Python Development Workflow for Humans.
This report summarizes scanner evidence for pypa/pipenv, a Python project with 25,025 GitHub stars. SynthScan examined 242,678 lines of code across 661 source files, recording 4332 pattern matches distributed across 21 syntactic categories. The legacy adjusted pattern signal is 26.0 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 2573 finding(s).
Are imports declared and package/API names verified? 692 finding(s).
Are wrappers, guards, and repeated structures necessary? 2968 finding(s).
Which changes need focused human review? 4332 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 4332 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pipenv/utils/pipfile.py | 554 | # ============================================================================ | COMMENT |
| MEDIUM | pipenv/utils/pipfile.py | 556 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | pipenv/utils/resolver.py | 1455 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | pipenv/utils/resolver.py | 1457 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | pipenv/utils/resolver.py | 1678 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | pipenv/utils/resolver.py | 1682 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | pipenv/cli/options.py | 881 | # ── scripts ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | pipenv/cli/options.py | 888 | # ── verify ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | pipenv/cli/options.py | 894 | # ── requirements ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 96 | # ── Argument-adder functions (argparse) ────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 98 | # ── Individual argument-adder functions ────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 373 | # ── Option group composers ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 441 | # ── PIPENV_ environment variable overlay ───────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 496 | # ── Main parser factory ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 594 | # ── install ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 606 | # ── remove ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 612 | # ── upgrade ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 624 | # ── uninstall ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 647 | # ── lock ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 652 | # ── shell ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 678 | # ── activate ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 688 | # ── run ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 718 | # ── check ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 778 | # ── audit ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 815 | # ── update ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 831 | # ── graph ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 843 | # ── open ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 851 | # ── sync ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 869 | # ── clean ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 916 | # ── pylock ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 933 | # ── State builder (argparse Namespace → State) ──────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 947 | # ── Global / common fields ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 968 | # ── Validation ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 985 | # ── Verbosity ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 997 | # ── InstallState ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/options.py | 1022 | # ── LockOptions ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/command.py | 733 | # ── Root-level (no subcommand) ──────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/command.py | 820 | # ── Subcommand --help ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | pipenv/cli/command.py | 833 | # ── Dispatch ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | pipenv/routines/lock.py | 122 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | pipenv/routines/lock.py | 126 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | pipenv/routines/lock.py | 157 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | pipenv/routines/lock.py | 161 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | pipenv/routines/lock.py | 180 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | pipenv/routines/lock.py | 186 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | …env/patched/pip/_vendor/packaging/dependency_groups.py | 23 | # ----------- | COMMENT |
| MEDIUM | …env/patched/pip/_vendor/packaging/dependency_groups.py | 25 | # ----------- | COMMENT |
| MEDIUM | …env/patched/pip/_vendor/packaging/dependency_groups.py | 64 | # ------------------------ | COMMENT |
| MEDIUM | …env/patched/pip/_vendor/packaging/dependency_groups.py | 66 | # ------------------------ | COMMENT |
| MEDIUM⚡ | …env/patched/pip/_vendor/packaging/dependency_groups.py | 250 | # -------------------- | COMMENT |
| MEDIUM⚡ | …env/patched/pip/_vendor/packaging/dependency_groups.py | 252 | # -------------------- | COMMENT |
| MEDIUM | …env/patched/pip/_vendor/packaging/dependency_groups.py | 269 | # ---------------- | COMMENT |
| MEDIUM | …env/patched/pip/_vendor/packaging/dependency_groups.py | 271 | # ---------------- | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/_parser.py | 95 | # -------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/_parser.py | 97 | # -------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/_parser.py | 289 | # -------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/_parser.py | 291 | # -------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/pygments/lexer.py | 325 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/requests/compat.py | 30 | # ------------------- | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/requests/compat.py | 32 | # ------------------- | COMMENT |
| 451 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tasks/vendoring/__init__.py | 222 | def _ensure_package_in_requirements(ctx, requirements_file, package): | CODE |
| LOW | tasks/vendoring/__init__.py | 387 | def packages_missing_licenses( | CODE |
| LOW | tasks/vendoring/__init__.py | 646 | def unpin_and_copy_requirements(ctx, requirement_file, name="requirements.txt"): | CODE |
| LOW | tasks/vendoring/__init__.py | 676 | def unpin_and_update_vendored(ctx, vendor=False, patched=True): | CODE |
| LOW | pipenv/shells.py | 86 | def _get_deactivate_wrapper_script(cmd): | CODE |
| LOW | pipenv/installers.py | 79 | def _find_python_installer_by_name_and_env(name, env_var): | CODE |
| LOW | pipenv/installers.py | 134 | def iter_installable_versions(self): | CODE |
| LOW | pipenv/installers.py | 185 | def iter_installable_versions(self): | CODE |
| LOW | pipenv/installers.py | 212 | def iter_installable_versions(self): | CODE |
| LOW | pipenv/installers.py | 292 | def iter_installable_versions(self): | CODE |
| LOW | pipenv/environment.py | 630 | def _get_requirements_for_package(cls, node, key_tree, parent=None, chain=None): | CODE |
| LOW | pipenv/utils/pipfile.py | 132 | def _normalize_package_name_case(value) -> str: | CODE |
| LOW | pipenv/utils/internet.py | 157 | def _strip_credentials_from_url( | CODE |
| LOW | pipenv/utils/internet.py | 186 | def _read_existing_netrc_content() -> str: | CODE |
| LOW | pipenv/utils/pylock.py | 597 | def get_packages_for_environment( | CODE |
| LOW | pipenv/utils/pylock.py | 650 | def convert_to_pipenv_lockfile(self) -> Dict[str, Any]: | CODE |
| LOW | pipenv/utils/sources.py | 70 | def get_requests_session_for_source(self, source): | CODE |
| LOW | pipenv/utils/sources.py | 141 | def get_hashes_from_remote_index_urls(self, ireq, source): | CODE |
| LOW | pipenv/utils/locking.py | 160 | >>> def raise_exception_while_writing(filename): | STRING |
| LOW | pipenv/utils/locking.py | 170 | >>> def raise_exception_while_writing(filename): | STRING |
| LOW⚡ | pipenv/utils/resolver.py | 1464 | def _resolve_deadline_seconds(project) -> float: | CODE |
| LOW | pipenv/utils/resolver.py | 73 | def _is_python_version_specifier(value): | CODE |
| LOW | pipenv/utils/resolver.py | 81 | def _get_pipfile_python_override(project): | CODE |
| LOW | pipenv/utils/resolver.py | 150 | def _patched_marker_environment(override): | CODE |
| LOW | pipenv/utils/resolver.py | 168 | def _patched_default_environment(): | CODE |
| LOW | pipenv/utils/resolver.py | 378 | def check_if_package_req_skipped( | CODE |
| LOW | pipenv/utils/resolver.py | 662 | def parsed_default_constraints(self): | CODE |
| LOW | pipenv/utils/resolver.py | 1144 | def _generate_resolution_cache_key( | CODE |
| LOW | pipenv/utils/resolver.py | 1216 | def _should_use_resolution_cache(cache_key, clear): | CODE |
| LOW | pipenv/utils/resolver.py | 1505 | def _selected_backend_for_request(project, resolver_backend=None): | CODE |
| LOW | pipenv/utils/resolver.py | 1802 | def _dispatch_resolver_response(response, st): | CODE |
| LOW | pipenv/utils/resolver.py | 1836 | def _normalize_resolver_results(results): | CODE |
| LOW | pipenv/utils/markers.py | 212 | def get_sorted_version_string(version_set): | CODE |
| LOW | pipenv/utils/markers.py | 410 | def _markers_collect_pyversions(markers, collection): | CODE |
| LOW | pipenv/utils/markers.py | 429 | def _markers_contains_pyversion(markers): | CODE |
| LOW | pipenv/utils/markers.py | 522 | def _get_specifiers_from_markers(marker_item): | CODE |
| LOW | pipenv/utils/virtualenv.py | 473 | def _find_python_for_specifier(specifier_str, pyenv_only=False): | CODE |
| LOW | pipenv/utils/virtualenv.py | 512 | def find_python_from_py_launcher(version): | CODE |
| LOW | pipenv/utils/virtualenv.py | 644 | def inline_activate_virtual_environment(project): | CODE |
| LOW | pipenv/utils/virtualenv.py | 679 | def _inline_activate_virtualenv(project): | CODE |
| LOW | pipenv/utils/project.py | 13 | def _python_version_matches_required(actual_ver_str, required_ver_str): | CODE |
| LOW⚡ | pipenv/utils/dependencies.py | 97 | def get_lockfile_section_using_pipfile_category(category): | CODE |
| LOW⚡ | pipenv/utils/dependencies.py | 105 | def get_pipfile_category_using_lockfile_section(category): | CODE |
| LOW⚡ | pipenv/utils/dependencies.py | 1510 | def get_constraints_from_deps(deps): | CODE |
| LOW | pipenv/utils/dependencies.py | 257 | def add_ssh_scheme_to_git_uri(uri: str | bytes | None) -> str | bytes | None: | CODE |
| LOW | pipenv/utils/dependencies.py | 289 | def _file_url_to_relative_path(file_url, base_dir): | CODE |
| LOW | pipenv/utils/dependencies.py | 510 | def dependency_as_pip_install_line( | CODE |
| LOW | pipenv/utils/dependencies.py | 773 | def find_package_name_from_tarball(tarball_filepath): | CODE |
| LOW | pipenv/utils/dependencies.py | 786 | def find_package_name_from_zipfile(zip_filepath): | CODE |
| LOW | pipenv/utils/dependencies.py | 799 | def find_package_name_from_directory(directory): | CODE |
| LOW | pipenv/utils/dependencies.py | 954 | def determine_vcs_revision_hash( | CODE |
| LOW | pipenv/utils/dependencies.py | 1038 | def find_package_name_from_filename(filename, file): | CODE |
| LOW | pipenv/utils/dependencies.py | 1165 | def expansive_install_req_from_line( | CODE |
| LOW | pipenv/utils/dependencies.py | 1276 | def normalize_editable_path_for_pip(path_str): | CODE |
| LOW | pipenv/utils/dependencies.py | 1462 | def handle_non_vcs_requirement( | CODE |
| LOW | pipenv/utils/dependencies.py | 1541 | def get_constraints_from_resolved_deps(resolved_deps): | CODE |
| LOW | pipenv/utils/dependencies.py | 1787 | def add_index_to_pipfile_with_trust_check(project, index, trusted_hosts=None): | CODE |
| LOW | pipenv/utils/dependencies.py | 1806 | def requirement_from_lockfile( | CODE |
| LOW | pipenv/utils/dependencies.py | 1894 | def requirements_from_lockfile(deps, include_hashes=True, include_markers=True): | CODE |
| LOW | pipenv/utils/dependencies.py | 2019 | def requirements_from_pipfile(deps, include_markers=True): | CODE |
| 1755 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | pipenv/shells.py | 240 | except Exception: | CODE |
| HIGH | pipenv/shells.py | 267 | except Exception: | CODE |
| HIGH | pipenv/help.py | 27 | except ImportError: | CODE |
| HIGH | pipenv/utils/funktools.py | 164 | except (PermissionError, FileNotFoundError): | CODE |
| HIGH | pipenv/utils/funktools.py | 199 | except (subprocess.SubprocessError, FileNotFoundError): | CODE |
| HIGH | pipenv/utils/funktools.py | 269 | except OSError: | CODE |
| HIGH | pipenv/utils/funktools.py | 372 | except AttributeError: # noqa: PERF203 | CODE |
| HIGH | pipenv/utils/internet.py | 280 | except OSError: | CODE |
| HIGH | pipenv/utils/internet.py | 285 | except OSError: | CODE |
| HIGH | pipenv/utils/lockfile.py | 171 | except Exception: | CODE |
| HIGH | pipenv/utils/lockfile.py | 181 | except Exception: | CODE |
| HIGH | pipenv/utils/pylock.py | 641 | except InvalidMarker: | CODE |
| HIGH | pipenv/utils/shell.py | 132 | except KeyError: | CODE |
| HIGH | pipenv/utils/shell.py | 384 | except (OSError, ValueError): | CODE |
| HIGH | pipenv/utils/shell.py | 600 | except AttributeError: | CODE |
| HIGH | pipenv/utils/locking.py | 216 | except OSError: | CODE |
| HIGH | pipenv/utils/locking.py | 529 | except Exception: | CODE |
| HIGH | pipenv/utils/resolver.py | 256 | except ImportError: | CODE |
| HIGH | pipenv/utils/resolver.py | 1376 | except Exception: | CODE |
| HIGH | pipenv/utils/resolver.py | 1380 | except Exception: | CODE |
| HIGH | pipenv/utils/markers.py | 64 | except RequirementError: | CODE |
| HIGH | pipenv/utils/prefetch.py | 428 | except Exception: # noqa: BLE001 | CODE |
| HIGH | pipenv/utils/virtualenv.py | 567 | except Exception: | CODE |
| HIGH | pipenv/utils/virtualenv.py | 498 | except Exception: | CODE |
| HIGH | pipenv/utils/project.py | 39 | except InvalidSpecifier: | CODE |
| HIGH | pipenv/utils/project.py | 128 | except Exception: | CODE |
| HIGH | pipenv/utils/dependencies.py | 746 | except ValueError: | CODE |
| HIGH | pipenv/utils/dependencies.py | 861 | except (FileNotFoundError, PermissionError): | CODE |
| HIGH | pipenv/utils/dependencies.py | 340 | except TypeError: | CODE |
| HIGH | pipenv/utils/dependencies.py | 333 | except TypeError: | CODE |
| HIGH | pipenv/utils/dependencies.py | 1006 | except PermissionError: | CODE |
| HIGH | pipenv/cli/options.py | 490 | except ValueError: | CODE |
| HIGH | pipenv/cli/command.py | 699 | except ImportError: | CODE |
| HIGH | pipenv/routines/check.py | 395 | except Exception: | CODE |
| HIGH | pipenv/routines/uninstall.py | 166 | except KeyError: | CODE |
| HIGH | pipenv/routines/lock.py | 40 | except Exception: # noqa: BLE001 — defensive; never block the resolve. | CODE |
| HIGH | pipenv/routines/lock.py | 241 | except Exception: | CODE |
| HIGH | pipenv/routines/lock.py | 261 | except Exception: | CODE |
| HIGH | pipenv/routines/scan.py | 429 | except Exception: | CODE |
| HIGH | pipenv/routines/outdated.py | 40 | except InvalidWheelFilename: | CODE |
| HIGH | pipenv/patched/pip/_internal/exceptions.py | 885 | except KeyError: | CODE |
| HIGH | pipenv/patched/pip/_internal/exceptions.py | 366 | except IndexError: | CODE |
| HIGH | pipenv/patched/pip/_internal/self_outdated_check.py | 127 | except OSError: | CODE |
| HIGH | pipenv/patched/pip/_internal/self_outdated_check.py | 66 | except (OSError, ValueError, KeyError): | CODE |
| HIGH | pipenv/patched/pip/_internal/network/auth.py | 192 | except ImportError: | CODE |
| HIGH | pipenv/patched/pip/_internal/network/auth.py | 227 | except FileNotFoundError: | CODE |
| HIGH | pipenv/patched/pip/_internal/network/session.py | 160 | except Exception: | CODE |
| HIGH | pipenv/patched/pip/_internal/network/cache.py | 35 | except OSError: | CODE |
| HIGH | pipenv/patched/pip/_internal/network/lazy_wheel.py | 168 | except BadZipFile: | CODE |
| HIGH | pipenv/patched/pip/_internal/utils/misc.py | 147 | except (AttributeError, TypeError, IndexError): | CODE |
| HIGH | pipenv/patched/pip/_internal/utils/misc.py | 201 | except OSError: | CODE |
| HIGH | pipenv/patched/pip/_internal/utils/misc.py | 384 | except OSError: | CODE |
| HIGH | pipenv/patched/pip/_internal/utils/misc.py | 208 | except OSError: | CODE |
| HIGH | pipenv/patched/pip/_internal/utils/compat.py | 22 | except ImportError: | CODE |
| HIGH | pipenv/patched/pip/_internal/utils/filesystem.py | 104 | except FileExistsError: | CODE |
| HIGH | pipenv/patched/pip/_internal/cli/base_command.py | 147 | except OSError: | CODE |
| HIGH | pipenv/patched/pip/_internal/operations/prepare.py | 105 | except OSError: | CODE |
| HIGH | pipenv/patched/pip/_internal/req/req_install.py | 799 | except Exception: | CODE |
| HIGH | pipenv/patched/pip/_internal/req/req_uninstall.py | 569 | except (FileNotFoundError, NotADirectoryError): | CODE |
| HIGH | pipenv/patched/pip/_internal/req/req_uninstall.py | 237 | except KeyError: | CODE |
| 76 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pipenv/__init__.py | 31 | CODE | |
| LOW | pipenv/environment.py | 1 | CODE | |
| LOW | pipenv/project.py | 1 | CODE | |
| LOW | pipenv/utils/venv_locator.py | 31 | CODE | |
| LOW | pipenv/utils/pipfile.py | 79 | CODE | |
| LOW | pipenv/utils/lockfile.py | 49 | CODE | |
| LOW | pipenv/utils/__init__.py | 4 | CODE | |
| LOW | pipenv/utils/sources.py | 22 | CODE | |
| LOW | pipenv/utils/indexes.py | 1 | CODE | |
| LOW | pipenv/utils/settings.py | 17 | CODE | |
| LOW | pipenv/utils/prefetch.py | 54 | CODE | |
| LOW | pipenv/cli/__init__.py | 1 | CODE | |
| LOW | pipenv/routines/context.py | 12 | CODE | |
| LOW | pipenv/patched/pip/__init__.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/configuration.py | 14 | CODE | |
| LOW | pipenv/patched/pip/_internal/pyproject.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/cache.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/__init__.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/exceptions.py | 8 | CODE | |
| LOW | pipenv/patched/pip/_internal/main.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/wheel_builder.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/self_outdated_check.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/virtual.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 8 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 8 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 12 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 13 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 14 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/venv.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/installer.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/noop.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/build_env/base.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/network/auth.py | 7 | CODE | |
| LOW | pipenv/patched/pip/_internal/network/xmlrpc.py | 13 | CODE | |
| LOW | pipenv/patched/pip/_internal/network/xmlrpc.py | 13 | CODE | |
| LOW | pipenv/patched/pip/_internal/network/xmlrpc.py | 15 | CODE | |
| LOW | pipenv/patched/pip/_internal/network/download.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/network/session.py | 5 | CODE | |
| LOW | pipenv/patched/pip/_internal/network/cache.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/network/lazy_wheel.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/logging.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/misc.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/egg_link.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/compat.py | 85 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/compat.py | 87 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/compat.py | 19 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/deprecation.py | 5 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/pylock.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/subprocess.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/filesystem.py | 1 | CODE | |
| LOW | …penv/patched/pip/_internal/utils/direct_url_helpers.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/temp_dir.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/retry.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/packaging.py | 1 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/entrypoints.py | 1 | CODE | |
| LOW | …penv/patched/pip/_internal/utils/compatibility_tags.py | 3 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/hashes.py | 1 | CODE | |
| 611 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tasks/vendoring/__init__.py | 114 | CODE | |
| LOW | tasks/vendoring/__init__.py | 139 | CODE | |
| LOW | tasks/vendoring/__init__.py | 222 | CODE | |
| LOW | tasks/vendoring/__init__.py | 246 | CODE | |
| LOW | tasks/vendoring/__init__.py | 387 | CODE | |
| LOW | tasks/vendoring/__init__.py | 440 | CODE | |
| LOW | pipenv/shells.py | 40 | CODE | |
| LOW | pipenv/shells.py | 86 | CODE | |
| LOW | pipenv/environment.py | 160 | CODE | |
| LOW | pipenv/environment.py | 696 | CODE | |
| LOW | pipenv/environment.py | 740 | CODE | |
| LOW | pipenv/exceptions.py | 79 | CODE | |
| LOW | pipenv/exceptions.py | 435 | CODE | |
| LOW | pipenv/exceptions.py | 331 | CODE | |
| LOW | pipenv/exceptions.py | 398 | CODE | |
| LOW | pipenv/project.py | 419 | CODE | |
| LOW | pipenv/utils/venv_locator.py | 125 | CODE | |
| LOW | pipenv/utils/pipfile.py | 210 | CODE | |
| LOW | pipenv/utils/pipfile.py | 467 | CODE | |
| LOW | pipenv/utils/pipfile.py | 851 | CODE | |
| LOW | pipenv/utils/pipfile.py | 970 | CODE | |
| LOW | pipenv/utils/pipfile.py | 1126 | CODE | |
| LOW | pipenv/utils/funktools.py | 98 | CODE | |
| LOW | pipenv/utils/funktools.py | 138 | CODE | |
| LOW | pipenv/utils/funktools.py | 244 | CODE | |
| LOW | pipenv/utils/funktools.py | 285 | CODE | |
| LOW | pipenv/utils/funktools.py | 390 | CODE | |
| LOW | pipenv/utils/pylock.py | 47 | CODE | |
| LOW | pipenv/utils/pylock.py | 214 | CODE | |
| LOW | pipenv/utils/pylock.py | 265 | CODE | |
| LOW | pipenv/utils/pylock.py | 422 | CODE | |
| LOW | pipenv/utils/pylock.py | 597 | CODE | |
| LOW | pipenv/utils/sources.py | 141 | CODE | |
| LOW | pipenv/utils/indexes.py | 16 | CODE | |
| LOW | pipenv/utils/locking.py | 45 | CODE | |
| LOW | pipenv/utils/locking.py | 264 | CODE | |
| LOW | pipenv/utils/locking.py | 475 | CODE | |
| LOW | pipenv/utils/resolver.py | 1308 | CODE | |
| LOW | pipenv/utils/resolver.py | 1610 | CODE | |
| LOW | pipenv/utils/resolver.py | 2133 | CODE | |
| LOW | pipenv/utils/resolver.py | 391 | CODE | |
| LOW | pipenv/utils/resolver.py | 848 | CODE | |
| LOW | pipenv/utils/resolver.py | 1336 | CODE | |
| LOW | pipenv/utils/markers.py | 559 | CODE | |
| LOW | pipenv/utils/environment.py | 9 | CODE | |
| LOW | pipenv/utils/prefetch.py | 71 | CODE | |
| LOW | pipenv/utils/prefetch.py | 298 | CODE | |
| LOW | pipenv/utils/pip.py | 18 | CODE | |
| LOW | pipenv/utils/virtualenv.py | 51 | CODE | |
| LOW | pipenv/utils/virtualenv.py | 215 | CODE | |
| LOW | pipenv/utils/virtualenv.py | 292 | CODE | |
| LOW | pipenv/utils/virtualenv.py | 473 | CODE | |
| LOW | pipenv/utils/project.py | 61 | CODE | |
| LOW | pipenv/utils/dependencies.py | 316 | CODE | |
| LOW | pipenv/utils/dependencies.py | 440 | CODE | |
| LOW | pipenv/utils/dependencies.py | 510 | CODE | |
| LOW | pipenv/utils/dependencies.py | 679 | CODE | |
| LOW | pipenv/utils/dependencies.py | 773 | CODE | |
| LOW | pipenv/utils/dependencies.py | 786 | CODE | |
| LOW | pipenv/utils/dependencies.py | 799 | CODE | |
| 252 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pipenv/utils/venv_locator.py | 307 | # Create the directory, if it doesn't exist. | COMMENT |
| MEDIUM | pipenv/utils/pipfile.py | 194 | # Create a Path object for the potential Pipfile | COMMENT |
| MEDIUM | pipenv/utils/pipfile.py | 232 | # Create a Pipfile... | COMMENT |
| MEDIUM | pipenv/utils/pipfile.py | 255 | # Create the pipfile if it doesn't exist. | COMMENT |
| MEDIUM | pipenv/utils/pylock.py | 88 | # Create the basic pylock.toml structure | COMMENT |
| MEDIUM | pipenv/utils/pylock.py | 309 | # Create the basic pylock.toml structure | COMMENT |
| MEDIUM | pipenv/utils/pylock.py | 430 | # Create a deep copy of the data to avoid modifying the original | COMMENT |
| MEDIUM | pipenv/utils/pylock.py | 656 | # Create the basic structure | COMMENT |
| MEDIUM | pipenv/utils/pylock.py | 713 | # Create the package entry | COMMENT |
| MEDIUM | pipenv/utils/fileutils.py | 122 | # Create an absolute path | COMMENT |
| MEDIUM | pipenv/utils/fileutils.py | 192 | # Creating a buffer-like object | COMMENT |
| MEDIUM | pipenv/utils/shell.py | 88 | # Create a PurePath which won't access the filesystem | COMMENT |
| MEDIUM | pipenv/utils/resolver.py | 1185 | # Create a deterministic representation of dependencies | COMMENT |
| MEDIUM⚡ | pipenv/utils/dependencies.py | 1504 | # Create the Requirement instance | COMMENT |
| MEDIUM⚡ | pipenv/utils/dependencies.py | 1518 | # Creating a constraint as a canonical name plus a version specifier | COMMENT |
| MEDIUM | pipenv/utils/dependencies.py | 934 | # Create a temporary directory using mkdtemp | COMMENT |
| MEDIUM | pipenv/routines/lock.py | 352 | # Create the lockfile. | COMMENT |
| MEDIUM | pipenv/patched/pip/_internal/req/constructors.py | 191 | # Create a steppable iterator, so we can handle \-continuations. | COMMENT |
| MEDIUM | pipenv/patched/pip/_internal/commands/list.py | 245 | # Create a set to remove duplicate packages, and cast it to a list | COMMENT |
| MEDIUM | pipenv/patched/pip/_internal/commands/install.py | 426 | # Create a target directory for using with the target option | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/__init__.py | 26 | # Define a small helper function to alias our vendored modules to the real ones | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/tags.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/metadata.py | 290 | # This class is for writing RFC822 messages | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/metadata.py | 307 | # This class is for writing RFC822 messages | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/version.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/__init__.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/utils.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/requirements.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/_structures.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/markers.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/packaging/specifiers.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/truststore/_windows.py | 528 | # Create a custom cert chain engine which exclusively trusts | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/distlib/util.py | 1603 | # The above classes only come into play if a timeout | STRING |
| MEDIUM | pipenv/patched/pip/_vendor/idna/idnadata.py | 1 | # This file is automatically generated by tools/idna-data | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/idna/uts46data.py | 1 | # This file is automatically generated by tools/idna-data | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/requests/sessions.py | 622 | # Create the Request. | COMMENT |
| MEDIUM | …pip/_vendor/pyproject_hooks/_in_process/_in_process.py | 27 | # This file is run as a script, and `import wrappers` is not zip-safe, so we | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/rich/console.py | 2014 | """This function is called when a `BrokenPipeError` is raised. | STRING |
| MEDIUM | pipenv/patched/pip/_vendor/urllib3/util/url.py | 266 | output = [] # Initialize the variable to use to store output | CODE |
| MEDIUM | pipenv/patched/pip/_vendor/urllib3/util/connection.py | 23 | # This function is copied from socket.py in the Python 2.7 standard | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/urllib3/util/connection.py | 104 | """This function is designed to work in the context of | STRING |
| MEDIUM | pipenv/patched/pip/_vendor/urllib3/http2/probe.py | 66 | """This function is for testing purposes only. Gets the current state of the probe cache""" | STRING |
| MEDIUM | pipenv/patched/pip/_vendor/urllib3/http2/probe.py | 71 | """This function is for testing purposes only. Reset the cache values""" | STRING |
| MEDIUM | …patched/pip/_vendor/resolvelib/resolvers/resolution.py | 254 | # Create a new state from the last known-to-work one, and apply | COMMENT |
| MEDIUM⚡ | tests/unit/test_utils.py | 746 | # Create a package directory structure | COMMENT |
| MEDIUM⚡ | tests/unit/test_utils.py | 750 | # Create a proper setup.py in the root with a parseable name | COMMENT |
| MEDIUM⚡ | tests/unit/test_utils.py | 756 | # Create a tests subdirectory with a file that has a setup() call | COMMENT |
| MEDIUM | tests/unit/test_utils.py | 776 | # Create a package directory structure | COMMENT |
| MEDIUM | tests/unit/test_utils.py | 822 | # Create a mock configuration that returns index-url | COMMENT |
| MEDIUM | tests/unit/test_utils.py | 2214 | # Create the virtualenv dir so .project file write succeeds | COMMENT |
| MEDIUM | tests/unit/test_utils_windows_executable.py | 8 | # This module is run only on Windows. | COMMENT |
| MEDIUM | tests/unit/test_core.py | 724 | # Create a fake subprocess result that succeeds | COMMENT |
| MEDIUM | tests/unit/test_pylock.py | 201 | # Create a simple Pipfile.lock | COMMENT |
| MEDIUM | tests/unit/test_pylock.py | 328 | # Create a simple PylockFile | COMMENT |
| MEDIUM | tests/unit/test_pylock.py | 395 | # Create a pylock file with various markers using PEP 751 syntax | COMMENT |
| MEDIUM | tests/unit/test_pylock.py | 245 | # Create a PylockFile from the Pipfile.lock | STRING |
| MEDIUM | tests/unit/test_pylock.py | 270 | # Create a Pipfile.lock with a wildcard version | STRING |
| MEDIUM | tests/unit/test_pylock.py | 297 | # Create a PylockFile from the Pipfile.lock | STRING |
| MEDIUM | tests/unit/test_pylock.py | 622 | # Create a minimal Pipfile (needed for Project to initialize) | STRING |
| MEDIUM | tests/unit/test_pylock.py | 636 | # Create a pylock.toml but no Pipfile.lock | STRING |
| 28 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tasks/vendoring/__init__.py | 735 | print(f"Error downloading {link}") | CODE |
| LOW | pipenv/shells.py | 240 | except Exception: | CODE |
| LOW | pipenv/shells.py | 267 | except Exception: | CODE |
| LOW | pipenv/environment.py | 191 | except Exception: | CODE |
| LOW | pipenv/environment.py | 667 | except Exception as e: | CODE |
| MEDIUM | pipenv/exceptions.py | 26 | print(f"Error: {self.format_message()}", file=file) | CODE |
| LOW | pipenv/utils/pipfile.py | 161 | except Exception: | CODE |
| LOW | pipenv/utils/pipfile.py | 240 | except Exception: | CODE |
| LOW | pipenv/utils/pipfile.py | 302 | except Exception: | CODE |
| LOW | pipenv/utils/pipfile.py | 707 | except Exception: | CODE |
| LOW | pipenv/utils/pipfile.py | 862 | except Exception: | CODE |
| LOW | pipenv/utils/internet.py | 282 | except Exception: | CODE |
| LOW | pipenv/utils/lockfile.py | 151 | except Exception as e: | CODE |
| LOW | pipenv/utils/lockfile.py | 171 | except Exception: | CODE |
| LOW | pipenv/utils/lockfile.py | 181 | except Exception: | CODE |
| LOW | pipenv/utils/lockfile.py | 294 | except Exception as e: | CODE |
| LOW | pipenv/utils/pylock.py | 85 | except Exception as e: | CODE |
| LOW | pipenv/utils/pylock.py | 248 | except Exception as e: | CODE |
| LOW | pipenv/utils/pylock.py | 301 | except Exception as e: | CODE |
| LOW | pipenv/utils/pylock.py | 413 | except Exception: | CODE |
| LOW | pipenv/utils/pylock.py | 548 | except Exception as e: | CODE |
| LOW | pipenv/utils/shell.py | 155 | except Exception: | CODE |
| LOW | pipenv/utils/shell.py | 280 | except Exception: | CODE |
| LOW | pipenv/utils/shell.py | 665 | except Exception: # pragma: no cover | CODE |
| MEDIUM | pipenv/utils/shell.py | 662 | def isatty(stream): | CODE |
| LOW | pipenv/utils/sources.py | 201 | except Exception: | CODE |
| LOW | pipenv/utils/locking.py | 529 | except Exception: | CODE |
| MEDIUM | pipenv/utils/resolver.py | 1747 | err.print(f"Error: {c.stderr.strip()}") | CODE |
| LOW | pipenv/utils/resolver.py | 1376 | except Exception: | CODE |
| LOW | pipenv/utils/resolver.py | 1380 | except Exception: | CODE |
| LOW⚡ | pipenv/utils/prefetch.py | 118 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW⚡ | pipenv/utils/prefetch.py | 161 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | pipenv/utils/prefetch.py | 360 | except Exception as exc: # noqa: BLE001 — defensive | CODE |
| LOW | pipenv/utils/prefetch.py | 391 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | pipenv/utils/prefetch.py | 428 | except Exception: # noqa: BLE001 | CODE |
| MEDIUM | pipenv/utils/virtualenv.py | 450 | err.print("Something went wrong...") | CODE |
| LOW | pipenv/utils/virtualenv.py | 498 | except Exception: | CODE |
| LOW | pipenv/utils/virtualenv.py | 567 | except Exception: | CODE |
| LOW | pipenv/utils/virtualenv.py | 691 | except Exception: | CODE |
| MEDIUM | pipenv/utils/virtualenv.py | 679 | def _inline_activate_virtualenv(project): | CODE |
| LOW | pipenv/utils/project.py | 56 | except Exception: | CODE |
| LOW | pipenv/utils/project.py | 128 | except Exception: | CODE |
| LOW⚡ | pipenv/utils/dependencies.py | 87 | except Exception: | CODE |
| LOW | pipenv/utils/dependencies.py | 964 | except Exception as e: | CODE |
| LOW | pipenv/utils/dependencies.py | 1339 | except Exception as e: | CODE |
| MEDIUM | pipenv/cli/command.py | 291 | err.print("Error: Missing argument 'command'.") | CODE |
| LOW | pipenv/cli/command.py | 558 | except Exception as e: | CODE |
| LOW | pipenv/cli/command.py | 581 | except Exception as e: | CODE |
| LOW | pipenv/cli/command.py | 611 | except Exception as e: | CODE |
| LOW | pipenv/cli/command.py | 624 | except Exception as e: | CODE |
| LOW | pipenv/routines/update.py | 180 | except Exception as e: # noqa: PERF203 | CODE |
| LOW | pipenv/routines/update.py | 220 | except Exception: # noqa: PERF203 | CODE |
| LOW | pipenv/routines/audit.py | 35 | except Exception: | CODE |
| LOW | pipenv/routines/audit.py | 267 | except Exception as e: | CODE |
| LOW | pipenv/routines/check.py | 160 | except Exception: | CODE |
| LOW | pipenv/routines/check.py | 218 | except Exception as e: | CODE |
| LOW | pipenv/routines/check.py | 395 | except Exception: | CODE |
| LOW | pipenv/routines/check.py | 443 | except Exception as e: | CODE |
| MEDIUM | pipenv/routines/uninstall.py | 40 | console.print(f"Error occurred while uninstalling package {package}.") | CODE |
| LOW⚡ | pipenv/routines/lock.py | 117 | except Exception: | CODE |
| 148 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pipenv/utils/funktools.py | 321 | def set_write_bit(fn: str) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/configuration.py | 159 | def set_value(self, key: str, value: Any) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/cache.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/exceptions.py | 40 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/wheel_builder.py | 27 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/self_outdated_check.py | 44 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/build_env/__init__.py | 16 | __all__ = [ | CODE |
| LOW | pipenv/patched/pip/_internal/build_env/installer.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/network/auth.py | 165 | def _set_password(self, service_name: str, username: str, password: str) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/network/xmlrpc.py | 17 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/network/download.py | 40 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/network/session.py | 61 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/network/session.py | 402 | def update_index_urls(self, new_index_urls: list[str]) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/network/cache.py | 121 | def set_body(self, key: str, body: bytes) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/network/cache.py | 125 | def set_body_from_io(self, key: str, body_file: BinaryIO) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/network/lazy_wheel.py | 5 | __all__ = ["HTTPRangeRequestUnsupported", "dist_from_wheel_url"] | CODE |
| LOW | pipenv/patched/pip/_internal/utils/misc.py | 41 | __all__ = [ | CODE |
| LOW | pipenv/patched/pip/_internal/utils/misc.py | 59 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/utils/egg_link.py | 13 | __all__ = [ | CODE |
| LOW | pipenv/patched/pip/_internal/utils/compat.py | 11 | __all__ = ["get_locale_encoding", "get_path_uid", "tomllib", "WINDOWS"] | CODE |
| LOW | pipenv/patched/pip/_internal/utils/compat.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/utils/temp_dir.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/utils/temp_dir.py | 53 | def set_delete(self, kind: str, value: bool) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/utils/packaging.py | 9 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/utils/virtualenv.py | 8 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/utils/wheel.py | 15 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/utils/unpacking.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | pipenv/patched/pip/_internal/utils/unpacking.py | 144 | def set_extracted_file_to_default_mode_plus_executable(path: str) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/models/link.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/models/direct_url.py | 18 | __all__ = [ | CODE |
| LOW | pipenv/patched/pip/_internal/models/search_scope.py | 14 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/cli/cmdoptions.py | 39 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/cli/index_command.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/cli/parser.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/cli/spinners.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/cli/base_command.py | 43 | __all__ = ["Command"] | CODE |
| LOW | pipenv/patched/pip/_internal/cli/base_command.py | 45 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/cli/main_parser.py | 17 | __all__ = ["create_main_parser", "parse_command"] | CODE |
| LOW | pipenv/patched/pip/_internal/cli/main.py | 11 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/cli/req_command.py | 63 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/operations/check.py | 24 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/operations/freeze.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | …penv/patched/pip/_internal/operations/install/wheel.py | 65 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/req/req_install.py | 58 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/req/req_install.py | 365 | def _set_requirement(self) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/req/req_install.py | 556 | def set_dist(self, distribution: BaseDistribution) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/req/req_install.py | 637 | def update_editable(self) -> None: | CODE |
| LOW | pipenv/patched/pip/_internal/req/req_set.py | 8 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/req/__init__.py | 15 | __all__ = [ | CODE |
| LOW | pipenv/patched/pip/_internal/req/__init__.py | 22 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/req/req_file.py | 34 | __all__ = ["parse_requirements"] | CODE |
| LOW | pipenv/patched/pip/_internal/req/req_file.py | 101 | logger = logging.getLogger(__name__) | CODE |
| LOW | pipenv/patched/pip/_internal/req/constructors.py | 44 | __all__ = [ | CODE |
| LOW | pipenv/patched/pip/_internal/req/constructors.py | 50 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nv/patched/pip/_internal/resolution/legacy/resolver.py | 52 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nv/patched/pip/_internal/resolution/legacy/resolver.py | 318 | def _set_req_to_reinstall(self, req: InstallRequirement) -> None: | CODE |
| LOW | …ip/_internal/resolution/resolvelib/found_candidates.py | 23 | logger = logging.getLogger(__name__) | CODE |
| LOW | …patched/pip/_internal/resolution/resolvelib/factory.py | 81 | logger = logging.getLogger(__name__) | CODE |
| LOW | …atched/pip/_internal/resolution/resolvelib/resolver.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ched/pip/_internal/resolution/resolvelib/candidates.py | 37 | logger = logging.getLogger(__name__) | CODE |
| 120 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | pipenv/patched/pip/_internal/vcs/git.py | 0 | return the path to python project root, relative to the repo root. return none if the project root is in the repo root. | STRING |
| HIGH | pipenv/patched/pip/_internal/vcs/mercurial.py | 0 | return the path to python project root, relative to the repo root. return none if the project root is in the repo root. | STRING |
| HIGH | pipenv/patched/pip/_internal/vcs/versioncontrol.py | 0 | return the path to python project root, relative to the repo root. return none if the project root is in the repo root. | STRING |
| HIGH | pipenv/patched/pip/_internal/commands/download.py | 0 | %prog [options] <requirement specifier> ... %prog [options] -r <requirements file> ... %prog [options] [-e] <vcs project | STRING |
| HIGH | pipenv/patched/pip/_internal/commands/lock.py | 0 | %prog [options] <requirement specifier> ... %prog [options] -r <requirements file> ... %prog [options] [-e] <vcs project | STRING |
| HIGH | pipenv/patched/pip/_internal/commands/install.py | 0 | %prog [options] <requirement specifier> ... %prog [options] -r <requirements file> ... %prog [options] [-e] <vcs project | STRING |
| HIGH | pipenv/patched/pip/_internal/commands/wheel.py | 0 | %prog [options] <requirement specifier> ... %prog [options] -r <requirements file> ... %prog [options] [-e] <vcs project | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/live.py | 0 | iter_values = iter(values) try: previous_value = next(iter_values) except stopiteration: return for value in iter_values | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/progress.py | 0 | iter_values = iter(values) try: previous_value = next(iter_values) except stopiteration: return for value in iter_values | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/__main__.py | 0 | iter_values = iter(values) try: previous_value = next(iter_values) except stopiteration: return for value in iter_values | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/macos.py | 0 | :returns: state directory tied to the user, same as `user_data_dir` | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/android.py | 0 | :returns: state directory tied to the user, same as `user_data_dir` | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/windows.py | 0 | :returns: state directory tied to the user, same as `user_data_dir` | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/macos.py | 0 | :returns: runtime directory shared by users, same as `user_runtime_dir` | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/android.py | 0 | :returns: runtime directory shared by users, same as `user_runtime_dir` | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/windows.py | 0 | :returns: runtime directory shared by users, same as `user_runtime_dir` | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/macos.py | 0 | :yield: all user and site configuration directories. | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/unix.py | 0 | :yield: all user and site configuration directories. | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/api.py | 0 | :yield: all user and site configuration directories. | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/unix.py | 0 | :returns: preference directory tied to the user, same as ``user_config_dir`` | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/android.py | 0 | :returns: preference directory tied to the user, same as ``user_config_dir`` | STRING |
| HIGH | pipenv/patched/pip/_vendor/platformdirs/windows.py | 0 | :returns: preference directory tied to the user, same as ``user_config_dir`` | STRING |
| HIGH | tests/unit/test_pipfile_subsystem.py | 0 | [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] | STRING |
| HIGH | tests/unit/test_lockfile.py | 0 | [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] | STRING |
| HIGH | tests/unit/test_sources.py | 0 | [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] | STRING |
| HIGH | tests/unit/test_venv_locator.py | 0 | [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] | STRING |
| HIGH | tests/unit/test_settings.py | 0 | [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] | STRING |
| HIGH | tests/unit/test_pylock.py | 0 | [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] | STRING |
| HIGH | tests/integration/test_install_twists.py | 0 | [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] | STRING |
| HIGH | tests/unit/test_venv_locator.py | 0 | [pipenv] venv_in_project = true [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] [d | STRING |
| HIGH | tests/unit/test_settings.py | 0 | [pipenv] venv_in_project = true [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] [d | STRING |
| HIGH | tests/integration/test_dot_venv.py | 0 | [pipenv] venv_in_project = true [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi" [packages] [d | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pyproject.toml | 261 | # the dedicated CI step that overrides ``addopts`` to drop | COMMENT |
| LOW | pipenv/shells.py | 201 | os.environ.pop("LINES", None) | COMMENT |
| LOW | pipenv/shells.py | 221 | # sentinel must be consumed *twice* in that drain: once for the shell | COMMENT |
| LOW | pipenv/__version__.py | 1 | # ___ ( ) ___ ___ __ | COMMENT |
| LOW | pipenv/environments.py | 421 | self.PIPENV_PYUP_API_KEY = get_from_env("PYUP_API_KEY", check_for_negation=False) | COMMENT |
| LOW | pipenv/project.py | 481 | # ``requirements_location`` / ``requirements_exists`` / | COMMENT |
| LOW | pipenv/utils/funktools.py | 341 | icacls_exe, | COMMENT |
| LOW | pipenv/utils/resolver.py | 1401 | COMMENT | |
| LOW | pipenv/utils/resolver.py | 1701 | COMMENT | |
| LOW | pipenv/utils/resolver.py | 2041 | # avoid leaking secrets via process listings (GHSA-8xgg-v3jj-95m2). | COMMENT |
| LOW | pipenv/utils/resolver.py | 2081 | verbose=project.s.is_verbose(), | COMMENT |
| LOW | pipenv/utils/pip.py | 141 | base_pip_config.update({"PIP_SRC": src_dir}) | COMMENT |
| LOW | pipenv/routines/update.py | 81 | COMMENT | |
| LOW | pipenv/routines/lock.py | 281 | clear = policy.clear | COMMENT |
| LOW | pipenv/routines/lock.py | 361 | # ``PIPENV_PREFETCH_INDEX_MANIFESTS`` is set). Best-effort: any | COMMENT |
| LOW | pipenv/routines/lock.py | 401 | old_lock_data = None | COMMENT |
| LOW | pipenv/routines/install.py | 981 | search_all_sources = project.settings.get("install_search_all_sources", False) | COMMENT |
| LOW | pipenv/patched/pip/_internal/pyproject.py | 101 | package=req_name, | COMMENT |
| LOW | pipenv/patched/pip/_internal/network/session.py | 341 | self.headers["Accept-Encoding"] = "gzip, deflate" | COMMENT |
| LOW | pipenv/patched/pip/_internal/network/session.py | 361 | # order to prevent hammering the service. | COMMENT |
| LOW | pipenv/patched/pip/_internal/network/utils.py | 21 | COMMENT | |
| LOW | pipenv/patched/pip/_internal/network/utils.py | 81 | chunk_size, | COMMENT |
| LOW | pipenv/patched/pip/_internal/utils/subprocess.py | 81 | log_failed_cmd: if false, failed commands are not logged, only raised. | COMMENT |
| LOW | pipenv/patched/pip/_internal/utils/packaging.py | 81 | # with a low diversity of different arguments (at least relative the number | COMMENT |
| LOW | pipenv/patched/pip/_internal/utils/glibc.py | 41 | # manpage says, "If filename is NULL, then the returned handle is for the | COMMENT |
| LOW | pipenv/patched/pip/_internal/utils/glibc.py | 81 | # ('glibc', '2.9') | COMMENT |
| LOW | pipenv/patched/pip/_internal/utils/unpacking.py | 261 | except tarfile.LinkOutsideDestinationError: | COMMENT |
| LOW | …nv/patched/pip/_internal/models/installation_report.py | 21 | # record origin.json. | COMMENT |
| LOW | pipenv/patched/pip/_internal/cli/cmdoptions.py | 961 | This is an optparse.Option callback for the --no-cache-dir option. | COMMENT |
| LOW | pipenv/patched/pip/_internal/cli/main.py | 21 | # https://pip.pypa.io/en/stable/user_guide/#using-pip-from-your-program. | COMMENT |
| LOW | pipenv/patched/pip/_internal/operations/prepare.py | 461 | # By the time this is called, the requirement's link should have | COMMENT |
| LOW | …penv/patched/pip/_internal/operations/install/wheel.py | 281 | # Currently, projects using versioned entry points will either have | COMMENT |
| LOW | pipenv/patched/pip/_internal/req/req_install.py | 781 | assert self.req is not None | COMMENT |
| LOW | pipenv/patched/pip/_internal/locations/__init__.py | 61 | if not _USE_SYSCONFIG: | COMMENT |
| LOW | pipenv/patched/pip/_internal/commands/cache.py | 241 | # Additionally, non-alphanumeric values in the distribution are | COMMENT |
| LOW | pipenv/patched/pip/_internal/metadata/pkg_resources.py | 281 | if dist: | COMMENT |
| LOW | pipenv/patched/pip/_vendor/__init__.py | 21 | # is done to support downstream re-distributors like Debian and Fedora who | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 181 | COMMENT | |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 201 | # answer with what to do in that case. As such, we'll do the only | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 241 | # The various parse_FORMAT functions here are intended to be as lenient as | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 361 | # We use get_all() here, even for fields that aren't multiple use, | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 381 | COMMENT | |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 421 | raw_name = _EMAIL_TO_RAW_MAPPING.get(name) | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 441 | if raw_name in _STRING_FIELDS and len(value) == 1: | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 461 | # The project urls is implemented in the metadata spec as a list of | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/markers.py | 341 | # packaging.requirements.Requirement. If any additional logic is | COMMENT |
| LOW | …env/patched/pip/_vendor/packaging/licenses/__init__.py | 1 | ####################################################################################### | COMMENT |
| LOW | …env/patched/pip/_vendor/packaging/licenses/__init__.py | 21 | # INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A | COMMENT |
| LOW | pipenv/patched/pip/_vendor/truststore/_openssl.py | 21 | _HASHED_CERT_FILENAME_RE = re.compile(r"^[0-9a-fA-F]{8}\.[0-9]$") | COMMENT |
| LOW | pipenv/patched/pip/_vendor/pygments/lexer.py | 681 | #: a single state 'root'. The top of the stack is called "the current state". | COMMENT |
| LOW | pipenv/patched/pip/_vendor/distlib/compat.py | 41 | import xmlrpclib | COMMENT |
| LOW | pipenv/patched/pip/_vendor/distlib/util.py | 301 | return result | COMMENT |
| LOW | pipenv/patched/pip/_vendor/distlib/util.py | 1801 | """Normalize a python package name a la PEP 503""" | COMMENT |
| LOW | pipenv/patched/pip/_vendor/distro/distro.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | pipenv/patched/pip/_vendor/distro/distro.py | 81 | #: | COMMENT |
| LOW | pipenv/patched/pip/_vendor/requests/sessions.py | 461 | #: :class:`Request <Request>`. The dictionary values may be lists for | COMMENT |
| LOW | pipenv/patched/pip/_vendor/requests/sessions.py | 481 | #: cert file (.pem). If Tuple, ('cert', 'key') pair. | COMMENT |
| LOW | pipenv/patched/pip/_vendor/tomli/_parser.py | 21 | from collections.abc import Iterable | COMMENT |
| LOW | pipenv/patched/pip/_vendor/certifi/core.py | 21 | def where() -> str: | COMMENT |
| LOW | pipenv/patched/pip/_vendor/certifi/core.py | 61 | # it in a global variable. | COMMENT |
| 46 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pipenv/utils/resolver.py | 181 | CODE | |
| LOW | pipenv/utils/resolver.py | 1939 | CODE | |
| LOW | pipenv/utils/resolver.py | 2133 | CODE | |
| LOW | pipenv/utils/resolver.py | 304 | CODE | |
| LOW | pipenv/utils/resolver.py | 391 | CODE | |
| LOW | pipenv/utils/pip.py | 207 | CODE | |
| LOW | pipenv/utils/project.py | 61 | CODE | |
| LOW | pipenv/utils/dependencies.py | 1165 | CODE | |
| LOW | pipenv/routines/update.py | 665 | CODE | |
| LOW | pipenv/routines/audit.py | 74 | CODE | |
| LOW | pipenv/routines/audit.py | 139 | CODE | |
| LOW | pipenv/routines/check.py | 15 | CODE | |
| LOW | pipenv/routines/check.py | 262 | CODE | |
| LOW | pipenv/routines/context.py | 159 | CODE | |
| LOW | pipenv/routines/requirements.py | 11 | CODE | |
| LOW | pipenv/routines/scan.py | 16 | CODE | |
| LOW | pipenv/routines/scan.py | 341 | CODE | |
| LOW | pipenv/patched/pip/_internal/utils/subprocess.py | 59 | CODE | |
| LOW | pipenv/patched/pip/_internal/models/link.py | 227 | CODE | |
| LOW | pipenv/patched/pip/_internal/req/req_install.py | 68 | CODE | |
| LOW | pipenv/patched/pip/_internal/vcs/versioncontrol.py | 615 | CODE | |
| LOW | pipenv/patched/pip/_vendor/packaging/pylock.py | 535 | CODE | |
| LOW | pipenv/patched/pip/_vendor/msgpack/fallback.py | 226 | CODE | |
| LOW | pipenv/patched/pip/_vendor/msgpack/fallback.py | 653 | CODE | |
| LOW | pipenv/patched/pip/_vendor/distlib/util.py | 958 | CODE | |
| LOW | pipenv/patched/pip/_vendor/requests/sessions.py | 557 | CODE | |
| LOW | pipenv/patched/pip/_vendor/requests/models.py | 321 | CODE | |
| LOW | pipenv/patched/pip/_vendor/requests/models.py | 422 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/logging.py | 65 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/console.py | 163 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/console.py | 625 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/console.py | 1648 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/console.py | 1747 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/console.py | 1932 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/style.py | 127 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/traceback.py | 83 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/traceback.py | 286 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/traceback.py | 340 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/__init__.py | 77 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/__init__.py | 120 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/pretty.py | 113 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/pretty.py | 171 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/pretty.py | 273 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/columns.py | 31 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/_inspect.py | 37 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/text.py | 144 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/text.py | 329 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/live.py | 57 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/syntax.py | 276 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/syntax.py | 317 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/table.py | 189 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/table.py | 365 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/progress_bar.py | 33 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/prompt.py | 80 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/prompt.py | 97 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/prompt.py | 112 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/progress.py | 104 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/progress.py | 306 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/progress.py | 372 | CODE | |
| LOW | pipenv/patched/pip/_vendor/rich/progress.py | 397 | CODE | |
| 26 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | pipenv/utils/pylock.py | 53 | Create a PylockFile from a Pipfile.lock file. Args: lockfile_path: Path to the Pipfile.lock file | STRING |
| HIGH | pipenv/utils/pylock.py | 215 | Load a pylock.toml file from the given path. Args: path: Path to the pylock.toml file Retu | STRING |
| HIGH | pipenv/utils/pylock.py | 270 | Create a PylockFile skeleton from a pyproject.toml file. This reads the dependencies from pyproject.toml and cr | STRING |
| HIGH | pipenv/patched/pip/_vendor/distro/distro.py | 676 | The initialization method of this class gathers information from the available data sources, and stores | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/measure.py | 82 | Get a measurement for a renderable. Args: console (~rich.console.Console): Console instance. | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/console.py | 829 | Set Live instance. Used by Live context manager (no need to call directly). Args: live (Live): Live | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/console.py | 1479 | Get a Style instance by its theme name or parse a definition. Args: name (str): The name of a style | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/console.py | 1902 | Get caller frame information. Args: offset (int): the caller offset within the current frame stack. | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/style.py | 495 | Parse a style definition. Args: style_definition (str): A string containing a style. Raise | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/markup.py | 112 | Render console markup in to a Text instance. Args: markup (str): A string containing console markup. | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/highlighter.py | 21 | Highlight a str or Text instance. Args: text (Union[str, ~Text]): Text to highlight. Raise | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/progress_bar.py | 129 | Renders the pulse animation. Args: console (Console): Console instance. width (int): Wi | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/prompt.py | 228 | Process response from user, convert to prompt type. Args: value (str): String typed by user. | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/progress.py | 1244 | Track progress file reading from a binary file. Args: file (BinaryIO): A file-like object opened in | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/progress.py | 1323 | Track progress while reading from a binary file. Args: path (Union[str, PathLike[str]]): The path t | STRING |
| HIGH | pipenv/patched/pip/_vendor/rich/_win32_console.py | 96 | Retrieves the current input mode of a console's input buffer or the current output mode of a console screen buffer. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pipenv/utils/pipfile.py | 197 | # Check if it's a file | COMMENT |
| LOW | pipenv/utils/pipfile.py | 1179 | # Check if this is a new package | COMMENT |
| LOW | pipenv/utils/pipfile.py | 1203 | # Check if this is a new package | COMMENT |
| LOW | pipenv/utils/funktools.py | 93 | # Check if the file is readonly using two methods | COMMENT |
| LOW | pipenv/utils/funktools.py | 302 | # Check if the directory exists and is accessible before iterating | COMMENT |
| LOW | pipenv/utils/pylock.py | 627 | # Check if the package has a marker | COMMENT |
| LOW | pipenv/utils/shell.py | 82 | # Check if it has a trailing slash which would indicate a directory | COMMENT |
| LOW⚡ | pipenv/utils/shell.py | 374 | # Check if it's a dictionary-like object with keys | COMMENT |
| LOW⚡ | pipenv/utils/shell.py | 381 | # Check if the path exists as a file | COMMENT |
| LOW⚡ | pipenv/utils/shell.py | 388 | # Check if the string starts with any of the scheme prefixes | COMMENT |
| LOW | pipenv/utils/sources.py | 384 | # Check if the URL already exists in any source | COMMENT |
| LOW | pipenv/utils/locking.py | 200 | # Set permissions to 0644 | COMMENT |
| LOW | pipenv/utils/requirements.py | 40 | # Check if user is an environment variable or a standard SSH username | COMMENT |
| LOW | pipenv/utils/requirements.py | 46 | # Check if password is an environment variable | COMMENT |
| LOW | pipenv/utils/exceptions.py | 29 | # Check if backup_path is a valid path with an existing parent directory | COMMENT |
| LOW | pipenv/utils/virtualenv.py | 454 | # Print the results, in a beautiful blue... | COMMENT |
| LOW | pipenv/utils/dependencies.py | 222 | # Check if it's a file URI | COMMENT |
| LOW | pipenv/routines/update.py | 302 | # Check if locked version still satisfies the Pipfile specifier | COMMENT |
| LOW | pipenv/routines/update.py | 311 | # Check if locked version still satisfies the Pipfile specifier | COMMENT |
| LOW | pipenv/routines/update.py | 376 | # Check if any of the packages to upgrade are also in other categories | COMMENT |
| LOW | pipenv/routines/audit.py | 191 | # Check if pip-audit is installed | COMMENT |
| LOW | pipenv/routines/check.py | 375 | # Check if safety is installed | COMMENT |
| LOW | pipenv/routines/shell.py | 46 | # Set PIPENV_PROJECT_DIR to the project root directory. | COMMENT |
| LOW | pipenv/routines/shell.py | 110 | # Set VIRTUAL_ENV to the exact string representation | COMMENT |
| LOW | pipenv/routines/shell.py | 120 | # Set PIPENV_PROJECT_DIR to the project root directory. | COMMENT |
| LOW | pipenv/routines/scan.py | 122 | # Set stage to ci to avoid authentication prompt | COMMENT |
| LOW | pipenv/routines/scan.py | 412 | # Check if safety is installed | COMMENT |
| LOW | pipenv/routines/install.py | 612 | # Check if the file is remote or not | COMMENT |
| LOW | pipenv/patched/pip/_internal/network/download.py | 320 | # Check if the adapter is the CacheControlAdapter (i.e. caching is enabled) | COMMENT |
| LOW | pipenv/patched/pip/_internal/utils/filesystem.py | 30 | # Check if path is writable by current user. | COMMENT |
| LOW | pipenv/patched/pip/_internal/operations/check.py | 83 | # Check if it's missing | COMMENT |
| LOW | pipenv/patched/pip/_internal/operations/check.py | 92 | # Check if there's a conflict | COMMENT |
| LOW | pipenv/patched/pip/_internal/operations/prepare.py | 629 | # Check if the relevant file is already available | COMMENT |
| LOW | …patched/pip/_internal/resolution/resolvelib/factory.py | 732 | # Check if only final releases are allowed for this package | COMMENT |
| LOW | …atched/pip/_internal/resolution/resolvelib/resolver.py | 137 | # Check if there is already an installation under the same name, | COMMENT |
| LOW | pipenv/patched/pip/_internal/locations/__init__.py | 361 | # Check if this path mismatch is caused by distutils config files. Those | COMMENT |
| LOW | pipenv/patched/pip/_internal/index/package_finder.py | 1091 | # Check if only final releases are allowed for this package | COMMENT |
| LOW | pipenv/patched/pip/_internal/distributions/sdist.py | 70 | # Check if the current environment provides build dependencies | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 626 | # Check if content-type is valid or defaulted to `text/plain` and thus was | COMMENT |
| LOW | pipenv/patched/pip/_vendor/requests/models.py | 579 | # Check if file, fo, generator, iterator. | COMMENT |
| LOW | pipenv/patched/pip/_vendor/urllib3/connection.py | 736 | # Check if the target origin supports HTTP/2. | COMMENT |
| LOW | pipenv/patched/pip/_vendor/urllib3/connectionpool.py | 941 | # Check if we should retry the HTTP response. | COMMENT |
| LOW | pipenv/patched/pip/_vendor/urllib3/util/request.py | 237 | # Check if the body implements the buffer API. | COMMENT |
| LOW | pipenv/patched/pip/_vendor/urllib3/util/request.py | 241 | # Check if the body is an iterable | COMMENT |
| LOW | pipenv/patched/pip/_vendor/urllib3/util/response.py | 31 | # Check if the object is a container for another file-like object that | COMMENT |
| LOW | tests/unit/test_core.py | 86 | # Set verbosity to -1 (quiet mode via environment variable) | COMMENT |
| LOW | tests/unit/test_core.py | 141 | # Set PIPENV_ACTIVE to simulate nested pipenv invocation | COMMENT |
| LOW | tests/unit/test_pylock.py | 359 | # Write the file | COMMENT |
| LOW⚡ | tests/integration/test_upgrade.py | 92 | # Check if google-api-core is still at the old version | STRING |
| LOW | tests/integration/test_upgrade.py | 133 | # Check if requests is in develop section (as a dependency of pytest) | STRING |
| LOW | tests/integration/test_upgrade.py | 207 | # Check if requests is in develop section (it might be there as a dependency of pytest) | STRING |
| LOW | tests/integration/test_install_vcs.py | 37 | # Check if the URL in the lockfile still contains the environment variables | COMMENT |
| LOW | tests/integration/test_editable_vcs.py | 36 | # Check if either src directory exists | STRING |
| LOW | tests/integration/test_editable_vcs.py | 60 | # Check if either src directory exists | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | pipenv/shells.py | 144 | return "deactivate() { command deactivate 2>/dev/null; unset PIPENV_ACTIVE; }" | CODE |
| HIGH | pipenv/patched/pip/_internal/commands/completion.py | 20 | PIP_AUTO_COMPLETE=1 "$1" 2>/dev/null ) ) | CODE |
| HIGH | pipenv/patched/pip/_internal/commands/completion.py | 29 | PIP_AUTO_COMPLETE=1 $words[1] 2>/dev/null ) | CODE |
| HIGH | pipenv/patched/pip/_vendor/distlib/compat.py | 573 | def new_child(self): # like Django's Context.push() | CODE |
| HIGH | pipenv/patched/pip/_vendor/rich/logging.py | 172 | # Handles pythonw, where stdout/stderr are null, and we return NullFile | COMMENT |
| HIGH | pipenv/patched/pip/_vendor/rich/tree.py | 171 | style_stack.push(get_style(node.style)) | CODE |
| HIGH | pipenv/patched/pip/_vendor/rich/tree.py | 172 | guide_style_stack.push(get_style(node.guide_style)) | CODE |
| HIGH | pipenv/patched/pip/_vendor/rich/highlighter.py | 117 | r"\b(?P<bool_true>true)\b|\b(?P<bool_false>false)\b|\b(?P<null>null)\b", | CODE |
| HIGH⚡ | pipenv/resolver/schema.py | 445 | a meaningless null). | STRING |
| HIGH | tests/integration/test_run.py | 35 | multicommand = "bash -c \"cd docs && make html\"" | CODE |
| HIGH | tests/integration/test_run.py | 60 | assert script.args == ["-c", "cd docs && make html"] | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | pipenv/utils/prefetch.py | 126 | # Step 1: build the (name, version, expected_hashes) target list | COMMENT |
| LOW⚡ | pipenv/utils/prefetch.py | 155 | # Step 2: get the TARGET Python's wheel tags. Host and target may | COMMENT |
| LOW⚡ | pipenv/utils/prefetch.py | 169 | # Step 3: use a requests-compatible session for PEP 691 metadata | COMMENT |
| LOW | pipenv/utils/prefetch.py | 201 | # Step 4: pick the right wheel per target. Filter by target | COMMENT |
| LOW | pipenv/utils/prefetch.py | 216 | # Step 5: parallel download + hash verify. | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_sdist.py | 204 | # Step 1: download | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_sdist.py | 283 | # Step 2: extract | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_sdist.py | 424 | # Step 3: resolve the build backend | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_sdist.py | 469 | # Step 4: drive the PEP 517 hook | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 434 | # Step 6: rejected set, keyed on ``(name, version, filename)`` | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 442 | # Step 7: filter. Two-pass prerelease policy mirrors pip's | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 784 | # Step 1: collect the ``RequirementInformation`` rows for this | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 791 | # Step 2: source-flag — ``source == "pipfile"`` is our analog | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 798 | # Step 3: walk every ``SpecifierSet`` attached to any of the | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 848 | # Step 6: identifier name for the lexicographic tie-break. Our | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 979 | # Step 3: prefer the live backtrack causes; fall back to | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 403 | # Step 5: dedup on ``(name, version, filename)`` — same wheel | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 477 | # Step 8: sort by ``(Version, is_wheel)`` descending. Highest | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 499 | # Step 9: propagate the identifier's extras onto each candidate. | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 811 | # Step 4: derive pinned / upper-bounded / unfree from the | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 825 | # Step 5: backtrack-cause count for this identifier. Pip | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 941 | # Step 1: walk backtrack_causes, track per-identifier conflict | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 967 | # Step 2: collect the live backtrack causes that are also | COMMENT |
| LOW | pipenv/resolver/fetcher.py | 213 | # Step 3: dispatch the misses on the executor. `max_workers` | COMMENT |
| LOW⚡ | tests/integration/test_upgrade.py | 64 | # Step 1: Install initial dependency version | STRING |
| LOW⚡ | tests/integration/test_upgrade.py | 75 | # Step 2: Update Pipfile to allow any version of google-api-core | STRING |
| LOW⚡ | tests/integration/test_upgrade.py | 84 | # Step 3: Update protobuf to an incompatible version | STRING |
| LOW⚡ | tests/integration/test_upgrade.py | 88 | # Step 4: Check the lockfile for incompatible dependencies | STRING |
| LOW⚡ | tests/integration/test_upgrade.py | 101 | # Step 5: Run pipenv lock to check for dependency resolution errors | STRING |
| LOW⚡ | tests/integration/test_dot_venv.py | 188 | # Step 1: create the pipenv-managed virtualenv in WORKON_HOME. | COMMENT |
| LOW⚡ | tests/integration/test_dot_venv.py | 197 | # Step 2: user independently creates a .venv dir in the project root. | COMMENT |
| LOW⚡ | tests/integration/test_dot_venv.py | 201 | # Step 3: `--venv` should still report the pipenv-managed venv. | COMMENT |
| LOW⚡ | tests/integration/test_dot_venv.py | 209 | # Step 4: `--rm` must remove the pipenv-managed venv, not .venv. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | pipenv/utils/prefetch.py | 126 | # Step 1: build the (name, version, expected_hashes) target list | COMMENT |
| LOW⚡ | pipenv/utils/prefetch.py | 155 | # Step 2: get the TARGET Python's wheel tags. Host and target may | COMMENT |
| LOW⚡ | pipenv/utils/prefetch.py | 169 | # Step 3: use a requests-compatible session for PEP 691 metadata | COMMENT |
| LOW | pipenv/utils/prefetch.py | 201 | # Step 4: pick the right wheel per target. Filter by target | COMMENT |
| LOW | pipenv/utils/prefetch.py | 216 | # Step 5: parallel download + hash verify. | COMMENT |
| LOW | pipenv/patched/pip/_internal/utils/unpacking.py | 330 | # NOTE: This function can be removed once pip requires CPython ≥ 3.12. | COMMENT |
| LOW | …/patched/pip/_vendor/cachecontrol/caches/file_cache.py | 59 | # NOTE: This method should not change as some may depend on it. | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_sdist.py | 204 | # Step 1: download | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_sdist.py | 283 | # Step 2: extract | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_sdist.py | 424 | # Step 3: resolve the build backend | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_sdist.py | 469 | # Step 4: drive the PEP 517 hook | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 434 | # Step 6: rejected set, keyed on ``(name, version, filename)`` | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 442 | # Step 7: filter. Two-pass prerelease policy mirrors pip's | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 784 | # Step 1: collect the ``RequirementInformation`` rows for this | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 791 | # Step 2: source-flag — ``source == "pipfile"`` is our analog | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 798 | # Step 3: walk every ``SpecifierSet`` attached to any of the | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 848 | # Step 6: identifier name for the lexicographic tie-break. Our | COMMENT |
| LOW⚡ | pipenv/resolver/pure_python_provider.py | 979 | # Step 3: prefer the live backtrack causes; fall back to | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 403 | # Step 5: dedup on ``(name, version, filename)`` — same wheel | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 477 | # Step 8: sort by ``(Version, is_wheel)`` descending. Highest | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 499 | # Step 9: propagate the identifier's extras onto each candidate. | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 811 | # Step 4: derive pinned / upper-bounded / unfree from the | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 825 | # Step 5: backtrack-cause count for this identifier. Pip | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 941 | # Step 1: walk backtrack_causes, track per-identifier conflict | COMMENT |
| LOW | pipenv/resolver/pure_python_provider.py | 967 | # Step 2: collect the live backtrack causes that are also | COMMENT |
| LOW | pipenv/resolver/fetcher.py | 213 | # Step 3: dispatch the misses on the executor. `max_workers` | COMMENT |
| LOW⚡ | tests/integration/test_upgrade.py | 64 | # Step 1: Install initial dependency version | STRING |
| LOW⚡ | tests/integration/test_upgrade.py | 75 | # Step 2: Update Pipfile to allow any version of google-api-core | STRING |
| LOW⚡ | tests/integration/test_upgrade.py | 84 | # Step 3: Update protobuf to an incompatible version | STRING |
| LOW⚡ | tests/integration/test_upgrade.py | 88 | # Step 4: Check the lockfile for incompatible dependencies | STRING |
| LOW⚡ | tests/integration/test_upgrade.py | 101 | # Step 5: Run pipenv lock to check for dependency resolution errors | STRING |
| LOW⚡ | tests/integration/test_dot_venv.py | 188 | # Step 1: create the pipenv-managed virtualenv in WORKON_HOME. | COMMENT |
| LOW⚡ | tests/integration/test_dot_venv.py | 197 | # Step 2: user independently creates a .venv dir in the project root. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pipenv/shells.py | 120 | # For now, return empty as nu has different paradigm | COMMENT |
| MEDIUM | pipenv/utils/markers.py | 568 | # Essentially we will iterate over each side of the parsed marker if either one is | COMMENT |
| LOW | pipenv/patched/pip/_internal/network/auth.py | 517 | # We are not able to prompt the user so simply return the response | COMMENT |
| MEDIUM | pipenv/patched/pip/_internal/utils/misc.py | 74 | # CI traffic to PyPI. Thus, it is okay if the list is not comprehensive. | COMMENT |
| LOW | pipenv/patched/pip/_internal/cli/parser.py | 170 | # If its not a list, we should abort and just return the help text | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 214 | # is unparsable, and we can just add the whole thing to our | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 410 | # This is already a string, so just add it. | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/metadata.py | 439 | # what we should parse it as, and we have to just add it to our list | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/specifiers.py | 995 | # version. If it's not we can short circuit and just return False now | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/specifiers.py | 1020 | # version. If it's not we can short circuit and just return False now | COMMENT |
| LOW | pipenv/patched/pip/_vendor/packaging/specifiers.py | 1424 | # then we'll just return None since we don't know if this should have | COMMENT |
| LOW | pipenv/patched/pip/_vendor/distlib/compat.py | 246 | # what file suffixes are executable, so just pass on cmd as-is. | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/requests/sessions.py | 757 | # Set defaults that the hooks can utilize to ensure they always have | STRING |
| LOW | pipenv/patched/pip/_vendor/requests/models.py | 723 | # method. To prevent iterating over None, simply use an empty list | COMMENT |
| LOW | pipenv/patched/pip/_vendor/requests/utils.py | 491 | # a UNC path, then just return the value without quotes. Using the | STRING |
| LOW | pipenv/patched/pip/_vendor/certifi/core.py | 70 | # file, it will just return the file system location and the | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/urllib3/exceptions.py | 251 | """Response needs to be chunked in order to read it as chunks.""" | STRING |
| LOW | pipenv/patched/pip/_vendor/pkg_resources/__init__.py | 2 | # For now we'd simply use implicit Any/Unknown which would add redundant annotations | COMMENT |
| MEDIUM | pipenv/resolver/pep691.py | 494 | # final path segment if (somehow) the anchor had no text — robust | COMMENT |
| MEDIUM⚡ | tests/unit/test_core.py | 208 | # Test nushell - returns empty for now (different paradigm) | COMMENT |
| MEDIUM | tests/unit/test_resolver_protocol_smoke.py | 107 | # even if the harness's PYTHONPATH does not already include it. | COMMENT |
| MEDIUM | tests/unit/test_pure_python_backend.py | 1842 | # robust. Marker strings come through | COMMENT |
| MEDIUM | tests/unit/test_pure_python_provider_smoke.py | 311 | # the test is robust to ordering changes in ``.causes``. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | pipenv/patched/pip/_internal/cli/req_command.py | 278 | return pipenv.patched.pip._internal.resolution.resolvelib.resolver.Resolver( | CODE |
| CRITICAL | pipenv/patched/pip/_internal/cli/req_command.py | 294 | return pipenv.patched.pip._internal.resolution.legacy.resolver.Resolver( | CODE |
| CRITICAL | pipenv/patched/pip/_internal/commands/debug.py | 188 | show_value("pipenv.patched.pip._vendor.certifi.where()", where()) | CODE |
| CRITICAL | pipenv/patched/pip/_vendor/pygments/sphinxext.py | 87 | self.state.document.settings.record_dependencies.add(fn) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pipenv/environments.py | 440 | # T_F.5 in this PR is scaffolding only (see the maintainer | COMMENT |
| MEDIUM | pipenv/cli/options.py | 961 | # ``--resolver NAME`` flag (T_F.5 scaffolding) when both are | COMMENT |
| MEDIUM | tests/unit/test_pure_python_provider.py | 1932 | # malformed input. The branch is documented defensive scaffolding | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pipenv/patched/pip/_vendor/packaging/markers.py | 342 | # added here, make sure to mirror/adapt Requirement. | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/distlib/util.py | 1551 | # you can use the following handler class, which does not allow HTTP traffic. | STRING |
| LOW | pipenv/patched/pip/_vendor/urllib3/response.py | 1146 | # TODO make sure to initially read enough data to get past the headers | COMMENT |
| MEDIUM | pipenv/patched/pip/_vendor/urllib3/util/wait.py | 12 | # There are two types of APIs you can use for waiting on sockets: the fancy | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pipenv/routines/scan.py | 131 | global_options.append("--key=dummy-key") | CODE |
| LOW | pipenv/patched/pip/_internal/req/constructors.py | 72 | return get_requirement("placeholder" + extras.lower()).extras | CODE |
| LOW | pipenv/patched/pip/_vendor/rich/text.py | 1340 | """\nLorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolo | STRING |
| LOW | pipenv/patched/pip/_vendor/rich/text.py | 1340 | """\nLorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolo | STRING |
| LOW | pipenv/patched/pip/_vendor/rich/__main__.py | 71 | lorem = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Quisque in metus sed sapien ultricies pretium a at | CODE |
| LOW | pipenv/patched/pip/_vendor/rich/__main__.py | 71 | lorem = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Quisque in metus sed sapien ultricies pretium a at | CODE |