🍻 Default and OSS formulae (built-from-source packages) for the package manager for everywhere
This report summarizes scanner evidence for Homebrew/homebrew-core, a Ruby project with 15,650 GitHub stars. SynthScan examined 596,202 lines of code across 8767 source files, recording 208 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 0.7 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 176 finding(s).
Are imports declared and package/API names verified? 24 finding(s).
Are wrappers, guards, and repeated structures necessary? 13 finding(s).
Which changes need focused human review? 208 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 208 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .rubocop.yml | 1 | # This file is synced from `Homebrew/brew` by the `.github` repository, do not modify it directly. | COMMENT |
| MEDIUM | Formula/r/rip2.rb | 36 | # Create a test file and verify rip can delete it | COMMENT |
| MEDIUM | Formula/r/rbenv.rb | 36 | # Create a fake ruby version and executable. | COMMENT |
| MEDIUM | Formula/r/rabbitmq.rb | 45 | # Create the rabbitmq-env.conf file | COMMENT |
| MEDIUM | Formula/r/rsql.rb | 43 | # Create a sample CSV file | COMMENT |
| MEDIUM | Formula/r/rtmidi.rb | 46 | # Creating a MIDI client needs a reachable MIDIServer, which headless macOS 27 CI lacks (kMIDINoConnection) | COMMENT |
| MEDIUM | Formula/u/uutils-diffutils.rb | 48 | # Create a temporary compatibility executable for previous 'u' prefix. | COMMENT |
| MEDIUM | Formula/u/unxip.rb | 50 | # Create a sample xar archive just to satisfy a .xip header, then test | COMMENT |
| MEDIUM | Formula/u/uutils-findutils.rb | 48 | # Create a temporary compatibility executable for previous 'u' prefix. | COMMENT |
| MEDIUM | Formula/u/uhdm.rb | 57 | # Create a minimal .uhdm file and ensure executables work | COMMENT |
| MEDIUM | Formula/i/ic-wasm.rb | 33 | # Create a wasm module with a custom section for ICP metadata | COMMENT |
| MEDIUM | Formula/n/nodenv.rb | 34 | # Create a fake node version and executable. | COMMENT |
| MEDIUM | Formula/g/gnuradio.rb | 215 | # Create a directory for Homebrew to put .pth files pointing to GNU Radio | COMMENT |
| MEDIUM | Formula/g/glibc.rb | 293 | # This file is generated by Homebrew. Do not modify. | COMMENT |
| MEDIUM | Formula/g/gator.rb | 36 | # Create a test manifest file | COMMENT |
| MEDIUM | Formula/g/gator.rb | 58 | # Create a test constraint template | COMMENT |
| MEDIUM | Formula/g/gator.rb | 94 | # Create a test constraint file | COMMENT |
| MEDIUM | Formula/g/git-delta.rb | 46 | # Create a test repo | COMMENT |
| MEDIUM | Formula/g/gomi.rb | 37 | # Create a trash directory | COMMENT |
| MEDIUM | Formula/z/zsh-async.rb | 30 | # Create a callback function to process results | COMMENT |
| MEDIUM | Formula/t/tcl-tk.rb | 208 | # Create an instance | COMMENT |
| MEDIUM | Formula/t/tcl-tk@8.rb | 187 | # Create an instance | COMMENT |
| MEDIUM | Formula/s/sparse.rb | 32 | # Create the parent directories ourselves. | COMMENT |
| MEDIUM | Formula/s/svgbob.rb | 34 | # Create a symlink to not break compatibility | COMMENT |
| MEDIUM | Formula/s/sstp-client.rb | 30 | # Create a directory needed by sstpc for privilege separation | COMMENT |
| MEDIUM | Formula/s/spr.rb | 57 | # Create an empty commit, which is set to be upstream | COMMENT |
| MEDIUM | Formula/s/sloccount.rb | 43 | bin.mkpath # Create the install dir or install falls over | CODE |
| MEDIUM | Formula/a/agda.rb | 159 | # Create the cabal file for the language server build | COMMENT |
| MEDIUM | Formula/a/async-profiler.rb | 42 | # Create a simple Java program that sleeps for testing | COMMENT |
| MEDIUM | Formula/a/as-tree.rb | 55 | # This file is automatically @generated by Cargo. | COMMENT |
| MEDIUM | Formula/a/ab-av1.rb | 32 | # Create a 5 second test MP4 (same as ffmpeg test) as the test fixture is too minimal | COMMENT |
| MEDIUM | Formula/f/ffmpeg@6.rb | 179 | # Create a 5 second test MP4 | COMMENT |
| MEDIUM | Formula/f/ffmpeg@7.rb | 164 | # Create a 5 second test MP4 | COMMENT |
| MEDIUM | Formula/f/ffmpeg-full.rb | 175 | # Create a 5 second test MP4 | COMMENT |
| MEDIUM | Formula/f/ffmpeg@8.rb | 101 | # Create a 5 second test MP4 | COMMENT |
| MEDIUM | Formula/f/ffmpeg.rb | 107 | # Create a 5 second test MP4 | COMMENT |
| MEDIUM | Formula/f/fuseki.rb | 28 | # Create a location for dataset and log files, | COMMENT |
| MEDIUM | Formula/f/ffmpeg@4.rb | 175 | # Create a 5 second test MP4 | COMMENT |
| MEDIUM | Formula/f/ffmpeg@2.8.rb | 133 | # Create a 5 second test MP4 | COMMENT |
| MEDIUM | Formula/f/fake-gcs-server.rb | 43 | # Create a bucket | COMMENT |
| MEDIUM | Formula/f/ffmpeg@5.rb | 181 | # Create a 5 second test MP4 | COMMENT |
| MEDIUM | Formula/o/openjdk@8.rb | 124 | # Create a framework-like header shim that the saproc.make -F flag will find | COMMENT |
| MEDIUM | Formula/o/ohdear-cli.rb | 19 | # Create a symlink to not break compatibility | COMMENT |
| MEDIUM | Formula/m/mycorrhiza.rb | 46 | # Create a hypha | COMMENT |
| MEDIUM | Formula/m/mender-artifact.rb | 53 | # Create a test artifact | COMMENT |
| MEDIUM | Formula/m/mingw-w64.rb | 98 | # Create a mingw symlink, expected by GCC | COMMENT |
| MEDIUM | Formula/m/minizign.rb | 35 | # Create a test file and sign it | COMMENT |
| MEDIUM | Formula/c/cvs.rb | 4 | # Creating a useful testcase: https://mrsrl.stanford.edu/~brian/cvstutorial/ | COMMENT |
| MEDIUM | Formula/c/clog.rb | 48 | # Create a rule to suppress any line containing the word 'ignore' | COMMENT |
| MEDIUM | Formula/d/dooit.rb | 115 | # Create a topic | COMMENT |
| MEDIUM | Formula/d/dooit.rb | 122 | # Create a todo in the topic | COMMENT |
| MEDIUM | Formula/d/duckdb.rb | 40 | # Create a symlink to not break compatibility | COMMENT |
| MEDIUM | Formula/v/vmdktool.rb | 56 | # Create a blank disk image in raw format | COMMENT |
| MEDIUM | Formula/v/virtualfish.rb | 90 | # Create a virtualenv 'new_virtualenv' | COMMENT |
| MEDIUM | Formula/q/qcli.rb | 46 | # Create an example mp4 file | COMMENT |
| MEDIUM | Formula/q/qcli.rb | 49 | # Create a qcli report from the mp4 | COMMENT |
| MEDIUM | Formula/q/qbe.rb | 31 | function w $add(w %a, w %b) { # Define a function add | CODE |
| MEDIUM | Formula/b/borgbackup.rb | 62 | # Create a repo and archive, then test extraction. | COMMENT |
| MEDIUM | Formula/b/bandicoot.rb | 41 | # Create a test script that compiles a program | COMMENT |
| MEDIUM | Formula/b/borgmatic.rb | 94 | # Create a fake borg info json | COMMENT |
| 20 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Formula/r/redir.rb | 44 | # Check if the process is running | COMMENT |
| LOW | Formula/r/redir.rb | 47 | # Check if the port redirect works | COMMENT |
| LOW | Formula/i/inspectrum.rb | 35 | # Set QT_QPA_PLATFORM to minimal to avoid error: | COMMENT |
| LOW | Formula/n/neovim-qt.rb | 59 | # Set QT_QPA_PLATFORM to minimal to avoid error "qt.qpa.xcb: could not connect to display" | COMMENT |
| LOW | Formula/z/zstd.rb | 49 | # Set it to `ON` to be explicit about the configuration. | COMMENT |
| LOW | Formula/t/tarsnap-gui.rb | 51 | # Set QT_QPA_PLATFORM to minimal to avoid error "could not connect to display" | COMMENT |
| LOW | Formula/a/augustus.rb | 42 | # Set PREFIX to prevent symlinking into /usr/local/bin/ | COMMENT |
| LOW | Formula/f/fceux.rb | 57 | # Set QT_QPA_PLATFORM to minimal to avoid error: | COMMENT |
| LOW | Formula/o/ocaml-findlib.rb | 55 | # Check if we need to rebuild ocaml-findlib to be used as a library | COMMENT |
| LOW | Formula/lib/librasterlite2.rb | 63 | # Check if this can be removed with the next release. | COMMENT |
| LOW | Formula/m/matplotplusplus.rb | 45 | # Set QT_QTP_PLATFORM to "minimal" for headless/sandboxed testing | COMMENT |
| LOW | Formula/c/clang-uml.rb | 58 | # Check if clang-uml is linked properly | COMMENT |
| LOW | Formula/c/clang-include-graph.rb | 48 | # Check if clang-include-graph is linked properly | COMMENT |
| LOW | Formula/d/duck.rb | 136 | # Set MACOSX_DEPLOYMENT_TARGET to avoid linker errors when building rococoa. | COMMENT |
| LOW | Formula/q/qjackctl.rb | 58 | # Set QT_QPA_PLATFORM to minimal to avoid error "qt.qpa.xcb: could not connect to display" | COMMENT |
| LOW | Formula/q/qalculate-qt.rb | 40 | # Set QT_QPA_PLATFORM to minimal to avoid error "qt.qpa.xcb: could not connect to display" | COMMENT |
| LOW | Formula/q/qbe.rb | 34 | ret %c # Return the result | CODE |
| LOW | Formula/q/qmmp.rb | 111 | # Set QT_QPA_PLATFORM to minimal to avoid error "qt.qpa.xcb: could not connect to display" | COMMENT |
| LOW | Formula/q/qsoas.rb | 78 | # Set QT_QPA_PLATFORM to minimal to avoid error "qt.qpa.xcb: could not connect to display" | COMMENT |
| LOW | Formula/e/etsh.rb | 39 | # Check if `tshall` is supported in Ubuntu 18.04. | COMMENT |
| LOW | Formula/e/ejabberd.rb | 75 | # Set CPP to work around cpp shim issue: | COMMENT |
| LOW | Formula/b/bareos-client.rb | 100 | # Check if bareos-fd starts at all. | COMMENT |
| LOW | Formula/b/bareos-client.rb | 102 | # Check if the configuration is valid. | COMMENT |
| LOW | Formula/l/lispkit.rb | 25 | # Check if user provided -r or --root flag | COMMENT |
| LOW | Formula/p/python@3.15.rb | 466 | # Check if sqlite is ok, because we build with --enable-loadable-sqlite-extensions | COMMENT |
| LOW | Formula/p/python@3.15.rb | 473 | # Check if some other modules import. Then the linked libs are working. | COMMENT |
| LOW | Formula/p/python@3.11.rb | 435 | # Check if sqlite is ok, because we build with --enable-loadable-sqlite-extensions | COMMENT |
| LOW | Formula/p/python@3.11.rb | 442 | # Check if some other modules import. Then the linked libs are working. | COMMENT |
| LOW | Formula/p/python@3.10.rb | 418 | # Check if sqlite is ok, because we build with --enable-loadable-sqlite-extensions | COMMENT |
| LOW | Formula/p/python@3.10.rb | 425 | # Check if some other modules import. Then the linked libs are working. | COMMENT |
| LOW | Formula/p/python-freethreading.rb | 402 | # Check if sqlite is ok, because we build with --enable-loadable-sqlite-extensions | COMMENT |
| LOW | Formula/p/python-freethreading.rb | 409 | # Check if some other modules import. Then the linked libs are working. | COMMENT |
| LOW | Formula/p/pivy.rb | 54 | # Set QT_QPA_PLATFORM to minimal to avoid error: | COMMENT |
| LOW | Formula/p/python@3.14.rb | 513 | # Check if sqlite is ok, because we build with --enable-loadable-sqlite-extensions | COMMENT |
| LOW | Formula/p/python@3.14.rb | 520 | # Check if some other modules import. Then the linked libs are working. | COMMENT |
| LOW | Formula/p/pc6001vx.rb | 52 | # Set QT_QPA_PLATFORM to minimal to avoid error: | COMMENT |
| LOW | Formula/p/python@3.13.rb | 467 | # Check if sqlite is ok, because we build with --enable-loadable-sqlite-extensions | COMMENT |
| LOW | Formula/p/python@3.13.rb | 474 | # Check if some other modules import. Then the linked libs are working. | COMMENT |
| LOW | Formula/p/python@3.9.rb | 403 | # Check if sqlite is ok, because we build with --enable-loadable-sqlite-extensions | COMMENT |
| LOW | Formula/p/python@3.9.rb | 410 | # Check if some other modules import. Then the linked libs are working. | COMMENT |
| LOW | Formula/p/python@3.12.rb | 482 | # Check if sqlite is ok, because we build with --enable-loadable-sqlite-extensions | COMMENT |
| LOW | Formula/p/python@3.12.rb | 489 | # Check if some other modules import. Then the linked libs are working. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Formula/r/rom-tools.rb | 79 | # Needs more comprehensive tests | COMMENT |
| LOW | Formula/u/urdfdom.rb | 10 | # created a few releases on GitHub in the past but now they simply use tags. | COMMENT |
| LOW | Formula/u/urdfdom_headers.rb | 10 | # created a few releases on GitHub in the past but now they simply use tags. | COMMENT |
| MEDIUM | Formula/g/getdns.rb | 22 | # since the aforementioned first-party URL has a tendency to lead to an | COMMENT |
| MEDIUM | Formula/s/synergy-core.rb | 16 | # Upstream replaced the source repository with a signpost: https://github.com/symless/synergy | COMMENT |
| MEDIUM | Formula/s/synergy-core.rb | 85 | # them when upgrading synergy-core. | COMMENT |
| MEDIUM | Formula/s/synergy-core.rb | 105 | assert_match version.to_s, shell_output("#{bin}/synergy-core --version") | CODE |
| MEDIUM | Formula/s/synergy-core.rb | 106 | assert_match "synergy-core: failed to load config", shell_output("#{bin}/synergy-core server 2>&1", 4) | CODE |
| MEDIUM | Formula/lib/libvisual-projectm.rb | 28 | # installation and leverage brew's auto-symlinking | COMMENT |
| MEDIUM | Formula/d/dumb.rb | 6 | # Essentially Zlib but with modified and added clauses that aren't intended to restrict usage | COMMENT |
| MEDIUM⚡ | Formula/d/delve.rb | 3 | homepage "https://github.com/go-delve/delve" | CODE |
| MEDIUM⚡ | Formula/d/delve.rb | 4 | url "https://github.com/go-delve/delve/archive/refs/tags/v1.27.2.tar.gz" | CODE |
| MEDIUM⚡ | Formula/d/delve.rb | 7 | head "https://github.com/go-delve/delve.git", branch: "master" | CODE |
| LOW | Formula/d/ddd.rb | 87 | # and using --nw causes them to just pass through to normal execution. | COMMENT |
| MEDIUM | Formula/x/xwpe.rb | 48 | # on any one keystroke firing, so it is robust on every platform. A hard kill | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Formula/r/ripsecrets.rb | 42 | fake_key = Array.new(36).map { keyspace.sample } | CODE |
| LOW | Formula/r/ripsecrets.rb | 44 | (testpath/"test.txt").write("ghp_#{fake_key.join} # pragma: allowlist secret") | CODE |
| LOW | Formula/u/uthash.rb | 36 | char name[] = "John Doe"; | CODE |
| LOW | Formula/n/nb.rb | 32 | ENV["EDITOR"] = "placeholder" | CODE |
| LOW | Formula/g/git-mob.rb | 24 | system "git", "config", "--global", "user.name", "Jane Doe" | CODE |
| LOW | Formula/t/texlive.rb | 596 | \section*{Lorem Ipsum} | CODE |
| LOW | Formula/m/mailcatcher.rb | 203 | assert_match "bob@example.org", shell_output("curl --silent http://localhost:#{http_port}/messages") | CODE |
| LOW | Formula/m/mcp-atlassian.rb | 517 | ENV["JIRA_USERNAME"] = "user@example.com" | CODE |
| LOW | Formula/m/mdcat.rb | 47 | assert_match "lorem ipsum dolor sit amet", output | CODE |
| LOW | Formula/m/mdcat.rb | 47 | assert_match "lorem ipsum dolor sit amet", output | CODE |
| LOW | Formula/j/jwt-ui.rb | 37 | # "name": "John Doe", | COMMENT |
| LOW | Formula/j/jwt-ui.rb | 45 | assert_equal "John Doe", JSON.parse(output)["payload"]["name"] | CODE |
| LOW | Formula/c/ctemplate.rb | 48 | dict.SetValue("NAME", "Jane Doe"); | CODE |
| LOW | Formula/x/xml2rfc.rb | 130 | <author fullname="John Doe" initials="J." role="editor" surname="Doe"> | CODE |
| LOW | Formula/k/karn.rb | 46 | system "git", "config", "user.email", "test@test.com" | CODE |
| LOW⚡ | Formula/l/lolcrab.rb | 34 | assert_match "\e[38;", pipe_output(bin/"lolcrab", "lorem ipsum dolor sit amet") | CODE |
| LOW⚡ | Formula/l/lolcrab.rb | 34 | assert_match "\e[38;", pipe_output(bin/"lolcrab", "lorem ipsum dolor sit amet") | CODE |
| LOW⚡ | Formula/l/lolcrab.rb | 35 | assert_match "\e[48;", pipe_output("#{bin}/lolcrab -i", "lorem ipsum dolor sit amet") | CODE |
| LOW⚡ | Formula/l/lolcrab.rb | 35 | assert_match "\e[48;", pipe_output("#{bin}/lolcrab -i", "lorem ipsum dolor sit amet") | CODE |
| LOW | Formula/l/lorem.rb | 24 | assert_equal "lorem ipsum", shell_output("#{bin}/lorem -n 2").strip.downcase | CODE |
| LOW⚡ | Formula/p/phpunit.rb | 98 | Email::fromString('user@example.com') | CODE |
| LOW⚡ | Formula/p/phpunit.rb | 112 | 'user@example.com', | CODE |
| LOW⚡ | Formula/p/phpunit.rb | 113 | Email::fromString('user@example.com') | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Formula/r/rig.rb | 41 | @@ -21,6 +21,7 @@ | COMMENT |
| LOW | Formula/g/gts.rb | 81 | +#include <netpbm/pgm.h> | COMMENT |
| LOW | Formula/s/spice-gtk.rb | 121 | +#!/usr/bin/env python3 | COMMENT |
| LOW | Formula/s/seexpr.rb | 61 | # # | # | COMMENT |
| LOW | Formula/a/agda.rb | 241 | COMMENT | |
| LOW | Formula/a/argyll-cms.rb | 41 | # The "Jam Documentation" page has a banner stating: | COMMENT |
| LOW | Formula/a/airspy.rb | 21 | sha256 cellar: :any, ventura: "76cc6e04ec293907b1be68033f1725156ffd6bc7a6c0d95bd00477b7805 | COMMENT |
| LOW | Formula/f/ffmpeg@4.rb | 21 | sha256 arm64_sequoia: "8ac5df0df1c550a37563aaae53a25a1278a0f09684de47057801a01e1427eb68" | COMMENT |
| LOW | Formula/o/onnxruntime.rb | 141 | (testpath/"test.cc").write <<~CPP | COMMENT |
| LOW | Formula/o/opencascade.rb | 81 | system "cmake", "--install", "build" | COMMENT |
| LOW | Formula/h/harbour.rb | 61 | # 2. Avoid using libtool due to `ld: unknown options: -force_cpusubtype_ALL` | COMMENT |
| LOW | Formula/lib/libagg.rb | 61 | "--disable-ctrl", # No need to run these during configuration | COMMENT |
| LOW | Formula/m/movgrab.rb | 21 | # * https://github.com/ColumPaget/Movgrab/issues/5#issuecomment-591343423 | COMMENT |
| LOW | Formula/c/cryptopp.rb | 41 | COMMENT | |
| LOW | Formula/v/vip.rb | 1 | class Vip < Formula | COMMENT |
| LOW | Formula/q/qtbase.rb | 181 | system "cmake", "--install", "build" | COMMENT |
| LOW | Formula/q/qt@5.rb | 21 | sha256 cellar: :any, sonoma: "0811fdc7dce91d28f6c031079ec24e85f1f3bfbccbc66415e98aef7581d | COMMENT |
| LOW | Formula/q/qt.rb | 161 | INCLUDEPATH += #{formula_opt_include("vulkan-headers")} | COMMENT |
| LOW | Formula/b/bsdiff.rb | 61 | +#include <sys/types.h> | COMMENT |
| LOW | Formula/k/kondo.rb | 41 | # Write 10 bytes into the dummy file. | COMMENT |
| LOW | Formula/l/liquidsoap.rb | 41 | COMMENT | |
| LOW | Formula/l/luajit.rb | 1 | # NOTE: We have a policy of building only from tagged commits, but make a | COMMENT |
| LOW | Formula/p/pcre.rb | 21 | sha256 cellar: :any, arm64_golden_gate: "f90890232816daf79ef9efbf1ea32b9dc28970d6e078ecac538ab047592 | COMMENT |
| LOW | Formula/p/png2ico.rb | 61 | #if __GNUC__ > 2 | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Formula/t/teem.rb | 68 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | Formula/s/seexpr.rb | 70 | ---------------------#-------##-------#--------------------- | CODE |
| MEDIUM | Formula/f/freeswitch.rb | 76 | #--------------- | COMMENT |
| MEDIUM | Formula/f/freeswitch.rb | 78 | #--------------- | COMMENT |
| MEDIUM | Formula/f/freeswitch.rb | 120 | #----------- | COMMENT |
| MEDIUM | Formula/f/freeswitch.rb | 122 | #----------- | COMMENT |
| MEDIUM | Formula/b/bsc.rb | 147 | ## ========================= | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Formula/g/greenmask.rb | 72 | pg_restore_options: # pg_restore option (you can use the same options as pg_restore has) | CODE |
| LOW | Formula/c/curl.rb | 4 | # Don't forget to update both instances of the version in the GitHub mirror URL. | COMMENT |
| LOW | Formula/e/exim.rb | 156 | Don't forget to run it as root to be able to bind port 25. | CODE |
| LOW | Formula/e/erlang@28.rb | 5 | # Don't forget to update the documentation resource along with the url! | COMMENT |
| LOW | Formula/e/erlang@27.rb | 5 | # Don't forget to update the documentation resource along with the url! | COMMENT |
| LOW | Formula/e/erlang.rb | 5 | # Don't forget to update the documentation resource along with the url! | COMMENT |
| LOW | Formula/e/erlang@26.rb | 5 | # Don't forget to update the documentation resource along with the url! | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | Formula/n/nexus.rb | 206 | + URL bcutilUrl = org.bouncycastle.util.Arrays.class.getProtectionDomain().getCodeSource().getLocation(); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Formula/i/instalooter.rb | 126 | class UserAgentRequestHandler(six.moves.BaseHTTPServer.BaseHTTPRequestHandler): | CODE |
| LOW | Formula/c/ccm.rb | 112 | +def _iter_ccm_extension_entry_points(): | CODE |
| LOW | Formula/p/powershell.rb | 144 | def clear_native_dependencies(publish_path, runtime, dotnet) | CODE |
| LOW⚡ | Formula/p/phpunit.rb | 94 | public function testCanBeCreatedFromValidEmailAddress(): void | CODE |
| LOW⚡ | Formula/p/phpunit.rb | 102 | public function testCannotBeCreatedFromInvalidEmailAddress(): void | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Formula/g/gotests.rb | 55 | // TODO: Add test cases. | COMMENT |
| LOW | Formula/f/fbthrift.rb | 88 | # TODO: consider adding an actual test | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Formula/a/atmos.rb | 77 | # create scaffold | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Formula/p/pushpin.rb | 113 | except Exception: | CODE |