Repository Analysis

ZLMediaKit/ZLMediaKit

WebRTC/RTSP/RTMP/HTTP/HLS/HTTP-FLV/WebSocket-FLV/HTTP-TS/HTTP-fMP4/WebSocket-TS/WebSocket-fMP4/GB28181/SRT/STUN/TURN server and client framework based on C++11

1.7 Likely human-written View on GitHub
1.7
Adjusted Score
1.7
Raw Score
100%
Time Factor
2026-05-28
Last Push
17,093
Stars
C++
Language
156,568
Lines of Code
518
Files
267
Pattern Hits
2026-05-31
Scan Date

Score History

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

CRITICAL 0HIGH 0MEDIUM 6LOW 261

Pattern Findings

267 matches across 8 categories. Click a row to expand file-level details.

Over-Commented Block231 hits · 222 pts
SeverityFileLineSnippet
LOWZLMVersion.h.ini1#ifndef __GIT_VERSION_H__
LOWCMakeLists.txt1# MIT License
LOWgolang/zlmediakit/mk_common.go121}
LOWext-codec/VP9Rtp.cpp61 pictureID, tl0PicIdx,
LOWext-codec/VP9Rtp.cpp81// +-+-+-+-+-+-+-+-+ -
LOWext-codec/VP9Rtp.cpp101// | .. |
LOWext-codec/CMakeLists.txt1# MIT License
LOWext-codec/AV1Rtp.cpp341 // 解析聚合头
LOWext-codec/SPSParser.c1#include <stdio.h>
LOWext-codec/SPSParser.c21#define CODEC_FLAG2_IGNORE_CROP 0x00010000 ///< Discard cropping information from SPS.
LOWext-codec/MP2A.cpp21
LOWtests/test_ps.cpp1#include "Common/config.h"
LOWtests/CMakeLists.txt1# MIT License
LOWtests/test_rtp_pcap.cpp1#include "Common/config.h"
LOWtests/test_sortor.cpp161 // 模拟乱序,count是连续倒序次数,最多连续乱序8次 [AUTO-TRANSLATED:76bd8e43]
LOWtests/test_pusherMp4.cpp141 // You can use the mp4 file generated by test_server
LOWtests/test_bench_push.cpp1/*
LOWtests/test_server.cpp21
LOWtests/test_server.cpp241 loadIniConfig();
LOWtests/test_server.cpp261 // hls address: http://127.0.0.1/live/0/hls.m3u8
LOWtests/test_httpClient.cpp81 ///////////////////////////////http get///////////////////////
LOWserver/pyinvoker.cpp1#if defined(ENABLE_PYTHON)
LOWserver/Process.cpp21
LOWserver/Process.cpp301 // windows下目前没有比较好的手段往子进程发送SIGTERM或信号 [AUTO-TRANSLATED:cd32ad25]
LOWserver/CMakeLists.txt1# MIT License
LOWserver/WebApi.cpp21
LOWserver/WebApi.cpp41#include "FFmpegSource.h"
LOWserver/WebApi.cpp61#include "../webrtc/WebRtcSignalingSession.h"
LOWserver/WebHook.cpp761 * kBroadcastHttpAccess event trigger mechanism
LOWserver/VideoStack.cpp1#if defined(ENABLE_VIDEOSTACK) && defined(ENABLE_X264) && defined(ENABLE_FFMPEG)
LOWserver/System.cpp21#include <Windows.h>
LOWserver/pyinvoker.h1
LOWserver/ShellParser.h21// - Whitespace splitting (space, tab, newline)
LOWserver/main.cpp21#include "Common/config.h"
LOWserver/main.cpp441 // https服务器,端口默认443 [AUTO-TRANSLATED:24999616]
LOWserver/WebApi.h181};
LOWsrt/SrtTransport.hpp1#ifndef ZLMEDIAKIT_SRT_TRANSPORT_H
LOWsrt/CMakeLists.txt1# MIT License
LOWsrt/SrtTransport.cpp1#include "Util/onceToken.h"
LOWsrt/Common.hpp1#ifndef ZLMEDIAKIT_SRT_COMMON_H
LOW.github/workflows/docker_py.yml81 # transparency data even for private images, pass --force to cosign below.
LOW.github/workflows/docker.yml81 # https://github.com/sigstore/cosign
LOWapi/CMakeLists.txt1# MIT License
LOWapi/include/mk_events_objects.h21///////////////////////////////////////////RecordInfo/////////////////////////////////////////////
LOWapi/include/mk_events_objects.h41// Folder path
LOWapi/include/mk_events_objects.h61#define mk_mp4_info_get_file_size mk_record_info_get_file_size
LOWapi/include/mk_events_objects.h81// Parser::Url(), get the HTTP access url (excluding the parameters after ?)
LOWapi/include/mk_events_objects.h121
LOWapi/include/mk_transcode.h21
LOWapi/include/mk_transcode.h281#ifdef __cplusplus
LOWapi/include/mk_mediakit.h21#include "mk_events.h"
LOWapi/include/mk_tcp.h61
LOWapi/include/mk_common.h21#if defined(_WIN32) && defined(_MSC_VER)
LOWapi/include/mk_common.h41#endif
LOWapi/include/mk_common.h61
LOWapi/include/mk_common.h81 // File log save days, set to 0 to disable log file
LOWapi/include/mk_util.h241 */
LOWapi/include/mk_frame.h21// cpp
LOWapi/source/mk_webrtc.cpp21#include "Thread/WorkThreadPool.h"
LOWapi/source/mk_recorder.cpp121 // 默认解复用mp4不生成mp4 [AUTO-TRANSLATED:11f2dcee]
171 more matches not shown…
Hyper-Verbose Identifiers23 hits · 24 pts
SeverityFileLineSnippet
LOWwww/ZLMRTCClient.js870 function shimSenderReceiverGetStats(window) {
LOWwww/ZLMRTCClient.js978 function shimAddTrackRemoveTrackWithNative(window) {
LOWwww/ZLMRTCClient.js2409 function isActionAllowedInSignalingState(action, type, signalingState) {
LOWwww/ZLMRTCClient.js2459 function addTrackToStreamAndFireEvent(track, stream) {
LOWwww/ZLMRTCClient.js2465 function removeTrackFromStreamAndFireEvent(track, stream) {
LOWwww/ZLMRTCClient.js4887 function shimTrackEventTransceiver(window) {
LOWwww/ZLMRTCClient.js5327 function shimAddIceCandidateNullOrEmpty(window, browserDetails) {
LOWwww/ZLMRTCClient.js5632 function isVideoConstrainsForScreenCast(constraints) {
LOWwww/ZLMRTCClient.js7184 function throwIfCancellationRequested(config) {
LOWwww/ZLMRTCClient.js7500 this.interceptors.request.forEach(function unshiftRequestInterceptors(interceptor) {
LOWwww/swagger/swagger-ui.js1!function webpackUniversalModuleDefinition(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"fu
LOWwww/swagger/swagger-ui-es-bundle-core.js2import*as e from"base64-js";import*as t from"ieee754";import*as r from"react";import*as n from"redux";import*as a from"i
LOWwww/swagger/swagger-ui-standalone-preset.js2!function webpackUniversalModuleDefinition(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"fu
LOWwww/webrtc/ZLMRTCClient.js870 function shimSenderReceiverGetStats(window) {
LOWwww/webrtc/ZLMRTCClient.js978 function shimAddTrackRemoveTrackWithNative(window) {
LOWwww/webrtc/ZLMRTCClient.js2409 function isActionAllowedInSignalingState(action, type, signalingState) {
LOWwww/webrtc/ZLMRTCClient.js2459 function addTrackToStreamAndFireEvent(track, stream) {
LOWwww/webrtc/ZLMRTCClient.js2465 function removeTrackFromStreamAndFireEvent(track, stream) {
LOWwww/webrtc/ZLMRTCClient.js4887 function shimTrackEventTransceiver(window) {
LOWwww/webrtc/ZLMRTCClient.js5327 function shimAddIceCandidateNullOrEmpty(window, browserDetails) {
LOWwww/webrtc/ZLMRTCClient.js5632 function isVideoConstrainsForScreenCast(constraints) {
LOWwww/webrtc/ZLMRTCClient.js7184 function throwIfCancellationRequested(config) {
LOWwww/webrtc/ZLMRTCClient.js7500 this.interceptors.request.forEach(function unshiftRequestInterceptors(interceptor) {
Decorative Section Separators2 hits · 6 pts
SeverityFileLineSnippet
MEDIUMCMakeLists.txt524# ----------------------------------------------------------------------------
MEDIUMCMakeLists.txt526# ----------------------------------------------------------------------------
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippet
MEDIUMwww/ZLMRTCClient.js4513 // This is an ugly hack, but at the same time is way more robust than
MEDIUMwww/webrtc/ZLMRTCClient.js4513 // This is an ugly hack, but at the same time is way more robust than
Fake / Example Data4 hits · 6 pts
SeverityFileLineSnippet
LOWwww/swagger/swagger-ui.js1!function webpackUniversalModuleDefinition(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"fu
LOWwww/swagger/swagger-ui.js1!function webpackUniversalModuleDefinition(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"fu
LOWwww/swagger/swagger-ui-es-bundle-core.js2import*as e from"base64-js";import*as t from"ieee754";import*as r from"react";import*as n from"redux";import*as a from"i
LOWwww/swagger/swagger-ui-es-bundle-core.js2import*as e from"base64-js";import*as t from"ieee754";import*as r from"react";import*as n from"redux";import*as a from"i
Slop Phrases2 hits · 6 pts
SeverityFileLineSnippet
MEDIUMconf/config.ini715# Assuming your pull source format is not H264, H265, or AAC, you can use direct proxy mode to support RTSP proxying.
MEDIUMsrc/Rtcp/RtcpFCI.h38// The number of lost macroblocks, in scan order as discussed above.
Deep Nesting2 hits · 2 pts
SeverityFileLineSnippet
LOWtools/openapi/generates.py70
LOWtools/openapi/generates.py102
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippet
LOWconf/config.ini521# Set this to 0 to improve compatibility with legacy RTSP devices that do not support `stap-a`.