The Cocoa Dependency Manager.
This report summarizes scanner evidence for CocoaPods/CocoaPods, a Ruby project with 14,831 GitHub stars. SynthScan examined 182,152 lines of code across 1590 source files, recording 955 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 5.5 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 945 finding(s).
Are imports declared and package/API names verified? 0 finding(s).
Are wrappers, guards, and repeated structures necessary? 152 finding(s).
Which changes need focused human review? 955 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 955 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .rubocop_todo.yml | 1 | # This configuration was generated by | COMMENT |
| LOW | spec/integration.rb | 1 | COMMENT | |
| LOW | spec/integration.rb | 21 | # which should be added to the `after` folder to test the CocoaPods UI. | COMMENT |
| LOW | spec/unit/generator/header_spec.rb | 21 | #endif | COMMENT |
| LOW | spec/unit/generator/prefix_header_spec.rb | 41 | #else | COMMENT |
| LOW | spec/unit/generator/prefix_header_spec.rb | 61 | end | COMMENT |
| LOW | spec/unit/generator/prefix_header_spec.rb | 81 | EOS | COMMENT |
| LOW | spec/unit/generator/prefix_header_spec.rb | 121 | #endif | COMMENT |
| LOW | spec/unit/generator/prefix_header_spec.rb | 141 | #endif | COMMENT |
| LOW | …de/pods_project_generator/pod_target_installer_spec.rb | 1261 | end | COMMENT |
| LOW | …/after/Pods/Headers/Public/Reachability/Reachability.h | 41 | **/ | COMMENT |
| LOW | …after/Pods/Headers/Private/Reachability/Reachability.h | 41 | **/ | COMMENT |
| LOW | …ecs/install_new/after/Pods/Reachability/Reachability.h | 41 | **/ | COMMENT |
| LOW | …tureXMLRequestOperation/AFRaptureXMLRequestOperation.h | 1 | // | COMMENT |
| LOW | …tureXMLRequestOperation/AFRaptureXMLRequestOperation.m | 1 | // | COMMENT |
| LOW | …ods/Headers/Public/Test/AFRaptureXMLRequestOperation.h | 1 | // | COMMENT |
| LOW | …ds/Headers/Private/Test/AFRaptureXMLRequestOperation.h | 1 | // | COMMENT |
| LOW | …Support Files/DepPod-library/DepPod-library-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …od-framework/HeaderMappingsDirPod-framework-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …les/Pods-OtherSampleApp/Pods-OtherSampleApp-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …DirPod-library/HeaderMappingsDirPod-library-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …ort Files/DepPod-framework/DepPod-framework-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …r/Pods/Headers/Public/DepPod/DepPod-library-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …MappingsDirPod/HeaderMappingsDirPod-library-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …ecs/install_search_paths_inheritance/before/App/main.m | 1 | // | COMMENT |
| LOW | …pecs/install_search_paths_inheritance/after/App/main.m | 1 | // | COMMENT |
| LOW | …ter/Pods/Target Support Files/logger/logger-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …Support Files/sharedlib-Core/sharedlib-Core-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …t Files/sharedlib-Testing/sharedlib-Testing-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …Pods/Target Support Files/Pods-App/Pods-App-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …pport Files/CocoaLumberjack/CocoaLumberjack-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …pport Files/CocoaLumberjack/CocoaLumberjack-umbrella.h | 21 | #import "DDLogMacros.h" | COMMENT |
| LOW | …r/Pods/Target Support Files/testkit/testkit-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …r/Pods/Target Support Files/asserts/asserts-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …ds/Target Support Files/Pods-Test/Pods-Test-umbrella.h | 1 | #ifdef __OBJC__ | COMMENT |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDTTYLogger.m | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDTTYLogger.m | 21 | #if !__has_feature(objc_arc) | COMMENT |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDTTYLogger.m | 41 | COMMENT | |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDTTYLogger.m | 61 | // Insert the ESCAPE_SEQ into your string, followed by "bg;" | COMMENT |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDTTYLogger.m | 281 | // In this mode, the terminal supports 256 different colors, specified by 256 color codes. | COMMENT |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDTTYLogger.m | 601 | // These are the colors xterm shells use in xterm-256color mode. | COMMENT |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.h | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …ce/after/Pods/CocoaLumberjack/Classes/DDLegacyMacros.h | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …ce/after/Pods/CocoaLumberjack/Classes/DDLegacyMacros.h | 21 | #if DD_LEGACY_MACROS | COMMENT |
| LOW | …ods/CocoaLumberjack/Classes/DDAbstractDatabaseLogger.h | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDLogMacros.h | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDLogMacros.h | 81 | **/ | COMMENT |
| LOW | …e/after/Pods/CocoaLumberjack/Classes/DDASLLogCapture.h | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …tance/after/Pods/CocoaLumberjack/Classes/DDASLLogger.m | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …ter/Pods/CocoaLumberjack/Classes/CocoaLumberjack.swift | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …ance/after/Pods/CocoaLumberjack/Classes/DDFileLogger.h | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …ance/after/Pods/CocoaLumberjack/Classes/DDFileLogger.h | 461 | // Normally, a copy of a file preserves extended attributes. | COMMENT |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.m | 1 | // Software License Agreement (BSD License) | COMMENT |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.m | 21 | #import "DDLog.h" | COMMENT |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.m | 41 | // | COMMENT |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.m | 301 | dispatch_sync(_loggingQueue, ^{ @autoreleasepool { | COMMENT |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.m | 321 | // | COMMENT |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.m | 341 | // We are using a counting semaphore provided by GCD. | COMMENT |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.m | 581 | COMMENT | |
| LOW | …inheritance/after/Pods/CocoaLumberjack/Classes/DDLog.m | 841 | } | COMMENT |
| 727 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | spec/spec_helper.rb | 102 | def fixture_target_definition(name = 'Pods', platform = Pod::Platform.ios, contents: {}) | CODE |
| LOW | spec/spec_helper.rb | 121 | def fixture_pod_target_with_specs(specs, build_type = Pod::BuildType.static_library, | CODE |
| LOW | spec/unit/project_spec.rb | 30 | def settings_for_root_configs(key) | CODE |
| LOW⚡ | spec/unit/validator_spec.rb | 1441 | def test_swiftpod_with_swift_version_parameter(swift_version = '3.1.0') | CODE |
| LOW⚡ | spec/unit/validator_spec.rb | 1448 | def test_swiftpod_with_dot_swift_version_file(dot_swift_version = '3.1.0') | CODE |
| LOW⚡ | spec/unit/validator_spec.rb | 1455 | def test_swiftpod_with_swift_version_dsl(swift_versions = ['3.1.0']) | CODE |
| LOW | spec/unit/validator_spec.rb | 1809 | def create_target_with_validator_consumer(validator, consumer) | CODE |
| LOW | spec/unit/resolver_spec.rb | 3 | def dependency_graph_from_array(locked_dependencies) | CODE |
| LOW⚡ | spec/unit/user_interface/inspector_reporter_spec.rb | 8 | def inspector_is_still_investigating(query, inspector); end | CODE |
| LOW⚡ | spec/unit/user_interface/inspector_reporter_spec.rb | 10 | def inspector_successfully_received_report(report, inspector); end | CODE |
| LOW⚡ | spec/unit/user_interface/inspector_reporter_spec.rb | 12 | def inspector_received_empty_report(report, inspector); end | CODE |
| LOW⚡ | spec/unit/user_interface/inspector_reporter_spec.rb | 14 | def inspector_could_not_create_report(error, query, inspector); end | CODE |
| LOW | spec/functional/command/spec_spec.rb | 268 | def it_should_check_for_existence(command) | CODE |
| LOW | spec/functional/command/spec_spec.rb | 275 | def it_should_check_for_ambiguity(command) | CODE |
| LOW | lib/cocoapods/project.rb | 70 | def generate_available_uuid_list(count = 100) | CODE |
| LOW | lib/cocoapods/project.rb | 165 | def add_cached_pod_subproject(sandbox, metadata, development = false) | CODE |
| LOW | lib/cocoapods/project.rb | 308 | def add_cached_subproject_reference(sandbox, metadata, group) | CODE |
| LOW | lib/cocoapods/project.rb | 400 | def defininition_for_build_configuration(name) | CODE |
| LOW | lib/cocoapods/project.rb | 511 | def new_subproject_file_reference(project_path, group) | CODE |
| LOW | lib/cocoapods/project.rb | 534 | def group_for_subproject_reference(development) | CODE |
| LOW | lib/cocoapods/resolver.rb | 356 | def specifications_for_dependency(dependency, additional_requirements = []) | CODE |
| LOW | lib/cocoapods/resolver.rb | 400 | def requirement_for_locked_pod_named(name) | CODE |
| LOW | lib/cocoapods/sources_manager.rb | 21 | def find_or_create_source_with_url(url) | CODE |
| LOW | lib/cocoapods/validator.rb | 385 | def perform_extensive_analysis(spec) | CODE |
| LOW | lib/cocoapods/validator.rb | 428 | def perform_extensive_subspec_analysis(spec) | CODE |
| LOW | lib/cocoapods/validator.rb | 478 | def validate_social_media_url(spec) | CODE |
| LOW | lib/cocoapods/validator.rb | 484 | def validate_documentation_url(spec) | CODE |
| LOW | lib/cocoapods/validator.rb | 689 | def validate_dynamic_framework_support(aggregate_targets, deployment_target) | CODE |
| LOW | lib/cocoapods/validator.rb | 827 | def validate_nonempty_patterns(attr_name, message_type) | CODE |
| LOW | lib/cocoapods/validator.rb | 933 | def translate_output_to_linter_messages(parsed_output) | CODE |
| LOW | lib/cocoapods/target/build_settings.rb | 266 | def framework_search_paths_to_import_developer_frameworks(frameworks) | CODE |
| LOW | lib/cocoapods/target/build_settings.rb | 489 | def merge_spec_xcconfig_into_xcconfig(spec_xcconfig_hash, xcconfig) | CODE |
| LOW | lib/cocoapods/target/build_settings.rb | 503 | def select_maximal_pod_targets(pod_targets) | CODE |
| LOW | lib/cocoapods/target/build_settings.rb | 773 | def linker_names_from_libraries(libraries) | CODE |
| LOW⚡ | lib/cocoapods/target/pod_target.rb | 671 | def copy_resources_script_path_for_spec(spec) | CODE |
| LOW⚡ | lib/cocoapods/target/pod_target.rb | 680 | def copy_resources_script_input_files_path_for_spec(spec) | CODE |
| LOW⚡ | lib/cocoapods/target/pod_target.rb | 689 | def copy_resources_script_output_files_path_for_spec(spec) | CODE |
| LOW⚡ | lib/cocoapods/target/pod_target.rb | 698 | def embed_frameworks_script_path_for_spec(spec) | CODE |
| LOW⚡ | lib/cocoapods/target/pod_target.rb | 707 | def embed_frameworks_script_input_files_path_for_spec(spec) | CODE |
| LOW⚡ | lib/cocoapods/target/pod_target.rb | 716 | def embed_frameworks_script_output_files_path_for_spec(spec) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 274 | def product_basename_for_spec(spec) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 489 | def deployment_target_for_non_library_spec(spec) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 503 | def product_type_for_test_type(test_type) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 576 | def resources_bundle_target_label(bundle_name) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 632 | def app_host_dependent_targets_for_spec(spec, configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 747 | def prepare_artifacts_script_path_for_spec(spec) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 760 | def prepare_artifacts_script_input_files_path_for_spec(spec) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 773 | def prepare_artifacts_script_output_files_path_for_spec(spec) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 809 | def prefix_header_path_for_spec(spec) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 830 | def recursive_dependent_targets(configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 841 | def _add_recursive_dependent_targets(set, configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 863 | def recursive_test_dependent_targets(test_spec, configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 875 | def _add_recursive_test_dependent_targets(test_spec, set, configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 897 | def dependent_targets_for_test_spec(test_spec, configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 910 | def recursive_app_dependent_targets(app_spec, configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 922 | def _add_recursive_app_dependent_targets(app_spec, set, configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 944 | def dependent_targets_for_app_spec(app_spec, configuration: nil) | CODE |
| LOW | lib/cocoapods/target/pod_target.rb | 1052 | def build_settings_by_config_for_spec(spec) | CODE |
| LOW | lib/cocoapods/target/aggregate_target.rb | 93 | def merge_embedded_pod_targets(embedded_pod_targets_for_build_configuration) | CODE |
| LOW | lib/cocoapods/target/aggregate_target.rb | 188 | def pod_targets_for_build_configuration(build_configuration) | CODE |
| 82 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …s/Oddly-Named-XCF-Slices-Example/archiveAndValidate.sh | 24 | # --------------------------------------- | COMMENT |
| MEDIUM | …s/Oddly-Named-XCF-Slices-Example/archiveAndValidate.sh | 26 | # --------------------------------------- | COMMENT |
| MEDIUM | …s/Oddly-Named-XCF-Slices-Example/archiveAndValidate.sh | 61 | # --------------------------------------- | COMMENT |
| MEDIUM | …s/Oddly-Named-XCF-Slices-Example/archiveAndValidate.sh | 63 | # --------------------------------------- | COMMENT |
| MEDIUM | examples/Excluded-Archs-Example/archiveAndValidate.sh | 22 | # --------------------------------------- | COMMENT |
| MEDIUM | examples/Excluded-Archs-Example/archiveAndValidate.sh | 24 | # --------------------------------------- | COMMENT |
| MEDIUM | …s/Vendored-XCFramework12-Example/archiveAndValidate.sh | 22 | # --------------------------------------- | COMMENT |
| MEDIUM | …s/Vendored-XCFramework12-Example/archiveAndValidate.sh | 24 | # --------------------------------------- | COMMENT |
| MEDIUM | …s/Vendored-XCFramework12-Example/archiveAndValidate.sh | 40 | # ------------------------------------------------------ | COMMENT |
| MEDIUM | …s/Vendored-XCFramework12-Example/archiveAndValidate.sh | 42 | # ------------------------------------------------------ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | lib/cocoapods/sources_manager.rb | 138 | # Create the Spec_Lock file if needed and lock it so that concurrent | COMMENT |
| MEDIUM | lib/cocoapods/target.rb | 8 | # This class is used to represent both the targets and their libraries. | COMMENT |
| MEDIUM | lib/cocoapods/downloader/request.rb | 5 | # This class represents a download request for a given Pod. | COMMENT |
| MEDIUM | lib/cocoapods/installer/analyzer.rb | 775 | # Create a target for each spec group | COMMENT |
| MEDIUM | lib/cocoapods/installer/xcode/target_validator.rb | 20 | # Create a new TargetValidator with aggregate and pod targets to | COMMENT |
| MEDIUM | …/xcode/pods_project_generator/pod_target_integrator.rb | 5 | # This class is responsible for integrating a pod target. This includes integrating | COMMENT |
| MEDIUM | …installer/user_project_integrator/target_integrator.rb | 8 | # This class is responsible for integrating the library generated by a | COMMENT |
| MEDIUM | lib/cocoapods/installer/analyzer/specs_state.rb | 6 | # This class represents the state of a collection of Pods. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | spec/integration.rb | 22 | # - To create a new test, just create a before folder with the environment to | COMMENT |
| LOW⚡ | spec/integration.rb | 24 | # Then just add the tests below this files with the name of the folder and | COMMENT |
| MEDIUM⚡ | spec/integration.rb | 33 | # - Have robust tests which don't depend on the programmatic interface of | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | spec/unit/user_interface/error_report_spec.rb | 101 | Don't forget to anonymize any private data! | CODE |
| LOW | lib/cocoapods/user_interface/error_report.rb | 51 | Don't forget to anonymize any private data! | CODE |
| MEDIUM | lib/cocoapods/installer/installation_options.rb | 148 | # impacting the duration of `pod install` for your project, you can try setting this to `false` | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | lib/cocoapods/command/update.rb | 68 | # Check if all given pods are installed | COMMENT |
| LOW | lib/cocoapods/command/update.rb | 85 | # Check if excluded pods are installed | COMMENT |