Fix X/Twitter and Bluesky embeds! Use multiple images, videos, polls, translations and more on Discord, Telegram and others
This report summarizes scanner evidence for FxEmbed/FxEmbed, a TypeScript project with 5,801 GitHub stars. SynthScan examined 78,236 lines of code across 389 source files, recording 133 pattern matches distributed across 6 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 122 finding(s).
Are imports declared and package/API names verified? 10 finding(s).
Are wrappers, guards, and repeated structures necessary? 121 finding(s).
Which changes need focused human review? 133 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 133 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kages/atmosphere/src/providers/twitter/searchErrors.ts | 13 | export function formatUnknownCursorMessage(cursor: string): string { | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/searchErrors.ts | 18 | export function formatSearchQueryTooLongMessage(length: number): string { | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/searchErrors.ts | 52 | function isSearchTimelineErrorPath(path: unknown): boolean { | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/searchErrors.ts | 60 | export function parseSearchTimelineClientError( | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/searchErrors.ts | 85 | export function isSearchTimelineClientErrorResponse(json: unknown): boolean { | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/searchErrors.ts | 89 | export function searchTimelineClientErrorToApiQueryError( | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/searchErrors.ts | 126 | export function unknownCursorFromSearchTimelineError(json: unknown): string | null { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/trends.ts | 17 | function isGraphQLTimelineCursorLoose(obj: unknown): obj is { cursorType: string; value: string } { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/trends.ts | 53 | function processTimelineItemContent( | CODE |
| LOW | packages/atmosphere/src/providers/twitter/trends.ts | 77 | export function parseTrendsFromGenericTimelineInstructions( | CODE |
| LOW | packages/atmosphere/src/providers/twitter/trends.ts | 124 | export function getExploreInitialTimelineInstructions( | CODE |
| LOW | packages/atmosphere/src/providers/twitter/processor.ts | 31 | function mergeTweetShellIntoStatus(status: GraphQLTwitterStatus): void { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/processor.ts | 88 | function birdwatchEntitiesToFacets(entities: BirdwatchEntity[], noteText: string): APIFacet[] { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/processor.ts | 107 | function replyTargetScreenNameFromGraphQL(status: GraphQLTwitterStatus): string | undefined { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/processor.ts | 123 | function replyTargetDisplayNameFromGraphQL(status: GraphQLTwitterStatus): string | undefined { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/processor.ts | 135 | function repostedByFromGraphQLUser(user: GraphQLUser | undefined): APIRepostedBy | null { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/processor.ts | 168 | function getRetweetedOriginalFromLegacy( | CODE |
| LOW | packages/atmosphere/src/providers/twitter/processor.ts | 180 | function isRetweetWithoutNestedOriginal( | CODE |
| LOW | packages/atmosphere/src/providers/twitter/profile.ts | 57 | export function isSuspendedUserUnavailable(result: unknown): boolean { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/profile.ts | 67 | function userByScreenNameResultValid(result: unknown): boolean { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/profile.ts | 78 | function userResultByScreenNameResultValid(result: unknown): boolean { | CODE |
| LOW | packages/atmosphere/src/providers/twitter/profile.ts | 89 | function descriptionEntitiesToFacets( | CODE |
| LOW | packages/atmosphere/src/providers/twitter/profile.ts | 488 | export async function fetchTwitterGraphQLUserByRestId( | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/proxy/errors.ts | 25 | function firstErrorMessageIncludes(json: unknown, substr: string): boolean { | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/proxy/errors.ts | 34 | export function twitterResponseLooksEmpty(json: unknown): boolean { | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/proxy/errors.ts | 57 | export function jsonHasTruthyErrorsProperty(json: unknown): boolean { | CODE |
| LOW | …kages/atmosphere/src/providers/twitter/proxy/errors.ts | 223 | export function applyNsfwViewerErrorPatch(json: unknown): void { | CODE |
| LOW | …ages/atmosphere/src/providers/twitter/proxy/discord.ts | 21 | function formatProxyEndpointForDiscord(pathname: string): string { | CODE |
| LOW | packages/atmosphere/src/providers/mastodon/client.ts | 49 | async function resolveMastodonRedirectIfNeeded( | CODE |
| LOW | …ages/atmosphere/src/providers/threads/relationships.ts | 27 | export async function constructThreadsRelationshipList( | CODE |
| LOW | packages/atmosphere/src/providers/threads/search.ts | 115 | export async function constructThreadsUserSearch( | CODE |
| LOW | packages/atmosphere/src/providers/threads/search.ts | 196 | export async function constructThreadsTypeahead( | CODE |
| LOW | packages/atmosphere/src/providers/threads/shortcode.ts | 4 | export function threadsShortcodeToMediaId(shortcode: string): string { | CODE |
| LOW | packages/atmosphere/src/providers/threads/processor.ts | 115 | function textAndFacetsFromThreadsTextFragments(post: Record<string, unknown>): { | CODE |
| LOW | packages/atmosphere/src/providers/threads/processor.ts | 175 | export function textAndFacetsFromThreadsPost(post: Record<string, unknown>): { | CODE |
| LOW | packages/atmosphere/src/providers/threads/processor.ts | 191 | function mediaContainerFromThreadsPost(post: Record<string, unknown>): { | CODE |
| LOW | packages/atmosphere/src/providers/threads/processor.ts | 442 | export function userFromThreadsProfilePayload(user: Record<string, unknown>): APIUser | null { | CODE |
| LOW | packages/atmosphere/src/providers/threads/client.ts | 179 | export async function fetchThreadsUserByUsername(params: { | CODE |
| LOW | packages/atmosphere/src/providers/threads/client.ts | 214 | export async function fetchThreadsProfileTimeline(params: { | CODE |
| LOW | packages/atmosphere/src/providers/threads/profile.ts | 168 | export async function constructThreadsProfileStatuses( | CODE |
| LOW | packages/atmosphere/src/providers/threads/cursors.ts | 51 | export function encodeThreadsConversationCursor(p: ThreadsConversationCursorV1): string { | CODE |
| LOW | packages/atmosphere/src/providers/threads/cursors.ts | 55 | export function decodeThreadsConversationCursor(raw: string): ThreadsConversationCursorV1 | null { | CODE |
| LOW | packages/atmosphere/src/providers/threads/cursors.ts | 79 | export function encodeThreadsProfileTimelineCursor(p: ThreadsProfileTimelineCursorV1): string { | CODE |
| LOW | packages/atmosphere/src/providers/threads/cursors.ts | 83 | export function decodeThreadsProfileTimelineCursor( | CODE |
| LOW | packages/atmosphere/src/providers/threads/cursors.ts | 169 | export function encodeThreadsSearchCursor(p: ThreadsSearchCursorV1): string { | CODE |
| LOW | packages/atmosphere/src/providers/threads/cursors.ts | 173 | export function decodeThreadsSearchCursor(raw: string): ThreadsSearchCursorV1 | null { | CODE |
| LOW | …/atmosphere/src/providers/threads/private-processor.ts | 84 | export function threadRowsFromThreadsFeed(json: unknown): Record<string, unknown>[][] { | CODE |
| LOW | …/atmosphere/src/providers/threads/private-processor.ts | 115 | export function rankTokenFromThreadsSearch(json: unknown): string | null { | CODE |
| LOW | …/atmosphere/src/providers/threads/private-processor.ts | 167 | export function threadsUserFromPrivateRecord(rec: Record<string, unknown>): APIUser | null { | CODE |
| LOW | …/atmosphere/src/providers/threads/private-processor.ts | 223 | export function replyRowsFromThreadsReplies(json: unknown): Record<string, unknown>[] { | CODE |
| LOW | …kages/atmosphere/src/providers/threads/conversation.ts | 133 | export async function constructThreadsConversation( | CODE |
| LOW | …ckages/atmosphere/src/providers/threads/private-api.ts | 240 | export function fetchThreadsUserByUsername( | CODE |
| LOW | …ckages/atmosphere/src/providers/threads/private-api.ts | 252 | export function fetchThreadsKeywordSearch( | CODE |
| LOW | packages/atmosphere/src/providers/threads/likes.ts | 19 | export async function constructThreadsStatusLikes( | CODE |
| LOW | …kages/atmosphere/src/providers/threads/profile-tabs.ts | 27 | export async function constructThreadsProfileTab( | CODE |
| LOW | …ages/atmosphere/src/providers/bluesky/notifications.ts | 19 | export async function fetchBlueskyNotifications(params: { | CODE |
| LOW | …ages/atmosphere/src/providers/bluesky/notifications.ts | 63 | export async function getBlueskyNotificationUnreadCount(params: { | CODE |
| LOW | …ages/atmosphere/src/providers/bluesky/notifications.ts | 83 | export async function updateBlueskyNotificationSeen(params: { | CODE |
| LOW | …phere/src/providers/bluesky/detectDescriptionFacets.ts | 41 | export function detectBlueskyDescriptionFacets(text: string): BlueskyFacet[] { | CODE |
| LOW | …es/atmosphere/src/providers/bluesky/profileStatuses.ts | 61 | export function groupConsecutiveSelfReplies(feed: BlueskyFeedViewPost[]): BlueskyFeedViewPost[][] { | CODE |
| 60 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | packages/atmosphere/src/providers/twitter/processor.ts | 538 | status.note_tweet.note_tweet_results.result.richtext.richtext_tags.forEach(richtext => { | CODE |
| CRITICAL | packages/atmosphere/src/providers/twitter/processor.ts | 566 | status.note_tweet.note_tweet_results.result.media.inline_media.forEach(inlineMedia => { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/bluesky.client-upstream.test.ts | 94 | credentialKey: 'dummy-key' | CODE |
| LOW | test/bluesky.client-upstream.test.ts | 100 | expect(credMocks.initCredentials).toHaveBeenCalledWith('dummy-key'); | CODE |
| LOW | test/bluesky.client-upstream.test.ts | 119 | { credentialKey: 'dummy-key' } | CODE |
| LOW | test/bluesky.client-upstream.test.ts | 161 | credentialKey: 'dummy-key' | CODE |
| LOW | test/bluesky.client-upstream.test.ts | 189 | { credentialKey: 'dummy-key' } | CODE |
| LOW | test/bluesky.client-upstream.test.ts | 217 | credentialKey: 'dummy-key', | CODE |
| LOW | test/bluesky.client-upstream.test.ts | 235 | credentialKey: 'dummy-key', | CODE |
| LOW | test/bluesky.client-upstream.test.ts | 257 | const result = await fetchActorProfile('did:plc:test', { credentialKey: 'dummy-key' }); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/strings.ts | 235 | # Did you know we have a fetch API you can use for free, no API keys required? | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/strings.ts | 243 | # ========================================================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/strings.ts | 221 | ERROR_USER_NOT_FOUND: `Sorry, that user doesn't exist :(`, | COMMENT |