Repository Analysis

DNSCrypt/dnscrypt-proxy

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

2.5 Likely human-written View on GitHub
2.5
Adjusted Score
2.5
Raw Score
100%
Time Factor
2026-05-28
Last Push
13,358
Stars
Go
Language
20,048
Lines of Code
117
Files
55
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 0HIGH 0MEDIUM 1LOW 54

Pattern Findings

55 matches across 6 categories. Click a row to expand file-level details.

Over-Commented Block44 hits · 37 pts
SeverityFileLineSnippet
LOWdnscrypt-proxy/plugin_firefox.go1// Firefox DoH Canary Domain Plugin
LOWdnscrypt-proxy/example-blocked-ips.txt1##############################
LOWdnscrypt-proxy/example-cloaking-rules.txt41# names for the same IP are supported
LOWdnscrypt-proxy/example-blocked-names.txt1
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml1##############################################
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml21##
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml101## only increase latency.
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml121## solution is to reach out to these operators and encourage them to
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml161## These networks don't have to match your actual networks.
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml181## 'p2': Randomly choose 1 of the fastest 2 servers by latency.
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml201## - At 125 connections (50% load): timeout remains ~4765ms (95.3%)
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml281
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml301## all TLS traffic to/from DoH servers.
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml321## They will never be used if lists have already been cached, and if the stamps
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml341bootstrap_resolvers = ['9.9.9.11:53', '8.8.8.8:53']
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml361## Useful if the proxy is automatically started at boot, and network
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml381## The proxy will remain fully functional to respond to queries that
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml441
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml501[captive_portals]
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml521
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml541
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml581
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml621# log_format = 'tsv'
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml641## Optional path to a file logging blocked queries
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml701# log_format = 'tsv'
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml721# [schedules.time-to-sleep]
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml741
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml801# urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/odoh-relays.md', 'https://download.
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml821# minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml861 'cleanbrowsing-security-ipv6',
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml881
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml901##
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml941## DNS64 is a mechanism for synthesizing AAAA records from A records.
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml961## DNS64-enabled resolver(s) to discover Pref64::/n CIDRs
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml981## - "ipcrypt-deterministic": Deterministic encryption (same IP always encrypts to same value) - requires 16-byte key
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml1021tls_certificate = ""
LOWdnscrypt-proxy/example-dnscrypt-proxy.toml1041## Default: 1
LOWdnscrypt-proxy/example-allowed-ips.txt1##############################
LOWdnscrypt-proxy/example-allowed-names.txt1
LOWdnscrypt-proxy/example-captive-portals.txt1###########################################
LOWdnscrypt-proxy/example-forwarding-rules.txt1##################################
LOWdnscrypt-proxy/example-forwarding-rules.txt21## If this happens, set `block_ipv6` to `false` in the main config file.
LOWdnscrypt-proxy/example-forwarding-rules.txt41
LOW…generate-domains-blocklist/domains-time-restricted.txt1## Rules to be applied at specific times
Excessive Try-Catch Wrapping5 hits · 5 pts
SeverityFileLineSnippet
LOW…nerate-domains-blocklist/generate-domains-blocklist.py125 except Exception as err:
LOW…nerate-domains-blocklist/generate-domains-blocklist.py199 except Exception as e:
LOW…nerate-domains-blocklist/generate-domains-blocklist.py247 except Exception as e:
LOW…nerate-domains-blocklist/generate-domains-blocklist.py305 except Exception as e:
LOW…nerate-domains-blocklist/generate-domains-blocklist.py314 except Exception as e:
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippet
MEDIUMdnscrypt-proxy/example-dnscrypt-proxy.toml228## This file is different from other log files, and will not be
Deep Nesting3 hits · 3 pts
SeverityFileLineSnippet
LOW…nerate-domains-blocklist/generate-domains-blocklist.py141
LOW…nerate-domains-blocklist/generate-domains-blocklist.py209
LOW…nerate-domains-blocklist/generate-domains-blocklist.py255
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippet
LOW…nerate-domains-blocklist/generate-domains-blocklist.py255def blocklists_from_config_file(
Unused Imports1 hit · 1 pts
SeverityFileLineSnippet
LOW…nerate-domains-blocklist/generate-domains-blocklist.py5