{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T15:14:56.001530Z","repo":{"ref":{"host":"github.com","owner":"BVLC","name":"caffe"},"default_branch":"master","clone_url":"https://github.com/BVLC/caffe.git","html_url":"https://github.com/BVLC/caffe","description":"Caffe: a fast open framework for deep learning.","stars":34555,"forks":18372,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":76170,"primary_language":"C++","license_spdx":"NOASSERTION","created_at":"2013-09-12T18:39:48Z","pushed_at":"2024-07-31T23:10:28Z","security_policy_url":null,"distribution":{"owner_created_at":"2013-12-13T23:56:21Z","owner_type":"Organization","release_assets":[]}},"commit_sha":"9b891540183ddc834a02b2bd81b31afae71b2153","profile":{"lines_by_language":{"C++":62441,"C":19561,"Python":9775,"Objective-C":926,"Shell":914},"files_by_category":{"source":314,"other":169,"docs":113,"test":81,"binary":15,"config":6,"oversized":3},"source_lines":68192,"test_lines":25425},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0,"style_index":0.164},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":58.4,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":59.7,"duplication":38.9,"lint":84.2,"testing":59.9,"docs":80.0,"type_safety":40.0,"process":30.0},"summary":"Code quality is weak: test-to-source ratio 0.37, no CI test run detected; 17% of function code in complex or long functions; 16% duplicated lines. Weakest area: process."},"security":{"score":61.9,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":99.0,"dependencies":29.1,"ci_actions":null,"posture":0.0,"scorecard":20.0},"summary":"Security posture is weak: 105 known vulnerabilities in 7 dependencies; 1 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"ok","tool_version":"scorecard v5.6.0","metrics":{"aggregate":2.6,"check:Code-Review":6.0,"check:Maintained":0.0,"check:Binary-Artifacts":10.0,"check:CII-Best-Practices":0.0,"check:Security-Policy":0.0,"check:License":9.0,"check:Fuzzing":0.0,"check:Pinned-Dependencies":0.0,"check:Branch-Protection":0.0,"check:SAST":0.0},"findings":[],"evidence":[{"kind":"scorecard-check","description":"Scorecard Code-Review: 6/10 (Found 9/14 approved changesets -- score normalized to 6)","ref":"Code-Review","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":0.4},{"kind":"scorecard-check","description":"Scorecard Maintained: 0/10 (0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0)","ref":"Maintained","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Binary-Artifacts: 10/10 (no binaries found in the repo)","ref":"Binary-Artifacts","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":0.0},{"kind":"scorecard-check","description":"Scorecard CII-Best-Practices: 0/10 (no effort to earn an OpenSSF best practices badge detected)","ref":"CII-Best-Practices","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Security-Policy: 0/10 (security policy file not detected)","ref":"Security-Policy","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":1.0},{"kind":"scorecard-check","description":"Scorecard License: 9/10 (license file detected)","ref":"License","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":0.1},{"kind":"scorecard-check","description":"Scorecard Fuzzing: 0/10 (project is not fuzzed)","ref":"Fuzzing","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Pinned-Dependencies: 0/10 (dependency not pinned by hash detected -- score normalized to 0)","ref":"Pinned-Dependencies","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Branch-Protection: 0/10 (branch protection not enabled on development/release branches)","ref":"Branch-Protection","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":1.0},{"kind":"scorecard-check","description":"Scorecard SAST: 0/10 (SAST tool is not run on all commits -- score normalized to 0)","ref":"SAST","url":"https://scorecard.dev/viewer/?uri=github.com/BVLC/caffe","weight":1.0}],"data":{"date":"2026-10-19","commit":"9b891540183ddc834a02b2bd81b31afae71b2153","matches_head":true},"error":null},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":17.0,"checked":17.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":3112.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":150121.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2013-09":{"loc":36409,"attributed_loc":0},"2013-10":{"loc":3889,"attributed_loc":0},"2013-11":{"loc":1689,"attributed_loc":0},"2013-12":{"loc":825,"attributed_loc":0},"2014-01":{"loc":971,"attributed_loc":0},"2014-02":{"loc":14322,"attributed_loc":0},"2014-03":{"loc":9481,"attributed_loc":0},"2014-04":{"loc":4462,"attributed_loc":0},"2014-05":{"loc":2855,"attributed_loc":0},"2014-06":{"loc":4803,"attributed_loc":0},"2014-07":{"loc":7564,"attributed_loc":0},"2014-08":{"loc":7064,"attributed_loc":0},"2014-09":{"loc":8076,"attributed_loc":0},"2014-10":{"loc":6626,"attributed_loc":0},"2014-11":{"loc":1579,"attributed_loc":0},"2014-12":{"loc":1368,"attributed_loc":0},"2015-01":{"loc":4449,"attributed_loc":0},"2015-02":{"loc":3679,"attributed_loc":0},"2015-03":{"loc":2363,"attributed_loc":0},"2015-04":{"loc":761,"attributed_loc":0},"2015-05":{"loc":4378,"attributed_loc":0},"2015-06":{"loc":319,"attributed_loc":0},"2015-07":{"loc":2032,"attributed_loc":0},"2015-08":{"loc":1681,"attributed_loc":0},"2015-09":{"loc":2124,"attributed_loc":0},"2015-10":{"loc":803,"attributed_loc":0},"2015-11":{"loc":4908,"attributed_loc":0},"2015-12":{"loc":768,"attributed_loc":0},"2016-01":{"loc":2849,"attributed_loc":0},"2016-02":{"loc":732,"attributed_loc":0},"2016-03":{"loc":624,"attributed_loc":0},"2016-04":{"loc":1056,"attributed_loc":0},"2016-05":{"loc":379,"attributed_loc":0},"2016-06":{"loc":544,"attributed_loc":0},"2016-07":{"loc":84,"attributed_loc":0},"2016-08":{"loc":107,"attributed_loc":0},"2016-09":{"loc":61,"attributed_loc":0},"2016-10":{"loc":16,"attributed_loc":0},"2016-11":{"loc":372,"attributed_loc":0},"2016-12":{"loc":45,"attributed_loc":0},"2017-01":{"loc":798,"attributed_loc":0},"2017-02":{"loc":0,"attributed_loc":0},"2017-03":{"loc":150,"attributed_loc":0},"2017-04":{"loc":97,"attributed_loc":0},"2017-05":{"loc":8,"attributed_loc":0},"2017-06":{"loc":6,"attributed_loc":0},"2017-07":{"loc":0,"attributed_loc":0},"2017-08":{"loc":217,"attributed_loc":0},"2017-09":{"loc":706,"attributed_loc":0},"2017-10":{"loc":98,"attributed_loc":0},"2017-11":{"loc":1,"attributed_loc":0},"2017-12":{"loc":51,"attributed_loc":0},"2018-01":{"loc":21,"attributed_loc":0},"2018-02":{"loc":14,"attributed_loc":0},"2018-03":{"loc":773,"attributed_loc":0},"2018-04":{"loc":41,"attributed_loc":0},"2018-05":{"loc":4,"attributed_loc":0},"2018-07":{"loc":17,"attributed_loc":0},"2018-08":{"loc":1,"attributed_loc":0},"2019-03":{"loc":0,"attributed_loc":0},"2019-12":{"loc":1,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"work_units":1457.0,"flagged_units":0.0,"pre_ai_era_bursts":3.0,"pre_ai_era_measured_loc":116863.0,"pre_ai_era_burst_loc":7554.0,"measured_loc":116863.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":951.6421851790725,"median_loc_per_hour":60.339205186020294,"pr_timed_units":6.0,"excluded_import_loc":33258.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["300f43f3ae6347ac8e01093f9a57ee99e551ed74","746599ae0d58c664cbdaed4d36358a137597fad6"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"releases":13.0,"flagged_releases":0.0,"max_loc_per_day":457.7},"findings":[],"evidence":[],"data":{"releases":[{"from":"v0.1","to":"bsd","loc":4744,"days":102.85,"loc_per_day":46.1,"flagged":false},{"from":"bsd","to":"v0.9","loc":4580,"days":36.88,"loc_per_day":124.2,"flagged":false},{"from":"v0.9","to":"rcnn-release","loc":9693,"days":21.18,"loc_per_day":457.7,"flagged":false},{"from":"rcnn-release","to":"v0.99","loc":15,"days":0.07,"loc_per_day":212.3,"flagged":false},{"from":"v0.99","to":"v0.999","loc":16470,"days":61.66,"loc_per_day":267.1,"flagged":false},{"from":"v0.999","to":"acm-mm-oss","loc":9,"days":2.79,"loc_per_day":3.2,"flagged":false},{"from":"acm-mm-oss","to":"v0.9999","loc":13115,"days":77.11,"loc_per_day":170.1,"flagged":false},{"from":"v0.9999","to":"rc","loc":12227,"days":41.43,"loc_per_day":295.1,"flagged":false},{"from":"rc","to":"rc2","loc":15740,"days":154.62,"loc_per_day":101.8,"flagged":false},{"from":"rc2","to":"rc3","loc":21637,"days":343.28,"loc_per_day":63.0,"flagged":false},{"from":"rc3","to":"rc4","loc":6912,"days":355.88,"loc_per_day":19.4,"flagged":false},{"from":"rc4","to":"rc5","loc":56,"days":32.16,"loc_per_day":1.7,"flagged":false},{"from":"rc5","to":"1.0","loc":586,"days":53.51,"loc_per_day":11.0,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":48655.0,"index":0.164,"count:narrated_steps":6.0,"per_kloc:narrated_steps":0.123,"files:narrated_steps":6.0,"count:placeholder":1.0,"per_kloc:placeholder":0.021,"files:placeholder":1.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:placeholder","description":"placeholder or demo-only phrasing: % For demo purposes we will use the cat image","ref":"matlab/demo/classification_demo.m:88","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/matlab/demo/classification_demo.m#L88","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # Next, we complain if there's a comment too near the text","ref":"scripts/cpp_lint.py:2746","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/scripts/cpp_lint.py#L2746","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // first, compute diff_i * y_i / s_i","ref":"src/caffe/layers/lrn_layer.cpp:204","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/layers/lrn_layer.cpp#L204","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // First, compute the diff","ref":"src/caffe/layers/sigmoid_cross_entropy_loss_layer.cpp:112","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/layers/sigmoid_cross_entropy_loss_layer.cpp#L112","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // Finally, set the backward flag","ref":"src/caffe/net.cpp:157","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/net.cpp#L157","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // finally, merge in any NetState specified by the train_state (highest","ref":"src/caffe/solver.cpp:108","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/solver.cpp#L108","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // First, print c as a literal in the most readable form we can find.","ref":"src/gtest/gtest-all.cpp:8766","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/gtest/gtest-all.cpp#L8766","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":4.0,"findings_high":1.0,"findings_medium":3.0,"findings_low":0.0,"weighted_findings":1.85,"scanned_lines":67266.0,"parse_errors":1.0},"findings":[{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"tools/extra/plot_training_log.py.example","line":113,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:tools/extra/plot_training_log.py.example:113"},{"rule_id":"opengrep/python.lang.security.insecure-hash-algorithm-sha1","severity":"medium","message":"Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead. [confidence medium]","path":"scripts/download_model_binary.py","line":65,"fingerprint":"python.lang.security.insecure-hash-algorithm-sha1:scripts/download_model_binary.py:65"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"scripts/download_model_binary.py","line":73,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:scripts/download_model_binary.py:73"},{"rule_id":"opengrep/c.lang.security.insecure-use-string-copy-fn","severity":"medium","message":"Finding triggers whenever there is a strcpy or strncpy used. This is an issue because strcpy does not affirm the size of the destination array and strncpy will not automatically NULL-terminate strings. This can lead to buffer overflows, which can cause program crashes and potentially let an attacker [confidence low]","path":"src/gtest/gtest.h","line":2672,"fingerprint":"c.lang.security.insecure-use-string-copy-fn:src/gtest/gtest.h:2672"}],"evidence":[],"data":{"rulesets":["c","python","bash","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":7.0,"vulnerabilities":105.0,"vulns_critical":19.0,"vulns_high":56.0,"vulns_medium":16.0,"vulns_low":0.0,"vulns_unknown":14.0,"penalty":74.0},"findings":[{"rule_id":"osv/GHSA-8m9x-pxwq-j236","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2014-87, GHSA-8m9x-pxwq-j236","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-8m9x-pxwq-j236"},{"rule_id":"osv/GHSA-hvr8-466p-75rh","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2016-7, GHSA-hvr8-466p-75rh","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-hvr8-466p-75rh"},{"rule_id":"osv/GHSA-43fq-w8qq-v88h","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-80, GHSA-43fq-w8qq-v88h","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-43fq-w8qq-v88h"},{"rule_id":"osv/GHSA-vcqg-3p29-xw73","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-81, GHSA-vcqg-3p29-xw73","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-vcqg-3p29-xw73"},{"rule_id":"osv/GHSA-r7rm-8j6h-r933","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-82, GHSA-r7rm-8j6h-r933","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-r7rm-8j6h-r933"},{"rule_id":"osv/GHSA-p49h-hjvm-jg3h","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-83, GHSA-p49h-hjvm-jg3h","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-p49h-hjvm-jg3h"},{"rule_id":"osv/GHSA-7534-mm45-c74v","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-331, GHSA-7534-mm45-c74v","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-7534-mm45-c74v"},{"rule_id":"osv/GHSA-57h3-9rgr-c24m","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-35, GHSA-57h3-9rgr-c24m","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-57h3-9rgr-c24m"},{"rule_id":"osv/GHSA-8vj2-vxx3-667w","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2022-10, GHSA-8vj2-vxx3-667w","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-8vj2-vxx3-667w"},{"rule_id":"osv/GHSA-9j59-75qj-795w","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2022-168, GHSA-9j59-75qj-795w","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-9j59-75qj-795w"},{"rule_id":"osv/GHSA-5x8w-8jj5-q52h","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4330, GHSA-5x8w-8jj5-q52h","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-5x8w-8jj5-q52h"},{"rule_id":"osv/GHSA-8g5g-8vmr-9782","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4332, GHSA-8g5g-8vmr-9782","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-8g5g-8vmr-9782"},{"rule_id":"osv/PYSEC-2026-4363","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4363","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2026-4363"},{"rule_id":"osv/GHSA-3f63-hfp8-52jq","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-457, GHSA-3f63-hfp8-52jq","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-3f63-hfp8-52jq"},{"rule_id":"osv/GHSA-332p-7hrc-92wf","severity":"critical","message":"pillow@2.3.0 (PyPI) is affected by GHSA-332p-7hrc-92wf","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-332p-7hrc-92wf"},{"rule_id":"osv/GHSA-92mr-v722-f48m","severity":"critical","message":"ipython@3.0.0 (PyPI) is affected by PYSEC-2015-25, GHSA-92mr-v722-f48m","path":"python/requirements.txt","line":null,"fingerprint":"ipython@3.0.0 (PyPI):GHSA-92mr-v722-f48m"},{"rule_id":"osv/GHSA-9fq2-x9r6-wfmf","severity":"critical","message":"numpy@1.7.1 (PyPI) is affected by PYSEC-2019-108, GHSA-9fq2-x9r6-wfmf","path":"python/requirements.txt","line":null,"fingerprint":"numpy@1.7.1 (PyPI):GHSA-9fq2-x9r6-wfmf"},{"rule_id":"osv/GHSA-rprw-h62v-c2w7","severity":"critical","message":"pyyaml@3.10 (PyPI) is affected by PYSEC-2018-49, GHSA-rprw-h62v-c2w7","path":"python/requirements.txt","line":null,"fingerprint":"pyyaml@3.10 (PyPI):GHSA-rprw-h62v-c2w7"},{"rule_id":"osv/GHSA-8q59-q68h-6hv4","severity":"critical","message":"pyyaml@3.10 (PyPI) is affected by PYSEC-2021-142, GHSA-8q59-q68h-6hv4","path":"python/requirements.txt","line":null,"fingerprint":"pyyaml@3.10 (PyPI):GHSA-8q59-q68h-6hv4"},{"rule_id":"osv/GHSA-cfmr-38g9-f2h7","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2014-10, GHSA-cfmr-38g9-f2h7","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-cfmr-38g9-f2h7"},{"rule_id":"osv/GHSA-x895-2wrm-hvp7","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2014-22, GHSA-x895-2wrm-hvp7","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-x895-2wrm-hvp7"},{"rule_id":"osv/GHSA-j6f7-g425-4gmx","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2015-15, GHSA-j6f7-g425-4gmx","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-j6f7-g425-4gmx"},{"rule_id":"osv/GHSA-h5rf-vgqx-wjv2","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2015-16, GHSA-h5rf-vgqx-wjv2","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-h5rf-vgqx-wjv2"},{"rule_id":"osv/GHSA-3c5c-7235-994j","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2016-19, GHSA-3c5c-7235-994j","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-3c5c-7235-994j"},{"rule_id":"osv/GHSA-8xjv-v9xq-m5h9","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2016-6, GHSA-8xjv-v9xq-m5h9","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-8xjv-v9xq-m5h9"},{"rule_id":"osv/GHSA-w4vg-rf63-f3j3","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2016-9, GHSA-w4vg-rf63-f3j3","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-w4vg-rf63-f3j3"},{"rule_id":"osv/GHSA-j7mj-748x-7p78","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2019-110, GHSA-j7mj-748x-7p78","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-j7mj-748x-7p78"},{"rule_id":"osv/GHSA-5gm3-px64-rw72","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-172, GHSA-5gm3-px64-rw72","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-5gm3-px64-rw72"},{"rule_id":"osv/GHSA-cqhg-xjhh-p8hf","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-76, GHSA-cqhg-xjhh-p8hf","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-cqhg-xjhh-p8hf"},{"rule_id":"osv/GHSA-3xv8-3j54-hgrp","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-77, GHSA-3xv8-3j54-hgrp","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-3xv8-3j54-hgrp"},{"rule_id":"osv/GHSA-8843-m7mw-mxqm","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-78, GHSA-8843-m7mw-mxqm","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-8843-m7mw-mxqm"},{"rule_id":"osv/GHSA-vj42-xq3r-hr3r","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-79, GHSA-vj42-xq3r-hr3r","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-vj42-xq3r-hr3r"},{"rule_id":"osv/GHSA-hj69-c76v-86wr","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2020-84, GHSA-hj69-c76v-86wr","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-hj69-c76v-86wr"},{"rule_id":"osv/GHSA-g6rj-rv7j-xwp4","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-139, GHSA-g6rj-rv7j-xwp4","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-g6rj-rv7j-xwp4"},{"rule_id":"osv/GHSA-8xjq-8fcg-g5hw","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-36, GHSA-8xjq-8fcg-g5hw","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-8xjq-8fcg-g5hw"},{"rule_id":"osv/GHSA-mvg9-xffr-p774","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-37, GHSA-mvg9-xffr-p774","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-mvg9-xffr-p774"},{"rule_id":"osv/GHSA-f4w8-cv6p-x6r5","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-40, GHSA-f4w8-cv6p-x6r5","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-f4w8-cv6p-x6r5"},{"rule_id":"osv/GHSA-3wvg-mj6g-m9cv","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-41, GHSA-3wvg-mj6g-m9cv","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-3wvg-mj6g-m9cv"},{"rule_id":"osv/GHSA-95q3-8gr9-gm8w","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-42, GHSA-95q3-8gr9-gm8w","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-95q3-8gr9-gm8w"},{"rule_id":"osv/GHSA-f5g8-5qq7-938w","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-69, GHSA-f5g8-5qq7-938w","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-f5g8-5qq7-938w"},{"rule_id":"osv/GHSA-vqcj-wrf2-7v73","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-70, GHSA-vqcj-wrf2-7v73","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-vqcj-wrf2-7v73"},{"rule_id":"osv/GHSA-7r7m-5h27-29hp","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-92, GHSA-7r7m-5h27-29hp","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-7r7m-5h27-29hp"},{"rule_id":"osv/GHSA-q5hq-fp76-qmrc","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-93, GHSA-q5hq-fp76-qmrc","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-q5hq-fp76-qmrc"},{"rule_id":"osv/GHSA-m2vv-5vj5-2hm7","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2022-42979, GHSA-m2vv-5vj5-2hm7","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-m2vv-5vj5-2hm7"},{"rule_id":"osv/GHSA-8ghj-p4vj-mr35","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2023-227, GHSA-8ghj-p4vj-mr35","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-8ghj-p4vj-mr35"},{"rule_id":"osv/GHSA-44wm-f244-xhp3","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-1793, GHSA-44wm-f244-xhp3","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-44wm-f244-xhp3"},{"rule_id":"osv/GHSA-j7hp-h8jx-5ppr","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-1794, GHSA-j7hp-h8jx-5ppr","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-j7hp-h8jx-5ppr"},{"rule_id":"osv/GHSA-8v84-f9pq-wr9x","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-2253, GHSA-8v84-f9pq-wr9x","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-8v84-f9pq-wr9x"},{"rule_id":"osv/GHSA-5x94-69rx-g8h2","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-2254, GHSA-5x94-69rx-g8h2","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-5x94-69rx-g8h2"},{"rule_id":"osv/GHSA-45hq-cxwh-f6vc","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-2255, GHSA-45hq-cxwh-f6vc","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-45hq-cxwh-f6vc"},{"rule_id":"osv/GHSA-phj9-mv4w-65pm","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-2256, GHSA-phj9-mv4w-65pm","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-phj9-mv4w-65pm"},{"rule_id":"osv/GHSA-6r8x-57c9-28j4","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-3451, GHSA-6r8x-57c9-28j4","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-6r8x-57c9-28j4"},{"rule_id":"osv/GHSA-9hw9-ch79-4vh6","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-3453, GHSA-9hw9-ch79-4vh6","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-9hw9-ch79-4vh6"},{"rule_id":"osv/GHSA-xj96-63gp-2gmr","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-3454, GHSA-xj96-63gp-2gmr","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-xj96-63gp-2gmr"},{"rule_id":"osv/GHSA-62p4-gmf7-7g93","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-3493, GHSA-62p4-gmf7-7g93","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-62p4-gmf7-7g93"},{"rule_id":"osv/GHSA-27h8-gf7j-v5hc","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4326, GHSA-27h8-gf7j-v5hc","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-27h8-gf7j-v5hc"},{"rule_id":"osv/GHSA-4558-3h8r-v8xp","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4327, GHSA-4558-3h8r-v8xp","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-4558-3h8r-v8xp"},{"rule_id":"osv/GHSA-58r4-6rv3-gfh8","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4329, GHSA-58r4-6rv3-gfh8","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-58r4-6rv3-gfh8"},{"rule_id":"osv/GHSA-7mwm-ghpf-9vrm","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4331, GHSA-7mwm-ghpf-9vrm","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-7mwm-ghpf-9vrm"},{"rule_id":"osv/GHSA-pchr-8j38-3x4p","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4334, GHSA-pchr-8j38-3x4p","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-pchr-8j38-3x4p"},{"rule_id":"osv/GHSA-xgh8-jp6q-p5x8","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4335, GHSA-xgh8-jp6q-p5x8","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-xgh8-jp6q-p5x8"},{"rule_id":"osv/GHSA-g842-9rc4-69pw","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4338, GHSA-g842-9rc4-69pw","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-g842-9rc4-69pw"},{"rule_id":"osv/GHSA-3j72-p6qg-6xp7","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4341, GHSA-3j72-p6qg-6xp7","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-3j72-p6qg-6xp7"},{"rule_id":"osv/GHSA-9v9v-9qvf-h2hj","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4343, GHSA-9v9v-9qvf-h2hj","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-9v9v-9qvf-h2hj"},{"rule_id":"osv/GHSA-xcvg-w56q-r89m","severity":"high","message":"pillow@2.3.0 (PyPI) is affected by GHSA-xcvg-w56q-r89m","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-xcvg-w56q-r89m"},{"rule_id":"osv/GHSA-7fc2-rm35-2pp7","severity":"high","message":"ipython@3.0.0 (PyPI) is affected by PYSEC-2017-47, GHSA-7fc2-rm35-2pp7","path":"python/requirements.txt","line":null,"fingerprint":"ipython@3.0.0 (PyPI):GHSA-7fc2-rm35-2pp7"},{"rule_id":"osv/GHSA-pq7m-3gw7-gq5x","severity":"high","message":"ipython@3.0.0 (PyPI) is affected by PYSEC-2022-12, GHSA-pq7m-3gw7-gq5x","path":"python/requirements.txt","line":null,"fingerprint":"ipython@3.0.0 (PyPI):GHSA-pq7m-3gw7-gq5x"},{"rule_id":"osv/GHSA-frgw-fgh6-9g52","severity":"high","message":"numpy@1.7.1 (PyPI) is affected by PYSEC-2017-1, GHSA-frgw-fgh6-9g52","path":"python/requirements.txt","line":null,"fingerprint":"numpy@1.7.1 (PyPI):GHSA-frgw-fgh6-9g52"},{"rule_id":"osv/GHSA-cw6w-4rcx-xphc","severity":"high","message":"numpy@1.7.1 (PyPI) is affected by PYSEC-2018-33, GHSA-cw6w-4rcx-xphc","path":"python/requirements.txt","line":null,"fingerprint":"numpy@1.7.1 (PyPI):GHSA-cw6w-4rcx-xphc"},{"rule_id":"osv/GHSA-2fc2-6r4j-p65h","severity":"high","message":"numpy@1.7.1 (PyPI) is affected by PYSEC-2018-34, GHSA-2fc2-6r4j-p65h","path":"python/requirements.txt","line":null,"fingerprint":"numpy@1.7.1 (PyPI):GHSA-2fc2-6r4j-p65h"},{"rule_id":"osv/GHSA-5545-2q6w-2gh6","severity":"high","message":"numpy@1.7.1 (PyPI) is affected by PYSEC-2021-856, GHSA-5545-2q6w-2gh6","path":"python/requirements.txt","line":null,"fingerprint":"numpy@1.7.1 (PyPI):GHSA-5545-2q6w-2gh6"},{"rule_id":"osv/GHSA-jwvw-v7c5-m82h","severity":"high","message":"protobuf@2.5.0 (PyPI) is affected by PYSEC-2017-65, GHSA-jwvw-v7c5-m82h","path":"python/requirements.txt","line":null,"fingerprint":"protobuf@2.5.0 (PyPI):GHSA-jwvw-v7c5-m82h"},{"rule_id":"osv/GHSA-7gcm-g887-7qv7","severity":"high","message":"protobuf@2.5.0 (PyPI) is affected by PYSEC-2026-1805, GHSA-7gcm-g887-7qv7","path":"python/requirements.txt","line":null,"fingerprint":"protobuf@2.5.0 (PyPI):GHSA-7gcm-g887-7qv7"},{"rule_id":"osv/GHSA-8qvm-5x2c-j2w7","severity":"high","message":"protobuf@2.5.0 (PyPI) is affected by PYSEC-2026-1806, GHSA-8qvm-5x2c-j2w7","path":"python/requirements.txt","line":null,"fingerprint":"protobuf@2.5.0 (PyPI):GHSA-8qvm-5x2c-j2w7"},{"rule_id":"osv/GHSA-8gq9-2x98-w8hf","severity":"high","message":"protobuf@2.5.0 (PyPI) is affected by PYSEC-2026-899, GHSA-8gq9-2x98-w8hf","path":"python/requirements.txt","line":null,"fingerprint":"protobuf@2.5.0 (PyPI):GHSA-8gq9-2x98-w8hf"},{"rule_id":"osv/GHSA-r854-96gq-rfg3","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2014-23, GHSA-r854-96gq-rfg3","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-r854-96gq-rfg3"},{"rule_id":"osv/GHSA-hggx-3h72-49ww","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2016-5, GHSA-hggx-3h72-49ww","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-hggx-3h72-49ww"},{"rule_id":"osv/GHSA-rwr3-c2q8-gm56","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2016-8, GHSA-rwr3-c2q8-gm56","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-rwr3-c2q8-gm56"},{"rule_id":"osv/PYSEC-2021-137","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-137","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2021-137"},{"rule_id":"osv/PYSEC-2021-138","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-138","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2021-138"},{"rule_id":"osv/PYSEC-2021-317","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-317","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2021-317"},{"rule_id":"osv/PYSEC-2021-38","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-38","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2021-38"},{"rule_id":"osv/PYSEC-2021-39","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-39","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2021-39"},{"rule_id":"osv/PYSEC-2021-94","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2021-94","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2021-94"},{"rule_id":"osv/PYSEC-2022-42980","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2022-42980","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2022-42980"},{"rule_id":"osv/GHSA-pw3c-h7wp-cvhx","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2022-8, GHSA-pw3c-h7wp-cvhx","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-pw3c-h7wp-cvhx"},{"rule_id":"osv/GHSA-xrcv-f9gm-v42c","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2022-9, GHSA-xrcv-f9gm-v42c","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-xrcv-f9gm-v42c"},{"rule_id":"osv/PYSEC-2023-175","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2023-175","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):PYSEC-2023-175"},{"rule_id":"osv/GHSA-wjx4-4jcj-g98j","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-165, GHSA-wjx4-4jcj-g98j","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-wjx4-4jcj-g98j"},{"rule_id":"osv/GHSA-4x4j-2g7c-83w6","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-2257, GHSA-4x4j-2g7c-83w6","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-4x4j-2g7c-83w6"},{"rule_id":"osv/GHSA-p8hx-v2p6-rp84","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4337, GHSA-p8hx-v2p6-rp84","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-p8hx-v2p6-rp84"},{"rule_id":"osv/GHSA-4rm8-3hmm-39fg","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by PYSEC-2026-4340, GHSA-4rm8-3hmm-39fg","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-4rm8-3hmm-39fg"},{"rule_id":"osv/GHSA-4fx9-vc88-q2xc","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by GHSA-4fx9-vc88-q2xc","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-4fx9-vc88-q2xc"},{"rule_id":"osv/GHSA-vx6w-vv9f-6gvg","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by GHSA-vx6w-vv9f-6gvg","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-vx6w-vv9f-6gvg"},{"rule_id":"osv/GHSA-wqgw-9xfh-qf2g","severity":"medium","message":"pillow@2.3.0 (PyPI) is affected by GHSA-wqgw-9xfh-qf2g","path":"python/requirements.txt","line":null,"fingerprint":"pillow@2.3.0 (PyPI):GHSA-wqgw-9xfh-qf2g"},{"rule_id":"osv/GHSA-4vwq-x64q-j4cj","severity":"medium","message":"ipython@3.0.0 (PyPI) is affected by PYSEC-2015-24, GHSA-4vwq-x64q-j4cj","path":"python/requirements.txt","line":null,"fingerprint":"ipython@3.0.0 (PyPI):GHSA-4vwq-x64q-j4cj"},{"rule_id":"osv/GHSA-q326-jhw3-699g","severity":"medium","message":"ipython@3.0.0 (PyPI) is affected by PYSEC-2017-45, GHSA-q326-jhw3-699g","path":"python/requirements.txt","line":null,"fingerprint":"ipython@3.0.0 (PyPI):GHSA-q326-jhw3-699g"},{"rule_id":"osv/GHSA-66gw-5xpf-gfp5","severity":"medium","message":"ipython@3.0.0 (PyPI) is affected by PYSEC-2017-46, GHSA-66gw-5xpf-gfp5","path":"python/requirements.txt","line":null,"fingerprint":"ipython@3.0.0 (PyPI):GHSA-66gw-5xpf-gfp5"},{"rule_id":"osv/GHSA-29gw-9793-fvw7","severity":"medium","message":"ipython@3.0.0 (PyPI) is affected by PYSEC-2023-17, GHSA-29gw-9793-fvw7","path":"python/requirements.txt","line":null,"fingerprint":"ipython@3.0.0 (PyPI):GHSA-29gw-9793-fvw7"},{"rule_id":"osv/GHSA-f7c7-j99h-c22f","severity":"medium","message":"numpy@1.7.1 (PyPI) is affected by PYSEC-2021-857, GHSA-f7c7-j99h-c22f","path":"python/requirements.txt","line":null,"fingerprint":"numpy@1.7.1 (PyPI):GHSA-f7c7-j99h-c22f"},{"rule_id":"osv/GHSA-fpfv-jqm9-f5jm","severity":"medium","message":"numpy@1.7.1 (PyPI) is affected by GHSA-fpfv-jqm9-f5jm","path":"python/requirements.txt","line":null,"fingerprint":"numpy@1.7.1 (PyPI):GHSA-fpfv-jqm9-f5jm"},{"rule_id":"osv/PYSEC-2020-73","severity":"medium","message":"pandas@0.12.0 (PyPI) is affected by PYSEC-2020-73","path":"python/requirements.txt","line":null,"fingerprint":"pandas@0.12.0 (PyPI):PYSEC-2020-73"},{"rule_id":"osv/PYSEC-2022-48","severity":"medium","message":"protobuf@2.5.0 (PyPI) is affected by PYSEC-2022-48","path":"python/requirements.txt","line":null,"fingerprint":"protobuf@2.5.0 (PyPI):PYSEC-2022-48"},{"rule_id":"osv/PYSEC-2023-102","severity":"medium","message":"scipy@0.13.2 (PyPI) is affected by PYSEC-2023-102","path":"python/requirements.txt","line":null,"fingerprint":"scipy@0.13.2 (PyPI):PYSEC-2023-102"},{"rule_id":"osv/PYSEC-2023-114","severity":"medium","message":"scipy@0.13.2 (PyPI) is affected by PYSEC-2023-114","path":"python/requirements.txt","line":null,"fingerprint":"scipy@0.13.2 (PyPI):PYSEC-2023-114"}],"evidence":[],"data":{"ecosystems":["PyPI"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.045,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":2827.0,"function_nloc":27834.0,"mean_ccn":2.48,"p90_ccn":5.0,"complex_functions":41.0,"long_functions":17.0,"many_param_functions":126.0,"risky_nloc_share":0.1721},"findings":[],"evidence":[{"kind":"complex-function","description":"caffe::UpgradeV0LayerParameter in src/caffe/util/upgrade_proto.cpp: complexity 85, 351 lines","ref":"src/caffe/util/upgrade_proto.cpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/util/upgrade_proto.cpp#L201","weight":1.0},{"kind":"complex-function","description":"CheckSpacing in scripts/cpp_lint.py: complexity 69, 154 lines","ref":"scripts/cpp_lint.py","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/scripts/cpp_lint.py#L2647","weight":1.0},{"kind":"complex-function","description":"CheckLanguage in scripts/cpp_lint.py: complexity 60, 163 lines","ref":"scripts/cpp_lint.py","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/scripts/cpp_lint.py#L3838","weight":1.0},{"kind":"complex-function","description":"caffe::UpgradeV1LayerParameter in src/caffe/util/upgrade_proto.cpp: complexity 50, 184 lines","ref":"src/caffe/util/upgrade_proto.cpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/util/upgrade_proto.cpp#L691","weight":0.8333333333333334},{"kind":"complex-function","description":"caffe::Net<Dtype>::Init in src/caffe/net.cpp: complexity 42, 183 lines","ref":"src/caffe/net.cpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/net.cpp#L46","weight":0.7},{"kind":"complex-function","description":"caffe::UpgradeV1LayerType in src/caffe/util/upgrade_proto.cpp: complexity 41, 87 lines","ref":"src/caffe/util/upgrade_proto.cpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/util/upgrade_proto.cpp#L876","weight":0.6833333333333333},{"kind":"complex-function","description":"caffe::BaseConvolutionLayer<Dtype>::LayerSetUp in src/caffe/layers/base_conv_layer.cpp: complexity 38, 156 lines","ref":"src/caffe/layers/base_conv_layer.cpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/layers/base_conv_layer.cpp#L12","weight":0.6333333333333333},{"kind":"complex-function","description":"Update in scripts/cpp_lint.py: complexity 31, 80 lines","ref":"scripts/cpp_lint.py","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/scripts/cpp_lint.py#L2008","weight":0.5166666666666667},{"kind":"complex-function","description":"CheckStyle in scripts/cpp_lint.py: complexity 27, 56 lines","ref":"scripts/cpp_lint.py","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/scripts/cpp_lint.py#L3463","weight":0.45},{"kind":"complex-function","description":"caffe::Im2colLayer<Dtype>::LayerSetUp in src/caffe/layers/im2col_layer.cpp: complexity 26, 92 lines","ref":"src/caffe/layers/im2col_layer.cpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/src/caffe/layers/im2col_layer.cpp#L9","weight":0.43333333333333335}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":52517.0,"duplicated_lines":8269.0,"duplicated_share":0.1575,"files":314.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: examples/cifar10/convert_cifar_data.cpp:61 and examples/cifar10/convert_cifar_data.cpp:81","ref":"examples/cifar10/convert_cifar_data.cpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/examples/cifar10/convert_cifar_data.cpp#L61","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/mnist/convert_mnist_data.cpp:45 and examples/siamese/convert_mnist_siamese_data.cpp:38","ref":"examples/mnist/convert_mnist_data.cpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/examples/mnist/convert_mnist_data.cpp#L45","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: include/caffe/filler.hpp:147 and include/caffe/filler.hpp:192","ref":"include/caffe/filler.hpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/include/caffe/filler.hpp#L147","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: include/caffe/layer_factory.hpp:59 and include/caffe/solver_factory.hpp:57","ref":"include/caffe/layer_factory.hpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/include/caffe/layer_factory.hpp#L59","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: include/caffe/layers/absval_layer.hpp:17 and include/caffe/layers/dropout_layer.hpp:18","ref":"include/caffe/layers/absval_layer.hpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/include/caffe/layers/absval_layer.hpp#L17","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: include/caffe/layers/absval_layer.hpp:46 and include/caffe/layers/bnll_layer.hpp:49","ref":"include/caffe/layers/absval_layer.hpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/include/caffe/layers/absval_layer.hpp#L46","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: include/caffe/layers/accuracy_layer.hpp:53 and include/caffe/layers/hinge_loss_layer.hpp:28","ref":"include/caffe/layers/accuracy_layer.hpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/include/caffe/layers/accuracy_layer.hpp#L53","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: include/caffe/layers/accuracy_layer.hpp:66 and include/caffe/layers/threshold_layer.hpp:46","ref":"include/caffe/layers/accuracy_layer.hpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/include/caffe/layers/accuracy_layer.hpp#L66","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: include/caffe/layers/base_conv_layer.hpp:65 and include/caffe/layers/im2col_layer.hpp:43","ref":"include/caffe/layers/base_conv_layer.hpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/include/caffe/layers/base_conv_layer.hpp#L65","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: include/caffe/layers/base_conv_layer.hpp:101 and include/caffe/layers/base_conv_layer.hpp:130","ref":"include/caffe/layers/base_conv_layer.hpp","url":"https://github.com/BVLC/caffe/blob/9b891540183ddc834a02b2bd81b31afae71b2153/include/caffe/layers/base_conv_layer.hpp#L101","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":114.0,"weighted_findings":46.25,"scanned_lines":67266.0,"category:best-practice":14.0,"category:correctness":94.0,"category:maintainability":6.0},"findings":[{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"scripts/cpp_lint.py","line":4471,"fingerprint":"python.lang.best-practice.open-never-closed:scripts/cpp_lint.py:4471"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"python/detect.py","line":127,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:python/detect.py:127"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"python/draw_net.py","line":48,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:python/draw_net.py:48"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/copy_notebook.py","line":17,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/copy_notebook.py:17"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/copy_notebook.py","line":30,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/copy_notebook.py:30"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/copy_notebook.py","line":32,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/copy_notebook.py:32"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_derived\" a function or an attribute? If it is a function, you may have meant self.is_derived() because self.is_derived is always true.","path":"scripts/cpp_lint.py","line":1803,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:scripts/cpp_lint.py:1803"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_struct\" a function or an attribute? If it is a function, you may have meant self.is_struct() because self.is_struct is always true.","path":"scripts/cpp_lint.py","line":1806,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:scripts/cpp_lint.py:1806"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_struct\" a function or an attribute? If it is a function, you may have meant self.is_struct() because self.is_struct is always true.","path":"scripts/cpp_lint.py","line":1809,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:scripts/cpp_lint.py:1809"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_derived\" a function or an attribute? If it is a function, you may have meant self.is_derived() because self.is_derived is always true.","path":"scripts/cpp_lint.py","line":1836,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:scripts/cpp_lint.py:1836"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_struct\" a function or an attribute? If it is a function, you may have meant self.is_struct() because self.is_struct is always true.","path":"scripts/cpp_lint.py","line":1844,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:scripts/cpp_lint.py:1844"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_struct\" a function or an attribute? If it is a function, you may have meant classinfo.is_struct() because classinfo.is_struct is always true.","path":"scripts/cpp_lint.py","line":2117,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:scripts/cpp_lint.py:2117"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/download_model_binary.py","line":33,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/download_model_binary.py:33"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/split_caffe_proto.py","line":28,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/split_caffe_proto.py:28"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/split_caffe_proto.py","line":34,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/split_caffe_proto.py:34"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"tools/extra/extract_seconds.py","line":45,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:tools/extra/extract_seconds.py:45"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"tools/extra/extract_seconds.py","line":52,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:tools/extra/extract_seconds.py:52"},{"rule_id":"opengrep/python.lang.correctness.use-sys-exit","severity":"medium","message":"Detected use of `exit`. Use `sys.exit` over the python shell `exit` built-in. `exit` is a helper for the interactive shell and may not be available on all Python implementations.","path":"tools/extra/extract_seconds.py","line":71,"fingerprint":"python.lang.correctness.use-sys-exit:tools/extra/extract_seconds.py:71"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"tools/extra/parse_log.py","line":39,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:tools/extra/parse_log.py:39"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"tools/extra/parse_log.py","line":169,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:tools/extra/parse_log.py:169"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"tools/extra/summarize.py","line":24,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:tools/extra/summarize.py:24"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"data/mnist/get_mnist.sh","line":12,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:data/mnist/get_mnist.sh:12"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"data/mnist/get_mnist.sh","line":13,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:data/mnist/get_mnist.sh:13"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/build_docs.sh","line":10,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/build_docs.sh:10"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/build_docs.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/build_docs.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/deploy_docs.sh","line":12,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/deploy_docs.sh:12"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/deploy_docs.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/deploy_docs.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/deploy_docs.sh","line":24,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/deploy_docs.sh:24"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/deploy_docs.sh","line":25,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/deploy_docs.sh:25"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/deploy_docs.sh","line":28,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/deploy_docs.sh:28"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/deploy_docs.sh","line":29,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/deploy_docs.sh:29"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"scripts/deploy_docs.sh","line":30,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:scripts/deploy_docs.sh:30"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/deploy_docs.sh","line":37,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/deploy_docs.sh:37"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/deploy_docs.sh","line":45,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/deploy_docs.sh:45"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/download_model_from_gist.sh","line":11,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/download_model_from_gist.sh:11"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/download_model_from_gist.sh","line":20,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/download_model_from_gist.sh:20"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/download_model_from_gist.sh","line":21,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/download_model_from_gist.sh:21"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/download_model_from_gist.sh","line":22,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/download_model_from_gist.sh:22"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/download_model_from_gist.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/download_model_from_gist.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":6,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:6"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":10,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:10"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":11,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:11"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":14,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:14"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":17,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:17"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"scripts/gather_examples.sh","line":19,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:scripts/gather_examples.sh:19"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":19,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:19"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":20,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:20"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-command-substitution-in-command","severity":"low","message":"The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result.","path":"scripts/gather_examples.sh","line":27,"fingerprint":"bash.lang.correctness.unquoted-command-substitution-in-command:scripts/gather_examples.sh:27"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":27,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:27"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/gather_examples.sh","line":28,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/gather_examples.sh:28"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/build.sh","line":4,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/build.sh:4"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/build.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/build.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/build.sh","line":7,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/build.sh:7"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/build.sh","line":8,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/build.sh:8"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/build.sh","line":11,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/build.sh:11"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-cmake.sh","line":8,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-cmake.sh:8"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-cmake.sh","line":12,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-cmake.sh:12"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-cmake.sh","line":18,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-cmake.sh:18"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-cmake.sh","line":25,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-cmake.sh:25"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-cmake.sh","line":31,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-cmake.sh:31"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-make.sh","line":12,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-make.sh:12"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-make.sh","line":20,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-make.sh:20"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-make.sh","line":26,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-make.sh:26"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure-make.sh","line":33,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure-make.sh:33"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure.sh","line":4,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure.sh:4"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure.sh","line":7,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure.sh:7"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure.sh","line":8,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure.sh:8"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/configure.sh","line":10,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/configure.sh:10"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":6,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:6"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":27,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:27"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":49,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:49"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":52,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:52"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":53,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:53"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":62,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:62"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":64,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:64"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":67,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:67"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":73,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:73"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":81,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:81"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":84,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:84"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":85,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:85"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":86,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:86"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":88,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:88"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":90,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:90"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":91,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:91"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":100,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:100"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":106,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:106"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-deps.sh","line":108,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-deps.sh:108"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-python-deps.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-python-deps.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-python-deps.sh","line":6,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-python-deps.sh:6"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/install-python-deps.sh","line":8,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/install-python-deps.sh:8"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/setup-venv.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/setup-venv.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/setup-venv.sh","line":6,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/setup-venv.sh:6"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/setup-venv.sh","line":11,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/setup-venv.sh:11"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/setup-venv.sh","line":18,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/setup-venv.sh:18"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/test.sh","line":4,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/test.sh:4"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/test.sh","line":5,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/test.sh:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/test.sh","line":7,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/test.sh:7"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/travis/test.sh","line":12,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/travis/test.sh:12"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/upload_model_to_gist.sh","line":9,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/upload_model_to_gist.sh:9"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/upload_model_to_gist.sh","line":23,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/upload_model_to_gist.sh:23"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/upload_model_to_gist.sh","line":26,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/upload_model_to_gist.sh:26"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":16,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:16"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":17,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:17"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":29,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:29"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":30,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:30"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":31,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:31"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":39,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:39"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":40,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:40"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":42,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:42"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":43,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:43"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"tools/extra/parse_log.sh","line":46,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:tools/extra/parse_log.sh:46"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.7457,"check:ci_present":1.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.6234,"test_lines":25425.0,"source_lines":68192.0,"test_ratio":0.3728,"ci_files":1.0,"cochange_share":0.1558,"cochange_commits":154.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .travis.yml","ref":".travis.yml","url":null,"weight":0.0}],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":0.0,"readme_lines":30.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":0.0,"escapes_per_kloc":0.0},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}