Scan report

yavihemant / digital-army-ai-honeypot

Vulnerability Safe

Could an attacker exploit mistakes in this code?

0 risk score

No issues of this kind were found.

High
0
Medium
0
Low
1

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Low

Does this code look like it is trying to cause harm?

10 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High
0
Medium
6
Low
0

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
7 total findings
Likely real
6
Uncertain
0
Likely noise
1

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

6 findings likely need attention, 1 looks like noise. Most notable: Unpinned dependency: 'fastapi' has no version lock — supply chain risk in requirements.txt (54% confidence).

Detections by engine

  • Dependency checker 6

    CVEs, typosquats and risky installs · Supply chain

  • Bandit 1

    Python security linter · Vulnerability

Findings

Highest severity first. Select a finding to see the code and what it means.