arXiv:2603.02194cs.CVcs.LG2026-03

80%的自动驾驶感知代码存在严重安全问题,仅7.3%具备上线能力。

From Leaderboard to Deployment: Code Quality Challenges in AV Perception Repositories

  • 分析178个主流模型代码,发现多数存在致命错误和高危漏洞。
  • 前五类安全问题占总数近80%,且持续集成能提升代码可维护性。
  • 强调性能榜单不等于生产可用,适合关注自动驾驶落地安全的研究者。

自动驾驶感知模型通常仅以基准测试指标评估,忽视代码质量、生产就绪性和长期可维护性,导致研究与实际部署间存在显著差距。为填补这一空白,我们开展了首个大规模实证研究,系统分析了来自KITTI和NuScenes 3D目标检测排行榜的178个独特模型。通过Pylint、Bandit和Radon等静态分析工具,评估代码错误、安全漏洞、可维护性及开发实践。结果显示,仅7.3%的仓库满足基本生产就绪标准(无关键错误且无高危安全漏洞)。安全问题高度集中,前五类问题占总发生数的近80%,据此提出可操作的预防指南。此外,采用持续集成/部署(CI/CD)的项目表现出更高的代码可维护性。研究揭示:榜单性能无法反映生产就绪状态,针对性干预可显著提升自动驾驶感知代码的质量与安全性。

原文摘要 · Abstract (English)

Autonomous vehicle (AV) perception models are typically evaluated solely on benchmark performance metrics, with limited attention to code quality, production readiness and long-term maintainability. This creates a significant gap between research excellence and real-world deployment in safety-critical systems subject to international safety standards. To address this gap, we present the first large-scale empirical study of software quality in AV perception repositories, systematically analyzing 178 unique models from the KITTI and NuScenes 3D Object Detection leaderboards. Using static analysis tools (Pylint, Bandit, and Radon), we evaluated code errors, security vulnerabilities, maintainability, and development practices. Our findings revealed that only 7.3% of the studied repositories meet basic production-readiness criteria, defined as having zero critical errors and no high-severity security vulnerabilities. Security issues are highly concentrated, with the top five issues responsible for almost 80% of occurrences, which prompted us to develop a set of actionable guidelines to prevent them. Additionally, the adoption of Continuous Integration/Continuous Deployment pipelines was correlated with better code maintainability. Our findings highlight that leaderboard performance does not reflect production readiness and that targeted interventions could substantially improve the quality and safety of AV perception code.

自动驾驶代码质量安全漏洞可维护性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。