🍺 The Package Manager for Everywhere
This report summarizes scanner evidence for Homebrew/brew, a Ruby project with 50,166 GitHub stars. SynthScan examined 375,234 lines of code across 2043 source files, recording 682 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 2.1 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 655 finding(s).
Are imports declared and package/API names verified? 27 finding(s).
Are wrappers, guards, and repeated structures necessary? 281 finding(s).
Which changes need focused human review? 682 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 682 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/retryable_download.rb | 106 | def verify_download_integrity(filename) = downloadable.verify_download_integrity(filename) | CODE |
| LOW | Library/Homebrew/keg_relocate.rb | 172 | def prepare_relocation_to_placeholders(new_usr_local_relocation: new_usr_local_relocation?) | CODE |
| LOW | Library/Homebrew/keg_relocate.rb | 226 | def replace_placeholders_with_locations(files, skip_linkage: false, linkage_files: nil) | CODE |
| LOW | Library/Homebrew/keg_relocate.rb | 521 | def each_unique_file_matching(string, &block) | CODE |
| LOW | Library/Homebrew/bottle.rb | 172 | def with_corrupt_download_retry(quiet: false, &_block) | CODE |
| LOW | Library/Homebrew/bottle.rb | 188 | def discard_corrupt_cached_download(known_corrupt: false) | CODE |
| LOW | Library/Homebrew/bottle.rb | 342 | def stage_from_download_queue(download, pour:) | CODE |
| LOW | Library/Homebrew/install.rb | 30 | def perform_preinstall_checks_once(all_fatal: false) | CODE |
| LOW | Library/Homebrew/install.rb | 47 | def perform_build_from_source_checks(all_fatal: false) | CODE |
| LOW | Library/Homebrew/install.rb | 235 | def select_formula_installers(formula_installers, step: nil, action: nil) | CODE |
| LOW | Library/Homebrew/install.rb | 264 | def combined_fetch_downloads_heading(formula_names: [], cask_names: []) | CODE |
| LOW | Library/Homebrew/install.rb | 302 | def mark_failed_cask_downloads(cask_installers, download_queue:) | CODE |
| LOW | Library/Homebrew/install.rb | 431 | def print_dry_run_dependencies(formula, dependencies, skip_formula_names: [], dependency_summary: nil, &_block) | CODE |
| LOW | Library/Homebrew/install.rb | 451 | def print_dry_run_dependency_summary(summary, formula: nil) | CODE |
| LOW | Library/Homebrew/install.rb | 666 | def perform_preinstall_checks(all_fatal: false) | CODE |
| LOW | Library/Homebrew/formula_installer.rb | 793 | def expand_dependencies_for_formula_once(formula, keepable_dependencies, kept_dependencies) | CODE |
| LOW | Library/Homebrew/formula_installer.rb | 853 | def expand_dependencies_for_formula(formula) | CODE |
| LOW | Library/Homebrew/formula_installer.rb | 878 | def effective_build_options_for(dependent) | CODE |
| LOW | Library/Homebrew/dependency.rb | 294 | def delete_timestamped_cache_entry(key, cache_timestamp) | CODE |
| LOW | Library/Homebrew/formula_versions.rb | 434 | def file_contents_at_revision(revision, relative_path) | CODE |
| LOW | Library/Homebrew/installed_dependents.rb | 26 | def find_some_installed_dependents(kegs, casks: []) | CODE |
| LOW | Library/Homebrew/messages.rb | 34 | def record_completions_and_elisp(completions_and_elisp) | CODE |
| LOW | Library/Homebrew/sandbox.rb | 589 | def allow_write_path_if_exists(path) | CODE |
| LOW | Library/Homebrew/sbom.rb | 620 | def full_spdx_runtime_dependencies(bottling:) | CODE |
| LOW | Library/Homebrew/sbom.rb | 685 | def described_package_spdx_id(bottling:) | CODE |
| LOW | Library/Homebrew/keg.rb | 782 | def codesign_patched_binaries(files); end | CODE |
| LOW | Library/Homebrew/tap.rb | 351 | def worktree_source_tap_path_for(path:) | CODE |
| LOW | Library/Homebrew/tap.rb | 1588 | def read_formula_list_directory(directory) | CODE |
| LOW | Library/Homebrew/local_patch.rb | 93 | def api_source_repository_path(path) | CODE |
| LOW | Library/Homebrew/resource.rb | 228 | def verify_download_integrity(filename) | CODE |
| LOW | Library/Homebrew/resource.rb | 449 | def verify_download_integrity(_filename) | CODE |
| LOW | Library/Homebrew/cleanup.rb | 153 | def excluded_versions_from_cleanup(formula) | CODE |
| LOW | Library/Homebrew/cleanup.rb | 602 | def cleanup_legacy_cask_downloads(casks) | CODE |
| LOW | Library/Homebrew/cleanup.rb | 705 | def cleanup_empty_api_source_directories(directory = cache/"api-source") | CODE |
| LOW | Library/Homebrew/cleanup.rb | 789 | def prune_content_addressed_cache(path) | CODE |
| LOW | Library/Homebrew/upgrade.rb | 145 | def filter_dependent_formula_installers(formula_installers) | CODE |
| LOW | Library/Homebrew/upgrade.rb | 170 | def dependent_formula_installers( | CODE |
| LOW | Library/Homebrew/formula_cellar_checks.rb | 132 | def check_generic_executables(bin) | CODE |
| LOW | Library/Homebrew/formula_cellar_checks.rb | 436 | def check_prebuilt_npm_binaries(formula) | CODE |
| LOW | Library/Homebrew/tap_auditor.rb | 150 | def check_formula_list_directory(directory_name, lists) | CODE |
| LOW | Library/Homebrew/downloadable.rb | 73 | def while_hashing_through_cache(&_block) | CODE |
| LOW | Library/Homebrew/downloadable.rb | 321 | def stage_from_download_queue(_download, pour:); end | CODE |
| LOW | Library/Homebrew/downloadable.rb | 324 | def verify_download_integrity(filename) | CODE |
| LOW | Library/Homebrew/caveats.rb | 236 | def function_completion_caveats(shell) | CODE |
| LOW | Library/Homebrew/github_runner_matrix.rb | 326 | def compatible_testing_formulae(runner) | CODE |
| LOW | Library/Homebrew/github_runner_matrix.rb | 339 | def formulae_with_untested_dependents(runner) | CODE |
| LOW | Library/Homebrew/deprecate_disable.rb | 135 | def to_reason_string_or_symbol(string, type:) | CODE |
| LOW | Library/Homebrew/install_steps.rb | 629 | def delete_keychain_certificate(name, matching_certificate: nil, base: nil) | CODE |
| LOW | Library/Homebrew/install_steps.rb | 645 | def delete_keychain_certificates(name, fingerprint_of: nil, base: nil) | CODE |
| LOW | Library/Homebrew/install_steps.rb | 786 | def install_gzipped_executable(source, target, source_base: nil, target_base: nil) | CODE |
| LOW | Library/Homebrew/development_tools.rb | 49 | def insecure_download_warning(resource) | CODE |
| LOW | Library/Homebrew/head_software_spec.rb | 14 | def verify_download_integrity(_filename) | CODE |
| LOW | Library/Homebrew/formula.rb | 428 | def full_name_with_optional_tap(name) | CODE |
| LOW | Library/Homebrew/formula.rb | 2695 | def generate_completions_from_executable(*commands, | CODE |
| LOW | Library/Homebrew/formula.rb | 3010 | def runtime_formula_dependencies(read_from_tab: true, undeclared: true) | CODE |
| LOW | Library/Homebrew/formula.rb | 3026 | def installed_runtime_formula_dependencies(read_from_tab: true, undeclared: true) | CODE |
| LOW | Library/Homebrew/formula.rb | 3802 | def eligible_kegs_for_cleanup(quiet: false) | CODE |
| LOW | Library/Homebrew/formula.rb | 3888 | def enqueue_resources_and_patches(download_queue:, test: false) | CODE |
| LOW | Library/Homebrew/formula.rb | 5484 | def python_major_minor_version(python) | CODE |
| LOW | Library/Homebrew/bundle.rb | 59 | def formula_versions_from_env(formula_name) | CODE |
| 221 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/tap_rubocop_style.yml | 1 | --- | COMMENT |
| LOW | Library/Homebrew/keg_relocate.rb | 681 | COMMENT | |
| LOW | Library/Homebrew/formula_creator.rb | 321 | <% elsif @mode == :zig %> | COMMENT |
| LOW | Library/Homebrew/attestation.rb | 21 | COMMENT | |
| LOW | Library/Homebrew/attestation.rb | 41 | COMMENT | |
| LOW | Library/Homebrew/attestation.rb | 61 | # @api private | COMMENT |
| LOW | Library/Homebrew/attestation.rb | 101 | end | COMMENT |
| LOW | Library/Homebrew/attestation.rb | 161 | COMMENT | |
| LOW | Library/Homebrew/attestation.rb | 241 | COMMENT | |
| LOW | Library/Homebrew/attestation.rb | 261 | # or (3) by checking the resulting JSON for the expected signing workflow. | COMMENT |
| LOW | Library/Homebrew/installed_dependents.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/lock_file.rb | 41 | "Use `ulimit -n` to increase this limit." | COMMENT |
| LOW | Library/Homebrew/brew.sh | 221 | # Only `brew update-if-needed` should be handled here. | COMMENT |
| LOW | Library/Homebrew/cleaner.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/cleaner.rb | 41 | # 1. `info/dir` | COMMENT |
| LOW | Library/Homebrew/tap.rb | 241 | # The user name of this {Tap}. Usually, it's the GitHub username of | COMMENT |
| LOW | Library/Homebrew/tap.rb | 261 | # {#name} is always in lowercase. | COMMENT |
| LOW | Library/Homebrew/utils.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/utils.rb | 21 | # Removes the module part from the expression in the string. | COMMENT |
| LOW | Library/Homebrew/livecheck.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/dependency_collector.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/resource.rb | 241 | # odeprecated "formula downloads without a checksum", "a `sha256` declaration", disable: true | COMMENT |
| LOW | Library/Homebrew/abstract_command.rb | 1 | # typed: strong | COMMENT |
| LOW | Library/Homebrew/build_options.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/build_options.rb | 21 | # args << "--qt-gui" if build.with? "qt" # "--with-qt" ==> build.with? "qt" | COMMENT |
| LOW | Library/Homebrew/build_options.rb | 61 | !with?(val) | COMMENT |
| LOW | Library/Homebrew/build_options.rb | 81 | # if build.head? | COMMENT |
| LOW | Library/Homebrew/description_cache_store.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/version.rb | 381 | private_constant :PRERELEASE_SUFFIX | COMMENT |
| LOW | Library/Homebrew/version.rb | 401 | UrlParser.new(/[_-]([Rr]\d+[AaBb]\d*(?:-\d+)?)/), | COMMENT |
| LOW | Library/Homebrew/version.rb | 441 | StemParser.new(/-(#{MINOR_OR_PATCH})-w(?:in)?(?:32|64)$/), | COMMENT |
| LOW | Library/Homebrew/version.rb | 461 | COMMENT | |
| LOW | Library/Homebrew/version.rb | 481 | COMMENT | |
| LOW | Library/Homebrew/formula.rb | 61 | # All subclasses of {Formula} (and all Ruby classes) have to be named | COMMENT |
| LOW | Library/Homebrew/formula.rb | 141 | # e.g. `another-name-for-this-formula` | COMMENT |
| LOW | Library/Homebrew/formula.rb | 161 | # | COMMENT |
| LOW | Library/Homebrew/formula.rb | 181 | # The HEAD {SoftwareSpec} for this {Formula}. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 221 | COMMENT | |
| LOW | Library/Homebrew/formula.rb | 601 | COMMENT | |
| LOW | Library/Homebrew/formula.rb | 621 | COMMENT | |
| LOW | Library/Homebrew/formula.rb | 1121 | # All currently installed prefix directories. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1141 | # ``` | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1161 | # The directory where the formula's headers should be installed. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1181 | # @api public | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1201 | # The directory where the formula's binaries should be installed. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1221 | # Often one of the more specific `man` functions should be used instead, | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1241 | sig { returns(Pathname) } | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1261 | # man3.install "man.3" | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1281 | sig { returns(Pathname) } | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1301 | # This is symlinked into `HOMEBREW_PREFIX` after installation or with | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1321 | # ### Examples | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1341 | # Install `./example_code/simple/ones` to `share/demos/examples`: | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1361 | # pkgshare.install "examples" | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1381 | def elisp = prefix/"share/emacs/site-lisp"/name | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1401 | # The directory where the formula's configuration files should be installed. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1421 | # This directory is not inside the `HOMEBREW_CELLAR` so it persists | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1441 | # | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1461 | sig { returns(Pathname) } | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1581 | COMMENT | |
| LOW | Library/Homebrew/formula.rb | 1641 | # Same as {#elisp}, but relative to {#opt_prefix} instead of {#prefix}. | COMMENT |
| 205 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Library/Homebrew/descriptions.rb | 51 | # Create an actual instance. | COMMENT |
| MEDIUM | Library/Homebrew/bottle.rb | 359 | # Create a separate file to mark a completed extraction. This avoids | COMMENT |
| MEDIUM | Library/Homebrew/bundle_version.rb | 92 | # Create a nicely formatted version (on a best effort basis). | COMMENT |
| MEDIUM | Library/Homebrew/cleaner.rb | 20 | # Create a cleaner for the given formula. | COMMENT |
| MEDIUM | Library/Homebrew/dependency_collector.rb | 18 | # This class is used by `depends_on` in the formula DSL to turn dependency | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 3389 | # Create a hash of spec names (stable/head) to the list of dependencies under each | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 3516 | # This method is overridden in {Formula} subclasses to provide the | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 3531 | # This method is overridden in {Formula} subclasses to provide the | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 3847 | # Create a temporary directory then yield. When the block returns, | COMMENT |
| MEDIUM | Library/Homebrew/system_command.rb | 462 | # Create a new process group so that we can send `SIGINT` from | COMMENT |
| MEDIUM | Library/Homebrew/cmd/pyenv-sync.rb | 77 | # Create an unversioned symlinks | COMMENT |
| MEDIUM | Library/Homebrew/extend/os/linux/install.rb | 89 | # This file is generated by Homebrew. Do not modify. | COMMENT |
| MEDIUM | Library/Homebrew/rubocops/extend/formula_cop.rb | 29 | # This method is called by RuboCop and is the main entry point. | COMMENT |
| MEDIUM | Library/Homebrew/test/cleanup_spec.rb | 1141 | # Create the latest version of testball so the older version is eligible for cleanup. | COMMENT |
| MEDIUM | Library/Homebrew/test/style_spec.rb | 65 | # This file is known to use non-rocket hashes and other things that trigger audit, | COMMENT |
| MEDIUM | Library/Homebrew/test/cmd/info_spec.rb | 610 | # Create a rack for the installed dependency | COMMENT |
| MEDIUM | Library/Homebrew/test/cmd/info_spec.rb | 617 | # Create a dependent keg whose tab references testball | COMMENT |
| MEDIUM | …ry/Homebrew/test/support/helper/cask/install_helper.rb | 32 | # Create the caskroom path | COMMENT |
| MEDIUM | …ry/Homebrew/test/support/helper/cask/install_helper.rb | 35 | # Create the staged_path (version directory) | COMMENT |
| MEDIUM | Library/Homebrew/test/cask/installer_spec.rb | 1160 | # Create a different file | COMMENT |
| MEDIUM | Library/Homebrew/standalone/init.rb | 4 | # This file is included before any other files. | COMMENT |
| MEDIUM | Library/Homebrew/livecheck/strategy/extract_plist.rb | 132 | # Create a copy of the cask that overrides the artifact URL with the | COMMENT |
| MEDIUM | Library/Homebrew/utils/lock.sh | 1 | # Create a lock using `flock(2)`. A command name with arguments is required as | COMMENT |
| MEDIUM | Library/Homebrew/utils/curl.rb | 883 | # Create a hash from the header lines | COMMENT |
| MEDIUM | Library/Homebrew/prof/vernier_fork_guard.rb | 8 | # This file is required before Homebrew's usual command boot has installed | COMMENT |
| MEDIUM | Library/Homebrew/cask/audit.rb | 267 | # Create a temporary installer to process renames in the audit directory | COMMENT |
| MEDIUM | Library/Homebrew/services/formula_wrapper.rb | 17 | # Create a new `Service` instance from either a path or label. | COMMENT |
| MEDIUM | Library/Homebrew/dev-cmd/typecheck.rb | 289 | # This file is autogenerated. Do not edit it by hand. | COMMENT |
| MEDIUM | Library/Homebrew/dev-cmd/create.rb | 78 | # Create a formula from a tarball URL. | COMMENT |
| MEDIUM | .github/dependabot.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/check-issues.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/stale-issues-and-prs.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/licenses.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/check-prs.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/actionlint.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/codeql/extensions/homebrew-actions.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/scripts/check-licenses.sh | 2 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/linkage_checker.rb | 289 | # Check if this is a no_linkage dependency with unexpected linkage | COMMENT |
| LOW | Library/Homebrew/missing_formula.rb | 178 | # Check if the formula has been deleted in the last month. | COMMENT |
| LOW | Library/Homebrew/version.rb | 522 | # Check if this is a HEAD version. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 4963 | # Check if `@rpath` install names should be preserved. | COMMENT |
| LOW | Library/Homebrew/cmd/update-report.rb | 225 | # Check if we can parse the JSON and do any Ruby-side follow-up. | COMMENT |
| LOW | Library/Homebrew/cmd/update_report/reporter.rb | 279 | # Check if the migration target is a cask (either in homebrew/cask or any other tap) | COMMENT |
| LOW | Library/Homebrew/install/check.rb | 46 | # Check if the installed formula is from a different tap | COMMENT |
| LOW | Library/Homebrew/install/check.rb | 150 | # Check if the formula we try to install is the same as installed | COMMENT |
| LOW | Library/Homebrew/rubocops/components_order.rb | 247 | # Check if each present_components is above rest of the present_components | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/desc_helper.rb | 22 | # Check if a desc is present. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/desc_helper.rb | 33 | # Check if the desc is empty. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 46 | # Check if "command-line" is spelled incorrectly in the desc. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 52 | # Check if the desc starts with an article. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 55 | # Check if invalid lowercase words are at the start of a desc. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 60 | # Check if the desc starts with the formula's or cask's name. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 71 | # Check if a full stop is used at the end of a desc (apart from in the case of "etc."). | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 76 | # Check if the desc contains Unicode emojis or symbols (Unicode Other Symbols category). | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 79 | # Check if the desc length exceeds maximum length. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 411 | # Check if a block method is called inside a block. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 424 | # Check if method_name is called among the direct children nodes in the given node. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 425 | # Check if the node itself is the method. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 441 | # Check if method_name is called among every descendant node of given node. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 474 | # Check if negation is present in the given node. | COMMENT |
| LOW | Library/Homebrew/rubocops/cask/no_overrides.rb | 45 | # Check if multiple `on_{system}` blocks have different `depends_on macos:` versions. | COMMENT |
| LOW | Library/Homebrew/test/cask/cask_loader_spec.rb | 535 | # Set HOMEBREW_LIBRARY to our test prefix for the security check | COMMENT |
| LOW | Library/Homebrew/unpack_strategy/dmg.rb | 48 | # Check if path is considered disk image metadata. | COMMENT |
| LOW | Library/Homebrew/unpack_strategy/dmg.rb | 54 | # Check if path is a symlink to a system directory (commonly to /Applications). | COMMENT |
| LOW | Library/Homebrew/unpack_strategy/tar.rb | 31 | # Check if `tar` can list the contents, then it can also extract it. | COMMENT |
| LOW | Library/Homebrew/bundle/extensions/flatpak.rb | 214 | # Check if package is installed at all (regardless of remote) | COMMENT |
| LOW | Library/Homebrew/utils/gem_setup.rb | 163 | # Write the file atomically, in case we're working parallel | COMMENT |
| LOW | Library/Homebrew/utils/gem_setup.rb | 233 | # Check if the install is intact. This is useful if any gems are added to gitignore. | COMMENT |
| LOW | Library/Homebrew/utils/curl.rb | 439 | # Check if a URL is protected by CloudFlare (e.g. badlion.net and jaxx.io). | COMMENT |
| LOW | Library/Homebrew/utils/curl.rb | 451 | # Check if a URL is protected by Incapsula (e.g. corsair.com). | COMMENT |
| LOW | Library/Homebrew/utils/service.rb | 11 | # Check if a service is running for a specified formula. | COMMENT |
| LOW | Library/Homebrew/utils/service.rb | 27 | # Check if a service file is installed in the expected location. | COMMENT |
| LOW | Library/Homebrew/os/linux/elf.rb | 244 | # Check if DF_1_NODEFLIB is set | COMMENT |
| LOW | Library/Homebrew/cask/cask.rb | 444 | # Check if the installed cask is outdated. | COMMENT |
| LOW | Library/Homebrew/cask/caskroom.rb | 48 | # Check if the cask is installed with an old name. | COMMENT |
| LOW | Library/Homebrew/cask/artifact/symlinked.rb | 172 | # Check if the target file is a symlink that originates from a formula | COMMENT |
| LOW | Library/Homebrew/services/cli.rb | 48 | # Check if formula has been found. | COMMENT |
| LOW | Library/Homebrew/services/system.rb | 150 | # Check if a launchd service is running, given its label (e.g. `homebrew.mxcl.foo`). | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-formula-pr.rb | 383 | # Check if there are any resources that still need manual update: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/test/utils_spec.rb | 138 | .to eq({ name: "John Doe", email: "john.doe@example.com" }) | CODE |
| LOW | Library/Homebrew/test/utils_spec.rb | 141 | expect { described_class.parse_author!("John Doe") } | CODE |
| LOW | Library/Homebrew/test/missing_formula_spec.rb | 81 | (tap_path/"Formula/deleted-formula.rb").write "placeholder" | CODE |
| LOW | Library/Homebrew/test/missing_formula_spec.rb | 140 | (tap_path/"notes/#{target}.rb").write "placeholder" | CODE |
| LOW | …y/Homebrew/test/livecheck/strategy/sourceforge_spec.rb | 35 | <description><![CDATA[Files from abc Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod t | CODE |
| LOW | …y/Homebrew/test/livecheck/strategy/sourceforge_spec.rb | 35 | <description><![CDATA[Files from abc Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod t | CODE |
| LOW | Library/Homebrew/test/utils/curl_spec.rb | 368 | let(:user_agent_string) { "Lorem ipsum dolor sit amet" } | CODE |
| LOW | Library/Homebrew/test/utils/curl_spec.rb | 368 | let(:user_agent_string) { "Lorem ipsum dolor sit amet" } | CODE |
| LOW | Library/Homebrew/test/utils/user_spec.rb | 36 | fake_user ttys002 Oct 1 11:27 | CODE |
| LOW | Library/Homebrew/test/utils/github/actions_spec.rb | 7 | let(:message) { "lorem ipsum" } | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 28 | annotation = described_class.new(:warning, "lorem ipsum", file: "file.txt") | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 30 | expect(annotation.to_s).to eq "::warning file=file.txt::lorem ipsum" | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 34 | annotation = described_class.new(:warning, "lorem ipsum", file: "file.txt", title: "foo") | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 36 | expect(annotation.to_s).to eq "::warning file=file.txt,title=foo::lorem ipsum" | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 40 | annotation = described_class.new(:error, "lorem ipsum", file: "file.txt", line: 3) | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 42 | expect(annotation.to_s).to eq "::error file=file.txt,line=3::lorem ipsum" | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 46 | annotation = described_class.new(:error, "lorem ipsum", file: "file.txt", line: 3, column: 18) | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 48 | expect(annotation.to_s).to eq "::error file=file.txt,line=3,col=18::lorem ipsum" | CODE |
| LOW | Library/Homebrew/test/cask/artifact/app_spec.rb | 394 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 52 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 56 | .with("chown", args: ["-R", "--", "fake_user:staff", fake_pathname], sudo: nil) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 64 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 70 | args: ["-R", "--", "fake_user:staff", fake_pathname, fake_pathname], | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 95 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 102 | .with("chown", args: ["-R", "--", "fake_user:staff", fake_pathname], sudo: nil) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 110 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 124 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/diagnostic.rb | 1683 | # If quarantine is not available, a warning is already shown by check_cask_quarantine_support so just return | COMMENT |
| LOW | Library/Homebrew/keg.rb | 950 | # no need to put .app bundles in the path, the user can just use | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 2237 | # libraries before trying to utilize Frameworks, many of which will be from | COMMENT |
| LOW | Library/Homebrew/cmd/log.rb | 40 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| LOW | Library/Homebrew/rubocops/lines.rb | 1101 | problem "`Dir([\"#{string_content(path)}\"])` is unnecessary; just use `#{match[0]}`" | CODE |
| MEDIUM | Library/Homebrew/rubocops/unreferenced_let.rb | 18 | # example or an included test harness) cannot be seen, so the cop stays conservative and | COMMENT |
| LOW | Library/Homebrew/unpack_strategy/dmg.rb | 106 | # For HFS, just use <mount-path> | COMMENT |
| MEDIUM | Library/Homebrew/livecheck/strategy/json.rb | 19 | # `strategy :json` in a `livecheck` block (in conjunction with a | COMMENT |
| MEDIUM | Library/Homebrew/livecheck/strategy/yaml.rb | 19 | # `strategy :yaml` in a `livecheck` block (in conjunction with a | COMMENT |
| MEDIUM | Library/Homebrew/livecheck/strategy/xml.rb | 23 | # `strategy :xml` in a `livecheck` block (in conjunction with a | COMMENT |
| LOW | Library/Homebrew/utils/gzip.rb | 29 | # 1. Ideally, we would just set mtime = 0 if SOURCE_DATE_EPOCH is absent, but Ruby's | COMMENT |
| MEDIUM | Library/Homebrew/utils/github/artifacts.rb | 17 | # We use a download strategy here to leverage the Homebrew cache | COMMENT |
| LOW | Library/Homebrew/os/mac/ffi/core_foundation.rb | 94 | # ASCII-8BIT could be anything, so just use Latin-1 | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-revision.rb | 33 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-compatibility-version.rb | 31 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-formula-pr.rb | 111 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-cask-pr.rb | 79 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | Library/Homebrew/tap.rb | 559 | # Redirect targets must pass the same allow/forbid checks as requested remotes. | COMMENT |
| HIGH | Library/Homebrew/dev-cmd/pr-pull.rb | 164 | ohai "Ignoring workflow #{workflow} as requested by `--ignore-missing-artifacts`" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Library/Homebrew/formula.rb | 4507 | # If you maintain your own repository, you can add your own bottle links. | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 4580 | # If a block is provided you can also add {.depends_on} and {Patch}es just to the {.head} {SoftwareSpec}. | COMMENT |
| LOW | Library/Homebrew/test_bot/formulae.rb | 375 | # If we depend on a versioned formula, make sure to unlink any other | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/Brew-Bundle-and-Brewfile.md | 311 | # In this example, pass `--appdir=~/Applications` and `--require_sha` | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/extend/kernel.rb | 20 | # NOTE: This method is **not** thread-safe – other threads | COMMENT |
| LOW | Library/Homebrew/bundle/brew.rb | 386 | # Step 1: Sort by formula full name while putting tap formulae behind core formulae. | COMMENT |
| LOW | Library/Homebrew/bundle/brew.rb | 398 | # Step 2: Sort by formula dependency topology. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/bundle/brew.rb | 386 | # Step 1: Sort by formula full name while putting tap formulae behind core formulae. | COMMENT |
| LOW | Library/Homebrew/bundle/brew.rb | 398 | # Step 2: Sort by formula dependency topology. | COMMENT |
| LOW | Library/Homebrew/services/formula_wrapper.rb | 398 | # The purpose of this function is to lazy load the Homebrew::Service class | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/BrewTestBot.md | 11 | [`brew test-bot`](Manpage.md#test-bot-options-formula) is Homebrew's continuous-integration orchestration command, origi | CODE |