A feature-rich command-line audio/video downloader
This report summarizes scanner evidence for yt-dlp/yt-dlp, a Python project with 196,638 GitHub stars. SynthScan examined 273,049 lines of code across 1196 source files, recording 2979 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 8.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 945 finding(s).
Are imports declared and package/API names verified? 1932 finding(s).
Are wrappers, guards, and repeated structures necessary? 650 finding(s).
Which changes need focused human review? 2979 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2979 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/update.py | 1 | CODE | |
| LOW | yt_dlp/globals.py | 1 | CODE | |
| LOW | yt_dlp/__init__.py | 1096 | CODE | |
| LOW | yt_dlp/compat/shutil.py | 2 | CODE | |
| LOW | yt_dlp/compat/_deprecated.py | 11 | CODE | |
| LOW | yt_dlp/compat/_legacy.py | 27 | CODE | |
| LOW | yt_dlp/compat/_legacy.py | 28 | CODE | |
| LOW | yt_dlp/compat/_legacy.py | 29 | CODE | |
| LOW | yt_dlp/compat/_legacy.py | 30 | CODE | |
| LOW | yt_dlp/compat/_legacy.py | 31 | CODE | |
| LOW | yt_dlp/compat/_legacy.py | 35 | CODE | |
| LOW | yt_dlp/compat/_legacy.py | 36 | CODE | |
| LOW | yt_dlp/compat/_legacy.py | 37 | CODE | |
| LOW | yt_dlp/compat/urllib/request.py | 2 | CODE | |
| LOW | yt_dlp/compat/urllib/__init__.py | 2 | CODE | |
| LOW | yt_dlp/__pyinstaller/hook-yt_dlp.py | 8 | CODE | |
| LOW | yt_dlp/__pyinstaller/hook-yt_dlp.py | 11 | CODE | |
| LOW | yt_dlp/networking/_urllib.py | 1 | CODE | |
| LOW | yt_dlp/networking/impersonate.py | 1 | CODE | |
| LOW | yt_dlp/networking/_websockets.py | 1 | CODE | |
| LOW | yt_dlp/networking/_helper.py | 1 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 4 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 4 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 4 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 4 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 4 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 4 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 4 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 16 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 20 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 27 | CODE | |
| LOW | yt_dlp/networking/__init__.py | 34 | CODE | |
| LOW | yt_dlp/networking/common.py | 1 | CODE | |
| LOW | yt_dlp/networking/_curlcffi.py | 1 | CODE | |
| LOW | yt_dlp/networking/exceptions.py | 1 | CODE | |
| LOW | yt_dlp/networking/_requests.py | 1 | CODE | |
| LOW | yt_dlp/networking/websocket.py | 1 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 3 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 4 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 5 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 5 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 6 | CODE | |
| LOW | yt_dlp/postprocessor/__init__.py | 26 | CODE | |
| 1814 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/update.py | 57 | def _get_variant_and_executable_path(): | CODE |
| LOW | yt_dlp/options.py | 248 | def _list_from_options_callback(option, opt_str, value, parser, append=True, delim=',', process=str.strip): | CODE |
| LOW | yt_dlp/options.py | 256 | def _set_from_options_callback( | CODE |
| LOW | yt_dlp/options.py | 268 | def _dict_from_options_callback( | CODE |
| LOW | yt_dlp/options.py | 1939 | def _deprecated_option_callback(option, opt_str, value, parser): | CODE |
| LOW⚡ | yt_dlp/cookies.py | 649 | def _mac_absolute_time_to_posix(timestamp): | CODE |
| LOW⚡ | yt_dlp/cookies.py | 653 | def _parse_safari_cookies_header(data, logger): | CODE |
| LOW⚡ | yt_dlp/cookies.py | 661 | def _parse_safari_cookies_page(data, jar, logger): | CODE |
| LOW | yt_dlp/cookies.py | 116 | def extract_cookies_from_browser(browser_name, profile=None, logger=YDLLogger(), *, keyring=None, container=None): | CODE |
| LOW | yt_dlp/cookies.py | 234 | def _get_chromium_based_browser_settings(browser_name): | CODE |
| LOW | yt_dlp/cookies.py | 681 | def _parse_safari_cookies_record(data, jar, logger): | CODE |
| LOW | yt_dlp/cookies.py | 775 | def _get_linux_desktop_environment(env, logger): | CODE |
| LOW | yt_dlp/cookies.py | 874 | def _get_kwallet_network_wallet(keyring, logger): | CODE |
| LOW | yt_dlp/cookies.py | 958 | def _get_gnome_keyring_password(browser_keyring_name, logger): | CODE |
| LOW | yt_dlp/cookies.py | 975 | def _get_linux_keyring_password(browser_keyring_name, keyring, logger): | CODE |
| LOW | yt_dlp/cookies.py | 995 | def _get_mac_keyring_password(browser_keyring_name, logger): | CODE |
| LOW | yt_dlp/cookies.py | 1155 | def _parse_browser_specification(browser_name, profile=None, keyring=None, container=None): | CODE |
| LOW | yt_dlp/aes.py | 12 | def aes_gcm_decrypt_and_verify_bytes(data, key, tag, nonce): | CODE |
| LOW | yt_dlp/aes.py | 21 | def aes_gcm_decrypt_and_verify_bytes(data, key, tag, nonce): | CODE |
| LOW | yt_dlp/aes.py | 204 | def aes_gcm_decrypt_and_verify(data, key, tag, nonce): | CODE |
| LOW | yt_dlp/__init__.py | 103 | def print_extractor_information(opts, urls): | CODE |
| LOW | yt_dlp/jsinterp.py | 943 | def extract_function_from_code(self, argnames, code, *global_stack): | CODE |
| LOW⚡ | yt_dlp/YoutubeDL.py | 4240 | def _get_available_impersonate_targets(self): | CODE |
| LOW⚡ | yt_dlp/YoutubeDL.py | 4249 | def _impersonate_target_available(self, target): | CODE |
| LOW⚡ | yt_dlp/YoutubeDL.py | 4256 | def _parse_impersonate_targets(self, impersonate): | CODE |
| LOW | yt_dlp/YoutubeDL.py | 190 | def _catch_unsafe_extension_error(func): | CODE |
| LOW | yt_dlp/YoutubeDL.py | 927 | def add_default_info_extractors(self): | CODE |
| LOW | yt_dlp/YoutubeDL.py | 1176 | def report_file_already_downloaded(self, file_name): | CODE |
| LOW | yt_dlp/YoutubeDL.py | 1725 | def _handle_extraction_exceptions(func): | CODE |
| LOW | yt_dlp/YoutubeDL.py | 4270 | def _unavailable_targets_message(requested_targets, note=None, is_error=False): | CODE |
| LOW | yt_dlp/compat/__init__.py | 30 | def compat_datetime_from_timestamp(timestamp): | CODE |
| LOW | yt_dlp/compat/urllib/request.py | 23 | def getproxies_registry_patched(): | CODE |
| LOW | yt_dlp/networking/_urllib.py | 331 | def handle_response_read_exceptions(e): | CODE |
| LOW | yt_dlp/networking/impersonate.py | 61 | class ImpersonateRequestHandler(RequestHandler, ABC): | CODE |
| LOW | yt_dlp/networking/impersonate.py | 87 | def _check_impersonate_target(self, target: ImpersonateTarget): | CODE |
| LOW | yt_dlp/networking/impersonate.py | 126 | def _prepare_impersonate_headers(self, request: Request, headers: HTTPHeaderDict) -> None: # noqa: B027 | CODE |
| LOW | yt_dlp/networking/_helper.py | 40 | def ssl_load_windows_store_certs(ssl_context, storename): | CODE |
| LOW | yt_dlp/networking/_helper.py | 185 | def add_accept_encoding_header(headers: HTTPHeaderDict, supported_encodings: Iterable[str]): | CODE |
| LOW | yt_dlp/networking/_helper.py | 217 | def create_socks_proxy_socket(dest_addr, proxy_args, proxy_ip_addr, timeout, source_address): | CODE |
| LOW | yt_dlp/networking/common.py | 149 | class RequestHandler(abc.ABC): | CODE |
| LOW | yt_dlp/networking/_requests.py | 184 | def get_connection_with_tls_context(self, request, verify, proxies=None, cert=None): | CODE |
| LOW | yt_dlp/networking/websocket.py | 22 | class WebSocketRequestHandler(RequestHandler, abc.ABC): | CODE |
| LOW | yt_dlp/postprocessor/ffmpeg.py | 94 | def get_versions_and_features(downloader=None): | CODE |
| LOW | yt_dlp/postprocessor/ffmpeg.py | 321 | def run_ffmpeg_multiple_files(self, input_paths, out_path, opts, **kwargs): | CODE |
| LOW | yt_dlp/postprocessor/ffmpeg.py | 370 | def _ffmpeg_filename_argument(fn): | CODE |
| LOW | yt_dlp/postprocessor/modify_chapters.py | 125 | def _remove_marked_arrange_sponsors(self, chapters): | CODE |
| LOW | yt_dlp/postprocessor/modify_chapters.py | 266 | def _remove_tiny_rename_sponsors(self, chapters): | CODE |
| LOW | yt_dlp/postprocessor/embedthumbnail.py | 36 | def _get_thumbnail_resolution(self, filename, thumbnail_dict): | CODE |
| LOW | yt_dlp/downloader/soop.py | 40 | def _get_cloudfront_cookie_expiration(m3u8_url): | CODE |
| LOW | yt_dlp/downloader/fragment.py | 75 | def _prepare_and_start_frag_download(self, ctx, info_dict): | CODE |
| LOW | yt_dlp/downloader/fragment.py | 321 | def _prepare_external_frag_download(self, ctx): | CODE |
| LOW | yt_dlp/downloader/fragment.py | 367 | def download_and_append_fragments_multiple(self, *args, **kwargs): | CODE |
| LOW | yt_dlp/downloader/fragment.py | 431 | def download_and_append_fragments( | CODE |
| LOW | yt_dlp/downloader/common.py | 293 | def _prepare_multiline_status(self, lines=1): | CODE |
| LOW | yt_dlp/downloader/youtube_live_chat.py | 63 | def try_refresh_replay_beginning(live_chat_continuation): | CODE |
| LOW | yt_dlp/downloader/youtube_live_chat.py | 109 | def download_and_parse_fragment(url, frag_index, request_data=None, headers=None): | CODE |
| LOW | yt_dlp/downloader/external.py | 586 | def list_external_downloaders(): | CODE |
| LOW | yt_dlp/utils/_legacy.py | 241 | def process_communicate_or_kill(p, *args, **kwargs): | CODE |
| LOW⚡ | yt_dlp/utils/_utils.py | 345 | def get_elements_html_by_class(class_name, html): | CODE |
| LOW⚡ | yt_dlp/utils/_utils.py | 352 | def get_elements_by_attribute(*args, **kwargs): | CODE |
| 477 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | yt_dlp/extractor/bloomberg.py | 53 | r'BPlayer\(null,\s*({[^;]+})\);', webpage, 'id'), name) | CODE |
| HIGH | yt_dlp/extractor/iqiyi.py | 274 | var k_uid = Array.apply(null, Array(32)).map(function() {return Math.floor(Math.random() * 15).toString(16)} | CODE |
| HIGH | yt_dlp/extractor/iqiyi.py | 326 | enc_params.push(encodeURIComponent(prop) + '=' + encodeURIComponent(query[prop])); | CODE |
| HIGH | yt_dlp/extractor/iqiyi.py | 329 | enc_params.push('ut=' + ut); | CODE |
| HIGH | yt_dlp/extractor/gamejolt.py | 202 | 'title': 'Adobe Animate CC 2021 Tutorial || Part 1 - The Basics', | CODE |
| HIGH | yt_dlp/extractor/nintendo.py | 98 | # API returns `{"data": {"direct": null}}` if no matching id | COMMENT |
| HIGH | yt_dlp/extractor/vrt.py | 39 | 'device': 'undefined (undefined)', | CODE |
| HIGH | yt_dlp/extractor/tvp.py | 386 | if datastr.startswith('null,'): | STRING |
| HIGH⚡ | yt_dlp/extractor/openload.py | 60 | if(trace && trace.length) {{ | CODE |
| HIGH⚡ | yt_dlp/extractor/openload.py | 61 | msgStack.push('TRACE:'); | CODE |
| HIGH⚡ | yt_dlp/extractor/openload.py | 63 | msgStack.push(' -> ' + (t.file || t.sourceURL) + ': ' + t.line | CODE |
| HIGH⚡ | yt_dlp/extractor/openload.py | 63 | msgStack.push(' -> ' + (t.file || t.sourceURL) + ': ' + t.line | CODE |
| HIGH | yt_dlp/extractor/openload.py | 186 | return document.querySelector('#b.done') !== null; | STRING |
| HIGH⚡ | test/test_utils.py | 1165 | 'playlist':[{'controls':{'all':null}}] | CODE |
| HIGH⚡ | test/test_utils.py | 1168 | "playlist":[{"controls":{"all":null}}] | CODE |
| HIGH | test/test_utils.py | 900 | stripped = strip_jsonp('window.cb && window.cb({"status": "success"});') | CODE |
| HIGH | test/test_utils.py | 904 | stripped = strip_jsonp('window.cb && cb({"status": "success"});') | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2012 | <script>self.__next_f.push([2,"0:[\"$\",\"$L0\",null,{\"do_not_add_this\":\"fail\"}]\n"])</script> | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2012 | <script>self.__next_f.push([2,"0:[\"$\",\"$L0\",null,{\"do_not_add_this\":\"fail\"}]\n"])</script> | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2013 | <script>self.__next_f.push([1,"1:I[46975,[],\"HTTPAccessFallbackBoundary\"]\n2:I[32630,[\"8183\",\"static/ch | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2014 | <script nonce="abc123">self.__next_f.push([1,"e:[false,[\"$\",\"div\",null,{\"children\":[\"$\",\"$L18\",nul | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2014 | <script nonce="abc123">self.__next_f.push([1,"e:[false,[\"$\",\"div\",null,{\"children\":[\"$\",\"$L18\",nul | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2015 | <script>self.__next_f.push([1,"2a:[[\"$\",\"div\",null,{\"className\":\"flex flex-col\",\"children\":[]}],[\ | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2015 | <script>self.__next_f.push([1,"2a:[[\"$\",\"div\",null,{\"className\":\"flex flex-col\",\"children\":[]}],[\ | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2016 | <script>self.__next_f.push([1,"df:[\"$undefined\",[\"$\",\"div\",null,{\"children\":[\"$\",\"$L17\",null,{}] | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2016 | <script>self.__next_f.push([1,"df:[\"$undefined\",[\"$\",\"div\",null,{\"children\":[\"$\",\"$L17\",null,{}] | CODE |
| HIGH⚡ | test/test_InfoExtractor.py | 2017 | <script>self.__next_f.push([3,"MzM6WyIkIiwiJEwzMiIsbnVsbCx7ImRlY29kZWQiOiJzdWNjZXNzIn1d"])</script> | CODE |
| HIGH⚡ | test/test_jsinterp.py | 45 | self._test('function f(){return 42 + undefined;}', NaN) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 46 | self._test('function f(){return 42 + null;}', 42) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 50 | self._test('function f(){return 42 - undefined;}', NaN) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 51 | self._test('function f(){return 42 - null;}', 42) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 55 | self._test('function f(){return 42 * undefined;}', NaN) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 56 | self._test('function f(){return 42 * null;}', 0) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 68 | self._test('function f(){return 42 % undefined;}', NaN) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 72 | self._test('function f(){return 42 ** undefined;}', NaN) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 73 | self._test('function f(){return 42 ** null;}', 1) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 313 | undefined === undefined, | CODE |
| HIGH⚡ | test/test_jsinterp.py | 314 | undefined == undefined, | CODE |
| HIGH⚡ | test/test_jsinterp.py | 315 | undefined == null, | CODE |
| HIGH⚡ | test/test_jsinterp.py | 316 | undefined < undefined, | CODE |
| HIGH⚡ | test/test_jsinterp.py | 317 | undefined > undefined, | CODE |
| HIGH⚡ | test/test_jsinterp.py | 324 | undefined > null, | CODE |
| HIGH⚡ | test/test_jsinterp.py | 325 | undefined < null, | CODE |
| HIGH⚡ | test/test_jsinterp.py | 540 | M.push("a"); | CODE |
| HIGH⚡ | test/test_jsinterp.py | 542 | M.push("b"); | CODE |
| HIGH⚡ | test/test_jsinterp.py | 549 | y.push(w); | CODE |
| HIGH⚡ | test/test_jsinterp.py | 550 | y.push(M); | CODE |
| HIGH | test/test_jsinterp.py | 97 | self._test('function f(){return 0 && 1 || 2;}', 2) | CODE |
| HIGH | test/test_jsinterp.py | 97 | self._test('function f(){return 0 && 1 || 2;}', 2) | CODE |
| HIGH | test/test_jsinterp.py | 108 | self._test('function f(){return null << undefined}', 0) | CODE |
| HIGH⚡ | test/test_jsinterp.py | 297 | self._test('function f() { return null; }', None) | STRING |
| HIGH⚡ | test/test_jsinterp.py | 303 | self._test('function f() { return undefined === undefined; }', True) | STRING |
| HIGH⚡ | test/test_jsinterp.py | 304 | self._test('function f() { return undefined; }', JS_Undefined) | STRING |
| HIGH | test/test_pot/test_pot_director.py | 711 | assert 'Invalid PO Token response retrieved from cache provider "memory": {"po_token": null, "expires_at": null} | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/update.py | 382 | CODE | |
| LOW | yt_dlp/update.py | 422 | CODE | |
| LOW | yt_dlp/options.py | 43 | CODE | |
| LOW | yt_dlp/options.py | 181 | CODE | |
| LOW | yt_dlp/cookies.py | 127 | CODE | |
| LOW | yt_dlp/cookies.py | 294 | CODE | |
| LOW | yt_dlp/cookies.py | 775 | CODE | |
| LOW | yt_dlp/cookies.py | 845 | CODE | |
| LOW | yt_dlp/cookies.py | 874 | CODE | |
| LOW | yt_dlp/cookies.py | 1129 | CODE | |
| LOW | yt_dlp/cookies.py | 1215 | CODE | |
| LOW | yt_dlp/cookies.py | 1354 | CODE | |
| LOW | yt_dlp/plugins.py | 130 | CODE | |
| LOW | yt_dlp/__init__.py | 185 | CODE | |
| LOW | yt_dlp/__init__.py | 964 | CODE | |
| LOW | yt_dlp/__init__.py | 350 | CODE | |
| LOW | yt_dlp/webvtt.py | 36 | CODE | |
| LOW | yt_dlp/webvtt.py | 170 | CODE | |
| LOW | yt_dlp/jsinterp.py | 107 | CODE | |
| LOW | yt_dlp/jsinterp.py | 318 | CODE | |
| LOW | yt_dlp/jsinterp.py | 405 | CODE | |
| LOW | yt_dlp/jsinterp.py | 737 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1071 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1267 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1525 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1555 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1576 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1803 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1908 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 2270 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 2341 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 2766 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 2835 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 3334 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 3740 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 4281 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 4400 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 4423 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 4447 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 4503 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1419 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 1583 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 2365 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 2396 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 2453 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 2542 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 3762 | CODE | |
| LOW | yt_dlp/YoutubeDL.py | 3606 | CODE | |
| LOW | yt_dlp/networking/_urllib.py | 146 | CODE | |
| LOW | yt_dlp/networking/_urllib.py | 293 | CODE | |
| LOW | yt_dlp/networking/_helper.py | 23 | CODE | |
| LOW | yt_dlp/networking/_helper.py | 53 | CODE | |
| LOW | yt_dlp/networking/_curlcffi.py | 253 | CODE | |
| LOW | yt_dlp/postprocessor/ffmpeg.py | 232 | CODE | |
| LOW | yt_dlp/postprocessor/ffmpeg.py | 589 | CODE | |
| LOW | yt_dlp/postprocessor/modify_chapters.py | 125 | CODE | |
| LOW | yt_dlp/postprocessor/modify_chapters.py | 266 | CODE | |
| LOW | yt_dlp/postprocessor/embedthumbnail.py | 57 | CODE | |
| LOW | yt_dlp/postprocessor/xattrpp.py | 48 | CODE | |
| LOW | yt_dlp/downloader/ism.py | 39 | CODE | |
| 301 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | yt_dlp/cookies.py | 1051 | except UnicodeDecodeError: | CODE |
| HIGH | yt_dlp/plugins.py | 74 | except FileNotFoundError: | CODE |
| HIGH | yt_dlp/jsinterp.py | 573 | except JS_Continue: | CODE |
| HIGH | yt_dlp/__pyinstaller/hook-yt_dlp.py | 15 | except ImportError: | CODE |
| HIGH | yt_dlp/networking/__init__.py | 21 | except ImportError: | CODE |
| HIGH | yt_dlp/networking/__init__.py | 28 | except ImportError: | CODE |
| HIGH | yt_dlp/networking/__init__.py | 35 | except ImportError: | CODE |
| HIGH | yt_dlp/downloader/websocket.py | 22 | except OSError: | CODE |
| HIGH | yt_dlp/utils/_utils.py | 2691 | except (AttributeError, KeyError, TypeError, IndexError, ValueError, ZeroDivisionError): | CODE |
| HIGH | yt_dlp/extractor/generic.py | 962 | except xml.etree.ElementTree.ParseError: | CODE |
| HIGH | yt_dlp/extractor/generic.py | 1032 | except ExtractorError: | CODE |
| HIGH | yt_dlp/extractor/twitcasting.py | 93 | except ExtractorError: | CODE |
| HIGH | yt_dlp/extractor/youtube/_video.py | 4393 | except (KeyError, IndexError, TypeError): | CODE |
| HIGH | test/test_age_restriction.py | 31 | except DownloadError: | CODE |
| HIGH | devscripts/run_tests.py | 66 | except FileNotFoundError: | CODE |
| HIGH | devscripts/run_tests.py | 96 | except KeyboardInterrupt: | CODE |
| HIGH | devscripts/tomlparse.py | 129 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/options.py | 292 | except Exception as err: | CODE |
| LOW | yt_dlp/options.py | 322 | except Exception as err: | CODE |
| LOW | yt_dlp/options.py | 334 | except Exception as err: | CODE |
| MEDIUM | yt_dlp/cookies.py | 93 | def load_cookies(cookie_file, browser_specification, ydl): | CODE |
| LOW | yt_dlp/cookies.py | 112 | except Exception: | CODE |
| LOW | yt_dlp/cookies.py | 910 | except Exception as e: | CODE |
| LOW | yt_dlp/cookies.py | 953 | except Exception as e: | CODE |
| LOW | yt_dlp/cookies.py | 1008 | except Exception as e: | CODE |
| LOW | yt_dlp/plugins.py | 76 | except Exception as e: | CODE |
| LOW | yt_dlp/plugins.py | 208 | except Exception: | CODE |
| MEDIUM | yt_dlp/plugins.py | 69 | def dirs_in_zip(archive): | CODE |
| LOW | yt_dlp/cache.py | 44 | except Exception: | CODE |
| LOW | yt_dlp/__init__.py | 426 | except Exception as err: | STRING |
| LOW | yt_dlp/__init__.py | 435 | except Exception as err: | STRING |
| LOW | yt_dlp/__init__.py | 454 | except Exception as err: | STRING |
| LOW | yt_dlp/__init__.py | 461 | except Exception: | STRING |
| LOW | yt_dlp/__init__.py | 993 | except Exception: | STRING |
| LOW | yt_dlp/jsinterp.py | 258 | except Exception as e: | CODE |
| LOW | yt_dlp/jsinterp.py | 385 | except Exception as e: | CODE |
| LOW | yt_dlp/jsinterp.py | 393 | except Exception as e: | CODE |
| LOW | yt_dlp/jsinterp.py | 521 | except Exception as e: | STRING |
| MEDIUM | yt_dlp/YoutubeDL.py | 192 | def wrapper(self, *args, **kwargs): | CODE |
| LOW | yt_dlp/YoutubeDL.py | 672 | except Exception as e: | CODE |
| LOW | yt_dlp/YoutubeDL.py | 1749 | except Exception as e: | CODE |
| LOW | yt_dlp/YoutubeDL.py | 3671 | except Exception as err: | CODE |
| LOW | yt_dlp/networking/_urllib.py | 318 | except Exception as e: | CODE |
| LOW | yt_dlp/networking/_urllib.py | 429 | except Exception as e: | CODE |
| LOW⚡ | yt_dlp/networking/__init__.py | 23 | except Exception as e: | CODE |
| LOW⚡ | yt_dlp/networking/__init__.py | 30 | except Exception as e: | CODE |
| LOW⚡ | yt_dlp/networking/__init__.py | 37 | except Exception as e: | CODE |
| LOW | yt_dlp/networking/common.py | 120 | except Exception as e: | CODE |
| LOW | yt_dlp/networking/common.py | 561 | except Exception as e: | CODE |
| LOW | yt_dlp/networking/_requests.py | 244 | except Exception: | CODE |
| MEDIUM | yt_dlp/networking/_requests.py | 236 | def emit(self, record): | CODE |
| LOW | yt_dlp/postprocessor/common.py | 155 | except Exception: | CODE |
| MEDIUM | yt_dlp/postprocessor/common.py | 152 | def try_utime(self, path, atime, mtime, errnote='Cannot update utime of file'): | CODE |
| LOW | yt_dlp/postprocessor/embedthumbnail.py | 139 | except Exception as err: | CODE |
| LOW | yt_dlp/dependencies/__init__.py | 40 | except Exception as _err: | CODE |
| LOW | yt_dlp/downloader/fc2.py | 27 | except Exception: | CODE |
| LOW | yt_dlp/downloader/fragment.py | 90 | except Exception: | CODE |
| MEDIUM | yt_dlp/utils/_utils.py | 437 | def find_or_raise(haystack, needle, exc): | CODE |
| LOW | yt_dlp/utils/_utils.py | 186 | except Exception: | CODE |
| LOW | yt_dlp/utils/_utils.py | 212 | except Exception: | CODE |
| LOW | yt_dlp/utils/_utils.py | 2372 | except Exception: | CODE |
| LOW | yt_dlp/utils/_utils.py | 4993 | except Exception as err: | CODE |
| LOW | yt_dlp/utils/jslib/devalue.py | 66 | except Exception as error: | CODE |
| LOW | yt_dlp/utils/jslib/devalue.py | 103 | except Exception: | CODE |
| LOW | yt_dlp/utils/jslib/devalue.py | 141 | except Exception as error: | CODE |
| LOW | yt_dlp/utils/jslib/devalue.py | 209 | except Exception as error: | CODE |
| LOW | yt_dlp/extractor/common.py | 3901 | except Exception as e: | CODE |
| LOW | yt_dlp/extractor/openload.py | 238 | except Exception as e: | STRING |
| LOW | yt_dlp/extractor/wwe.py | 132 | except Exception: | CODE |
| LOW | yt_dlp/extractor/youtube/pot/_director.py | 131 | except Exception as e: | CODE |
| LOW | yt_dlp/extractor/youtube/pot/_director.py | 194 | except Exception as e: | CODE |
| LOW | yt_dlp/extractor/youtube/pot/_director.py | 241 | except Exception as e: | CODE |
| LOW | yt_dlp/extractor/youtube/pot/_director.py | 305 | except Exception as e: | CODE |
| LOW | yt_dlp/extractor/youtube/jsc/_director.py | 137 | except Exception as e: | CODE |
| LOW | yt_dlp/extractor/youtube/jsc/_builtin/ejs.py | 271 | except Exception as e: | STRING |
| MEDIUM | test/test_networking.py | 1156 | def mock_read(*args, **kwargs): | CODE |
| MEDIUM | test/test_networking.py | 1192 | def request(*_, **__): | CODE |
| 9 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | yt_dlp/cookies.py | 1285 | # This file is generated by yt-dlp. Do not edit. | COMMENT |
| MEDIUM | yt_dlp/networking/common.py | 581 | # The following methods are for compatability reasons and are deprecated | COMMENT |
| MEDIUM | yt_dlp/extractor/youtube/_video.py | 3912 | # This function is also used by live-from-start refresh | COMMENT |
| MEDIUM | test/test_update.py | 79 | TEST_LOCKFILE_COMMENT = '# This file is used for regulating self-update' | CODE |
| MEDIUM | .github/workflows/build.yml | 543 | # This file is used for regulating self-update | COMMENT |
| MEDIUM | devscripts/update_requirements.py | 59 | # This file is generated by devscripts/update_requirements.py. DO NOT MODIFY! | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/update.py | 275 | # Check if requested_tag is actually the requested repo/channel | COMMENT |
| LOW | yt_dlp/update.py | 300 | # Check if requested_channel resolves to a known repository or else raise | COMMENT |
| LOW | yt_dlp/extractor/reddit.py | 277 | # Set cookie to opt-in to age-restricted subreddits | COMMENT |
| LOW | yt_dlp/extractor/reddit.py | 279 | # Set cookie to opt-in to "gated" subreddits | COMMENT |
| LOW | yt_dlp/extractor/reddit.py | 395 | # Check if media is hosted on reddit: | COMMENT |
| LOW | yt_dlp/extractor/rai.py | 192 | # Check if MP4 download is available | COMMENT |
| LOW | yt_dlp/extractor/youtube/jsc/_builtin/deno.py | 66 | # Check if npm packages are cached, so we can run without --remote-components ejs:npm | COMMENT |
| LOW | test/test_download.py | 174 | # Check if the exception is not a network related one | COMMENT |
| LOW | .github/workflows/core.yml | 90 | # Check if a networking file is involved | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | yt_dlp/networking/_urllib.py | 133 | # To work around aforementioned issue we will replace request's original URL with | COMMENT |
| MEDIUM | yt_dlp/extractor/netapp.py | 23 | 'url': 'https://media.netapp.com/video-detail/da25fc01-82ad-5284-95bc-26920200a222/seamless-storage-for-modern-k | CODE |
| MEDIUM | test/test_networking.py | 426 | # This isn't a comprehensive test, | COMMENT |
| MEDIUM | test/test_websockets.py | 229 | # This isn't a comprehensive test, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/update.py | 644 | __all__ = ['Updater'] | CODE |
| LOW | yt_dlp/plugins.py | 42 | __all__ = [ | CODE |
| LOW | yt_dlp/aes.py | 534 | __all__ = [ | CODE |
| LOW | yt_dlp/__init__.py | 1108 | __all__ = [ | STRING |
| LOW | yt_dlp/dependencies/__init__.py | 98 | __all__ = [ | CODE |
| LOW | yt_dlp/downloader/__init__.py | 126 | __all__ = [ | CODE |
| LOW | yt_dlp/extractor/youtube/pot/provider.py | 25 | __all__ = [ | CODE |
| LOW | yt_dlp/extractor/youtube/pot/utils.py | 14 | __all__ = ['WEBPO_CLIENTS', 'ContentBindingType', 'get_webpo_content_binding'] | CODE |
| LOW | yt_dlp/extractor/youtube/jsc/provider.py | 19 | __all__ = [ | CODE |
| LOW | test/testdata/yt_dlp_plugins/extractor/ignore.py | 13 | __all__ = ['InAllPluginIE'] | CODE |
| LOW | devscripts/make_changelog.py | 25 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/test_subtitles.py | 337 | CODE | |
| MEDIUM | test/test_subtitles.py | 338 | CODE | |
| MEDIUM | test/test_subtitles.py | 339 | CODE | |
| MEDIUM | test/test_subtitles.py | 340 | CODE | |
| MEDIUM | test/test_subtitles.py | 341 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/networking/_urllib.py | 121 | def gz(data): | COMMENT |
| LOW | yt_dlp/networking/_helper.py | 121 | ssl_load_certs(context, use_certifi) | COMMENT |
| LOW | yt_dlp/downloader/hls.py | 41 | def can_download(cls, manifest, info_dict, allow_unplayable_formats=False): | COMMENT |
| LOW | yt_dlp/extractor/jamendo.py | 61 | track_id, display_id = self._match_valid_url(url).groups() | COMMENT |
| LOW | yt_dlp/extractor/common.py | 2421 | # However, this is not always respected. E.g. [2] | COMMENT |
| LOW | yt_dlp/extractor/turner.py | 81 | continue | COMMENT |
| LOW | yt_dlp/extractor/youtube/pot/README.md | 301 | COMMENT | |
| LOW | test/test_subtitles.py | 61 | # Language formats | COMMENT |
| LOW | test/testdata/cookies/httponly_cookies.txt | 1 | # Netscape HTTP Cookie File | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/networking/common.py | 223 | CODE | |
| LOW | yt_dlp/extractor/common.py | 864 | CODE | |
| LOW | yt_dlp/extractor/common.py | 924 | CODE | |
| LOW | yt_dlp/extractor/common.py | 2027 | CODE | |
| LOW | yt_dlp/extractor/common.py | 2176 | CODE | |
| LOW | yt_dlp/extractor/common.py | 2223 | CODE | |
| LOW | yt_dlp/extractor/common.py | 1102 | CODE | |
| LOW | yt_dlp/extractor/common.py | 1114 | CODE | |
| LOW | yt_dlp/extractor/youtube/_base.py | 832 | CODE | |
| LOW | yt_dlp/extractor/youtube/_base.py | 1283 | CODE | |
| LOW | yt_dlp/extractor/youtube/_video.py | 2750 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/jsinterp.py | 119 | # TODO: implement special cases | COMMENT |
| LOW | yt_dlp/utils/_utils.py | 543 | # TODO: Write tests | STRING |
| LOW | yt_dlp/utils/jslib/devalue.py | 89 | # TODO: implement zips `strict=True` | COMMENT |
| LOW | yt_dlp/extractor/tubetugraz.py | 120 | # TODO: Add test for these | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/extractor/radiko.py | 47 | 'x-radiko-user': 'dummy_user', | CODE |
| LOW | yt_dlp/extractor/radiko.py | 61 | 'x-radiko-user': 'dummy_user', | CODE |
| LOW | test/test_utils.py | 814 | data = urlencode_postdata({'username': 'foo@bar.com', 'password': '1234'}) | CODE |
| LOW | test/test_utils.py | 1908 | random text lorem ipsum</p> | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/extractor/goplay.py | 207 | # Step 1: First initiate an authentication request | COMMENT |
| LOW | yt_dlp/extractor/goplay.py | 223 | # Step 2: Respond to the Challenge with a valid ChallengeResponse | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | yt_dlp/extractor/goplay.py | 207 | # Step 1: First initiate an authentication request | COMMENT |
| LOW | yt_dlp/extractor/goplay.py | 223 | # Step 2: Respond to the Challenge with a valid ChallengeResponse | COMMENT |