RepoTrust

Leaderboard github.com

go-qml/qml

QML support for the Go language

  • View repository ↗
  • Go
  • ★ 1,942
  • commit 2ee7e5ff7370
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

none-detected

Confidence
65%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

47/100

poor

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

44/100

poor

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

AI provenance

0% none-detected

No AI attribution or AI-consistent velocity signals detected.

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts0%
  • Estimated AI-generated share0%
  • AI tool configuration files0
  • Work sessions at AI pace0
  • Releases at AI pacenot measured
  • Coding-style index (1.0+ means possible)0.01

Lines added per month all AI-attributed share

  1. 2013-082,187 · 0% AI
  2. 2013-094,012 · 0% AI
  3. 2013-10494 · 0% AI
  4. 2013-111,264 · 0% AI
  5. 2013-12119 · 0% AI
  6. 2014-0123,420 · 0% AI
  7. 2014-024,502 · 0% AI
  8. 2014-031,026 · 0% AI
  9. 2014-0415,113 · 0% AI
  10. 2014-05173 · 0% AI
  11. 2014-08168,874 · 0% AI
  12. 2014-0990,387 · 0% AI
  13. 2014-1051 · 0% AI
  14. 2015-022 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
319
effective_loc
311,624
tools_detected
0
AI tool configurationok
artifacts
0
tools_configured
0
workflow_agents
0
Commit velocityok
excluded_import_loc
220,526
flagged_loc
0
flagged_loc_share
0.0%
flagged_units
0
max_loc_per_hour
5,039.90
measured_loc
91,098
median_loc_per_hour
55.85
pr_timed_units
0
pre_ai_era_burst_loc
72,770
pre_ai_era_bursts
8
pre_ai_era_measured_loc
91,098
work_units
188
Release velocityskipped
Coding styleok1 item
count:assistant_voice
0
count:emoji_in_code
0
count:narrated_steps
1
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
0
files:narrated_steps
1
files:placeholder
0
index
0.01
lines_scanned
209,401
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
0
per_kloc:narrated_steps
0.01
per_kloc:placeholder
0

Code quality

47 poor

Code quality is poor: test-to-source ratio 0.01, no CI test run detected; 11% of function code in complex or long functions; 44% duplicated lines. Weakest area: process.

How the score is built

  • Complexity72
  • Duplication7
  • Lint and smells100
  • Tests and CI30
  • Documentation65
  • Type safetynot measured
  • Review process5

Evidence by analyzer

Complexity (lizard)ok10 items
complex_functions
12
function_nloc
127,905
functions
24,017
long_functions
5
many_param_functions
790
mean_ccn
1.44
p90_ccn
2
risky_nloc_share
11.2%
Duplication (jscpd)ok10 items
compared_lines
170,485
duplicated_lines
75,589
duplicated_share
44.3%
files
129
Lintok
category:correctness
15
findings
15
scanned_lines
246,440
weighted_findings
5.25
Tests and CIok
check:ci_present
no
check:ci_runs_lint
no
check:ci_runs_tests
no
check:has_tests
yes
check:test_ratio
no
check:tests_cochange
yes
ci_files
0
cochange_commits
246
cochange_share
36.6%
source_lines
246,440
test_lines
1,478
test_ratio
0.01
Documentationok2 items
  • README.md README.md
  • LICENSE LICENSE
check:changelog
no
check:contributing
no
check:license
yes
check:readme
yes
readme_lines
99
Type safetyskipped

Security

44 poor

Security posture is poor: no high-impact findings. Weakest area: posture.

How the score is built

  • Secrets100
  • Static analysis (SAST)7
  • Vulnerable dependenciesnot measured
  • CI workflowsnot measured
  • Security posture0
  • OpenSSF Scorecard20

Evidence by analyzer

OpenSSF Scorecardok10 items
aggregate
1.90
check:Binary-Artifacts
yes
check:Branch-Protection
no
check:CII-Best-Practices
no
check:Code-Review
yes
check:Fuzzing
no
check:License
yes
check:Maintained
no
check:Pinned-Dependencies
no
check:SAST
no
check:Security-Policy
no
Package registriesskipped

no registry dependencies declared

Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
0
secrets_nonprod
0
Static analysis (opengrep)ok
findings
7,602
findings_high
0
findings_low
0
findings_medium
7,602
parse_errors
7
scanned_lines
246,440
weighted_findings
1,900.50
Dependencies (osv-scanner)skipped
CI workflows (zizmor)skipped
Security postureok
check:dependency_updates
no
check:lockfiles
yes
check:security_policy
no
check:signed_commits
no
signed_commit_share
0.0%
unpinned_manifests
0
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

302 medium13 low

SeverityRuleLocationMessageTool
medium opengrep/go.lang.correctness.permissions.incorrect-default-permission gl/gengl/main.go:239 Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set... Lint
medium opengrep/go.lang.correctness.permissions.incorrect-default-permission gl/gengl/main.go:254 Detected file permissions that are set to more than `0600` (user/owner can read and write). Setting file permissions to higher than `0600` is most likely unnecessary and violates the principle of least privilege. Instead, set... Lint
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:254 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:305 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:379 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:481 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:504 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:504 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:527 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:630 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block bridge.go:659 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.xss.import-text-template cmd/genqrc/main.go:45 When working with web applications that involve rendering user-generated content, it's important to properly escape any HTML content to prevent Cross-Site Scripting (XSS) attacks. In Go, the `text/template` package does not... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block cpptest/cpptest.go:29 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:128 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:134 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:159 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:185 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:21 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:23 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:231 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:232 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:366 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:372 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:373 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:393 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:394 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:411 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:412 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:433 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:438 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:501 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:502 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:517 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:530 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block datatype.go:65 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1006 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1053 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1063 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1068 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1084 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1089 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1094 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1099 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1104 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1109 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1114 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1119 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1124 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1129 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1134 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1139 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1144 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1149 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1154 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1159 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1164 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1169 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1180 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1192 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1197 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1202 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1250 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1263 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1273 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1283 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1313 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1318 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1323 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1328 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1464 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1469 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1474 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1484 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1494 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1504 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1514 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1529 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1534 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1544 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1559 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1569 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1579 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1589 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1599 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1609 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1624 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1632 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1645 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1658 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1671 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1684 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1697 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1710 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1723 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1736 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1749 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1762 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1775 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1788 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1801 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1814 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1827 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1840 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1853 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1866 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1879 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1892 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1905 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1918 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1931 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1941 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1951 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1961 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1971 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1981 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1981 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1991 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:1991 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2001 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2001 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2011 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2011 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2024 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2037 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2050 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2063 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2076 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2089 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2102 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2115 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2128 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2141 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2154 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2167 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2180 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2193 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2206 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2219 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2229 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2239 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2249 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2259 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2269 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2284 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2289 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2294 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2304 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2314 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2327 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2340 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2353 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2366 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2376 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2386 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2396 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2406 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2419 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2432 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2445 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2458 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2468 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2478 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:2510 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:661 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:666 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:671 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:676 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:681 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:692 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:699 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:704 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:715 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:720 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:731 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:798 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:803 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:803 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:803 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:803 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:844 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:857 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:864 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.0/gl.go:874 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1003 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1041 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1140 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1187 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1197 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1202 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1218 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1223 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1228 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1233 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1238 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1243 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1248 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1253 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1258 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1263 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1268 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1273 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1278 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1283 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1288 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1293 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1298 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1303 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1314 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1326 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1331 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1336 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1384 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1397 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1407 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1417 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1447 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1452 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1457 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1462 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1598 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1603 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1608 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1618 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1628 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1638 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1648 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1663 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1668 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1678 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1693 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1703 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1713 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1723 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1733 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1743 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1758 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1766 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1779 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1792 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1805 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1818 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1831 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1844 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1857 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1870 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1883 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1896 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1909 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1922 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1935 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1948 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1961 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1974 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:1987 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2000 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2013 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2026 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2039 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2052 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2065 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2075 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2085 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2095 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2105 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2115 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2115 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2125 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2125 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2135 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2135 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2145 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2145 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2158 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2171 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2184 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2197 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:2210 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:661 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:666 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:671 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:676 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:681 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:692 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:699 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:704 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:715 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:720 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:731 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:798 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:803 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:803 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:803 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:803 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:844 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:857 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:864 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:874 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:919 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:930 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:953 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:974 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
medium opengrep/go.lang.security.audit.use-of-unsafe-block gl/1.1/gl.go:990 Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an... Static analysis (opengrep)
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cmd/ubuntu-touch/setup.sh:33 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpp/update-moc.sh:15 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpp/update-moc.sh:16 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpp/update-moc.sh:17 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-command-substitution-in-command cpp/update-moc.sh:4 The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result. Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpp/update-moc.sh:4 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpp/update-moc.sh:6 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpptest/update-moc.sh:10 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpptest/update-moc.sh:11 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-command-substitution-in-command cpptest/update-moc.sh:4 The result of command substitution $(...) or `...`, if unquoted, is split on whitespace or other separators specified by the IFS variable. You should surround it with double quotes to avoid splitting the result. Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpptest/update-moc.sh:4 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command cpptest/update-moc.sh:9 Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... Lint
low opengrep/go.lang.correctness.eqeq-is-bad datatype.go:489 Detected useless comparison operation `value == value` or `value != value`. This will always return 'True' or 'False' and therefore is not necessary. Instead, remove this comparison operation or use another comparison expression that is... Lint

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceskipped—0
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-40
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b41415
Tests and CICode qualityok—0
Type safetyCode qualityskipped—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityskipped—0
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityskipped—0no registry dependencies declared
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b414300
OpenSSF ScorecardSecurityokscorecard v5.6.00
Secrets (gitleaks)Securityokgitleaks 8.30.10

Score history

Scores from different scoring versions aren't directly comparable.

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-142ee7e5ff7370prov-5+qual-2+sec-20%4744
2026-11-142ee7e5ff7370prov-4+qual-2+sec-20%4744

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/go-qml/qml/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/go-qml/qml/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/go-qml/qml/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/go-qml/qml/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/go-qml/qml/security.svg)](https://repotrust.synapticcyber.com/r/github.com/go-qml/qml/)
Full text report
  • Repository: https://github.com/go-qml/qml
  • Commit: 2ee7e5ff737026a4dfa89801fac63561279040f4
  • Generated: 2026-11-14T14:52:04+00:00
  • Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 none-detected 65% 100%
Code quality 47 poor 90% 100%
Security 44 poor 85% 100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

  • Explicitly attributed share (lower bound): 0.0%

  • Unattributed share in AI-consistent velocity bursts: 0.0%

  • Estimated AI-generated share: 0.0%

  • Stylometry index: 0.01 per 1,000 lines (narrated steps 1, placeholders 0, assistant phrasing 0, emoji 0). Reported as a signal, not scored.

Month Lines added Attributed to AI
2013-10 494 0%
2013-11 1,264 0%
2013-12 119 0%
2014-01 23,420 0%
2014-02 4,502 0%
2014-03 1,026 0%
2014-04 15,113 0%
2014-05 173 0%
2014-08 168,874 0%
2014-09 90,387 0%
2014-10 51 0%
2015-02 2 0%

Evidence

  • step-by-step narration comment: // Then, just run "go generate" to update the qrc.go file. (cmd/genqrc/m)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is poor: test-to-source ratio 0.01, no CI test run detected; 11% of function code in complex or long functions; 44% duplicated lines. Weakest area: process.

Area Score
Complexity (lizard) 72
Duplication 7
Code smells (Opengrep) 100
Tests and CI 30
Documentation 65
Type safety n/a
Process (Scorecard review/maintenance) 5
  • Functions: 24,017; mean complexity 1.4, 90th percentile 2; 12 complex and 5 long functions
  • Duplicated lines: 44.3% of 170,485 compared
  • Tests: 1,478 test lines for 246,440 source lines (ratio 0.01); CI test commands: none detected; 37% of recent source commits also change tests
  • Docs missing or thin: contributing, changelog

Most complex functions:

Security

Security posture is poor: no high-impact findings. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 7
Vulnerable dependencies (OSV) n/a
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard 20
  • Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits
  • OpenSSF Scorecard aggregate: 1.9/10 (published 2026-11-09)

Top findings

Severity Finding Location
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:254
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:305
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:379
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:481
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:504
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:504
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:527
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:630
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] bridge.go:659
medium opengrep/go.lang.security.audit.xss.import-text-template: When working with web applications that involve rendering user-generated content, it's important to properly escape any HTML content to prevent Cross-Site Scripting (XSS) attacks. In Go, the text/template package does not automatically escape HTML content, which can leave your application vuln [confidence low] cmd/genqrc/main.go:45
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] cpptest/cpptest.go:29
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:21
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:23
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:65
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:128
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:134
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:159
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:185
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:231
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:232
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:366
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:372
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:373
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:393
medium opengrep/go.lang.security.audit.use-of-unsafe-block: Using the unsafe package in Go gives you low-level memory management and many of the strengths of the C language, but also steps around the type safety of Go and can lead to buffer overflows and possible arbitrary code execution by an attacker. Only use this package if you absolutely know what you'r [confidence low] datatype.go:394

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 246,440; test lines: 1,478
Language Lines
Go 161,399
C++ 73,178
C 13,269
Shell 72