stellargraph/stellargraph

View on GitHub

Showing 107 of 107 total issues

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

        assert isinstance(data, pd.DataFrame)
Severity: Info
Found in stellargraph/core/convert.py by bandit

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

                        assert adj_to_samples[next_key][0] == et.n2
Severity: Info
Found in stellargraph/core/schema.py by bandit

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

    assert raw_rank.shape == filtered_rank.shape == (batch_size,)

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

        assert (
            batch_feats.shape
            == (this_batch_size, self._num_nodes, self._window_size)
            + self._num_sequence_variates
        )
Severity: Info
Found in stellargraph/mapper/sliding.py by bandit

Merge this if statement with the enclosing one.
Open

            if num_edges_to_sample > limit_samples:

Merging collapsible if statements increases the code's readability.

Noncompliant Code Example

if condition1:
    if condition2:
        # ...

Compliant Solution

if condition1 and condition2:
    # ...

Use of exec detected.
Open

    exec(fh.read(), version)
Severity: Minor
Found in setup.py by bandit

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

            assert (
                batch_targets.shape
                == (this_batch_size, self._num_nodes) + self._num_sequence_variates
Severity: Info
Found in stellargraph/mapper/sliding.py by bandit

Remove this commented out code.
Open

        # edgelist = nx.to_edgelist(self.to_nx(graph_id, directed))
Severity: Major
Found in stellargraph/data/epgm.py by sonar-python

Programmers should not comment out code as it bloats programs and reduces readability.

Unused code should be deleted and can be retrieved from source control history if required.

See

  • MISRA C:2004, 2.4 - Sections of code should not be "commented out".
  • MISRA C++:2008, 2-7-2 - Sections of code shall not be "commented out" using C-style comments.
  • MISRA C++:2008, 2-7-3 - Sections of code should not be "commented out" using C++ comments.
  • MISRA C:2012, Dir. 4.4 - Sections of code should not be "commented out"

Remove this commented out code.
Open

# __all__ = ["graphsage", "hinsage", "link_inference"]
Severity: Major
Found in stellargraph/layer/__init__.py by sonar-python

Programmers should not comment out code as it bloats programs and reduces readability.

Unused code should be deleted and can be retrieved from source control history if required.

See

  • MISRA C:2004, 2.4 - Sections of code should not be "commented out".
  • MISRA C++:2008, 2-7-2 - Sections of code shall not be "commented out" using C-style comments.
  • MISRA C++:2008, 2-7-3 - Sections of code should not be "commented out" using C++ comments.
  • MISRA C:2012, Dir. 4.4 - Sections of code should not be "commented out"

Using xml.etree.ElementTree to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.
Open

import xml.etree.ElementTree as ET


Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

    assert len(columns) == 0
Severity: Info
Found in stellargraph/core/convert.py by bandit

subprocess call - check for execution of untrusted input.
Open

                subprocess.run(
                    [
                        "buildkite-agent",
                        "annotate",
                        "--style=error",
Severity: Info
Found in scripts/format_notebooks.py by bandit

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

    assert isinstance(dataset, (Cora, CiteSeer))

Severity: Info
Found in stellargraph/datasets/datasets.py by bandit

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

    assert unmodified_node_ilocs.shape == true_rel_ilocs.shape == (batch_size,)

    # the score of the true edge, for each edge in the batch (this indexes in lock-step,
    # i.e. [pred[true_modified_node_ilocs[0], range(batch_size)[0]], ...])

Rename function "u" to match the regular expression ^[a-z_][a-z0-9_]{2,}$.
Open

        def u(users):

Shared coding conventions allow teams to collaborate efficiently. This rule checks that all function names match a provided regular expression.

Noncompliant Code Example

With the default provided regular expression: ^[a-z_][a-z0-9_]{2,30}$

def MyFunction(a,b):
    ...

Compliant Solution

def my_function(a,b):
    ...

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

        assert isinstance(self._output_embedding, Embedding)
Severity: Info
Found in stellargraph/layer/attri2vec.py by bandit

Rename function "BaggingEnsemble" to match the regular expression ^[a-z_][a-z0-9_]{2,}$.
Open

def BaggingEnsemble(*args, **kwargs):
Severity: Major
Found in stellargraph/__init__.py by sonar-python

Shared coding conventions allow teams to collaborate efficiently. This rule checks that all function names match a provided regular expression.

Noncompliant Code Example

With the default provided regular expression: ^[a-z_][a-z0-9_]{2,30}$

def MyFunction(a,b):
    ...

Compliant Solution

def my_function(a,b):
    ...

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
Open

        assert isinstance(kind, LinkKind)
Severity: Info
Found in scripts/demo_indexing.py by bandit

Starting a process with a partial executable path
Open

            subprocess.run(
                [
                    "buildkite-agent",
                    "annotate",
                    "--style=error",
Severity: Info
Found in scripts/notebook_text_checker.py by bandit

Consider possible security implications associated with subprocess module.
Open

import subprocess
Severity: Info
Found in scripts/test_demos.py by bandit
Severity
Category
Status
Source
Language