Leaderboard github.com
Fincept-Corporation/FinceptTerminal
FinceptTerminal is a modern finance application offering advanced market analytics, investment research, and economic data tools, designed for interactive exploration and data-driven decision-making in a user-friendly environment.
AI provenance
25%
explicit
- Confidence
- 95%
- Coverage
- 100%
Estimated share of AI-generated code. Explicit attribution is a lower bound.
Code quality
53/100
weak
- Confidence
- 90%
- Coverage
- 100%
Complexity, duplication, lint density, tests, CI, docs and review process.
Security
23/100
poor
- Confidence
- 85%
- Coverage
- 100%
Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.
AI provenance
25% explicit
Explicit AI attribution on 25% of first-party code added; an estimated 25% including velocity signals.
How the score is built
- Explicitly attributed share25%
- Unattributed share in AI-pace bursts4%
- Estimated AI-generated share25%
- AI tool configuration files0
- Work sessions at AI pace54
- Releases at AI pace1
- Coding-style index (1.0+ means possible)0.10
Attributed AI tools
| Tool | Commits | Lines added | First seen | Last seen |
|---|---|---|---|---|
| Claude Code | 116 | 1,375,210 | 2025-10-23 | 2026-10-26 |
| OpenAI Codex | 2 | 992 | 2026-04-09 | 2026-04-09 |
| Cursor agent | 1 | 27 | 2026-07-20 | 2026-07-20 |
| Jules | 3 | 19 | 2025-11-11 | 2025-12-17 |
Lines added per month all AI-attributed share
- 2024-0939 · 0% AI
- 2024-101 · 0% AI
- 2024-12523 · 0% AI
- 2025-0143 · 0% AI
- 2025-023 · 0% AI
- 2025-050 · 0% AI
- 2025-060 · 0% AI
- 2025-076,328 · 0% AI
- 2025-080 · 0% AI
- 2025-09186,001 · 0% AI
- 2025-10255,641 · 31% AI
- 2025-111,254,611 · 96% AI
- 2025-12189,412 · 4% AI
- 2026-01457,928 · 4% AI
- 2026-02419,188 · 0% AI
- 2026-03923,544 · 5% AI
- 2026-04221,008 · 1% AI
- 2026-05514,151 · 3% AI
- 2026-06790,472 · 0% AI
- 2026-07103,649 · 1% AI
- 2026-0816,734 · 0% AI
- 2026-09228 · 0% AI
- 2026-10119,308 · 0% AI
- 2026-1136,102 · 0% AI
Findings in AI-attributed lines vs the rest
From git blame: 7,471 lines trace to AI-attributed commits, 385,856 to others (sampled). Reported, not scored.
| Findings per 1,000 lines | AI-attributed | Other | Ratio |
|---|---|---|---|
| Code quality | 0.00 | 0.12 | 0.00× |
| Security | 0.00 | 0.26 | 0.00× |
Evidence by analyzer
Explicit AI attributionok29 items
- Claude Code: 116 attributed commits, 1,375,210 lines added
- Jules: 3 attributed commits, 19 lines added
- OpenAI Codex: 2 attributed commits, 992 lines added
- Cursor agent: 1 attributed commits, 27 lines added
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Cursor agent: trailer 'Co-authored-by: Cursor'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- Claude Code: trailer 'Co-Authored-By: Claude'
- attributed_commit_share
- 12.9%
- attributed_commits
- 122
- attributed_loc
- 1,376,248
- attributed_loc_share
- 25.0%
- commits
- 945
- effective_loc
- 5,494,914
- tools_detected
- 4
AI tool configurationok
- artifacts
- 0
- tools_configured
- 0
- workflow_agents
- 0
Commit velocityok15 items
- 29,143 lines of first-party code in ~4.0h (7,286 lines/hour, 1 commit session)
- 5,561 lines of first-party code in ~1.3h (4,318 lines/hour, 1 commit session)
- 16,168 lines of first-party code in ~4.0h (4,042 lines/hour, 1 commit session)
- 15,692 lines of first-party code in ~4.0h (3,923 lines/hour, 1 commit session)
- 14,052 lines of first-party code in ~5.1h (2,767 lines/hour, 6 commit session)
- 10,993 lines of first-party code in ~4.0h (2,748 lines/hour, 1 commit session)
- 5,299 lines of first-party code in ~2.0h (2,625 lines/hour, 1 commit session)
- 9,733 lines of first-party code in ~4.0h (2,433 lines/hour, 1 commit session)
- 1,592 lines of first-party code in ~0.8h (2,096 lines/hour, 2 commit session)
- 9,952 lines of first-party code in ~4.8h (2,063 lines/hour, 5 commit session)
- 8,155 lines of first-party code in ~4.0h (2,039 lines/hour, 1 commit session)
- 8,613 lines of first-party code in ~4.4h (1,963 lines/hour, 2 commit session)
- 6,898 lines of first-party code in ~4.0h (1,724 lines/hour, 2 commit session)
- 6,536 lines of first-party code in ~4.0h (1,634 lines/hour, 1 commit session)
- 6,368 lines of first-party code in ~4.0h (1,592 lines/hour, 1 commit session)
- excluded_import_loc
- 5,135,293
- flagged_loc
- 284,064
- flagged_loc_share
- 79.0%
- flagged_units
- 54
- max_loc_per_hour
- 7,285.75
- measured_loc
- 359,621
- median_loc_per_hour
- 246
- pr_timed_units
- 0
- pre_ai_era_burst_loc
- 0
- pre_ai_era_bursts
- 0
- pre_ai_era_measured_loc
- 0
- work_units
- 277
Release velocityok1 item
- flagged_releases
- 1
- max_loc_per_day
- 4,105
- releases
- 26
Coding styleok8 items
- step-by-step narration comment: # Now we have full OHLCV data, support ALL indicators
- placeholder or demo-only phrasing: # In a real implementation, this would retrieve from storage
- step-by-step narration comment: # Step 1: Calculate market equilibrium returns (reverse optimization)
- step-by-step narration comment: # Step 2: Prepare views
- step-by-step narration comment: # Step 3: Black-Litterman formula
- step-by-step narration comment: # Step 4: Optimize portfolio with posterior estimates
- step-by-step narration comment: # Step 1: Tree clustering on the correlation IMPLIED by the covariance
- step-by-step narration comment: # Step 2: Quasi-diagonalization (reorder assets)
- count:assistant_voice
- 1
- count:emoji_in_code
- 34
- count:narrated_steps
- 54
- count:placeholder
- 7
- files:assistant_voice
- 1
- files:emoji_in_code
- 25
- files:narrated_steps
- 20
- files:placeholder
- 7
- index
- 0.10
- lines_scanned
- 831,338
- per_kloc:assistant_voice
- 0.00
- per_kloc:emoji_in_code
- 0.04
- per_kloc:narrated_steps
- 0.07
- per_kloc:placeholder
- 0.01
Findings in AI-written linesok
- ai_lines
- 7,471
- blame_failures
- 0
- files_blamed
- 1,500
- other_lines
- 385,856
- quality:ai_findings
- 0
- quality:ai_per_kloc
- 0
- quality:other_findings
- 48
- quality:other_per_kloc
- 0.12
- quality:ratio
- 0
- security:ai_findings
- 0
- security:ai_per_kloc
- 0
- security:other_findings
- 102
- security:other_per_kloc
- 0.26
- security:ratio
- 0
Code quality
53 weak
Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 32% of function code in complex or long functions; 7% duplicated lines. Weakest area: type safety.
How the score is built
- Complexity38
- Duplication64
- Lint and smells81
- Tests and CI40
- Documentation80
- Type safety0
- Review processnot measured
Evidence by analyzer
Complexity (lizard)ok10 items
- fincept::mcp::core::ui::ui_act_detail::prepare in fincept-qt/src/mcp/core/UiAct.cpp: complexity 255, 785 lines
- fincept::workflow::wire_trading_bridges in fincept-qt/src/services/workflow/adapters/ServiceBridges.cpp: complexity 236, 1141 lines
- fincept::workflow::wire_utility_bridges in fincept-qt/src/services/workflow/adapters/ServiceBridges.cpp: complexity 235, 1004 lines
- _history_impl in fincept-qt/scripts/strategies/fincept_engine/algorithm.py: complexity 212, 524 lines
- fincept::screens::QuantModulePanel::on_result in fincept-qt/src/screens/ai_quant_lab/QuantModulePanel_Results.cpp: complexity 191, 825 lines
- fincept::workflow::register_analytics_nodes in fincept-qt/src/services/workflow/nodes/AnalyticsNodes.cpp: complexity 190, 948 lines
- main in fincept-qt/scripts/bis_data.py: complexity 188, 447 lines
- fincept::WindowFrame::WindowFrame in fincept-qt/src/app/WindowFrame.cpp: complexity 179, 652 lines
- fincept::screens::QuantModulePanel::display_cfa_result in fincept-qt/src/screens/ai_quant_lab/QuantModulePanel_CFA_Display.cpp: complexity 162, 853 lines
- fincept::screens::formula::fe_functions in fincept-qt/src/screens/excel/FormulaEngine.cpp: complexity 157, 545 lines
- complex_functions
- 1,439
- function_nloc
- 523,866
- functions
- 27,943
- long_functions
- 567
- many_param_functions
- 134
- mean_ccn
- 4.64
- p90_ccn
- 10
- risky_nloc_share
- 32.4%
Duplication (jscpd)ok10 items
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/base_analytics.py:401 and fincept-qt/scripts/Analytics/alternateInvestment/base_analytics.py:415
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/cli.py:1083 and fincept-qt/scripts/Analytics/alternateInvestment/cli.py:1152
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/convertible_bonds.py:502 and fincept-qt/scripts/Analytics/alternateInvestment/emerging_market_bonds.py:521
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/convertible_bonds.py:528 and fincept-qt/scripts/Analytics/alternateInvestment/inflation_protected.py:449
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/digital_assets.py:218 and fincept-qt/scripts/Analytics/alternateInvestment/risk_analyzer.py:489
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/emerging_market_bonds.py:547 and fincept-qt/scripts/Analytics/alternateInvestment/managed_futures.py:590
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/high_yield_bonds.py:498 and fincept-qt/scripts/Analytics/alternateInvestment/market_neutral.py:500
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/leveraged_funds.py:107 and fincept-qt/scripts/Analytics/alternateInvestment/structured_products.py:61
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/managed_futures.py:548 and fincept-qt/scripts/Analytics/alternateInvestment/market_neutral.py:480
- 6+ duplicated lines: fincept-qt/scripts/Analytics/alternateInvestment/market_config.py:136 and fincept-qt/scripts/Analytics/alternateInvestment/market_config.py:161
- compared_lines
- 637,550
- duplicated_lines
- 46,875
- duplicated_share
- 7.3%
- files
- 3,090
Lintok
- category:best-practice
- 84
- category:correctness
- 32
- category:maintainability
- 510
- findings
- 626
- scanned_lines
- 830,587
- weighted_findings
- 703.75
Tests and CIok8 items
- CI config: .github/workflows/arch-ratchet.yml
.github/workflows/arch-ratchet.yml - CI config: .github/workflows/build-cpp.yml
.github/workflows/build-cpp.yml - CI config: .github/workflows/lint.yml
.github/workflows/lint.yml - CI config: .github/workflows/pr-gate.yml
.github/workflows/pr-gate.yml - CI config: .github/workflows/release.yml
.github/workflows/release.yml - CI config: .github/workflows/sync-labels.yml
.github/workflows/sync-labels.yml - CI config: .github/workflows/test-setup.yml
.github/workflows/test-setup.yml - CI config: .github/workflows/translate-readme.yml
.github/workflows/translate-readme.yml
- check:ci_present
- yes
- check:ci_runs_lint
- no
- check:ci_runs_tests
- no
- check:has_tests
- yes
- check:test_ratio
- no
- check:tests_cochange
- no
- ci_files
- 8
- cochange_commits
- 226
- cochange_share
- 12.4%
- source_lines
- 831,338
- test_lines
- 2,173
- test_ratio
- 0.00
Documentationok3 items
- README.md
README.md - LICENSE
LICENSE - .github/CONTRIBUTING.md
.github/CONTRIBUTING.md
- check:changelog
- no
- check:contributing
- yes
- check:license
- yes
- check:readme
- yes
- readme_lines
- 147
Type safetyok
- check:low_escape_density
- no
- check:strict_config
- no
- escapes
- 5,448
- escapes_per_kloc
- 18.46
Security
23 poor
Security posture is poor: 12 possible secret(s) in the tree, 12 only in history; 136 known vulnerabilities in 19 dependencies; 29 high-severity SAST findings; 46 high-severity workflow issues. Weakest area: secrets.
How the score is built
- Secrets0
- Static analysis (SAST)98
- Vulnerable dependencies6
- CI workflows0
- Security posture0
- OpenSSF Scorecardnot measured
Evidence by analyzer
OpenSSF Scorecardskipped
no published OpenSSF Scorecard result for this repo
Package registriesok
- checked
- 127
- declared
- 127
- lookup_errors
- 0
- missing
- 0
- recent
- 0
Secrets (gitleaks)ok
- secrets_current
- 12
- secrets_history
- 12
- secrets_low_confidence
- 34
- secrets_nonprod
- 5
Static analysis (opengrep)ok
- findings
- 199
- findings_high
- 29
- findings_low
- 129
- findings_medium
- 41
- parse_errors
- 620
- scanned_lines
- 830,587
- weighted_findings
- 54.41
Dependencies (osv-scanner)ok
- penalty
- 167
- vulnerabilities
- 136
- vulnerable_packages
- 19
- vulns_critical
- 8
- vulns_high
- 61
- vulns_low
- 7
- vulns_medium
- 56
- vulns_unknown
- 4
CI workflows (zizmor)ok
- findings
- 70
- findings_high
- 46
- findings_low
- 2
- findings_medium
- 22
- penalty
- 584.40
- workflows
- 8
Security postureok
- check:dependency_updates
- no
- check:lockfiles
- yes
- check:security_policy
- no
- check:signed_commits
- no
- signed_commit_share
- 1.0%
- unpinned_manifests
- 0
Release downloadsok7 items
- release v4.5.2 ships FinceptTerminal-4.5.2-linux-x64.deb (110 downloads)
- release v4.5.2 ships FinceptTerminal-4.5.2-linux-x64.rpm (42 downloads)
- release v4.5.2 ships FinceptTerminal-4.5.2-macos-arm64-setup.dmg (265 downloads)
- release v4.5.2 ships FinceptTerminal-4.5.2-windows-x64-setup.exe (504 downloads)
- release v4.5.1 ships FinceptTerminal-4.5.1-linux-x64.deb (609 downloads)
- links to file hosts or shorteners: t.me/
README.md - links directly to a downloadable archive or installer
README.md
- binary_assets
- 36
- signals
- 2
- suspicious
- 0
Findings
8 critical197 high286 medium175 low2 info
668 findings
| Severity | Rule | Location | Message | Tool |
|---|---|---|---|---|
| critical | osv/GHSA-6q48-6c7w-9gw2 |
fincept-qt/resources/requirements-numpy2-core.txt | [email protected] (PyPI) is affected by PYSEC-2026-4320, GHSA-6q48-6c7w-9gw2; also in fincept-qt/resources/requirements-numpy2.txt | Dependencies (osv-scanner) |
| critical | osv/GHSA-53q9-r3pm-6pq6 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-41, GHSA-53q9-r3pm-6pq6 | Dependencies (osv-scanner) |
| critical | osv/GHSA-53q9-r3pm-6pq6 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-41, GHSA-53q9-r3pm-6pq6 | Dependencies (osv-scanner) |
| critical | osv/GHSA-63hf-3vf5-4wqf |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2102, GHSA-63hf-3vf5-4wqf | Dependencies (osv-scanner) |
| critical | osv/GHSA-h5gc-rm8j-5gpr |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-70, GHSA-h5gc-rm8j-5gpr | Dependencies (osv-scanner) |
| critical | osv/PYSEC-2024-259 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2024-259 | Dependencies (osv-scanner) |
| critical | osv/PYSEC-2024-259 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2024-259 | Dependencies (osv-scanner) |
| critical | osv/PYSEC-2024-278 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2024-278 | Dependencies (osv-scanner) |
| high | opengrep/python.lang.maintainability.useless-inner-function |
fincept-qt/scripts/Analytics/backtesting/zipline/zl_strategies.py:1172 | function `_rebalance` is defined inside a function but never used | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/deal_scanner.py:401 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.correctness.tempfile.tempfile-without-flush |
fincept-qt/scripts/Analytics/quantstats_analytics.py:709 | Using 'f.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'f.name' is used. Use '.flush()' or close the file before using 'f.name'. | Lint |
| high | opengrep/python.lang.maintainability.useless-inner-function |
fincept-qt/scripts/agents/finagent_core/agentic/runner.py:760 | function `_replan` is defined inside a function but never used | Lint |
| high | opengrep/python.lang.maintainability.useless-inner-function |
fincept-qt/scripts/agents/finagent_core/agentic/runner.py:787 | function `_execute_step` is defined inside a function but never used | Lint |
| high | opengrep/python.lang.maintainability.useless-inner-function |
fincept-qt/scripts/agents/finagent_core/modules/workflow_module.py:253 | function `no_action_step` is defined inside a function but never used | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/agents/finagent_core/registries/fincept_model.py:55 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/agents/rdagents/mcp_tools.py:176 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_analysis.py:196 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_crypto.py:47 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_currency.py:47 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_energy.py:47 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_futures.py:47 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_index.py:57 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_index.py:69 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_index.py:74 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_news.py:47 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_reits.py:47 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_stocks_board.py:48 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_stocks_financial.py:48 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_stocks_funds.py:48 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_stocks_historical.py:48 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_stocks_holders.py:48 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_stocks_hot.py:48 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_stocks_margin.py:48 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/akshare_stocks_realtime.py:48 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/baostock_data.py:109 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.open-never-closed |
fincept-qt/scripts/data_gov_hk_api.py:737 | file object opened without corresponding close | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/datagov_au_api.py:246 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.open-never-closed |
fincept-qt/scripts/french_gov_api.py:1268 | file object opened without corresponding close | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/notebook_cell_runner.py:145 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/notebook_cell_runner.py:207 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/notebook_cell_runner.py:84 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/openafrica_api.py:259 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/pxweb_fetcher.py:54 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/riksbank_data.py:209 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/riksbank_data.py:320 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/sec_data.py:360 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/sec_data.py:98 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.correctness.tempfile.tempfile-without-flush |
fincept-qt/scripts/sentinelhub_data.py:322 | Using 'tmp_file.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'tmp_file.name' is used. Use '.flush()' or close the file before using 'tmp_file.name'. | Lint |
| high | opengrep/python.lang.correctness.list-modify-while-iterate |
fincept-qt/scripts/strategies/MarginCallEventsAlgorithm.py:46 | It appears that `requests` is a list that is being modified while in a for loop. This will likely cause a runtime error or an infinite loop. | Lint |
| high | opengrep/python.lang.correctness.return-in-init |
fincept-qt/scripts/strategies/OptionIndicatorsMirrorContractsRegressionAlgorithm.py:67 | `return` should never appear inside a class __init__ function. This will cause a runtime error. | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/strategies/TrainingInitializeRegressionAlgorithm.py:34 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/strategies/TrainingInitializeRegressionAlgorithm.py:41 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.correctness.return-in-init |
fincept-qt/scripts/strategies/fincept_engine/algorithm.py:1233 | `return` should never appear inside a class __init__ function. This will cause a runtime error. | Lint |
| high | opengrep/python.lang.correctness.return-in-init |
fincept-qt/scripts/strategies/fincept_engine/algorithm.py:308 | `return` should never appear inside a class __init__ function. This will cause a runtime error. | Lint |
| high | opengrep/python.lang.correctness.return-in-init |
fincept-qt/scripts/strategies/fincept_engine/algorithm.py:309 | `return` should never appear inside a class __init__ function. This will cause a runtime error. | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/universal_ckan_api.py:114 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.best-practice.arbitrary-sleep |
fincept-qt/scripts/voice/speech_to_text.py:158 | time.sleep() call; did you mean to leave this in? | Lint |
| high | opengrep/python.lang.security.use-defused-xml |
.github/scripts/i18n/apply_new_strings.py:21 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
.github/scripts/i18n/apply_new_strings.py:22 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
.github/scripts/i18n/apply_translations.py:21 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
.github/scripts/i18n/apply_translations.py:22 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
.github/scripts/i18n/extract_unfinished.py:16 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml-parse |
.github/scripts/i18n/extract_unfinished.py:21 | The native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. Do not use this library to parse untrusted input. Instead the... | Static analysis (opengrep) |
| high | zizmor/unpinned-uses |
.github/workflows/arch-ratchet.yml:24 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/arch-ratchet.yml:26 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:1000 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:1020 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:1049 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:172 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:184 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:80 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:87 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:923 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:940 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/build-cpp.yml:946 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/lint.yml:115 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/lint.yml:216 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/lint.yml:269 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/lint.yml:43 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/lint.yml:91 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/pr-gate.yml:19 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/dangerous-triggers |
.github/workflows/pr-gate.yml:4 | use of fundamentally insecure workflow trigger [confidence medium] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:1347 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:1367 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:1373 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:1383 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:2544 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:2575 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:2581 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:2587 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:2596 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:2663 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:36 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:715 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:730 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:736 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:780 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:91 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/sync-labels.yml:19 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/sync-labels.yml:22 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/test-setup.yml:24 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/translate-readme.yml:14 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/translate-readme.yml:19 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/translate-readme.yml:25 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/translate-readme.yml:31 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/translate-readme.yml:37 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/translate-readme.yml:43 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/translate-readme.yml:49 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/translate-readme.yml:55 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | opengrep/dockerfile.security.missing-user-entrypoint |
Dockerfile:243 | By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/packaging/flatpak/preflight.py:22 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | osv/GHSA-27vj-qcqg-25rc |
fincept-qt/resources/requirements-numpy1.txt | [email protected] (PyPI) is affected by PYSEC-2026-4217, GHSA-27vj-qcqg-25rc | Dependencies (osv-scanner) |
| high | osv/GHSA-qw2m-4pqf-rmpp |
fincept-qt/resources/requirements-numpy1.txt | [email protected] (PyPI) is affected by PYSEC-2026-2431, GHSA-qw2m-4pqf-rmpp; also in fincept-qt/resources/requirements-numpy2-core.txt; also in fincept-qt/resources/requirements-numpy2.txt | Dependencies (osv-scanner) |
| high | osv/GHSA-2fqr-mr3j-6wp8 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2112, GHSA-2fqr-mr3j-6wp8 | Dependencies (osv-scanner) |
| high | osv/GHSA-2g87-pp6c-29x5 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-2g87-pp6c-29x5 | Dependencies (osv-scanner) |
| high | osv/GHSA-2wc2-fm75-p42x |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-3071, GHSA-2wc2-fm75-p42x | Dependencies (osv-scanner) |
| high | osv/GHSA-2xpw-w6gg-jr37 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1994, GHSA-2xpw-w6gg-jr37 | Dependencies (osv-scanner) |
| high | osv/GHSA-3644-q5cj-c5c7 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2555, GHSA-3644-q5cj-c5c7 | Dependencies (osv-scanner) |
| high | osv/GHSA-38jv-5279-wg99 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1996, GHSA-38jv-5279-wg99 | Dependencies (osv-scanner) |
| high | osv/GHSA-45c3-73f7-pv4m |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-45c3-73f7-pv4m | Dependencies (osv-scanner) |
| high | osv/GHSA-4fvr-rgm6-gqmc |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2107, GHSA-4fvr-rgm6-gqmc | Dependencies (osv-scanner) |
| high | osv/GHSA-4m7w-qmgq-4wj5 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-237, GHSA-4m7w-qmgq-4wj5 | Dependencies (osv-scanner) |
| high | osv/GHSA-537c-gmf6-5ccf |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-537c-gmf6-5ccf | Dependencies (osv-scanner) |
| high | osv/GHSA-5wr8-gcqf-gqf3 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-5wr8-gcqf-gqf3 | Dependencies (osv-scanner) |
| high | osv/GHSA-63cw-57p8-fm3p |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2286, GHSA-63cw-57p8-fm3p | Dependencies (osv-scanner) |
| high | osv/GHSA-63cw-57p8-fm3p |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2286, GHSA-63cw-57p8-fm3p | Dependencies (osv-scanner) |
| high | osv/GHSA-63hw-fmq6-xxg2 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2110, GHSA-63hw-fmq6-xxg2 | Dependencies (osv-scanner) |
| high | osv/GHSA-6655-6qjp-jx7x |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-6655-6qjp-jx7x | Dependencies (osv-scanner) |
| high | osv/GHSA-6mq8-rvhq-8wgg |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1101, GHSA-6mq8-rvhq-8wgg | Dependencies (osv-scanner) |
| high | osv/GHSA-6vqw-3v5j-54x4 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2024-225, GHSA-6vqw-3v5j-54x4 | Dependencies (osv-scanner) |
| high | osv/GHSA-836r-79rf-4m37 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-3072, GHSA-836r-79rf-4m37 | Dependencies (osv-scanner) |
| high | osv/GHSA-8988-9cw3-xx77 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-4175, GHSA-8988-9cw3-xx77 | Dependencies (osv-scanner) |
| high | osv/GHSA-9x8q-7h8h-wcw9 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2113, GHSA-9x8q-7h8h-wcw9 | Dependencies (osv-scanner) |
| high | osv/GHSA-9xw5-w5jj-pvcg |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-9xw5-w5jj-pvcg | Dependencies (osv-scanner) |
| high | osv/GHSA-cq5v-8q36-5273 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-3545, GHSA-cq5v-8q36-5273 | Dependencies (osv-scanner) |
| high | osv/GHSA-f2jm-rw3h-6phg |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1514, GHSA-f2jm-rw3h-6phg | Dependencies (osv-scanner) |
| high | osv/GHSA-g3cq-j2xw-wf74 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2111, GHSA-g3cq-j2xw-wf74 | Dependencies (osv-scanner) |
| high | osv/GHSA-gm62-xv2j-4w53 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1998, GHSA-gm62-xv2j-4w53 | Dependencies (osv-scanner) |
| high | osv/GHSA-gmj6-6f8f-6699 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1472, GHSA-gmj6-6f8f-6699 | Dependencies (osv-scanner) |
| high | osv/GHSA-hcc4-c3v8-rx92 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2095, GHSA-hcc4-c3v8-rx92 | Dependencies (osv-scanner) |
| high | osv/GHSA-hg6j-4rv6-33pg |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2105, GHSA-hg6j-4rv6-33pg | Dependencies (osv-scanner) |
| high | osv/GHSA-jg22-mg44-37j8 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2104, GHSA-jg22-mg44-37j8 | Dependencies (osv-scanner) |
| high | osv/GHSA-jwv3-5hgf-82ww |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-3553, GHSA-jwv3-5hgf-82ww | Dependencies (osv-scanner) |
| high | osv/GHSA-m5qp-6w8w-w647 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2098, GHSA-m5qp-6w8w-w647 | Dependencies (osv-scanner) |
| high | osv/GHSA-m6qw-4cw2-hm4m |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2106, GHSA-m6qw-4cw2-hm4m | Dependencies (osv-scanner) |
| high | osv/GHSA-mmhr-3c5m-f64f |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-mmhr-3c5m-f64f | Dependencies (osv-scanner) |
| high | osv/GHSA-p998-jp59-783m |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2097, GHSA-p998-jp59-783m | Dependencies (osv-scanner) |
| high | osv/GHSA-pc6w-59fv-rh23 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1515, GHSA-pc6w-59fv-rh23 | Dependencies (osv-scanner) |
| high | osv/GHSA-pjvx-prjx-h659 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-pjvx-prjx-h659 | Dependencies (osv-scanner) |
| high | osv/GHSA-q2x7-8rv6-6q7h |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1475, GHSA-q2x7-8rv6-6q7h | Dependencies (osv-scanner) |
| high | osv/GHSA-qccp-gfcp-xxvc |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-141, GHSA-qccp-gfcp-xxvc | Dependencies (osv-scanner) |
| high | osv/GHSA-r6ph-v2qm-q3c2 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2141, GHSA-r6ph-v2qm-q3c2 | Dependencies (osv-scanner) |
| high | osv/GHSA-rgxp-2hwp-jwgg |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-113, GHSA-rgxp-2hwp-jwgg | Dependencies (osv-scanner) |
| high | osv/GHSA-vvf4-9x63-8xvv |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-vvf4-9x63-8xvv | Dependencies (osv-scanner) |
| high | osv/GHSA-vxq7-64xx-v4gw |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-4177, GHSA-vxq7-64xx-v4gw | Dependencies (osv-scanner) |
| high | osv/GHSA-xcgm-r5h9-7989 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2108, GHSA-xcgm-r5h9-7989 | Dependencies (osv-scanner) |
| high | osv/GHSA-xm59-rqc7-hhvf |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1691, GHSA-xm59-rqc7-hhvf | Dependencies (osv-scanner) |
| high | osv/PYSEC-2024-323 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2024-323 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-203 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-203 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-203 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-203 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-204 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-204 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-204 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-204 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-205 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-205 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-205 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-205 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-207 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-207 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-207 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-207 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-208 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-208 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-208 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-208 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-209 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-209 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2025-209 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-209 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2026-139 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-139 | Dependencies (osv-scanner) |
| high | osv/PYSEC-2026-139 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-139 | Dependencies (osv-scanner) |
| high | opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/database_schema.py:280 | Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used... | Static analysis (opengrep) |
| high | opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/database_schema.py:295 | Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used... | Static analysis (opengrep) |
| high | opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/database_schema.py:310 | Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used... | Static analysis (opengrep) |
| high | opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/database_schema.py:325 | Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used... | Static analysis (opengrep) |
| high | opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/database_schema.py:340 | Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used... | Static analysis (opengrep) |
| high | opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/database_schema.py:404 | Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used... | Static analysis (opengrep) |
| high | opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/database_schema.py:434 | Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/adb_data.py:317 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query |
fincept-qt/scripts/agents/finagent_core/modules/memory_module.py:508 | Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.audit.dangerous-subprocess-use-audit |
fincept-qt/scripts/agents/rdagents/cli.py:216 | Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.audit.dangerous-subprocess-use-audit |
fincept-qt/scripts/agents/rdagents/mcp_tools.py:154 | Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.audit.dangerous-subprocess-use-tainted-env-args |
fincept-qt/scripts/agents/rdagents/mcp_tools.py:155 | Detected subprocess function 'Popen' with user controlled data. A malicious actor could leverage this to perform command injection. You may consider using 'shlex.quote()'. [confidence medium] | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/arxiv_data.py:10 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/bis_data.py:20 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/bnr_data.py:31 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/ecb_data.py:26 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/mnb_data.py:40 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/nasa_gibs_api.py:31 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.audit.dangerous-subprocess-use-audit |
fincept-qt/scripts/notebook_cell_runner.py:184 | Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/tcmb_data.py:35 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | opengrep/python.lang.security.use-defused-xml |
fincept-qt/scripts/wits_trade_data.py:21 | The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause... | Static analysis (opengrep) |
| high | gitleaks/private-key |
fincept-qt/src/screens/polymarket/PredictionAccountDialog.cpp:144 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_de_DE.ts:37760 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_es_ES.ts:37760 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_fr_FR.ts:37760 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_id_ID.ts:37752 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_it_IT.ts:37760 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_pt_BR.ts:37760 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_tr_TR.ts:37752 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_vi_VN.ts:37752 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_zh_CN.ts:37752 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_zh_HK.ts:37751 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| high | gitleaks/private-key |
fincept-qt/translations/fincept_zh_TW.ts:37751 | Possible private-key secret in the current tree | Secrets (gitleaks) |
| medium | opengrep/python.lang.best-practice.logging-error-without-handling |
fincept-qt/scripts/Analytics/alternateInvestment/data_handler.py:135 | Errors should only be logged when handled. The code logs the error and propogates the exception, consider reducing the level to warning or info. | Lint |
| medium | opengrep/python.lang.best-practice.logging-error-without-handling |
fincept-qt/scripts/Analytics/alternateInvestment/data_handler.py:204 | Errors should only be logged when handled. The code logs the error and propogates the exception, consider reducing the level to warning or info. | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/Analytics/alternateInvestment/data_handler.py:219 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.logging-error-without-handling |
fincept-qt/scripts/Analytics/alternateInvestment/data_handler.py:230 | Errors should only be logged when handled. The code logs the error and propogates the exception, consider reducing the level to warning or info. | Lint |
| medium | opengrep/python.lang.best-practice.logging-error-without-handling |
fincept-qt/scripts/Analytics/alternateInvestment/data_handler.py:57 | Errors should only be logged when handled. The code logs the error and propogates the exception, consider reducing the level to warning or info. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/alternateInvestment/preferred_stocks.py:198 | Is "is_cumulative" a function or an attribute? If it is a function, you may have meant self.is_cumulative() because self.is_cumulative is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/alternateInvestment/preferred_stocks.py:201 | Is "is_cumulative" a function or an attribute? If it is a function, you may have meant self.is_cumulative() because self.is_cumulative is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/alternateInvestment/preferred_stocks.py:202 | Is "is_cumulative" a function or an attribute? If it is a function, you may have meant self.is_cumulative() because self.is_cumulative is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/alternateInvestment/preferred_stocks.py:203 | Is "is_cumulative" a function or an attribute? If it is a function, you may have meant self.is_cumulative() because self.is_cumulative is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/alternateInvestment/preferred_stocks.py:40 | Is "is_cumulative" a function or an attribute? If it is a function, you may have meant self.is_cumulative() because self.is_cumulative is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/alternateInvestment/preferred_stocks.py:40 | Is "is_cumulative" a function or an attribute? If it is a function, you may have meant parameters.is_cumulative() because parameters.is_cumulative is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/alternateInvestment/preferred_stocks.py:437 | Is "is_cumulative" a function or an attribute? If it is a function, you may have meant self.is_cumulative() because self.is_cumulative is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:204 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:207 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:222 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:225 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:240 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:241 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:244 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:245 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:261 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:264 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:279 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:280 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:283 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:284 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:298 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:299 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:302 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:303 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:319 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:320 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:323 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:324 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:341 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:342 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:346 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:347 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:365 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:366 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:369 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:370 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:387 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:388 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:391 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:392 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:409 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:410 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:413 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:414 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:428 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:429 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:432 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:433 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:449 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:450 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:453 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:454 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:473 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:474 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:477 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:478 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:495 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:496 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:499 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:500 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:514 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:515 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:518 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:519 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:537 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:538 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:541 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:542 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:559 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:560 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:563 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:564 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:582 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:585 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:602 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:603 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:606 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:607 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:622 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:625 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:639 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:640 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:643 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:644 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:659 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:660 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:663 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:664 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:679 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:682 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:698 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:699 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:703 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:704 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:721 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:722 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:725 | Is "is_short" a function or an attribute? If it is a function, you may have meant self.position.is_short() because self.position.is_short is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/btp_strategies.py:726 | Is "is_long" a function or an attribute? If it is a function, you may have meant self.position.is_long() because self.position.is_long is always true. | Lint |
| medium | opengrep/python.lang.correctness.common-mistakes.string-concat-in-list |
fincept-qt/scripts/Analytics/backtesting/bt/bt_provider.py:479 | Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list? | Lint |
| medium | opengrep/python.lang.best-practice.pass-body-fn |
fincept-qt/scripts/Analytics/backtesting/zipline/zl_strategies.py:1184 | `pass` is the body of function handle_data. Consider removing this or raise NotImplementedError() if this is a TODO | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/deal_tracker.py:219 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/corporateFinance/synergies/integration_costs.py:251 | Is "is_capitalized" a function or an attribute? If it is a function, you may have meant cost.is_capitalized() because cost.is_capitalized is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/corporateFinance/synergies/integration_costs.py:262 | Is "is_capitalized" a function or an attribute? If it is a function, you may have meant cost.is_capitalized() because cost.is_capitalized is always true. | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/corporateFinance/synergies/integration_costs.py:263 | Is "is_capitalized" a function or an attribute? If it is a function, you may have meant cost.is_capitalized() because cost.is_capitalized is always true. | Lint |
| medium | opengrep/python.lang.maintainability.useless-if-body |
fincept-qt/scripts/Analytics/corporateFinance/synergies/revenue_synergies.py:274 | Useless if statement; both blocks have the same body | Lint |
| medium | opengrep/python.lang.maintainability.code-after-unconditional-return |
fincept-qt/scripts/Analytics/economics/analytics_engine.py:1175 | code after return statement will not be executed | Lint |
| medium | opengrep/python.requests.best-practice.use-raise-for-status |
fincept-qt/scripts/Analytics/economics/data_handler.py:232 | There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a... | Lint |
| medium | opengrep/python.requests.best-practice.use-timeout |
fincept-qt/scripts/Analytics/economics/data_handler.py:232 | Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a... | Lint |
| medium | opengrep/python.requests.best-practice.use-raise-for-status |
fincept-qt/scripts/Analytics/economics/data_handler.py:291 | There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a... | Lint |
| medium | opengrep/python.requests.best-practice.use-timeout |
fincept-qt/scripts/Analytics/economics/data_handler.py:291 | Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a... | Lint |
| medium | opengrep/python.requests.best-practice.use-raise-for-status |
fincept-qt/scripts/Analytics/economics/data_handler.py:374 | There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a... | Lint |
| medium | opengrep/python.requests.best-practice.use-timeout |
fincept-qt/scripts/Analytics/economics/data_handler.py:374 | Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a... | Lint |
| medium | opengrep/python.requests.best-practice.use-raise-for-status |
fincept-qt/scripts/Analytics/economics/data_handler.py:462 | There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a... | Lint |
| medium | opengrep/python.requests.best-practice.use-timeout |
fincept-qt/scripts/Analytics/economics/data_handler.py:462 | Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a... | Lint |
| medium | opengrep/python.lang.best-practice.manual-defaultdict-list-create |
fincept-qt/scripts/Analytics/economics/growth_analysis.py:720 | manually creating a defaultdict - use collections.defaultdict(list) | Lint |
| medium | opengrep/python.lang.maintainability.useless-if-body |
fincept-qt/scripts/Analytics/economics/reporting.py:145 | Useless if statement; both blocks have the same body | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/Analytics/economics/reporting.py:385 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/Analytics/economics/reporting.py:492 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/Analytics/ffn_wrapper/ffn_service.py:853 | `return` only makes sense inside a function | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/Analytics/finanicalanalysis/core/data_processor.py:301 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/Analytics/pyportfolioopt_wrapper/core.py:1116 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.maintainability.useless-if-body |
fincept-qt/scripts/Analytics/pyportfolioopt_wrapper/core.py:432 | Useless if statement; both blocks have the same body | Lint |
| medium | opengrep/python.lang.best-practice.pass-body-range |
fincept-qt/scripts/Analytics/pyportfolioopt_wrapper/core.py:534 | `pass` is the body of for sector, (lower, upper) in self.config.sector_constraints.items(). Consider removing this or raise NotImplementedError() if this is a TODO | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/Analytics/quant/base_calculator.py:439 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.maintainability.is-function-without-parentheses |
fincept-qt/scripts/Analytics/quant/data_validator.py:682 | Is "is_monotonic_increasing" a function or an attribute? If it is a function, you may have meant dates.is_monotonic_increasing() because dates.is_monotonic_increasing is always true. | Lint |
| medium | opengrep/python.lang.correctness.common-mistakes.string-concat-in-list |
fincept-qt/scripts/agents/finagent_core/agentic/runner.py:563 | Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list? | Lint |
| medium | opengrep/python.lang.maintainability.code-after-unconditional-return |
fincept-qt/scripts/agents/finagent_core/agentic/runner.py:756 | code after return statement will not be executed | Lint |
| medium | opengrep/python.lang.best-practice.pass-body-range |
fincept-qt/scripts/agents/finagent_core/core_agent_stream.py:381 | `pass` is the body of for _ in agent.run_streaming(query, config, params.get("session_id")). Consider removing this or raise NotImplementedError() if this is a TODO | Lint |
| medium | opengrep/python.lang.best-practice.pass-body-range |
fincept-qt/scripts/agents/finagent_core/core_agent_stream.py:390 | `pass` is the body of for _ in agent.run_team_streaming(query, team_config, params.get("session_id")). Consider removing this or raise NotImplementedError() if this is a TODO | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/agents/finagent_core/modules/hooks_module.py:243 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/agents/finagent_core/modules/output_models.py:26 | `return` only makes sense inside a function | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/agents/finagent_core/modules/output_models.py:27 | `return` only makes sense inside a function | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/agents/finagent_core/modules/output_models.py:27 | `return` only makes sense inside a function | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/agents/finagent_core/modules/tracing_module.py:530 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/agents/finagent_core/registries/fincept_model.py:61 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/agents/finagent_core/registries/fincept_model.py:73 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/ai_quant_lab/qlib_rolling_retraining.py:106 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/ai_quant_lab/qlib_rolling_retraining.py:168 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/ai_quant_lab/qlib_rolling_retraining.py:217 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.best-practice.unspecified-open-encoding |
fincept-qt/scripts/ai_quant_lab/qlib_rolling_retraining.py:97 | Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/akshare_analysis.py:103 | `return` only makes sense inside a function | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/akshare_analysis.py:105 | `return` only makes sense inside a function | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/akshare_analysis.py:107 | `return` only makes sense inside a function | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/akshare_analysis.py:109 | `return` only makes sense inside a function | Lint |
| medium | opengrep/python.lang.maintainability.return-not-in-function |
fincept-qt/scripts/akshare_analysis.py:111 | `return` only makes sense inside a function | Lint |
| medium | zizmor/artipacked |
.github/workflows/arch-ratchet.yml:24 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/build-cpp.yml:1 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/build-cpp.yml:17 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/build-cpp.yml:79 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/build-cpp.yml:931 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/lint.yml:216 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/lint.yml:269 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/lint.yml:43 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/lint.yml:91 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/release.yml:1 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/release.yml:1361 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/release.yml:1366 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/release.yml:2662 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/release.yml:30 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/release.yml:35 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/release.yml:724 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/release.yml:729 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/sync-labels.yml:19 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/test-setup.yml:13 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/test-setup.yml:23 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/excessive-permissions |
.github/workflows/translate-readme.yml:10 | overly broad permissions [confidence medium] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/translate-readme.yml:13 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | gitleaks/pypi-upload-token |
MANIFEST.in:9 | Possible pypi-upload-token secret in history (commit d79ec683d9); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/gcp-api-key |
api/main.py:19 | Possible gcp-api-key secret in history (commit 19729bf6c4); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | osv/GHSA-gc5v-m9x4-r6x2 |
fincept-qt/resources/requirements-numpy2-core.txt | [email protected] (PyPI) is affected by PYSEC-2026-2275, GHSA-gc5v-m9x4-r6x2; also in fincept-qt/resources/requirements-numpy2.txt | Dependencies (osv-scanner) |
| medium | osv/GHSA-2vrm-gr82-f7m5 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2096, GHSA-2vrm-gr82-f7m5 | Dependencies (osv-scanner) |
| medium | osv/GHSA-3749-ghw9-m3mg |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-191, GHSA-3749-ghw9-m3mg | Dependencies (osv-scanner) |
| medium | osv/GHSA-3749-ghw9-m3mg |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-191, GHSA-3749-ghw9-m3mg | Dependencies (osv-scanner) |
| medium | osv/GHSA-3hjh-jh2h-vrg6 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2024-118, GHSA-3hjh-jh2h-vrg6 | Dependencies (osv-scanner) |
| medium | osv/GHSA-3hjh-jh2h-vrg6 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2561, GHSA-3hjh-jh2h-vrg6 | Dependencies (osv-scanner) |
| medium | osv/GHSA-3wq7-rqq7-wx6j |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2099, GHSA-3wq7-rqq7-wx6j | Dependencies (osv-scanner) |
| medium | osv/GHSA-45pg-36p6-83v9 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1507, GHSA-45pg-36p6-83v9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-494j-54xm-rwp3 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-494j-54xm-rwp3 | Dependencies (osv-scanner) |
| medium | osv/GHSA-4c99-qj7h-p3vg |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2229, GHSA-4c99-qj7h-p3vg | Dependencies (osv-scanner) |
| medium | osv/GHSA-4j63-6c4x-wfg4 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-4j63-6c4x-wfg4 | Dependencies (osv-scanner) |
| medium | osv/GHSA-54p9-h82j-f925 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-4244, GHSA-54p9-h82j-f925 | Dependencies (osv-scanner) |
| medium | osv/GHSA-65pc-fj4g-8rjx |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-215, GHSA-65pc-fj4g-8rjx | Dependencies (osv-scanner) |
| medium | osv/GHSA-6cjc-53gc-5rqm |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-6cjc-53gc-5rqm | Dependencies (osv-scanner) |
| medium | osv/GHSA-6jhg-hg63-jvvf |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1100, GHSA-6jhg-hg63-jvvf | Dependencies (osv-scanner) |
| medium | osv/GHSA-79v4-65xg-pq4g |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1284, GHSA-79v4-65xg-pq4g | Dependencies (osv-scanner) |
| medium | osv/GHSA-7g44-g9rc-x53w |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-7g44-g9rc-x53w | Dependencies (osv-scanner) |
| medium | osv/GHSA-7jqv-fw35-gmx9 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2230, GHSA-7jqv-fw35-gmx9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-7p48-42j8-8846 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2285, GHSA-7p48-42j8-8846 | Dependencies (osv-scanner) |
| medium | osv/GHSA-887c-mr87-cxwp |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1970, GHSA-887c-mr87-cxwp | Dependencies (osv-scanner) |
| medium | osv/GHSA-887c-mr87-cxwp |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1970, GHSA-887c-mr87-cxwp | Dependencies (osv-scanner) |
| medium | osv/GHSA-966j-vmvw-g2g9 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2100, GHSA-966j-vmvw-g2g9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-9754-6rhw-gj3h |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-9754-6rhw-gj3h | Dependencies (osv-scanner) |
| medium | osv/GHSA-9v9h-cgj8-h64p |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1285, GHSA-9v9h-cgj8-h64p | Dependencies (osv-scanner) |
| medium | osv/GHSA-c427-h43c-vf67 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2103, GHSA-c427-h43c-vf67 | Dependencies (osv-scanner) |
| medium | osv/GHSA-c678-jfcj-6jmf |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-c678-jfcj-6jmf | Dependencies (osv-scanner) |
| medium | osv/GHSA-c678-jfcj-6jmf |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-c678-jfcj-6jmf | Dependencies (osv-scanner) |
| medium | osv/GHSA-cpwx-vrp4-4pq7 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1471, GHSA-cpwx-vrp4-4pq7 | Dependencies (osv-scanner) |
| medium | osv/GHSA-f4hp-rmr7-r7v8 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-f4hp-rmr7-r7v8 | Dependencies (osv-scanner) |
| medium | osv/GHSA-f4hp-rmr7-r7v8 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-f4hp-rmr7-r7v8 | Dependencies (osv-scanner) |
| medium | osv/GHSA-f9xw-jh8m-3mwq |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-f9xw-jh8m-3mwq | Dependencies (osv-scanner) |
| medium | osv/GHSA-g84x-mcqj-x9qq |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1106, GHSA-g84x-mcqj-x9qq | Dependencies (osv-scanner) |
| medium | osv/GHSA-gjv8-xp57-g29c |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-4170, GHSA-gjv8-xp57-g29c | Dependencies (osv-scanner) |
| medium | osv/GHSA-gr75-jv2w-4656 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2192, GHSA-gr75-jv2w-4656 | Dependencies (osv-scanner) |
| medium | osv/GHSA-h4gh-qq45-vh27 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-h4gh-qq45-vh27 | Dependencies (osv-scanner) |
| medium | osv/GHSA-h75v-3vvj-5mfj |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1474, GHSA-h75v-3vvj-5mfj | Dependencies (osv-scanner) |
| medium | osv/GHSA-hpj7-wq8m-9hgp |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2109, GHSA-hpj7-wq8m-9hgp | Dependencies (osv-scanner) |
| medium | osv/GHSA-j934-xhv5-fg8f |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-4171, GHSA-j934-xhv5-fg8f | Dependencies (osv-scanner) |
| medium | osv/GHSA-jj3x-wxrx-4x23 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1107, GHSA-jj3x-wxrx-4x23 | Dependencies (osv-scanner) |
| medium | osv/GHSA-m959-cc7f-wv43 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-35, GHSA-m959-cc7f-wv43 | Dependencies (osv-scanner) |
| medium | osv/GHSA-mfx4-hv73-q22v |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-3546, GHSA-mfx4-hv73-q22v | Dependencies (osv-scanner) |
| medium | osv/GHSA-mq44-7p77-q5h7 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-3547, GHSA-mq44-7p77-q5h7 | Dependencies (osv-scanner) |
| medium | osv/GHSA-mwh4-6h8g-pg8w |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2101, GHSA-mwh4-6h8g-pg8w | Dependencies (osv-scanner) |
| medium | osv/GHSA-pqxq-w44r-73xw |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-pqxq-w44r-73xw | Dependencies (osv-scanner) |
| medium | osv/GHSA-q25c-c977-4cmh |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1516, GHSA-q25c-c977-4cmh | Dependencies (osv-scanner) |
| medium | osv/GHSA-qfhq-4f3w-5fph |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-qfhq-4f3w-5fph | Dependencies (osv-scanner) |
| medium | osv/GHSA-qfhq-4f3w-5fph |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-qfhq-4f3w-5fph | Dependencies (osv-scanner) |
| medium | osv/GHSA-rrmf-rvhw-rf47 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-rrmf-rvhw-rf47 | Dependencies (osv-scanner) |
| medium | osv/GHSA-rrmf-rvhw-rf47 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-rrmf-rvhw-rf47 | Dependencies (osv-scanner) |
| medium | osv/GHSA-vgrw-7cvw-pwgx |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-vgrw-7cvw-pwgx | Dependencies (osv-scanner) |
| medium | osv/GHSA-vgrw-7cvw-pwgx |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-vgrw-7cvw-pwgx | Dependencies (osv-scanner) |
| medium | osv/GHSA-vqwp-45wm-r9r5 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-212, GHSA-vqwp-45wm-r9r5 | Dependencies (osv-scanner) |
| medium | osv/GHSA-w2fm-2cpv-w7v5 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-2094, GHSA-w2fm-2cpv-w7v5 | Dependencies (osv-scanner) |
| medium | osv/PYSEC-2024-161 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2024-161 | Dependencies (osv-scanner) |
| medium | osv/PYSEC-2024-43 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2024-43 | Dependencies (osv-scanner) |
| medium | osv/PYSEC-2025-198 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-198 | Dependencies (osv-scanner) |
| medium | osv/PYSEC-2025-198 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-198 | Dependencies (osv-scanner) |
| medium | osv/PYSEC-2025-206 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-206 | Dependencies (osv-scanner) |
| medium | osv/PYSEC-2025-206 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2025-206 | Dependencies (osv-scanner) |
| medium | osv/PYSEC-2026-3554 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-3554 | Dependencies (osv-scanner) |
| medium | opengrep/python.lang.security.audit.exec-detected |
fincept-qt/scripts/Analytics/backtesting/backtestingpy/backtestingpy_provider.py:994 | Detected the use of exec(). exec() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.exec-detected |
fincept-qt/scripts/Analytics/backtesting/base/fincept_strategy_runner.py:70 | Detected the use of exec(). exec() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.exec-detected |
fincept-qt/scripts/Analytics/backtesting/vectorbt/vectorbt_provider.py:2037 | Detected the use of exec(). exec() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.formatted-sql-query |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/database_schema.py:280 | Detected possible formatted SQL query. Use parameterized queries instead. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/deal_parser.py:33 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/deal_scanner.py:48 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/Analytics/corporateFinance/deal_database/deal_scanner.py:61 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/Analytics/economics/__init__.py:211 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/Analytics/ffn_wrapper/__init__.py:58 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/Analytics/finanicalanalysis/specialized_analysis/__init__.py:51 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/Analytics/fixedIncome/__init__.py:100 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/Analytics/gs_quant_wrapper/__init__.py:69 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/Analytics/py_vollib_wrapper/__init__.py:34 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/Analytics/pypme_wrapper/__init__.py:46 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/Analytics/statsmodels_wrapper/__init__.py:164 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/agents/finagent_core/__init__.py:94 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.eval-detected |
fincept-qt/scripts/agents/finagent_core/execution_planner.py:63 | Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/agents/finagent_core/modules/knowledge_module.py:235 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/agents/finagent_core/registries/embedder_registry.py:213 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/agents/finagent_core/registries/models_registry.py:362 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/agents/finagent_core/registries/tools_registry.py:301 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/agents/finagent_core/registries/vectordb_registry.py:165 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/agents/finagent_core/tools/terminal_toolkit.py:244 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.eval-detected |
fincept-qt/scripts/agents/rdagents/mcp_server.py:681 | Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.deserialization.avoid-pickle |
fincept-qt/scripts/ai_quant_lab/qlib_advanced_models.py:116 | Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.deserialization.avoid-pickle |
fincept-qt/scripts/ai_quant_lab/qlib_advanced_models.py:138 | Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.deserialization.avoid-pickle |
fincept-qt/scripts/ai_quant_lab/qlib_meta_learning.py:100 | Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.deserialization.avoid-pickle |
fincept-qt/scripts/ai_quant_lab/qlib_meta_learning.py:88 | Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.deserialization.avoid-pickle |
fincept-qt/scripts/ai_quant_lab/qlib_online_learning.py:74 | Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.deserialization.avoid-pickle |
fincept-qt/scripts/ai_quant_lab/qlib_online_learning.py:85 | Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.insecure-transport.ssl.no-set-ciphers |
fincept-qt/scripts/bnm_data.py:100 | The 'ssl' module disables insecure cipher suites by default. Therefore, use of 'set_ciphers()' should only be used when you have very specialized requirements. Otherwise, you risk lowering the security of the SSL channel. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/exchange/broker_ws_bridge.py:170 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/exchange/broker_ws_bridge.py:377 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.non-literal-import |
fincept-qt/scripts/fincept_mcp/edgar/base.py:36 | Untrusted user input in `importlib.import_module()` function allows an attacker to load arbitrary code. Avoid dynamic values in `importlib.import_module()` or use a whitelist to prevent running untrusted code. [confidence low] | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/hdx_data.py:44 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.exec-detected |
fincept-qt/scripts/notebook_cell_runner.py:105 | Detected the use of exec(). exec() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.eval-detected |
fincept-qt/scripts/notebook_cell_runner.py:107 | Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/strategies/fincept_engine/algorithm.py:2179 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/voice/deepgram_tts.py:162 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | opengrep/python.lang.security.audit.dynamic-urllib-use-detected |
fincept-qt/scripts/yfinance_data.py:798 | Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control... | Static analysis (opengrep) |
| medium | gitleaks/gcp-api-key |
fincept_terminal/FinceptDashboard/FinceptTerminalDashboard.py:247 | Possible gcp-api-key secret in history (commit 9dd17faba2); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/gcp-api-key |
fincept_terminal/FinceptTerminalAIPwrResModule/ai_hedge_fund/utils/config.py:1 | Possible gcp-api-key secret in history (commit ce9899ce63); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/gcp-api-key |
fincept_terminal/ai_hedge_fund/utils/config.py:1 | Possible gcp-api-key secret in history (commit c64291ba25); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/gcp-api-key |
fincept_terminal/consumer_behavior.py:13 | Possible gcp-api-key secret in history (commit aae01b79b2); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/gcp-api-key |
fincept_terminal/consumer_behaviour/consumer_behavior.py:13 | Possible gcp-api-key secret in history (commit 6f19cfcfb1); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/gcp-api-key |
fincept_terminal/genai_query/FinceptTerminalGenAI.py:239 | Possible gcp-api-key secret in history (commit 9dd17faba2); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/jwt |
fincept_terminal/live_price_india/liveprice.py:252 | Possible jwt secret in history (commit 6f19cfcfb1); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/jwt |
fincept_terminal/liveprice.py:252 | Possible jwt secret in history (commit c121e4c45a); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | opengrep/bash.curl.security.curl-pipe-bash |
setup.sh:92 | Data is being piped into `bash` from a `curl` command. An attacker with control of the server in the `curl` command could inject malicious code into the pipe, resulting in a system compromise. Avoid piping untrusted data into `bash` or... | Static analysis (opengrep) |
| medium | gitleaks/jwt |
te/fyer.py:141 | Possible jwt secret in history (commit 3aa86691bb); removed from the current tree but still retrievable | Secrets (gitleaks) |
| medium | gitleaks/gcp-api-key |
test4.py:14 | Possible gcp-api-key secret in history (commit acfdfef643); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
.env:1 | Possible generic-api-key secret in history (commit 0a562cb1be); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-cpp/scripts/strategies/CustomDataPropertiesRegressionAlgorithm.py:71 | Possible generic-api-key secret in history (commit f72d5a0cb4); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-cpp/scripts/strategies/CustomDataRegressionAlgorithm.py:63 | Possible generic-api-key secret in history (commit f72d5a0cb4); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-qt/docs/DATAHUB_TOPICS.md:160 | Possible generic-api-key secret in the current tree (test/docs/example file) | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-qt/plans/crypto-center-phase-2.md:359 | Possible generic-api-key secret in history (commit 7106dab0c2); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | osv/GHSA-54jq-c3m8-4m76 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1097, GHSA-54jq-c3m8-4m76 | Dependencies (osv-scanner) |
| low | osv/GHSA-69f9-5gxw-wvc2 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1099, GHSA-69f9-5gxw-wvc2 | Dependencies (osv-scanner) |
| low | osv/GHSA-fh55-r93g-j68g |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1105, GHSA-fh55-r93g-j68g | Dependencies (osv-scanner) |
| low | osv/GHSA-gx76-c99x-2c96 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-gx76-c99x-2c96 | Dependencies (osv-scanner) |
| low | osv/GHSA-mqqc-3gqh-h2x8 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by PYSEC-2026-1109, GHSA-mqqc-3gqh-h2x8 | Dependencies (osv-scanner) |
| low | osv/GHSA-x3gm-94wq-g975 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-x3gm-94wq-g975 | Dependencies (osv-scanner) |
| low | osv/GHSA-x3gm-94wq-g975 |
fincept-qt/resources/requirements-numpy2.txt | [email protected] (PyPI) is affected by GHSA-x3gm-94wq-g975 | Dependencies (osv-scanner) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/abs_data.py:28 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/acled_data.py:19 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/alpha_vantage_extra_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/alternative_me_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/arxiv_data.py:101 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/arxiv_data.py:19 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/bis_stats_data.py:22 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/blockchain_com_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/cboe_vix_data.py:20 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/census_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/census_international_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/climate_trace_data.py:21 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/coincap_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/coinglass_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/coinmarketcap_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/coinpaprika_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/copernicus_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/crossref_data.py:19 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/cryptocompare_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/data_world_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | gitleaks/generic-api-key |
fincept-qt/scripts/databento_fno_chain.py:271 | Possible generic-api-key secret in the current tree | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-qt/scripts/databento_provider.py:480 | Possible generic-api-key secret in the current tree | Secrets (gitleaks) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/defillama_data.py:20 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/dexscreener_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/ecb_sdmx_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/eia_electricity_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/eia_natural_gas_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/eia_petroleum_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/eia_steo_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/ember_energy_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/energy_transition_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/entso_e_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/eodhd_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/eurostat_data.py:20 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/eurostat_extra_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/exchangerate_data.py:19 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/fdic_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/finnhub_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/fitch_connect_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/fmp_extra_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/frankfurter_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/fred_economic_data.py:19 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/gas_infrastructure_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/gfd_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/github_stats_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/glassnode_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/global_competitiveness_data.py:27 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/global_debt_monitor_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/global_findex_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/global_fishing_watch_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/global_forest_watch_data.py:21 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/global_price_index_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/global_solar_atlas_data.py:28 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/global_trade_alert_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/govtrack_data.py:16 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/harvard_dataverse_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/hud_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/iea_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/imf_datamapper_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/intrinio_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/irena_data.py:30 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/irs_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/kaggle_data.py:19 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/lei_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/maddison_project_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/marinetraffic_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/marketstack_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/messari_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/metals_prices_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/nber_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/noaa_climate_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/nominatim_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/numbeo_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/oecd_dev_data.py:23 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/oecd_health_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/ons_data.py:55 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/openCorporates_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/open_exchange_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/open_meteo_data.py:21 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/open_parliament_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/open_secrets_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/openaq_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/openbb_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/openfigi_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/overpass_api_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/owid_co2_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/owid_data.py:23 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/paris_agreement_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/penn_world_table_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/polygon_io_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/prs_group_data.py:16 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/public_apis_finance_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/quandl_nasdaq_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/quandl_wiki_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/quiverquant_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/redfin_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/reliefweb_data.py:21 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/sec_xbrl_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/semantic_scholar_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/simfin_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.use-defusedcsv |
fincept-qt/scripts/spreadsheet.py:94 | Detected the generation of a CSV file using the built-in `csv` module. If user data is used to generate the data in this file, it is possible that an attacker could inject a formula when the CSV is imported into a spreadsheet... | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/statcan_data.py:46 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/statista_free_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | gitleaks/generic-api-key |
fincept-qt/scripts/strategies/CustomDataPropertiesRegressionAlgorithm.py:71 | Possible generic-api-key secret in the current tree | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-qt/scripts/strategies/CustomDataRegressionAlgorithm.py:63 | Possible generic-api-key secret in the current tree | Secrets (gitleaks) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/tiingo_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/tradingview_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/transparency_budget_data.py:21 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/treasury_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/twelve_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/un_comtrade_extended_data.py:23 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/un_population_data.py:16 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/un_sdg_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/un_stats_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/unctad_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/undp_data.py:26 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/unhcr_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/unicef_data.py:30 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/usda_nass_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/waqi_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/who_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/who_immunization_data.py:31 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/wikipedia_pageviews_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/wisesheets_macro_data.py:19 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/world_bank_climate_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/world_bank_extra_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/world_pop_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/world_values_survey_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/worldbank_health_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/worldometers_data.py:16 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/yh_finance_data.py:17 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/zenodo_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | opengrep/python.lang.security.audit.insecure-transport.requests.request-session-with-http |
fincept-qt/scripts/zillow_data.py:18 | Detected a request using 'http://'. This request will be unencrypted. Use 'https://' instead. [confidence medium] | Static analysis (opengrep) |
| low | gitleaks/generic-api-key |
fincept-qt/src/services/portfolio/PortfolioService.cpp:472 | Possible generic-api-key secret in history (commit ddfdd3897e); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-qt/src/services/portfolio/PortfolioService_Metrics.cpp:225 | Possible generic-api-key secret in history (commit a6161babc5); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src-tauri/resources/python-windows/Lib/site-packages/google/protobuf/descriptor_pb2.py:34 | Possible generic-api-key secret in history (commit 979e20c379); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src-tauri/resources/python-windows/Lib/site-packages/numpy/random/tests/test_generator_mt19937.py:30 | Possible generic-api-key secret in history (commit 979e20c379); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src-tauri/resources/python/Lib/site-packages/google/protobuf/descriptor_pb2.py:34 | Possible generic-api-key secret in history (commit dc13ca3835); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src-tauri/resources/python/Lib/site-packages/numpy/random/tests/test_generator_mt19937.py:30 | Possible generic-api-key secret in history (commit dc13ca3835); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src-tauri/resources/scripts/strategies/CustomDataBitcoinAlgorithm.py:57 | Possible generic-api-key secret in history (commit c03fb8fdfb); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src-tauri/resources/scripts/strategies/CustomDataPropertiesRegressionAlgorithm.py:71 | Possible generic-api-key secret in history (commit c03fb8fdfb); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src-tauri/resources/scripts/strategies/CustomDataRegressionAlgorithm.py:63 | Possible generic-api-key secret in history (commit c03fb8fdfb); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src-tauri/resources/scripts/wto_test_results.txt:4 | Possible generic-api-key secret in history (commit 1a0675b0d9); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src/components/tabs/ProfileTab.tsx:23 | Possible generic-api-key secret in history (commit c4affd9b1f); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src/components/tabs/ma-analytics/unified/IndustryMetrics.tsx:67 | Possible generic-api-key secret in history (commit c8394aa409); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src/services/fyers-auth.js:22 | Possible generic-api-key secret in history (commit 049474873e); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept-terminal-desktop/src/services/geopoliticsService.ts:17 | Possible generic-api-key secret in history (commit 1a0675b0d9); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/DatabaseConnector/DataSources/fmp_data/fmp_provider.py:11 | Possible generic-api-key secret in history (commit 63ff0e17cc); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/DatabaseConnector/DataSources/openbb_data_sources/openbb_alpha_vantage/gui.py:269 | Possible generic-api-key secret in history (commit bf5eb176fd); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/FinceptForumModule/FinceptForumMessageSync.py:8 | Possible generic-api-key secret in history (commit 803956ad4e); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/FinceptForumModule/FinceptTerminalGlobalForumTab.py:10 | Possible generic-api-key secret in history (commit 803956ad4e); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/FinceptSettingModule/FinceptSettingModule.json:28 | Possible generic-api-key secret in history (commit 302163c6a6); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/economytracker.py:9 | Possible generic-api-key secret in history (commit 71bbff5238); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/genai_query/c.py:5 | Possible generic-api-key secret in history (commit 9dd17faba2); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/live_price_india/liveprice.py:252 | Possible generic-api-key secret in history (commit 6f19cfcfb1); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/liveprice.py:252 | Possible generic-api-key secret in history (commit c121e4c45a); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/settings/settings.json:12 | Possible generic-api-key secret in history (commit e6418380a6); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal/world_economy_tracker/economytracker.py:8 | Possible generic-api-key secret in history (commit 6f19cfcfb1); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
fincept_terminal_tui/atemp/fyers_new_gui:37 | Possible generic-api-key secret in history (commit 99c309ef9d); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
legacy-python-depreciated/fincept_terminal/DatabaseConnector/DataSources/fmp_data/fmp_provider.py:11 | Possible generic-api-key secret in history (commit 039ed03f6c); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
legacy-python-depreciated/fincept_terminal/DatabaseConnector/DataSources/openbb_data_sources/openbb_alpha_vantage/gui.py:269 | Possible generic-api-key secret in history (commit 039ed03f6c); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
te/fyer.py:141 | Possible generic-api-key secret in history (commit 3aa86691bb); removed from the current tree but still retrievable | Secrets (gitleaks) |
| low | gitleaks/generic-api-key |
te/tt.py:7 | Possible generic-api-key secret in history (commit 3aa86691bb); removed from the current tree but still retrievable | Secrets (gitleaks) |
| info | zizmor/superfluous-actions |
.github/workflows/build-cpp.yml:1049 | action functionality is already included by the runner [confidence high] | CI workflows (zizmor) |
| info | zizmor/superfluous-actions |
.github/workflows/release.yml:2596 | action functionality is already included by the runner [confidence high] | CI workflows (zizmor) |
Tools and coverage
Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.
| Analyzer | Pillar | Status | Version | Findings | Note |
|---|---|---|---|---|---|
| AI tool configuration | AI provenance | ok | signatures-v1 | 0 | |
| Explicit AI attribution | AI provenance | ok | signatures-v1 | 0 | |
| Release velocity | AI provenance | ok | prov-5 | 0 | |
| Coding style | AI provenance | ok | — | 0 | |
| Commit velocity | AI provenance | ok | prov-5 | 0 | |
| Findings in AI-written lines | AI provenance | ok | git-blame | 0 | |
| Complexity (lizard) | Code quality | ok | lizard 1.25.1 | 0 | |
| Documentation | Code quality | ok | — | 0 | |
| Duplication (jscpd) | Code quality | ok | repotrust-dup-w6 | 0 | |
| Lint | Code quality | ok | opengrep 1.33.1; rules f1d2b562b414 | 200 | |
| Tests and CI | Code quality | ok | — | 0 | |
| Type safety | Code quality | ok | — | 0 | |
| CI workflows (zizmor) | Security | ok | zizmor 1.32.0 | 70 | |
| Dependencies (osv-scanner) | Security | ok | osv-scanner version: 2.7.1 | 136 | |
| Release downloads | Security | ok | — | 0 | |
| Security posture | Security | ok | — | 0 | |
| Package registries | Security | ok | — | 0 | |
| Static analysis (opengrep) | Security | ok | opengrep 1.33.1; rules f1d2b562b414 | 199 | |
| OpenSSF Scorecard | Security | skipped | — | 0 | no published OpenSSF Scorecard result for this repo |
| Secrets (gitleaks) | Security | ok | gitleaks 8.30.1 | 63 |
Score history
| Scored | Commit | Scoring | AI provenance | Quality | Security |
|---|---|---|---|---|---|
| 2026-11-14 | 68691b7577ce | prov-5+qual-2+sec-2 | 25% | 53 | 23 |
Full text report
- Repository: https://github.com/Fincept-Corporation/FinceptTerminal
- Commit:
68691b7577ce642009cdf2c1b4b0766ca9e37999 - Generated: 2026-11-14T15:39:16+00:00
- Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2
Scores
| Pillar | Score | Signal | Confidence | Coverage |
|---|---|---|---|---|
| AI provenance (estimated AI-generated share) | 25 | explicit | 95% | 100% |
| Code quality | 53 | weak | 90% | 100% |
| Security | 23 | poor | 85% | 100% |
AI provenance
Explicit AI attribution on 25% of first-party code added; an estimated 25% including velocity signals.
- Explicitly attributed share (lower bound): 25.1%
- Unattributed share in AI-consistent velocity bursts: 3.9%
- Estimated AI-generated share: 25.1%
| AI tool | Attributed commits | Lines added |
|---|---|---|
| Claude Code | 116 | 1,375,210 |
| Jules | 3 | 19 |
| OpenAI Codex | 2 | 992 |
| Cursor agent | 1 | 27 |
Current source lines last changed by AI-attributed commits: 7,471 of 393,327 (sampled).
| Findings per 1,000 lines | AI-attributed | Other | Ratio |
|---|---|---|---|
| Quality | 0.0 | 0.124 | 0.0x |
| Security | 0.0 | 0.264 | 0.0x |
- Stylometry index: 0.10 per 1,000 lines (narrated steps 54, placeholders 7, assistant phrasing 1, emoji 34). Reported as a signal, not scored.
| Month | Lines added | Attributed to AI |
|---|---|---|
| 2025-12 | 189,412 | 4% |
| 2026-01 | 457,928 | 4% |
| 2026-02 | 419,188 | 0% |
| 2026-03 | 923,544 | 5% |
| 2026-04 | 221,008 | 1% |
| 2026-05 | 514,151 | 3% |
| 2026-06 | 790,472 | 0% |
| 2026-07 | 103,649 | 1% |
| 2026-08 | 16,734 | 0% |
| 2026-09 | 228 | 0% |
| 2026-10 | 119,308 | 0% |
| 2026-11 | 36,102 | 0% |
Evidence
- Claude Code: trailer 'Co-Authored-By: Claude' (7716ee861324)
- Claude Code: trailer 'Co-Authored-By: Claude' (5e8ba11ed62b)
- Claude Code: trailer 'Co-Authored-By: Claude' (cb9e9063a690)
- Claude Code: trailer 'Co-Authored-By: Claude' (e009a48e4f3e)
- Cursor agent: trailer 'Co-authored-by: Cursor' (c3b3cd2e1aff)
- Claude Code: trailer 'Co-Authored-By: Claude' (0d5c5134699e)
- Claude Code: trailer 'Co-Authored-By: Claude' (fdd8e9d8716c)
- Claude Code: trailer 'Co-Authored-By: Claude' (3b1fcbc2387e)
- Claude Code: trailer 'Co-Authored-By: Claude' (5c248ecd5b84)
- Claude Code: trailer 'Co-Authored-By: Claude' (38497b0a1849)
- Claude Code: trailer 'Co-Authored-By: Claude' (8d845a5f10a6)
- Claude Code: trailer 'Co-Authored-By: Claude' (941c344fb443)
- Claude Code: trailer 'Co-Authored-By: Claude' (76421f6624a2)
- Claude Code: trailer 'Co-Authored-By: Claude' (134d51560450)
- Claude Code: trailer 'Co-Authored-By: Claude' (eef38887010f)
AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.
Code quality
Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 32% of function code in complex or long functions; 7% duplicated lines. Weakest area: type safety.
| Area | Score |
|---|---|
| Complexity (lizard) | 38 |
| Duplication | 64 |
| Code smells (Opengrep) | 81 |
| Tests and CI | 40 |
| Documentation | 80 |
| Type safety | 0 |
| Process (Scorecard review/maintenance) | n/a |
- Functions: 27,943; mean complexity 4.6, 90th percentile 10; 1439 complex and 567 long functions
- Duplicated lines: 7.3% of 637,550 compared
- Tests: 2,173 test lines for 831,338 source lines (ratio 0.00); CI test commands: none detected; 12% of recent source commits also change tests
- Docs missing or thin: changelog
Most complex functions:
- fincept::mcp::core::ui::ui_act_detail::prepare in fincept-qt/src/mcp/core/UiAct.cpp: complexity 255, 785 lines
- fincept::workflow::wire_trading_bridges in fincept-qt/src/services/workflow/adapters/ServiceBridges.cpp: complexity 236, 1141 lines
- fincept::workflow::wire_utility_bridges in fincept-qt/src/services/workflow/adapters/ServiceBridges.cpp: complexity 235, 1004 lines
- _history_impl in fincept-qt/scripts/strategies/fincept_engine/algorithm.py: complexity 212, 524 lines
- fincept::screens::QuantModulePanel::on_result in fincept-qt/src/screens/ai_quant_lab/QuantModulePanel_Results.cpp: complexity 191, 825 lines
Security
Security posture is poor: 12 possible secret(s) in the tree, 12 only in history; 136 known vulnerabilities in 19 dependencies; 29 high-severity SAST findings; 46 high-severity workflow issues. Weakest area: secrets.
| Area | Score |
|---|---|
| Secrets (gitleaks, tree + history) | 0 |
| Static analysis (Opengrep) | 98 |
| Vulnerable dependencies (OSV) | 6 |
| CI workflows (zizmor) | 0 |
| Posture (policy, updates, signing, lockfiles) | 0 |
| OpenSSF Scorecard | n/a |
-
Known vulnerabilities: 136 in 19 packages (critical 8, high 61, medium 56, low 7)
-
Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits
Top findings
| Severity | Finding | Location |
|---|---|---|
| critical | osv/GHSA-6q48-6c7w-9gw2: [email protected] (PyPI) is affected by PYSEC-2026-4320, GHSA-6q48-6c7w-9gw2; also in fincept-qt/resources/requirements-numpy2.txt |
fincept-qt/resources/requirements-numpy2-core.txt |
| critical | osv/GHSA-63hf-3vf5-4wqf: [email protected] (PyPI) is affected by PYSEC-2026-2102, GHSA-63hf-3vf5-4wqf |
fincept-qt/resources/requirements-numpy2.txt |
| critical | osv/PYSEC-2024-278: [email protected] (PyPI) is affected by PYSEC-2024-278 |
fincept-qt/resources/requirements-numpy2.txt |
| critical | osv/GHSA-h5gc-rm8j-5gpr: [email protected] (PyPI) is affected by PYSEC-2025-70, GHSA-h5gc-rm8j-5gpr |
fincept-qt/resources/requirements-numpy2.txt |
| critical | osv/PYSEC-2024-259: [email protected] (PyPI) is affected by PYSEC-2024-259 |
fincept-qt/resources/requirements-numpy2.txt |
| critical | osv/GHSA-53q9-r3pm-6pq6: [email protected] (PyPI) is affected by PYSEC-2025-41, GHSA-53q9-r3pm-6pq6 |
fincept-qt/resources/requirements-numpy2.txt |
| critical | osv/PYSEC-2024-259: [email protected] (PyPI) is affected by PYSEC-2024-259 |
fincept-qt/resources/requirements-numpy2.txt |
| critical | osv/GHSA-53q9-r3pm-6pq6: [email protected] (PyPI) is affected by PYSEC-2025-41, GHSA-53q9-r3pm-6pq6 |
fincept-qt/resources/requirements-numpy2.txt |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/src/screens/polymarket/PredictionAccountDialog.cpp:144 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_zh_HK.ts:37751 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_zh_TW.ts:37751 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_zh_CN.ts:37752 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_fr_FR.ts:37760 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_pt_BR.ts:37760 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_vi_VN.ts:37752 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_es_ES.ts:37760 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_it_IT.ts:37760 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_id_ID.ts:37752 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_tr_TR.ts:37752 |
| high | gitleaks/private-key: Possible private-key secret in the current tree |
fincept-qt/translations/fincept_de_DE.ts:37760 |
| high | opengrep/python.lang.security.use-defused-xml: The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. [confidence low] |
.github/scripts/i18n/apply_new_strings.py:21 |
| high | opengrep/python.lang.security.use-defused-xml: The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. [confidence low] |
.github/scripts/i18n/apply_new_strings.py:22 |
| high | opengrep/python.lang.security.use-defused-xml: The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. [confidence low] |
.github/scripts/i18n/apply_translations.py:21 |
| high | opengrep/python.lang.security.use-defused-xml: The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. [confidence low] |
.github/scripts/i18n/apply_translations.py:22 |
| high | opengrep/python.lang.security.use-defused-xml: The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. [confidence low] |
.github/scripts/i18n/extract_unfinished.py:16 |
Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.
Distribution signals
- binary-release-asset: release v4.5.2 ships FinceptTerminal-4.5.2-linux-x64.deb (110 downloads)
- binary-release-asset: release v4.5.2 ships FinceptTerminal-4.5.2-linux-x64.rpm (42 downloads)
- binary-release-asset: release v4.5.2 ships FinceptTerminal-4.5.2-macos-arm64-setup.dmg (265 downloads)
- binary-release-asset: release v4.5.2 ships FinceptTerminal-4.5.2-windows-x64-setup.exe (504 downloads)
- binary-release-asset: release v4.5.1 ships FinceptTerminal-4.5.1-linux-x64.deb (609 downloads)
- readme-download-lure: links to file hosts or shorteners: t.me/
- readme-download-lure: links directly to a downloadable archive or installer
Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.
Repository profile
- Source lines: 831,338; test lines: 2,173
| Language | Lines |
|---|---|
| C++ | 448,014 |
| Python | 296,180 |
| C | 86,836 |
| Shell | 1,730 |
| PowerShell | 751 |