code-buster 0.12.0

Repository-aware static analysis for AI-assisted development
Documentation
{
  "id": "suspicious-command-arg-space",
  "language": "all",
  "group": "suspicious",
  "listingTitle": "Suspicious command arg space",
  "title": "Review suspicious command arg space",
  "mvvm": false,
  "defaultSeverity": "warn",
  "legacyGroup": "suspicious",
  "why": "This pattern often indicates unfinished, redundant, or error-prone code.",
  "suggestion": "Clarify the intent or replace the suspicious construct.",
  "version": 2,
  "semanticMaturity": "text",
  "securityKind": "none",
  "taxonomy": [
    "maintainability"
  ],
  "requirements": [
    "sourceText"
  ],
  "packs": [
    "generic"
  ],
  "implementation": "src/rules/generic.rs",
  "languages": [],
  "frameworks": [],
  "languageVersions": [],
  "limitations": [
    "Whole command strings passed to Python subprocess calls with shell=True are excluded because spaces delimit shell arguments; py-subprocess-shell reports that separate risk."
  ]
}