Portable, lightweight, self-contained virtual machine.
This report presents the forensic synthetic code analysis of smol-machines/smolvm, a Rust project with 5,817 GitHub stars. SynthScan v2.0 examined 216,071 lines of code across 425 source files, recording 1170 pattern matches distributed across 14 syntactic categories. The overall adjusted score of 7.9 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1170 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Makefile.toml | 1 | # cargo-make configuration for smolvm | COMMENT |
| LOW | build.rs | 1 | //! Build script for smolvm. | COMMENT |
| LOW | build.rs | 21 | //! cp /opt/homebrew/opt/libkrun/lib/libkrun.dylib lib/ | COMMENT |
| LOW | demo/bench/run-smolvm.sh | 1 | #!/bin/bash | COMMENT |
| LOW | packaging/nfpm.yaml | 1 | # nfpm config for the official smolvm .deb / .rpm packages. | COMMENT |
| LOW | bench/bench.sh | 1 | #!/bin/bash | COMMENT |
| LOW | bench/matrix.sh | 1 | #!/bin/bash | COMMENT |
| LOW | crates/smolvm-oci-layer/src/lib.rs | 1 | //! Pure-Rust extraction of a single OCI image layer into an overlayfs lowerdir. | COMMENT |
| LOW | crates/smolvm-oci-layer/src/lib.rs | 61 | /// branch, which performs *destructive* operations (`remove_file`, | COMMENT |
| LOW | crates/smolvm-oci-layer/src/lib.rs | 221 | /// Extract one OCI layer blob into `dest`, applying OCI whiteout semantics so the | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 1 | //! Protocol types for smolvm host-guest communication. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 21 | /// One S3-compatible bucket to mount inside the workload container. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 101 | pub const LAYER_CHUNK_SIZE: usize = 16 * 1024 * 1024; | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 121 | /// | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 141 | /// On the read path: enforced by the host's `read_file` loop — | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 161 | /// | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 181 | /// Docker socket bridge: the guest listens on this vsock port and proxies | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 221 | /// `include/linux/fsnotify_backend.h`. Shared by the host watcher (which maps a | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 261 | /// Ping to check if agent is alive. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 341 | }, | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 361 | /// whiteouts and opaque markers exactly as the runtime would, so it is done | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 381 | VmExec { | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 401 | /// Data to pipe to the command's stdin. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 421 | #[serde(default, skip_serializing_if = "Option::is_none")] | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 441 | /// container ID. Only meaningful when `persistent_overlay_id` is set. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 461 | stdin_data: Option<String>, | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 481 | /// Resize the PTY window (for TTY mode). | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 501 | /// File contents. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 521 | /// at `path`. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 561 | COMMENT | |
| LOW | crates/smolvm-protocol/src/lib.rs | 581 | /// Allocate a PTY for the init process. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 641 | /// exit: bundle, cgroup, PTY. Exit status was already streamed by | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 801 | }, | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 821 | /// base64) fits inside [`MAX_FRAME_SIZE`] with JSON overhead to | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 881 | pub const DELETE_FAILED: &str = "DELETE_FAILED"; | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 941 | } | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 981 | pub os: String, | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 1021 | /// Used size in bytes. | COMMENT |
| LOW | crates/smolvm-protocol/src/lib.rs | 1161 | message: String, | COMMENT |
| LOW | crates/smolvm-protocol/src/image_ref.rs | 1 | //! Image reference canonicalization. | COMMENT |
| LOW | crates/smolvm-protocol/src/image_ref.rs | 21 | /// present it takes precedence and any tag is dropped. | COMMENT |
| LOW | crates/smolvm-protocol/src/image_ref.rs | 101 | } | COMMENT |
| LOW | crates/smolvm-protocol/src/publish_socket.rs | 1 | //! Shared spec for user-published host↔guest Unix-socket bridges. | COMMENT |
| LOW | crates/smolvm-protocol/src/publish_socket.rs | 61 | /// The host-side path is intentionally absent — libkrun owns the host end, so | COMMENT |
| LOW | crates/smolvm-protocol/src/retry.rs | 1 | //! Retry utilities for transient failure recovery. | COMMENT |
| LOW | crates/smolvm-protocol/src/retry.rs | 21 | /// Default maximum retry attempts for general operations. | COMMENT |
| LOW | crates/smolvm-protocol/src/retry.rs | 41 | /// failing within a reasonable time (~45 seconds worst case). | COMMENT |
| LOW | crates/smolvm-protocol/src/secrets.rs | 1 | //! Secret reference types shared across smolvm surfaces. | COMMENT |
| LOW | crates/smolvm-protocol/src/secrets.rs | 41 | /// A reference to a secret. Exactly one of the two sources must be | COMMENT |
| LOW | crates/smolvm-protocol/src/guest_env.rs | 1 | //! Shared environment-variable contract between the host launcher and guest agent. | COMMENT |
| LOW | crates/smolvm-protocol/src/guest_env.rs | 21 | /// Absent means no GPU was requested. | COMMENT |
| LOW | crates/smolvm-protocol/src/guest_env.rs | 41 | /// pool was explicitly declared; ordinary CUDA machines are unaffected. | COMMENT |
| LOW | crates/smolvm-protocol/src/guest_env.rs | 61 | COMMENT | |
| LOW | crates/smolvm-protocol/src/guest_env.rs | 101 | /// Guest IPv6 prefix length. | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 1 | //! Drop-in `libcudart.so.11.0` for smolvm guests: the CUDA **Runtime API**, | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 221 | client: Client<Stream>, | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 241 | dev_allocs: std::collections::BTreeMap<u64, (u64, i32)>, | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 261 | /// the same device primary context, so their raw module / function / device | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 1061 | ) -> Result<T, c_int> { | COMMENT |
| LOW | crates/smolvm-cudart-shim/src/lib.rs | 3541 | pub struct CudaIpcHandle { | COMMENT |
| 762 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Makefile.toml | 16 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 18 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 78 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 80 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 102 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 104 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 169 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 171 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 183 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 185 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 208 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 210 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 249 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 251 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 263 | # ============================================================================= | COMMENT |
| MEDIUM | Makefile.toml | 265 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | crates/smolvm-network/src/netns_tap.rs | 11 | //! ┌─────────┐ ethernet frames ┌──────────────┐ unixstream ┌────────┐ | COMMENT |
| MEDIUM⚡ | crates/smolvm-network/src/netns_tap.rs | 12 | //! │ tapX │◀───────────────────▶│ netns_tap │◀───────────▶│ libkrun │ | COMMENT |
| MEDIUM⚡ | crates/smolvm-network/src/netns_tap.rs | 15 | //! └─────────┘ └──────────────┘ └────────┘ | COMMENT |
| MEDIUM | crates/smolvm-shim/src/engine.rs | 429 | /// stdin fifo (nonblocking read) ──────────────────────────► │ | COMMENT |
| MEDIUM | tests/test_gpu.sh | 38 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 40 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_gpu.sh | 71 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_gpu.sh | 73 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_gpu.sh | 80 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_gpu.sh | 82 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 187 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 189 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 258 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_gpu.sh | 260 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_smolfile.sh | 28 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_smolfile.sh | 30 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_smolfile.sh | 39 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_smolfile.sh | 41 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 157 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 159 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 319 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 321 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 497 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 499 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 557 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 559 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 651 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 653 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 899 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 901 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 928 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 930 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1006 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1008 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1063 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1065 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1250 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1252 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1350 | # ============================================================================= | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 1352 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 67 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 69 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 83 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 85 | # ============================================================================= | COMMENT |
| 167 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/common.sh | 54 | # Initialize SMOLVM variable | COMMENT |
| MEDIUM | tests/test_gpu.sh | 155 | # Create a named machine with --gpu, stop+start it, verify DRI still present. | COMMENT |
| MEDIUM | tests/test_smolfile.sh | 474 | # Create a Smolfile in the temp dir (simulating CWD) | COMMENT |
| MEDIUM⚡ | tests/test_api.sh | 213 | # Create a fresh machine | COMMENT |
| MEDIUM⚡ | tests/test_api.sh | 578 | # Create a machine (never start it) | COMMENT |
| MEDIUM | tests/test_machine_bare.sh | 255 | # Create the named VM first | COMMENT |
| MEDIUM⚡ | tests/test_pack.sh | 635 | # Create a named VM with network, install a package, then stop it | COMMENT |
| MEDIUM | tests/test_pack.sh | 521 | # Create a temp dir with a single .smolmachine file | COMMENT |
| MEDIUM | tests/test_db.sh | 29 | # Create a named VM with specific configuration | COMMENT |
| MEDIUM | tests/test_db.sh | 58 | # Create a named VM | COMMENT |
| MEDIUM | tests/test_db.sh | 103 | # Create a VM | COMMENT |
| MEDIUM | tests/test_volumes.sh | 29 | # Create a host directory with a test file | COMMENT |
| MEDIUM | src/api/mod.rs | 15 | //! # Create a machine | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | demo/bench/run-smolvm.sh | 43 | # stage shims under both suffixed + unsuffixed names (harness/loader use both) | COMMENT |
| MEDIUM | crates/smolvm-cuda/src/host.rs | 793 | /// clone can RE-CAPTURE the same sequence in its own context — the robust | COMMENT |
| MEDIUM | crates/smolvm-pack/src/extract.rs | 4368 | // a few. Assert well under a tenth to stay robust across filesystems. | COMMENT |
| MEDIUM | deploy/k3s/install-smolvm-k3s.sh | 5 | # `runtimeClassName: smolvm` boot as per-workload microVMs. Version-robust: it | COMMENT |
| MEDIUM⚡ | tests/test_secrets.sh | 76 | # `env` (busybox) prints the whole environment — robust across rootfs builds. | COMMENT |
| MEDIUM⚡ | tests/test_harness.sh | 11 | # under test failing rather than as a harness fault. | COMMENT |
| MEDIUM⚡ | tests/test_harness.sh | 14 | # the harness does in-process; this file therefore carries its own small runner | COMMENT |
| MEDIUM⚡ | tests/test_harness.sh | 17 | # Pure harness test: no smolvm binary, no VM, no network. | COMMENT |
| MEDIUM⚡ | .github/workflows/ci.yml | 312 | # the WHP QA harness (unit tests can additionally be run under Wine with | COMMENT |
| MEDIUM | src/agent/manager.rs | 2782 | // Combined with agent-side sync(), this provides robust data integrity | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Makefile.toml | 4 | # Usage: | COMMENT |
| LOW | tests/test_gpu.sh | 13 | # Usage: | COMMENT |
| LOW | tests/test_smolfile.sh | 8 | # Usage: | COMMENT |
| LOW | tests/test_secrets.sh | 15 | # Usage: | COMMENT |
| LOW | tests/test_cli.sh | 8 | # Usage: | COMMENT |
| LOW | tests/test_api.sh | 7 | # Usage: | COMMENT |
| LOW⚡ | tests/test_pack_registry.sh | 12 | # Usage: | COMMENT |
| LOW | tests/test_resize.sh | 6 | # Usage: | COMMENT |
| LOW | tests/run_tests.sh | 5 | # Usage: | COMMENT |
| LOW | tests/test_pack.sh | 8 | # Usage: | COMMENT |
| LOW | tests/test_scale.sh | 8 | # Usage: | COMMENT |
| LOW | scripts/build-dist.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/install.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/test-registry.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/refresh-cudart-fixtures.sh | 43 | # Usage: | COMMENT |
| LOW | scripts/install-local.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/install-k8s-runtime.sh | 11 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1083 | // Step 1: attach a preemptive bearer to the initial send only. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1092 | // Step 2: send. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1169 | // Step 1: attach preemptive bearer (optimization — wrong scope → extra 401, not corruption). | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1176 | // Step 2: send with a fresh body from the factory. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1197 | // Step 3: token for the scope this request actually needs, fresh body. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1204 | // Step 4: force-evict stale cache entry, genuinely fresh token, final body. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 263 | // Step 1: POST to initiate upload. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 293 | // Step 2: PUT the blob data with digest. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 384 | // Step 1: POST to initiate upload (empty body — always replayable). | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 415 | // Step 2: PUT with streaming body via factory. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 522 | // Step 1: POST to open an upload session (empty body — replayable). | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 538 | // Step 2: PATCH contiguous chunks. The registry hands back a fresh upload | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 577 | // Step 3: PUT (empty body) to close the session, carrying the digest. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 1126 | // Step 5: force-evict and fetch a genuinely fresh token → second retry. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1083 | // Step 1: attach a preemptive bearer to the initial send only. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1092 | // Step 2: send. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1169 | // Step 1: attach preemptive bearer (optimization — wrong scope → extra 401, not corruption). | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1176 | // Step 2: send with a fresh body from the factory. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1197 | // Step 3: token for the scope this request actually needs, fresh body. | COMMENT |
| LOW⚡ | crates/smolvm-registry/src/client.rs | 1204 | // Step 4: force-evict stale cache entry, genuinely fresh token, final body. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 263 | // Step 1: POST to initiate upload. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 293 | // Step 2: PUT the blob data with digest. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 384 | // Step 1: POST to initiate upload (empty body — always replayable). | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 415 | // Step 2: PUT with streaming body via factory. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 522 | // Step 1: POST to open an upload session (empty body — replayable). | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 538 | // Step 2: PATCH contiguous chunks. The registry hands back a fresh upload | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 577 | // Step 3: PUT (empty body) to close the session, carrying the digest. | COMMENT |
| LOW | crates/smolvm-registry/src/client.rs | 1126 | // Step 5: force-evict and fetch a genuinely fresh token → second retry. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/common.sh | 420 | # Check if any smolvm processes are running that might interfere with tests | COMMENT |
| LOW | tests/test_pack.sh | 1440 | # Check if docker is available | COMMENT |
| LOW | tests/test_volumes.sh | 45 | # Read the file via machine exec (VmExec) — this exercises boot-time mount | COMMENT |
| LOW | tests/bench_vm_startup.sh | 41 | # Check if smolvm is available | COMMENT |
| LOW | scripts/build-dist.sh | 305 | # Set CODESIGN_IDENTITY to a Developer ID for distribution signing. | COMMENT |
| LOW | scripts/smolvm-wrapper.sh | 35 | # Check if binary exists | COMMENT |
| LOW | scripts/smolvm-wrapper.sh | 42 | # Check if libraries exist | COMMENT |
| LOW | scripts/install.sh | 532 | # Check if already in PATH | COMMENT |
| LOW | scripts/install.sh | 538 | # Check if already in profile | COMMENT |
| LOW | scripts/rebuild-agent.sh | 47 | # Check if rootfs directory exists | COMMENT |
| LOW | scripts/install-local.sh | 194 | # Check if it's a tarball or directory | COMMENT |
| LOW | scripts/smol-wrapper.sh | 39 | # Check if binary exists | COMMENT |
| LOW | scripts/smol-wrapper.sh | 46 | # Check if libraries exist | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/python/tests/test_client.py | 10 | def test_digest_is_stable_and_content_sensitive(self): | CODE |
| LOW | sdks/python/tests/test_client.py | 36 | def test_no_argument_client_reads_clone_assignment_and_authenticates(self): | CODE |
| LOW | sdks/python/tests/test_client.py | 67 | def test_environment_overrides_assignment_after_clone_release(self): | CODE |
| LOW | sdks/python/tests/test_client.py | 89 | def test_incomplete_or_inconsistent_assignment_fails_closed(self): | CODE |
| LOW | sdks/python/tests/test_client.py | 110 | def test_device_token_is_encoded_without_exposing_a_descriptor(self): | CODE |
| LOW | sdks/python/tests/test_client.py | 122 | def test_device_publication_retries_one_ambiguous_transport_failure(self): | CODE |
| LOW | sdks/python/tests/test_device_handoff.py | 62 | def test_active_socket_is_never_unlinked(self): | CODE |
| LOW | sdks/python/tests/test_device_handoff.py | 76 | def test_failed_server_start_does_not_unlink_an_active_socket(self): | CODE |
| LOW | sdks/python/tests/test_device_handoff.py | 112 | def test_manifest_range_must_match_shape_and_dtype(self): | CODE |
| LOW | sdks/python/tests/test_device_handoff.py | 136 | def test_partial_client_is_timed_out_without_blocking_health(self): | CODE |
| LOW | sdks/python/tests/test_device_handoff.py | 156 | def test_framework_tensors_form_a_versioned_publication_manifest(self): | CODE |
| LOW | sdks/python/tests/test_device_handoff.py | 210 | def test_descriptor_is_retained_until_successful_unload(self): | CODE |
| LOW | sdks/python/tests/test_device_handoff.py | 271 | def test_failed_unload_keeps_the_mapping_for_a_safe_retry(self): | CODE |
| LOW | sdks/python/tests/test_device_handoff.py | 316 | def test_owner_close_retry_does_not_unload_framework_twice(self): | CODE |
| LOW | sdks/python/src/smolvm_rollout/torch_handoff.py | 203 | def import_torch_device_adapter(bundle: DeviceAdapterBundle) -> TorchDeviceAdapter: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/python/src/smolvm_rollout/device_handoff.py | 3 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/torch_handoff.py | 3 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/client.py | 3 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 3 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 3 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 3 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 4 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 4 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 4 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 4 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 10 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 10 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/bench.sh | 93 | except Exception: return None | CODE |
| LOW | sdks/python/src/smolvm_rollout/device_handoff.py | 320 | except Exception as error: | CODE |
| LOW | sdks/python/src/smolvm_rollout/device_handoff.py | 400 | except Exception as error: # The error is returned to the local controller. | CODE |
| LOW | sdks/python/src/smolvm_rollout/device_handoff.py | 413 | except Exception: | CODE |
| LOW | sdks/python/src/smolvm_rollout/torch_handoff.py | 122 | except Exception: | CODE |
| LOW | sdks/python/src/smolvm_rollout/torch_handoff.py | 127 | except Exception: | CODE |
| LOW | sdks/python/src/smolvm_rollout/torch_handoff.py | 174 | except Exception: | CODE |
| LOW | tests/test_network.sh | 705 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bench/segmented_graph_throughput.py | 58 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/device_handoff.py | 277 | CODE | |
| LOW | sdks/python/src/smolvm_rollout/device_handoff.py | 349 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/check-secrets-guards.sh | 3 | # Static guardrails for host-side secret references. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/python/src/smolvm_rollout/__init__.py | 12 | __all__ = [ | CODE |