Repository Analysis

SagerNet/sing-box

The universal proxy platform

0.2 Likely human-written View on GitHub
0.2
Adjusted Score
0.2
Raw Score
100%
Time Factor
2026-05-26
Last Push
34,353
Stars
Go
Language
168,869
Lines of Code
1161
Files
30
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 0HIGH 0MEDIUM 4LOW 26

Pattern Findings

30 matches across 5 categories. Click a row to expand file-level details.

Over-Commented Block16 hits · 16 pts
SeverityFileLineSnippet
LOWexperimental/libbox/signal_handler_darwin.go41 // Do NOT call Go's handler directly — Go's preparePanic only modifies the
LOWexperimental/libbox/signal_handler_darwin.go121func PrepareCrashSignalHandlers() {
LOWtransport/v2raygrpc/credentials/syscallconn.go21import (
LOWcommon/windivert/windivert.go1// Package windivert provides a pure-Go binding to the WinDivert kernel
LOWcommon/schannel/doc.go1// Package schannel wraps the Windows Schannel security provider (SSPI) for
LOWcommon/certificate/anchors_darwin.h1#ifndef BOX_CERTIFICATE_ANCHORS_DARWIN_H
LOWcommon/srs/compat_test.go61 From []byte
LOWcommon/tls/apple_client_platform_darwin.m1#import "apple_client_platform_darwin.h"
LOWcommon/ktls/ktls_cipher_suites_linux.go41 TLS_CIPHER_CHACHA20_POLY1305_IV_SIZE kernelCryptoCipherType = 12
LOWcommon/ktls/ktls_cipher_suites_linux.go141 crypto.cipher_type = TLS_CIPHER_CHACHA20_POLY1305
LOWcommon/ktls/ktls_cipher_suites_linux.go161
LOWcommon/ktls/ktls_cipher_suites_linux.go261 crypto.version = *hc.Version
LOWcommon/ktls/ktls_cipher_suites_linux.go301 //
LOWconstant/goos/goos.go1// Copyright 2015 The Go Authors. All rights reserved.
LOW.github/setup_go_for_macos1013.sh41# stdlib (crypto/x509) is compiled from patched src automatically.
LOWdns/transport/local/local_darwin_cgo.go101 }
AI Slop Vocabulary4 hits · 12 pts
SeverityFileLineSnippet
MEDIUMcommon/certificate/mozilla.go459// Certainly Root E1
MEDIUMcommon/certificate/mozilla.go474// Certainly Root R1
MEDIUMcommon/certificate/chrome.go412// CN=Certainly Root R1; O=Certainly; C=US
MEDIUMcommon/certificate/chrome.go445// CN=Certainly Root E1; O=Certainly; C=US
Fake / Example Data6 hits · 6 pts
SeverityFileLineSnippet
LOWdocs/migration.zh.md30 "email": "admin@example.com"
LOWdocs/migration.zh.md50 "email": "admin@example.com"
LOWdocs/migration.zh.md67 "email": "admin@example.com"
LOWdocs/migration.md30 "email": "admin@example.com"
LOWdocs/migration.md50 "email": "admin@example.com"
LOWdocs/migration.md67 "email": "admin@example.com"
Verbosity Indicators3 hits · 4 pts
SeverityFileLineSnippet
LOWexperimental/libbox/signal_handler_darwin.go25 // Step 1: PLCrashReporter writes .plcrash, resets all handlers to SIG_DFL,
LOWexperimental/libbox/signal_handler_darwin.go40 // Step 2: Restore Go's handler via sigaction (overwrites PLCrashReporter's SIG_DFL).
LOWexperimental/libbox/signal_handler_darwin.go47 // Step 3: Return. The kernel restores the original ucontext and re-executes
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippet
LOWrelease/completions/sing-box.zsh96 # Check if this is an activeHelp statement (i.e., prefixed with $activeHelpMarker)