AI Slop Code RIsk Monitor

tox-dev/tox

Command line driven CI frontend and development task automation tool.

31.9 High pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for tox-dev/tox, a Python project with 3,943 GitHub stars. SynthScan examined 44,510 lines of code across 298 source files, recording 1444 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 31.9 (High pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

31.9
Adjusted Signal
31.9
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
3.9K
Stars
Python
Language
44.5K
Lines of Code
298
Files
1.4K
Pattern Hits
2026-10-12
Scan Date
0.08
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 65.4/100 · HIGH

Can maintainers explain intent, assumptions, and trade-offs? 1078 finding(s).

Hallucinated Dependency & Supply Chain Risk 29.7/100 · MEDIUM

Are imports declared and package/API names verified? 273 finding(s).

Agent Over-Engineering Ratio 67.9/100 · HIGH

Are wrappers, guards, and repeated structures necessary? 1094 finding(s).

PR Review Velocity Impact 82.9/100 · CRITICAL

Which changes need focused human review? 1444 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 24MEDIUM 4LOW 1416

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1444 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers1001 hits · 852 pts
SeverityFileLineSnippetContext
LOWtests/test_version.py21def test_version_without_plugin(tox_project: ToxProjectCreator) -> None:CODE
LOWtests/test_version.py56def test_version_with_inline_plugin(tox_project: ToxProjectCreator) -> None:CODE
LOWtests/test_version.py69def test_version_with_inline_plugin_append_version_info(tox_project: ToxProjectCreator) -> None:CODE
LOWtests/conftest.py38def _strip_broken_namespace_pth_files() -> None:CODE
LOWtests/conftest.py162def pytest_collection_modifyitems(items: list[pytest.Item]) -> None:CODE
LOWtests/test_provision.py142def test_provision_requires_nok(tox_project: ToxProjectCreator) -> None:CODE
LOWtests/test_provision.py154def test_provision_requires_skips_false_markers(tox_project: ToxProjectCreator) -> None:CODE
LOWtests/test_provision.py168def test_provision_requires_checks_true_markers(tox_project: ToxProjectCreator) -> None:STRING
LOWtests/test_provision.py185def test_provision_before_loading_env_list(STRING
LOWtests/test_provision.py234def test_provision_requires_ok(tox_project: ToxProjectCreator, tmp_path: Path) -> None:STRING
LOWtests/test_provision.py267def test_provision_platform_check(tox_project: ToxProjectCreator) -> None:STRING
LOWtests/test_provision.py277def test_provision_invalid_platform_regex(tox_project: ToxProjectCreator) -> None:STRING
LOWtests/test_provision.py290def test_provision_no_recreate(tox_project: ToxProjectCreator) -> None:STRING
LOWtests/test_provision.py297def test_provision_no_recreate_json(tox_project: ToxProjectCreator) -> None:STRING
LOWtests/test_provision.py315def test_provision_plugin_runner(tox_project: ToxProjectCreator, tmp_path: Path, plugin_testenv: str) -> None:STRING
LOWtests/test_provision.py336def test_provision_plugin_runner_in_provision(tox_project: ToxProjectCreator, tmp_path: Path) -> None:CODE
LOWtests/test_provision.py355def test_provision_acquires_file_lock(tox_project: ToxProjectCreator) -> None:CODE
LOWtests/test_provision.py372def test_provision_unrecognized_args_no_provision(tox_project: ToxProjectCreator) -> None:CODE
LOWtests/test_provision.py387def test_provision_plugin_cli_options(tox_project: ToxProjectCreator, tmp_path: Path) -> None:STRING
LOWtests/test_provision.py408def test_provision_default_arguments_exists(tox_project: ToxProjectCreator, subcommand: str) -> None:STRING
LOWtests/test_provision.py454def test_provision_colored_passed_to_subprocess(tox_project: ToxProjectCreator) -> None:STRING
LOWtests/test_provision.py474def test_provision_no_recreate_json_pinned_tox(tox_project: ToxProjectCreator) -> None:STRING
LOWtests/test_run.py26def test_re_raises_on_unexpected_exit(mocker: MockerFixture) -> None:CODE
LOWtests/test_run.py85def test_custom_root_dir_and_work_dir(tox_project: ToxProjectCreator, tmp_path: Path) -> None:CODE
LOWtests/journal/test_main_journal.py23def test_journal_enabled_default(base_info: dict[str, Any]) -> None:CODE
LOWtests/journal/test_main_journal.py29def test_journal_disabled_default() -> None:CODE
LOWtests/journal/test_main_journal.py46def test_env_journal_disabled() -> None:CODE
LOWtests/util/test_file_view.py12def test_create_session_view_copies(tmp_path: Path) -> None:CODE
LOWtests/util/test_file_view.py20def test_create_session_view_no_common_path(tmp_path: Path, monkeypatch: MonkeyPatch) -> None:CODE
LOWtests/util/test_cpu.py17def test_auto_detect_cpus_returns_one_when_cpu_count_throws(mocker: MockerFixture) -> None:CODE
LOW⚡tests/util/test_redact.py18def test_redact_value_matches_secret_keywords(name: str, expected: str) -> None:CODE
LOW⚡tests/util/test_redact.py22def test_redact_value_preserves_length() -> None:CODE
LOW⚡tests/util/test_redact.py26def test_redact_argv_masks_inline_value_for_secret_flag() -> None:CODE
LOW⚡tests/util/test_redact.py31def test_redact_argv_masks_short_flag() -> None:CODE
LOW⚡tests/util/test_redact.py36def test_redact_argv_leaves_innocuous_flags_alone() -> None:CODE
LOW⚡tests/util/test_redact.py41def test_redact_argv_does_not_mask_space_separated_value() -> None:CODE
LOW⚡tests/util/test_redact.py48def test_redact_argv_returns_new_list() -> None:CODE
LOWtests/util/test_ci.py61def test_is_ci_not_teamcity_local(monkeypatch: pytest.MonkeyPatch) -> None:CODE
LOWtests/util/test_ci.py71def test_is_ci_generic_flag_opted_out(value: str, monkeypatch: pytest.MonkeyPatch) -> None:CODE
LOWtests/util/test_venv_redirect.py27def test_record_creates_redirect(root: Path) -> None:CODE
LOWtests/util/test_venv_redirect.py33def test_record_env_outside_root_is_absolute(root: Path, tmp_path_factory: pytest.TempPathFactory) -> None:CODE
LOWtests/util/test_venv_redirect.py50def test_record_replaces_own_redirect(root: Path, existing: str) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py67def test_record_keeps_foreign_redirect(root: Path, existing: str) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py75def test_record_keeps_undecodable_redirect(root: Path) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py83def test_record_keeps_venv_directory(root: Path) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py92def test_record_keeps_venv_symlink(root: Path) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py100def test_record_same_target_does_not_write(root: Path, mocker: MockerFixture) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py109def test_record_warns_when_write_fails(root: Path, mocker: MockerFixture, caplog: pytest.LogCaptureFixture) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py117def test_forget_removes_redirect_to_env(root: Path) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py125def test_forget_keeps_redirect_to_other_env(root: Path) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py133def test_forget_without_redirect(root: Path) -> None:CODE
LOW⚡tests/util/test_venv_redirect.py143def test_release_redirect_only_when_ours(root: Path, target: str, released: bool) -> None:CODE
LOW⚡tests/util/test_path.py28def test_ensure_cachedir_tag_creates_file(tmp_path: Path) -> None:STRING
LOW⚡tests/util/test_path.py37def test_ensure_cachedir_tag_creates_parent_dirs(tmp_path: Path) -> None:STRING
LOW⚡tests/util/test_path.py43def test_ensure_cachedir_tag_idempotent(tmp_path: Path) -> None:STRING
LOW⚡tests/util/test_path.py51def test_ensure_cachedir_tag_does_not_overwrite(tmp_path: Path) -> None:STRING
LOW⚡tests/util/test_path.py58def test_ensure_empty_dir_file(tmp_path: Path) -> None:STRING
LOW⚡tests/util/test_path.py67def test_ensure_empty_dir_unlinks_dir_symlink(tmp_path: Path) -> None:STRING
LOW⚡tests/util/test_path.py84def test_ensure_empty_dir_removes_read_only_file(tmp_path: Path, relative: str) -> None:STRING
LOW⚡tests/util/test_path.py92def test_ensure_empty_dir_leaves_locked_nested_file(tmp_path: Path, windows_unlink: set[str]) -> None:STRING
941 more matches not shown…
Unused Imports266 hits · 264 pts
SeverityFileLineSnippetContext
LOWhatch_build.py1CODE
LOWtasks/release.py3CODE
LOWtools/generate_manpage.py3CODE
LOWtests/test_version.py1CODE
LOWtests/conftest.py1CODE
LOWtests/test_provision.py1CODE
LOWtests/test_call_modes.py1CODE
LOWtests/test_run.py1CODE
LOWtests/test_report.py1CODE
LOWtests/journal/test_main_journal.py1CODE
LOWtests/util/test_file_view.py1CODE
LOWtests/util/test_cpu.py1CODE
LOWtests/util/test_redact.py1CODE
LOWtests/util/test_ci.py1CODE
LOWtests/util/test_venv_redirect.py1CODE
LOWtests/util/test_path.py1CODE
LOWtests/util/test_graph.py1CODE
LOWtests/util/test_spinner.py1CODE
LOWtests/config/conftest.py1CODE
LOWtests/config/test_set_env.py1CODE
LOWtests/config/test_of_types.py1CODE
LOWtests/config/test_sets_get.py1CODE
LOWtests/config/test_main.py1CODE
LOWtests/config/test_sets.py1CODE
LOWtests/config/test_types.py1CODE
LOWtests/config/source/test_discover.py1CODE
LOWtests/config/source/test_legacy_toml.py1CODE
LOWtests/config/source/test_toml_env_base.py1CODE
LOWtests/config/source/test_toml_tox.py1CODE
LOWtests/config/source/test_toml_pyproject.py1CODE
LOWtests/config/source/test_setup_cfg.py1CODE
LOWtests/config/source/test_source_ini.py1CODE
LOWtests/config/cli/test_parser.py1CODE
LOWtests/config/cli/conftest.py1CODE
LOWtests/config/cli/test_parse.py1CODE
LOWtests/config/cli/test_cli_ini.py1CODE
LOWtests/config/cli/test_argcomplete.py1CODE
LOWtests/config/cli/test_cli_env_var.py1CODE
LOWtests/config/loader/conftest.py1CODE
LOWtests/config/loader/test_toml_loader.py1CODE
LOWtests/config/loader/test_loader.py1CODE
LOWtests/config/loader/test_section.py1CODE
LOWtests/config/loader/test_toml_product.py1CODE
LOWtests/config/loader/test_memory_loader.py1CODE
LOWtests/config/loader/test_str_convert.py1CODE
LOWtests/config/loader/test_set_env_override.py1CODE
LOWtests/config/loader/test_set_env_native.py1CODE
LOWtests/config/loader/test_replace.py1CODE
LOWtests/config/loader/test_native.py1CODE
LOWtests/config/loader/ini/conftest.py1CODE
LOWtests/config/loader/ini/test_factor.py1CODE
LOWtests/config/loader/ini/test_ini_loader.py1CODE
LOWtests/config/loader/ini/replace/test_replace_posargs.py1CODE
LOWtests/config/loader/ini/replace/test_replace_glob.py1CODE
LOWtests/config/loader/ini/replace/test_replace_env_var.py1CODE
LOWtests/config/loader/ini/replace/test_replace_tox_env.py1CODE
LOWtests/config/loader/ini/replace/test_replace_os_sep.py1CODE
LOWtests/config/loader/ini/replace/test_replace_tty.py1CODE
LOW…s/config/loader/ini/replace/test_replace_os_pathsep.py1CODE
LOWtests/tox_env/test_tox_env_runner.py1CODE
206 more matches not shown…
Empty Error Handlers14 hits · 70 pts
SeverityFileLineSnippetContext
HIGHsrc/tox/util/spinner.py33except UnicodeEncodeError:CODE
HIGHsrc/tox/config/source/discover.py90except MissingRequiredConfigKeyError:CODE
HIGHsrc/tox/config/cli/parse.py34except ValueError:CODE
HIGHsrc/tox/config/cli/parse.py57except SystemExit:CODE
HIGHsrc/tox/config/cli/parse.py90except ImportError:CODE
HIGHsrc/tox/config/loader/convert.py91except (TypeError, ValueError):CODE
HIGHsrc/tox/config/loader/replacer.py119except MatchError:CODE
HIGHsrc/tox/config/loader/replacer.py312except KeyError:CODE
HIGHsrc/tox/config/loader/toml/_validate.py59except TypeError:CODE
HIGHsrc/tox/config/loader/ini/factor.py92except ValueError:CODE
HIGHsrc/tox/config/loader/ini/replace.py56except KeyError: # if fails, keep trying maybe another source can satisfyCODE
HIGHsrc/tox/tox_env/python/virtual_env/package/pyproject.py252except (SystemExit, BrokenPipeError, Fail): # pragma: no cover # if interrupted or backend dead, ignoreCODE
HIGHsrc/tox/execute/api.py177except ImportError:CODE
HIGHsrc/tox/session/env_select.py545except StopIteration:CODE
Deep Nesting62 hits · 62 pts
SeverityFileLineSnippetContext
LOWtests/conftest.py38CODE
LOWtests/config/cli/test_parser.py59CODE
LOWtests/tox_env/python/pip/test_pip_install.py404CODE
LOWtests/demo_pkg_inline/build.py85CODE
LOWtests/docs/test_doc_config_examples.py62CODE
LOWtests/docs/test_doc_config_examples.py199CODE
LOWtests/docs/test_doc_config_examples.py234CODE
LOWsrc/tox/pytest.py149CODE
LOWsrc/tox/util/path.py32CODE
LOWsrc/tox/config/set_env.py44CODE
LOWsrc/tox/config/set_env.py131CODE
LOWsrc/tox/config/set_env.py177CODE
LOWsrc/tox/config/of_type.py113CODE
LOWsrc/tox/config/main.py57CODE
LOWsrc/tox/config/source/discover.py29CODE
LOWsrc/tox/config/source/discover.py64CODE
LOWsrc/tox/config/source/toml_pyproject.py192CODE
LOWsrc/tox/config/source/toml_pyproject.py223CODE
LOWsrc/tox/config/cli/env_var.py17CODE
LOWsrc/tox/config/cli/parser.py563CODE
LOWsrc/tox/config/cli/parser.py75CODE
LOWsrc/tox/config/cli/parser.py290CODE
LOWsrc/tox/config/cli/parser.py414CODE
LOWsrc/tox/config/cli/parser.py459CODE
LOWsrc/tox/config/loader/convert.py59CODE
LOWsrc/tox/config/loader/str_convert.py102CODE
LOWsrc/tox/config/loader/api.py318CODE
LOWsrc/tox/config/loader/api.py160CODE
LOWsrc/tox/config/loader/replacer.py321CODE
LOWsrc/tox/config/loader/toml/__init__.py149CODE
LOWsrc/tox/config/loader/toml/_validate.py27CODE
LOWsrc/tox/config/loader/toml/_replace.py181CODE
LOWsrc/tox/config/loader/toml/_replace.py68CODE
LOWsrc/tox/config/loader/toml/_replace.py320CODE
LOWsrc/tox/config/loader/ini/factor.py57CODE
LOWsrc/tox/config/loader/ini/factor.py120CODE
LOWsrc/tox/tox_env/runner.py156CODE
LOWsrc/tox/tox_env/info.py38CODE
LOWsrc/tox/tox_env/python/api.py235CODE
LOWsrc/tox/tox_env/python/api.py270CODE
LOWsrc/tox/tox_env/python/pip/pip_install.py158CODE
LOWsrc/tox/tox_env/python/pip/pip_install.py237CODE
LOWsrc/tox/tox_env/python/pip/req/file.py90CODE
LOWsrc/tox/tox_env/python/pip/req/file.py271CODE
LOWsrc/tox/tox_env/python/virtual_env/package/pyproject.py266CODE
LOWsrc/tox/tox_env/python/virtual_env/package/pyproject.py394CODE
LOWsrc/tox/tox_env/python/virtual_env/package/util.py34CODE
LOW…/tox/tox_env/python/virtual_env/package/cmd_builder.py155CODE
LOWsrc/tox/execute/stream.py86CODE
LOWsrc/tox/execute/api.py155CODE
LOWsrc/tox/execute/local_sub_process/__init__.py182CODE
LOWsrc/tox/execute/local_sub_process/__init__.py247CODE
LOWsrc/tox/execute/local_sub_process/__init__.py271CODE
LOW…x/execute/local_sub_process/read_via_thread_windows.py35CODE
LOW…/tox/execute/local_sub_process/read_via_thread_unix.py55CODE
LOWsrc/tox/session/env_select.py383CODE
LOWsrc/tox/session/env_select.py499CODE
LOWsrc/tox/session/env_select.py590CODE
LOWsrc/tox/session/cmd/legacy.py120CODE
LOWsrc/tox/session/cmd/run/single.py109CODE
2 more matches not shown…
Modern Structural Boilerplate53 hits · 50 pts
SeverityFileLineSnippetContext
LOWsrc/tox/pytest.py149 def _setup_files(dest: Path, base: Path | None, content: dict[str, Any]) -> None:CODE
LOWsrc/tox/report.py130 def _setup_level(self, is_colored: bool, level: int) -> None: # ruff:ignore[boolean-type-hint-positional-argument]CODE
LOWsrc/tox/report.py233 def update_verbosity(self, verbosity: int) -> None:CODE
LOWsrc/tox/util/typing_compat.py12__all__ = [CODE
LOWsrc/tox/util/json_types.py9__all__ = [CODE
LOWsrc/tox/util/venv_redirect.py89__all__ = [CODE
LOWsrc/tox/util/ci.py39__all__ = [CODE
LOWsrc/tox/util/path.py84__all__ = [CODE
LOWsrc/tox/config/of_type.py168__all__ = [CODE
LOWsrc/tox/config/source/ini_section.py25__all__ = [CODE
LOWsrc/tox/config/source/toml_pyproject.py246__all__ = [CODE
LOWsrc/tox/config/source/api.py113__all__ = [CODE
LOWsrc/tox/config/source/ini.py135__all__ = [CODE
LOWsrc/tox/config/source/toml_tox.py19__all__ = [CODE
LOWsrc/tox/config/loader/convert.py204__all__ = [CODE
LOWsrc/tox/config/loader/section.py67__all__ = [CODE
LOWsrc/tox/config/loader/replacer.py394__all__ = [CODE
LOWsrc/tox/config/loader/toml/_api.py12__all__ = [CODE
LOWsrc/tox/config/loader/toml/__init__.py176__all__ = [CODE
LOWsrc/tox/config/loader/toml/_product.py132__all__ = [CODE
LOWsrc/tox/config/loader/toml/_validate.py83__all__ = [CODE
LOWsrc/tox/config/loader/toml/_replace.py373__all__ = [STRING
LOWsrc/tox/config/loader/ini/replace.py124__all__ = [STRING
LOWsrc/tox/tox_env/runner.py203 def _setup_with_env(self) -> None:STRING
LOWsrc/tox/tox_env/runner.py233 def _setup_pkg(self) -> None:CODE
LOWsrc/tox/tox_env/util.py45__all__ = [CODE
LOWsrc/tox/tox_env/installer.py49__all__ = [CODE
LOWsrc/tox/tox_env/api.py328 def _setup_env(self) -> None:CODE
LOWsrc/tox/tox_env/api.py347 def _setup_with_env(self) -> None: # ruff:ignore[empty-method-without-abstract-decorator] # empty abstract base claCODE
LOWsrc/tox/tox_env/python/package.py64 def _setup_env(self) -> None:CODE
LOWsrc/tox/tox_env/python/extras.py41__all__ = [CODE
LOWsrc/tox/tox_env/python/runner.py137 def _setup_pkg(self) -> None:CODE
LOWsrc/tox/tox_env/python/runner.py155 def _setup_env(self) -> None:CODE
LOWsrc/tox/tox_env/python/runner.py204 def _setup_with_env(self) -> None:CODE
LOWsrc/tox/tox_env/python/runner.py283__all__ = [CODE
LOWsrc/tox/tox_env/python/dependency_groups.py155__all__ = [CODE
LOWsrc/tox/tox_env/python/pylock.py92__all__ = [CODE
LOWsrc/tox/tox_env/python/api.py354 def _setup_env(self) -> None:CODE
LOWsrc/tox/tox_env/python/pep723.py88 def _setup_env(self) -> None:STRING
LOWsrc/tox/tox_env/python/pep723.py171__all__ = [STRING
LOWsrc/tox/tox_env/python/pip/pip_install.py326__all__ = [CODE
LOWsrc/tox/tox_env/python/virtual_env/pep723_runner.py49__all__ = [CODE
LOWsrc/tox/tox_env/python/virtual_env/package/pyproject.py218 def _setup_env(self) -> None:CODE
LOWsrc/tox/tox_env/python/virtual_env/package/pyproject.py241 def _setup_build_requires(self, of_type: str) -> None:CODE
LOWsrc/tox/tox_env/python/virtual_env/package/pyproject.py580__all__ = [CODE
LOW…/tox/tox_env/python/virtual_env/package/cmd_builder.py187__all__ = [CODE
LOWsrc/tox/plugin/spec.py131__all__ = [CODE
LOWsrc/tox/execute/util.py36__all__ = [CODE
LOWsrc/tox/session/env_select.py669__all__ = [CODE
LOWsrc/tox/session/cmd/run/common.py210logger = logging.getLogger(__name__)CODE
LOWsrc/tox/session/cmd/run/common.py375 def update_spinner(self, result: ToxEnvRunResult, success: bool) -> None: # ruff:ignore[boolean-type-hint-positionaCODE
LOWsrc/tox/session/cmd/run/parallel.py20logger = logging.getLogger(__name__)CODE
LOWsrc/tox/session/cmd/show_config/ini.py95__all__ = [CODE
Cross-Language Confusion7 hits · 50 pts
SeverityFileLineSnippetContext
HIGH⚡tasks/release.py35 repo.git.push(upstream.name, f":refs/tags/{version}", "--no-verify")CODE
HIGH⚡tasks/release.py41 repo.git.push(upstream.name, f"{original_main_sha}:main", "-f", "--no-verify")CODE
HIGH⚡tasks/release.py46 repo.git.push(upstream.name, f":{release_branch}", "--no-verify")CODE
HIGH⚡tasks/release.py81 repo.git.push(upstream.name, f"{release_branch}:main", "-f")CODE
HIGH⚡tasks/release.py84 repo.git.push(upstream.name, tag, "-f")CODE
HIGH⚡tasks/release.py92 repo.git.push(upstream.name, f":{release_branch}", "--no-verify")CODE
HIGHtasks/release.py105 upstream.push(refspec=f"{branch_name}:{branch_name}", force=True)CODE
Excessive Try-Catch Wrapping22 hits · 23 pts
SeverityFileLineSnippetContext
LOW⚡tasks/release.py30 except Exception as cleanup_error: # ruff:ignore[blind-except]CODE
LOW⚡tasks/release.py36 except Exception as cleanup_error: # ruff:ignore[blind-except]CODE
LOW⚡tasks/release.py42 except Exception as cleanup_error: # ruff:ignore[blind-except]CODE
LOW⚡tasks/release.py47 except Exception as cleanup_error: # ruff:ignore[blind-except]CODE
LOWtasks/release.py63 except Exception:CODE
LOW…ts/execute/local_subprocess/local_subprocess_sigint.py76except Exception as exception: # pragma: no coverCODE
LOWsrc/tox/run.py24 except Exception as exception:CODE
LOWsrc/tox/config/cli/env_var.py37 except Exception as exception: # ruff:ignore[blind-except]CODE
LOWsrc/tox/config/cli/ini.py39 except Exception as exception: # ruff:ignore[blind-except]CODE
LOWsrc/tox/config/cli/ini.py60 except Exception as exception: # ruff:ignore[blind-except]CODE
LOWsrc/tox/config/loader/api.py299 except Exception as exception: # a bad value is a user error, report it without a tracebackCODE
LOWsrc/tox/config/loader/toml/_validate.py74 except Exception: # ruff:ignore[blind-except]CODE
LOWsrc/tox/config/loader/toml/_replace.py332 except Exception as exc: # ruff:ignore[blind-except]STRING
LOWsrc/tox/config/loader/ini/__init__.py97 except Exception as exception:CODE
LOWsrc/tox/tox_env/runner.py160 except Exception:STRING
LOWsrc/tox/session/env_select.py426 except Exception as exception: # ruff:ignore[blind-except]CODE
LOWsrc/tox/session/env_select.py444 except Exception: # ruff:ignore[blind-except]CODE
LOWsrc/tox/session/env_select.py574 except Exception:CODE
LOWsrc/tox/session/cmd/depends.py44 except Exception as exception: # ruff:ignore[blind-except]CODE
LOWsrc/tox/session/cmd/run/single.py72 except Exception: # pragma: no coverCODE
LOWsrc/tox/session/cmd/show_config/common.py68 except Exception as exception:CODE
LOWsrc/tox/session/cmd/show_config/ini.py71 except Exception as exception: # because e.g. the interpreter cannot be foundCODE
Cross-File Repetition3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHtests/config/loader/ini/test_factor.py0if we have a factor that is not specified within the core env-list then that's also an environmentSTRING
HIGHtests/config/loader/ini/replace/test_replace_env_var.py0if we have a factor that is not specified within the core env-list then that's also an environmentSTRING
HIGHtests/config/loader/ini/replace/test_replace_tox_env.py0if we have a factor that is not specified within the core env-list then that's also an environmentSTRING
Self-Referential Comments3 hits · 10 pts
SeverityFileLineSnippetContext
MEDIUM⚡tests/util/test_path.py22# This file is a cache directory tag created by tox.COMMENT
MEDIUMtests/execute/local_subprocess/test_local_subprocess.py587 # Create a pipeCOMMENT
MEDIUMsrc/tox/util/path.py18# This file is a cache directory tag created by tox.COMMENT
Verbosity Indicators4 hits · 9 pts
SeverityFileLineSnippetContext
LOW⚡src/tox/tox_env/python/virtual_env/package/pyproject.py340 # Step 1: Build the sdist in this (parent) environmentCOMMENT
LOW⚡src/tox/tox_env/python/virtual_env/package/pyproject.py345 # Step 2: Extract sdist to env_tmp_dir (auto-cleaned by tox lifecycle)COMMENT
LOW⚡src/tox/tox_env/python/virtual_env/package/pyproject.py351 # Step 3: Get wheel_build_env child and point it at extracted sdistCOMMENT
LOW⚡src/tox/tox_env/python/virtual_env/package/pyproject.py360 # Step 4: Build the wheelCOMMENT
Structural Annotation Overuse4 hits · 9 pts
SeverityFileLineSnippetContext
LOW⚡src/tox/tox_env/python/virtual_env/package/pyproject.py340 # Step 1: Build the sdist in this (parent) environmentCOMMENT
LOW⚡src/tox/tox_env/python/virtual_env/package/pyproject.py345 # Step 2: Extract sdist to env_tmp_dir (auto-cleaned by tox lifecycle)COMMENT
LOW⚡src/tox/tox_env/python/virtual_env/package/pyproject.py351 # Step 3: Get wheel_build_env child and point it at extracted sdistCOMMENT
LOW⚡src/tox/tox_env/python/virtual_env/package/pyproject.py360 # Step 4: Build the wheelCOMMENT
AI Slop Vocabulary3 hits · 2 pts
SeverityFileLineSnippetContext
LOWtests/test_provision.py48 if worker_id == "master": # if not running under xdist we can just returnCODE
LOWsrc/tox/tox_env/python/api.py61 (?P<impl>py|pypy|cpython|jython|graalpy|rustpython|ironpython) # the interpreter; most users will simply use 'py'CODE
LOWsrc/tox/tox_env/python/pip/req/file.py355 # For editable requirements, we don't support per-requirement options, so just return the parsed requirement.STRING
Dead Code1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMsrc/tox/tox_env/package.py103CODE
Slop Phrases1 hit · 2 pts
SeverityFileLineSnippetContext
LOWsrc/tox/tox_env/python/virtual_env/package/pyproject.py124 # Therefore, we make sure to close the existing back-end executor in the case of an existing PEP 517 frontend.COMMENT