cuthbertLab / music21

94%

master: 94%

LAST BUILD ON BRANCH security.md

branch: security.md

CHANGE BRANCH

x

Reset

• security.md
• 2025-jan-misc
• 5.0.3a1
• 9.6beta
• COC-clarify
• TimFelixBeyer-patch-1
• abc-cleanup
• accidental-lookup-table
• activeSiteOnly_next
• add-memories
• addIdentificationToMetadata
• agent-no-amendcommit-force
• agents-ai-policy
• agents-post-pycon2026
• ai-contributions
• ai-links
• ai-no-homework
• allow_finale_musicxml
• allow_wedges_to_pass_with_warning
• alphaDir
• anyNotLen
• approximation_error
• audioSearch_FreqHotfix
• aug6_scaledegree
• backport_v9
• behdad-bahadivand-chegini-patch-1
• braille-quote
• braille_updates
• branch_clean
• buggy-lowestline
• capitalize-python-docstrings
• change_half_diminished
• check_imports_before_tests
• chord-empty-bool
• chord-rotation-deque
• chordSymbol-add
• chord_getitem_simplify
• chord_symbol_rt
• chord_typehints
• chordify_preserve_pitches
• chordify_speed
• claude/ecstatic-sammet-0d61c2
• claude/elastic-maxwell-b4b3e0
• claude/musescore-reader-png-path-c6d481
• claude/pensive-lamport-d844ca
• claude/vibrant-keller-64c8ab
• clean-output
• cleanup-stream
• cleanup_braille
• cleanup_pre_6.3
• cleanup_roman
• clear-bools
• clear_eof
• code-style-ai
• codespace
• codex/abc-lyrics-696
• collect-metronomemark
• commonExpandFP
• components-2
• configure
• configure_fixes
• contributor-profile
• copy-speedups
• corpusRefactor
• coverage-314
• custom-word-separator
• deepcopyPickle
• define_cpus_early
• dependabot/uv/anyio-4.14.2
• dependabot/uv/bleach-6.4.0
• dependabot/uv/cryptography-48.0.1
• dependabot/uv/cryptography-50.0.0
• dependabot/uv/idna-3.15
• dependabot/uv/jupyter-server-2.18.0
• dependabot/uv/jupyter-server-2.20.0
• dependabot/uv/jupyterlab-4.5.10
• dependabot/uv/jupyterlab-4.5.11
• dependabot/uv/jupyterlab-4.5.7
• dependabot/uv/jupyterlab-4.5.9
• dependabot/uv/mistune-3.2.1
• dependabot/uv/mistune-3.3.0
• dependabot/uv/mistune-3.3.3
• dependabot/uv/notebook-7.5.6
• dependabot/uv/notebook-7.6.3
• dependabot/uv/pillow-12.3.0
• dependabot/uv/setuptools-83.0.0
• dependabot/uv/soupsieve-2.8.4
• dependabot/uv/soupsieve-2.9
• dependabot/uv/tornado-6.5.6
• dependabot/uv/tornado-6.5.7
• dependabot/uv/tornado-6.5.8
• dependabot/uv/tornado-6.5.9
• dependabot/uv/urllib3-2.7.0
• dependabot/uv/urllib3-2.8.0
• dependabot/uv/uv-0.11.15
• dependabot/uv/uv-0.13.4
• dependabot/uv/virtualenv-21.7.13
• deprecations-gone2
• deprecations_in_tests
• derive-with-altered-degrees
• deriveByDegree
• descending-range-altered-pitch
• dict-environment
• docs/fix-typo-using-git
• doctest_lints
• documentation
• drop-redundant-scale-deepcopies
• dummy-pr
• e12-and-docstring-blanks
• edit
• efficient-roman
• elementTree
• exclude-dotfiles
• expressionIsInferred-duration
• expressions_fixes_and_repeat_finder
• faq_build_docs
• fb_1738
• fb_sentinels
• feat/midi-add-end-delay
• features_improve
• filepath
• filters_return_new_iterators
• first-note-naturals
• fix-1190-cautionary-accidental-after-chord
• fix-1190-immediate-repeat-after-chord
• fix-1349-raised-67
• fix-1535-octatonic-mode-cache
• fix-1986-braille-keysig
• fix-2074-allparts-order
• fix-2082-transpose-octave-change
• fix-2083-barline-segno
• fix-accidental-deepcopy-style
• fix-beams-4
• fix-copybutton
• fix-find-missing-copies
• fix-flat-side-unicode-accidentals
• fix-interval-network-cache-aliasing
• fix-interval-transposepitch-inplace
• fix-leading-zeros-after-equals
• fix-lyric-print-object
• fix-parse-reads-file-bug
• fix-profiler-issues-permission
• fix-pyproject
• fix-redundant-pitches-negative-octave
• fix-roman-key-cache-mode
• fix-scala-inline-comments
• fix-sieve-complement-intersection
• fix-sparschuh-stanhope-ratio
• fix-transpose-inplace-microtone
• fix-tremolo-tuplet-bracket
• fix/1541-tsv-blank-rows
• fix/1732-unpitched-voice-ordering
• fix/1994-mei-btrem-import
• fix/2024-make-ties-string-voice
• fix/arpeggio-spanner-per-offset
• fix/lily-metronome-mark-1852
• fix/make-ties-missing-voice-id
• fix/security/command-injection-via-subprocess-run-in-
• fixNBConvert
• fixStreamShow
• fixTesting
• fix_articulation_typing
• fix_docs
• fix_flakey
• fix_midi_lints
• fix_musicxml_png_output
• fix_posixPath_metadata_bundles
• fix_prebase_id_repr
• fix_search_base
• fix_ug_31
• frozen-object-check-init
• github-uv
• github_CI
• github_coverage
• gitignore-clean
• grammar_misc
• graph3d-configuration
• gregc/badOctaveTranspose
• gregc/betterPedalMarks
• gregc/clefWithoutNumberIsNotInAllStaves
• gregc/forwardIsHiddenRestOnlyForFinale
• gregc/makeRestsShouldSplitThem
• gregc/moreAccurateSpannerStartStop
• gregc/musicXmlWriterFixes
• gregc/no_enclosure
• gregc/pedalmarks
• gregc/pendingSpannerAssignmentWithOffset
• happy-2026
• happy-new-year-2025
• help/meter-1972-cache-bounds
• help/meter-1972-docs
• help/meter-1972-loud-old-api
• help/meter-1972-rename
• help/meter-1972-slow-paths
• help/meter-speed-2026
• hotfix-cache-octaves
• humdrum-chord-duration
• humdrum-grace-notes
• humdrum-kern-regex
• humdrum-typing
• improve-lily-open-windows
• improve-upload
• inf-duration
• init_refactor
• instrument-abbrev
• instrument-names-by-class
• interval-transpose
• intervalRewrite
• ipython-project
• isTwelveTone-speed
• j-wolf-o
• jeremy9959-1791
• jtw/extend-duration-opFrac
• jtw/simplify-uncompress
• jtw/tuplet-follow-ups
• jtw/uncompress-logs
• lily-typing
• lint_figured_bass
• lintfix
• linting_2019-07
• lyricSearcher
• m21-3
• m21-6.3-release
• m21-py-3.14
• m21-v10.5.0
• m21_10-exclude-dotfiles
• m21_2
• m21_3
• m21_3-alpha0
• m21_4
• m21_5
• m21_9_py3.14
• m21_9_wolf
• m21_v10_pre-release
• makeMeasures_trailing_zero_length
• marmio-support
• master
• measureRests
• metadata_primitives
• meter-frozen-bar-duration
• meter-reapply-memory
• meter-speed-2026
• meter-speed-2026-bugfixes
• meter-speed-2026-core-node
• meter-speed-2026-docs
• mid-jupyter-instruments
• midi-try-two
• midi_refactor
• midi_translate_type_simplify
• midi_typing
• midi_typing_2
• midilyrics
• migratingv11
• misc-2026-08
• misc-clef-cleanup
• misc-edits
• misc-spineParser
• more-deprecation-remove
• moreTimespans
• mscuthbert-patch-1
• musescore-png-detect
• music21-v9.9
• musicxmlET
• mypy-1.16
• name-cache
• new-dist
• new-in-v-consistency
• new_finale_archives
• next-pitch-on-cycles
• no-cover-defaultlist
• no-empty-exceptions
• no-requirements-dev
• no-symlink-license
• no-utf-8-marker
• no-uv-lock
• no_repr
• nodeTreeMerge
• note_typos
• noteflight-bug
• notehash_with_reference
• num-dot
• numpy2
• octave-int
• octave-repeating-scale-keeps-callers-list
• octave-repeating-scale-wider-than-an-octave
• offsetsInStream
• opfrac
• out-of-range-xml
• overzealous_style_xml
• patch-1
• pep8
• percMapPitch
• percussion-chord-docs
• piano_endings
• pickleStoreMetadata
• pitch-init-fast-paths
• pitch-midi-ps
• pitch_docs
• post-1905
• post_typing-common_3-12-cleanup
• pr-bend
• pr/abc-rebar-overflow
• pr/augment-lazy-tuplets
• pr/autocorrelation-int16-overflow
• pr/beat-partial-measure-meter
• pr/braille-binary-dots
• pr/braille-empty-text-expression
• pr/braille-grand-heading-no-right-key
• pr/braille-grand-segment-same-hand-keys-2
• pr/braille-show-hand-setter
• pr/braille-split-measure-padding-2
• pr/braille-tuplet-hidden-number
• pr/capella-barline-tuplet
• pr/chord-bass-motion-direction-2
• pr/chord-bass-motion-no-chord
• pr/chord-reducer-forbidden-chords
• pr/chord-reducer-hashable-timespans-2
• pr/chord-reducer-old-measure-length-2
• pr/chord-reducer-pitch-class-key
• pr/chord-to-xml-sort-in-place
• pr/decompression-limits
• pr/empty-tree-verticalities
• pr/extractors-by-id-all
• pr/fb-realizer-own-pitches-2
• pr/fb-tuplet-offsets-2
• pr/find-consecutive-unisons-2
• pr/floating-key-interpretation-copy-2
• pr/getuid-platform-checks
• pr/greatest-divisor-grace-notes-2
• pr/harmonic-minor-no-altered-degrees-2
• pr/humdrum-nested-split
• pr/lily-quote-note-color
• pr/make-measures-limit
• pr/make-ties-new-measure-once
• pr/make-ties-new-voices-kept
• pr/measures-collect-priority
• pr/melodic-intervals-offsets-2
• pr/metadata-search-uncompilable
• pr/meter-accent-weights-linear
• pr/midi-deduplicate-instruments-2
• pr/most-common-rhythms-chord
• pr/musedata-crlf
• pr/musedata-stage1-part-name
• pr/musicxml-arpeggio-single-note
• pr/next-pitch-wide-cycles-2
• pr/noteworthy-clef-names
• pr/nwctxt-chord-groups-2
• pr/octave-repeating-full-octave
• pr/offset-filter-snapped-end
• pr/part-reduction-dynamic-on-barline-2
• pr/part-reduction-leave-dynamics
• pr/part-reduction-span-start-2
• pr/partstaff-measure-gap-2
• pr/partwise-trees-bulk-insert
• pr/quality-feature-modal-key-2
• pr/reductive-note-chord-highest
• pr/remove-altered-degrees
• pr/romantext-high-numerals-2
• pr/score-reduction-lone-part
• pr/sieve-complement-empty
• pr/split-keeps-right-barline
• pr/split-measure-time-signature-2
• pr/tinynotation-close-states
• pr/trill-accidental-display
• pr/volpiano-current-measure-2
• pr/volpiano-end-breaks-layout-2
• pr/windowed-adjacent-average-2
• pr/windows-path-doctests
• preserve-microtone-transpose
• preview_location
• property_to_decorator
• py312_typevar
• py315-CI
• pygame-2.0
• pylint_raise_from
• pytest-compat
• pyupgrader-upgrades
• ragmarwab
• random-2025-10
• random-typing
• readthedocs-elsewhere
• realize-cache-altered-degrees
• refactor_serial
• rem_lgpl
• remove-pitch-defaults
• remove_json_freezer
• repeat_expander
• requirements_38
• retire_defaultlist
• rn-xy
• romanTextFixes
• roman_vii07
• romantext_unprocessed
• rst-backticks
• running-tests-skill
• search_lyricist
• secdom-diatonic-check
• self-imports
• setInversion
• sharps-int
• sieve_typos
• simplifyEnharmonics_improve
• simplify_bools
• small_spelling_changes
• sorttuple-3.12
• speedups
• splitCommon
• start-v10
• stream-is-at-end
• stream-iterator-improvements
• stream-metadata-midi-url
• stream-not-flat
• streamCore
• streamCoreNoDuration
• streamIter
• streamIterator
• stream_replace_recurse
• t.Self
• tab-typing
• test-octave-implicit-mock
• test-runner-import
• test_lint
• test_pr
• test_py38
• transposePitch_reverse
• tree-examples
• tree-grammar
• trees
• triplet-offsets-in-timespans
• tuple-int-fix
• type-core
• type-spans
• type_chord
• typed_sort_tuple
• typing_abc
• typing_capella
• typing_common
• typing_features
• typing_figuredbass
• typing_humdrum
• typing_misc
• typing_pitch
• typing_scale
• typing_search
• typing_small_folders
• typos
• underHood
• update-install-locations
• update-templates
• update_beethoven
• update_editorial_docs
• urop_meng_fixes
• use_ruff
• user-guide-typos
• usersGuide-text-corrections
• uv-no-pip
• v.2.1.2
• v.2.2.1
• v.5.1.0
• v10.3
• v11
• v2.0.0
• v2.0.10
• v2.0.5
• v2.0.8
• v2.1.0
• v3.0.3-alpha
• v3.0.6-beta
• v3.1.0
• v4.0.4-beta
• v4.0.6-beta
• v4.1.0
• v5.0.3a1
• v5.0.5a2
• v5.0.6b1
• v5.3.0
• v5.5
• v5.7.0
• v5.7.1
• v5.7.2
• v6-near-push
• v6.1.0
• v6.3.0
• v6a1-release
• v6a3_try2
• v9.5
• v9.7
• v9.7-b
• v9.7.1
• version-names-master
• version2
• version21
• vlq-defined
• worktree-claude+graph-typing
• worktree-ellipses
• worktree-explicit_cast
• worktree-no_311
• worktree-remove_vexflow
• worktree-type_midi
• worktree-v11-deprecation
• worktreeignore
• worktreeinclude
• writing-docs-prose

Build # 41403103112

Build Type

Pull #2197

github

Committed by web-flow

Commit Message

Merge f6923adb8 into 94cd47252

Pull Request Pull Request #2197: Add SECURITY.md file

Coverage Stats

83774 of 89366 relevant lines covered (93.74%)

0.94 hits per line