{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:01.831951Z","repo":{"ref":{"host":"github.com","owner":"Stupidoodle","name":"instagram-mcp"},"default_branch":"main","clone_url":"https://github.com/Stupidoodle/instagram-mcp.git","html_url":"https://github.com/Stupidoodle/instagram-mcp","description":"Instagram DM MCP server - built entirely by Claude (Opus 4.5) in ~3 hours with mass auto-accept enabled. ultrathink ultraplan ultraanalyse ultraimplement","stars":3,"forks":2,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":1296,"primary_language":"Python","license_spdx":"NOASSERTION","created_at":"2026-02-03T17:11:43Z","pushed_at":"2026-11-13T12:19:59Z","security_policy_url":null,"distribution":{"owner_created_at":"2020-09-14T14:16:06Z","owner_type":"User","release_assets":[]}},"commit_sha":"0a1b935236508222327f0e2f09fe4816e6446d75","profile":{"lines_by_language":{"Python":19148,"Shell":156,"JavaScript":41},"files_by_category":{"test":51,"source":41,"docs":14,"config":10,"generated":2,"other":1},"source_lines":8958,"test_lines":10387},"pillars":{"ai_provenance":{"score":47.0,"confidence":0.95,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.4701,"suspected_share":0.4113,"estimated_share":0.4701,"ai_artifacts":11.0,"flagged_work_units":5.0,"flagged_releases":0.0,"style_index":0.112},"summary":"Explicit AI attribution on 47% of first-party code added; an estimated 47% including velocity signals."},"quality":{"score":76.7,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":80.6,"duplication":84.0,"lint":38.7,"testing":100.0,"docs":65.0,"type_safety":60.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 1.16, CI runs tests; 7% of function code in complex or long functions; 3% duplicated lines. Weakest area: lint."},"security":{"score":69.2,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":94.3,"dependencies":37.4,"ci_actions":72.6,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 35 known vulnerabilities in 9 dependencies; 2 high-severity SAST findings; 1 high-severity workflow issues. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":18.0,"checked":18.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":129.0,"attributed_commits":29.0,"attributed_commit_share":0.2248062015503876,"effective_loc":28288.0,"attributed_loc":13299.0,"attributed_loc_share":0.47012867647058826,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 29 attributed commits, 13,299 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"a299a34e7872424b8850b28672c72aba64330cd5","url":"https://github.com/Stupidoodle/instagram-mcp/commit/a299a34e7872424b8850b28672c72aba64330cd5","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"bc8e7215789e6f2a4a2c84ee1846405051de887c","url":"https://github.com/Stupidoodle/instagram-mcp/commit/bc8e7215789e6f2a4a2c84ee1846405051de887c","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"540e3d9684fc90ed39038fc653531d05553c18c8","url":"https://github.com/Stupidoodle/instagram-mcp/commit/540e3d9684fc90ed39038fc653531d05553c18c8","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"54d23d429101794972f03c9cc658619dc82a1d4c","url":"https://github.com/Stupidoodle/instagram-mcp/commit/54d23d429101794972f03c9cc658619dc82a1d4c","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"0ea812ee162384c26a51d196ae8a2be317600ac8","url":"https://github.com/Stupidoodle/instagram-mcp/commit/0ea812ee162384c26a51d196ae8a2be317600ac8","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"0a7044fb4b553e84087c5dfb60e97f380f2971fa","url":"https://github.com/Stupidoodle/instagram-mcp/commit/0a7044fb4b553e84087c5dfb60e97f380f2971fa","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"6a7b1a8a5ba20eb37ce5936051d5ac0d586373c6","url":"https://github.com/Stupidoodle/instagram-mcp/commit/6a7b1a8a5ba20eb37ce5936051d5ac0d586373c6","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"62bf35ea21d44cc4f6f21fd2d2e431deac5d8558","url":"https://github.com/Stupidoodle/instagram-mcp/commit/62bf35ea21d44cc4f6f21fd2d2e431deac5d8558","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"7e9707763848037d7ef6c3cae2ee49159f87d7f1","url":"https://github.com/Stupidoodle/instagram-mcp/commit/7e9707763848037d7ef6c3cae2ee49159f87d7f1","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"4c1601a09dcaabf97084f0e10ad9c84552f64504","url":"https://github.com/Stupidoodle/instagram-mcp/commit/4c1601a09dcaabf97084f0e10ad9c84552f64504","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"5ee7d1a01079676af01a52789b069930db25ae63","url":"https://github.com/Stupidoodle/instagram-mcp/commit/5ee7d1a01079676af01a52789b069930db25ae63","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: message 'claude.ai/code'","ref":"05272252dfa369f79c09a3827e03d92dd8f98cab","url":"https://github.com/Stupidoodle/instagram-mcp/commit/05272252dfa369f79c09a3827e03d92dd8f98cab","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"c218d04b9e01cace7a4cf325a07ce4e8bdb4cf9b","url":"https://github.com/Stupidoodle/instagram-mcp/commit/c218d04b9e01cace7a4cf325a07ce4e8bdb4cf9b","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"9298565ddb03af861bae9bfecaa3e82561ca71a3","url":"https://github.com/Stupidoodle/instagram-mcp/commit/9298565ddb03af861bae9bfecaa3e82561ca71a3","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"3a06e5fdc84f9337bc8a2788acbea12560234d2e","url":"https://github.com/Stupidoodle/instagram-mcp/commit/3a06e5fdc84f9337bc8a2788acbea12560234d2e","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"a4e30477f140a759d9a9b70d9e014dc2625f06b9","url":"https://github.com/Stupidoodle/instagram-mcp/commit/a4e30477f140a759d9a9b70d9e014dc2625f06b9","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"3b077e28f32817ef37fc3b47ee3ccdfc39dc8176","url":"https://github.com/Stupidoodle/instagram-mcp/commit/3b077e28f32817ef37fc3b47ee3ccdfc39dc8176","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"4ac15c89913eee4bce701e300d56064e94217f24","url":"https://github.com/Stupidoodle/instagram-mcp/commit/4ac15c89913eee4bce701e300d56064e94217f24","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"cc5c27767ab29aeecc843fc11cd4678321924323","url":"https://github.com/Stupidoodle/instagram-mcp/commit/cc5c27767ab29aeecc843fc11cd4678321924323","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"7743fd09d2fe43ba6ee294fb33c66b5614421917","url":"https://github.com/Stupidoodle/instagram-mcp/commit/7743fd09d2fe43ba6ee294fb33c66b5614421917","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"b020d552e4ebf329a3fcf2d22165ed829183c0a4","url":"https://github.com/Stupidoodle/instagram-mcp/commit/b020d552e4ebf329a3fcf2d22165ed829183c0a4","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"64bfdac44c950ed260487c49c4647bbc1ddf2ff7","url":"https://github.com/Stupidoodle/instagram-mcp/commit/64bfdac44c950ed260487c49c4647bbc1ddf2ff7","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"6e4f6132dfe0e5e26c503c6c277a06ed41e49e94","url":"https://github.com/Stupidoodle/instagram-mcp/commit/6e4f6132dfe0e5e26c503c6c277a06ed41e49e94","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"dd6126997759f86026ccec7fca995209e9369e14","url":"https://github.com/Stupidoodle/instagram-mcp/commit/dd6126997759f86026ccec7fca995209e9369e14","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"088f447b7c6888f3b7d06a33f10ad0875dc7dfd8","url":"https://github.com/Stupidoodle/instagram-mcp/commit/088f447b7c6888f3b7d06a33f10ad0875dc7dfd8","weight":0.9}],"data":{"attributed_loc_by_commit":{"3a858e3e61e8379a7cda9136b66100d14be6610f":3547,"d548a2ca7223e7fe6850ba4a6d14b0f8c5bfbed2":288,"8c51ac47cb9a065b4a32e0db57228c9026a0f6ce":84,"6a75c2b4bc05c18f7571a82abb1854b2e94f3bc4":72,"088f447b7c6888f3b7d06a33f10ad0875dc7dfd8":30,"dd6126997759f86026ccec7fca995209e9369e14":377,"6e4f6132dfe0e5e26c503c6c277a06ed41e49e94":107,"64bfdac44c950ed260487c49c4647bbc1ddf2ff7":8,"b020d552e4ebf329a3fcf2d22165ed829183c0a4":0,"7743fd09d2fe43ba6ee294fb33c66b5614421917":76,"cc5c27767ab29aeecc843fc11cd4678321924323":0,"4ac15c89913eee4bce701e300d56064e94217f24":0,"3b077e28f32817ef37fc3b47ee3ccdfc39dc8176":77,"a4e30477f140a759d9a9b70d9e014dc2625f06b9":409,"3a06e5fdc84f9337bc8a2788acbea12560234d2e":106,"9298565ddb03af861bae9bfecaa3e82561ca71a3":6840,"c218d04b9e01cace7a4cf325a07ce4e8bdb4cf9b":0,"05272252dfa369f79c09a3827e03d92dd8f98cab":29,"5ee7d1a01079676af01a52789b069930db25ae63":513,"4c1601a09dcaabf97084f0e10ad9c84552f64504":186,"7e9707763848037d7ef6c3cae2ee49159f87d7f1":59,"6a7b1a8a5ba20eb37ce5936051d5ac0d586373c6":12,"62bf35ea21d44cc4f6f21fd2d2e431deac5d8558":0,"0ea812ee162384c26a51d196ae8a2be317600ac8":0,"0a7044fb4b553e84087c5dfb60e97f380f2971fa":41,"54d23d429101794972f03c9cc658619dc82a1d4c":0,"540e3d9684fc90ed39038fc653531d05553c18c8":144,"bc8e7215789e6f2a4a2c84ee1846405051de887c":293,"a299a34e7872424b8850b28672c72aba64330cd5":1},"tools":{"claude-code":{"name":"Claude Code","commits":29,"loc":13299,"first_seen":1770138382,"last_seen":1791913725}},"monthly":{"2026-02":{"loc":14947,"attributed_loc":12021},"2026-09":{"loc":12063,"attributed_loc":0},"2026-10":{"loc":1278,"attributed_loc":1278},"2026-11":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":11.0,"workflow_agents":0.0,"tools_configured":1.0,"earliest_adoption":1770138382.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":".claude/skills/dm/SKILL.md (claude-code configuration)","ref":".claude/skills/dm/SKILL.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/SKILL.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/protocol/loop.md (claude-code configuration)","ref":".claude/skills/dm/protocol/loop.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/protocol/loop.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/protocol/planning.md (claude-code configuration)","ref":".claude/skills/dm/protocol/planning.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/protocol/planning.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/protocol/reconnaissance.md (claude-code configuration)","ref":".claude/skills/dm/protocol/reconnaissance.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/protocol/reconnaissance.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/protocol/resume.md (claude-code configuration)","ref":".claude/skills/dm/protocol/resume.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/protocol/resume.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/templates/history.md (claude-code configuration)","ref":".claude/skills/dm/templates/history.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/templates/history.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/templates/identity.md (claude-code configuration)","ref":".claude/skills/dm/templates/identity.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/templates/identity.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/templates/memory.md (claude-code configuration)","ref":".claude/skills/dm/templates/memory.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/templates/memory.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/templates/strategy.md (claude-code configuration)","ref":".claude/skills/dm/templates/strategy.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/templates/strategy.md","weight":0.5},{"kind":"ai-artifact","description":".claude/skills/dm/templates/target.md (claude-code configuration)","ref":".claude/skills/dm/templates/target.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/.claude/skills/dm/templates/target.md","weight":0.5},{"kind":"ai-artifact","description":"CLAUDE.md (claude-code configuration)","ref":"CLAUDE.md","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/CLAUDE.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":".claude/skills/dm/SKILL.md","added_at":1770143018},{"tool":"claude-code","path":".claude/skills/dm/protocol/loop.md","added_at":1770407719},{"tool":"claude-code","path":".claude/skills/dm/protocol/planning.md","added_at":1770407719},{"tool":"claude-code","path":".claude/skills/dm/protocol/reconnaissance.md","added_at":1770407719},{"tool":"claude-code","path":".claude/skills/dm/protocol/resume.md","added_at":1770407719},{"tool":"claude-code","path":".claude/skills/dm/templates/history.md","added_at":1770407719},{"tool":"claude-code","path":".claude/skills/dm/templates/identity.md","added_at":1770407719},{"tool":"claude-code","path":".claude/skills/dm/templates/memory.md","added_at":1770407719},{"tool":"claude-code","path":".claude/skills/dm/templates/strategy.md","added_at":1770407719},{"tool":"claude-code","path":".claude/skills/dm/templates/target.md","added_at":1770407719},{"tool":"claude-code","path":"CLAUDE.md","added_at":1770138382}],"workflows":[],"tools":["claude-code"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":24.0,"flagged_units":5.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":24741.0,"flagged_loc":18476.0,"flagged_loc_share":0.7467766056343721,"max_loc_per_hour":1710.0,"median_loc_per_hour":272.54159747938957,"pr_timed_units":6.0,"excluded_import_loc":3547.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"6,840 lines of first-party code in ~4.0h (1,710 lines/hour, 1 commit session)","ref":"9298565ddb03af861bae9bfecaa3e82561ca71a3","url":"https://github.com/Stupidoodle/instagram-mcp/commit/9298565ddb03af861bae9bfecaa3e82561ca71a3","weight":0.513},{"kind":"velocity-burst","description":"3,449 lines of first-party code in ~4.4h (792 lines/hour, 10 commit session)","ref":"a816f1b0aff1496be5e86eb80ded6dfb06153d62","url":"https://github.com/Stupidoodle/instagram-mcp/commit/a816f1b0aff1496be5e86eb80ded6dfb06153d62","weight":0.23757382486127943},{"kind":"velocity-burst","description":"2,926 lines of first-party code in ~4.0h (732 lines/hour, 1 commit session)","ref":"fd86ad6afbcfec9de6a76c18b286679d8b23ca4e","url":"https://github.com/Stupidoodle/instagram-mcp/commit/fd86ad6afbcfec9de6a76c18b286679d8b23ca4e","weight":0.21945},{"kind":"velocity-burst","description":"2,919 lines of first-party code in ~4.6h (641 lines/hour, 18 commit session)","ref":"dc63f87ebf1a89ee16da5653f121722ded725a51","url":"https://github.com/Stupidoodle/instagram-mcp/commit/dc63f87ebf1a89ee16da5653f121722ded725a51","weight":0.19217995610826627},{"kind":"velocity-burst","description":"2,342 lines of first-party code in ~4.5h (520 lines/hour, 8 commit session)","ref":"f0f66ed790a8362d1477d560110325680edd3528","url":"https://github.com/Stupidoodle/instagram-mcp/commit/f0f66ed790a8362d1477d560110325680edd3528","weight":0.155911976823029}],"data":{"flagged_loc_by_commit":{"9298565ddb03af861bae9bfecaa3e82561ca71a3":6840,"fd86ad6afbcfec9de6a76c18b286679d8b23ca4e":2926,"6da71f22247e1b5509839e6cd27d8035c5d14cd7":8,"61119601e35699b29bffa3329ad5c675599c8c89":48,"5f5e676c999ed9f8a274726f548b24e0b55c6f6e":11,"d3e7c87d4c00758a3471f6c9396ef480409627f7":1402,"f5d5bd66964b3a912191c48f4f5feb94e0491ace":72,"b75d1573b75e95cfbf3abb7bd0da74f47c3f8cf1":674,"8a8d64785155eac4955b570462fbcc2a0d1bc0e1":119,"f0f66ed790a8362d1477d560110325680edd3528":8,"448b551d3afcc0c354d0da34494e3773bef3060c":811,"a095957c5375174b71e8b0f77412a45011918f85":587,"aa16a51f758abbefb36a0f217a8acc4416fd22f0":12,"8d6365ebc630eac2f8b2df6962c1ef178a75851c":63,"db21c3af7413508292184f2fdb7e7214b07820c3":123,"b77505350f7aed4842bad85b0c7bf9a75e0761a2":21,"89c65ab73bc6e607b851b4bf780826b7cdbf5629":39,"a5b3526f14c8eabfcdaf78e68660e15affb742ff":69,"dd7d990fa26f763893dee586fb3d8331541b7237":2,"04b55c5eff63203edccfafba57c03c2fb2271daa":136,"45cee33c0e4a95fa55199923d5bdb4a49909d1f1":20,"994f5f7b1b6692f7c3c25abf8b1bd3fdb90b9624":145,"eb0e9eea054319de85b1ecb62cfdd4fd66e252a7":21,"4eb1c97a0b13425c599d5687a4b55fd049cdabe4":20,"6f062926a4e9f81205a9a2fca46d4123d398987a":45,"425f02f6839beefb37ca8f4a999ba3ca0ed5c7be":181,"764c2184ae0b13ea9df727cf70e65b60cd70fb44":342,"dc63f87ebf1a89ee16da5653f121722ded725a51":282,"b68af7fa2c313a16941f9bca05ff181c1f5b471e":621,"8561a1f5acc1de564be6c29fe891d28a0c9eee73":373,"a47460dc924e4902bb33cefe31efc868d2191aa1":240,"63a0e82126cf017ef45edb2c9c6609b1d3034184":254,"421eea26679ffaad660a5184b2a56e36d3500b98":214,"44e56c24a23d64fcac4185ac3593573bd431b54d":642,"4e4fa12e525ddbaf18d0c16b3bc366d2de0a38c0":220,"dada43d2e0433c4a89a9dea9a9174ec58b9c3ad1":193,"2481dce4fb35a17589a3f2636a9bae03d4d86370":439,"a816f1b0aff1496be5e86eb80ded6dfb06153d62":253},"excluded_import_commits":["3a858e3e61e8379a7cda9136b66100d14be6610f"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":7.0,"flagged_releases":0.0,"max_loc_per_day":15634.3},"findings":[],"evidence":[],"data":{"releases":[{"from":"v1.0.0","to":"v1.0.1","loc":76,"days":0.97,"loc_per_day":78.4,"flagged":false},{"from":"v1.0.1","to":"v2.0.0","loc":16392,"days":235.02,"loc_per_day":69.7,"flagged":false},{"from":"v2.0.0","to":"v2.1.0","loc":1083,"days":0.07,"loc_per_day":15634.3,"flagged":false},{"from":"v2.1.0","to":"v2.2.0","loc":1440,"days":1.47,"loc_per_day":977.7,"flagged":false},{"from":"v2.2.0","to":"v2.3.0","loc":3506,"days":1.32,"loc_per_day":2660.1,"flagged":false},{"from":"v2.3.0","to":"v2.4.0","loc":787,"days":4.0,"loc_per_day":197.0,"flagged":false},{"from":"v2.4.0","to":"v2.4.1","loc":490,"days":8.98,"loc_per_day":54.6,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":8958.0,"index":0.112,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":2.0,"per_kloc:emoji_in_code":0.223,"files:emoji_in_code":1.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":2.0,"findings_high":2.0,"findings_medium":0.0,"findings_low":0.0,"weighted_findings":1.5,"scanned_lines":8958.0,"parse_errors":6.0},"findings":[{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"src/instagram_mcp/video.py","line":47,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:src/instagram_mcp/video.py:47"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"src/instagram_mcp/video.py","line":55,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:src/instagram_mcp/video.py:55"}],"evidence":[],"data":{"rulesets":["python","bash","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":9.0,"vulnerabilities":35.0,"vulns_critical":2.0,"vulns_high":13.0,"vulns_medium":19.0,"vulns_low":1.0,"vulns_unknown":0.0,"penalty":59.0},"findings":[{"rule_id":"osv/GHSA-8r5x-fm3f-whwj","severity":"critical","message":"handlebars@4.7.9 (npm) is affected by GHSA-8r5x-fm3f-whwj","path":".github/release/package-lock.json","line":null,"fingerprint":"handlebars@4.7.9 (npm):GHSA-8r5x-fm3f-whwj"},{"rule_id":"osv/GHSA-p8wg-vrv2-v86f","severity":"critical","message":"handlebars@4.7.9 (npm) is affected by GHSA-p8wg-vrv2-v86f","path":".github/release/package-lock.json","line":null,"fingerprint":"handlebars@4.7.9 (npm):GHSA-p8wg-vrv2-v86f"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@5.0.9 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":".github/release/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.9 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@5.0.9 (npm) is affected by GHSA-qhr7-859c-m2p7","path":".github/release/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.9 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@6.28.0 (npm) is affected by GHSA-2m5v-pch6-74hx","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@6.28.0 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@6.28.0 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@6.28.0 (npm) is affected by GHSA-xjj6-f33q-929c","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@6.29.0 (npm) is affected by GHSA-2m5v-pch6-74hx","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.29.0 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@6.29.0 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.29.0 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@6.29.0 (npm) is affected by GHSA-xjj6-f33q-929c","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.29.0 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@7.30.0 (npm) is affected by GHSA-2m5v-pch6-74hx","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@7.30.0 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-4w7w-5xrc-9h26","severity":"high","message":"undici@7.30.0 (npm) is affected by GHSA-4w7w-5xrc-9h26","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@7.30.0 (npm):GHSA-4w7w-5xrc-9h26"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@7.30.0 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@7.30.0 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@7.30.0 (npm) is affected by GHSA-xjj6-f33q-929c","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@7.30.0 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@5.0.9 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":".github/release/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.9 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@13.0.6 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":".github/release/package-lock.json","line":null,"fingerprint":"glob@13.0.6 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-xw65-4hp5-5hc7","severity":"medium","message":"handlebars@4.7.9 (npm) is affected by GHSA-xw65-4hp5-5hc7","path":".github/release/package-lock.json","line":null,"fingerprint":"handlebars@4.7.9 (npm):GHSA-xw65-4hp5-5hc7"},{"rule_id":"osv/GHSA-2vr4-cq9g-pvrc","severity":"medium","message":"ip-address@10.5.0 (npm) is affected by GHSA-2vr4-cq9g-pvrc","path":".github/release/package-lock.json","line":null,"fingerprint":"ip-address@10.5.0 (npm):GHSA-2vr4-cq9g-pvrc"},{"rule_id":"osv/GHSA-h3mg-xc3c-68pw","severity":"medium","message":"ip-address@10.5.0 (npm) is affected by GHSA-h3mg-xc3c-68pw","path":".github/release/package-lock.json","line":null,"fingerprint":"ip-address@10.5.0 (npm):GHSA-h3mg-xc3c-68pw"},{"rule_id":"osv/GHSA-j6r3-76f7-8jcv","severity":"medium","message":"ip-address@10.5.0 (npm) is affected by GHSA-j6r3-76f7-8jcv","path":".github/release/package-lock.json","line":null,"fingerprint":"ip-address@10.5.0 (npm):GHSA-j6r3-76f7-8jcv"},{"rule_id":"osv/GHSA-rpw4-54j3-4h4q","severity":"medium","message":"ip-address@10.5.0 (npm) is affected by GHSA-rpw4-54j3-4h4q","path":".github/release/package-lock.json","line":null,"fingerprint":"ip-address@10.5.0 (npm):GHSA-rpw4-54j3-4h4q"},{"rule_id":"osv/GHSA-rxp7-6hxx-x8q5","severity":"medium","message":"ip-address@10.5.0 (npm) is affected by GHSA-rxp7-6hxx-x8q5","path":".github/release/package-lock.json","line":null,"fingerprint":"ip-address@10.5.0 (npm):GHSA-rxp7-6hxx-x8q5"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@10.2.5 (npm) is affected by GHSA-g3hv-75wg-m249","path":".github/release/package-lock.json","line":null,"fingerprint":"minimatch@10.2.5 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@7.1.4 (npm) is affected by GHSA-rj75-hqrm-r3gf","path":".github/release/package-lock.json","line":null,"fingerprint":"postcss-selector-parser@7.1.4 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-3wwx-pv8p-q78v","severity":"medium","message":"undici@6.28.0 (npm) is affected by GHSA-3wwx-pv8p-q78v","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-3wwx-pv8p-q78v"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@6.28.0 (npm) is affected by GHSA-4qv8-2p9j-2685","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@6.28.0 (npm) is affected by GHSA-9fm3-97px-rjf6","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@6.29.0 (npm) is affected by GHSA-4qv8-2p9j-2685","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.29.0 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@6.29.0 (npm) is affected by GHSA-9fm3-97px-rjf6","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.29.0 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@7.30.0 (npm) is affected by GHSA-4qv8-2p9j-2685","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@7.30.0 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-55wc-3pg8-jfw6","severity":"medium","message":"undici@7.30.0 (npm) is affected by GHSA-55wc-3pg8-jfw6","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@7.30.0 (npm):GHSA-55wc-3pg8-jfw6"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@7.30.0 (npm) is affected by GHSA-9fm3-97px-rjf6","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@7.30.0 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-f72v-6w45-q472","severity":"medium","message":"undici@7.30.0 (npm) is affected by GHSA-f72v-6w45-q472","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@7.30.0 (npm):GHSA-f72v-6w45-q472"},{"rule_id":"osv/GHSA-r53p-7pc4-xj5r","severity":"low","message":"undici@6.28.0 (npm) is affected by GHSA-r53p-7pc4-xj5r","path":".github/release/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-r53p-7pc4-xj5r"}],"evidence":[],"data":{"ecosystems":["PyPI","npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":3.0,"findings":5.0,"findings_high":1.0,"findings_medium":2.0,"findings_low":2.0,"penalty":19.2},"findings":[{"rule_id":"zizmor/excessive-permissions","severity":"high","message":"overly broad permissions [confidence high]","path":".github/workflows/upgrade-deps.yml","line":13,"fingerprint":"excessive-permissions:.github/workflows/upgrade-deps.yml:13"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/upgrade-deps.yml","line":25,"fingerprint":"artipacked:.github/workflows/upgrade-deps.yml:25"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/upgrade-deps.yml","line":69,"fingerprint":"secrets-inherit:.github/workflows/upgrade-deps.yml:69"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/release.yml","line":31,"fingerprint":"self-repository:.github/workflows/release.yml:31"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/upgrade-deps.yml","line":69,"fingerprint":"self-repository:.github/workflows/upgrade-deps.yml:69"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.3023,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":443.0,"function_nloc":4610.0,"mean_ccn":3.36,"p90_ccn":7.0,"complex_functions":7.0,"long_functions":0.0,"many_param_functions":1.0,"risky_nloc_share":0.072},"findings":[],"evidence":[{"kind":"complex-function","description":"_build_message in src/instagram_mcp/channel.py: complexity 23, 44 lines","ref":"src/instagram_mcp/channel.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/channel.py#L457","weight":0.38333333333333336},{"kind":"complex-function","description":"_parse_iris_patch in src/instagram_mcp/mqtt/parser.py: complexity 20, 30 lines","ref":"src/instagram_mcp/mqtt/parser.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/mqtt/parser.py#L210","weight":0.3333333333333333},{"kind":"complex-function","description":"_convert_message in src/instagram_mcp/client.py: complexity 19, 53 lines","ref":"src/instagram_mcp/client.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/client.py#L149","weight":0.31666666666666665},{"kind":"complex-function","description":"event_from_dict in src/instagram_mcp/bridge_client.py: complexity 17, 53 lines","ref":"src/instagram_mcp/bridge_client.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/bridge_client.py#L69","weight":0.2833333333333333},{"kind":"complex-function","description":"_build in src/instagram_mcp/channel.py: complexity 17, 30 lines","ref":"src/instagram_mcp/channel.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/channel.py#L425","weight":0.2833333333333333},{"kind":"complex-function","description":"_reader_loop in src/instagram_mcp/mqtt/manager.py: complexity 17, 77 lines","ref":"src/instagram_mcp/mqtt/manager.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/mqtt/manager.py#L421","weight":0.2833333333333333},{"kind":"complex-function","description":"_dispatch in src/instagram_mcp/bridge_client.py: complexity 16, 45 lines","ref":"src/instagram_mcp/bridge_client.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/bridge_client.py#L376","weight":0.26666666666666666}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":6625.0,"duplicated_lines":192.0,"duplicated_share":0.029,"files":41.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: scratch/mqtt_poc/mqtt_listen.py:21 and src/instagram_mcp/mqtt/thrift.py:32","ref":"scratch/mqtt_poc/mqtt_listen.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/scratch/mqtt_poc/mqtt_listen.py#L21","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scratch/mqtt_poc/mqtt_listen.py:107 and src/instagram_mcp/mqtt/topics.py:22","ref":"scratch/mqtt_poc/mqtt_listen.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/scratch/mqtt_poc/mqtt_listen.py#L107","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scratch/mqtt_poc/mqtt_listen.py:177 and scratch/mqtt_poc/mqtt_listen.py:200","ref":"scratch/mqtt_poc/mqtt_listen.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/scratch/mqtt_poc/mqtt_listen.py#L177","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: scratch/mqtt_poc/mqtt_listen.py:251 and src/instagram_mcp/mqtt/parser.py:46","ref":"scratch/mqtt_poc/mqtt_listen.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/scratch/mqtt_poc/mqtt_listen.py#L251","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/instagram_mcp/bridge.py:57 and src/instagram_mcp/bridge_client.py:25","ref":"src/instagram_mcp/bridge.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/bridge.py#L57","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/instagram_mcp/client.py:700 and src/instagram_mcp/client.py:963","ref":"src/instagram_mcp/client.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/client.py#L700","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/instagram_mcp/mqtt/parser.py:273 and src/instagram_mcp/mqtt/parser.py:400","ref":"src/instagram_mcp/mqtt/parser.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/mqtt/parser.py#L273","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/instagram_mcp/raven.py:77 and src/instagram_mcp/raven.py:106","ref":"src/instagram_mcp/raven.py","url":"https://github.com/Stupidoodle/instagram-mcp/blob/0a1b935236508222327f0e2f09fe4816e6446d75/src/instagram_mcp/raven.py#L77","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":24.0,"weighted_findings":34.0,"scanned_lines":8958.0,"category:best-practice":7.0,"category:correctness":2.0,"category:maintainability":15.0},"findings":[{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"src/instagram_mcp/bridge.py","line":307,"fingerprint":"python.lang.best-practice.arbitrary-sleep:src/instagram_mcp/bridge.py:307"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"src/instagram_mcp/bridge_client.py","line":336,"fingerprint":"python.lang.best-practice.arbitrary-sleep:src/instagram_mcp/bridge_client.py:336"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"src/instagram_mcp/mqtt/manager.py","line":336,"fingerprint":"python.lang.best-practice.arbitrary-sleep:src/instagram_mcp/mqtt/manager.py:336"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `unsend` is defined inside a function but never used","path":"src/instagram_mcp/tools/channel.py","line":317,"fingerprint":"python.lang.maintainability.useless-inner-function:src/instagram_mcp/tools/channel.py:317"},{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `hide_thread` is defined inside a function but never used","path":"src/instagram_mcp/tools/threads.py","line":106,"fingerprint":"python.lang.maintainability.useless-inner-function:src/instagram_mcp/tools/threads.py:106"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scratch/mqtt_poc/mqtt_listen.py","line":286,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scratch/mqtt_poc/mqtt_listen.py:286"},{"rule_id":"opengrep/python.lang.correctness.use-sys-exit","severity":"medium","message":"Detected use of `exit`. Use `sys.exit` over the python shell `exit` built-in. `exit` is a helper for the interactive shell and may not be available on all Python implementations.","path":"scratch/mqtt_poc/mqtt_listen.py","line":303,"fingerprint":"python.lang.correctness.use-sys-exit:scratch/mqtt_poc/mqtt_listen.py:303"},{"rule_id":"opengrep/python.lang.correctness.use-sys-exit","severity":"medium","message":"Detected use of `exit`. Use `sys.exit` over the python shell `exit` built-in. `exit` is a helper for the interactive shell and may not be available on all Python implementations.","path":"scratch/mqtt_poc/mqtt_listen.py","line":309,"fingerprint":"python.lang.correctness.use-sys-exit:scratch/mqtt_poc/mqtt_listen.py:309"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_connected\" a function or an attribute? If it is a function, you may have meant self.mqtt.is_connected() because self.mqtt.is_connected is always true.","path":"src/instagram_mcp/bridge.py","line":214,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/bridge.py:214"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"src/instagram_mcp/bridge.py","line":541,"fingerprint":"python.lang.maintainability.return-not-in-function:src/instagram_mcp/bridge.py:541"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_verified\" a function or an attribute? If it is a function, you may have meant sender.is_verified() because sender.is_verified is always true.","path":"src/instagram_mcp/client.py","line":181,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/client.py:181"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sent_by_viewer\" a function or an attribute? If it is a function, you may have meant msg.is_sent_by_viewer() because msg.is_sent_by_viewer is always true.","path":"src/instagram_mcp/client.py","line":186,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/client.py:186"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_sent_by_viewer\" a function or an attribute? If it is a function, you may have meant msg.is_sent_by_viewer() because msg.is_sent_by_viewer is always true.","path":"src/instagram_mcp/client.py","line":193,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/client.py:193"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_group\" a function or an attribute? If it is a function, you may have meant thread.is_group() because thread.is_group is always true.","path":"src/instagram_mcp/client.py","line":263,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/client.py:263"},{"rule_id":"opengrep/python.lang.best-practice.logging-error-without-handling","severity":"medium","message":"Errors should only be logged when handled. The code logs the error and propogates the exception, consider reducing the level to warning or info.","path":"src/instagram_mcp/client.py","line":417,"fingerprint":"python.lang.best-practice.logging-error-without-handling:src/instagram_mcp/client.py:417"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant span.is_valid() because span.is_valid is always true.","path":"src/instagram_mcp/logs.py","line":77,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/logs.py:77"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"src/instagram_mcp/mqtt/manager.py","line":55,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:src/instagram_mcp/mqtt/manager.py:55"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_connected\" a function or an attribute? If it is a function, you may have meant self._conn.is_connected() because self._conn.is_connected is always true.","path":"src/instagram_mcp/mqtt/manager.py","line":127,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/mqtt/manager.py:127"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_connected\" a function or an attribute? If it is a function, you may have meant self.is_connected() because self.is_connected is always true.","path":"src/instagram_mcp/mqtt/manager.py","line":300,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/mqtt/manager.py:300"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_connected\" a function or an attribute? If it is a function, you may have meant self.is_connected() because self.is_connected is always true.","path":"src/instagram_mcp/mqtt/manager.py","line":309,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/mqtt/manager.py:309"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_connected\" a function or an attribute? If it is a function, you may have meant self._conn.is_connected() because self._conn.is_connected is always true.","path":"src/instagram_mcp/mqtt/manager.py","line":446,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/mqtt/manager.py:446"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"src/instagram_mcp/mqtt/parser.py","line":129,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:src/instagram_mcp/mqtt/parser.py:129"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant reply.answers.is_valid() because reply.answers.is_valid is always true.","path":"src/instagram_mcp/replies.py","line":106,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/replies.py:106"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_set\" a function or an attribute? If it is a function, you may have meant _stop_events.is_set() because _stop_events.is_set is always true.","path":"src/instagram_mcp/server.py","line":106,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/instagram_mcp/server.py:106"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":1.0,"check:tests_cochange":1.0,"test_lines":10387.0,"source_lines":8958.0,"test_ratio":1.1595,"ci_files":3.0,"cochange_share":0.7436,"cochange_commits":78.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/release.yml","ref":".github/workflows/release.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/test.yml","ref":".github/workflows/test.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/upgrade-deps.yml","ref":".github/workflows/upgrade-deps.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (pytest)","ref":null,"url":null,"weight":0.0},{"kind":"ci","description":"CI runs linters (ruff, mypy)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["pytest"],"lint_commands":["ruff","mypy"]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":154.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE.md","ref":"LICENSE.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":0.0,"escapes":165.0,"escapes_per_kloc":18.833},"findings":[],"evidence":[{"kind":"typing","description":"Python strict type checking: mypy.ini","ref":"mypy.ini","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":2931.0,"other_lines":6027.0,"files_blamed":41.0,"blame_failures":0.0,"quality:ai_findings":6.0,"quality:ai_per_kloc":2.047,"quality:other_findings":18.0,"quality:other_per_kloc":2.987,"quality:ratio":0.69,"security:ai_findings":0.0,"security:ai_per_kloc":0.0,"security:other_findings":2.0,"security:other_per_kloc":0.332,"security:ratio":0.0},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":true},"error":null}],"flags":[]}