{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T15:21:29.897982Z","repo":{"ref":{"host":"github.com","owner":"Comfy-Org","name":"ComfyUI"},"default_branch":"master","clone_url":"https://github.com/Comfy-Org/ComfyUI.git","html_url":"https://github.com/Comfy-Org/ComfyUI","description":"The most powerful and modular diffusion model GUI, api and backend with a graph/nodes interface. The fastest local inference engine in the world.","stars":146786,"forks":17511,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":108130,"primary_language":"Python","license_spdx":"GPL-3.0","created_at":"2023-01-17T03:15:56Z","pushed_at":"2026-11-14T12:22:47Z","security_policy_url":"https://github.com/Comfy-Org/ComfyUI/security/policy","distribution":{"owner_created_at":"2024-04-10T03:46:11Z","owner_type":"Organization","release_assets":[{"name":"ComfyUI_windows_portable_amd.7z","size":1688825308,"download_count":9042,"release_tag":"v0.45.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1503750967,"download_count":3415,"release_tag":"v0.45.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":2071479423,"download_count":82549,"release_tag":"v0.45.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_arm64.7z","size":1913294288,"download_count":991,"release_tag":"v0.45.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_nvidia_arm64.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1962803660,"download_count":15714,"release_tag":"v0.45.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1671700941,"download_count":15760,"release_tag":"v0.44.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.44.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1486960018,"download_count":5992,"release_tag":"v0.44.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.44.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":2054382457,"download_count":144116,"release_tag":"v0.44.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.44.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_arm64.7z","size":1890391373,"download_count":2401,"release_tag":"v0.44.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.44.0/ComfyUI_windows_portable_nvidia_arm64.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1945636677,"download_count":24798,"release_tag":"v0.44.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.44.0/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1656949572,"download_count":17955,"release_tag":"v0.43.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.43.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1472205875,"download_count":8860,"release_tag":"v0.43.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.43.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":2039673203,"download_count":161413,"release_tag":"v0.43.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.43.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_arm64.7z","size":1875843184,"download_count":3093,"release_tag":"v0.43.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.43.0/ComfyUI_windows_portable_nvidia_arm64.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1930972692,"download_count":26271,"release_tag":"v0.43.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.43.0/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1636139353,"download_count":20167,"release_tag":"v0.42.1","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.1/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1451207360,"download_count":7190,"release_tag":"v0.42.1","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.1/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":2018444114,"download_count":169242,"release_tag":"v0.42.1","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.1/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_arm64.7z","size":1854462229,"download_count":2401,"release_tag":"v0.42.1","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.1/ComfyUI_windows_portable_nvidia_arm64.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1910153206,"download_count":25605,"release_tag":"v0.42.1","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.1/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1636136802,"download_count":407,"release_tag":"v0.42.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1451372064,"download_count":244,"release_tag":"v0.42.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":2018436691,"download_count":2595,"release_tag":"v0.42.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_arm64.7z","size":1854445362,"download_count":126,"release_tag":"v0.42.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.0/ComfyUI_windows_portable_nvidia_arm64.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1910165509,"download_count":632,"release_tag":"v0.42.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.42.0/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1627801471,"download_count":7482,"release_tag":"v0.41.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.41.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1442748194,"download_count":2978,"release_tag":"v0.41.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.41.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":2010075321,"download_count":54351,"release_tag":"v0.41.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.41.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_arm64.7z","size":1853240417,"download_count":1678,"release_tag":"v0.41.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.41.0/ComfyUI_windows_portable_nvidia_arm64.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1901799620,"download_count":8436,"release_tag":"v0.41.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.41.0/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1627644722,"download_count":4576,"release_tag":"v0.40.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.40.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1442756969,"download_count":1888,"release_tag":"v0.40.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.40.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":2009901495,"download_count":36307,"release_tag":"v0.40.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.40.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_arm64.7z","size":1853065489,"download_count":923,"release_tag":"v0.40.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.40.0/ComfyUI_windows_portable_nvidia_arm64.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1901618627,"download_count":6320,"release_tag":"v0.40.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.40.0/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1621312076,"download_count":20087,"release_tag":"v0.39.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.39.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1436509991,"download_count":6788,"release_tag":"v0.39.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.39.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":2003629308,"download_count":126708,"release_tag":"v0.39.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.39.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1895335518,"download_count":23239,"release_tag":"v0.39.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.39.0/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1612070856,"download_count":11597,"release_tag":"v0.38.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.38.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1427214780,"download_count":4416,"release_tag":"v0.38.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.38.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":1994326521,"download_count":81360,"release_tag":"v0.38.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.38.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1886111296,"download_count":13884,"release_tag":"v0.38.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.38.0/ComfyUI_windows_portable_nvidia_cu126.7z"},{"name":"ComfyUI_windows_portable_amd.7z","size":1595844037,"download_count":18143,"release_tag":"v0.37.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.37.0/ComfyUI_windows_portable_amd.7z"},{"name":"ComfyUI_windows_portable_intel.7z","size":1512836652,"download_count":8192,"release_tag":"v0.37.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.37.0/ComfyUI_windows_portable_intel.7z"},{"name":"ComfyUI_windows_portable_nvidia.7z","size":1925204508,"download_count":140404,"release_tag":"v0.37.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.37.0/ComfyUI_windows_portable_nvidia.7z"},{"name":"ComfyUI_windows_portable_nvidia_cu126.7z","size":1867201814,"download_count":19955,"release_tag":"v0.37.0","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.37.0/ComfyUI_windows_portable_nvidia_cu126.7z"}]}},"commit_sha":"eee59185ff4f43ae2d9ad122b245619d27d9daad","profile":{"lines_by_language":{"Python":347527,"Shell":103},"files_by_category":{"source":781,"test":265,"config":209,"other":55,"docs":23,"oversized":7,"binary":5,"generated":1},"source_lines":292737,"test_lines":54893},"pillars":{"ai_provenance":{"score":0.3,"confidence":0.95,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.0033,"suspected_share":0.6585,"estimated_share":0.0033,"ai_artifacts":1.0,"flagged_work_units":28.0,"flagged_releases":0.0,"style_index":0.155},"summary":"Explicit AI attribution on 0% of first-party code added; an estimated 0% including velocity signals."},"quality":{"score":58.9,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":56.0,"duplication":49.0,"lint":22.5,"testing":84.4,"docs":80.0,"type_safety":40.0,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.19, CI runs tests; 19% of function code in complex or long functions; 12% duplicated lines. Weakest area: lint."},"security":{"score":55.1,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":69.3,"sast":98.1,"dependencies":33.3,"ci_actions":0.0,"posture":60.0,"scorecard":null},"summary":"Security posture is weak: 119 known vulnerabilities in 6 dependencies; 6 high-severity SAST findings; 141 high-severity workflow issues. Weakest area: ci actions."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":39.0,"checked":39.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":6098.0,"attributed_commits":33.0,"attributed_commit_share":0.005411610364053788,"effective_loc":1704955.0,"attributed_loc":5609.0,"attributed_loc_share":0.0032898228985515747,"tools_detected":4.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 25 attributed commits, 3,643 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attribution-summary","description":"Cursor agent: 6 attributed commits, 67 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attribution-summary","description":"GitHub Copilot coding agent: 1 attributed commits, 0 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attribution-summary","description":"OpenAI Codex: 1 attributed commits, 1,899 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"dd196a9ce74d91548265ac5eee8cea07096face3","url":"https://github.com/Comfy-Org/ComfyUI/commit/dd196a9ce74d91548265ac5eee8cea07096face3","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"1a82e6d01f395b43275c77acd289af1eb7090bb9","url":"https://github.com/Comfy-Org/ComfyUI/commit/1a82e6d01f395b43275c77acd289af1eb7090bb9","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"fa98a189b4271c76f66210e15f81790b555eb610","url":"https://github.com/Comfy-Org/ComfyUI/commit/fa98a189b4271c76f66210e15f81790b555eb610","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"99073836d45f66053c45ba8564984e6def9cebba","url":"https://github.com/Comfy-Org/ComfyUI/commit/99073836d45f66053c45ba8564984e6def9cebba","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"a20738f1d345e2695429544b5defea672dd74486","url":"https://github.com/Comfy-Org/ComfyUI/commit/a20738f1d345e2695429544b5defea672dd74486","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"7193f5627f036701e5efc23beaea20fa37ceaadd","url":"https://github.com/Comfy-Org/ComfyUI/commit/7193f5627f036701e5efc23beaea20fa37ceaadd","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"6c53f8c9a06d95f3d847009ceaae55c624169247","url":"https://github.com/Comfy-Org/ComfyUI/commit/6c53f8c9a06d95f3d847009ceaae55c624169247","weight":0.9},{"kind":"attributed-commit","description":"OpenAI Codex: PR branch 'codex/support-sensenova-u15'","ref":"3216c62e9962c3babd28a4dfea6e5aef50b8fe16","url":"https://github.com/Comfy-Org/ComfyUI/commit/3216c62e9962c3babd28a4dfea6e5aef50b8fe16","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: author claude[bot]","ref":"a683fa6e577f3f73ab8a0b4d7434173ccaec9c12","url":"https://github.com/Comfy-Org/ComfyUI/commit/a683fa6e577f3f73ab8a0b4d7434173ccaec9c12","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"16e3f3034f2bba1fff6c70cbd759339778555cd6","url":"https://github.com/Comfy-Org/ComfyUI/commit/16e3f3034f2bba1fff6c70cbd759339778555cd6","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"c6cb9049943a5841e9ec5a8480eb882554377afc","url":"https://github.com/Comfy-Org/ComfyUI/commit/c6cb9049943a5841e9ec5a8480eb882554377afc","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"c7b246edc4401307172b22eb257896c1b5eb6a24","url":"https://github.com/Comfy-Org/ComfyUI/commit/c7b246edc4401307172b22eb257896c1b5eb6a24","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"431a1888d31114ef4959c8a9fb286a5cac8688f0","url":"https://github.com/Comfy-Org/ComfyUI/commit/431a1888d31114ef4959c8a9fb286a5cac8688f0","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"6dd3c67427d65751d42f2dbc0c3db3d829c697de","url":"https://github.com/Comfy-Org/ComfyUI/commit/6dd3c67427d65751d42f2dbc0c3db3d829c697de","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: PR branch 'cursor/emit-hash-on-asset-responses-a601'","ref":"6de7fc063b668a3d8216f26e0e0672c47da45fd5","url":"https://github.com/Comfy-Org/ComfyUI/commit/6de7fc063b668a3d8216f26e0e0672c47da45fd5","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"ea62dc11c9a10dae52186fdcc3da033eb46018a1","url":"https://github.com/Comfy-Org/ComfyUI/commit/ea62dc11c9a10dae52186fdcc3da033eb46018a1","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"187442cca4594a59c563780e7cd144e6d8dc02ab","url":"https://github.com/Comfy-Org/ComfyUI/commit/187442cca4594a59c563780e7cd144e6d8dc02ab","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"7984a6a38eba7418dcbe6d2c977d461a84ac80f6","url":"https://github.com/Comfy-Org/ComfyUI/commit/7984a6a38eba7418dcbe6d2c977d461a84ac80f6","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: PR branch 'cursor/add-description-to-workspace-api-key-schemas-275d'","ref":"cc4d711eb1c34f393e81a074d881eccbb64faeba","url":"https://github.com/Comfy-Org/ComfyUI/commit/cc4d711eb1c34f393e81a074d881eccbb64faeba","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: PR branch 'cursor/mark-deprecated-cloud-endpoints-e81e'","ref":"fb097bedc2af8cc7499fba8ab6da8811ecc40491","url":"https://github.com/Comfy-Org/ComfyUI/commit/fb097bedc2af8cc7499fba8ab6da8811ecc40491","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: PR branch 'cursor/add-experiment-nodes-schema-endpoints-5a86'","ref":"4e823431cc8291deced4fc2dcf3967be2549e4c0","url":"https://github.com/Comfy-Org/ComfyUI/commit/4e823431cc8291deced4fc2dcf3967be2549e4c0","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: PR branch 'cursor/cloud-fe-endpoints-6010'","ref":"87878f354f4d49446ed81b5ebfb98b12dda37c7c","url":"https://github.com/Comfy-Org/ComfyUI/commit/87878f354f4d49446ed81b5ebfb98b12dda37c7c","weight":0.9},{"kind":"attributed-commit","description":"Cursor agent: PR branch 'cursor/oss-spec-cloud-fields-1c03'","ref":"89014792c966b04bf18f7ba62aee5169f9094e84","url":"https://github.com/Comfy-Org/ComfyUI/commit/89014792c966b04bf18f7ba62aee5169f9094e84","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"ed201fff08fbbd3dbcc500b252a9f41e8051c256","url":"https://github.com/Comfy-Org/ComfyUI/commit/ed201fff08fbbd3dbcc500b252a9f41e8051c256","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"6580a6bc012ac43bba8d0ba9377a8d33184433ac","url":"https://github.com/Comfy-Org/ComfyUI/commit/6580a6bc012ac43bba8d0ba9377a8d33184433ac","weight":0.9}],"data":{"attributed_loc_by_commit":{"04c49a29b493f3f9037b83cec45f6369b5c4816b":55,"4993411fd9a43d642971925272c3748d9e058131":0,"7591d781a7a1cdfd6f8f0a9ec6ecd692495e14b5":1,"e544c65db91df5a070be69a0a9b922201fe79335":317,"af7b4a921d7abab7c852d7b5febb654be6e57eba":859,"2bd4d82b4f19c30dc979a3a16ddae97068e1bdc8":1209,"8cc746a86411bd7a08d42829dc805f39f8bced65":2,"a0a64c679fca700a087d0cdfa419912a3e8b3bf8":203,"6580a6bc012ac43bba8d0ba9377a8d33184433ac":72,"ed201fff08fbbd3dbcc500b252a9f41e8051c256":0,"89014792c966b04bf18f7ba62aee5169f9094e84":0,"87878f354f4d49446ed81b5ebfb98b12dda37c7c":0,"4e823431cc8291deced4fc2dcf3967be2549e4c0":0,"fb097bedc2af8cc7499fba8ab6da8811ecc40491":0,"cc4d711eb1c34f393e81a074d881eccbb64faeba":0,"7984a6a38eba7418dcbe6d2c977d461a84ac80f6":0,"187442cca4594a59c563780e7cd144e6d8dc02ab":0,"ea62dc11c9a10dae52186fdcc3da033eb46018a1":0,"6de7fc063b668a3d8216f26e0e0672c47da45fd5":67,"6dd3c67427d65751d42f2dbc0c3db3d829c697de":0,"431a1888d31114ef4959c8a9fb286a5cac8688f0":9,"c7b246edc4401307172b22eb257896c1b5eb6a24":0,"c6cb9049943a5841e9ec5a8480eb882554377afc":4,"16e3f3034f2bba1fff6c70cbd759339778555cd6":8,"a683fa6e577f3f73ab8a0b4d7434173ccaec9c12":153,"3216c62e9962c3babd28a4dfea6e5aef50b8fe16":1899,"6c53f8c9a06d95f3d847009ceaae55c624169247":350,"7193f5627f036701e5efc23beaea20fa37ceaadd":0,"a20738f1d345e2695429544b5defea672dd74486":39,"99073836d45f66053c45ba8564984e6def9cebba":4,"fa98a189b4271c76f66210e15f81790b555eb610":0,"1a82e6d01f395b43275c77acd289af1eb7090bb9":2,"dd196a9ce74d91548265ac5eee8cea07096face3":356},"tools":{"claude-code":{"name":"Claude Code","commits":25,"loc":3643,"first_seen":1767938256,"last_seen":1794099013},"github-copilot":{"name":"GitHub Copilot coding agent","commits":1,"loc":0,"first_seen":1770837313,"last_seen":1770837313},"cursor":{"name":"Cursor agent","commits":6,"loc":67,"first_seen":1778016009,"last_seen":1779733295},"openai-codex":{"name":"OpenAI Codex","commits":1,"loc":1899,"first_seen":1788231953,"last_seen":1788231953}},"monthly":{"2023-01":{"loc":29075,"attributed_loc":0},"2023-02":{"loc":4553,"attributed_loc":0},"2023-03":{"loc":21015,"attributed_loc":0},"2023-04":{"loc":7897,"attributed_loc":0},"2023-05":{"loc":5413,"attributed_loc":0},"2023-06":{"loc":3248,"attributed_loc":0},"2023-07":{"loc":2540,"attributed_loc":0},"2023-08":{"loc":3423,"attributed_loc":0},"2023-09":{"loc":3930,"attributed_loc":0},"2023-10":{"loc":3783,"attributed_loc":0},"2023-11":{"loc":6197,"attributed_loc":0},"2023-12":{"loc":3145,"attributed_loc":0},"2024-01":{"loc":3542,"attributed_loc":0},"2024-02":{"loc":2170,"attributed_loc":0},"2024-03":{"loc":1457,"attributed_loc":0},"2024-04":{"loc":1243,"attributed_loc":0},"2024-05":{"loc":905,"attributed_loc":0},"2024-06":{"loc":8830,"attributed_loc":0},"2024-07":{"loc":3297,"attributed_loc":0},"2024-08":{"loc":230106,"attributed_loc":0},"2024-09":{"loc":119183,"attributed_loc":0},"2024-10":{"loc":252718,"attributed_loc":0},"2024-11":{"loc":138001,"attributed_loc":0},"2024-12":{"loc":97815,"attributed_loc":0},"2025-01":{"loc":349133,"attributed_loc":0},"2025-02":{"loc":13834,"attributed_loc":0},"2025-03":{"loc":3632,"attributed_loc":0},"2025-04":{"loc":5856,"attributed_loc":0},"2025-05":{"loc":28879,"attributed_loc":0},"2025-06":{"loc":4326,"attributed_loc":0},"2025-07":{"loc":10658,"attributed_loc":0},"2025-08":{"loc":11498,"attributed_loc":0},"2025-09":{"loc":12378,"attributed_loc":0},"2025-10":{"loc":15135,"attributed_loc":0},"2025-11":{"loc":9026,"attributed_loc":0},"2025-12":{"loc":10530,"attributed_loc":0},"2026-01":{"loc":23154,"attributed_loc":55},"2026-02":{"loc":13985,"attributed_loc":1},"2026-03":{"loc":22424,"attributed_loc":2662},"2026-04":{"loc":11000,"attributed_loc":0},"2026-05":{"loc":26914,"attributed_loc":67},"2026-06":{"loc":23692,"attributed_loc":9},"2026-07":{"loc":18793,"attributed_loc":4},"2026-08":{"loc":45169,"attributed_loc":161},"2026-09":{"loc":52383,"attributed_loc":2292},"2026-10":{"loc":29611,"attributed_loc":2},"2026-11":{"loc":9459,"attributed_loc":356}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":1.0,"workflow_agents":0.0,"tools_configured":1.0,"earliest_adoption":1782855633.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"AGENTS.md (generic-agent configuration)","ref":"AGENTS.md","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/AGENTS.md","weight":0.5}],"data":{"artifacts":[{"tool":"generic-agent","path":"AGENTS.md","added_at":1782855633}],"workflows":[],"tools":["generic-agent"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"work_units":4379.0,"flagged_units":28.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":1541184.0,"flagged_loc":1122645.0,"flagged_loc_share":0.7284302198828952,"max_loc_per_hour":54347.5,"median_loc_per_hour":35.89673541865866,"pr_timed_units":1469.0,"excluded_import_loc":154305.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"217,390 lines of first-party code in ~4.0h (54,348 lines/hour, 1 commit session)","ref":"a39ea87bca0ea1b0bd7560676abf902c3dc83043","url":"https://github.com/Comfy-Org/ComfyUI/commit/a39ea87bca0ea1b0bd7560676abf902c3dc83043","weight":0.6},{"kind":"velocity-burst","description":"95,433 lines of first-party code in ~4.0h (23,858 lines/hour, 1 commit session)","ref":"14eba07acd28d5b0fc250e493ab7751bd9b9b43e","url":"https://github.com/Comfy-Org/ComfyUI/commit/14eba07acd28d5b0fc250e493ab7751bd9b9b43e","weight":0.6},{"kind":"velocity-burst","description":"89,967 lines of first-party code in ~4.0h (22,492 lines/hour, 1 commit session)","ref":"5262901c5ce6a76f078875bcf95749d7e3ed2251","url":"https://github.com/Comfy-Org/ComfyUI/commit/5262901c5ce6a76f078875bcf95749d7e3ed2251","weight":0.6},{"kind":"velocity-burst","description":"85,570 lines of first-party code in ~4.0h (21,392 lines/hour, 1 commit session)","ref":"89fa2fca24cf6f276ae181288df515506eed0d22","url":"https://github.com/Comfy-Org/ComfyUI/commit/89fa2fca24cf6f276ae181288df515506eed0d22","weight":0.6},{"kind":"velocity-burst","description":"82,184 lines of first-party code in ~4.0h (20,546 lines/hour, 1 commit session)","ref":"c0b0cfaeec5b31fe036c8239d1ae5fb13f6766da","url":"https://github.com/Comfy-Org/ComfyUI/commit/c0b0cfaeec5b31fe036c8239d1ae5fb13f6766da","weight":0.6},{"kind":"velocity-burst","description":"77,057 lines of first-party code in ~4.0h (19,264 lines/hour, 1 commit session)","ref":"53646e0f322db2a1362096b15826acfdd6167024","url":"https://github.com/Comfy-Org/ComfyUI/commit/53646e0f322db2a1362096b15826acfdd6167024","weight":0.6},{"kind":"velocity-burst","description":"71,457 lines of first-party code in ~4.0h (17,864 lines/hour, 1 commit session)","ref":"b4de04a1c1e90c4183d7880e49ce7e80d82c7c0a","url":"https://github.com/Comfy-Org/ComfyUI/commit/b4de04a1c1e90c4183d7880e49ce7e80d82c7c0a","weight":0.6},{"kind":"velocity-burst","description":"67,321 lines of first-party code in ~4.0h (16,830 lines/hour, 1 commit session)","ref":"614377abd6c018dec4aeb5700c0e203e2f91f9b0","url":"https://github.com/Comfy-Org/ComfyUI/commit/614377abd6c018dec4aeb5700c0e203e2f91f9b0","weight":0.6},{"kind":"velocity-burst","description":"61,183 lines of first-party code in ~4.0h (15,248 lines/hour, 2 commit session)","ref":"f257fc999fde8e9695e4755902c75e7f7192fe2b","url":"https://github.com/Comfy-Org/ComfyUI/commit/f257fc999fde8e9695e4755902c75e7f7192fe2b","weight":0.6},{"kind":"velocity-burst","description":"57,220 lines of first-party code in ~4.0h (14,305 lines/hour, 1 commit session)","ref":"4ac401af2b3962f7a669a6757a804f7773833c47","url":"https://github.com/Comfy-Org/ComfyUI/commit/4ac401af2b3962f7a669a6757a804f7773833c47","weight":0.6},{"kind":"velocity-burst","description":"54,469 lines of first-party code in ~4.0h (13,617 lines/hour, 1 commit session)","ref":"669e0497ea39c58fd2a3d4ae8cca92c9f8d3ca28","url":"https://github.com/Comfy-Org/ComfyUI/commit/669e0497ea39c58fd2a3d4ae8cca92c9f8d3ca28","weight":0.6},{"kind":"velocity-burst","description":"53,623 lines of first-party code in ~4.0h (13,406 lines/hour, 1 commit session)","ref":"c90459eba0daf15796de2fd7b9e7d8d42f7c7e71","url":"https://github.com/Comfy-Org/ComfyUI/commit/c90459eba0daf15796de2fd7b9e7d8d42f7c7e71","weight":0.6},{"kind":"velocity-burst","description":"31,837 lines of first-party code in ~4.0h (7,959 lines/hour, 1 commit session)","ref":"fa34efe3bd122decc67258b43df360e0e23ee9f3","url":"https://github.com/Comfy-Org/ComfyUI/commit/fa34efe3bd122decc67258b43df360e0e23ee9f3","weight":0.6},{"kind":"velocity-burst","description":"14,404 lines of first-party code in ~4.3h (3,311 lines/hour, 3 commit session)","ref":"905857edd87864b185504ddbf24fc4b8c794baa1","url":"https://github.com/Comfy-Org/ComfyUI/commit/905857edd87864b185504ddbf24fc4b8c794baa1","weight":0.6},{"kind":"velocity-burst","description":"12,389 lines of first-party code in ~4.0h (3,097 lines/hour, 1 commit session)","ref":"b021cf67c7517aed914810d0f9dae3343d3305d4","url":"https://github.com/Comfy-Org/ComfyUI/commit/b021cf67c7517aed914810d0f9dae3343d3305d4","weight":0.6}],"data":{"flagged_loc_by_commit":{"1f717903bc12088ff5a90036a4ece3f8dc2a0962":1,"8c4ccb55d16c7528ab143ef50c640dd86891e18f":24,"905857edd87864b185504ddbf24fc4b8c794baa1":14379,"2ff3104f70767a897e5468a0fe632fbd5a432b40":3361,"7f469203b7b4547f1d0f7113d18095334fa06a4d":2407,"90aebb6c868d713c3e6457d1474c53808cb5f6a2":3203,"f9c84c94b43855ec46e26afc944c06fb121cb9a8":1161,"0ee322ec5f338791c5836b79830e2f419d6fcc79":2707,"1271c4ef9df2b4eb037688da514f63e1bd8bd727":10391,"4887743a2aef67e05909aeea61f6cdc93e269de3":2475,"b021cf67c7517aed914810d0f9dae3343d3305d4":12389,"bb50e6983970e3e01d1f2516a38e532883a416ae":61178,"f257fc999fde8e9695e4755902c75e7f7192fe2b":5,"c90459eba0daf15796de2fd7b9e7d8d42f7c7e71":53623,"fa34efe3bd122decc67258b43df360e0e23ee9f3":31837,"89fa2fca24cf6f276ae181288df515506eed0d22":85570,"614377abd6c018dec4aeb5700c0e203e2f91f9b0":67321,"14eba07acd28d5b0fc250e493ab7751bd9b9b43e":95433,"c0b0cfaeec5b31fe036c8239d1ae5fb13f6766da":82184,"65a865918277b9413571c00fa402c5ff0a224225":5176,"4ac401af2b3962f7a669a6757a804f7773833c47":57220,"53646e0f322db2a1362096b15826acfdd6167024":77057,"5262901c5ce6a76f078875bcf95749d7e3ed2251":89967,"a39ea87bca0ea1b0bd7560676abf902c3dc83043":217390,"f58f0f56969ccfe8d57a18976cd296719d795730":3079,"5cfe38f41c7091b0fd954877d9d7427a8b438b1a":2783,"388b306a2b48070737b092b51e76de933baee9ad":2931,"5de94e70ec116a93cbd110fbfaec266ae1f423c5":1089,"b4de04a1c1e90c4183d7880e49ce7e80d82c7c0a":71457,"669e0497ea39c58fd2a3d4ae8cca92c9f8d3ca28":54469,"b3d6ae15b303df46d303d31bc18a38eaa32ce00f":10378},"excluded_import_commits":["16417b40d9411c6e3a63949aa0f3582be25b28db","19e1058f4c445ef74047e77a23f9ca7684c1e4b6","220afe33101a3874cf40e9cc221d27f8a8b1fae1","29b24cb5177e9d5aa5b3d2e5869999efb4d538c7","bfc214f434e9c92d05d755857c597733a7fd3b91"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"releases":99.0,"flagged_releases":0.0,"max_loc_per_day":2310.3},"findings":[],"evidence":[],"data":{"releases":[{"from":"v0.3.40","to":"v0.3.41","loc":2543,"days":12.05,"loc_per_day":211.0,"flagged":false},{"from":"v0.3.41","to":"v0.3.42","loc":1011,"days":9.51,"loc_per_day":106.3,"flagged":false},{"from":"v0.3.42","to":"v0.3.43","loc":4,"days":1.23,"loc_per_day":3.2,"flagged":false},{"from":"v0.3.43","to":"v0.3.44","loc":1219,"days":10.65,"loc_per_day":114.5,"flagged":false},{"from":"v0.3.44","to":"v0.3.45","loc":2833,"days":13.21,"loc_per_day":214.4,"flagged":false},{"from":"v0.3.45","to":"v0.3.46","loc":2251,"days":6.75,"loc_per_day":333.5,"flagged":false},{"from":"v0.3.46","to":"v0.3.47","loc":24,"days":1.5,"loc_per_day":16.0,"flagged":false},{"from":"v0.3.47","to":"v0.3.48","loc":4382,"days":3.0,"loc_per_day":1462.4,"flagged":false},{"from":"v0.3.48","to":"v0.3.49","loc":3337,"days":3.48,"loc_per_day":959.2,"flagged":false},{"from":"v0.3.49","to":"v0.3.50","loc":1032,"days":7.84,"loc_per_day":131.6,"flagged":false},{"from":"v0.3.50","to":"v0.3.51","loc":2775,"days":6.98,"loc_per_day":397.7,"flagged":false},{"from":"v0.3.51","to":"v0.3.52","loc":1970,"days":3.65,"loc_per_day":539.1,"flagged":false},{"from":"v0.3.52","to":"v0.3.53","loc":1451,"days":4.17,"loc_per_day":347.5,"flagged":false},{"from":"v0.3.53","to":"v0.3.54","loc":2,"days":0.48,"loc_per_day":4.1,"flagged":false},{"from":"v0.3.54","to":"v0.3.55","loc":169,"days":0.8,"loc_per_day":210.0,"flagged":false},{"from":"v0.3.55","to":"v0.3.56","loc":2,"days":1.02,"loc_per_day":2.0,"flagged":false},{"from":"v0.3.56","to":"v0.3.57","loc":1872,"days":4.82,"loc_per_day":388.2,"flagged":false},{"from":"v0.3.57","to":"v0.3.58","loc":3715,"days":6.36,"loc_per_day":584.3,"flagged":false},{"from":"v0.3.58","to":"v0.3.59","loc":208,"days":0.27,"loc_per_day":759.0,"flagged":false},{"from":"v0.3.59","to":"v0.3.60","loc":4928,"days":12.77,"loc_per_day":386.0,"flagged":false},{"from":"v0.3.60","to":"v0.3.61","loc":2400,"days":6.47,"loc_per_day":371.0,"flagged":false},{"from":"v0.3.61","to":"v0.3.62","loc":3,"days":0.67,"loc_per_day":4.5,"flagged":false},{"from":"v0.3.62","to":"v0.3.63","loc":1755,"days":5.98,"loc_per_day":293.3,"flagged":false},{"from":"v0.3.63","to":"v0.3.64","loc":1820,"days":1.42,"loc_per_day":1281.8,"flagged":false},{"from":"v0.3.64","to":"v0.3.65","loc":2806,"days":5.95,"loc_per_day":471.7,"flagged":false},{"from":"v0.3.65","to":"v0.3.66","loc":1876,"days":7.06,"loc_per_day":265.6,"flagged":false},{"from":"v0.3.66","to":"v0.3.67","loc":4302,"days":7.08,"loc_per_day":607.9,"flagged":false},{"from":"v0.3.67","to":"v0.3.68","loc":3375,"days":7.74,"loc_per_day":436.3,"flagged":false},{"from":"v0.3.68","to":"v0.3.69","loc":368,"days":12.9,"loc_per_day":28.5,"flagged":false},{"from":"v0.3.69","to":"v0.3.70","loc":301,"days":1.1,"loc_per_day":274.3,"flagged":false},{"from":"v0.3.70","to":"v0.3.71","loc":1853,"days":2.22,"loc_per_day":836.0,"flagged":false},{"from":"v0.3.71","to":"v0.3.72","loc":1148,"days":4.49,"loc_per_day":255.4,"flagged":false},{"from":"v0.3.72","to":"v0.3.73","loc":17,"days":0.1,"loc_per_day":176.6,"flagged":false},{"from":"v0.3.73","to":"v0.3.74","loc":258,"days":0.4,"loc_per_day":646.5,"flagged":false},{"from":"v0.3.74","to":"v0.3.75","loc":2,"days":0.09,"loc_per_day":22.7,"flagged":false},{"from":"v0.3.75","to":"v0.3.76","loc":4780,"days":5.74,"loc_per_day":832.9,"flagged":false},{"from":"v0.3.76","to":"v0.4.0","loc":4009,"days":7.92,"loc_per_day":506.3,"flagged":false},{"from":"v0.4.0","to":"v0.5.0","loc":2129,"days":7.39,"loc_per_day":288.2,"flagged":false},{"from":"v0.5.0","to":"v0.5.1","loc":208,"days":0.72,"loc_per_day":288.4,"flagged":false},{"from":"v0.5.1","to":"v0.6.0","loc":2282,"days":5.99,"loc_per_day":381.0,"flagged":false},{"from":"v0.6.0","to":"v0.7.0","loc":521,"days":7.08,"loc_per_day":73.6,"flagged":false},{"from":"v0.7.0","to":"v0.8.0","loc":5661,"days":7.23,"loc_per_day":783.4,"flagged":false},{"from":"v0.8.0","to":"v0.8.1","loc":55,"days":0.75,"loc_per_day":73.2,"flagged":false},{"from":"v0.8.1","to":"v0.8.2","loc":3,"days":0.07,"loc_per_day":43.2,"flagged":false},{"from":"v0.8.2","to":"v0.9.0","loc":2941,"days":5.06,"loc_per_day":580.7,"flagged":false},{"from":"v0.9.0","to":"v0.9.1","loc":2,"days":0.04,"loc_per_day":48.0,"flagged":false},{"from":"v0.9.1","to":"v0.9.2","loc":2502,"days":2.38,"loc_per_day":1049.3,"flagged":false},{"from":"v0.9.2","to":"v0.10.0","loc":1284,"days":4.49,"loc_per_day":286.1,"flagged":false},{"from":"v0.10.0","to":"v0.11.0","loc":5996,"days":7.02,"loc_per_day":854.2,"flagged":false},{"from":"v0.11.0","to":"v0.11.1","loc":509,"days":2.06,"loc_per_day":247.7,"flagged":false},{"from":"v0.11.1","to":"v0.12.0","loc":8257,"days":5.08,"loc_per_day":1625.7,"flagged":false},{"from":"v0.12.0","to":"v0.12.1","loc":463,"days":0.53,"loc_per_day":876.4,"flagged":false},{"from":"v0.12.1","to":"v0.12.2","loc":111,"days":0.38,"loc_per_day":292.1,"flagged":false},{"from":"v0.12.2","to":"v0.12.3","loc":160,"days":1.04,"loc_per_day":153.1,"flagged":false},{"from":"v0.12.3","to":"v0.13.0","loc":1070,"days":5.51,"loc_per_day":194.2,"flagged":false},{"from":"v0.13.0","to":"v0.14.0","loc":2496,"days":6.47,"loc_per_day":385.9,"flagged":false},{"from":"v0.14.0","to":"v0.14.1","loc":517,"days":0.53,"loc_per_day":969.1,"flagged":false},{"from":"v0.14.1","to":"v0.15.0","loc":3635,"days":6.97,"loc_per_day":521.7,"flagged":false},{"from":"v0.15.0","to":"v0.15.1","loc":666,"days":2.14,"loc_per_day":311.7,"flagged":false},{"from":"v0.15.1","to":"v0.16.0","loc":3236,"days":6.5,"loc_per_day":497.5,"flagged":false},{"from":"v0.16.0","to":"v0.16.1","loc":92,"days":0.27,"loc_per_day":337.9,"flagged":false},{"from":"v0.16.1","to":"v0.16.2","loc":17,"days":0.13,"loc_per_day":134.1,"flagged":false},{"from":"v0.16.2","to":"v0.16.3","loc":16,"days":0.16,"loc_per_day":102.5,"flagged":false},{"from":"v0.16.3","to":"v0.16.4","loc":464,"days":1.98,"loc_per_day":234.7,"flagged":false},{"from":"v0.16.4","to":"v0.17.0","loc":1818,"days":5.12,"loc_per_day":355.1,"flagged":false},{"from":"v0.17.0","to":"v0.18.0","loc":3707,"days":7.98,"loc_per_day":464.8,"flagged":false},{"from":"v0.18.0","to":"v0.18.1","loc":18,"days":1.1,"loc_per_day":16.4,"flagged":false},{"from":"v0.18.1","to":"v0.19.0","loc":6330,"days":22.19,"loc_per_day":285.3,"flagged":false},{"from":"v0.19.0","to":"v0.19.1","loc":294,"days":1.83,"loc_per_day":160.8,"flagged":false},{"from":"v0.19.1","to":"v0.19.2","loc":66,"days":2.06,"loc_per_day":32.0,"flagged":false},{"from":"v0.19.2","to":"v0.19.3","loc":96,"days":0.55,"loc_per_day":175.3,"flagged":false},{"from":"v0.19.3","to":"v0.20.0","loc":6530,"days":9.99,"loc_per_day":653.5,"flagged":false},{"from":"v0.20.0","to":"v0.20.1","loc":1,"days":0.12,"loc_per_day":8.7,"flagged":false},{"from":"v0.20.1","to":"v0.21.0","loc":9328,"days":13.31,"loc_per_day":701.0,"flagged":false},{"from":"v0.21.0","to":"v0.21.1","loc":3148,"days":2.7,"loc_per_day":1164.4,"flagged":false},{"from":"v0.21.1","to":"v0.22.0","loc":4065,"days":6.89,"loc_per_day":589.8,"flagged":false},{"from":"v0.22.0","to":"v0.23.0","loc":14001,"days":11.97,"loc_per_day":1169.7,"flagged":false},{"from":"v0.23.0","to":"v0.24.0","loc":1058,"days":1.98,"loc_per_day":533.3,"flagged":false},{"from":"v0.24.0","to":"v0.25.0","loc":15163,"days":12.46,"loc_per_day":1216.9,"flagged":false},{"from":"v0.25.0","to":"v0.26.0","loc":4184,"days":7.57,"loc_per_day":552.9,"flagged":false},{"from":"v0.26.0","to":"v0.27.0","loc":1360,"days":7.18,"loc_per_day":189.5,"flagged":false},{"from":"v0.27.0","to":"v0.28.0","loc":10847,"days":14.34,"loc_per_day":756.5,"flagged":false},{"from":"v0.28.0","to":"v0.29.0","loc":6183,"days":13.64,"loc_per_day":453.4,"flagged":false},{"from":"v0.29.0","to":"v0.30.0","loc":4830,"days":5.24,"loc_per_day":921.2,"flagged":false},{"from":"v0.30.0","to":"v0.31.0","loc":4062,"days":4.82,"loc_per_day":842.8,"flagged":false},{"from":"v0.31.0","to":"v0.32.0","loc":3695,"days":3.93,"loc_per_day":940.5,"flagged":false},{"from":"v0.32.0","to":"v0.33.0","loc":2750,"days":1.86,"loc_per_day":1481.3,"flagged":false},{"from":"v0.33.0","to":"v0.34.0","loc":28170,"days":12.19,"loc_per_day":2310.3,"flagged":false},{"from":"v0.34.0","to":"v0.35.0","loc":14746,"days":14.29,"loc_per_day":1031.6,"flagged":false},{"from":"v0.35.0","to":"v0.36.0","loc":11070,"days":6.67,"loc_per_day":1660.0,"flagged":false},{"from":"v0.36.0","to":"v0.37.0","loc":2449,"days":4.77,"loc_per_day":513.9,"flagged":false},{"from":"v0.37.0","to":"v0.38.0","loc":9338,"days":9.14,"loc_per_day":1021.9,"flagged":false},{"from":"v0.38.0","to":"v0.39.0","loc":6045,"days":6.14,"loc_per_day":984.5,"flagged":false},{"from":"v0.39.0","to":"v0.40.0","loc":10787,"days":7.88,"loc_per_day":1368.6,"flagged":false},{"from":"v0.40.0","to":"v0.41.0","loc":670,"days":1.86,"loc_per_day":360.2,"flagged":false},{"from":"v0.41.0","to":"v0.42.0","loc":2568,"days":3.22,"loc_per_day":797.6,"flagged":false},{"from":"v0.42.0","to":"v0.43.0","loc":8485,"days":8.17,"loc_per_day":1039.0,"flagged":false},{"from":"v0.43.0","to":"v0.44.0","loc":4515,"days":7.76,"loc_per_day":582.1,"flagged":false},{"from":"v0.44.0","to":"v0.45.0","loc":7052,"days":6.86,"loc_per_day":1028.1,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":292737.0,"index":0.155,"count:narrated_steps":39.0,"per_kloc:narrated_steps":0.133,"files:narrated_steps":14.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":13.0,"per_kloc:emoji_in_code":0.044,"files:emoji_in_code":3.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # first, replace node id (class_type)","ref":"app/node_replace_manager.py:88","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/app/node_replace_manager.py#L88","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # now we are in the inner dict - \"pooled_output\" is a tensor, \"control\" is a ControlBase object, \"model_conds\" is dictio","ref":"comfy/context_windows.py:492","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/context_windows.py#L492","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # first, obtain uniform windows as normal, looping and all","ref":"comfy/context_windows.py:850","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/context_windows.py#L850","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # first, apply lora_hook to conditioning, if provided","ref":"comfy/hooks.py:748","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/hooks.py#L748","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # next, apply mask to conditioning","ref":"comfy/hooks.py:750","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/hooks.py#L750","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # finally, apply mask to conditioning and store","ref":"comfy/hooks.py:754","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/hooks.py#L754","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # first, apply lora_hook to new conditioning, if provided","ref":"comfy/hooks.py:763","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/hooks.py#L763","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # next, apply mask to new conditioning, if provided","ref":"comfy/hooks.py:765","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/hooks.py#L765","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":3.0,"secrets_low_confidence":8.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"comfy/text_encoders/flux.py","line":87,"fingerprint":"comfy/text_encoders/flux.py:generic-api-key:87"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit a72581e179); removed from the current tree but still retrievable","path":"tests-unit/comfy_api_test/v3/import_compatibility_test.py","line":35,"fingerprint":"a72581e179611a5def071b2c218f0d458ada52e8:tests-unit/comfy_api_test/v3/import_compatibility_test.py:generic-api-key:35"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit c87d526993); removed from the current tree but still retrievable","path":"comfy_api/_impl/legacy_imports.py","line":41,"fingerprint":"c87d52699334515e5f83fa66b2ee7f4c1492e82b:comfy_api/_impl/legacy_imports.py:generic-api-key:41"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit d9475dd647); removed from the current tree but still retrievable","path":"tests-unit/app_test/agent_host_test.py","line":379,"fingerprint":"d9475dd647291c33a51ba9eb3e47bc57ecb27b9e:tests-unit/app_test/agent_host_test.py:generic-api-key:379"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 31283d2892); removed from the current tree but still retrievable","path":"comfy/text_encoders/ernie.py","line":6,"fingerprint":"31283d2892f54caf9bfdf6edb9c98cbfa88c5f0c:comfy/text_encoders/ernie.py:generic-api-key:6"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit da514866d6); removed from the current tree but still retrievable","path":"tests-unit/execution_test/test_cache_provider.py","line":336,"fingerprint":"da514866d61d173f57314cac4863860c8d4c6718:tests-unit/execution_test/test_cache_provider.py:generic-api-key:336"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit b3d6ae15b3); removed from the current tree but still retrievable","path":"web/assets/TerminalOutputDrawer-BgTEspHP.js","line":694,"fingerprint":"b3d6ae15b303df46d303d31bc18a38eaa32ce00f:web/assets/TerminalOutputDrawer-BgTEspHP.js:generic-api-key:694"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit a39ea87bca); removed from the current tree but still retrievable","path":"web/assets/index-CJmKJOqY.js","line":115967,"fingerprint":"a39ea87bca0ea1b0bd7560676abf902c3dc83043:web/assets/index-CJmKJOqY.js:generic-api-key:115967"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 5262901c5c); removed from the current tree but still retrievable","path":"web/assets/index-CSl7lfOs.js","line":54778,"fingerprint":"5262901c5ce6a76f078875bcf95749d7e3ed2251:web/assets/index-CSl7lfOs.js:generic-api-key:54778"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 53646e0f32); removed from the current tree but still retrievable","path":"web/assets/index-CoOvI8ZH.js","line":73412,"fingerprint":"53646e0f322db2a1362096b15826acfdd6167024:web/assets/index-CoOvI8ZH.js:generic-api-key:73412"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 4ac401af2b); removed from the current tree but still retrievable","path":"web/assets/index-B6dYHNhg.js","line":63541,"fingerprint":"4ac401af2b3962f7a669a6757a804f7773833c47:web/assets/index-B6dYHNhg.js:generic-api-key:63541"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":28.0,"findings_high":6.0,"findings_medium":22.0,"findings_low":0.0,"weighted_findings":15.75,"scanned_lines":292737.0,"parse_errors":2.0},"findings":[{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'check_call' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":".ci/update_windows/update.py","line":150,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:.ci/update_windows/update.py:150"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-tainted-env-args","severity":"high","message":"Detected subprocess function 'check_call' with user controlled data. A malicious actor could leverage this to perform command injection. You may consider using 'shlex.quote()'. [confidence medium]","path":".ci/update_windows/update.py","line":150,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-tainted-env-args:.ci/update_windows/update.py:150"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"app/database/db.py","line":287,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:app/database/db.py:287"},{"rule_id":"opengrep/python.django.security.injection.ssrf.ssrf-injection-urllib","severity":"high","message":"Data from request object is passed to a new server-side request. This could lead to a server-side request forgery (SSRF), which could result in attackers gaining access to private organization data. To mitigate, ensure that schemes and hosts are validated against an allowlist, do not forward the res [confidence medium]","path":"script_examples/basic_api_example.py","line":109,"fingerprint":"python.django.security.injection.ssrf.ssrf-injection-urllib:script_examples/basic_api_example.py:109"},{"rule_id":"opengrep/python.django.security.injection.command.subprocess-injection","severity":"high","message":"Detected user input entering a `subprocess` call unsafely. This could result in a command injection vulnerability. An attacker could use this vulnerability to execute arbitrary commands on the host, which allows them to download malware, scan sensitive data, or run any command they wish on the serve [confidence high]","path":"tests-unit/assets_test/conftest.py","line":145,"fingerprint":"python.django.security.injection.command.subprocess-injection:tests-unit/assets_test/conftest.py:145"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"tests-unit/assets_test/conftest.py","line":145,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:tests-unit/assets_test/conftest.py:145"},{"rule_id":"opengrep/python.lang.security.audit.non-literal-import","severity":"medium","message":"Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low]","path":"app/assets/database/queries/__init__.py","line":44,"fingerprint":"python.lang.security.audit.non-literal-import:app/assets/database/queries/__init__.py:44"},{"rule_id":"opengrep/python.lang.security.audit.non-literal-import","severity":"medium","message":"Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low]","path":"app/database/db.py","line":52,"fingerprint":"python.lang.security.audit.non-literal-import:app/database/db.py:52"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"app/database/db.py","line":287,"fingerprint":"python.lang.security.audit.formatted-sql-query:app/database/db.py:287"},{"rule_id":"opengrep/python.lang.security.audit.regex_dos","severity":"medium","message":"Detected usage of re.compile with an inefficient regular expression. This can lead to regular expression denial of service, which can result in service down time. Instead, check all regexes or use safer alternatives such as pyre2. [confidence low]","path":"app/governance.py","line":57,"fingerprint":"python.lang.security.audit.regex_dos:app/governance.py:57"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"comfy/k_diffusion/utils.py","line":42,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:comfy/k_diffusion/utils.py:42"},{"rule_id":"opengrep/python.lang.security.dangerous-globals-use","severity":"medium","message":"Found non static data as an index to 'globals()'. This is extremely dangerous because it allows an attacker to execute arbitrary code on the system. Refactor your code not to use 'globals()'. [confidence low]","path":"comfy/ldm/trellis2/vae.py","line":781,"fingerprint":"python.lang.security.dangerous-globals-use:comfy/ldm/trellis2/vae.py:781"},{"rule_id":"opengrep/python.lang.security.dangerous-globals-use","severity":"medium","message":"Found non static data as an index to 'globals()'. This is extremely dangerous because it allows an attacker to execute arbitrary code on the system. Refactor your code not to use 'globals()'. [confidence low]","path":"comfy/ldm/trellis2/vae.py","line":787,"fingerprint":"python.lang.security.dangerous-globals-use:comfy/ldm/trellis2/vae.py:787"},{"rule_id":"opengrep/python.lang.security.audit.non-literal-import","severity":"medium","message":"Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low]","path":"comfy/ldm/util.py","line":86,"fingerprint":"python.lang.security.audit.non-literal-import:comfy/ldm/util.py:86"},{"rule_id":"opengrep/python.lang.security.audit.non-literal-import","severity":"medium","message":"Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low]","path":"comfy/ldm/util.py","line":88,"fingerprint":"python.lang.security.audit.non-literal-import:comfy/ldm/util.py:88"},{"rule_id":"opengrep/python.lang.security.audit.non-literal-import","severity":"medium","message":"Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low]","path":"comfy_api/generate_api_stubs.py","line":23,"fingerprint":"python.lang.security.audit.non-literal-import:comfy_api/generate_api_stubs.py:23"},{"rule_id":"opengrep/python.lang.security.audit.logging.python-logger-credential-disclosure","severity":"medium","message":"Detected a python logger call with a potential hardcoded secret \"Comfy API refused to renew the sign-in token (HTTP %s).\" being logged. This may lead to secret credentials being exposed. Make sure that the logger is not logging  sensitive information. [confidence medium]","path":"comfy_api_nodes/util/_helpers.py","line":112,"fingerprint":"python.lang.security.audit.logging.python-logger-credential-disclosure:comfy_api_nodes/util/_helpers.py:112"},{"rule_id":"opengrep/python.lang.security.audit.logging.python-logger-credential-disclosure","severity":"medium","message":"Detected a python logger call with a potential hardcoded secret \"Could not renew the sign-in token: %s\" being logged. This may lead to secret credentials being exposed. Make sure that the logger is not logging  sensitive information. [confidence medium]","path":"comfy_api_nodes/util/_helpers.py","line":124,"fingerprint":"python.lang.security.audit.logging.python-logger-credential-disclosure:comfy_api_nodes/util/_helpers.py:124"},{"rule_id":"opengrep/python.lang.security.audit.logging.python-logger-credential-disclosure","severity":"medium","message":"Detected a python logger call with a potential hardcoded secret \"Could not renew the sign-in token: %s\" being logged. This may lead to secret credentials being exposed. Make sure that the logger is not logging  sensitive information. [confidence medium]","path":"comfy_api_nodes/util/_helpers.py","line":129,"fingerprint":"python.lang.security.audit.logging.python-logger-credential-disclosure:comfy_api_nodes/util/_helpers.py:129"},{"rule_id":"opengrep/python.lang.security.insecure-hash-algorithm-sha1","severity":"medium","message":"Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead. [confidence medium]","path":"comfy_api_nodes/util/request_logger.py","line":39,"fingerprint":"python.lang.security.insecure-hash-algorithm-sha1:comfy_api_nodes/util/request_logger.py:39"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.urllib.insecure-request-object","severity":"medium","message":"Detected a 'urllib.request.Request()' object using an insecure transport protocol, 'http://'. This connection will not be encrypted. Use 'https://' instead. [confidence low]","path":"script_examples/basic_api_example.py","line":109,"fingerprint":"python.lang.security.audit.insecure-transport.urllib.insecure-request-object:script_examples/basic_api_example.py:109"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"script_examples/basic_api_example.py","line":110,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:script_examples/basic_api_example.py:110"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"script_examples/websockets_api_example.py","line":17,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:script_examples/websockets_api_example.py:17"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"script_examples/websockets_api_example.py","line":22,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:script_examples/websockets_api_example.py:22"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"script_examples/websockets_api_example.py","line":26,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:script_examples/websockets_api_example.py:26"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"script_examples/websockets_api_example_ws_images.py","line":17,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:script_examples/websockets_api_example_ws_images.py:17"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"script_examples/websockets_api_example_ws_images.py","line":22,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:script_examples/websockets_api_example_ws_images.py:22"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"script_examples/websockets_api_example_ws_images.py","line":26,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:script_examples/websockets_api_example_ws_images.py:26"}],"evidence":[],"data":{"rulesets":["python","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":6.0,"vulnerabilities":119.0,"vulns_critical":9.0,"vulns_high":63.0,"vulns_medium":39.0,"vulns_low":7.0,"vulns_unknown":1.0,"penalty":66.0},"findings":[{"rule_id":"osv/GHSA-5x8w-8jj5-q52h","severity":"critical","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4330, GHSA-5x8w-8jj5-q52h","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-5x8w-8jj5-q52h"},{"rule_id":"osv/GHSA-8g5g-8vmr-9782","severity":"critical","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4332, GHSA-8g5g-8vmr-9782","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-8g5g-8vmr-9782"},{"rule_id":"osv/GHSA-xvh5-g6gv-559v","severity":"critical","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4363, GHSA-xvh5-g6gv-559v","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-xvh5-g6gv-559v"},{"rule_id":"osv/GHSA-3f63-hfp8-52jq","severity":"critical","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-457, GHSA-3f63-hfp8-52jq","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-3f63-hfp8-52jq"},{"rule_id":"osv/GHSA-332p-7hrc-92wf","severity":"critical","message":"pillow@10.1.0 (PyPI) is affected by GHSA-332p-7hrc-92wf","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-332p-7hrc-92wf"},{"rule_id":"osv/GHSA-w889-685w-c8fh","severity":"critical","message":"pillow@10.1.0 (PyPI) is affected by GHSA-w889-685w-c8fh","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-w889-685w-c8fh"},{"rule_id":"osv/GHSA-63hf-3vf5-4wqf","severity":"critical","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2102, GHSA-63hf-3vf5-4wqf","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-63hf-3vf5-4wqf"},{"rule_id":"osv/GHSA-44vg-5wv2-h2hg","severity":"critical","message":"simpleeval@1.0.0 (PyPI) is affected by PYSEC-2026-132, GHSA-44vg-5wv2-h2hg","path":"requirements.txt","line":null,"fingerprint":"simpleeval@1.0.0 (PyPI):GHSA-44vg-5wv2-h2hg"},{"rule_id":"osv/GHSA-fgcw-684q-jj6r","severity":"critical","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-2290, GHSA-fgcw-684q-jj6r","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-fgcw-684q-jj6r"},{"rule_id":"osv/GHSA-44wm-f244-xhp3","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-1793, GHSA-44wm-f244-xhp3","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-44wm-f244-xhp3"},{"rule_id":"osv/GHSA-8v84-f9pq-wr9x","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-2253, GHSA-8v84-f9pq-wr9x","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-8v84-f9pq-wr9x"},{"rule_id":"osv/GHSA-5x94-69rx-g8h2","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-2254, GHSA-5x94-69rx-g8h2","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-5x94-69rx-g8h2"},{"rule_id":"osv/GHSA-45hq-cxwh-f6vc","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-2255, GHSA-45hq-cxwh-f6vc","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-45hq-cxwh-f6vc"},{"rule_id":"osv/GHSA-phj9-mv4w-65pm","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-2256, GHSA-phj9-mv4w-65pm","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-phj9-mv4w-65pm"},{"rule_id":"osv/GHSA-6r8x-57c9-28j4","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-3451, GHSA-6r8x-57c9-28j4","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-6r8x-57c9-28j4"},{"rule_id":"osv/GHSA-9hw9-ch79-4vh6","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-3453, GHSA-9hw9-ch79-4vh6","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-9hw9-ch79-4vh6"},{"rule_id":"osv/GHSA-xj96-63gp-2gmr","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-3454, GHSA-xj96-63gp-2gmr","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-xj96-63gp-2gmr"},{"rule_id":"osv/GHSA-62p4-gmf7-7g93","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-3493, GHSA-62p4-gmf7-7g93","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-62p4-gmf7-7g93"},{"rule_id":"osv/GHSA-jjj6-mw9f-p565","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-3495, GHSA-jjj6-mw9f-p565","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-jjj6-mw9f-p565"},{"rule_id":"osv/GHSA-vjc4-5qp5-m44j","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-3496, GHSA-vjc4-5qp5-m44j","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-vjc4-5qp5-m44j"},{"rule_id":"osv/GHSA-27h8-gf7j-v5hc","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4326, GHSA-27h8-gf7j-v5hc","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-27h8-gf7j-v5hc"},{"rule_id":"osv/GHSA-4558-3h8r-v8xp","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4327, GHSA-4558-3h8r-v8xp","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-4558-3h8r-v8xp"},{"rule_id":"osv/GHSA-58r4-6rv3-gfh8","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4329, GHSA-58r4-6rv3-gfh8","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-58r4-6rv3-gfh8"},{"rule_id":"osv/GHSA-7mwm-ghpf-9vrm","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4331, GHSA-7mwm-ghpf-9vrm","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-7mwm-ghpf-9vrm"},{"rule_id":"osv/GHSA-pchr-8j38-3x4p","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4334, GHSA-pchr-8j38-3x4p","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-pchr-8j38-3x4p"},{"rule_id":"osv/GHSA-xgh8-jp6q-p5x8","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4335, GHSA-xgh8-jp6q-p5x8","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-xgh8-jp6q-p5x8"},{"rule_id":"osv/GHSA-g842-9rc4-69pw","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4338, GHSA-g842-9rc4-69pw","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-g842-9rc4-69pw"},{"rule_id":"osv/GHSA-3j72-p6qg-6xp7","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4341, GHSA-3j72-p6qg-6xp7","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-3j72-p6qg-6xp7"},{"rule_id":"osv/GHSA-9v9v-9qvf-h2hj","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4343, GHSA-9v9v-9qvf-h2hj","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-9v9v-9qvf-h2hj"},{"rule_id":"osv/GHSA-22hg-r758-rrw9","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-22hg-r758-rrw9","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-22hg-r758-rrw9"},{"rule_id":"osv/GHSA-5xm2-6676-qcp9","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-5xm2-6676-qcp9","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-5xm2-6676-qcp9"},{"rule_id":"osv/GHSA-65qm-jvmh-6pqg","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-65qm-jvmh-6pqg","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-65qm-jvmh-6pqg"},{"rule_id":"osv/GHSA-c6hw-5grf-ff96","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-c6hw-5grf-ff96","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-c6hw-5grf-ff96"},{"rule_id":"osv/GHSA-f2g6-542v-9j58","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-f2g6-542v-9j58","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-f2g6-542v-9j58"},{"rule_id":"osv/GHSA-g7cr-3p24-7wf7","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-g7cr-3p24-7wf7","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-g7cr-3p24-7wf7"},{"rule_id":"osv/GHSA-gg2r-wvfm-q9rx","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-gg2r-wvfm-q9rx","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-gg2r-wvfm-q9rx"},{"rule_id":"osv/GHSA-j4m9-6w36-pw47","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-j4m9-6w36-pw47","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-j4m9-6w36-pw47"},{"rule_id":"osv/GHSA-jg86-v3jv-hrpm","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-jg86-v3jv-hrpm","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-jg86-v3jv-hrpm"},{"rule_id":"osv/GHSA-mrfp-p49p-3hf2","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-mrfp-p49p-3hf2","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-mrfp-p49p-3hf2"},{"rule_id":"osv/GHSA-p4wg-p73j-c528","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-p4wg-p73j-c528","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-p4wg-p73j-c528"},{"rule_id":"osv/GHSA-q45j-58j2-45rg","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-q45j-58j2-45rg","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-q45j-58j2-45rg"},{"rule_id":"osv/GHSA-xcvg-w56q-r89m","severity":"high","message":"pillow@10.1.0 (PyPI) is affected by GHSA-xcvg-w56q-r89m","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-xcvg-w56q-r89m"},{"rule_id":"osv/GHSA-6mq8-rvhq-8wgg","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1101, GHSA-6mq8-rvhq-8wgg","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-6mq8-rvhq-8wgg"},{"rule_id":"osv/GHSA-hcc4-c3v8-rx92","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2095, GHSA-hcc4-c3v8-rx92","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-hcc4-c3v8-rx92"},{"rule_id":"osv/GHSA-p998-jp59-783m","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2097, GHSA-p998-jp59-783m","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-p998-jp59-783m"},{"rule_id":"osv/GHSA-m5qp-6w8w-w647","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2098, GHSA-m5qp-6w8w-w647","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-m5qp-6w8w-w647"},{"rule_id":"osv/GHSA-jg22-mg44-37j8","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2104, GHSA-jg22-mg44-37j8","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-jg22-mg44-37j8"},{"rule_id":"osv/GHSA-hg6j-4rv6-33pg","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2105, GHSA-hg6j-4rv6-33pg","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-hg6j-4rv6-33pg"},{"rule_id":"osv/GHSA-m6qw-4cw2-hm4m","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2106, GHSA-m6qw-4cw2-hm4m","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-m6qw-4cw2-hm4m"},{"rule_id":"osv/GHSA-4fvr-rgm6-gqmc","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2107, GHSA-4fvr-rgm6-gqmc","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-4fvr-rgm6-gqmc"},{"rule_id":"osv/GHSA-xcgm-r5h9-7989","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2108, GHSA-xcgm-r5h9-7989","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-xcgm-r5h9-7989"},{"rule_id":"osv/GHSA-63hw-fmq6-xxg2","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2110, GHSA-63hw-fmq6-xxg2","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-63hw-fmq6-xxg2"},{"rule_id":"osv/GHSA-g3cq-j2xw-wf74","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2111, GHSA-g3cq-j2xw-wf74","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-g3cq-j2xw-wf74"},{"rule_id":"osv/GHSA-2fqr-mr3j-6wp8","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2112, GHSA-2fqr-mr3j-6wp8","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-2fqr-mr3j-6wp8"},{"rule_id":"osv/GHSA-9x8q-7h8h-wcw9","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2113, GHSA-9x8q-7h8h-wcw9","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-9x8q-7h8h-wcw9"},{"rule_id":"osv/GHSA-4m7w-qmgq-4wj5","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-237, GHSA-4m7w-qmgq-4wj5","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-4m7w-qmgq-4wj5"},{"rule_id":"osv/GHSA-cq5v-8q36-5273","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-3545, GHSA-cq5v-8q36-5273","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-cq5v-8q36-5273"},{"rule_id":"osv/GHSA-2g87-pp6c-29x5","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by GHSA-2g87-pp6c-29x5","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-2g87-pp6c-29x5"},{"rule_id":"osv/GHSA-5wr8-gcqf-gqf3","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by GHSA-5wr8-gcqf-gqf3","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-5wr8-gcqf-gqf3"},{"rule_id":"osv/GHSA-9xw5-w5jj-pvcg","severity":"high","message":"aiohttp@3.11.8 (PyPI) is affected by GHSA-9xw5-w5jj-pvcg","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-9xw5-w5jj-pvcg"},{"rule_id":"osv/PYSEC-2025-211","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2025-211","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):PYSEC-2025-211"},{"rule_id":"osv/PYSEC-2025-212","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2025-212","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):PYSEC-2025-212"},{"rule_id":"osv/PYSEC-2025-213","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2025-213","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):PYSEC-2025-213"},{"rule_id":"osv/PYSEC-2025-214","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2025-214","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):PYSEC-2025-214"},{"rule_id":"osv/PYSEC-2025-215","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2025-215","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):PYSEC-2025-215"},{"rule_id":"osv/PYSEC-2025-216","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2025-216","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):PYSEC-2025-216"},{"rule_id":"osv/PYSEC-2025-217","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2025-217","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):PYSEC-2025-217"},{"rule_id":"osv/PYSEC-2025-218","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2025-218","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):PYSEC-2025-218"},{"rule_id":"osv/GHSA-69w3-r845-3855","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-2288, GHSA-69w3-r845-3855","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-69w3-r845-3855"},{"rule_id":"osv/GHSA-29pf-2h5f-8g72","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-2289, GHSA-29pf-2h5f-8g72","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-29pf-2h5f-8g72"},{"rule_id":"osv/GHSA-xrqw-3rrv-vx5w","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-3929, GHSA-xrqw-3rrv-vx5w","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-xrqw-3rrv-vx5w"},{"rule_id":"osv/GHSA-x9r9-c232-4q39","severity":"high","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-4174, GHSA-x9r9-c232-4q39","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-x9r9-c232-4q39"},{"rule_id":"osv/GHSA-wjx4-4jcj-g98j","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-165, GHSA-wjx4-4jcj-g98j","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-wjx4-4jcj-g98j"},{"rule_id":"osv/GHSA-4x4j-2g7c-83w6","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-2257, GHSA-4x4j-2g7c-83w6","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-4x4j-2g7c-83w6"},{"rule_id":"osv/GHSA-r73j-pqj5-w3x7","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-2874, GHSA-r73j-pqj5-w3x7","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-r73j-pqj5-w3x7"},{"rule_id":"osv/GHSA-fj7v-r99m-22gq","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-3494, GHSA-fj7v-r99m-22gq","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-fj7v-r99m-22gq"},{"rule_id":"osv/GHSA-p8hx-v2p6-rp84","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4337, GHSA-p8hx-v2p6-rp84","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-p8hx-v2p6-rp84"},{"rule_id":"osv/GHSA-4rm8-3hmm-39fg","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by PYSEC-2026-4340, GHSA-4rm8-3hmm-39fg","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-4rm8-3hmm-39fg"},{"rule_id":"osv/GHSA-24rc-8hj2-v98c","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by GHSA-24rc-8hj2-v98c","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-24rc-8hj2-v98c"},{"rule_id":"osv/GHSA-254f-3936-288h","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by GHSA-254f-3936-288h","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-254f-3936-288h"},{"rule_id":"osv/GHSA-462x-pgg6-55fp","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by GHSA-462x-pgg6-55fp","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-462x-pgg6-55fp"},{"rule_id":"osv/GHSA-74r2-7ff9-mjj2","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by GHSA-74r2-7ff9-mjj2","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-74r2-7ff9-mjj2"},{"rule_id":"osv/GHSA-fc9g-5qg7-mf45","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by GHSA-fc9g-5qg7-mf45","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-fc9g-5qg7-mf45"},{"rule_id":"osv/GHSA-rfgq-q3w2-pmv2","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by GHSA-rfgq-q3w2-pmv2","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-rfgq-q3w2-pmv2"},{"rule_id":"osv/GHSA-vx6w-vv9f-6gvg","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by GHSA-vx6w-vv9f-6gvg","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-vx6w-vv9f-6gvg"},{"rule_id":"osv/GHSA-wqgw-9xfh-qf2g","severity":"medium","message":"pillow@10.1.0 (PyPI) is affected by GHSA-wqgw-9xfh-qf2g","path":"requirements.txt","line":null,"fingerprint":"pillow@10.1.0 (PyPI):GHSA-wqgw-9xfh-qf2g"},{"rule_id":"osv/GHSA-6jhg-hg63-jvvf","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1100, GHSA-6jhg-hg63-jvvf","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-6jhg-hg63-jvvf"},{"rule_id":"osv/GHSA-g84x-mcqj-x9qq","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1106, GHSA-g84x-mcqj-x9qq","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-g84x-mcqj-x9qq"},{"rule_id":"osv/GHSA-jj3x-wxrx-4x23","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1107, GHSA-jj3x-wxrx-4x23","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-jj3x-wxrx-4x23"},{"rule_id":"osv/GHSA-w2fm-2cpv-w7v5","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2094, GHSA-w2fm-2cpv-w7v5","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-w2fm-2cpv-w7v5"},{"rule_id":"osv/GHSA-2vrm-gr82-f7m5","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2096, GHSA-2vrm-gr82-f7m5","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-2vrm-gr82-f7m5"},{"rule_id":"osv/GHSA-3wq7-rqq7-wx6j","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2099, GHSA-3wq7-rqq7-wx6j","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-3wq7-rqq7-wx6j"},{"rule_id":"osv/GHSA-966j-vmvw-g2g9","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2100, GHSA-966j-vmvw-g2g9","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-966j-vmvw-g2g9"},{"rule_id":"osv/GHSA-mwh4-6h8g-pg8w","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2101, GHSA-mwh4-6h8g-pg8w","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-mwh4-6h8g-pg8w"},{"rule_id":"osv/GHSA-c427-h43c-vf67","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2103, GHSA-c427-h43c-vf67","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-c427-h43c-vf67"},{"rule_id":"osv/GHSA-hpj7-wq8m-9hgp","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-2109, GHSA-hpj7-wq8m-9hgp","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-hpj7-wq8m-9hgp"},{"rule_id":"osv/GHSA-mfx4-hv73-q22v","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-3546, GHSA-mfx4-hv73-q22v","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-mfx4-hv73-q22v"},{"rule_id":"osv/GHSA-mq44-7p77-q5h7","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-3547, GHSA-mq44-7p77-q5h7","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-mq44-7p77-q5h7"},{"rule_id":"osv/GHSA-494j-54xm-rwp3","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by GHSA-494j-54xm-rwp3","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-494j-54xm-rwp3"},{"rule_id":"osv/GHSA-6cjc-53gc-5rqm","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by GHSA-6cjc-53gc-5rqm","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-6cjc-53gc-5rqm"},{"rule_id":"osv/GHSA-f9xw-jh8m-3mwq","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by GHSA-f9xw-jh8m-3mwq","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-f9xw-jh8m-3mwq"},{"rule_id":"osv/GHSA-pqxq-w44r-73xw","severity":"medium","message":"aiohttp@3.11.8 (PyPI) is affected by GHSA-pqxq-w44r-73xw","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-pqxq-w44r-73xw"},{"rule_id":"osv/GHSA-mr82-8j83-vxmv","severity":"medium","message":"pydantic@2.0 (PyPI) is affected by PYSEC-2026-1812, GHSA-mr82-8j83-vxmv","path":"requirements.txt","line":null,"fingerprint":"pydantic@2.0 (PyPI):GHSA-mr82-8j83-vxmv"},{"rule_id":"osv/GHSA-37mw-44qp-f5jm","severity":"medium","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1977, GHSA-37mw-44qp-f5jm","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-37mw-44qp-f5jm"},{"rule_id":"osv/GHSA-489j-g2vx-39wf","severity":"medium","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1979, GHSA-489j-g2vx-39wf","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-489j-g2vx-39wf"},{"rule_id":"osv/GHSA-4w7r-h757-3r74","severity":"medium","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1980, GHSA-4w7r-h757-3r74","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-4w7r-h757-3r74"},{"rule_id":"osv/GHSA-59p9-h35m-wg4g","severity":"medium","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1981, GHSA-59p9-h35m-wg4g","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-59p9-h35m-wg4g"},{"rule_id":"osv/GHSA-9356-575x-2w9m","severity":"medium","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1983, GHSA-9356-575x-2w9m","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-9356-575x-2w9m"},{"rule_id":"osv/GHSA-jjph-296x-mrcr","severity":"medium","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1985, GHSA-jjph-296x-mrcr","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-jjph-296x-mrcr"},{"rule_id":"osv/GHSA-q2wp-rjmx-x6x9","severity":"medium","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1987, GHSA-q2wp-rjmx-x6x9","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-q2wp-rjmx-x6x9"},{"rule_id":"osv/GHSA-rcv9-qm8p-9p6j","severity":"medium","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1988, GHSA-rcv9-qm8p-9p6j","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-rcv9-qm8p-9p6j"},{"rule_id":"osv/GHSA-6w46-j5rx-g56g","severity":"medium","message":"pytest@7.8.0 (PyPI) is affected by PYSEC-2026-1845, GHSA-6w46-j5rx-g56g","path":"tests-unit/requirements.txt","line":null,"fingerprint":"pytest@7.8.0 (PyPI):GHSA-6w46-j5rx-g56g"},{"rule_id":"osv/GHSA-54jq-c3m8-4m76","severity":"low","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1097, GHSA-54jq-c3m8-4m76","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-54jq-c3m8-4m76"},{"rule_id":"osv/GHSA-69f9-5gxw-wvc2","severity":"low","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1099, GHSA-69f9-5gxw-wvc2","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-69f9-5gxw-wvc2"},{"rule_id":"osv/GHSA-9548-qrrj-x5pj","severity":"low","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1104, GHSA-9548-qrrj-x5pj","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-9548-qrrj-x5pj"},{"rule_id":"osv/GHSA-fh55-r93g-j68g","severity":"low","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1105, GHSA-fh55-r93g-j68g","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-fh55-r93g-j68g"},{"rule_id":"osv/GHSA-mqqc-3gqh-h2x8","severity":"low","message":"aiohttp@3.11.8 (PyPI) is affected by PYSEC-2026-1109, GHSA-mqqc-3gqh-h2x8","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-mqqc-3gqh-h2x8"},{"rule_id":"osv/GHSA-gx76-c99x-2c96","severity":"low","message":"aiohttp@3.11.8 (PyPI) is affected by GHSA-gx76-c99x-2c96","path":"requirements.txt","line":null,"fingerprint":"aiohttp@3.11.8 (PyPI):GHSA-gx76-c99x-2c96"},{"rule_id":"osv/GHSA-phhr-52qp-3mj4","severity":"low","message":"transformers@4.50.3 (PyPI) is affected by PYSEC-2026-1986, GHSA-phhr-52qp-3mj4","path":"requirements.txt","line":null,"fingerprint":"transformers@4.50.3 (PyPI):GHSA-phhr-52qp-3mj4"}],"evidence":[],"data":{"ecosystems":["PyPI"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":29.0,"findings":198.0,"findings_high":141.0,"findings_medium":45.0,"findings_low":12.0,"penalty":1780.8},"findings":[{"rule_id":"zizmor/dangerous-triggers","severity":"high","message":"use of fundamentally insecure workflow trigger [confidence medium]","path":".github/workflows/api-node-template.yml","line":4,"fingerprint":"dangerous-triggers:.github/workflows/api-node-template.yml:4"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/api-node-template.yml","line":18,"fingerprint":"unpinned-uses:.github/workflows/api-node-template.yml:18"},{"rule_id":"zizmor/github-app","severity":"high","message":"dangerous use of GitHub App tokens [confidence high]","path":".github/workflows/backport_release.yaml","line":25,"fingerprint":"github-app:.github/workflows/backport_release.yaml:25"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/check-ai-co-authors.yml","line":14,"fingerprint":"unpinned-uses:.github/workflows/check-ai-co-authors.yml:14"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/check-line-endings.yml","line":13,"fingerprint":"unpinned-uses:.github/workflows/check-line-endings.yml:13"},{"rule_id":"zizmor/dangerous-triggers","severity":"high","message":"use of fundamentally insecure workflow trigger [confidence medium]","path":".github/workflows/cla.yml","line":6,"fingerprint":"dangerous-triggers:.github/workflows/cla.yml:6"},{"rule_id":"zizmor/dangerous-triggers","severity":"high","message":"use of fundamentally insecure workflow trigger [confidence medium]","path":".github/workflows/cla.yml","line":4,"fingerprint":"dangerous-triggers:.github/workflows/cla.yml:4"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/cla.yml","line":102,"fingerprint":"unpinned-uses:.github/workflows/cla.yml:102"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/openapi-lint.yml","line":20,"fingerprint":"unpinned-uses:.github/workflows/openapi-lint.yml:20"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/openapi-lint.yml","line":23,"fingerprint":"unpinned-uses:.github/workflows/openapi-lint.yml:23"},{"rule_id":"zizmor/dangerous-triggers","severity":"high","message":"use of fundamentally insecure workflow trigger [confidence medium]","path":".github/workflows/pullrequest-ci-run.yml","line":5,"fingerprint":"dangerous-triggers:.github/workflows/pullrequest-ci-run.yml:5"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/pullrequest-ci-run.yml","line":31,"fingerprint":"unpinned-uses:.github/workflows/pullrequest-ci-run.yml:31"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/pullrequest-ci-run.yml","line":45,"fingerprint":"unpinned-uses:.github/workflows/pullrequest-ci-run.yml:45"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":28,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:28"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":29,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:29"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":30,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:30"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":31,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:31"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":33,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:33"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":34,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:34"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":35,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:35"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":36,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:36"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":42,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:42"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":44,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:44"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":45,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:45"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":46,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:46"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":47,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:47"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":51,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:51"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":52,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:52"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":53,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:53"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":57,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:57"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":58,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:58"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":59,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:59"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":62,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:62"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":64,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:64"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":65,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:65"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":66,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:66"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":67,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:67"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":68,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:68"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":71,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:71"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":72,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:72"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":73,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:73"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":74,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:74"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":75,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:75"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":79,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:79"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":83,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:83"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":85,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:85"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":86,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:86"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":87,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:87"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":88,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:88"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":89,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:89"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ruff.yml","line":12,"fingerprint":"unpinned-uses:.github/workflows/ruff.yml:12"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ruff.yml","line":15,"fingerprint":"unpinned-uses:.github/workflows/ruff.yml:15"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ruff.yml","line":31,"fingerprint":"unpinned-uses:.github/workflows/ruff.yml:31"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ruff.yml","line":34,"fingerprint":"unpinned-uses:.github/workflows/ruff.yml:34"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":114,"fingerprint":"template-injection:.github/workflows/stable-release.yml:114"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":117,"fingerprint":"template-injection:.github/workflows/stable-release.yml:117"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":125,"fingerprint":"template-injection:.github/workflows/stable-release.yml:125"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":125,"fingerprint":"template-injection:.github/workflows/stable-release.yml:125"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":125,"fingerprint":"template-injection:.github/workflows/stable-release.yml:125"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":125,"fingerprint":"template-injection:.github/workflows/stable-release.yml:125"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":125,"fingerprint":"template-injection:.github/workflows/stable-release.yml:125"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":129,"fingerprint":"template-injection:.github/workflows/stable-release.yml:129"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":132,"fingerprint":"template-injection:.github/workflows/stable-release.yml:132"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":139,"fingerprint":"template-injection:.github/workflows/stable-release.yml:139"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":160,"fingerprint":"template-injection:.github/workflows/stable-release.yml:160"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":168,"fingerprint":"template-injection:.github/workflows/stable-release.yml:168"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":168,"fingerprint":"template-injection:.github/workflows/stable-release.yml:168"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/stable-release.yml","line":99,"fingerprint":"unpinned-uses:.github/workflows/stable-release.yml:99"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/stable-release.yml","line":104,"fingerprint":"unpinned-uses:.github/workflows/stable-release.yml:104"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/stable-release.yml","line":182,"fingerprint":"unpinned-uses:.github/workflows/stable-release.yml:182"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/stale-issues.yml","line":13,"fingerprint":"unpinned-uses:.github/workflows/stale-issues.yml:13"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-build.yml","line":23,"fingerprint":"unpinned-uses:.github/workflows/test-build.yml:23"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-build.yml","line":25,"fingerprint":"unpinned-uses:.github/workflows/test-build.yml:25"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-ci.yml","line":43,"fingerprint":"unpinned-uses:.github/workflows/test-ci.yml:43"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-ci.yml","line":93,"fingerprint":"unpinned-uses:.github/workflows/test-ci.yml:93"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-execution.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/test-execution.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-execution.yml","line":19,"fingerprint":"unpinned-uses:.github/workflows/test-execution.yml:19"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-launch.yml","line":14,"fingerprint":"unpinned-uses:.github/workflows/test-launch.yml:14"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-launch.yml","line":18,"fingerprint":"unpinned-uses:.github/workflows/test-launch.yml:18"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-launch.yml","line":42,"fingerprint":"unpinned-uses:.github/workflows/test-launch.yml:42"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-unit.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/test-unit.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-unit.yml","line":19,"fingerprint":"unpinned-uses:.github/workflows/test-unit.yml:19"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/update-api-stubs.yml","line":14,"fingerprint":"unpinned-uses:.github/workflows/update-api-stubs.yml:14"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/update-api-stubs.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/update-api-stubs.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/update-api-stubs.yml","line":46,"fingerprint":"unpinned-uses:.github/workflows/update-api-stubs.yml:46"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/update-ci-container.yml","line":23,"fingerprint":"template-injection:.github/workflows/update-ci-container.yml:23"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/update-ci-container.yml","line":25,"fingerprint":"template-injection:.github/workflows/update-ci-container.yml:25"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/update-ci-container.yml","line":30,"fingerprint":"unpinned-uses:.github/workflows/update-ci-container.yml:30"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/update-ci-container.yml","line":48,"fingerprint":"unpinned-uses:.github/workflows/update-ci-container.yml:48"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/update-version.yml","line":55,"fingerprint":"template-injection:.github/workflows/update-version.yml:55"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/update-version.yml","line":56,"fingerprint":"template-injection:.github/workflows/update-version.yml:56"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/update-version.yml","line":56,"fingerprint":"template-injection:.github/workflows/update-version.yml:56"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/update-version.yml","line":59,"fingerprint":"template-injection:.github/workflows/update-version.yml:59"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/update-version.yml","line":22,"fingerprint":"unpinned-uses:.github/workflows/update-version.yml:22"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/update-version.yml","line":25,"fingerprint":"unpinned-uses:.github/workflows/update-version.yml:25"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_arm64_release_dependencies.yml","line":21,"fingerprint":"unpinned-uses:.github/workflows/windows_arm64_release_dependencies.yml:21"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_arm64_release_dependencies.yml","line":22,"fingerprint":"unpinned-uses:.github/workflows/windows_arm64_release_dependencies.yml:22"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_arm64_release_dependencies.yml","line":48,"fingerprint":"unpinned-uses:.github/workflows/windows_arm64_release_dependencies.yml:48"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":56,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies.yml:56"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":56,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies.yml:56"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":60,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies.yml:60"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":60,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies.yml:60"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":60,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies.yml:60"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":64,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies.yml:64"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":64,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies.yml:64"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":64,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies.yml:64"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":41,"fingerprint":"unpinned-uses:.github/workflows/windows_release_dependencies.yml:41"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":42,"fingerprint":"unpinned-uses:.github/workflows/windows_release_dependencies.yml:42"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_dependencies.yml","line":67,"fingerprint":"unpinned-uses:.github/workflows/windows_release_dependencies.yml:67"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies_manual.yml","line":48,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies_manual.yml:48"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies_manual.yml","line":52,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies_manual.yml:52"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies_manual.yml","line":56,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies_manual.yml:56"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies_manual.yml","line":56,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies_manual.yml:56"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_dependencies_manual.yml","line":56,"fingerprint":"template-injection:.github/workflows/windows_release_dependencies_manual.yml:56"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_dependencies_manual.yml","line":33,"fingerprint":"unpinned-uses:.github/workflows/windows_release_dependencies_manual.yml:33"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_dependencies_manual.yml","line":34,"fingerprint":"unpinned-uses:.github/workflows/windows_release_dependencies_manual.yml:34"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_dependencies_manual.yml","line":59,"fingerprint":"unpinned-uses:.github/workflows/windows_release_dependencies_manual.yml:59"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":46,"fingerprint":"template-injection:.github/workflows/windows_release_nightly_pytorch.yml:46"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":46,"fingerprint":"template-injection:.github/workflows/windows_release_nightly_pytorch.yml:46"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":46,"fingerprint":"template-injection:.github/workflows/windows_release_nightly_pytorch.yml:46"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":46,"fingerprint":"template-injection:.github/workflows/windows_release_nightly_pytorch.yml:46"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":49,"fingerprint":"template-injection:.github/workflows/windows_release_nightly_pytorch.yml:49"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":52,"fingerprint":"template-injection:.github/workflows/windows_release_nightly_pytorch.yml:52"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":55,"fingerprint":"template-injection:.github/workflows/windows_release_nightly_pytorch.yml:55"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":75,"fingerprint":"template-injection:.github/workflows/windows_release_nightly_pytorch.yml:75"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":35,"fingerprint":"unpinned-uses:.github/workflows/windows_release_nightly_pytorch.yml:35"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":39,"fingerprint":"unpinned-uses:.github/workflows/windows_release_nightly_pytorch.yml:39"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":88,"fingerprint":"unpinned-uses:.github/workflows/windows_release_nightly_pytorch.yml:88"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":44,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:44"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":47,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:47"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":59,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:59"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":59,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:59"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":59,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:59"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":59,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:59"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":62,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:62"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":65,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:65"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":66,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:66"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/windows_release_package.yml","line":90,"fingerprint":"template-injection:.github/workflows/windows_release_package.yml:90"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_package.yml","line":35,"fingerprint":"unpinned-uses:.github/workflows/windows_release_package.yml:35"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_package.yml","line":51,"fingerprint":"unpinned-uses:.github/workflows/windows_release_package.yml:51"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/windows_release_package.yml","line":100,"fingerprint":"unpinned-uses:.github/workflows/windows_release_package.yml:100"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/backport_release.yaml","line":30,"fingerprint":"artipacked:.github/workflows/backport_release.yaml:30"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/check-ai-co-authors.yml","line":13,"fingerprint":"artipacked:.github/workflows/check-ai-co-authors.yml:13"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/check-ai-co-authors.yml","line":8,"fingerprint":"excessive-permissions:.github/workflows/check-ai-co-authors.yml:8"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/check-line-endings.yml","line":12,"fingerprint":"artipacked:.github/workflows/check-line-endings.yml:12"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/check-line-endings.yml","line":8,"fingerprint":"excessive-permissions:.github/workflows/check-line-endings.yml:8"},{"rule_id":"zizmor/archived-uses","severity":"medium","message":"action or reusable workflow from archived repository [confidence high]","path":".github/workflows/cla.yml","line":59,"fingerprint":"archived-uses:.github/workflows/cla.yml:59"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/notify-on-merge.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/notify-on-merge.yml:9"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/openapi-lint.yml","line":19,"fingerprint":"artipacked:.github/workflows/openapi-lint.yml:19"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/pullrequest-ci-run.yml","line":3,"fingerprint":"excessive-permissions:.github/workflows/pullrequest-ci-run.yml:3"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/pullrequest-ci-run.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/pullrequest-ci-run.yml:9"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/release-stable-all.yml","line":18,"fingerprint":"secrets-inherit:.github/workflows/release-stable-all.yml:18"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/release-stable-all.yml","line":35,"fingerprint":"secrets-inherit:.github/workflows/release-stable-all.yml:35"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/release-stable-all.yml","line":53,"fingerprint":"secrets-inherit:.github/workflows/release-stable-all.yml:53"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/release-stable-all.yml","line":70,"fingerprint":"secrets-inherit:.github/workflows/release-stable-all.yml:70"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/release-stable-all.yml","line":87,"fingerprint":"secrets-inherit:.github/workflows/release-stable-all.yml:87"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/release-webhook.yml","line":8,"fingerprint":"excessive-permissions:.github/workflows/release-webhook.yml:8"},{"rule_id":"zizmor/template-injection","severity":"medium","message":"code injection via template expansion [confidence high]","path":".github/workflows/release-webhook.yml","line":32,"fingerprint":"template-injection:.github/workflows/release-webhook.yml:32"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ruff.yml","line":11,"fingerprint":"artipacked:.github/workflows/ruff.yml:11"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ruff.yml","line":30,"fingerprint":"artipacked:.github/workflows/ruff.yml:30"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ruff.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/ruff.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ruff.yml","line":6,"fingerprint":"excessive-permissions:.github/workflows/ruff.yml:6"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ruff.yml","line":25,"fingerprint":"excessive-permissions:.github/workflows/ruff.yml:25"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/tag-dispatch-cloud.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/tag-dispatch-cloud.yml:9"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/test-build.yml","line":23,"fingerprint":"artipacked:.github/workflows/test-build.yml:23"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test-build.yml","line":15,"fingerprint":"excessive-permissions:.github/workflows/test-build.yml:15"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test-ci.yml","line":3,"fingerprint":"excessive-permissions:.github/workflows/test-ci.yml:3"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test-ci.yml","line":20,"fingerprint":"excessive-permissions:.github/workflows/test-ci.yml:20"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test-ci.yml","line":74,"fingerprint":"excessive-permissions:.github/workflows/test-ci.yml:74"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/test-execution.yml","line":17,"fingerprint":"artipacked:.github/workflows/test-execution.yml:17"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test-execution.yml","line":10,"fingerprint":"excessive-permissions:.github/workflows/test-execution.yml:10"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/test-launch.yml","line":13,"fingerprint":"artipacked:.github/workflows/test-launch.yml:13"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test-launch.yml","line":10,"fingerprint":"excessive-permissions:.github/workflows/test-launch.yml:10"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/test-unit.yml","line":17,"fingerprint":"artipacked:.github/workflows/test-unit.yml:17"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test-unit.yml","line":10,"fingerprint":"excessive-permissions:.github/workflows/test-unit.yml:10"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/update-api-stubs.yml","line":13,"fingerprint":"artipacked:.github/workflows/update-api-stubs.yml:13"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/update-api-stubs.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/update-api-stubs.yml:9"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/update-ci-container.yml","line":29,"fingerprint":"artipacked:.github/workflows/update-ci-container.yml:29"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/update-ci-container.yml","line":14,"fingerprint":"excessive-permissions:.github/workflows/update-ci-container.yml:14"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/update-version.yml","line":21,"fingerprint":"artipacked:.github/workflows/update-version.yml:21"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/windows_arm64_release_dependencies.yml","line":21,"fingerprint":"artipacked:.github/workflows/windows_arm64_release_dependencies.yml:21"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/windows_arm64_release_dependencies.yml","line":18,"fingerprint":"excessive-permissions:.github/workflows/windows_arm64_release_dependencies.yml:18"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/windows_release_dependencies.yml","line":41,"fingerprint":"artipacked:.github/workflows/windows_release_dependencies.yml:41"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/windows_release_dependencies.yml","line":38,"fingerprint":"excessive-permissions:.github/workflows/windows_release_dependencies.yml:38"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/windows_release_dependencies_manual.yml","line":33,"fingerprint":"artipacked:.github/workflows/windows_release_dependencies_manual.yml:33"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/windows_release_dependencies_manual.yml","line":30,"fingerprint":"excessive-permissions:.github/workflows/windows_release_dependencies_manual.yml:30"},{"rule_id":"zizmor/adhoc-packages","severity":"low","message":"ad-hoc installation of packages [confidence high]","path":".github/workflows/openapi-lint.yml","line":28,"fingerprint":"adhoc-packages:.github/workflows/openapi-lint.yml:28"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/release-stable-all.yml","line":18,"fingerprint":"self-repository:.github/workflows/release-stable-all.yml:18"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/release-stable-all.yml","line":35,"fingerprint":"self-repository:.github/workflows/release-stable-all.yml:35"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/release-stable-all.yml","line":53,"fingerprint":"self-repository:.github/workflows/release-stable-all.yml:53"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/release-stable-all.yml","line":70,"fingerprint":"self-repository:.github/workflows/release-stable-all.yml:70"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/release-stable-all.yml","line":87,"fingerprint":"self-repository:.github/workflows/release-stable-all.yml:87"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/stable-release.yml","line":128,"fingerprint":"template-injection:.github/workflows/stable-release.yml:128"},{"rule_id":"zizmor/adhoc-packages","severity":"low","message":"ad-hoc installation of packages [confidence high]","path":".github/workflows/update-api-stubs.yml","line":25,"fingerprint":"adhoc-packages:.github/workflows/update-api-stubs.yml:25"},{"rule_id":"zizmor/superfluous-actions","severity":"info","message":"action functionality is already included by the runner [confidence high]","path":".github/workflows/stable-release.yml","line":182,"fingerprint":"superfluous-actions:.github/workflows/stable-release.yml:182"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/update-ci-container.yml","line":43,"fingerprint":"template-injection:.github/workflows/update-ci-container.yml:43"},{"rule_id":"zizmor/superfluous-actions","severity":"info","message":"action functionality is already included by the runner [confidence high]","path":".github/workflows/windows_release_nightly_pytorch.yml","line":88,"fingerprint":"superfluous-actions:.github/workflows/windows_release_nightly_pytorch.yml:88"},{"rule_id":"zizmor/superfluous-actions","severity":"info","message":"action functionality is already included by the runner [confidence high]","path":".github/workflows/windows_release_package.yml","line":100,"fingerprint":"superfluous-actions:.github/workflows/windows_release_package.yml:100"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":1.0,"check:dependency_updates":0.0,"check:signed_commits":1.0,"check:lockfiles":1.0,"signed_commit_share":0.97,"unpinned_manifests":0.0},"findings":[],"evidence":[{"kind":"posture","description":"Security policy: SECURITY.md","ref":"SECURITY.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":2.0,"binary_assets":47.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release v0.45.0 ships ComfyUI_windows_portable_amd.7z (9042 downloads)","ref":"ComfyUI_windows_portable_amd.7z","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_amd.7z","weight":0.0},{"kind":"binary-release-asset","description":"release v0.45.0 ships ComfyUI_windows_portable_intel.7z (3415 downloads)","ref":"ComfyUI_windows_portable_intel.7z","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_intel.7z","weight":0.0},{"kind":"binary-release-asset","description":"release v0.45.0 ships ComfyUI_windows_portable_nvidia.7z (82549 downloads)","ref":"ComfyUI_windows_portable_nvidia.7z","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_nvidia.7z","weight":0.0},{"kind":"binary-release-asset","description":"release v0.45.0 ships ComfyUI_windows_portable_nvidia_arm64.7z (991 downloads)","ref":"ComfyUI_windows_portable_nvidia_arm64.7z","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_nvidia_arm64.7z","weight":0.0},{"kind":"binary-release-asset","description":"release v0.45.0 ships ComfyUI_windows_portable_nvidia_cu126.7z (15714 downloads)","ref":"ComfyUI_windows_portable_nvidia_cu126.7z","url":"https://github.com/Comfy-Org/ComfyUI/releases/download/v0.45.0/ComfyUI_windows_portable_nvidia_cu126.7z","weight":0.0},{"kind":"readme-download-lure","description":"links directly to a downloadable archive or installer","ref":"README.md","url":null,"weight":0.0}],"data":{"signals":["binary-release-assets","readme-download-lure"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":12753.0,"function_nloc":204411.0,"mean_ccn":3.32,"p90_ccn":7.0,"complex_functions":322.0,"long_functions":164.0,"many_param_functions":1178.0,"risky_nloc_share":0.1934},"findings":[],"evidence":[{"kind":"complex-function","description":"detect_unet_config in comfy/model_detection.py: complexity 242, 1163 lines","ref":"comfy/model_detection.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/model_detection.py#L44","weight":1.0},{"kind":"complex-function","description":"__init__ in comfy/sd.py: complexity 133, 611 lines","ref":"comfy/sd.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/sd.py#L499","weight":1.0},{"kind":"complex-function","description":"_save_transcoded in comfy_api/latest/_input_impl/video_types.py: complexity 119, 291 lines","ref":"comfy_api/latest/_input_impl/video_types.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy_api/latest/_input_impl/video_types.py#L939","weight":1.0},{"kind":"complex-function","description":"load_text_encoder_state_dicts in comfy/sd.py: complexity 112, 354 lines","ref":"comfy/sd.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/sd.py#L1887","weight":1.0},{"kind":"complex-function","description":"model_lora_keys_unet in comfy/lora.py: complexity 104, 202 lines","ref":"comfy/lora.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/lora.py#L196","weight":1.0},{"kind":"complex-function","description":"_request_base in comfy_api_nodes/util/client.py: complexity 98, 354 lines","ref":"comfy_api_nodes/util/client.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy_api_nodes/util/client.py#L962","weight":1.0},{"kind":"complex-function","description":"draw_wholebody_keypoints in comfy_extras/pose/keypoint_draw.py: complexity 89, 138 lines","ref":"comfy_extras/pose/keypoint_draw.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy_extras/pose/keypoint_draw.py#L174","weight":1.0},{"kind":"complex-function","description":"forward in comfy/text_encoders/gemma4.py: complexity 87, 161 lines","ref":"comfy/text_encoders/gemma4.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy/text_encoders/gemma4.py#L449","weight":1.0},{"kind":"complex-function","description":"save_glb in comfy_extras/nodes_save_3d.py: complexity 82, 302 lines","ref":"comfy_extras/nodes_save_3d.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/comfy_extras/nodes_save_3d.py#L109","weight":1.0},{"kind":"complex-function","description":"_validate_payload in app/governance.py: complexity 70, 89 lines","ref":"app/governance.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/app/governance.py#L312","weight":1.0}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":231006.0,"duplicated_lines":27463.0,"duplicated_share":0.1189,"files":781.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: alembic_db/versions/0001_assets.py:19 and alembic_db/versions/0007_record_content_split.py:95","ref":"alembic_db/versions/0001_assets.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/alembic_db/versions/0001_assets.py#L19","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: alembic_db/versions/0001_assets.py:32 and alembic_db/versions/0002_merge_to_asset_references.py:212","ref":"alembic_db/versions/0001_assets.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/alembic_db/versions/0001_assets.py#L32","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: alembic_db/versions/0005_allow_case_sensitive_tags.py:32 and alembic_db/versions/0005_allow_case_sensitive_tags.py:98","ref":"alembic_db/versions/0005_allow_case_sensitive_tags.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/alembic_db/versions/0005_allow_case_sensitive_tags.py#L32","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: alembic_db/versions/0007_record_content_split.py:70 and alembic_db/versions/0008_drop_asset_meta.py:26","ref":"alembic_db/versions/0007_record_content_split.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/alembic_db/versions/0007_record_content_split.py#L70","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/assets/api/routes.py:451 and app/assets/api/routes.py:994","ref":"app/assets/api/routes.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/app/assets/api/routes.py#L451","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/assets/api/schemas_in.py:60 and app/assets/api/schemas_in.py:152","ref":"app/assets/api/schemas_in.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/app/assets/api/schemas_in.py#L60","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/assets/database/queries/tags.py:107 and app/assets/services/tagging.py:146","ref":"app/assets/database/queries/tags.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/app/assets/database/queries/tags.py#L107","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/assets/manager.py:54 and app/assets/manager.py:121","ref":"app/assets/manager.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/app/assets/manager.py#L54","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/assets/scanner.py:359 and app/assets/scanner.py:494","ref":"app/assets/scanner.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/app/assets/scanner.py#L359","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/assets/scanner_changes.py:58 and app/assets/scanner_changes.py:152","ref":"app/assets/scanner_changes.py","url":"https://github.com/Comfy-Org/ComfyUI/blob/eee59185ff4f43ae2d9ad122b245619d27d9daad/app/assets/scanner_changes.py#L58","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":1231.0,"weighted_findings":1747.75,"scanned_lines":292737.0,"category:best-practice":36.0,"category:correctness":889.0,"category:maintainability":306.0},"findings":[{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_logs` is defined inside a function but never used","path":"api_server/routes/internal/internal_routes.py","line":22,"fingerprint":"python.lang.maintainability.useless-inner-function:api_server/routes/internal/internal_routes.py:22"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_raw_logs` is defined inside a function but never used","path":"api_server/routes/internal/internal_routes.py","line":26,"fingerprint":"python.lang.maintainability.useless-inner-function:api_server/routes/internal/internal_routes.py:26"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `subscribe_logs` is defined inside a function but never used","path":"api_server/routes/internal/internal_routes.py","line":34,"fingerprint":"python.lang.maintainability.useless-inner-function:api_server/routes/internal/internal_routes.py:34"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_folder_paths` is defined inside a function but never used","path":"api_server/routes/internal/internal_routes.py","line":47,"fingerprint":"python.lang.maintainability.useless-inner-function:api_server/routes/internal/internal_routes.py:47"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_files` is defined inside a function but never used","path":"api_server/routes/internal/internal_routes.py","line":54,"fingerprint":"python.lang.maintainability.useless-inner-function:api_server/routes/internal/internal_routes.py:54"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_settings` is defined inside a function but never used","path":"app/app_settings.py","line":37,"fingerprint":"python.lang.maintainability.useless-inner-function:app/app_settings.py:37"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_setting` is defined inside a function but never used","path":"app/app_settings.py","line":41,"fingerprint":"python.lang.maintainability.useless-inner-function:app/app_settings.py:41"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `post_settings` is defined inside a function but never used","path":"app/app_settings.py","line":50,"fingerprint":"python.lang.maintainability.useless-inner-function:app/app_settings.py:50"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `post_setting` is defined inside a function but never used","path":"app/app_settings.py","line":57,"fingerprint":"python.lang.maintainability.useless-inner-function:app/app_settings.py:57"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"app/asset_export.py","line":341,"fingerprint":"python.lang.best-practice.open-never-closed:app/asset_export.py:341"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"app/assets/scanner_admission.py","line":60,"fingerprint":"python.lang.best-practice.arbitrary-sleep:app/assets/scanner_admission.py:60"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_workflow_templates` is defined inside a function but never used","path":"app/custom_node_manager.py","line":96,"fingerprint":"python.lang.maintainability.useless-inner-function:app/custom_node_manager.py:96"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_i18n` is defined inside a function but never used","path":"app/custom_node_manager.py","line":140,"fingerprint":"python.lang.maintainability.useless-inner-function:app/custom_node_manager.py:140"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `set_sqlite_pragma` is defined inside a function but never used","path":"app/database/db.py","line":250,"fingerprint":"python.lang.maintainability.useless-inner-function:app/database/db.py:250"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `set_sqlite_pragma` is defined inside a function but never used","path":"app/database/db.py","line":308,"fingerprint":"python.lang.maintainability.useless-inner-function:app/database/db.py:308"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `configure_write_connection` is defined inside a function but never used","path":"app/database/db.py","line":319,"fingerprint":"python.lang.maintainability.useless-inner-function:app/database/db.py:319"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `begin_immediate` is defined inside a function but never used","path":"app/database/db.py","line":324,"fingerprint":"python.lang.maintainability.useless-inner-function:app/database/db.py:324"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_model_folders` is defined inside a function but never used","path":"app/model_manager.py","line":30,"fingerprint":"python.lang.maintainability.useless-inner-function:app/model_manager.py:30"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_all_models` is defined inside a function but never used","path":"app/model_manager.py","line":46,"fingerprint":"python.lang.maintainability.useless-inner-function:app/model_manager.py:46"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_model_preview` is defined inside a function but never used","path":"app/model_manager.py","line":54,"fingerprint":"python.lang.maintainability.useless-inner-function:app/model_manager.py:54"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_node_replacements` is defined inside a function but never used","path":"app/node_replace_manager.py","line":121,"fingerprint":"python.lang.maintainability.useless-inner-function:app/node_replace_manager.py:121"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_global_subgraphs` is defined inside a function but never used","path":"app/subgraph_manager.py","line":123,"fingerprint":"python.lang.maintainability.useless-inner-function:app/subgraph_manager.py:123"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_global_subgraph` is defined inside a function but never used","path":"app/subgraph_manager.py","line":128,"fingerprint":"python.lang.maintainability.useless-inner-function:app/subgraph_manager.py:128"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `get_users` is defined inside a function but never used","path":"app/user_manager.py","line":126,"fingerprint":"python.lang.maintainability.useless-inner-function:app/user_manager.py:126"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `post_users` is defined inside a function but never used","path":"app/user_manager.py","line":137,"fingerprint":"python.lang.maintainability.useless-inner-function:app/user_manager.py:137"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `listuserdata` is defined inside a function but never used","path":"app/user_manager.py","line":150,"fingerprint":"python.lang.maintainability.useless-inner-function:app/user_manager.py:150"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `list_userdata_v2` is defined inside a function but never used","path":"app/user_manager.py","line":214,"fingerprint":"python.lang.maintainability.useless-inner-function:app/user_manager.py:214"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `getuserdata` is defined inside a function but never used","path":"app/user_manager.py","line":334,"fingerprint":"python.lang.maintainability.useless-inner-function:app/user_manager.py:334"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `post_userdata` is defined inside a function but never used","path":"app/user_manager.py","line":364,"fingerprint":"python.lang.maintainability.useless-inner-function:app/user_manager.py:364"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `delete_userdata` is defined inside a function but never used","path":"app/user_manager.py","line":427,"fingerprint":"python.lang.maintainability.useless-inner-function:app/user_manager.py:427"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `move_userdata` is defined inside a function but never used","path":"app/user_manager.py","line":437,"fingerprint":"python.lang.maintainability.useless-inner-function:app/user_manager.py:437"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"comfy/anonymous_file.py","line":41,"fingerprint":"python.lang.best-practice.open-never-closed:comfy/anonymous_file.py:41"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"comfy/anonymous_file.py","line":48,"fingerprint":"python.lang.best-practice.open-never-closed:comfy/anonymous_file.py:48"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/clip_model.py","line":281,"fingerprint":"python.lang.correctness.return-in-init:comfy/clip_model.py:281"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/controlnet.py","line":101,"fingerprint":"python.lang.correctness.return-in-init:comfy/controlnet.py:101"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"comfy/k_diffusion/utils.py","line":289,"fingerprint":"python.lang.best-practice.open-never-closed:comfy/k_diffusion/utils.py:289"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"comfy/k_diffusion/utils.py","line":291,"fingerprint":"python.lang.best-practice.open-never-closed:comfy/k_diffusion/utils.py:291"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/latent_formats.py","line":238,"fingerprint":"python.lang.correctness.return-in-init:comfy/latent_formats.py:238"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"comfy/ldm/ace/ace_step15.py","line":1130,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:comfy/ldm/ace/ace_step15.py:1130"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"comfy/ldm/ace/ace_step15.py","line":1133,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:comfy/ldm/ace/ace_step15.py:1133"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.identical-is-comparison","severity":"high","message":"Found identical comparison using is. Ensure this is what you intended.","path":"comfy/ldm/ace/ace_step15.py","line":1136,"fingerprint":"python.lang.correctness.common-mistakes.identical-is-comparison:comfy/ldm/ace/ace_step15.py:1136"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/flux/controlnet.py","line":62,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/flux/controlnet.py:62"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/flux/controlnet.py","line":64,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/flux/controlnet.py:64"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/flux3/model.py","line":96,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/flux3/model.py:96"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/flux3/model.py","line":100,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/flux3/model.py:100"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/hidream_o1/model.py","line":205,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/hidream_o1/model.py:205"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/hidream_o1/model.py","line":206,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/hidream_o1/model.py:206"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/hidream_o1/model.py","line":237,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/hidream_o1/model.py:237"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/hidream_o1/model.py","line":250,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/hidream_o1/model.py:250"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/hydit/models.py","line":65,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/hydit/models.py:65"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/kandinsky5/model.py","line":383,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/kandinsky5/model.py:383"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/kandinsky5/model.py","line":384,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/kandinsky5/model.py:384"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/kandinsky5/model.py","line":386,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/kandinsky5/model.py:386"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/lumina/model.py","line":876,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/lumina/model.py:876"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/lumina/model.py","line":877,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/lumina/model.py:877"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/lumina/model.py","line":880,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/lumina/model.py:880"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/lumina/model.py","line":1107,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/lumina/model.py:1107"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/lumina/model.py","line":1108,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/lumina/model.py:1108"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/lumina/model.py","line":1111,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/lumina/model.py:1111"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/mage_flow/model.py","line":146,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/mage_flow/model.py:146"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/mage_flow/model.py","line":147,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/mage_flow/model.py:147"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/mage_flow/model.py","line":149,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/mage_flow/model.py:149"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/minimax/model.py","line":736,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/minimax/model.py:736"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/minimax/model.py","line":868,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/minimax/model.py:868"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpect","path":"comfy/ldm/modules/attention.py","line":1227,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/attention.py:1227"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpect","path":"comfy/ldm/modules/attention.py","line":1236,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/attention.py:1236"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpect","path":"comfy/ldm/modules/attention.py","line":1343,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/attention.py:1343"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpect","path":"comfy/ldm/modules/attention.py","line":1382,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/attention.py:1382"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/modules/diffusionmodules/mmdit.py","line":465,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/modules/diffusionmodules/mmdit.py:465"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/modules/diffusionmodules/mmdit.py","line":745,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/modules/diffusionmodules/mmdit.py:745"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/modules/diffusionmodules/openaimodel.py","line":853,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/diffusionmodules/openaimodel.py:853"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/modules/diffusionmodules/openaimodel.py","line":854,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/diffusionmodules/openaimodel.py:854"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/modules/diffusionmodules/openaimodel.py","line":879,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/diffusionmodules/openaimodel.py:879"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/modules/diffusionmodules/openaimodel.py","line":893,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/diffusionmodules/openaimodel.py:893"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/modules/diffusionmodules/openaimodel.py","line":906,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/modules/diffusionmodules/openaimodel.py:906"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/pixart/pixartms.py","line":47,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/pixart/pixartms.py:47"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/pixart/pixartms.py","line":108,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/pixart/pixartms.py:108"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/qwen_image/model.py","line":529,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/qwen_image/model.py:529"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/qwen_image/model.py","line":530,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/qwen_image/model.py:530"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/qwen_image/model.py","line":532,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/qwen_image/model.py:532"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/qwen_image21/model.py","line":466,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/qwen_image21/model.py:466"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/qwen_image21/model.py","line":467,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/qwen_image21/model.py:467"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/qwen_image21/model.py","line":473,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/qwen_image21/model.py:473"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/sam3d_body/model/transformer.py","line":34,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/sam3d_body/model/transformer.py:34"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/sam3d_body/model/transformer.py","line":56,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/sam3d_body/model/transformer.py:56"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function _forward mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/ldm/sensenova/model.py","line":595,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/sensenova/model.py:595"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/triposplat/gaussian.py","line":25,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/triposplat/gaussian.py:25"},{"rule_id":"opengrep/python.lang.correctness.return-in-init","severity":"high","message":"`return` should never appear inside a class __init__ function. This will cause a runtime error.","path":"comfy/ldm/triposplat/gaussian.py","line":28,"fingerprint":"python.lang.correctness.return-in-init:comfy/ldm/triposplat/gaussian.py:28"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":583,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:583"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":622,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:622"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":623,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:623"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":625,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:625"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":818,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:818"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":854,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:854"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":855,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:855"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":857,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:857"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":963,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:963"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":964,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:964"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":966,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:966"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1440,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1440"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1441,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1441"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1443,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1443"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1702,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1702"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1703,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1703"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1705,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1705"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1750,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1750"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1781,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1781"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1782,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1782"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model.py","line":1784,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model.py:1784"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_animate.py","line":535,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_animate.py:535"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_animate.py","line":536,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_animate.py:536"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_animate.py","line":538,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_animate.py:538"},{"rule_id":"opengrep/python.lang.correctness.list-modify-while-iterate","severity":"high","message":"It appears that `self.slots` is a list that is being modified while in a for loop. This will likely cause a runtime error or an infinite loop.","path":"comfy/ldm/wan/model_animate2.py","line":151,"fingerprint":"python.lang.correctness.list-modify-while-iterate:comfy/ldm/wan/model_animate2.py:151"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_animate2.py","line":291,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_animate2.py:291"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_animate2.py","line":344,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_animate2.py:344"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_animate2.py","line":345,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_animate2.py:345"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_animate2.py","line":350,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_animate2.py:350"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_animate2.py","line":363,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_animate2.py:363"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_vsr.py","line":131,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_vsr.py:131"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_vsr.py","line":132,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_vsr.py:132"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_vsr.py","line":142,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_vsr.py:142"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_vsr.py","line":150,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_vsr.py:150"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_wandancer.py","line":125,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_wandancer.py:125"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_wandancer.py","line":174,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_wandancer.py:174"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_wandancer.py","line":175,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_wandancer.py:175"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function forward_orig mutates default dict transformer_options. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause une","path":"comfy/ldm/wan/model_wandancer.py","line":177,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/ldm/wan/model_wandancer.py:177"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":111,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:111"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":114,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:114"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":125,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:125"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":127,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:127"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":129,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:129"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":134,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:134"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":136,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:136"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":139,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:139"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":146,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:146"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":148,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:148"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":151,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:151"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":153,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:153"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":155,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:155"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":167,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:167"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":170,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:170"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":174,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:174"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":182,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:182"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":186,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:186"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":188,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:188"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_clip mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":192,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:192"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":204,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:204"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":205,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:205"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":207,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:207"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":214,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:214"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":215,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:215"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":222,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:222"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":229,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:229"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":237,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:237"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":240,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:240"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":243,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:243"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":246,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:246"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":254,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:254"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":262,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:262"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":265,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:265"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":268,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:268"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":274,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:274"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":281,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:281"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":282,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:282"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":283,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:283"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":284,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:284"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":288,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:288"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":290,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:290"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":296,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:296"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":307,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:307"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":308,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:308"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":315,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:315"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":316,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:316"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":323,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:323"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":329,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:329"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":335,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:335"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":347,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:347"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":349,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:349"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":350,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:350"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":358,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:358"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":359,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:359"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":364,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:364"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":369,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:369"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":370,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:370"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":371,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:371"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":379,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:379"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":380,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:380"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":381,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:381"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":382,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:382"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":390,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:390"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":391,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:391"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":392,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:392"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":393,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:393"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":399,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:399"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":400,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:400"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":406,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:406"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":407,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:407"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":413,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:413"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":419,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:419"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.default-mutable-dict","severity":"high","message":"Function model_lora_keys_unet mutates default dict key_map. Python only instantiates default function arguments once and shares the instance across the function calls. If the default function argument is mutated, that will modify the instance used by all future function calls. This can cause unexpec","path":"comfy/lora.py","line":425,"fingerprint":"python.lang.correctness.common-mistakes.default-mutable-dict:comfy/lora.py:425"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.375,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":1.0,"check:tests_cochange":1.0,"test_lines":54893.0,"source_lines":292737.0,"test_ratio":0.1875,"ci_files":29.0,"cochange_share":0.2971,"cochange_commits":239.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/api-node-template.yml","ref":".github/workflows/api-node-template.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/backport_release.yaml","ref":".github/workflows/backport_release.yaml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/check-ai-co-authors.yml","ref":".github/workflows/check-ai-co-authors.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/check-line-endings.yml","ref":".github/workflows/check-line-endings.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/ci-cursor-review.yml","ref":".github/workflows/ci-cursor-review.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/cla.yml","ref":".github/workflows/cla.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/detect-unreviewed-merge.yml","ref":".github/workflows/detect-unreviewed-merge.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/notify-on-merge.yml","ref":".github/workflows/notify-on-merge.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/openapi-lint.yml","ref":".github/workflows/openapi-lint.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/pullrequest-ci-run.yml","ref":".github/workflows/pullrequest-ci-run.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (pytest)","ref":null,"url":null,"weight":0.0},{"kind":"ci","description":"CI runs linters (ruff, pylint, pyright)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["pytest"],"lint_commands":["ruff","pylint","pyright"]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":0.0,"readme_lines":284.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":406.0,"escapes_per_kloc":1.387},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":2373.0,"other_lines":290364.0,"files_blamed":781.0,"blame_failures":0.0,"quality:ai_findings":1.0,"quality:ai_per_kloc":0.421,"quality:other_findings":199.0,"quality:other_per_kloc":0.685,"quality:ratio":0.61,"security:ai_findings":0.0,"security:ai_per_kloc":0.0,"security:other_findings":30.0,"security:other_per_kloc":0.103,"security:ratio":0.0},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":true},"error":null}],"flags":[]}