# GREPTILE IN ACTION. See Greptile catch bugs in some of the most popular open source repos. ## Popular OS repos using Greptile ### NVIDIA - AI Hardware - GPU Computing ### OpenClaw - Open Source - AI Agent ### PostHog - Open Source - Product Analytics ### Netflix Metaflow - ML Framework - Data Infrastructure ### Solana - Blockchain - Rust ### Meta PyTorch - Open Source - Deep Learning ## NVIDIA - 8.6k Stars - 1.3k Forks - 3 Repositories `dali/core/device_guard.cc` GPU greptile ### Unbalanced CUDA release wipes context [See PR](https://github.com/NVIDIA/DALI/pull/6327/files#r3168764351) `packages/data-designer/src/data_designer/cli/repositories/provider_repository.py` Logic greptile ### Deprecation warnings never reach users [See PR](https://github.com/NVIDIA-NeMo/DataDesigner/pull/594/files#r3189904028) `emerging_optimizers/orthogonalized_optimizers/sinkhorn_muon.py` Validation greptile ### Sinkhorn check rejects valid output [See PR](https://github.com/NVIDIA-NeMo/Emerging-Optimizers/pull/102/files#r2820174323) ## Meta PyTorch - 1.8k Stars - 350 Forks - meta-pytorch/OpenEnv Repository `envs/repl_env/server/repl_environment.py` Runtime greptile ### Undefined method breaks every step() [See PR](https://github.com/meta-pytorch/OpenEnv/pull/437#discussion_r2945910512) `envs/pathway_analysis_env/models.py` Alignment greptile ### Ground truth leaks via state endpoint [See PR](https://github.com/meta-pytorch/OpenEnv/pull/611#discussion_r3141438092) `src/openenv/cli/commands/push.py` Error Handling greptile ### HF push leaks raw tracebacks [See PR](https://github.com/meta-pytorch/OpenEnv/pull/559/files#r3101616781) ## Solana - 174 Stars - 249 Forks - solana-foundation/kora Repository `crates/lib/src/transaction/instruction_util.rs` Logic greptile ### Mid-loop overflow leaves orphaned keys [See PR](https://github.com/solana-foundation/kora/pull/394/files/a519bfcba63f4220512ccebfcfd988270391599e#r2961120516) `crates/lib/src/transaction/instruction_util.rs` Validation greptile ### Empty data parsed as valid ATA Create [See PR](https://github.com/solana-foundation/kora/pull/393/files/d613f28e5aefe8fb40aa266557a55397d8249e60#r2955607589) `crates/lib/src/token/token.rs` Security greptile ### Null block_id bypasses staleness guard [See PR](https://github.com/solana-foundation/kora/pull/378/files#r2918933014) ## Netflix Metaflow - 10.1k Stars - 1.3k Forks - netflix/metaflow Repository `metaflow/plugins/devcontainer/devcontainer_decorator.py` Security greptile ### Home mount defeats container sandbox [See PR](https://github.com/Netflix/metaflow/pull/3069/files/b6efe14fd2888ff61c097d23eb31278fe23f4033#r3012646323) `metaflow/plugins/catch_decorator.py` Logic greptile ### parallel_foreach silently truncates [See PR](https://github.com/Netflix/metaflow/pull/2987/files#r2900484506) `metaflow/plugins/metadata_providers/service.py` Performance greptile ### O(1) optimization is a silent no-op [See PR](https://github.com/Netflix/metaflow/pull/3000#discussion_r2906974337) ## OpenClaw - 369k Stars - 76.1k Forks - openclaw/openclaw Repository `src/plugins/loader.ts` Logic greptile ### Closes undefined fd in error path [See PR](https://github.com/openclaw/openclaw/pull/74294#discussion_r3160519969) `ui/src/ui/app-chat.ts` Refactoring greptile ### Rename leaves 3 callers undefined [See PR](https://github.com/openclaw/openclaw/pull/73154#discussion_r3151111633) `src/agents/model-suppression.ts` Logic greptile ### Aliased providers escape suppression [See PR](https://github.com/openclaw/openclaw/pull/74236#discussion_r3159731028) ## PostHog - 34.3k Stars - 2.7k Forks - posthog/posthog Repository `ee/api/agentic_provisioning/views.py` Security greptile ### No auth on provisioning endpoint [See PR](https://github.com/PostHog/posthog/pull/51418#discussion_r2950313564) `products/llm_analytics/frontend/tags/llmTaggerLogic.ts` Security greptile ### HogQL injection via URL parameter [See PR](https://github.com/PostHog/posthog/pull/54591/files#r3082768774) `ee/hogai/django_checkpoint/checkpointer.py` Security greptile ### Security PR ships without the fix [See PR](https://github.com/PostHog/posthog/pull/50115#discussion_r2893529330) TREX ## Bugs you only catch by running the code. TREX runs each pull request in a sandbox to catch the bugs that only show up at runtime. Security ### [Shell expansion bypass lets secrets exfiltrate past the kubectl guard](https://github.com/hashgraph-online/hol-guard/pull/1067#discussion_r3462041185) hashgraph-online/hol-guard · #1067 Correctness ### [Unanchored regex misparses multi-digit week intervals](https://github.com/nusmodifications/nusmods/pull/4427#discussion_r3447996185) nusmodifications/nusmods · #4427 Correctness ### [Scoped generation leaks sibling models, breaking the selected-only contract](https://github.com/workos/oagen/pull/121#discussion_r3506200403) workos/oagen · #121 Correctness ### [Subtree-scoped query skips Rust attributes, returning empty decorators](https://github.com/vitali87/code-graph-rag/pull/566#discussion_r3508904273) vitali87/code-graph-rag · #566 Data Loss ### [Replay folds a persisted merge twice, so counter merges double-count](https://github.com/structured-world/coordinode-lsm-tree/pull/546#discussion_r3462826336) structured-world/coordinode-lsm-tree · #546 Concurrency ### [Concurrent creates collide in one directory, deleting the winner's disk](https://github.com/arcboxlabs/arcbox/pull/359#discussion_r3517488869) arcboxlabs/arcbox · #359 LIVE FEED ## Catching bugs in real-time. See what Greptile is finding across open source repositories right now. Concurrency ### [Race condition causes tray actions to be silently dropped during startup](https://github.com/cline/cline/pull/12659#discussion_r3668018668) cline/cline · #12659 Concurrency ### [Race condition causes deleted history entries to reappear](https://github.com/raycast/extensions/pull/29099#discussion_r3667360785) raycast/extensions · #29099 Data Integrity ### [Missing file branch causes silent data loss in stream encoder](https://github.com/assistant-ui/assistant-ui/pull/5294#discussion_r3666599158) assistant-ui/assistant-ui · #5294 Concurrency ### [Race condition between concurrent imports causes stale data exposure](https://github.com/PostHog/posthog/pull/74152#discussion_r3666419215) posthog/posthog · #74152 Security ### [Authorization bypass via model alias rewriting after access checks](https://github.com/BerriAI/litellm/pull/34938#discussion_r3666333178) berriai/litellm · #34938 Security ### [Variable expansion in git command bypasses security gate](https://github.com/gptme/gptme/pull/3392#discussion_r3665279775) gptme/gptme · #3392 Security ### [Symlink traversal allows file scanner to escape user-selected folder scope](https://github.com/raycast/extensions/pull/29027#discussion_r3665156492) raycast/extensions · #29027 Logic ### [HTML sign-in page incorrectly stored as valid attachment](https://github.com/PostHog/posthog/pull/74184#discussion_r3665082282) posthog/posthog · #74184 Logic ### [Duplicate tool call chunks incorrectly close arguments prematurely](https://github.com/assistant-ui/assistant-ui/pull/5288#discussion_r3664072277) assistant-ui/assistant-ui · #5288 Load more ## See Greptile catch bugs in your codebase [Book Demo](/contact) [Start now](https://app.greptile.com/signup)