🍺 The Package Manager for Everywhere
This report presents the forensic synthetic code analysis of Homebrew/brew, a Ruby project with 48,820 GitHub stars. SynthScan v2.0 examined 292,946 lines of code across 1869 source files, recording 594 pattern matches distributed across 11 syntactic categories. The overall adjusted score of 2.4 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 594 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/retryable_download.rb | 106 | def verify_download_integrity(filename) = downloadable.verify_download_integrity(filename) | CODE |
| LOW | Library/Homebrew/install_renamed.rb | 44 | def append_default_if_different(src, dst) | CODE |
| LOW | Library/Homebrew/keg_relocate.rb | 144 | def prepare_relocation_to_placeholders(new_usr_local_relocation: new_usr_local_relocation?) | CODE |
| LOW | Library/Homebrew/keg_relocate.rb | 195 | def replace_placeholders_with_locations(files, skip_linkage: false) | CODE |
| LOW | Library/Homebrew/keg_relocate.rb | 313 | def each_unique_file_matching(string, &_block) | CODE |
| LOW | Library/Homebrew/bottle.rb | 269 | def stage_from_download_queue(download, pour:) | CODE |
| LOW | Library/Homebrew/install.rb | 21 | def perform_preinstall_checks_once(all_fatal: false) | CODE |
| LOW | Library/Homebrew/install.rb | 42 | def perform_build_from_source_checks(all_fatal: false) | CODE |
| LOW | Library/Homebrew/install.rb | 418 | def show_combined_fetch_downloads_heading(formula_names: [], cask_names: []) | CODE |
| LOW | Library/Homebrew/install.rb | 505 | def print_dry_run_dependencies(formula, dependencies, skip_formula_names: [], &_block) | CODE |
| LOW | Library/Homebrew/install.rb | 741 | def perform_preinstall_checks(all_fatal: false) | CODE |
| LOW | Library/Homebrew/formula_installer.rb | 776 | def expand_dependencies_for_formula(formula) | CODE |
| LOW | Library/Homebrew/formula_installer.rb | 818 | def effective_build_options_for(dependent) | CODE |
| LOW | Library/Homebrew/dependency.rb | 292 | def delete_timestamped_cache_entry(key, cache_timestamp) | CODE |
| LOW | Library/Homebrew/formula_versions.rb | 85 | def file_contents_at_revision(revision, relative_path) | CODE |
| LOW | Library/Homebrew/installed_dependents.rb | 26 | def find_some_installed_dependents(kegs, casks: []) | CODE |
| LOW | Library/Homebrew/messages.rb | 34 | def record_completions_and_elisp(completions_and_elisp) | CODE |
| LOW | Library/Homebrew/sandbox.rb | 397 | def allow_write_path_if_exists(path) | CODE |
| LOW | Library/Homebrew/sbom.rb | 582 | def full_spdx_runtime_dependencies(bottling:) | CODE |
| LOW | Library/Homebrew/sbom.rb | 647 | def described_package_spdx_id(bottling:) | CODE |
| LOW | Library/Homebrew/tap.rb | 347 | def worktree_source_tap_path_for(path:) | CODE |
| LOW | Library/Homebrew/tap.rb | 1488 | def read_formula_list_directory(directory) | CODE |
| LOW | Library/Homebrew/local_patch.rb | 90 | def api_source_repository_path(path) | CODE |
| LOW | Library/Homebrew/resource.rb | 374 | def verify_download_integrity(_filename) | CODE |
| LOW | Library/Homebrew/cleanup.rb | 139 | def excluded_versions_from_cleanup(formula) | CODE |
| LOW | Library/Homebrew/cleanup.rb | 506 | def cleanup_legacy_cask_downloads(casks) | CODE |
| LOW | Library/Homebrew/cleanup.rb | 587 | def cleanup_empty_api_source_directories(directory = cache/"api-source") | CODE |
| LOW | Library/Homebrew/formula_cellar_checks.rb | 123 | def check_generic_executables(bin) | CODE |
| LOW | Library/Homebrew/tap_auditor.rb | 147 | def check_formula_list_directory(directory_name, lists) | CODE |
| LOW | Library/Homebrew/downloadable.rb | 177 | def stage_from_download_queue(_download, pour:); end | CODE |
| LOW | Library/Homebrew/downloadable.rb | 180 | def verify_download_integrity(filename) | CODE |
| LOW | Library/Homebrew/caveats.rb | 219 | def function_completion_caveats(shell) | CODE |
| LOW | Library/Homebrew/github_runner_matrix.rb | 309 | def compatible_testing_formulae(runner) | CODE |
| LOW | Library/Homebrew/github_runner_matrix.rb | 328 | def formulae_with_untested_dependents(runner) | CODE |
| LOW | Library/Homebrew/deprecate_disable.rb | 121 | def to_reason_string_or_symbol(string, type:) | CODE |
| LOW | Library/Homebrew/install_steps.rb | 332 | def delete_keychain_certificate(name, matching_certificate: nil, base: nil) | CODE |
| LOW | Library/Homebrew/development_tools.rb | 45 | def insecure_download_warning(resource) | CODE |
| LOW | Library/Homebrew/head_software_spec.rb | 14 | def verify_download_integrity(_filename) | CODE |
| LOW | Library/Homebrew/formula.rb | 410 | def full_name_with_optional_tap(name) | CODE |
| LOW | Library/Homebrew/formula.rb | 2468 | def generate_completions_from_executable(*commands, | CODE |
| LOW | Library/Homebrew/formula.rb | 2790 | def runtime_formula_dependencies(read_from_tab: true, undeclared: true) | CODE |
| LOW | Library/Homebrew/formula.rb | 2806 | def installed_runtime_formula_dependencies(read_from_tab: true, undeclared: true) | CODE |
| LOW | Library/Homebrew/formula.rb | 3555 | def eligible_kegs_for_cleanup(quiet: false) | CODE |
| LOW | Library/Homebrew/formula.rb | 3639 | def enqueue_resources_and_patches(download_queue:) | CODE |
| LOW | Library/Homebrew/bundle.rb | 85 | def formula_versions_from_env(formula_name) | CODE |
| LOW | Library/Homebrew/build.rb | 53 | def effective_build_options_for(dependent) | CODE |
| LOW | Library/Homebrew/download_queue.rb | 233 | def stdout_print_and_flush_if_tty(message) | CODE |
| LOW | Library/Homebrew/download_queue.rb | 260 | def create_symlinks_for_shared_download(cached_location) | CODE |
| LOW | Library/Homebrew/download_queue.rb | 343 | def align_checksum_mismatch_message(downloadable_type) | CODE |
| LOW | Library/Homebrew/service.rb | 532 | def cron_weekday_to_systemd_weekday(cron_weekday) | CODE |
| LOW | Library/Homebrew/cmd/info.rb | 476 | def shadowing_installed_formula(formula) | CODE |
| LOW | Library/Homebrew/cmd/info.rb | 482 | def swap_to_installed_formula(formula, qualified_inputs) | CODE |
| LOW | Library/Homebrew/cmd/search.rb | 159 | def print_missing_formula_help(query, found_matches) | CODE |
| LOW | Library/Homebrew/cmd/update-report.rb | 339 | def link_completions_manpages_and_docs(repository = HOMEBREW_REPOSITORY) | CODE |
| LOW | Library/Homebrew/cmd/upgrade.rb | 547 | def record_formula_upgrade_summary(context, include_sizes: false, formulae_installer: nil, version_changes: nil) | CODE |
| LOW | Library/Homebrew/cmd/upgrade.rb | 578 | def show_final_upgrade_summary(dry_run: args.dry_run?) | CODE |
| LOW | Library/Homebrew/cmd/upgrade.rb | 628 | def show_final_upgrade_summary_section(title, items) | CODE |
| LOW | Library/Homebrew/cmd/upgrade.rb | 637 | def formula_upgrade_descriptions(formulae, include_sizes: false) | CODE |
| LOW | Library/Homebrew/cmd/upgrade.rb | 658 | def formula_upgrade_display_version(formula, old_version) | CODE |
| LOW | Library/Homebrew/cmd/uses.rb | 101 | def intersection_of_dependents(use_runtime_dependents, used_formulae) | CODE |
| 157 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/formula_installer.rb | 1361 | COMMENT | |
| LOW | Library/Homebrew/attestation.rb | 21 | BACKFILL_REPO = "trailofbits/homebrew-brew-verify" | COMMENT |
| LOW | Library/Homebrew/attestation.rb | 41 | # | COMMENT |
| LOW | Library/Homebrew/attestation.rb | 201 | # Ideally, we would also constrain the signing workflow here, but homebrew-core | COMMENT |
| LOW | Library/Homebrew/installed_dependents.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/lock_file.rb | 41 | if lockfile.flock(File::LOCK_EX | File::LOCK_NB) | COMMENT |
| LOW | Library/Homebrew/brew.sh | 621 | COMMENT | |
| LOW | Library/Homebrew/cleaner.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/cleaner.rb | 41 | # 1. `info/dir` | COMMENT |
| LOW | Library/Homebrew/tap.rb | 241 | sig { returns(String) } | COMMENT |
| LOW | Library/Homebrew/tap.rb | 261 | sig { returns(String) } | COMMENT |
| LOW | Library/Homebrew/utils.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/utils.rb | 21 | # Removes the module part from the expression in the string. | COMMENT |
| LOW | Library/Homebrew/livecheck.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/dependency_collector.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/resource.rb | 181 | # This method evaluates the DSL specified in the `livecheck` block of the | COMMENT |
| LOW | Library/Homebrew/abstract_command.rb | 1 | # typed: strong | COMMENT |
| LOW | Library/Homebrew/build_options.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/build_options.rb | 21 | # args << "--qt-gui" if build.with? "qt" # "--with-qt" ==> build.with? "qt" | COMMENT |
| LOW | Library/Homebrew/build_options.rb | 61 | !with?(val) | COMMENT |
| LOW | Library/Homebrew/build_options.rb | 81 | # if build.head? | COMMENT |
| LOW | Library/Homebrew/description_cache_store.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/version.rb | 381 | # e.g. `ltopers-v2017-04-14.tar.gz` | COMMENT |
| LOW | Library/Homebrew/version.rb | 401 | COMMENT | |
| LOW | Library/Homebrew/version.rb | 441 | # e.g. `https://ftpmirror.gnu.org/autogen/autogen-5.5.7-5.i386.rpm` | COMMENT |
| LOW | Library/Homebrew/version.rb | 461 | # e.g. `https://cdn.nuxeo.com/nuxeo-9.2/nuxeo-server-9.2-tomcat.zip` | COMMENT |
| LOW | Library/Homebrew/development_tools.rb | 1 | # typed: strict | COMMENT |
| LOW | Library/Homebrew/formula.rb | 61 | # @abstract | COMMENT |
| LOW | Library/Homebrew/formula.rb | 141 | # The full path to this {Formula}. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 181 | # A symbol to indicate currently active {SoftwareSpec}. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 201 | # @api public | COMMENT |
| LOW | Library/Homebrew/formula.rb | 221 | # Will only be non-`nil` inside {.test}. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 561 | Bottle.new(self, bottle_specification, tag) if bottled?(tag) | COMMENT |
| LOW | Library/Homebrew/formula.rb | 581 | # @see .livecheck | COMMENT |
| LOW | Library/Homebrew/formula.rb | 841 | end | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1081 | # Need to install into the {.bin} but the makefile doesn't `mkdir -p prefix/bin`? | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1101 | # @api public | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1121 | # The directory where the formula's info files should be installed. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1141 | # @api public | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1161 | COMMENT | |
| LOW | Library/Homebrew/formula.rb | 1181 | # man1.install "example.1" | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1201 | # | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1221 | # This is symlinked into `HOMEBREW_PREFIX` after installation or with | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1241 | sig { returns(Pathname) } | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1261 | # The directory where the formula's shared files should be installed. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1281 | # ```ruby | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1301 | # | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1321 | # ``` | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1341 | # @api public | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1361 | sig { returns(Pathname) } | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1381 | # The directory where the formula's `fish` function files should be | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1401 | # This is symlinked into `HOMEBREW_PREFIX` after installation or with | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1481 | # The service specification for the software. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1501 | # | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1661 | # EOS | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1741 | delegate deprecated?: :"self.class" | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1761 | # @see .deprecate! | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1781 | # @return [Boolean] | COMMENT |
| LOW | Library/Homebrew/formula.rb | 1801 | # @!method disable_replacement_formula | COMMENT |
| LOW | Library/Homebrew/formula.rb | 2221 | # | COMMENT |
| 182 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Library/Homebrew/descriptions.rb | 52 | # Create an actual instance. | COMMENT |
| MEDIUM | Library/Homebrew/bottle.rb | 286 | # Create a separate file to mark a completed extraction. This avoids | COMMENT |
| MEDIUM | Library/Homebrew/bundle_version.rb | 92 | # Create a nicely formatted version (on a best effort basis). | COMMENT |
| MEDIUM | Library/Homebrew/cleaner.rb | 20 | # Create a cleaner for the given formula. | COMMENT |
| MEDIUM | Library/Homebrew/dependency_collector.rb | 18 | # This class is used by `depends_on` in the formula DSL to turn dependency | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 3146 | # Create a hash of spec names (stable/head) to the list of dependencies under each | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 3266 | # This method is overridden in {Formula} subclasses to provide the | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 3284 | # This method is overridden in {Formula} subclasses to provide the | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 3598 | # Create a temporary directory then yield. When the block returns, | COMMENT |
| MEDIUM | Library/Homebrew/system_command.rb | 342 | # Create a new process group so that we can send `SIGINT` from | COMMENT |
| MEDIUM | Library/Homebrew/cmd/pyenv-sync.rb | 77 | # Create an unversioned symlinks | COMMENT |
| MEDIUM | Library/Homebrew/extend/os/linux/install.rb | 89 | # This file is generated by Homebrew. Do not modify. | COMMENT |
| MEDIUM | Library/Homebrew/rubocops/extend/formula_cop.rb | 29 | # This method is called by RuboCop and is the main entry point. | COMMENT |
| MEDIUM | Library/Homebrew/test/cleanup_spec.rb | 629 | # Create the latest version of testball so the older version is eligible for cleanup. | COMMENT |
| MEDIUM | Library/Homebrew/test/style_spec.rb | 44 | # This file is known to use non-rocket hashes and other things that trigger audit, | COMMENT |
| MEDIUM | Library/Homebrew/test/cmd/info_spec.rb | 584 | # Create a rack for the installed dependency | COMMENT |
| MEDIUM | Library/Homebrew/test/cmd/info_spec.rb | 591 | # Create a dependent keg whose tab references testball | COMMENT |
| MEDIUM | …ry/Homebrew/test/support/helper/cask/install_helper.rb | 32 | # Create the caskroom path | COMMENT |
| MEDIUM | …ry/Homebrew/test/support/helper/cask/install_helper.rb | 35 | # Create the staged_path (version directory) | COMMENT |
| MEDIUM | Library/Homebrew/test/cask/installer_spec.rb | 863 | # Create a different file | COMMENT |
| MEDIUM | Library/Homebrew/test/cask/artifact/symlinked_spec.rb | 30 | # Create a fake formula directory structure | COMMENT |
| MEDIUM | Library/Homebrew/standalone/init.rb | 4 | # This file is included before any other files. | COMMENT |
| MEDIUM | Library/Homebrew/livecheck/strategy/extract_plist.rb | 132 | # Create a copy of the cask that overrides the artifact URL with the | COMMENT |
| MEDIUM | Library/Homebrew/utils/analytics.rb | 284 | # This method is undocumented because it is not intended for general use. | COMMENT |
| MEDIUM | Library/Homebrew/utils/lock.sh | 1 | # Create a lock using `flock(2)`. A command name with arguments is required as | COMMENT |
| MEDIUM | Library/Homebrew/utils/curl.rb | 787 | # Create a hash from the header lines | COMMENT |
| MEDIUM | Library/Homebrew/prof/vernier_fork_guard.rb | 8 | # This file is required before Homebrew's usual command boot has installed | COMMENT |
| MEDIUM | Library/Homebrew/cask/audit.rb | 692 | # Create a temporary installer to process renames in the audit directory | COMMENT |
| MEDIUM | Library/Homebrew/services/formula_wrapper.rb | 17 | # Create a new `Service` instance from either a path or label. | COMMENT |
| MEDIUM | Library/Homebrew/dev-cmd/typecheck.rb | 287 | # This file is autogenerated. Do not edit it by hand. | COMMENT |
| MEDIUM | Library/Homebrew/dev-cmd/create.rb | 71 | # Create a formula from a tarball URL. | COMMENT |
| MEDIUM | .github/zizmor.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/dependabot.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/check-issues.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/stale-issues-and-prs.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/check-prs.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/workflows/actionlint.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | .github/codeql/extensions/homebrew-actions.yml | 1 | # This file is synced from the `.github` repository, do not modify it directly. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/install.rb | 110 | # Check if the installed formula is from a different tap | COMMENT |
| LOW | Library/Homebrew/install.rb | 214 | # Check if the formula we try to install is the same as installed | COMMENT |
| LOW | Library/Homebrew/linkage_checker.rb | 289 | # Check if this is a no_linkage dependency with unexpected linkage | COMMENT |
| LOW | Library/Homebrew/missing_formula.rb | 178 | # Check if the formula has been deleted in the last month. | COMMENT |
| LOW | Library/Homebrew/version.rb | 513 | # Check if this is a HEAD version. | COMMENT |
| LOW | Library/Homebrew/formula.rb | 4634 | # Check if `@rpath` install names should be preserved. | COMMENT |
| LOW | Library/Homebrew/cmd/update-report.rb | 149 | # Check if we can parse the JSON and do any Ruby-side follow-up. | COMMENT |
| LOW | Library/Homebrew/cmd/update_report/reporter.rb | 274 | # Check if the migration target is a cask (either in homebrew/cask or any other tap) | COMMENT |
| LOW | Library/Homebrew/rubocops/components_order.rb | 244 | # Check if each present_components is above rest of the present_components | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/desc_helper.rb | 22 | # Check if a desc is present. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/desc_helper.rb | 33 | # Check if the desc is empty. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 46 | # Check if "command-line" is spelled incorrectly in the desc. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 52 | # Check if the desc starts with an article. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 55 | # Check if invalid lowercase words are at the start of a desc. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 60 | # Check if the desc starts with the formula's or cask's name. | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 72 | # Check if a full stop is used at the end of a desc (apart from in the case of "etc."). | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 77 | # Check if the desc contains Unicode emojis or symbols (Unicode Other Symbols category). | COMMENT |
| LOW⚡ | Library/Homebrew/rubocops/shared/desc_helper.rb | 80 | # Check if the desc length exceeds maximum length. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 376 | # Check if a block method is called inside a block. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 389 | # Check if method_name is called among the direct children nodes in the given node. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 390 | # Check if the node itself is the method. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 406 | # Check if method_name is called among every descendant node of given node. | COMMENT |
| LOW | Library/Homebrew/rubocops/shared/helper_functions.rb | 441 | # Check if negation is present in the given node. | COMMENT |
| LOW | Library/Homebrew/rubocops/cask/no_overrides.rb | 45 | # Check if multiple `on_{system}` blocks have different `depends_on macos:` versions. | COMMENT |
| LOW | Library/Homebrew/test/cask/cask_loader_spec.rb | 514 | # Set HOMEBREW_LIBRARY to our test prefix for the security check | COMMENT |
| LOW | Library/Homebrew/unpack_strategy/dmg.rb | 45 | # Check if path is considered disk image metadata. | COMMENT |
| LOW | Library/Homebrew/unpack_strategy/dmg.rb | 51 | # Check if path is a symlink to a system directory (commonly to /Applications). | COMMENT |
| LOW | Library/Homebrew/unpack_strategy/tar.rb | 31 | # Check if `tar` can list the contents, then it can also extract it. | COMMENT |
| LOW | Library/Homebrew/bundle/extensions/flatpak.rb | 181 | # Check if package is installed at all (regardless of remote) | COMMENT |
| LOW | Library/Homebrew/utils/gem_setup.rb | 161 | # Write the file atomically, in case we're working parallel | COMMENT |
| LOW | Library/Homebrew/utils/gem_setup.rb | 231 | # Check if the install is intact. This is useful if any gems are added to gitignore. | COMMENT |
| LOW | Library/Homebrew/utils/curl.rb | 381 | # Check if a URL is protected by CloudFlare (e.g. badlion.net and jaxx.io). | COMMENT |
| LOW | Library/Homebrew/utils/curl.rb | 393 | # Check if a URL is protected by Incapsula (e.g. corsair.com). | COMMENT |
| LOW | Library/Homebrew/utils/service.rb | 7 | # Check if a service is running for a specified formula. | COMMENT |
| LOW | Library/Homebrew/utils/service.rb | 19 | # Check if a service file is installed in the expected location. | COMMENT |
| LOW | Library/Homebrew/os/linux/elf.rb | 230 | # Check if DF_1_NODEFLIB is set | COMMENT |
| LOW | Library/Homebrew/cask/cask.rb | 390 | # Check if the installed cask is outdated. | COMMENT |
| LOW | Library/Homebrew/cask/caskroom.rb | 48 | # Check if the cask is installed with an old name. | COMMENT |
| LOW | Library/Homebrew/cask/artifact/symlinked.rb | 116 | # Check if the target file is a symlink that originates from a formula | COMMENT |
| LOW | Library/Homebrew/services/cli.rb | 46 | # Check if formula has been found. | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-formula-pr.rb | 351 | # Check if there are any resources that still need manual update: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/diagnostic.rb | 1258 | # If quarantine is not available, a warning is already shown by check_cask_quarantine_support so just return | COMMENT |
| LOW | Library/Homebrew/keg.rb | 836 | # no need to put .app bundles in the path, the user can just use | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 2092 | # libraries before trying to utilize Frameworks, many of which will be from | COMMENT |
| LOW | Library/Homebrew/cmd/log.rb | 40 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| LOW | Library/Homebrew/rubocops/lines.rb | 1074 | problem "`Dir([\"#{string_content(path)}\"])` is unnecessary; just use `#{match[0]}`" | CODE |
| MEDIUM | Library/Homebrew/rubocops/unreferenced_let.rb | 18 | # example or an included test harness) cannot be seen, so the cop stays conservative and | COMMENT |
| LOW | Library/Homebrew/unpack_strategy/dmg.rb | 103 | # For HFS, just use <mount-path> | COMMENT |
| MEDIUM | Library/Homebrew/livecheck/strategy/json.rb | 19 | # `strategy :json` in a `livecheck` block (in conjunction with a | COMMENT |
| MEDIUM | Library/Homebrew/livecheck/strategy/yaml.rb | 19 | # `strategy :yaml` in a `livecheck` block (in conjunction with a | COMMENT |
| MEDIUM | Library/Homebrew/livecheck/strategy/xml.rb | 23 | # `strategy :xml` in a `livecheck` block (in conjunction with a | COMMENT |
| LOW | Library/Homebrew/utils/gzip.rb | 27 | # 1. Ideally, we would just set mtime = 0 if SOURCE_DATE_EPOCH is absent, but Ruby's | COMMENT |
| MEDIUM | Library/Homebrew/utils/github/artifacts.rb | 17 | # We use a download strategy here to leverage the Homebrew cache | COMMENT |
| LOW | Library/Homebrew/os/mac/ffi/core_foundation.rb | 50 | # ASCII-8BIT could be anything, so just use Latin-1 | COMMENT |
| LOW | Library/Homebrew/dev-cmd/generate-cask-ci-matrix.rb | 181 | # if it's just a single OS test then we can just use the two real arch runners | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-revision.rb | 31 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-compatibility-version.rb | 29 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-formula-pr.rb | 108 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| LOW | Library/Homebrew/dev-cmd/bump-cask-pr.rb | 71 | # As this command is simplifying user-run commands then let's just use a | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/test/utils_spec.rb | 119 | .to eq({ name: "John Doe", email: "john.doe@example.com" }) | CODE |
| LOW | Library/Homebrew/test/utils_spec.rb | 122 | expect { described_class.parse_author!("John Doe") } | CODE |
| LOW | Library/Homebrew/test/missing_formula_spec.rb | 79 | (tap_path/"Formula/deleted-formula.rb").write "placeholder" | CODE |
| LOW | …y/Homebrew/test/livecheck/strategy/sourceforge_spec.rb | 35 | <description><![CDATA[Files from abc Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod t | CODE |
| LOW | …y/Homebrew/test/livecheck/strategy/sourceforge_spec.rb | 35 | <description><![CDATA[Files from abc Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod t | CODE |
| LOW | Library/Homebrew/test/utils/curl_spec.rb | 348 | let(:user_agent_string) { "Lorem ipsum dolor sit amet" } | CODE |
| LOW | Library/Homebrew/test/utils/curl_spec.rb | 348 | let(:user_agent_string) { "Lorem ipsum dolor sit amet" } | CODE |
| LOW | Library/Homebrew/test/utils/user_spec.rb | 36 | fake_user ttys002 Oct 1 11:27 | CODE |
| LOW | Library/Homebrew/test/utils/github/actions_spec.rb | 7 | let(:message) { "lorem ipsum" } | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 28 | annotation = described_class.new(:warning, "lorem ipsum", file: "file.txt") | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 30 | expect(annotation.to_s).to eq "::warning file=file.txt::lorem ipsum" | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 34 | annotation = described_class.new(:warning, "lorem ipsum", file: "file.txt", title: "foo") | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 36 | expect(annotation.to_s).to eq "::warning file=file.txt,title=foo::lorem ipsum" | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 40 | annotation = described_class.new(:error, "lorem ipsum", file: "file.txt", line: 3) | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 42 | expect(annotation.to_s).to eq "::error file=file.txt,line=3::lorem ipsum" | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 46 | annotation = described_class.new(:error, "lorem ipsum", file: "file.txt", line: 3, column: 18) | CODE |
| LOW⚡ | Library/Homebrew/test/utils/github/actions_spec.rb | 48 | expect(annotation.to_s).to eq "::error file=file.txt,line=3,col=18::lorem ipsum" | CODE |
| LOW | Library/Homebrew/test/cask/artifact/app_spec.rb | 172 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 52 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 56 | .with("chown", args: ["-R", "--", "fake_user:staff", fake_pathname], sudo: true) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 64 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 70 | args: ["-R", "--", "fake_user:staff", fake_pathname, fake_pathname], | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 95 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 102 | .with("chown", args: ["-R", "--", "fake_user:staff", fake_pathname], sudo: true) | CODE |
| LOW⚡ | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 110 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| LOW | …brary/Homebrew/test/cask/dsl/shared_examples/staged.rb | 124 | allow(User).to receive(:current).and_return(User.new("fake_user")) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | Library/Homebrew/tap.rb | 556 | # Redirect targets must pass the same allow/forbid checks as requested remotes. | COMMENT |
| HIGH | Library/Homebrew/dev-cmd/pr-pull.rb | 165 | ohai "Ignoring workflow #{workflow} as requested by `--ignore-missing-artifacts`" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Library/Homebrew/formula.rb | 4223 | # If you maintain your own repository, you can add your own bottle links. | COMMENT |
| MEDIUM | Library/Homebrew/formula.rb | 4289 | # If a block is provided you can also add {.depends_on} and {Patch}es just to the {.head} {SoftwareSpec}. | COMMENT |
| LOW | Library/Homebrew/test_bot/formulae.rb | 126 | # If we depend on a versioned formula, make sure to unlink any other | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/Brew-Bundle-and-Brewfile.md | 290 | # In this example, pass `--appdir=~/Applications` and `--require_sha` | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/extend/kernel.rb | 198 | # NOTE: This method is **not** thread-safe – other threads | COMMENT |
| LOW | Library/Homebrew/bundle/brew.rb | 403 | # Step 1: Sort by formula full name while putting tap formulae behind core formulae. | COMMENT |
| LOW | Library/Homebrew/bundle/brew.rb | 415 | # Step 2: Sort by formula dependency topology. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Library/Homebrew/bundle/brew.rb | 403 | # Step 1: Sort by formula full name while putting tap formulae behind core formulae. | COMMENT |
| LOW | Library/Homebrew/bundle/brew.rb | 415 | # Step 2: Sort by formula dependency topology. | COMMENT |
| LOW | Library/Homebrew/services/formula_wrapper.rb | 279 | # The purpose of this function is to lazy load the Homebrew::Service class | COMMENT |