY" \ |
| HIGH | core/http/views/agent-task-details.html | 443 | -H "Authorization: Bearer YOUR_API_KEY"</code></pre> |
| HIGH | docs/content/features/mcp.md | 417 | api_key="your-api-key" |
| HIGH | docs/content/getting-started/troubleshooting.md | 275 | -H "Authorization: Bearer YOUR_API_KEY" |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | backend/python/diffusers/diffusers_dynamic_loader.py | 128 | Discover all subclasses of a given base class from diffusers. This function provides a generic way to discover |
| HIGH | backend/python/diffusers/diffusers_dynamic_loader.py | 318 | Resolve a pipeline class from class_name, task, or model_id. Priority: 1. If class_name is provided, look |
| HIGH | backend/python/diffusers/diffusers_dynamic_loader.py | 428 | Load a diffusers pipeline dynamically. This function resolves the appropriate pipeline class based on the prov |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | backend/python/mlx-distributed/backend.py | 604 | |
| MEDIUM | backend/python/mlx-distributed/backend.py | 605 | |
| MEDIUM | backend/python/mlx-distributed/backend.py | 609 | |
| MEDIUM | backend/python/mlx-distributed/backend.py | 614 | |
| MEDIUM | backend/python/mlx-distributed/backend.py | 616 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | pkg/huggingface-api/client_test.go | 610 | mockReadmeContent := "# Test Model\n\nThis is a test model for demonstration purposes." |
| MEDIUM | pkg/huggingface-api/client_test.go | 629 | Expect(content).To(Equal("# Test Model\n\nThis is a test model for demonstration purposes.")) |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | docker-compose.distributed.yaml | 9 | # Usage: |
| LOW | scripts/model_gallery_info.py | 53 | # Example usage |
| LOW | pkg/model/watchdog.go | 63 | // Example usage: |