1.4

Adjusted Signal

1.4

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

26.7K

Stars

Nix

Language

884.1K

Lines of Code

3.4K

Files

934

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 685 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.1/100 · LOW

Are imports declared and package/API names verified? 131 finding(s).

Agent Over-Engineering Ratio 2.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 354 finding(s).

PR Review Velocity Impact 7.0/100 · LOW

Which changes need focused human review? 934 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 30MEDIUM 104LOW 800

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 934 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers233 hits · 234 pts

Severity	File	Line	Snippet	Context
LOW	ci/github-script/check-target-branch.ts	111	async function postPossibleMassRebuildReview(facts: TargetBranchReviewFacts) {	CODE
LOW	ci/github-script/lint-commits.ts	94	function makeConventionalCommitRegex(	CODE
LOW	ci/github-script/check-target-branch-policy.ts	51	export function evaluateTargetBranchPolicy({	CODE
LOW	maintainers/scripts/update.py	89	async def attr_instantiation_worker(	CODE
LOW	maintainers/scripts/kde/utils.py	107	def from_repo_metadata_checkout(cls, repo_metadata: pathlib.Path, unstable=False):	CODE
LOW	…preters/python/hooks/python-runtime-deps-check-hook.py	36	def get_manifest_text_from_wheel(wheel: str) -> str:	CODE
LOW	pkgs/development/tools/simavr/setup-hook-darwin.sh	28	function runFixupCFlagsForDarwinLast() {	CODE
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	148	def tag_from_github_atom_href(href: str) -> str \| None:	CODE
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	359	def _get_recent_tags_from_atom(self) -> list[str]:	CODE
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	382	def _get_latest_tag_from_fallbacks(self) -> str \| None:	CODE
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	639	def normalize_release_version(tag: str) -> str \| None:	CODE
LOW	…/python-modules/gradio/conftest-skip-network-errors.py	10	def pytest_runtest_makereport(item, call):	CODE
LOW	…es/nvidia-matmul-heuristics/test_nvmatmulheuristics.py	40	def test_runtime_scales_with_problem_size():	CODE
LOW	pkgs/development/compilers/llvm/update-git.py	20	def get_latest_chromium_build():	CODE
LOW	pkgs/desktops/gnome/extensions/update-extensions.py	94	def generate_extension_versions(	CODE
LOW	pkgs/by-name/se/segger-jlink/update.py	24	def find_latest_jlink_version() -> str:	CODE
LOW	…/vs/vscode-extension-update/vscode_extension_update.py	110	def get_supported_nix_systems(self) -> list[str]:	CODE
LOW	…/vs/vscode-extension-update/vscode_extension_update.py	136	def _get_nix_vscode_extension_src_hash(self, system: str) -> str:	CODE
LOW	…/vs/vscode-extension-update/vscode_extension_update.py	190	def _get_nix_vscode_extension_version(self) -> str:	CODE
LOW	…/vs/vscode-extension-update/vscode_extension_update.py	198	def _get_nix_vscode_extension_platforms(self) -> list[str]:	CODE
LOW⚡	…/vs/vscode-extension-update/vscode_extension_update.py	218	def _get_nix_vscode_extension_publisher(self) -> str:	CODE
LOW⚡	…/vs/vscode-extension-update/vscode_extension_update.py	224	def _get_nix_vscode_extension_name(self) -> str:	CODE
LOW⚡	…/vs/vscode-extension-update/vscode_extension_update.py	230	def get_marketplace_extension_data(self, extension_id: str) -> dict:	CODE
LOW	…/vs/vscode-extension-update/vscode_extension_update.py	242	def _version_passed_validation(self, version_info: dict) -> bool:	CODE
LOW	…/vs/vscode-extension-update/vscode_extension_update.py	257	def find_compatible_extension_version(	CODE
LOW	…/vs/vscode-extension-update/vscode_extension_update.py	317	def update_version_for_default_nix(self, content: str, new_version: str):	CODE
LOW	pkgs/by-name/di/discord/update.py	46	def distro_manifest_url_for_variant(variant: Variant) -> str:	CODE
LOW	…-name/ni/nixos-render-docs/src/tests/test_redirects.py	106	def test_leaf_identifier_moved_to_different_file(self):	CODE
LOW	…-name/ni/nixos-render-docs/src/tests/test_redirects.py	132	def test_non_leaf_identifier_moved_to_different_file(self):	CODE
LOW	…-name/ni/nixos-render-docs/src/tests/test_redirects.py	196	def test_basic_redirect_matching(self):	CODE
LOW	…-name/ni/nixos-render-docs/src/tests/test_redirects.py	211	def test_advanced_redirect_matching(self):	CODE
LOW	…-name/ni/nixos-render-docs/src/tests/test_redirects.py	246	def test_client_redirects_to_ghost_paths(self):	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	128	def test_attr_span_in_heading() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	250	def test_inline_comment_basic() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	277	def test_inline_comment_does_not_nest_in_code() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	292	def test_inline_comment_does_not_nest_elsewhere() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	311	def test_inline_comment_can_be_escaped() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	454	def test_gfm_alert_basic_structure_preserved() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	478	def test_gfm_alert_multi_paragraph() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	500	def test_gfm_alert_whitespace_tolerant() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_plugins.py	506	def test_gfm_alert_empty_body_allowed() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_options.py	31	def test_options_commonmark_legacy_anchors() -> None:	CODE
LOW	…by-name/ni/nixos-render-docs/src/tests/test_options.py	54	def test_options_commonmark_admonition_style(style, expected_file):	CODE
LOW	…y-name/ni/nixos-render-docs/src/tests/test_headings.py	61	def test_heading_id_incomplete() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	6	def test_shift_headings_basic() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	16	def test_shift_headings_preserves_multiline_and_endings() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	21	def test_shift_headings_ignores_fenced_nix_comments() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	27	def test_shift_headings_tilde_fence() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	33	def test_shift_headings_indented_heading_shifted() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	38	def test_shift_headings_four_space_indent_not_a_heading() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	91	def test_one_section_per_group_in_declared_order() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	96	def test_group_heading_carries_anchor() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	101	def test_group_description_headings_are_shifted() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	108	def test_entry_heading_carries_attr_path_and_anchor() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	115	def test_entry_anchor_drops_characters_an_anchor_cannot_hold() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	130	def test_entry_description_headings_are_shifted_below_entry() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	135	def test_fenced_nix_comment_is_not_shifted() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	139	def test_entries_are_grouped_by_declared_group() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	145	def test_located_at_links_to_the_revision() -> None:	CODE
LOW⚡	…/by-name/ni/nixos-render-docs/src/tests/test_nixdoc.py	153	def test_unsupported_schema_version_raises() -> None:	CODE
173 more matches not shown…

Over-Commented Block232 hits · 214 pts

Severity	File	Line	Snippet	Context
LOW	ci/github-script/prepare.ts	81	// commits. In this case we pick the "best" candidate by a fixed ordering of branches,	COMMENT
LOW	ci/github-script/bot.ts	321	// We intentionally don't use the mergeable or mergeable_state attributes.	COMMENT
LOW	maintainers/scripts/update-channel-branches.sh	61	# then the version is not annotated in git version. This sed	COMMENT
LOW	maintainers/scripts/copy-tarballs.pl	1	#! /usr/bin/env nix-shell	COMMENT
LOW	maintainers/scripts/nix-diff.sh	1	#!/usr/bin/env nix-shell	COMMENT
LOW	…ntainers/scripts/bootstrap-files/refresh-tarballs.bash	1	#!/usr/bin/env nix-shell	COMMENT
LOW	…ntainers/scripts/bootstrap-files/refresh-tarballs.bash	221	info "Writing '${target_file}'"	COMMENT
LOW	maintainers/scripts/haskell/update-stackage.sh	1	#! /usr/bin/env nix-shell	COMMENT
LOW	…cripts/haskell/upload-nixos-package-list-to-hackage.sh	1	#! /usr/bin/env nix-shell	COMMENT
LOW	maintainers/scripts/haskell/update-hackage.sh	1	#! /usr/bin/env nix-shell	COMMENT
LOW	maintainers/scripts/doc/escape-code-markup.py	81	# as if it was supposed to be usable standalone.	COMMENT
LOW	maintainers/scripts/auto-rebase/run.sh	41	# This does two things:	COMMENT
LOW	…gs/os-specific/bsd/openbsd/pkgs/compat/include/fcntl.h	1	#pragma once	COMMENT
LOW	…s-specific/bsd/openbsd/pkgs/compat/include/sys/types.h	1	#include_next <sys/types.h>	COMMENT
LOW	…-specific/bsd/openbsd/pkgs/compat/include/sys/endian.h	1	// Seems to be the only header for htonl	COMMENT
LOW	…s-specific/bsd/openbsd/pkgs/compat/include/sys/cdefs.h	1	#include_next <sys/cdefs.h>	COMMENT
LOW	…os-specific/linux/minimal-bootstrap/mes/gen-sources.sh	1	#!/usr/bin/env nix-shell	COMMENT
LOW	…s/os-specific/linux/minimal-bootstrap/heirloom/stubs.h	41	return 0;	COMMENT
LOW	…s/os-specific/linux/minimal-bootstrap/heirloom/stubs.h	61	#define _PC_PATH_MAX PATH_MAX	COMMENT
LOW	pkgs/os-specific/linux/net-tools/config.h	21	*/	COMMENT
LOW	pkgs/os-specific/linux/net-tools/config.h	41	#define HAVE_AFBLUETOOTH 0	COMMENT
LOW	pkgs/os-specific/linux/net-tools/config.h	61	#define HAVE_HWFDDI 0	COMMENT
LOW	pkgs/os-specific/linux/kernel/generate-config.pl	1	# This script runs `make config' to generate a Linux kernel	COMMENT
LOW	…gs/os-specific/darwin/by-name/si/signingUtils/utils.sh	1	# Work around for some odd behaviour where we can't codesign a file	COMMENT
LOW	pkgs/tools/typesetting/tex/texlive/build-tex-env.sh	1	# shellcheck shell=bash	COMMENT
LOW	pkgs/tools/typesetting/tex/texlive/build-tex-env.sh	161	# configure the paper size	COMMENT
LOW	…nt/interpreters/python/hooks/python-relax-deps-hook.sh	1	# shellcheck shell=bash	COMMENT
LOW	…nt/interpreters/python/hooks/python-relax-deps-hook.sh	21	# …	COMMENT
LOW	…evelopment/python-modules/setuptools-scm/setup-hook.sh	1	# Let built package know its version.	COMMENT
LOW	pkgs/development/python-modules/pysdl3/setup-hook.sh	1	# See also	COMMENT
LOW	…pment/python-modules/jupyterlab/seed-core-meta-hook.sh	1	# `jupyter labextension build` (jupyter-builder) needs @jupyterlab/core-meta's	COMMENT
LOW	pkgs/development/libraries/gmime/iconv-detect.h	1	/* This is an auto-generated header, DO NOT EDIT! */	COMMENT
LOW	pkgs/development/libraries/gmime/musl-iconv-detect.h	1	/* This is an auto-generated header, DO NOT EDIT! */	COMMENT
LOW	…ect-introspection/wrappers/g-ir-scanner-qemuwrapper.sh	1	#! @bash@/bin/bash	COMMENT
LOW	…cuda-modules/packages/setupCudaHook/setup-cuda-hook.sh	81		COMMENT
LOW	…nt/haskell-modules/configuration-hackage2nix/main.yaml	1	# pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml	COMMENT
LOW	…nt/haskell-modules/configuration-hackage2nix/main.yaml	21	# at version 1.4.6.0 and `aeson_1_5_0_0` at version 1.5.0.0.	COMMENT
LOW	…/development/compilers/ios-cross-compile/alt_wrapper.c	21	#ifndef NIX_APPLE_FRAMEWORKS	COMMENT
LOW	…elopment/compilers/graalvm/community-edition/update.sh	1	#!/usr/bin/env nix-shell	COMMENT
LOW	pkgs/development/compilers/dotnet/binary/update.sh	101	}	COMMENT
LOW	pkgs/development/compilers/ghc/subopt.bash	1	#!@shell@	COMMENT
LOW	pkgs/by-name/se/service-wrapper/service-wrapper.sh	1	#!@shell@	COMMENT
LOW	pkgs/by-name/se/service-wrapper/service-wrapper.sh	21	# This program is distributed in the hope that it will be useful,	COMMENT
LOW	pkgs/by-name/sw/switch-to-configuration-ng/src/main.rs	61		COMMENT
LOW	pkgs/by-name/sp/spotify/update.sh	1	#!/usr/bin/env nix-shell	COMMENT
LOW	pkgs/by-name/sp/spago-legacy/update.sh	1	#!/usr/bin/env nix-shell	COMMENT
LOW	pkgs/by-name/pl/plex-desktop/update.sh	1	#!/usr/bin/env nix-shell	COMMENT
LOW	pkgs/by-name/pl/plex-htpc/update.sh	1	#!/usr/bin/env nix-shell	COMMENT
LOW	pkgs/by-name/us/userborn-import-legacy/src/main.rs	1	//! One-shot migration from `update-users-groups.pl` state in `/var/lib/nixos`	COMMENT
LOW	pkgs/by-name/go/google-cloud-sdk/alpha__init__.py	1	# Copyright 2013 Google Inc. All Rights Reserved.	COMMENT
LOW	pkgs/by-name/go/google-cloud-sdk/beta__init__.py	1	# Copyright 2013 Google Inc. All Rights Reserved.	COMMENT
LOW	pkgs/by-name/hy/hylafaxplus/post-install.sh	1	# Parts of the `install` make target don't	COMMENT
LOW	…/ni/nixos-render-docs/src/nixos_render_docs/manpage.py	61		COMMENT
LOW	pkgs/by-name/ni/nixos-init/src/etc_overlay.rs	1	use std::{	COMMENT
LOW	…ame/ni/nixos-rebuild-ng/src/nixos_rebuild/constants.py	1	# mypy: disable-error-code=comparison-overlap	COMMENT
LOW	…y-name/ni/nixos-rebuild-ng/src/nixos_rebuild/tmpdir.py	21	# [0]: https://github.com/openssh/openssh-portable/blob/V_10_3_P1/sshconnect.h#L70	COMMENT
LOW	…y-name/ni/nixos-rebuild-ng/src/nixos_rebuild/tmpdir.py	41	# It's common for system configured temp dirs to be more	COMMENT
LOW	…gs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh	21	# (if unset or empty, defaults to EXECUTABLE)	COMMENT
LOW	pkgs/by-name/ap/applgrid/TFileStringLinkDef.h	1	#ifdef __CLING__	COMMENT
LOW	pkgs/by-name/ap/applgrid/TFileVectorLinkDef.h	1	#ifdef __CLING__	COMMENT
172 more matches not shown…

Self-Referential Comments39 hits · 115 pts

Severity	File	Line	Snippet	Context
MEDIUM	maintainers/scripts/update-typst-packages.py	4	# This file is formatted with `ruff format`.	COMMENT
MEDIUM	maintainers/scripts/haskell/update-stackage.sh	67	# Create a simple yaml version of the file.	COMMENT
MEDIUM	maintainers/scripts/haskell/update-stackage.sh	80	# This file is auto-generated by	COMMENT
MEDIUM	…intainers/scripts/haskell/update-cabal2nix-unstable.sh	19	echo "# This file defines $1-unstable, used by maintainers/scripts/haskell/regenerate-hackage-packages.sh." > "$output	CODE
MEDIUM	…ripts/haskell/regenerate-transitive-broken-packages.sh	16	# This file is automatically generated by	COMMENT
MEDIUM	pkgs/development/interpreters/python/wrap.sh	13	# Create an empty table of python paths (see doc on _addToPythonPath	COMMENT
MEDIUM	pkgs/development/interpreters/lua-5/utils.sh	121	# # Create an empty table of paths (see doc on loadFromPropagatedInputs	COMMENT
MEDIUM	pkgs/development/interpreters/octave/wrap.sh	99	# Create an empty table of Octave paths.	COMMENT
MEDIUM	…opment/python-modules/emerge/tests/first-simulation.py	3	mm = 0.001 # Define a millimeter	CODE
MEDIUM	…dules/configuration-hackage2nix/transitive-broken.yaml	1	# This file is automatically generated by	COMMENT
MEDIUM	…askell-modules/configuration-hackage2nix/stackage.yaml	2	# This file is auto-generated by	COMMENT
MEDIUM	…ent/compilers/dart/source/unbundle/replace_gn_files.py	47	# Create a backup copy for --undo.	COMMENT
MEDIUM	pkgs/by-name/sd/sdlpop/prince.sh	12	# Create the data symlink or update it (in case it is a symlink, else the user	COMMENT
MEDIUM	pkgs/by-name/ad/adguardhome/update.sh	4	# This file is based on /pkgs/servers/gotify/update.sh	COMMENT
MEDIUM	pkgs/by-name/ni/nixos-install/nixos-install.sh	318	# Create a bind mount for each of the mount points inside the target file	COMMENT
MEDIUM	pkgs/by-name/in/installShellFiles/setup-hook.sh	80	# Create the out-path	COMMENT
MEDIUM	pkgs/by-name/co/coder/update.sh	13	# Define the platforms	COMMENT
MEDIUM	…a/calamares-nixos-extensions/src/modules/nixos/main.py	269	# Define a user account. Don't forget to set a password with ‘passwd’.	COMMENT
MEDIUM	pkgs/by-name/st/steamcmd/steamcmd.sh	9	# Create a facsimile Steam root if it doesn't exist.	COMMENT
MEDIUM	pkgs/by-name/me/melos/update.sh	39	# Create a temporary directory	COMMENT
MEDIUM	pkgs/by-name/fo/foundry/update-svm-lists.sh	21	# Create the directory (no error if it already exists)	COMMENT
MEDIUM	pkgs/stdenv/generic/setup.sh	1172	# This function is useful for debugging broken Nix builds. It dumps all environment variables to a	COMMENT
MEDIUM	…s/applications/networking/cluster/k3s/update-script.sh	93	# Create a JSON object for each airgap images file and prefetch all download URLs in the process	COMMENT
MEDIUM	…ons/editors/vscode/extensions/update_installed_exts.sh	37	# Create a tempdir for the extension download.	COMMENT
MEDIUM	pkgs/build-support/fetchdocker/fetchdocker-builder.sh	7	# Create a tar archive of a docker image's layers, docker image config	COMMENT
MEDIUM	pkgs/build-support/buildenv/builder.pl	281	# Create the symlinks.	COMMENT
MEDIUM	pkgs/servers/dict/wordnet_structures.py	3	# This file is part of wordnet_tools.	COMMENT
MEDIUM	pkgs/servers/sql/postgresql/pg_config.sh	12	# This file is a combination of the following two files:	COMMENT
MEDIUM	.github/labeler-no-sync.yml	1	# This file is used by .github/workflows/bot.yml	COMMENT
MEDIUM	.github/labeler.yml	1	# This file is used by .github/workflows/bot.yml	COMMENT
MEDIUM	.github/zizmor.yml	1	# This file defines the ignore rules for zizmor.	COMMENT
MEDIUM	.github/labeler-development-branches.yml	1	# This file is used by .github/workflows/bot.yml	COMMENT
MEDIUM	lib/fileset/tests.sh	233	# Create the tree structure declared in the tree variable, usage:	COMMENT
MEDIUM	lib/fileset/tests.sh	280	# Create the tree	COMMENT
MEDIUM	lib/fileset/tests.sh	526	# This function is mainly tested in checkFileset	COMMENT
MEDIUM	lib/fileset/benchmark.sh	119	# Create a fairly populated tree	COMMENT
MEDIUM	nixos/tests/scion/freestanding-deployment/bootstrap.sh	22	# Create the TRC (Trust Root Configuration)	COMMENT
MEDIUM	nixos/lib/test-script-prepend.py	1	# This file contains type hints that can be prepended to Nix test scripts so they can be type	COMMENT
MEDIUM	nixos/lib/test-driver/src/test_driver/driver.py	461	# Create a thread for each machine's start method	COMMENT

Deep Nesting98 hits · 98 pts

Severity	File	Line	Context
LOW	ci/eval/compare/cmp-stats.py	14	CODE
LOW	ci/eval/compare/cmp-stats.py	56	CODE
LOW	ci/eval/compare/cmp-stats.py	215	CODE
LOW	maintainers/scripts/update-typst-packages.py	139	CODE
LOW	maintainers/scripts/update-typst-packages.py	190	CODE
LOW	maintainers/scripts/sha-to-sri.py	135	CODE
LOW	maintainers/scripts/sha-to-sri.py	136	CODE
LOW	maintainers/scripts/sha-to-sri.py	214	CODE
LOW	maintainers/scripts/remove-old-aliases.py	61	CODE
LOW	maintainers/scripts/remove-old-aliases.py	120	CODE
LOW	maintainers/scripts/kde/generate-sources.py	76	CODE
LOW	maintainers/scripts/kde/collect-missing-deps.py	124	CODE
LOW	…preters/python/hooks/python-runtime-deps-check-hook.py	36	CODE
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	1394	CODE
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	200	CODE
LOW	pkgs/desktops/gnome/extensions/update-extensions.py	255	CODE
LOW	…/vs/vscode-extension-update/vscode_extension_update.py	317	CODE
LOW	pkgs/by-name/vu/vulkan-cts/vk-cts-sources.py	23	CODE
LOW	pkgs/by-name/ac/acli/update.py	11	CODE
LOW	…/ni/nixos-render-docs/src/nixos_render_docs/options.py	257	CODE
LOW	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	445	CODE
LOW	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	475	CODE
LOW	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	502	CODE
LOW	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	535	CODE
LOW	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	450	CODE
LOW	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	482	CODE
LOW	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	506	CODE
LOW	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	544	CODE
LOW	…-render-docs/src/nixos_render_docs/manual_structure.py	188	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	137	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	886	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	907	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	976	CODE
LOW	…i/nixos-render-docs/src/nixos_render_docs/redirects.py	91	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/nixdoc.py	126	CODE
LOW	…/by-name/ni/nix-required-mounts/nix_required_mounts.py	146	CODE
LOW	…ame/ni/nix-required-mounts/test_nix_required_mounts.py	25	CODE
LOW	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_nix.py	87	CODE
LOW	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_nix.py	93	CODE
LOW	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py	217	CODE
LOW	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py	919	CODE
LOW	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py	1475	CODE
LOW	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py	223	CODE
LOW	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py	928	CODE
LOW	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py	1479	CODE
LOW	…y-name/ni/nixos-rebuild-ng/src/nixos_rebuild/models.py	61	CODE
LOW	…-redirects/src/nixos_render_docs_redirects/__init__.py	67	CODE
LOW	pkgs/by-name/ma/maubot/plugins/update.py	28	CODE
LOW	pkgs/by-name/oc/ocis_5-bin/update.py	155	CODE
LOW	…a/calamares-nixos-extensions/src/modules/nixos/main.py	595	CODE
LOW	…a/calamares-nixos-extensions/src/modules/nixos/main.py	473	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	383	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	637	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	756	CODE
LOW	…/up/update-python-libraries/update-python-libraries.py	379	CODE
LOW	…/up/update-python-libraries/update-python-libraries.py	395	CODE
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	160	CODE
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	349	CODE
LOW	pkgs/by-name/lu/luarocks-packages-updater/updater.py	341	CODE
LOW	pkgs/by-name/lu/luarocks-packages-updater/updater.py	386	CODE
38 more matches not shown…

Excessive Try-Catch Wrapping72 hits · 94 pts

Severity	File	Line	Snippet	Context
LOW	maintainers/scripts/update.py	97	except Exception as e:	CODE
LOW	maintainers/scripts/sha-to-sri.py	191	except Exception:	CODE
LOW	maintainers/scripts/sha-to-sri.py	228	except Exception as exn:	CODE
LOW	maintainers/scripts/hydra-eval-failures.py	111	except Exception as e:	CODE
MEDIUM	maintainers/scripts/hydra-eval-failures.py	33	def get_maintainers(attr_name):	CODE
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	236	except Exception as e: # noqa: BLE001	CODE
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	458	except Exception as e:	STRING
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	1390	except Exception as e: # noqa: BLE001	CODE
MEDIUM	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	200	def get_latest_tag(self) -> str \| None:	CODE
MEDIUM	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	293	def has_submodules(self) -> bool:	CODE
LOW	pkgs/desktops/gnome/find-latest-version.py	280	except Exception as error:	CODE
LOW	pkgs/by-name/he/helix/generate_grammars.py	95	except Exception as e:	CODE
MEDIUM	pkgs/by-name/he/helix/generate_grammars.py	130	print(f"Error: {args.languages_toml} not found", file=sys.stderr)	CODE
LOW	pkgs/by-name/ac/acli/update.py	83	except Exception as e:	CODE
MEDIUM	pkgs/by-name/ac/acli/update.py	84	print(f"Error: {e}", file=sys.stderr)	CODE
MEDIUM	pkgs/by-name/ac/acli/update.py	68	def main():	CODE
LOW	…/ni/nixos-render-docs/src/nixos_render_docs/options.py	160	except Exception as e:	CODE
LOW	…ni/nixos-render-docs/src/nixos_render_docs/__init__.py	52	except Exception as e:	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	51	except Exception as e:	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	160	except Exception as e:	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	218	except Exception as e:	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	602	except Exception as e:	STRING
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	696	except Exception as e:	STRING
LOW	…name/ni/nixos-rebuild-ng/src/nixos_rebuild/services.py	69	except Exception:	CODE
LOW	…name/ni/nixos-rebuild-ng/src/nixos_rebuild/__init__.py	450	except Exception as ex:	CODE
LOW	…-redirects/src/nixos_render_docs_redirects/__init__.py	109	except Exception as error:	CODE
LOW	pkgs/by-name/ap/apache-airflow/update-providers.py	198	except Exception as e:	CODE
MEDIUM	pkgs/by-name/mu/music-assistant/update-providers.py	147	print(f"Error parsing {fn}", ex)	STRING
MEDIUM	pkgs/by-name/oc/ocis_5-bin/update.py	161	print("Error: No versions fetched from GitHub API")	CODE
LOW	pkgs/by-name/oc/ocis_5-bin/update.py	211	except Exception as e:	CODE
LOW	pkgs/by-name/oc/ocis_5-bin/update.py	237	except Exception as e:	CODE
MEDIUM	pkgs/by-name/ed/edopro/update.py	32	print("Error: No valid version tags found.", file=sys.stderr)	CODE
MEDIUM	pkgs/by-name/ed/edopro/update.py	49	print("Error: Dep file not found.", file=sys.stderr)	CODE
LOW	pkgs/by-name/we/wechat/update.py	279	except Exception as exc:	CODE
MEDIUM	pkgs/by-name/ro/roon-server/update.py	96	print("Error: Failed to get version information from Roon Labs API")	CODE
LOW	pkgs/by-name/ro/roon-server/update.py	125	except Exception as e:	CODE
MEDIUM	pkgs/by-name/ro/roon-server/update.py	126	print(f"Error: {e}")	CODE
MEDIUM	pkgs/by-name/ro/roon-bridge/update.py	115	print("Error: Failed to get version information from Roon Labs API")	CODE
LOW	pkgs/by-name/ro/roon-bridge/update.py	147	except Exception as e:	CODE
MEDIUM	pkgs/by-name/ro/roon-bridge/update.py	148	print(f"Error: {e}")	CODE
MEDIUM	pkgs/by-name/ya/yazi/plugins/update.py	80	print(f"Error fetching repository data: {e}")	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	451	except Exception as e:	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	550	except Exception as e:	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	555	except Exception as e:	CODE
LOW⚡	pkgs/by-name/ya/yazi/plugins/update.py	677	except Exception as e:	CODE
MEDIUM⚡	pkgs/by-name/ya/yazi/plugins/update.py	678	print(f"Error updating plugin {plugin_name}: {e}")	CODE
LOW⚡	pkgs/by-name/ya/yazi/plugins/update.py	681	except Exception as e:	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	741	except Exception as e:	CODE
MEDIUM	pkgs/by-name/ya/yazi/plugins/update.py	742	print(f"Error committing changes for {plugin['name']}: {e}")	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	781	except Exception as e:	CODE
MEDIUM	pkgs/by-name/ya/yazi/plugins/update.py	782	print(f"Error: {e}")	CODE
LOW	…/up/update-python-libraries/update-python-libraries.py	276	except Exception as e:	CODE
MEDIUM	…ons/networking/browsers/chromium/get-commit-message.py	53	print("Error: No match.")	CODE
LOW	…ors/jetbrains/updater/jetbrains_nix_updater/fetcher.py	96	except Exception as e: # noqa: BLE001 -- Intentional safety net for unhandled fetch exceptions	CODE
LOW	pkgs/applications/gis/qgis/test.py	59	except Exception as e:	STRING
MEDIUM	pkgs/applications/gis/qgis/test.py	62	print("Error message: {}".format(e))	STRING
LOW	pkgs/data/fonts/maple-font/update.py	44	except Exception as e:	CODE
LOW	pkgs/data/fonts/maple-font/update.py	59	except Exception as e:	CODE
MEDIUM	pkgs/data/fonts/maple-font/update.py	60	print(f"Error: {str(e)}")	CODE
MEDIUM	pkgs/servers/web-apps/discourse/update.py	109	print("Error while fetching new hash with nix build")	CODE
12 more matches not shown…

Unused Imports89 hits · 89 pts

Severity	File	Line	Context
LOW	ci/eval/compare/cmp-stats.py	4	CODE
LOW	maintainers/scripts/sha-to-sri.py	8	CODE
LOW	pkgs/os-specific/linux/kernel/update-zen.py	7	CODE
LOW	pkgs/development/interpreters/python/run_setup.py	3	CODE
LOW	pkgs/development/tools/electron/update.py	32	CODE
LOW	pkgs/development/tools/electron/update.py	40	CODE
LOW	pkgs/development/tools/electron/binary/update.py	29	CODE
LOW	pkgs/development/tools/electron/binary/update.py	32	CODE
LOW	…lopment/python-modules/emerge/tests/resonant-cavity.py	2	CODE
LOW	pkgs/development/compilers/llvm/update-git.py	4	CODE
LOW	pkgs/development/compilers/llvm/update-git.py	12	CODE
LOW	…ment/julia-modules/python/find_package_implications.py	3	CODE
LOW	…ment/julia-modules/python/find_package_implications.py	5	CODE
LOW	pkgs/development/julia-modules/python/sources_nix.py	5	CODE
LOW	…s/development/julia-modules/python/minimal_registry.py	8	CODE
LOW	…s/development/julia-modules/python/minimal_registry.py	10	CODE
LOW	…s/development/julia-modules/python/minimal_registry.py	12	CODE
LOW	pkgs/desktops/gnome/find-latest-version.py	2	CODE
LOW	pkgs/by-name/vu/vulkan-cts/vk-cts-sources.py	8	CODE
LOW	pkgs/by-name/_1/_1password-gui/update-sources.py	8	CODE
LOW	…-name/ni/nixos-render-docs/src/tests/test_redirects.py	1	CODE
LOW	…ame/ni/nixos-render-docs/src/tests/test_html_header.py	3	CODE
LOW	…/ni/nixos-render-docs/src/nixos_render_docs/options.py	1	CODE
LOW	…/ni/nixos-render-docs/src/nixos_render_docs/options.py	6	CODE
LOW	…-render-docs/src/nixos_render_docs/manual_structure.py	1	CODE
LOW	…i/nixos-render-docs/src/nixos_render_docs/redirects.py	3	CODE
LOW	…/by-name/ni/nix-required-mounts/nix_required_mounts.py	9	CODE
LOW	…ame/ni/nix-required-mounts/test_nix_required_mounts.py	2	CODE
LOW	…ame/ni/nix-required-mounts/test_nix_required_mounts.py	3	CODE
LOW	…ame/ni/nix-required-mounts/test_nix_required_mounts.py	5	CODE
LOW	…ame/ni/nix-required-mounts/test_nix_required_mounts.py	5	CODE
LOW	…ame/ni/nix-required-mounts/test_nix_required_mounts.py	14	CODE
LOW	…-name/ni/nixos-rebuild-ng/src/nixos_rebuild/elevate.py	17	CODE
LOW	pkgs/by-name/ma/maubot/plugins/update.py	9	CODE
LOW	pkgs/by-name/ma/maubot/plugins/update.py	11	CODE
LOW	pkgs/by-name/jo/joplin-desktop/update.py	5	CODE
LOW	pkgs/by-name/jo/joplin-desktop/update.py	6	CODE
LOW	pkgs/by-name/jo/joplin-desktop/update.py	10	CODE
LOW	pkgs/by-name/jo/joplin-desktop/update.py	10	CODE
LOW	pkgs/by-name/jo/joplin-desktop/update.py	10	CODE
LOW	pkgs/by-name/ed/edopro/update.py	8	CODE
LOW	pkgs/by-name/fl/flet-client-flutter/update-lockfiles.py	1	CODE
LOW	…nces-graph/src/flatten_references_graph/split_paths.py	4	CODE
LOW	pkgs/by-name/ro/roon-server/update.py	12	CODE
LOW	pkgs/by-name/st/stash/update.py	5	CODE
LOW	…pu/pulumi/plugins/pulumi-python/smoke-test/__main__.py	4	CODE
LOW	pkgs/by-name/so/sommelier/update.py	8	CODE
LOW	pkgs/by-name/so/sommelier/update.py	10	CODE
LOW	pkgs/by-name/so/sommelier/update.py	10	CODE
LOW	pkgs/by-name/so/sommelier/update.py	10	CODE
LOW	pkgs/by-name/an/anyk/patch_paths.py	3	CODE
LOW	pkgs/by-name/ba/backgroundremover/test-script.py	4	CODE
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	14	CODE
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	15	CODE
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	16	CODE
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	22	CODE
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	22	CODE
LOW	…gs/by-name/hu/hunspell/update-chromium-dictionaries.py	12	CODE
LOW	pkgs/by-name/gc/gclient2nix/gclient2nix.py	4	CODE
LOW	pkgs/by-name/gc/gclient2nix/gclient2nix.py	9	CODE
29 more matches not shown…

AI Slop Vocabulary27 hits · 61 pts

Severity	File	Line	Snippet	Context
LOW	pkgs/os-specific/linux/nvidia-x11/builder.sh	161	# We can't just use ldconfig, because it does not create libfoo.so symlinks,	COMMENT
LOW	pkgs/development/python-modules/semgrep/update.sh	9	# or just set your token by hand:	COMMENT
MEDIUM	…velopment/ruby-modules/bundled-common/gen-bin-stubs.rb	32	# this file is here to facilitate running it.	COMMENT
MEDIUM	pkgs/development/ruby-modules/gem/nix-bundle-install.rb	141	# this file is here to facilitate running it.	COMMENT
MEDIUM	pkgs/development/ruby-modules/gem/gem-post-build.rb	64	# this file is here to facilitate running it.	COMMENT
MEDIUM	pkgs/by-name/sw/switch-to-configuration-ng/src/main.rs	66	// To be robust against interruption, record what units need to be started etc. We read these files	COMMENT
LOW	…ni/nixos-render-docs/src/nixos_render_docs/parallel.py	2	# and markdown-it is pure python code. ideally we'd just use thread pools, but	COMMENT
MEDIUM	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py	43	# -S without --elevate implies sudo	COMMENT
MEDIUM	pkgs/by-name/ni/nixos-rebuild-ng/src/tests/test_main.py	47	# explicit --elevate wins over the --sudo alias	COMMENT
MEDIUM	…name/ni/nixos-rebuild-ng/src/nixos_rebuild/__init__.py	272	# Map the elevate flags onto an Elevator. The password itself is	COMMENT
MEDIUM	…-name/ni/nixos-rebuild-ng/src/nixos_rebuild/elevate.py	417	#: Singleton used as the default ``elevate=`` argument throughout.	COMMENT
MEDIUM	pkgs/by-name/in/installShellFiles/setup-hook.sh	129	# This command accepts multiple shell flags in conjunction with multiple paths if you wish to	COMMENT
LOW	pkgs/by-name/ca/cacert/setup-hook.sh	3	# If we inherited an unreadable cert file path, just use the bundled one	COMMENT
LOW	pkgs/by-name/au/authelia/update.sh	31	# or just set your token by hand:	COMMENT
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	141	# Otherwise, we simply return whether the ABIs are identical.	COMMENT
LOW	pkgs/stdenv/generic/setup.sh	900	# doesn't have closures, so it's easier to just pass this in.	COMMENT
LOW	pkgs/build-support/fetchurl/builder.sh	136	# Direct URL: just add it and we're done	COMMENT
MEDIUM	…-support/bintools-wrapper/add-darwin-ldflags-before.sh	30	# To be robust, make sure we always have the correct set of roles.	COMMENT
LOW	…support/dotnet/build-dotnet-module/hook/dotnet-hook.sh	50	# arrays, so instead we just pass a variable to indicate that we don’t have	COMMENT
MEDIUM	pkgs/servers/nextcloud/packages/33.json	126	"description": "## End-to-End Encryption\n\n### For End Users\n\n**Protect your most sensitive files with strong	CODE
MEDIUM	pkgs/servers/nextcloud/packages/34.json	126	"description": "## End-to-End Encryption\n\n### For End Users\n\n**Protect your most sensitive files with strong	CODE
MEDIUM	pkgs/servers/nextcloud/packages/35.json	126	"description": "## End-to-End Encryption\n\n### For End Users\n\n**Protect your most sensitive files with strong	CODE
MEDIUM	nixos/tests/acme/python-utils.py	6	# BackoffTracker provides a robust system for handling test retries	COMMENT
MEDIUM	nixos/tests/systemd-confinement/checkperms.py	32	# Essentially full permissions, the kind of accessibility we want to avoid	COMMENT
LOW	nixos/lib/test-driver/src/test_driver/vlan.py	33	# so we cannot just return to the `select`, as it may block, despite there being more	COMMENT
MEDIUM	nixos/modules/installer/tools/nixos-generate-config.pl	158	if (# Mass-storage controller. Definitely important.	CODE
MEDIUM	nixos/modules/installer/tools/nixos-generate-config.pl	245	if (# Mass-storage controller. Definitely important.	CODE

Empty Error Handlers12 hits · 60 pts

Severity	File	Line	Snippet	Context
HIGH	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	140	except InvalidVersion:	CODE
HIGH	pkgs/by-name/mi/minecraft-server/update.py	133	except requests.RequestException as e:	CODE
HIGH	…/up/update-python-libraries/update-python-libraries.py	204	except InvalidVersion:	CODE
HIGH	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	196	except ELFError:	CODE
HIGH	…ors/jetbrains/updater/jetbrains_nix_updater/fetcher.py	143	except HTTPError:	CODE
HIGH	pkgs/servers/asterisk/update.py	36	except:	CODE
HIGH	pkgs/servers/dict/wiktionary/wiktionary2dict.py	234	except StopIteration:	CODE
HIGH	nixos/tests/systemd-confinement/checkperms.py	134	except FileNotFoundError:	CODE
HIGH	nixos/tests/systemd-confinement/checkperms.py	75	except PermissionError:	CODE
HIGH	nixos/lib/test-driver/src/test_driver/logger.py	382	except Empty:	CODE
HIGH	…/test-driver/src/test_driver/machine/nspawn_display.py	89	except (FileNotFoundError, ConnectionRefusedError, TimeoutError):	CODE
HIGH	…os/lib/test-driver/src/test_driver/machine/__init__.py	1242	except KeyboardInterrupt:	CODE

Cross-Language Confusion11 hits · 55 pts

Severity	File	Line	Snippet	Context
HIGH	pkgs/development/julia-modules/python/sources_nix.py	38	src = null; # Overridden: will fill in later	CODE
HIGH	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	370	token = state.push("attr_span_begin", "span", 1)	CODE
HIGH	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	380	state.push("attr_span_end", "span", -1)	CODE
HIGH	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	500	md.core.ruler.push("compact_list_attr", compact_list_attr)	CODE
HIGH	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	533	md.core.ruler.push("block_attr", block_attr)	CODE
HIGH	…-name/ni/nixos-render-docs/src/nixos_render_docs/md.py	578	md.core.ruler.push(f"{block}_titles", block_titles)	CODE
HIGH	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	448	.filter((h) => h.id && links.has(h.id))	CODE
HIGH	…-name/ni/nixos-rebuild-ng/src/nixos_rebuild/elevate.py	331	'[ -z "$agent" ] && command -v "$a" >/dev/null 2>&1 && agent="$a"; '	CODE
HIGH	…a/calamares-nixos-extensions/src/modules/nixos/main.py	71	"/boot/crypto_keyfile.bin" = null;	CODE
HIGH	pkgs/applications/editors/kakoune/plugins/update.py	43	tag = value.src.tag or null;	CODE
HIGH	pkgs/applications/editors/kakoune/plugins/update.py	46	null;	CODE

Fake / Example Data30 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW	maintainers/README.md	94	email = "user@example.com";	CODE
LOW	maintainers/README.md	133	email = "user@example.com";	CODE
LOW	…/by-name/ni/nixos-rebuild-ng/src/tests/test_process.py	295	"user@example.org": "user@example.org",	CODE
LOW⚡	pkgs/stdenv/generic/setup.sh	465	# $ flags="lorem ipsum dolor sit amet"	COMMENT
LOW⚡	pkgs/stdenv/generic/setup.sh	465	# $ flags="lorem ipsum dolor sit amet"	COMMENT
LOW⚡	pkgs/stdenv/generic/setup.sh	469	# $ flags=("lorem ipsum" "dolor" "sit amet")	COMMENT
LOW⚡	pkgs/stdenv/generic/setup.sh	471	# lorem ipsum;dolor;sit amet	COMMENT
LOW⚡	pkgs/stdenv/generic/setup.sh	474	# $ flags=("lorem ipsum" "dolor" "sit amet")	COMMENT
LOW⚡	pkgs/stdenv/generic/setup.sh	476	# lorem ipsum and dolor and sit amet	COMMENT
LOW	nixos/doc/manual/configuration/config-file.section.md	25	services.httpd.adminAddr = "alice@example.org";	CODE
LOW	nixos/doc/manual/configuration/config-file.section.md	47	adminAddr = "alice@example.org";	CODE
LOW	nixos/doc/manual/configuration/modularity.section.md	68	{ services.httpd.adminAddr = pkgs.lib.mkForce "bob@example.org"; }	CODE
LOW	nixos/doc/manual/configuration/abstractions.section.md	10	adminAddr = "alice@example.org";	CODE
LOW	nixos/doc/manual/configuration/abstractions.section.md	16	adminAddr = "alice@example.org";	CODE
LOW	nixos/doc/manual/configuration/abstractions.section.md	28	adminAddr = "alice@example.org";	CODE
LOW	nixos/doc/manual/configuration/abstractions.section.md	80	adminAddr = "alice@example.org";	CODE
LOW	…manual/administration/imperative-containers.section.md	92	services.httpd.adminAddr = "foo@example.org";	CODE
LOW	nixos/modules/services/mail/mailman.md	32	siteOwner = "mailman@example.org";	CODE
LOW	nixos/modules/services/mail/mailman.md	66	siteOwner = "mailman@example.org";	CODE
LOW	nixos/modules/services/networking/prosody.md	32	admins = [ "root@example.org" ];	CODE
LOW	nixos/modules/services/networking/prosody.md	63	email = "root@example.org";	CODE
LOW	nixos/modules/services/networking/prosody.md	68	email = "root@example.org";	CODE
LOW	nixos/modules/services/monitoring/certspotter.md	17	emailRecipients = [ "webmaster@example.org" ];	CODE
LOW	nixos/modules/services/web-apps/discourse.md	15	email = "admin@example.com";	CODE
LOW	nixos/modules/services/web-apps/discourse.md	47	email = "admin@example.com";	CODE
LOW	nixos/modules/services/web-apps/discourse.md	95	email = "admin@example.com";	CODE
LOW	nixos/modules/services/web-apps/discourse.md	179	email = "admin@example.com";	CODE
LOW	nixos/modules/services/web-apps/discourse.md	272	email = "admin@example.com";	CODE
LOW	nixos/modules/services/web-apps/strfry.md	28	defaults.email = "foo@bar.com";	CODE
LOW	nixos/modules/services/web-apps/akkoma.md	29	email = "admin@example.com";	CODE

Redundant / Tautological Comments21 hits · 30 pts

Severity	File	Line	Snippet	Context
LOW	…lopment/interpreters/python/hooks/pytest-check-hook.sh	64	# Check if every path glob matches at least one path	COMMENT
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	1014	# Check if plugin is a Plugin object and has normalized_name attribute	COMMENT
LOW	pkgs/development/compilers/dotnet/binary/update.sh	280	# Check if a patch was specified as an argument.	COMMENT
LOW	…s/by-name/ni/nixos-rebuild-ng/src/nixos_rebuild/nix.py	431	# Check if repo is dirty	COMMENT
LOW	pkgs/by-name/in/installShellFiles/setup-hook.sh	54	# Check if path is empty	COMMENT
LOW	pkgs/by-name/cu/cursor-cli/update.sh	7	# Check if release matches the pattern YYYY.MM.DD-{commithash}	COMMENT
LOW	…a/calamares-nixos-extensions/src/modules/nixos/main.py	426	# Check if root is actually btrfs	STRING
LOW	…a/calamares-nixos-extensions/src/modules/nixos/main.py	626	# Check if root filesystem is btrfs	COMMENT
LOW	…a/calamares-nixos-extensions/src/modules/nixos/main.py	926	# Check if unfree packages are allowed	COMMENT
LOW	…a/calamares-nixos-extensions/src/modules/nixos/main.py	997	# Check if any extraModulePackages are defined, and remove if only free packages are allowed	COMMENT
LOW	pkgs/by-name/ya/yazi-unwrapped/update.sh	40	# Set cargoHash to an empty string	COMMENT
LOW	pkgs/by-name/ki/kiro/update.sh	71	# Check if update is needed	COMMENT
LOW	pkgs/by-name/au/autoPatchelfHook/auto-patchelf.sh	62	# Check if ignoreMissingDepsArray contains "1" and if so, replace it with	COMMENT
LOW	pkgs/by-name/br/breakpointHook/attach.sh	26	# Close the file descriptor	COMMENT
LOW	pkgs/by-name/lu/luarocks-packages-updater/updater.py	428	# Check if this plugin was processed in this run	COMMENT
LOW	pkgs/stdenv/generic/setup.sh	1179	# Set umask to create env-vars file with 0600 permissions (owner read/write only)	COMMENT
LOW	…gs/servers/home-assistant/update-component-packages.py	281	# Check if package advertises extra requirements	COMMENT
LOW	.github/workflows/check.yml	248	# Set this to "notowned,avoid-shadowing" to check that all files are owned by somebody	COMMENT
LOW	nixos/modules/installer/tools/nixos-generate-config.pl	291	# Check if we're a VirtualBox guest. If so, enable the guest	COMMENT
LOW	nixos/modules/installer/tools/nixos-generate-config.pl	297	# Check if we're a Parallels guest. If so, enable the guest additions.	COMMENT
LOW	nixos/modules/installer/tools/nixos-generate-config.pl	321	# Check if we're on bare metal, not in a VM/container.	COMMENT

Modern AI Meta-Vocabulary11 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	pkgs/by-name/sc/schildi-revenge/deps.json	3685	"org/jetbrains/compose/hot-reload#hot-reload-orchestration/1.2.0": {	CODE
MEDIUM	pkgs/by-name/ru/rush-lyrics/deps.json	2598	"org/jetbrains/compose/hot-reload#hot-reload-orchestration/1.2.0": {	CODE
MEDIUM	pkgs/by-name/st/stirling-pdf/deps.json	1064	"com/google/cloud#google-cloud-orchestration-airflow-bom/1.64.0": {	CODE
MEDIUM	pkgs/by-name/an/animeko/deps.json	2641	"org/jetbrains/compose/hot-reload#hot-reload-orchestration/1.0.0-rc01": {	CODE
MEDIUM	pkgs/by-name/ne/nextflow/deps.json	1007	"com/google/cloud#google-cloud-orchestration-airflow-bom/1.51.0": {	CODE
MEDIUM	pkgs/by-name/tr/traccar/deps.json	1426	"com/google/cloud#google-cloud-orchestration-airflow-bom/1.51.0": {	CODE
MEDIUM	pkgs/by-name/tr/traccar/deps.json	1429	"com/google/cloud#google-cloud-orchestration-airflow-bom/1.97.0": {	CODE
MEDIUM	…editors/vim/plugins/hooks/neovim-require-check-hook.sh	153	# Main entry point: orchestrates discovery, require checks, and summary	COMMENT
MEDIUM	doc/redirects.json	3488	"index.html#ssec-factor-scaffolding"	CODE
MEDIUM	doc/languages-frameworks/factor.section.md	34	### Scaffolding and the `work` vocabulary root {#ssec-factor-scaffolding}	COMMENT
MEDIUM	doc/languages-frameworks/factor.section.md	51	`work` is routed to `/var/lib/factor` and is not shipped nor referenced in the nix store, see the section on [scaffoldin	CODE

Slop Phrases12 hits · 22 pts

Severity	File	Line	Snippet	Context
MEDIUM	pkgs/development/python-modules/semgrep/update.sh	7	# if you use gh cli you can use:	COMMENT
LOW	pkgs/development/compilers/dotnet/binary/update.sh	122	# Due to this, make sure to check if new SDK versions introduce any new packages.	COMMENT
LOW	…a/calamares-nixos-extensions/src/modules/nixos/main.py	269	# Define a user account. Don't forget to set a password with ‘passwd’.	COMMENT
LOW	pkgs/by-name/p7/p7zip/update.sh	33	# make sure to nuke the unfree src from the updater's machine	COMMENT
MEDIUM	pkgs/by-name/pi/pihole-ftl/pihole.toml	546	# With this option, you can change how (and if) hourly PTR requests are made to check	COMMENT
MEDIUM	pkgs/by-name/au/authelia/update.sh	29	# if you use gh cli you can use:	COMMENT
MEDIUM	pkgs/servers/nextcloud/packages/33.json	336	"description": "# OpenID Connect Login\n\nProvides user creation and login via one single OpenID Connect provider. E	CODE
LOW	pkgs/servers/nextcloud/packages/33.json	366	"description": "# PhoneTrack Nextcloud application\n\n📱 PhoneTrack is a Nextcloud application to track and store mob	CODE
MEDIUM	pkgs/servers/nextcloud/packages/34.json	336	"description": "# OpenID Connect Login\n\nProvides user creation and login via one single OpenID Connect provider. E	CODE
LOW	pkgs/servers/nextcloud/packages/34.json	366	"description": "# PhoneTrack Nextcloud application\n\n📱 PhoneTrack is a Nextcloud application to track and store mob	CODE
MEDIUM	pkgs/servers/nextcloud/packages/35.json	336	"description": "# OpenID Connect Login\n\nProvides user creation and login via one single OpenID Connect provider. E	CODE
LOW	pkgs/servers/nextcloud/packages/35.json	366	"description": "# PhoneTrack Nextcloud application\n\n📱 PhoneTrack is a Nextcloud application to track and store mob	CODE

Modern Structural Boilerplate22 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	pkgs/development/tools/electron/update.py	53	logger = logging.getLogger(__name__)	CODE
LOW	pkgs/development/tools/electron/update.py	206	def update_source(version: str, commit: bool, force: bool) -> None:	CODE
LOW	pkgs/development/tools/electron/update.py	259	def update_all(commit: bool, force: bool) -> None:	CODE
LOW	pkgs/development/tools/electron/binary/update.py	41	logger = logging.getLogger(__name__)	CODE
LOW	pkgs/development/tools/electron/binary/update.py	144	def update_binary(major_version: str, commit: bool, chromedriver: bool) -> None:	CODE
LOW	pkgs/development/tools/electron/binary/update.py	187	def update_chromedriver(version: str, commit: bool) -> None:	CODE
LOW	pkgs/development/tools/electron/binary/update.py	201	def update_all(commit: bool) -> None:	CODE
LOW	…/ni/nixos-render-docs/src/tests/test_auto_id_prefix.py	8	def set_prefix(token: Token, ident: str) -> None:	CODE
LOW	…e/ni/nixos-render-docs/src/nixos_render_docs/manual.py	91	def set_token_ident(token: Token, ident: str) -> None:	CODE
LOW	pkgs/by-name/gi/gitlab/update.py	20	logger = logging.getLogger(__name__)	CODE
LOW	pkgs/by-name/ya/yazi/plugins/update.py	496	def update_nix_file(default_nix_path: str, candidate: UpdateCandidate, new_hash: str) -> None:	CODE
LOW	pkgs/by-name/gc/gclient2nix/gclient2nix.py	23	logger = logging.getLogger(__name__)	CODE
LOW	pkgs/by-name/az/azure-cli/extensions-tool.py	22	logger = logging.getLogger(__name__)	CODE
LOW	pkgs/servers/home-assistant/update.py	191	async def update_core(self, old_version: str, new_version: str) -> None:	CODE
LOW	pkgs/servers/home-assistant/update.py	205	async def update_frontend(self, old_version: str, new_version: str) -> None:	CODE
LOW	pkgs/servers/web-apps/discourse/update.py	23	logger = logging.getLogger(__name__)	CODE
LOW	nixos/lib/test-driver/src/test_driver/logger.py	71	def set_log_level(self, level: LogLevel) -> None:	CODE
LOW	nixos/lib/test-driver/src/test_driver/logger.py	148	def set_log_level(self, level: LogLevel) -> None:	CODE
LOW	nixos/lib/test-driver/src/test_driver/logger.py	230	def set_log_level(self, level: LogLevel) -> None:	CODE
LOW	nixos/lib/test-driver/src/test_driver/logger.py	293	def set_log_level(self, level: LogLevel) -> None:	CODE
LOW	nixos/lib/test-driver/src/test_driver/logger.py	363	def set_log_level(self, level: LogLevel) -> None:	CODE
LOW	nixos/lib/test-driver/src/test_driver/machine/qmp.py	11	logger = logging.getLogger(__name__)	CODE

Decorative Section Separators7 hits · 21 pts

Severity	File	Line	Snippet	Context
MEDIUM	…gs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh	479	# ------------------------------------------------------------------------------------	COMMENT
MEDIUM	…gs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh	487	# ------------------------------------------------------------------------------------	COMMENT
MEDIUM	pkgs/by-name/ti/timidity/timidity.cfg	5	# ----------------------------------------	COMMENT
MEDIUM	pkgs/by-name/ti/timidity/timidity.cfg	16	# ----------------------------------------	COMMENT
MEDIUM	pkgs/build-support/testers/expect-failure.sh	18	# ------------------------	COMMENT
MEDIUM	pkgs/build-support/testers/expect-failure.sh	35	# -----------------------------------------	COMMENT
MEDIUM	pkgs/build-support/testers/expect-failure.sh	72	# ------------------------------------------------------	COMMENT

Cross-File Repetition4 hits · 20 pts

Severity	File	Snippet	Context
HIGH	pkgs/by-name/ra/radarr/update.py	p: { dir = dirof p.meta.position; version = p.version; sourcehash = p.src.src.outputhash; yarnhash = p.yarnofflinecache.	STRING
HIGH	pkgs/by-name/pr/prowlarr/update.py	p: { dir = dirof p.meta.position; version = p.version; sourcehash = p.src.src.outputhash; yarnhash = p.yarnofflinecache.	STRING
HIGH	pkgs/by-name/so/sonarr/update.py	p: { dir = dirof p.meta.position; version = p.version; sourcehash = p.src.src.outputhash; yarnhash = p.yarnofflinecache.	STRING
HIGH	pkgs/by-name/li/lidarr/update.py	p: { dir = dirof p.meta.position; version = p.version; sourcehash = p.src.src.outputhash; yarnhash = p.yarnofflinecache.	STRING

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…nt/haskell-modules/configuration-hackage2nix/main.yaml	38	# 2026-02-04: as requested by ghcide >= 2.13	COMMENT

Example Usage Blocks5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	…elopment/compilers/graalvm/community-edition/update.sh	4	# Usage:	COMMENT
LOW	pkgs/by-name/ru/rustdesk-flutter/build-runner.sh	8	# Usage:	COMMENT
LOW	pkgs/by-name/ru/rustdesk-flutter/build-runner.sh	37	# Usage:	COMMENT
LOW	…/dart/build-dart-application/hooks/dart-config-hook.sh	23	# Usage:	COMMENT
LOW	…/dart/build-dart-application/hooks/dart-config-hook.sh	52	# Usage:	COMMENT

AI Response Leakage1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	pkgs/by-name/pi/pihole-ftl/pihole.toml	756	# at http://<ip>/pihole/admin/ instead of http://<ip>/admin/. In this example, the	COMMENT

Magic Placeholder Names1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	doc/styleguide.md	463	Replace sensitive values with placeholders: `<YOUR-KEY>`, `<YOUR-HOST>`, `<YOUR-TOKEN>`.	CODE

AI Structural Patterns3 hits · 3 pts

Severity	File	Line	Context
LOW	…gs-plugin-update/src/nixpkgs_plugin_update/__init__.py	290	CODE
LOW	…/up/update-python-libraries/update-python-libraries.py	538	CODE
LOW	pkgs/by-name/au/auto-patchelf/source/auto-patchelf.py	494	CODE

Structural Annotation Overuse2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	pkgs/stdenv/generic/setup.sh	70	# NOTE: This function is only every meant to be called from the nix*Log family of functions.	COMMENT
LOW	…rrayUtilities/getRunpathEntries/getRunpathEntries.bash	7	# NOTE: This function does not check if path is a valid ELF file.	COMMENT

Dead Code1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	…os/lib/test-driver/src/test_driver/machine/__init__.py	723		CODE

NixOS/nixpkgs

Open-Source Code Quality, Security and Technical Debt Review