example_modules/ex_python_remediation.yaml (8 lines):
	- line 67: # TODO add detection steps
	- line 81: # TODO add remediation steps
	- line 83: # TODO raise exception on failure
	- line 93: # TODO fill in module description
	- line 96: # TODO modify path to the relevant configuration file, if any
	- line 101: # TODO replace "ex_remediation" with your module's name
	- line 103: # TODO fill in messages to match the problem being address by this module
	- line 122: # TODO change URL to point to the module's documentation


lib/requests/packages/urllib3/contrib/securetransport.py (3 lines):
	- line 593: # TODO: should I do clean shutdown here? Do I have to?
	- line 730: # TODO: Well, crap.
	- line 740: # TODO: Update in line with above.


lib/urllib3/response.py (3 lines):
	- line 439: # FIXME: Ideally we'd like to include the url in the ReadTimeoutError but
	- line 444: # FIXME: Is there a better way to differentiate between SSLErrors?
	- line 739: # FIXME: Rewrite this method and make it a class with a better structured logic.


lib/requests/packages/urllib3/response.py (3 lines):
	- line 305: # FIXME: Ideally we'd like to include the url in the ReadTimeoutError but
	- line 310: # FIXME: Is there a better way to differentiate between SSLErrors?
	- line 577: # FIXME: Rewrite this method and make it a class with a better structured logic.


lib/dateutil/zoneinfo/__init__.py (3 lines):
	- line 37: except IOError as e:  # TODO  switch to FileNotFoundError?
	- line 47: # TODO: get back to the nicer syntax when we ditch python2.6
	- line 96: # TODO: Remove after deprecation period.


lib/urllib3/contrib/securetransport.py (3 lines):
	- line 616: # TODO: should I do clean shutdown here? Do I have to?
	- line 776: # TODO: Well, crap.
	- line 786: # TODO: Update in line with above.


lib/botocore/auth.py (2 lines):
	- line 185: # TODO: We should set the host ourselves, instead of relying on our
	- line 675: TODO: Do we need this?


lib/botocore/client.py (2 lines):
	- line 64: # TODO: Migrate things away from scoped_config in favor of the
	- line 403: # TODO: This normalization logic is duplicated from the


lib/python2/yaml/scanner.py (2 lines):
	- line 184: # TODO: support for BOM within a stream.
	- line 758: # TODO: We need to make tab handling rules more sane. A good rule is


lib/python3/yaml/scanner.py (2 lines):
	- line 184: # TODO: support for BOM within a stream.
	- line 758: # TODO: We need to make tab handling rules more sane. A good rule is


lib/botocore/serialize.py (2 lines):
	- line 63: # TODO: Unknown protocols.
	- line 651: # TODO: handle flattened maps.


lib/botocore/response.py (2 lines):
	- line 80: # TODO: the url will be None as urllib3 isn't setting it yet
	- line 151: # TODO: Unfortunately, we have to have error logic here.


lib/botocore/retryhandler.py (1 line):
	- line 142: # TODO: send a signal.


lib/requests/packages/urllib3/connection.py (1 line):
	- line 160: # TODO: Fix tunnel so it doesn't depend on self.sock state.


lib/requests/hooks.py (1 line):
	- line 20: # TODO: response is the only one


lib/urllib3/contrib/pyopenssl.py (1 line):
	- line 357: # FIXME rethrow compatible exceptions should we ever use this


lib/urllib3/connection.py (1 line):
	- line 183: # TODO: Fix tunnel so it doesn't depend on self.sock state.


lib/requests/packages/chardet/sbcsgroupprober.py (1 line):
	- line 57: # TODO: Restore Hungarian encodings (iso-8859-2 and windows-1250)


lib/boto3/resources/factory.py (1 line):
	- line 525: # TODO: Make this configurable in the future?


lib/botocore/retries/special.py (1 line):
	- line 16: # TODO: This is an ideal candidate for the retryable trait once that's


lib/dateutil/rrule.py (1 line):
	- line 1155: # TODO: Check -numweeks for next year.


lib/requests/packages/urllib3/util/response.py (1 line):
	- line 77: # FIXME: Can we do this somehow without accessing private httplib _method?


lib/s3transfer/__init__.py (1 line):
	- line 715: # TODO: we need a way to reset the callback if the


lib/requests/packages/urllib3/connectionpool.py (1 line):
	- line 433: # TODO: Add optional support for socket.gethostbyname checking.


lib/botocore/discovery.py (1 line):
	- line 253: # TODO: Improve eviction behavior to only evict the bad endpoint if


mod.d/openssh.yaml (1 line):
	- line 335: # TODO determine if ALAMI2 is actually using this new packaging config (how?)


lib/urllib3/util/url.py (1 line):
	- line 397: # TODO: Remove this when we break backwards compatibility.


lib/boto3/resources/response.py (1 line):
	- line 151: # TODO: Remove the '$' check after JMESPath supports it


lib/urllib3/connectionpool.py (1 line):
	- line 486: # TODO: Add optional support for socket.gethostbyname checking.


lib/requests/adapters.py (1 line):
	- line 492: # TODO: Remove this in 3.0.0: see #2811


lib/requests/packages/urllib3/contrib/pyopenssl.py (1 line):
	- line 317: # FIXME rethrow compatible exceptions should we ever use this


lib/urllib3/util/response.py (1 line):
	- line 82: # FIXME: Can we do this somehow without accessing private httplib _method?


lib/boto3/exceptions.py (1 line):
	- line 94: # FIXME: Backward compatibility