Home / pex-tool / pex
AI Slop Code RIsk Monitor

pex-tool/pex

A tool for generating .pex (Python EXecutable) files, lock files and venvs.

25.6 Elevated pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for pex-tool/pex, a Python project with 4,229 GitHub stars. SynthScan examined 170,570 lines of code across 669 source files, recording 4289 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 25.6 (Elevated pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

25.6
Adjusted Signal
25.6
Raw Pattern Score
100%
Time Factor
2026-10-09
Last Push
4.2K
Stars
Python
Language
170.6K
Lines of Code
669
Files
4.3K
Pattern Hits
2026-10-12
Scan Date
0.07
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 31.9/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 1324 finding(s).

Hallucinated Dependency & Supply Chain Risk 56.8/100 · HIGH

Are imports declared and package/API names verified? 2902 finding(s).

Agent Over-Engineering Ratio 30.2/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 1099 finding(s).

PR Review Velocity Impact 73.7/100 · HIGH

Which changes need focused human review? 4289 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 48MEDIUM 15LOW 4226

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4289 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Unused Imports2877 hits · 2771 pts
SeverityFileLineSnippetContext
LOWsetup.py4CODE
LOWpex/requirement_key.py4CODE
LOWpex/requirement_key.py6CODE
LOWpex/requirement_key.py7CODE
LOWpex/requirement_key.py11CODE
LOWpex/bootstrap.py5CODE
LOWpex/bootstrap.py5CODE
LOWpex/bootstrap.py14CODE
LOWpex/bootstrap.py14CODE
LOWpex/pep_508.py4CODE
LOWpex/pep_508.py7CODE
LOWpex/pep_508.py12CODE
LOWpex/pep_508.py12CODE
LOWpex/atomic_directory.py4CODE
LOWpex/atomic_directory.py21CODE
LOWpex/atomic_directory.py21CODE
LOWpex/atomic_directory.py21CODE
LOWpex/atomic_directory.py21CODE
LOWpex/auth.py4CODE
LOWpex/auth.py15CODE
LOWpex/auth.py15CODE
LOWpex/auth.py15CODE
LOWpex/auth.py15CODE
LOWpex/auth.py15CODE
LOWpex/lang.py4CODE
LOWpex/lang.py9CODE
LOWpex/pth.py4CODE
LOWpex/pth.py14CODE
LOWpex/compatibility.py7CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py20CODE
LOWpex/compatibility.py37CODE
LOWpex/compatibility.py52CODE
LOWpex/compatibility.py53CODE
LOWpex/compatibility.py56CODE
LOWpex/compatibility.py57CODE
LOWpex/compatibility.py125CODE
LOWpex/compatibility.py137CODE
LOWpex/compatibility.py147CODE
LOWpex/compatibility.py162CODE
LOWpex/compatibility.py164CODE
LOWpex/compatibility.py212CODE
LOWpex/compatibility.py40CODE
LOWpex/compatibility.py151CODE
LOWpex/pex_builder.py4CODE
LOWpex/pex_builder.py4CODE
LOWpex/pex_builder.py45CODE
LOWpex/pex_builder.py51CODE
LOWpex/pex_builder.py51CODE
LOWpex/pex_builder.py51CODE
LOWpex/inherit_path.py4CODE
2817 more matches not shown…
Hyper-Verbose Identifiers1007 hits · 1008 pts
SeverityFileLineSnippetContext
LOWpex/compatibility.py190 def is_valid_python_identifier(text):STRING
LOWpex/interpreter_constraints.py35def _iter_interpreter_implementations():CODE
LOWpex/targets.py454 def require_at_most_one_target(self, purpose):CODE
LOWpex/artifact_url.py144def _guaranteed_available_algorithms():STRING
LOW⚡pex/pex_info.py261 def venv_site_packages_copies(self):CODE
LOW⚡pex/pex_info.py266 def venv_site_packages_copies(self, value):CODE
LOW⚡pex/pex_info.py271 def venv_system_site_packages(self):CODE
LOW⚡pex/pex_info.py276 def venv_system_site_packages(self, value):CODE
LOWpex/pex_info.py403 def has_interpreter_constraints(self):CODE
LOWpex/pex_info.py436 def interpreter_selection_strategy(self):CODE
LOWpex/pex_info.py446 def interpreter_selection_strategy(self, value):CODE
LOWpex/variables.py681 def _ensure_writeable_pex_root(self, raw_pex_root):CODE
LOWpex/finders.py92def get_script_from_distributions(CODE
LOWpex/finders.py117def get_entry_point_from_console_script(CODE
LOWpex/layout.py205def _ensure_distributions_installed_serial(CODE
LOWpex/layout.py218def _ensure_distributions_installed_parallel(CODE
LOWpex/layout.py260def _ensure_distributions_installed(CODE
LOWpex/pep_427.py87def _headers_install_path_for_wheel(CODE
LOWpex/pep_427.py343 def external_attr_as_stat_mode(self):CODE
LOWpex/pep_427.py512 def iter_install_paths_by_name(self):CODE
LOWpex/pep_427.py690def install_wheel_interpreter(CODE
LOWpex/pep_427.py1053 def create_dst_installed_file(regenerate_hash):CODE
LOWpex/dist_metadata.py158 def render_metadata_file_description(self, metadata_file_rel_path):CODE
LOWpex/dist_metadata.py242def _find_installed_metadata_files(CODE
LOWpex/dist_metadata.py327def _is_dist_pkg_info_file_path(file_path):CODE
LOWpex/dist_metadata.py529 def canonicalized_project_name(self):CODE
LOWpex/dist_metadata.py777 def from_packaging_requirement(cls, requirement):CODE
LOWpex/dist_metadata.py925 def from_packaging_requirement(CODE
LOWpex/sh_boot.py45def _calculate_applicable_binary_names(CODE
LOWpex/interpreter.py163 def _normalize_macosx_deployment_target(value):CODE
LOWpex/interpreter.py609 def configured_macosx_deployment_target(self):CODE
LOWpex/interpreter.py808 def include_system_site_packages(self):CODE
LOWpex/interpreter.py1502 def iter_base_candidate_binary_paths(interpreter):CODE
LOWpex/interpreter.py860 def _resolve_pyvenv_canonical_python_binary(STRING
LOWpex/interpreter.py923 def latest_release_of_min_compatible_version(interps):STRING
LOWpex/interpreter.py1092 def _spawn_from_binary_external(STRING
LOWpex/common.py281 def deterministic_external_attr(self):CODE
LOWpex/requirements.py266def parse_requirement_from_project_name_and_specifier(CODE
LOWpex/requirements.py285def parse_requirement_from_dist(CODE
LOWpex/requirements.py379def _strip_requirement_options(line):CODE
LOWpex/requirements.py398def _try_parse_fragment_project_name_and_marker(url):CODE
LOWpex/requirements.py423 def from_project_name_and_version(cls, project_name_and_version):CODE
LOWpex/requirements.py434def _try_parse_project_name_and_specifier_from_path(path):CODE
LOWpex/requirements.py444def _try_parse_pip_local_formats(CODE
LOWpex/requirements.py850def parse_requirement_strings(requirements):STRING
LOWpex/pex_boot.py68def __entry_point_from_filename__(filename):CODE
LOWpex/executables.py75def create_sh_python_redirector_shebang(sh_script_content):CODE
LOWpex/resolver.py158def _uniqued_download_requests(requests=None):CODE
LOWpex/resolver.py601def _fingerprint_local_project(CODE
LOWpex/resolver.py1022 def _iter_resolved_distributions(CODE
LOWpex/resolver.py1053 def _categorize_build_requests(CODE
LOWpex/resolver.py1315 def _categorize_install_requests(CODE
LOWpex/resolver.py1342 def _resolve_direct_file_deps(CODE
LOWpex/environment.py327 def _update_candidate_distributions(self, distribution_iter):CODE
LOWpex/environment.py725 def _declare_namespace_packages(cls, resolved_dists):CODE
LOWpex/ziputils.py146 def start_of_zip_offset_from_eof(self):CODE
LOWpex/exceptions.py47def reportable_unexpected_error_msg(CODE
LOWpex/typing.py55 def _never_called_since_structurally_shadowed(*_args, **_kwargs):CODE
LOWpex/pex_bootstrapper.py98def iter_compatible_interpreters(CODE
LOWpex/pex_bootstrapper.py250def find_compatible_interpreter(CODE
947 more matches not shown…
Deep Nesting173 hits · 151 pts
SeverityFileLineSnippetContext
LOWpex/pth.py17CODE
LOWpex/pex_builder.py361CODE
LOWpex/pex_builder.py621CODE
LOWpex/pex_builder.py727CODE
LOWpex/interpreter_constraints.py365CODE
LOWpex/entry_points_txt.py23CODE
LOWpex/util.py34CODE
LOWpex/variables.py834CODE
LOWpex/layout.py312CODE
LOWpex/pep_427.py745CODE
LOWpex/pep_427.py848CODE
LOWpex/pep_427.py242CODE
LOWpex/os.py18CODE
LOWpex/dist_metadata.py285CODE
LOWpex/dist_metadata.py397CODE
LOWpex/dist_metadata.py641CODE
LOWpex/dist_metadata.py828CODE
LOWpex/specifier_sets.py196CODE
LOWpex/specifier_sets.py251CODE
LOWpex/specifier_sets.py131CODE
LOWpex/sdist.py57CODE
LOWpex/jobs.py534CODE
LOWpex/interpreter.py1339CODE
LOWpex/interpreter.py1461CODE
LOWpex/interpreter.py1346CODE
LOWpex/common.py178CODE
LOWpex/common.py988CODE
LOWpex/common.py392CODE
LOWpex/common.py881CODE
LOWpex/common.py937CODE
LOWpex/requirements.py724CODE
LOWpex/pex_boot.py146CODE
LOWpex/executables.py151CODE
LOWpex/pep_723.py144CODE
LOWpex/pep_723.py99CODE
LOWpex/resolver.py214CODE
LOWpex/resolver.py684CODE
LOWpex/resolver.py780CODE
LOWpex/resolver.py1185CODE
LOWpex/resolver.py1342CODE
LOWpex/pex.py385CODE
LOWpex/pex.py672CODE
LOWpex/environment.py283CODE
LOWpex/environment.py602CODE
LOWpex/environment.py797CODE
LOWpex/ziputils.py188CODE
LOWpex/pex_bootstrapper.py98CODE
LOWpex/pex_bootstrapper.py250CODE
LOWpex/pex_bootstrapper.py516CODE
LOWpex/build_properties.py106CODE
LOWpex/sysconfig.py43CODE
LOWpex/sysconfig.py89CODE
LOWpex/hashing.py229CODE
LOWpex/pyenv.py28CODE
LOWpex/pyenv.py173CODE
LOWpex/pyenv.py117CODE
LOWpex/toml.py133CODE
LOWpex/scie/__init__.py532CODE
LOWpex/scie/model.py80CODE
LOWpex/scie/model.py145CODE
113 more matches not shown…
Over-Commented Block92 hits · 92 pts
SeverityFileLineSnippetContext
LOWsetup.cfg61management =COMMENT
LOWpex/atomic_directory.py81COMMENT
LOWpex/pex_builder.py821 deterministic=deterministic,COMMENT
LOWpex/targets.py161 # but Pip, which follows PEP-440, will evaluate `>=3.8.1` as false and exclude theCOMMENT
LOWpex/dist_metadata.py81def is_tar_sdist(path):COMMENT
LOWpex/dist_metadata.py101 # | whl | 6332494 |COMMENT
LOWpex/dist_metadata.py501COMMENT
LOWpex/__init__.py1# Copyright 2014 Pex project contributors.COMMENT
LOWpex/sdist.py61):COMMENT
LOWpex/jobs.py601 stop.set()COMMENT
LOWpex/sh_boot.py201 # cache may behave differently)COMMENT
LOWpex/sh_boot.py221 #COMMENT
LOWpex/interpreter.py741 #COMMENT
LOWpex/interpreter.py881 else:COMMENT
LOWpex/interpreter.py1461 def resolve_base_interpreter(self):COMMENT
LOWpex/interpreter.py1481 # pypy3.6COMMENT
LOWpex/common.py461 members=None, # type: Optional[Iterable[Union[str, ZipInfo]]]COMMENT
LOWpex/executables.py81COMMENT
LOWpex/resolver.py941 def install_chroot(self):COMMENT
LOWpex/resolver.py961 # │ └── 1003685de2c3604dc6daab9540a66201c1d1f718COMMENT
LOWpex/resolver.py981 # When the pex is run, the runtime key is followed to the build time key, avoidingCOMMENT
LOWpex/resolver.py1621 )COMMENT
LOWpex/resolver.py1641 # distributions and then `pex.pep_427.install_wheel_chroot` to install each distribution in itsCOMMENT
LOWpex/environment.py441 "Resolving {override}: overrides {requirement} from {dist}".format(COMMENT
LOWpex/environment.py481 dependency_configuration, # type: DependencyConfigurationCOMMENT
LOWpex/environment.py741 # will be active in the pex environment at runtime and, as such, care must be taken.COMMENT
LOWpex/whl.py41 repack_dir = CacheDir.REPACKED_WHEELS.path(fingerprint, flavor)COMMENT
LOWpex/ziputils.py101 # start of the central directory 2 bytesCOMMENT
LOWpex/ziputils.py201 if not self.has_header:COMMENT
LOWpex/wheel.py61 # Some WHEEL metadata in the wild has blank lines in between headers when it should not.COMMENT
LOWpex/wheel.py81 # them in a frozenset with unstable order which can cause issues when attemptingCOMMENT
LOWpex/distutils/__init__.py1# Copyright 2021 Pex project contributors.COMMENT
LOWpex/distutils/commands/__init__.py1# Copyright 2021 Pex project contributors.COMMENT
LOWpex/tools/__init__.py1# Copyright 2020 Pex project contributors.COMMENT
LOWpex/cache/dirs.py881 # wheel name which is unique on the host os up to the python and abi tags. In other words,COMMENT
LOWpex/cache/__init__.py1# Copyright 2024 Pex project contributors.COMMENT
LOWpex/resolve/locker.py301 artifact_url = ArtifactURL.from_url_info(COMMENT
LOWpex/resolve/locker.py341 # ...COMMENT
LOWpex/resolve/__init__.py1# Copyright 2021 Pex project contributors.COMMENT
LOWpex/resolve/locker_patches.py201 Wheel.find_most_preferred_tag = lambda *args, **kwargs: 0COMMENT
LOWpex/resolve/lockfile/create.py121 project_name_and_version = ProjectNameAndVersion.from_filename(f)COMMENT
LOWpex/resolve/lockfile/__init__.py1# Copyright 2021 Pex project contributors.COMMENT
LOWpex/resolve/pep_691/__init__.py1# Copyright 2022 Pex project contributors.COMMENT
LOWpex/bin/__init__.py1# Copyright 2014 Pex project contributors.COMMENT
LOWpex/build_system/pep_518.py101 # N.B.: We install extra requirements separately instead of having them resolved andCOMMENT
LOWpex/build_system/__init__.py1# Copyright 2022 Pex project contributors.COMMENT
LOWpex/fetcher/ssl.py61 # of the `ssl.Purpose` enum type [^1] a call to OpenSSL's `OBJ_obj2nid` [^2][^3] whichCOMMENT
LOWpex/fetcher/ssl.py81 #COMMENT
LOWpex/cli/__init__.py1# Copyright 2021 Pex project contributors.COMMENT
LOWpex/cli/commands/pip/__init__.py1# Copyright 2025 Pex project contributors.COMMENT
LOWpex/pip/__init__.py1# Copyright 2022 Pex project contributors.COMMENT
LOWpex/pip/vcs.py121 # We cannot prune these directories from the source archive directly unfortunately sinceCOMMENT
LOWpex/pip/tool.py261 # type: (str) -> ErrorAnalysisCOMMENT
LOWpex/pip/tool.py401 ):COMMENT
LOWpex/pip/foreign_platform/__init__.py21COMMENT
LOWpex/pip/foreign_platform/requires_python.py41 if PYTHON_FULL_VERSIONS:COMMENT
LOWpex/http/__init__.py1# Copyright 2025 Pex project contributors.COMMENT
LOWpex/commands/__init__.py1# Copyright 2021 Pex project contributors.COMMENT
LOWbuild-backend/pex_build/setuptools/__init__.py1# Copyright 2024 Pex project contributors.COMMENT
LOWtests/test_requirements.py361 beautifulsoup4COMMENT
32 more matches not shown…
Empty Error Handlers18 hits · 90 pts
SeverityFileLineSnippetContext
HIGHpex/pex_builder.py393except InstalledWheel.LoadError:CODE
HIGHpex/jobs.py607except ValueError:CODE
HIGHpex/interpreter.py210except ImportError:CODE
HIGHpex/interpreter.py224except ImportError:CODE
HIGHpex/interpreter.py728except cls.Error:CODE
HIGHpex/requirements.py627except dist_metadata.UnrecognizedDistributionFormat:CODE
HIGHpex/resolver.py1003except InstalledWheel.LoadError:CODE
HIGHpex/exceptions.py65except Exception:CODE
HIGHpex/distutils/commands/bdist_pex.py69except ValueError:CODE
HIGHpex/resolve/resolver_options.py80except InvalidVirtualenvError:CODE
HIGHpex/repl/custom.py58except AttributeError:CODE
HIGHpex/repl/custom.py61except (IOError, OSError):CODE
HIGHpex/pip/dependencies/requires.py116except ImportError:CODE
HIGHpex/pip/dependencies/requires.py132except ImportError:CODE
HIGHpex/commands/command.py498except ValueError:CODE
HIGHtests/test_environment.py433except ValueError:CODE
HIGHtests/tools/commands/test_repository.py410except OSError:CODE
HIGHtesting/subprocess.py41except InvalidVirtualenvError:CODE
Cross-Language Confusion17 hits · 80 pts
SeverityFileLineSnippetContext
HIGHpex/sh_boot.py289 if PATH="${{_path}}" command -v "${{python}}" 2>/dev/null; thenSTRING
HIGHtests/resolve/lockfile/test_json_codec.py143 "requires_python": null,CODE
HIGHtests/resolve/lockfile/test_json_codec.py368 "requires_python": null,CODE
HIGHtests/resolve/lockfile/test_json_codec.py388 - "requires_python": null,CODE
HIGHtests/resolve/lockfile/test_lockfile.py61 "requires_python": null,STRING
HIGHtests/integration/cli/commands/test_lock.py442 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py514 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1109 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1131 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1364 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1493 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1559 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1595 "use_pep517": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1676 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1805 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1871 "requires_python": null,CODE
HIGHtests/integration/cli/commands/test_lock.py1907 "use_pep517": null,CODE
Cross-File Repetition13 hits · 65 pts
SeverityFileLineSnippetContext
HIGHpex/tools/commands/repository.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/test_override_replace.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/test_issue_2822.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/test_issue_3259.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/test_scoped_repos.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/resolve/test_venv_resolver.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGH…integration/cli/commands/test_split_universal_locks.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/cli/commands/test_run.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/cli/commands/test_lock_report.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGH…on/cli/commands/test_lock_reproducibility_hash_seed.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/venv_ITs/test_issue_2160.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtesting/local_project.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
HIGHtests/integration/test_issue_3248.py0\ [build-system] build-backend = "setuptools.build_meta" requires = ["setuptools"]STRING
AI Structural Patterns29 hits · 20 pts
SeverityFileLineSnippetContext
LOWpex/pep_427.py848CODE
LOWpex/jobs.py750CODE
LOWpex/jobs.py859CODE
LOWpex/resolver.py1546CODE
LOWpex/resolver.py1725CODE
LOWpex/resolver.py1797CODE
LOWpex/resolver.py1942CODE
LOWpex/resolver.py2032CODE
LOWpex/resolver.py1285CODE
LOWpex/resolve/lock_downloader.py84CODE
LOWpex/resolve/lock_downloader.py264CODE
LOWpex/resolve/resolvers.py247CODE
LOWpex/resolve/lock_resolver.py117CODE
LOWpex/resolve/lock_resolver.py204CODE
LOWpex/resolve/lock_resolver.py272CODE
LOWpex/resolve/lock_resolver.py332CODE
LOWpex/resolve/lock_resolver.py388CODE
LOWpex/resolve/lock_resolver.py432CODE
LOWpex/resolve/resolver_configuration.py65CODE
LOWpex/resolve/configured_resolver.py48CODE
LOWpex/resolve/pex_repository_resolver.py30CODE
LOWpex/resolve/lockfile/create.py169CODE
LOWpex/pip/version.py63CODE
LOWpex/pip/tool.py166CODE
LOWpex/pip/tool.py589CODE
LOWpex/pip/tool.py630CODE
LOWpex/pip/tool.py665CODE
LOWtesting/__init__.py140CODE
LOWtesting/__init__.py270CODE
AI Slop Vocabulary9 hits · 18 pts
SeverityFileLineSnippetContext
MEDIUMsetup.cfg82# patterns here than we would otherwise need if we could leverage `**` support.COMMENT
MEDIUMpex/atomic_directory.py100 # this compaction is more robust.COMMENT
LOWpex/scie/model.py461 # hit, we just use major / minor. If the user wants control they can specifyCOMMENT
LOWpex/resolve/target_system.py160 # seems simple and direct, just add explicit parenthesization around all `and`s.COMMENT
MEDIUMpex/resolve/pep_691/fingerprint_service.py166 # enough; we need not fail the whole endeavor. The partial artifact just remains partialSTRING
LOWpex/resolve/pep_691/fingerprint_service.py243 # just return them as-is.STRING
LOWpex/fetcher/url.py80 # There was no *.sock component, so just use the full path.COMMENT
MEDIUMpex/pip/tool.py407 # prompt and we'd also like to know about this since it should never occur. We leverageCOMMENT
MEDIUMtests/integration/test_issue_1520.py45 # in conjunction with protobuf 4+COMMENT
Modern Structural Boilerplate17 hits · 17 pts
SeverityFileLineSnippetContext
LOWpex/build_properties.py18logger = logging.getLogger(__name__)CODE
LOWpex/tools/commands/graph.py27logger = logging.getLogger(__name__)CODE
LOWpex/tools/commands/venv.py31logger = logging.getLogger(__name__)CODE
LOWpex/tools/commands/interpreter.py26logger = logging.getLogger(__name__)CODE
LOWpex/tools/commands/repository.py45logger = logging.getLogger(__name__)CODE
LOWpex/resolve/lockfile/updater.py62logger = logging.getLogger(__name__)CODE
LOWpex/fetcher/__init__.py9__all__ = ["URLFetcher", "initialize_ssl_context"]CODE
LOWpex/docs/command.py26logger = logging.getLogger(__name__)CODE
LOWpex/cli/commands/venv.py48logger = logging.getLogger(__name__)CODE
LOWpex/cli/commands/interpreter.py23logger = logging.getLogger(__name__)CODE
LOWpex/pip/dependencies/requires.py9logger = logging.getLogger(__name__)CODE
LOWpex/pip/package_repositories/link_collector.py10logger = logging.getLogger(__name__)CODE
LOWpex/http/server.py26logger = logging.getLogger(__name__)CODE
LOWtesting/mitmproxy.py26logger = logging.getLogger(__name__)CODE
LOWtesting/devpi.py33logger = logging.getLogger(__name__)CODE
LOWscripts/gen-scie-platform.py29logger = logging.getLogger(__name__)CODE
LOWscripts/py27/lint_enum.py30logger = logging.getLogger(__name__)CODE
Decorative Section Separators5 hits · 13 pts
SeverityFileLineSnippetContext
MEDIUMtests/integration/cli/commands/test_issue_2050.py229 #-----------------------------------------------------------------------------STRING
MEDIUM.github/workflows/track-pip-main.yml58 # -----------COMMENT
MEDIUM.github/workflows/track-pip-main.yml68 # ------------------COMMENT
MEDIUM.github/workflows/ci.yml96 # -----------COMMENT
MEDIUM.github/workflows/ci.yml104 # ----------------------------------------------COMMENT
Self-Referential Comments4 hits · 12 pts
SeverityFileLineSnippetContext
MEDIUMpex/compatibility.py4# This file contains several 2.x/3.x compatibility checkstyle violations for a reasonCOMMENT
MEDIUMtests/integration/test_interpreter_selection.py161 # Create a pex with interpreter constraints, but for not the default interpreter in the path.COMMENT
MEDIUMtests/integration/test_integration.py227 # Create a temporary pex containing just `requests` with no entrypoint.COMMENT
MEDIUMtests/integration/test_integration.py244 # Create a temporary pex containing just `requests` with no entrypoint.COMMENT
Excessive Try-Catch Wrapping10 hits · 11 pts
SeverityFileLineSnippetContext
LOWpex/atomic_directory.py325 except Exception:CODE
LOWpex/pth.py53 except Exception as e:CODE
LOWpex/jobs.py587 except Exception as e:CODE
LOWpex/jobs.py637 except Exception as e:CODE
LOWpex/jobs.py653 except Exception as e:CODE
LOWpex/result.py108 except Exception as e:CODE
LOWpex/exceptions.py65 except Exception:CODE
LOWbuild-backend/pex_build/__init__.py90 except Exception:CODE
LOWtests/integration/test_issue_2235.py38except Exception as e:CODE
MEDIUMtesting/__init__.py650 print("Error cloning pyenv on attempt", index + 1, "of 3:", e, file=sys.stderr)CODE
Fake / Example Data8 hits · 11 pts
SeverityFileLineSnippetContext
LOWtests/resolve/test_locker.py62 assert "git://example.org" == strip_credentials("git://git@example.org", Credentials("git"))CODE
LOWtests/resolve/test_locker.py63 assert "git://example.org" == strip_credentials("git://****@example.org", Credentials("****"))CODE
LOW⚡tests/resolve/test_locker.py76 assert "git://git@example.org" == inject_credentials("git://example.org", Credentials("git"))CODE
LOW⚡tests/resolve/test_locker.py77 assert "git://git@example.org" == inject_credentials(CODE
LOW⚡tests/resolve/test_locker.py78 "git://****@example.org", Credentials("git")CODE
LOW⚡tests/resolve/test_locker.py80 assert "http://joe:bob@example.org" == inject_credentials(CODE
LOW⚡tests/resolve/test_locker.py83 assert "http://joe:bob@example.org" == inject_credentials(CODE
LOW⚡tests/resolve/test_locker.py84 "http://joe:****@example.org", Credentials("joe", "bob")CODE
Redundant / Tautological Comments3 hits · 4 pts
SeverityFileLineSnippetContext
LOWpex/pex_builder.py284 # Check if 'script' is a console_script.COMMENT
LOWpex/pex_builder.py295 # Check if 'script' is an ordinary script.COMMENT
LOWpex/pex.py683 # Check if the arg is an expected startup arg.COMMENT
Overly Generic Function Names5 hits · 3 pts
SeverityFileLineSnippetContext
LOWtests/test_pex.py516 "my_package/my_module.py": 'def do_something():\n print("hello world!")\n',CODE
LOWtests/integration/test_reproducible.py285 def do_something():STRING
LOWtests/integration/test_integration.py385 def do_something():STRING
LOWtests/integration/test_integration.py1066 def do_something():STRING
LOWtesting/__init__.py176 os.path.join(name, "my_module.py"): 'def do_something():\n print("hello world!")\n',CODE
Slop Phrases1 hit · 2 pts
SeverityFileLineSnippetContext
LOWpex/distutils/commands/bdist_pex.py125 # In order for code to run to here, pex is on the sys.path - make sure to propagate theCOMMENT
Structural Annotation Overuse1 hit · 2 pts
SeverityFileLineSnippetContext
LOWpex/pip/tool.py882 # WARNING: This command is only meant for debugging. Do not use this with automation forCOMMENT