The Secure CommsOS™ for mission-critical operations
This report summarizes scanner evidence for RocketChat/Rocket.Chat, a TypeScript project with 46,354 GitHub stars. SynthScan examined 1,335,741 lines of code across 12169 source files, recording 891 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 1.3 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 282 finding(s).
Are imports declared and package/API names verified? 602 finding(s).
Are wrappers, guards, and repeated structures necessary? 176 finding(s).
Which changes need focused human review? 891 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 891 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ps/meteor/tests/end-to-end/api-livechat/09-visitors.ts | 944 | expect(res.body.items).to.have.length.of.at.least(1); | CODE |
| CRITICAL | …ps/meteor/tests/end-to-end/api-livechat/09-visitors.ts | 1037 | expect(res.body.history).to.have.length.of.at.least(1); | CODE |
| CRITICAL | …ps/meteor/tests/end-to-end/api-livechat/09-visitors.ts | 1061 | expect(res.body.history).to.have.length.of.at.least(1); | CODE |
| CRITICAL | …meteor/tests/end-to-end/api-livechat/10-departments.ts | 135 | expect(res.body.departments).to.have.length.of.at.least(0); | CODE |
| CRITICAL | …meteor/tests/end-to-end/api-livechat/10-departments.ts | 718 | expect(response.body.items).to.have.length.of.at.least(1); | CODE |
| CRITICAL | …meteor/tests/end-to-end/api-livechat/10-departments.ts | 739 | expect(res.body.items).to.have.length.of.at.least(1); | CODE |
| CRITICAL | …meteor/tests/end-to-end/api-livechat/11-email-inbox.ts | 72 | expect(res.body.emailInboxes).to.have.length.of.at.least(1); | CODE |
| CRITICAL | apps/meteor/tests/end-to-end/api/LDAP.ts | 438 | expect(loginResponse.body.data.me.emails.map(({ address }: { address: string }) => address)).to.include('ldap.e2e@spa | CODE |
| CRITICAL | apps/meteor/tests/e2e/channel-management.spec.ts | 236 | await expect(poHomeChannel.tabs.members.userInfo.menu.getMenuItem('Unignore')).toBeVisible(); | CODE |
| CRITICAL | apps/meteor/tests/e2e/channel-management.spec.ts | 301 | await expect(poHomeChannel.tabs.members.userInfo.menu.getMenuItem('Ignore')).toBeVisible(); | CODE |
| CRITICAL⚡ | apps/meteor/tests/e2e/retention-policy.spec.ts | 101 | await auxContext.poHomeChannel.tabs.room.btnEdit.click(); | CODE |
| CRITICAL⚡ | apps/meteor/tests/e2e/retention-policy.spec.ts | 111 | await auxContext.poHomeChannel.tabs.editRoom.advancedSettingsAccordion.click(); | CODE |
| CRITICAL⚡ | apps/meteor/tests/e2e/retention-policy.spec.ts | 112 | await auxContext.poHomeChannel.tabs.editRoom.checkboxReadOnly.check(); | CODE |
| CRITICAL⚡ | apps/meteor/tests/e2e/retention-policy.spec.ts | 113 | await auxContext.poHomeChannel.tabs.editRoom.btnSave.click(); | CODE |
| CRITICAL⚡ | …tests/e2e/omnichannel/omnichannel-chat-history.spec.ts | 77 | await agent.poHomeOmnichannel.contacts.contactInfo.tabHistory.click(); | CODE |
| CRITICAL⚡ | …tests/e2e/omnichannel/omnichannel-chat-history.spec.ts | 80 | await agent.poHomeOmnichannel.contacts.contactInfo.historyItem.click(); | CODE |
| CRITICAL⚡ | …tests/e2e/omnichannel/omnichannel-chat-history.spec.ts | 89 | await agent.poHomeOmnichannel.contacts.contactInfo.historyItem.click(); | CODE |
| CRITICAL⚡ | …tests/e2e/omnichannel/omnichannel-chat-history.spec.ts | 90 | await agent.poHomeOmnichannel.contacts.contactInfo.historyMessage.click(); | CODE |
| CRITICAL⚡ | …tests/e2e/omnichannel/omnichannel-chat-history.spec.ts | 91 | await agent.poHomeOmnichannel.contacts.contactInfo.btnOpenChat.click(); | CODE |
| CRITICAL | …channel/omnichannel-transfer-to-another-agents.spec.ts | 76 | await agentA.poHomeOmnichannel.content.forwardChatModal.inputForwardUser.click(); | CODE |
| CRITICAL | …channel/omnichannel-transfer-to-another-agents.spec.ts | 77 | await agentA.poHomeOmnichannel.content.forwardChatModal.inputForwardUser.type('user2'); | CODE |
| CRITICAL | …channel/omnichannel-transfer-to-another-agents.spec.ts | 89 | await agentA.poHomeOmnichannel.content.forwardChatModal.inputComment.type('any_comment'); | CODE |
| CRITICAL | …channel/omnichannel-transfer-to-another-agents.spec.ts | 90 | await agentA.poHomeOmnichannel.content.forwardChatModal.btnForward.click(); | CODE |
| CRITICAL⚡ | …tests/e2e/omnichannel/omnichannel-contact-info.spec.ts | 51 | await agent.poHomeChannel.contacts.contactInfo.btnEdit.click(); | CODE |
| CRITICAL⚡ | …tests/e2e/omnichannel/omnichannel-contact-info.spec.ts | 55 | await agent.poHomeChannel.contacts.editContact.inputName.fill('Edited Contact Name'); | CODE |
| CRITICAL⚡ | …tests/e2e/omnichannel/omnichannel-contact-info.spec.ts | 56 | await agent.poHomeChannel.contacts.editContact.btnSave.click(); | CODE |
| CRITICAL | apps/meteor/tests/e2e/apps/media-call-events.spec.ts | 331 | await user1.poHomeChannel.voiceCalls.widget.controls.call.click(); | CODE |
| CRITICAL | apps/meteor/tests/e2e/apps/media-call-events.spec.ts | 420 | await user1.poHomeChannel.voiceCalls.widget.controls.call.click(); | CODE |
| CRITICAL | apps/meteor/tests/e2e/apps/media-call-events.spec.ts | 618 | await user1.poHomeChannel.voiceCalls.widget.controls.cancel.click(); | CODE |
| CRITICAL | apps/meteor/server/settings/settings.test.ts | 691 | expect(spiedCallback1).to.have.been.called.always.with('value1'); | CODE |
| CRITICAL | apps/meteor/server/settings/settings.test.ts | 692 | expect(spiedCallback2).to.have.been.called.always.with('setting_callback', 'value1'); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 28 | jsrsasignStub.KJUR.jws.IntDate.get.reset(); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 29 | jsrsasignStub.KJUR.jws.JWS.sign.reset(); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 30 | jsrsasignStub.KJUR.jws.JWS.verify.reset(); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 31 | jsrsasignStub.KJUR.jws.JWS.parse.reset(); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 40 | jsrsasignStub.KJUR.jws.IntDate.get.callsFake((timeStr) => { | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 45 | jsrsasignStub.KJUR.jws.JWS.sign.returns('mocked.jwt.token'); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 123 | jsrsasignStub.KJUR.jws.JWS.verify.returns(false); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 129 | expect(jsrsasignStub.KJUR.jws.JWS.verify.calledWith('invalid.jwt.token', 'secret', ['HS256'])).to.be.true; | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 133 | jsrsasignStub.KJUR.jws.JWS.verify.returns(true); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 134 | jsrsasignStub.KJUR.jws.JWS.parse.returns({ | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 215 | jsrsasignStub.KJUR.jws.JWS.verify.returns(true); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 216 | jsrsasignStub.KJUR.jws.JWS.parse.throws(new Error('Parse error')); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 224 | jsrsasignStub.KJUR.jws.JWS.verify.throws(new Error('Verification error')); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 233 | jsrsasignStub.KJUR.jws.JWS.verify.returns(true); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 234 | jsrsasignStub.KJUR.jws.JWS.parse.returns({ | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 265 | jsrsasignStub.KJUR.jws.JWS.verify.returns(true); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 266 | jsrsasignStub.KJUR.jws.JWS.parse.returns({ | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 276 | jsrsasignStub.KJUR.jws.JWS.verify.returns(true); | CODE |
| CRITICAL⚡ | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 277 | jsrsasignStub.KJUR.jws.JWS.parse.returns({ | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 70 | jsrsasignStub.KJUR.jws.IntDate.get.returns(1609459200); | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 71 | jsrsasignStub.KJUR.jws.JWS.sign.returns('mocked.jwt.token'); | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 85 | jsrsasignStub.KJUR.jws.IntDate.get.returns(1609459200); | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 86 | jsrsasignStub.KJUR.jws.JWS.sign.returns('mocked.jwt.token'); | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 149 | jsrsasignStub.KJUR.jws.JWS.verify.returns(true); | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 150 | jsrsasignStub.KJUR.jws.JWS.parse.returns({ | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 165 | jsrsasignStub.KJUR.jws.JWS.verify.returns(true); | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 166 | jsrsasignStub.KJUR.jws.JWS.parse.returns({ | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 182 | jsrsasignStub.KJUR.jws.JWS.verify.returns(true); | CODE |
| CRITICAL | apps/meteor/server/lib/utils/lib/JWTHelper.test.ts | 183 | jsrsasignStub.KJUR.jws.JWS.parse.returns({ | CODE |
| 14 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ee/packages/pdf-worker/src/worker.fixtures.ts | 493 | msg: `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam in massa ullamcorper diam semper lobortis vita | CODE |
| LOW | ee/packages/pdf-worker/src/worker.fixtures.ts | 493 | msg: `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam in massa ullamcorper diam semper lobortis vita | CODE |
| LOW | ee/packages/pdf-worker/src/worker.fixtures.ts | 539 | msg: `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam in massa ullamcorper diam semper lobortis vita | CODE |
| LOW | ee/packages/pdf-worker/src/worker.fixtures.ts | 539 | msg: `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam in massa ullamcorper diam semper lobortis vita | CODE |
| LOW⚡ | ee/packages/pdf-worker/src/worker.fixtures.ts | 561 | msg: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit Donec id leo quam Cras mauris lacus, fringilla in ferme | CODE |
| LOW⚡ | ee/packages/pdf-worker/src/worker.fixtures.ts | 561 | msg: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit Donec id leo quam Cras mauris lacus, fringilla in ferme | CODE |
| LOW⚡ | ee/packages/pdf-worker/src/worker.fixtures.ts | 570 | msg: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit.', | CODE |
| LOW⚡ | ee/packages/pdf-worker/src/worker.fixtures.ts | 570 | msg: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit.', | CODE |
| LOW⚡ | ee/packages/pdf-worker/src/worker.fixtures.ts | 603 | msg: `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam in massa ullamcorper diam semper lobortis vita | CODE |
| LOW⚡ | ee/packages/pdf-worker/src/worker.fixtures.ts | 603 | msg: `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam in massa ullamcorper diam semper lobortis vita | CODE |
| LOW⚡ | ee/packages/pdf-worker/src/worker.fixtures.ts | 605 | Maecenas pretium, sem non eleifend sodales, sapien ligula sollicitudin mauris, vel imperdiet risus mi id neque. Duis tin | CODE |
| LOW⚡ | ee/packages/pdf-worker/src/worker.fixtures.ts | 605 | Maecenas pretium, sem non eleifend sodales, sapien ligula sollicitudin mauris, vel imperdiet risus mi id neque. Duis tin | CODE |
| LOW | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 10 | visitor: { name: 'John Doe', username: 'john.doe' }, | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 21 | u: { _id: 'john.doe', name: 'John Doe', username: 'john.doe' }, | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 26 | u: { _id: 'john.doe', name: 'John Doe', username: 'john.doe' }, | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 32 | u: { _id: 'john.doe', name: 'John Doe', username: 'john.doe' }, | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 40 | visitor: { name: 'John Doe', username: 'john.doe' }, | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 48 | { ts: new Date('2022-11-21T16:00:00.000Z'), msg: 'Hello', u: { _id: 'john.doe', name: 'John Doe', username: 'john.doe' | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 49 | { ts: new Date('2022-11-22T16:00:00.000Z'), msg: 'How are you', u: { _id: 'john.doe', name: 'John Doe', username: 'joh | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 54 | visitor: { name: 'John Doe', username: 'john.doe' }, | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 62 | { ts: new Date('2022-11-21T16:00:00.000Z'), msg: 'Hello', u: { _id: 'john.doe', name: 'John Doe', username: 'john.doe' | CODE |
| LOW⚡ | …rc/templates/ChatTranscript/ChatTranscript.fixtures.ts | 63 | { ts: new Date('2022-11-21T16:00:00.000Z'), msg: 'How are you', u: { _id: 'john.doe', name: 'John Doe', username: 'joh | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 214 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 214 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 217 | '<p>hey <a href="https://matrix.to/#/@user:localDomain.com">User Real Name</a>, here its <a href="https://matrix.t | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 217 | '<p>hey <a href="https://matrix.to/#/@user:localDomain.com">User Real Name</a>, here its <a href="https://matrix.t | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 245 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 245 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 248 | '<p><a href="https://matrix.to/#/@user:externalDomain.com">@user:externalDomain.com</a>, hello <a href="https://ma | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 248 | '<p><a href="https://matrix.to/#/@user:externalDomain.com">@user:externalDomain.com</a>, hello <a href="https://ma | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 289 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 289 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 294 | '<p>hey <a href="https://matrix.to/#/@user:localDomain.com">User Real Name</a>, here its <a href="https://matrix.t | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 294 | '<p>hey <a href="https://matrix.to/#/@user:localDomain.com">User Real Name</a>, here its <a href="https://matrix.t | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 318 | **Paragraph text**: **Bold** Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facili | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 318 | **Paragraph text**: **Bold** Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facili | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 322 | _Italict Text_: _Italict_ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facilisis | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 322 | _Italict Text_: _Italict_ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facilisis | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 361 | '<p>hey <a href="https://matrix.to/#/@user:localDomain.com">User Real Name</a>, here its <a href="https://matrix.t | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 361 | '<p>hey <a href="https://matrix.to/#/@user:localDomain.com">User Real Name</a>, here its <a href="https://matrix.t | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 368 | **Paragraph text**: **Bold** Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facili | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 368 | **Paragraph text**: **Bold** Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facili | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 372 | _Italict Text_: _Italict_ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facilisis | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 372 | _Italict Text_: _Italict_ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facilisis | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 416 | **Paragraph text**: **Bold** Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facili | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 416 | **Paragraph text**: **Bold** Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facili | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 420 | _Italict Text_: _Italict_ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facilisis | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 420 | _Italict Text_: _Italict_ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facilisis | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 462 | '<p>hey <a href="https://matrix.to/#/@user:localDomain.com">User Real Name</a>, here its <a href="https://matrix.t | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 462 | '<p>hey <a href="https://matrix.to/#/@user:localDomain.com">User Real Name</a>, here its <a href="https://matrix.t | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 469 | **Paragraph text**: **Bold** Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facili | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 469 | **Paragraph text**: **Bold** Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facili | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 473 | _Italict Text_: _Italict_ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facilisis | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 473 | _Italict Text_: _Italict_ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec sodales, enim et facilisis | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 668 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 668 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 670 | const formattedMessage = `${quotedMessage}<p><a href="https://matrix.to/#/@user:externalDomain.com">@user:externalDom | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 670 | const formattedMessage = `${quotedMessage}<p><a href="https://matrix.to/#/@user:externalDomain.com">@user:externalDom | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 746 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| LOW⚡ | …/federation-matrix/src/helpers/message.parsers.spec.ts | 746 | > Quote test: **Bold** _Italic_ Lorem ipsum dolor sit amet | CODE |
| 468 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ee/packages/license/src/deprecated.ts | 30 | export function getUnmodifiedLicenseAndModules(this: LicenseManager) { | CODE |
| LOW | …ages/omni-core-ee/src/isDepartmentCreationAvailable.ts | 4 | export function isDepartmentCreationAvailablePatch(): void { | CODE |
| LOW | …rc/outbound-communication/validators/canSendMessage.ts | 8 | export async function validateAgentAssignPermissions(userId: string, agentId: string): Promise<void> { | CODE |
| LOW | ee/packages/omni-core-ee/src/units/getUnitsFromUser.ts | 11 | async function getDepartmentsFromUserRoles(user: string): Promise<string[]> { | CODE |
| LOW | …ages/xmpp-server/tests/end-to-end/helper/rocketchat.ts | 141 | export function forgetRemoteUserOnCleanup(rc: RocketChat, username: string): void { | CODE |
| LOW | …/packages/xmpp-server/tests/end-to-end/helper/suite.ts | 43 | export async function assertFederationReachable(rc: RocketChat, user: XmppUser): Promise<void> { | CODE |
| LOW | ee/packages/xmpp-server/src/service/configuration.ts | 37 | export async function readXMPPServerConfiguration( | CODE |
| LOW | ee/packages/xmpp-server/src/handlers/parse.ts | 37 | export function parseAvailabilityPresence(stanza: Element): IncomingPresence | undefined { | CODE |
| LOW | ee/packages/abac/src/helper.ts | 100 | export async function previewRoomMembersInSteps( | CODE |
| LOW | ee/packages/abac/src/helper.ts | 263 | export function validateAndNormalizeAttributes(attributes: Record<string, string[]>): IAbacAttributeDefinition[] { | CODE |
| LOW | ee/packages/abac/src/helper.ts | 263 | export function validateAndNormalizeAttributes(attributes: Record<string, string[]>): IAbacAttributeDefinition[] { | CODE |
| LOW | ee/packages/abac/src/helper.ts | 328 | export async function ensureAttributeDefinitionsExist(normalized: IAbacAttributeDefinition[]): Promise<void> { | CODE |
| LOW | ee/packages/abac/src/helper.ts | 354 | export function buildNonCompliantConditions(newAttributes: IAbacAttributeDefinition[]) { | CODE |
| LOW | ee/packages/abac/src/helper.ts | 378 | export function buildRoomNonCompliantConditionsFromSubject(subjectAttributes: IAbacAttributeDefinition[]) { | CODE |
| LOW | ee/packages/abac/src/helper.ts | 412 | export function assertRoomAcceptsAttributes(room: IRoom): void { | CODE |
| LOW | ee/packages/media-calls/src/server/CallDirector.ts | 75 | function getFeaturesSupportedByTransport(caller: MediaCallContact, callee: MediaCallContact, features: CallFeature[]): C | CODE |
| LOW | …-calls/src/server/signals/getSignalsForExistingCall.ts | 9 | export async function getSignalsForExistingCall(call: IMediaCall, uid: IUser['_id'], contractId: string): Promise<Server | CODE |
| LOW | ee/packages/federation-matrix/src/setup.ts | 35 | export async function configureFederationMatrixSettings(settings: { | CODE |
| LOW | …atrix/src/api/middlewares/isFederationDomainAllowed.ts | 26 | function parseMatrixAuthorizationHeader(header: string): Record<string, string> { | CODE |
| LOW | ee/packages/federation-matrix/src/events/member.ts | 77 | async function getOrCreateFederatedRoom({ | CODE |
| LOW | ee/packages/federation-matrix/src/events/member.ts | 246 | function downloadAndSetAvatarDebounced(userId: string, user: IUser, newAvatarUrl: string | null): void { | CODE |
| LOW | …eration-matrix/src/helpers/getOrCreateFederatedUser.ts | 28 | export async function getOrCreateFederatedUser(userId: string): Promise<FederatedUser> { | CODE |
| LOW | …tion-matrix/src/helpers/isReservedByExclusiveBridge.ts | 31 | export function isReservedByExclusiveBridge(type: ExclusiveBridgeHandleType, name: string): boolean { | CODE |
| LOW | …ration-matrix/src/helpers/validateFederatedUsername.ts | 6 | export function validateFederatedUsername(mxid: string): mxid is UserID { | CODE |
| LOW | …tion-matrix/src/helpers/createOrUpdateFederatedUser.ts | 18 | export async function createOrUpdateFederatedUser(options: { | CODE |
| LOW | scripts/auto-close-duplicates.ts | 41 | function extractDuplicateIssueNumber(commentBody: string): number | null { | CODE |
| LOW | packages/tools/src/convertPathsIntoSubObjects.ts | 1 | export function convertPathsIntoSubObjects(object: Record<string, any>): Record<string, any> { | CODE |
| LOW | packages/tools/src/convertSubObjectsIntoPaths.ts | 3 | export function convertSubObjectsIntoPaths(object: Record<string, any>, parentPath?: string): Record<string, any> { | CODE |
| LOW | …c/components/MultiSelect/MultiSelectFilteredAnchor.tsx | 10 | function MultiSelectFilteredAnchor({ children: _children, ...props }: MultiSelectFilteredAnchorProps) { | CODE |
| LOW | …components/Contextualbar/ContextualbarEmptyContent.tsx | 14 | function ContextualbarEmptyContent({ icon = 'magnifier', title = 'Nothing Found', subtitle, ...props }: ContextualbarEmp | CODE |
| LOW | …rc/MessageFooterCallout/MessageFooterCalloutAction.tsx | 8 | function MessageFooterCalloutAction(props, ref) { | CODE |
| LOW | …c/MessageFooterCallout/MessageFooterCalloutDivider.tsx | 4 | const MessageFooterCalloutDivider = forwardRef<HTMLButtonElement>(function MessageFooterCalloutDivider(props, ref) { | CODE |
| LOW | …c/MessageFooterCallout/MessageFooterCalloutContent.tsx | 8 | function MessageFooterCalloutContent(props, ref) { | CODE |
| LOW | packages/core-typings/src/IMessage/IMessage.ts | 250 | export function isEncryptedMessageContent(value: unknown): value is EncryptedMessageContent { | CODE |
| LOW | …n/src/components/LoginSwitchLanguageFooter.stories.tsx | 9 | function ExampleTranslationDecorator({ children }: { children: ReactNode }) { | CODE |
| LOW | packages/ui-livekit/src/useCallDiagnostics.ts | 99 | async function readRemoteParticipantStats(participant: Participant): Promise<{ | CODE |
| LOW | packages/ddp-server/src/publications/autoupdate.ts | 16 | export function registerAutoupdatePublication(server: Server): MeteorCollection<ClientVersion> { | CODE |
| LOW | …p-server/src/publications/loginServiceConfiguration.ts | 11 | export function applyLoginServiceConfigurationChange( | CODE |
| LOW | …p-server/src/publications/loginServiceConfiguration.ts | 24 | export function registerLoginServiceConfigurationPublication(server: Server): MeteorCollection<Partial<LoginServiceConfi | CODE |
| LOW | packages/streamer/src/publication-user-cache.ts | 17 | export function getCachedUserForPublication(publication: IPublication): Promise<CachedUser | null> { | CODE |
| LOW | …/src/definition/uikit/UIKitIncomingInteractionTypes.ts | 57 | export function isMessageBoxIncomingInteraction( | CODE |
| LOW | …c/definition/uikit/UIKitInteractionPayloadFormatter.ts | 38 | function isContextualBarInteraction(type: IUIKitInteraction['type']): type is IUIKitContextualBarInteraction['type'] { | CODE |
| LOW | …c/definition/uikit/UIKitInteractionPayloadFormatter.ts | 46 | export function formatContextualBarInteraction( | CODE |
| LOW | …ine/src/definition/mediaCalls/MediaCallHangupReason.ts | 65 | export function isKnownMediaCallHangupReason(reason: MediaCallHangupReason | undefined): reason is KnownMediaCallHangupR | CODE |
| LOW | packages/random/src/createAleaGenerator.ts | 21 | export function createAleaGeneratorWithGeneratedSeed() { | CODE |
| LOW | …nts/MultiSelectCustom/MultiSelectCustomListWrapper.tsx | 7 | const MultiSelectCustomListWrapper = forwardRef<Element, MultiSelectCustomListWrapperProps>(function MultiSelectCustomLi | CODE |
| LOW | …nents/Contextualbar/ContextualbarScrollableContent.tsx | 8 | function ContextualbarScrollableContent({ children, ...props }, ref) { | CODE |
| LOW | …conference/src/preflight/PreflightDeviceMenuButton.tsx | 45 | const PreflightDeviceMenuButton = forwardRef<HTMLButtonElement, PreflightDeviceMenuButtonProps>(function PreflightDevice | CODE |
| LOW | …s/apps/base-runtime/src/lib/sanitizeDeprecatedUsage.ts | 3 | function hasPotentialDeprecatedUsage(source: string) { | CODE |
| LOW | packages/apps/base-runtime/src/lib/ast/mod.ts | 50 | export function fixBrokenSynchronousAPICalls(appSource: string): string { | CODE |
| LOW | packages/apps/base-runtime/src/lib/ast/operations.ts | 101 | export function buildFixModifiedFunctionsOperation(functionIdentifiers: Set<string>): FullAncestorWalkerCallback<WalkerS | CODE |
| LOW | packages/apps/src/server/misc/appTranslations.ts | 13 | export function getAppTranslationNamespace(appId: string): string { | CODE |
| LOW | …elease-action/src/fixWorkspaceVersionsBeforePublish.ts | 20 | export async function fixWorkspaceVersionsBeforePublish() { | CODE |
| LOW | apps/meteor/ee/server/meteor-methods/samlLogout.ts | 14 | function getSamlServiceProviderOptions(provider: string): IServiceProviderOptions { | CODE |
| LOW | …ver/lib/apps/marketplace/fetchMarketplaceCategories.ts | 30 | export async function fetchMarketplaceCategories(): Promise<AppCategory[]> { | CODE |
| LOW | apps/meteor/ee/server/lib/saml/lib/getSAMLEnvelope.ts | 25 | async function performBindingSpecificDecoding(binding: SAMLBinding, buffer: Buffer<ArrayBuffer>): Promise<Buffer<ArrayBu | CODE |
| LOW | …er/lib/saml/lib/signature/validateRedirectSignature.ts | 7 | export function validateRedirectSignature(envelope: SAMLRedirectEnvelope, certificate: string): boolean { | CODE |
| LOW⚡ | …/ee/server/lib/saml/lib/generators/AuthorizeRequest.ts | 13 | function resolveCustomAuthnContext(serviceProviderOptions: IServiceProviderOptions): string | undefined; | CODE |
| LOW⚡ | …/ee/server/lib/saml/lib/generators/AuthorizeRequest.ts | 14 | function resolveCustomAuthnContext(serviceProviderOptions: IServiceProviderOptions, defaultValue: string): string; | CODE |
| LOW⚡ | …/ee/server/lib/saml/lib/generators/AuthorizeRequest.ts | 15 | function resolveCustomAuthnContext(serviceProviderOptions: IServiceProviderOptions, defaultValue?: string): string | und | CODE |
| 109 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/federation-matrix/src/helpers/getFederatedRoomName.ts | 1 | // Derives a valid Rocket.Chat room name (slug) from a Matrix room id. | COMMENT |
| LOW | packages/fuselage/src/components/Menu/MenuPopover.tsx | 21 | const isMobile = !useBreakpoints().includes('sm'); | COMMENT |
| LOW | packages/core-typings/src/Ajv.ts | 81 | // Rewrite them in place to the equivalent 2020-12 form the runtime Ajv accepts, without | COMMENT |
| LOW | …s/core-typings/src/mediaCalls/RTCSessionDescription.ts | 1 | export type RTCSdpType = 'answer' | 'offer' | 'pranswer' | 'rollback'; | COMMENT |
| LOW | packages/message-parser/tests/unorderedList.test.ts | 61 | // [paragraph([])], | COMMENT |
| LOW | packages/release-changelog/tsconfig.json | 1 | { | COMMENT |
| LOW | packages/release-changelog/tsconfig.json | 21 | // "jsxImportSource": "", /* Specify module specifier used to import the JSX factory func | COMMENT |
| LOW | packages/release-changelog/tsconfig.json | 41 | // "customConditions": [], /* Conditions to set in addition to the resolver-specific defau | COMMENT |
| LOW | packages/release-changelog/tsconfig.json | 61 | // "importHelpers": true, /* Allow importing helper functions from tslib once per project | COMMENT |
| LOW | packages/release-changelog/tsconfig.json | 81 | // "preserveSymlinks": true, /* Disable resolving symlinks to their realpath. This correlate | COMMENT |
| LOW | packages/fuselage-hooks/src/useDebouncedReducer.ts | 61 | // * @param delay - the number of milliseconds to delay the updater | COMMENT |
| LOW | packages/livechat/src/lib/uiKit.ts | 61 | if ([UIKitInteractionType.ERRORS].includes(type)) { | COMMENT |
| LOW | packages/livechat/src/lib/uiKit.ts | 81 | } | COMMENT |
| LOW | packages/core-services/src/types/IBroker.ts | 1 | import type { IServiceClass } from './ServiceClass'; | COMMENT |
| LOW | packages/random/src/RandomGenerator.ts | 1 | // We use cryptographically strong PRNGs (crypto.getRandomBytes() on the server, | COMMENT |
| LOW | packages/ddp-client/src/Connection.ts | 1 | import { Emitter } from '@rocket.chat/emitter'; | COMMENT |
| LOW | packages/ddp-client/src/Connection.ts | 201 | let stopHandshake: (() => void) | undefined; | COMMENT |
| LOW | packages/release-action/tsconfig.json | 1 | { | COMMENT |
| LOW | packages/release-action/tsconfig.json | 21 | // "jsxImportSource": "", /* Specify module specifier used to import the JSX factory func | COMMENT |
| LOW | packages/release-action/tsconfig.json | 41 | // "customConditions": [], /* Conditions to set in addition to the resolver-specific defau | COMMENT |
| LOW | packages/release-action/tsconfig.json | 61 | // "importHelpers": true, /* Allow importing helper functions from tslib once per project | COMMENT |
| LOW | packages/release-action/tsconfig.json | 81 | // "preserveSymlinks": true, /* Disable resolving symlinks to their realpath. This correlate | COMMENT |
| LOW | packages/cas-validate/src/validate.ts | 21 | proxies?: string[]; | COMMENT |
| LOW | packages/cas-validate/src/validate.ts | 61 | // "RubyCAS Style" attributes | COMMENT |
| LOW | packages/cas-validate/src/validate.ts | 121 | // <cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'> | COMMENT |
| LOW | .github/agents/bug-resolution-agent.md | 81 | // Problem: <Detailed description of what is wrong> | COMMENT |
| LOW | .github/agents/feature-development-agent.md | 101 | // Location: <File path and function/component name> | COMMENT |
| LOW | apps/meteor/.codeclimate.yml | 1 | # This is a sample .codeclimate.yml configured for Engine analysis on Code | COMMENT |
| LOW | apps/meteor/ee/server/api/v1/omnichannel/lib/tags.ts | 21 | COMMENT | |
| LOW | …eteor/tests/end-to-end/api/http-response-truncation.ts | 1 | import { describe, it } from 'node:test'; | COMMENT |
| LOW | …/meteor/server/lib/notifications/processDirectEmail.ts | 81 | } | COMMENT |
| LOW | apps/meteor/server/startup/serverRunning.ts | 101 | // const id = `mongodbDeprecation_${mongoVersion.replace(/[^0-9]/g, '_')}`; | COMMENT |
| LOW | apps/meteor/server/startup/serverRunning.ts | 121 | // text, | COMMENT |
| LOW | apps/meteor/definition/externals/csv-parse.d.ts | 1 | // The Meteor bundler resolves npm requires by physical path and doesn't support | COMMENT |
| LOW | apps/meteor/packages/autoupdate/autoupdate_client.js | 1 | // Subscribe to the `meteor_autoupdate_clientVersions` collection, | COMMENT |
| LOW | apps/meteor/packages/autoupdate/autoupdate_server.js | 1 | // Publish the current client versions for each client architecture | COMMENT |
| LOW | apps/meteor/packages/autoupdate/autoupdate_server.js | 21 | // reload only after major changes, use a custom AUTOUPDATE_VERSION and | COMMENT |
| LOW | apps/meteor/lib/markdown/client.test.js | 461 | }); | COMMENT |
| LOW | apps/meteor/client/providers/AuthorizationProvider.tsx | 41 | // Permissions and Roles change infrequently (admin-driven or login-time only); | COMMENT |
| LOW | apps/meteor/client/lib/codeMirror.ts | 1 | import 'codemirror/addon/fold/brace-fold.js'; | COMMENT |
| LOW | apps/meteor/client/lib/codeMirror.ts | 121 | COMMENT | |
| LOW | apps/meteor/client/lib/codeMirror.ts | 141 | // import 'codemirror/theme/night.css'; | COMMENT |
| LOW | apps/meteor/client/lib/sdk/ddpSdk.ts | 181 | if (typeof window !== 'undefined') { | COMMENT |
| LOW | apps/meteor/client/lib/sdk/ddpSdk.ts | 201 | // we were awaiting (sdk.account.uid still maps to this token's user) | COMMENT |
| LOW | apps/meteor/client/lib/sdk/ddpSdk.ts | 221 | } | COMMENT |
| LOW | apps/meteor/client/startup/startup.ts | 61 | } | COMMENT |
| LOW | apps/meteor/client/startup/startup.ts | 121 | // Session-resume failure (expired stored token on page load): Meteor has already | COMMENT |
| LOW | …t/views/conference/hooks/useConferencePresenceLease.ts | 21 | if (!active) { | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1780 | // Step 1: Create a room on Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1783 | // Step 2: Invite RC user from Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1786 | // Step 3: RC user accepts the invite | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1819 | // Step 5: Send a message from Synapse (while RC user is kicked) | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1824 | // Step 6: Re-invite the same RC user from Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1827 | // Step 7: Validate the invite was created successfully on the RC side | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1847 | // Step 1: Create a room on Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1850 | // Step 2: Invite RC user from Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1853 | // Step 3: RC user accepts the invite | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1890 | // Step 5: Send a message from Synapse (while RC user has left) | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1895 | // Step 6: Re-invite the same RC user from Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1898 | // Step 7: Validate the invite was created successfully on the RC side | COMMENT |
| LOW | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1806 | // Step 4: Kick RC user from Synapse | COMMENT |
| LOW | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1873 | // Step 4: RC user leaves the room | COMMENT |
| LOW | ee/packages/federation-matrix/src/events/member.ts | 283 | // TODO if there is no avatar_url we may want to validate first if we should remove the user avatar because if may be | COMMENT |
| LOW | …or/ee/server/hooks/canned-responses/cannedResponses.ts | 8 | // when the license is enabled, we need to check if the feature is enabled | COMMENT |
| LOW | apps/meteor/tests/data/file.helper.ts | 28 | // Step 1: Upload file to rooms.media/:rid | COMMENT |
| LOW | apps/meteor/tests/data/file.helper.ts | 42 | // Step 2: Confirm and send message with rooms.mediaConfirm/:rid/:fileId | COMMENT |
| LOW | apps/meteor/packages/autoupdate/autoupdate_server.js | 59 | // Step 1: load the current client program on the server | COMMENT |
| LOW | apps/meteor/packages/autoupdate/autoupdate_server.js | 71 | // Step 2: update __meteor_runtime_config__.autoupdate.versions. | COMMENT |
| LOW⚡ | apps/meteor/packages/autoupdate/autoupdate_server.js | 83 | // Step 3: form the new client boilerplate which contains the updated | COMMENT |
| LOW⚡ | apps/meteor/packages/autoupdate/autoupdate_server.js | 89 | // Step 4: update the ClientVersions collection. | COMMENT |
| LOW | apps/meteor/client/lib/2fa/process2faReturn.ts | 102 | // if the promise is rejected, we need to check if it's a 2fa error | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1780 | // Step 1: Create a room on Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1783 | // Step 2: Invite RC user from Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1786 | // Step 3: RC user accepts the invite | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1819 | // Step 5: Send a message from Synapse (while RC user is kicked) | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1824 | // Step 6: Re-invite the same RC user from Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1827 | // Step 7: Validate the invite was created successfully on the RC side | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1847 | // Step 1: Create a room on Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1850 | // Step 2: Invite RC user from Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1853 | // Step 3: RC user accepts the invite | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1890 | // Step 5: Send a message from Synapse (while RC user has left) | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1895 | // Step 6: Re-invite the same RC user from Synapse | COMMENT |
| LOW⚡ | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1898 | // Step 7: Validate the invite was created successfully on the RC side | COMMENT |
| LOW | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1806 | // Step 4: Kick RC user from Synapse | COMMENT |
| LOW | …ckages/federation-matrix/tests/end-to-end/room.spec.ts | 1873 | // Step 4: RC user leaves the room | COMMENT |
| LOW | apps/meteor/tests/data/file.helper.ts | 28 | // Step 1: Upload file to rooms.media/:rid | COMMENT |
| LOW | apps/meteor/tests/data/file.helper.ts | 42 | // Step 2: Confirm and send message with rooms.mediaConfirm/:rid/:fileId | COMMENT |
| LOW | apps/meteor/packages/autoupdate/autoupdate_server.js | 59 | // Step 1: load the current client program on the server | COMMENT |
| LOW | apps/meteor/packages/autoupdate/autoupdate_server.js | 71 | // Step 2: update __meteor_runtime_config__.autoupdate.versions. | COMMENT |
| LOW⚡ | apps/meteor/packages/autoupdate/autoupdate_server.js | 83 | // Step 3: form the new client boilerplate which contains the updated | COMMENT |
| LOW⚡ | apps/meteor/packages/autoupdate/autoupdate_server.js | 89 | // Step 4: update the ClientVersions collection. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ee/packages/xmpp-server/CHANGELOG.md | 7 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | ee/packages/xmpp-server/docs/operations.md | 112 | ## The microservice | COMMENT |
| MEDIUM | …002-integration-service-runs-only-as-a-microservice.md | 1 | # The integration service runs only as a microservice | COMMENT |
| MEDIUM | ee/apps/xmpp-server-service/CHANGELOG.md | 7 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | docs/apps-engine-migration.md | 1 | # Apps-Engine migration to microservice | COMMENT |
| MEDIUM | scripts/todo-issue/README.md | 222 | ├── index.ts # Entry point, config loading, diff resolution, orchestration | CODE |
| MEDIUM | packages/tools/CHANGELOG.md | 7 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | packages/core-typings/CHANGELOG.md | 58 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | packages/ui-contexts/CHANGELOG.md | 15 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | packages/model-typings/CHANGELOG.md | 25 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | packages/models/CHANGELOG.md | 27 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | packages/core-services/CHANGELOG.md | 41 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | packages/rest-typings/CHANGELOG.md | 64 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| MEDIUM | packages/i18n/CHANGELOG.md | 81 | - ([#42501](https://github.com/RocketChat/Rocket.Chat/pull/42501)) Adds a native XMPP server (Enterprise, federation mod | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …s/federation-matrix/docker-compose/hs1/homeserver.yaml | 56 | # -------------------------------------------------------------------- | COMMENT |
| MEDIUM | …s/federation-matrix/docker-compose/hs1/homeserver.yaml | 58 | # -------------------------------------------------------------------- | COMMENT |
| MEDIUM | packages/message-parser/benchmarks/parser.bench.ts | 16 | // ── Options presets ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/message-parser/benchmarks/parser.bench.ts | 27 | // ── Fixture type ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/message-parser/benchmarks/parser.bench.ts | 42 | // ── Categories ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/message-parser/benchmarks/parser.bench.ts | 182 | // ── Helpers ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/message-parser/benchmarks/parser.bench.ts | 196 | // ── Runner ───────────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/i18n/src/locales/en.i18n.json | 6069 | "Search_AI_overview_info": "Generated by AI from the messages below", | CODE |
| HIGH | …/meteor/client/views/search/SearchAnswerPanel.spec.tsx | 24 | Search_AI_overview_info: 'Generated by AI from the messages below', | CODE |
| HIGH | …/meteor/client/views/search/SearchAnswerPanel.spec.tsx | 84 | expect(screen.getByTitle('Generated by AI from the messages below')).toBeInTheDocument(); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …deration-matrix/tests/scripts/run-integration-tests.sh | 196 | # Check if docker-compose.test.yml exists | COMMENT |
| LOW | …ges/visual-regression/scripts/run-playwright-docker.sh | 23 | # Check if update-snapshots flag is passed | COMMENT |
| LOW | .github/actions/docker-image-size-tracker/action.yml | 170 | # Check if it's a manifest list (multi-arch) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …e-runtime/src/lib/accessors/tests/AppAccessors.test.ts | 37 | // which is robust for the accessors that transform their result or return void. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/actions/docker-image-size-tracker/action.yml | 227 | # Create a separate worktree for history branch | COMMENT |