Field report: 12656 real pull requests scanned, 9.6% flagged, 46 of our own mistakes fixed in public
We run a security check on public pull requests and publish what it finds — including what it gets wrong. This is the weekly number. What the field looks like this week Pull requests analysed 12656 Pull requests where the check flagged something 9.6% Dependencies resolved against live PyPI and npm 11266 Distinct package names seen 11494 Hallucinated packages confirmed 0 Candidates discarded on…
In the latest field report, 12,656 public pull requests were analyzed, with 9.6% of them flagged by the security check. A total of 46 mistakes made by the team were fixed publicly. The pull requests were examined against live PyPI and npm dependencies, and 11,266 unique dependencies were identified. No hallucinated package names were confirmed in the 12,656 pull requests, and 21 candidates were discarded during review.
Out of the total analyzed, 20 candidates are still pending review, and they are not included in the current count. It is important to note that a "404" error indicates a name is not published, not that it was invented by someone. The full report can be found at https://magsolutionsai.com/quality.html.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
