an easy-to-use dynamic service discovery, configuration and service management platform for building AI cloud native applications.
This report summarizes scanner evidence for alibaba/nacos, a Java project with 33,489 GitHub stars. SynthScan examined 1,140,715 lines of code across 6776 source files, recording 654 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 2.8 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 341 finding(s).
Are imports declared and package/API names verified? 269 finding(s).
Are wrappers, guards, and repeated structures necessary? 157 finding(s).
Which changes need focused human review? 654 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 654 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …acos/core/monitor/GrpcServerThreadPoolMonitorTest.java | 55 | org.springframework.test.util.ReflectionTestUtils.setField(monitor, "sdkServer", sdkServer); | CODE |
| CRITICAL | …acos/core/monitor/GrpcServerThreadPoolMonitorTest.java | 56 | org.springframework.test.util.ReflectionTestUtils.setField(monitor, "clusterServer", | CODE |
| CRITICAL | …acos/core/monitor/GrpcServerThreadPoolMonitorTest.java | 80 | org.springframework.test.util.ReflectionTestUtils.setField(monitor, "sdkServer", sdkServer); | CODE |
| CRITICAL | …acos/core/monitor/GrpcServerThreadPoolMonitorTest.java | 81 | org.springframework.test.util.ReflectionTestUtils.setField(monitor, "clusterServer", | CODE |
| CRITICAL | …stributed/distro/task/load/DistroLoadDataTaskTest.java | 133 | .thenReturn(new com.alibaba.nacos.core.distributed.distro.entity.DistroData( | CODE |
| CRITICAL | …stributed/distro/task/load/DistroLoadDataTaskTest.java | 134 | new com.alibaba.nacos.core.distributed.distro.entity.DistroKey("k", type), null)); | CODE |
| CRITICAL | …distributed/distro/task/delay/DistroDelayTaskTest.java | 60 | task.merge(new com.alibaba.nacos.common.task.AbstractDelayTask() { | CODE |
| CRITICAL | …nacos/core/distributed/raft/NacosStateMachineTest.java | 455 | org.junit.jupiter.api.Assertions.assertThrows(RuntimeException.class, | CODE |
| CRITICAL | …nacos/core/distributed/raft/NacosStateMachineTest.java | 528 | byte[] metaBytes = com.alibaba.nacos.common.utils.JacksonUtils.toJson(meta) | CODE |
| CRITICAL | …ibaba/nacos/core/distributed/raft/JRaftServerTest.java | 532 | new com.alibaba.nacos.core.distributed.raft.utils.FailoverClosureImpl( | CODE |
| CRITICAL | …ibaba/nacos/core/distributed/raft/JRaftServerTest.java | 543 | new com.alibaba.nacos.core.distributed.raft.utils.FailoverClosureImpl( | CODE |
| CRITICAL | …ibaba/nacos/core/distributed/raft/JRaftServerTest.java | 713 | new com.alibaba.nacos.core.distributed.raft.utils.FailoverClosureImpl( | CODE |
| CRITICAL | …ibaba/nacos/core/distributed/raft/JRaftServerTest.java | 737 | new com.alibaba.nacos.core.distributed.raft.utils.FailoverClosureImpl( | CODE |
| CRITICAL | …ibaba/nacos/core/distributed/raft/JRaftServerTest.java | 776 | new com.alibaba.nacos.core.distributed.raft.utils.FailoverClosureImpl( | CODE |
| CRITICAL | …ributed/raft/auth/NacosJRaftServerInterceptorTest.java | 104 | org.junit.jupiter.api.Assertions.assertEquals(Status.Code.UNAUTHENTICATED, | CODE |
| CRITICAL | …/nacos/core/distributed/raft/utils/JRaftUtilsTest.java | 151 | new com.alipay.sofa.jraft.option.NodeOptions(); | CODE |
| CRITICAL | …/nacos/core/distributed/raft/utils/JRaftUtilsTest.java | 167 | com.alibaba.nacos.sys.utils.DiskUtils.deleteDirectory(tempDir.getAbsolutePath()); | CODE |
| CRITICAL | …/nacos/core/distributed/raft/utils/JRaftUtilsTest.java | 184 | new com.alipay.sofa.jraft.option.NodeOptions(); | CODE |
| CRITICAL | …/nacos/core/distributed/raft/utils/JRaftUtilsTest.java | 207 | new com.alipay.sofa.jraft.option.NodeOptions(); | CODE |
| CRITICAL | …acos/core/plugin/PluginClusterSyncIntegrationTest.java | 186 | new com.alibaba.nacos.core.plugin.model.PluginInfo(); | CODE |
| CRITICAL | …acos/core/plugin/PluginClusterSyncIntegrationTest.java | 206 | new com.alibaba.nacos.core.plugin.model.PluginInfo(); | CODE |
| CRITICAL | …m/alibaba/nacos/core/distributed/raft/JRaftServer.java | 202 | com.alipay.sofa.jraft.NodeManager.getInstance(); | CODE |
| CRITICAL | …nacos/core/control/remote/TpsControlRequestFilter.java | 91 | com.alibaba.nacos.plugin.control.Loggers.TPS.warn( | CODE |
| CRITICAL | …nacos/core/control/remote/TpsControlRequestFilter.java | 99 | com.alibaba.nacos.plugin.control.Loggers.TPS.warn( | CODE |
| CRITICAL | …baba/nacos/test/sdk/ai/McpHttpClientJavaSdkITCase.java | 79 | org.junit.jupiter.api.Assumptions.assumeTrue(AUTH_ENABLED); | CODE |
| CRITICAL | …os/test/sdk/ai/AgentDiscoveryServiceJavaSdkITCase.java | 1050 | new com.alibaba.nacos.api.ai.model.agent.RuntimeVersionBinding(); | CODE |
| CRITICAL | …os/test/sdk/ai/AgentDiscoveryServiceJavaSdkITCase.java | 1175 | new com.alibaba.nacos.api.ai.model.agent.client.AgentPublishRequest(); | CODE |
| CRITICAL | …os/test/sdk/ai/AgentDiscoveryServiceJavaSdkITCase.java | 1266 | org.junit.jupiter.api.Assumptions.assumeTrue(AUTH_ENABLED); | CODE |
| CRITICAL | …os/test/sdk/ai/AgentDiscoveryServiceJavaSdkITCase.java | 3129 | new com.alibaba.nacos.api.ai.model.a2a.AgentEndpoint(); | CODE |
| CRITICAL | …ibaba/nacos/test/sdk/ai/AgentPublishJavaSdkITCase.java | 99 | org.junit.jupiter.api.Assumptions.assumeTrue(AUTH_ENABLED); | CODE |
| CRITICAL | …ibaba/nacos/test/sdk/ai/AgentPublishJavaSdkITCase.java | 129 | org.junit.jupiter.api.Assumptions.assumeTrue(AUTH_ENABLED); | CODE |
| CRITICAL | …ibaba/nacos/test/sdk/ai/AgentPublishJavaSdkITCase.java | 155 | org.junit.jupiter.api.Assumptions.assumeTrue(AUTH_ENABLED); | CODE |
| CRITICAL⚡ | …/alibaba/nacos/test/sdk/ai/AiServiceJavaSdkITCase.java | 159 | org.junit.jupiter.api.Assertions.assertSame(service.mcp(), service.mcp()); | CODE |
| CRITICAL⚡ | …/alibaba/nacos/test/sdk/ai/AiServiceJavaSdkITCase.java | 160 | org.junit.jupiter.api.Assertions.assertSame(service.agent(), service.agent()); | CODE |
| CRITICAL⚡ | …/alibaba/nacos/test/sdk/ai/AiServiceJavaSdkITCase.java | 161 | org.junit.jupiter.api.Assertions.assertSame(service.skill(), service.skill()); | CODE |
| CRITICAL⚡ | …/alibaba/nacos/test/sdk/ai/AiServiceJavaSdkITCase.java | 162 | org.junit.jupiter.api.Assertions.assertSame(service.agentSpec(), service.agentSpec()); | CODE |
| CRITICAL⚡ | …/alibaba/nacos/test/sdk/ai/AiServiceJavaSdkITCase.java | 163 | org.junit.jupiter.api.Assertions.assertSame(service.prompt(), service.prompt()); | CODE |
| CRITICAL | …st/adminapi/core/CoreClusterAdminApiOpenApiITCase.java | 83 | return com.fasterxml.jackson.databind.node.MissingNode.getInstance(); | CODE |
| CRITICAL | …est/adminapi/ai/AiResourceVisibilityOpenApiITCase.java | 121 | long deadline = System.nanoTime() + java.util.concurrent.TimeUnit.SECONDS.toNanos(30); | CODE |
| CRITICAL | …est/adminapi/ai/AiResourceVisibilityOpenApiITCase.java | 142 | long deadline = System.nanoTime() + java.util.concurrent.TimeUnit.SECONDS.toNanos(30); | CODE |
| CRITICAL | …est/adminapi/ai/AiResourceVisibilityOpenApiITCase.java | 149 | deadline = System.nanoTime() + java.util.concurrent.TimeUnit.SECONDS.toNanos(30); | CODE |
| CRITICAL | …/test/adminapi/naming/ClientAdminApiOpenApiITCase.java | 142 | return com.fasterxml.jackson.databind.node.MissingNode.getInstance(); | CODE |
| CRITICAL | …ba/nacos/test/openapi/ard/ArdAdaptorOpenApiITCase.java | 100 | org.apache.hc.client5.http.impl.classic.HttpClients.createDefault()) { | CODE |
| CRITICAL | …ba/nacos/test/openapi/ard/ArdAdaptorOpenApiITCase.java | 106 | JsonNode body = JacksonUtils.toObj(org.apache.hc.core5.http.io.entity.EntityUtils.toString(response.getE | CODE |
| CRITICAL | …ba/nacos/test/openapi/ard/ArdAdaptorOpenApiITCase.java | 166 | @org.junit.jupiter.params.provider.ValueSource(booleans = {false, true}) | CODE |
| CRITICAL | …/alibaba/nacos/istio/xds/ServiceEntryXdsGenerator.java | 147 | result.add(io.envoyproxy.envoy.service.discovery.v3.Resource.newBuilder() | CODE |
| CRITICAL | …os/copilot/service/SkillGenerationServiceImplTest.java | 210 | new com.alibaba.nacos.copilot.model.ConversationHistory(); | CODE |
| CRITICAL | …os/copilot/service/SkillGenerationServiceImplTest.java | 215 | new com.alibaba.nacos.copilot.model.ConversationMessage(); | CODE |
| CRITICAL | …/copilot/service/SkillOptimizationServiceImplTest.java | 304 | new com.alibaba.nacos.copilot.model.ConversationHistory(); | CODE |
| CRITICAL | …/copilot/service/SkillOptimizationServiceImplTest.java | 309 | new com.alibaba.nacos.copilot.model.ConversationMessage(); | CODE |
| CRITICAL | …cos/plugin/auth/impl/DefaultVisibilityServiceTest.java | 72 | com.alibaba.nacos.sys.env.EnvUtil.setEnvironment(environment); | CODE |
| CRITICAL | …cos/plugin/auth/impl/DefaultVisibilityServiceTest.java | 85 | com.alibaba.nacos.sys.env.EnvUtil.setEnvironment(environment); | CODE |
| CRITICAL | …cos/plugin/auth/impl/DefaultVisibilityServiceTest.java | 91 | com.alibaba.nacos.sys.env.EnvUtil.setEnvironment(null); | CODE |
| CRITICAL | …impl/visibility/DefaultVisibilityGrantServiceTest.java | 143 | .thenReturn(com.alibaba.nacos.api.model.v2.Result.success(false)); | CODE |
| CRITICAL | …impl/visibility/DefaultVisibilityGrantServiceTest.java | 146 | .thenReturn(com.alibaba.nacos.api.model.v2.Result.success(false)); | CODE |
| CRITICAL | …impl/visibility/DefaultVisibilityGrantServiceTest.java | 194 | .thenReturn(com.alibaba.nacos.api.model.v2.Result.success(false)); | CODE |
| CRITICAL⚡ | …impl/visibility/DefaultVisibilityGrantServiceTest.java | 249 | "r")).thenReturn(com.alibaba.nacos.api.model.v2.Result.success(false)); | CODE |
| CRITICAL⚡ | …impl/visibility/DefaultVisibilityGrantServiceTest.java | 253 | "r")).thenReturn(com.alibaba.nacos.api.model.v2.Result.success(false)); | CODE |
| CRITICAL⚡ | …impl/visibility/DefaultVisibilityGrantServiceTest.java | 257 | "rw")).thenReturn(com.alibaba.nacos.api.model.v2.Result.success(false)); | CODE |
| CRITICAL | …impl/visibility/DefaultVisibilityGrantServiceTest.java | 295 | .thenReturn(com.alibaba.nacos.api.model.v2.Result.success(false)) | CODE |
| 199 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | README.md | 54 | #### Step 1: Download the binary package | COMMENT |
| LOW | README.md | 64 | #### Step 2: Start Server | COMMENT |
| LOW⚡ | …/nacos/lock/service/impl/LockOperationServiceImpl.java | 381 | // Step 1: Force-release if held by this connection | COMMENT |
| LOW⚡ | …/nacos/lock/service/impl/LockOperationServiceImpl.java | 390 | // Step 2: Remove all wait queue entries belonging to this connection | COMMENT |
| LOW⚡ | …/nacos/lock/service/impl/LockOperationServiceImpl.java | 393 | // Step 3: If lock was released and now clear, handle post-release logic | COMMENT |
| LOW⚡ | …/nacos/lock/service/impl/LockOperationServiceImpl.java | 402 | // Step 4: If lock is still held by another connection, notify the new first waiter. | COMMENT |
| LOW⚡ | …alibaba/nacos/ai/pipeline/PublishPipelineExecutor.java | 94 | // Step 1: Get matching pipeline services | COMMENT |
| LOW⚡ | …alibaba/nacos/ai/pipeline/PublishPipelineExecutor.java | 101 | // Step 2: Create execution record | COMMENT |
| LOW | …alibaba/nacos/ai/pipeline/PublishPipelineExecutor.java | 122 | // Step 3: Submit async task | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 467 | // Step 1: Parse ZIP and validate | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 475 | // Step 2: Skip if already exists, don't overwrite user-customized content | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 482 | // Step 3: Write to storage (unlike upload, bootstrap skips draft workflow and writes directly) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 490 | // Step 4: Insert meta + version rows with status directly set to online (published) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 496 | // Step 5: Initialize index manifest for client discovery | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 970 | // Step 1: Find meta and verify read permission | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 979 | // Step 2: Load all version rows and assemble version summary list | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1236 | // Step 1: Read content from base version and copy to new version's storage path | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1244 | // Step 2: Insert draft version row | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1254 | // Step 3: Update meta's editingVersion pointer | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1272 | // Step 1: Validate parameters | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1282 | // Step 2: Confirm meta exists, has write permission, and has an editing draft | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1341 | // Step 1: Verify meta exists and has write permission | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1346 | // Step 2: Determine the target version to submit (prefer explicit version, otherwise infer from editing/reviewi | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1354 | // Step 3: If the version is still being reviewed, submit is idempotent. | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1360 | // Step 4: Move draft or reviewed version status to reviewing. | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1365 | // Step 5: Build pipeline context (containing SKILL.md and all resource files) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1373 | // Step 6: Check if a publish pipeline is available | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1429 | // Step 1: Update version status to online, clear reviewing pointer in meta | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1433 | // Step 2: Write version's file list to index manifest (for client discovery) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1599 | // Step 1: Verify meta exists and is readable | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1606 | // Step 2: Find available versions from index manifest | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1614 | // Step 3: Resolve actual version from version/label params (labels like "latest" are looked up in manifest) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1621 | // Step 4: Verify the version is indexed, then read using its persisted storage descriptor | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1982 | // Step 1: Copy labels from meta (e.g., latest tag) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1988 | // Step 2: Iterate all version rows, collect online versions and their file lists | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1002 | // Step 3: Merge meta info and version list into SkillMeta detail response | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1107 | // Step 1: Build name matching condition: exact match or fuzzy match (with wildcards) | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1118 | // Step 2: Assemble query conditions (with visibility filtering) and execute paginated query | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1130 | // Step 3: Convert meta rows to SkillSummary (with version labels, editing/reviewing status, etc.) | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1298 | // Step 3: Overwrite storage files and refresh metadata for the selected display version | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1384 | // Step 7: Run pipeline asynchronously; fall back to direct publish if startup fails | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1635 | // Step 5: Publish download event for download count tracking | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 2004 | // Step 3: Only write manifest when online versions exist | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 82 | // Step 1: Resolve target version up-front so we can short-circuit on MD5 match without | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 87 | // Step 2: Read the published content MD5 directly from the version row's storage JSON. | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 90 | // Step 3: Fast path — client cache is fresh, no need to load skill bytes. | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 96 | // Step 4: Load the skill via the regular query path. This also validates meta visibility | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 100 | // Step 5: Decide effective MD5. When the version row is missing the field (legacy publish | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 185 | // Step 1: Find meta and verify read permission | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 194 | // Step 2: Load all version rows and assemble version summary list | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 467 | // Step 1: Parse ZIP and validate | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 474 | // Step 2: If already exists, try to repair broken built-in data; otherwise skip | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 632 | // Step 2: Resolve target version from version/label params (labels like "latest" are looked up in meta versionI | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 638 | // Step 3: Confirm version is online, then load full content from storage | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 674 | // Step 2: Read stored contentMd5 from version row's storage JSON | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 677 | // Step 3: Fast path — client cache is fresh | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 683 | // Step 4: Load full AgentSpec from storage | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 811 | // Step 1: Copy storage content from base version to new version path | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 817 | // Step 2: Insert draft version row | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 822 | // Step 3: Update meta's editingVersion pointer | COMMENT |
| 41 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ores/__tests__/agentspec-store-toggle.property.test.ts | 13 | // ── Mock @/api/agentspec before importing the store ──────────────────────── | COMMENT |
| MEDIUM | …ores/__tests__/agentspec-store-toggle.property.test.ts | 33 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ores/__tests__/agentspec-store-toggle.property.test.ts | 43 | // ── Helpers ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ores/__tests__/agentspec-store-toggle.property.test.ts | 60 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/__tests__/agentspec-store-fetchlist.property.test.ts | 15 | // ── Mock agentSpecApi.list before importing the store ────────────────────── | COMMENT |
| MEDIUM | …s/__tests__/agentspec-store-fetchlist.property.test.ts | 45 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/__tests__/agentspec-store-fetchlist.property.test.ts | 75 | // ── Helpers ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/__tests__/agentspec-store-fetchlist.property.test.ts | 92 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …__tests__/agentspec-store-resetsearch.property.test.ts | 13 | // ── Mock @/api/agentspec before importing the store ──────────────────────── | COMMENT |
| MEDIUM | …__tests__/agentspec-store-resetsearch.property.test.ts | 33 | // ── Helpers ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …__tests__/agentspec-store-resetsearch.property.test.ts | 50 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts__/agentspec-store-selection-subset.property.test.ts | 14 | // ── Mock agentSpecApi.list before importing the store ────────────────────── | COMMENT |
| MEDIUM | …ts__/agentspec-store-selection-subset.property.test.ts | 44 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts__/agentspec-store-selection-subset.property.test.ts | 89 | // ── Helpers ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts__/agentspec-store-selection-subset.property.test.ts | 106 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ntSpec/__tests__/editor-serialization.property.test.ts | 15 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ntSpec/__tests__/editor-serialization.property.test.ts | 54 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nents/__tests__/version-state-machine.property.test.ts | 16 | // ── Expected state machine definition ────────────────────────────────────── | COMMENT |
| MEDIUM | …nents/__tests__/version-state-machine.property.test.ts | 27 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nents/__tests__/version-state-machine.property.test.ts | 37 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nents/__tests__/language-mode-mapping.property.test.ts | 13 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nents/__tests__/language-mode-mapping.property.test.ts | 38 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …onents/__tests__/manifest-undeletable.property.test.ts | 15 | // ── Constants ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …onents/__tests__/manifest-undeletable.property.test.ts | 20 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …onents/__tests__/manifest-undeletable.property.test.ts | 41 | // ── Helper: simulate delete operations on a file tree ────────────────────── | COMMENT |
| MEDIUM | …onents/__tests__/manifest-undeletable.property.test.ts | 71 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/__tests__/file-tree-build.property.test.ts | 16 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/__tests__/file-tree-build.property.test.ts | 39 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …onents/__tests__/label-key-validation.property.test.ts | 14 | // ── Valid key pattern ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …onents/__tests__/label-key-validation.property.test.ts | 18 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …onents/__tests__/label-key-validation.property.test.ts | 42 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/__tests__/version-sorting.property.test.ts | 14 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/components/__tests__/version-sorting.property.test.ts | 36 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …t/components/__tests__/zip-validation.property.test.ts | 14 | // ── Arbitrary generators ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …t/components/__tests__/zip-validation.property.test.ts | 46 | // ── Tests ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …SpecDetail/__tests__/layout-alignment.property.test.ts | 17 | // ── Helpers ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …SpecDetail/__tests__/layout-alignment.property.test.ts | 62 | // ── Pre-extracted data ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …SpecDetail/__tests__/layout-alignment.property.test.ts | 68 | // ── Task 6.1: Property 1 — Card style consistency ───────────────────────── | COMMENT |
| MEDIUM | …SpecDetail/__tests__/layout-alignment.property.test.ts | 156 | // ── Task 6.2: Property 2 — Layout structure consistency ─────────────────── | COMMENT |
| MEDIUM⚡ | distribution/bin/startup.sh | 259 | #=========================================================================================== | COMMENT |
| MEDIUM⚡ | distribution/bin/startup.sh | 261 | #=========================================================================================== | COMMENT |
| MEDIUM⚡ | distribution/bin/startup.sh | 266 | #=========================================================================================== | COMMENT |
| MEDIUM⚡ | distribution/bin/startup.sh | 268 | #=========================================================================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/nacos/lock/service/impl/LockOperationServiceImpl.java | 381 | // Step 1: Force-release if held by this connection | COMMENT |
| LOW⚡ | …/nacos/lock/service/impl/LockOperationServiceImpl.java | 390 | // Step 2: Remove all wait queue entries belonging to this connection | COMMENT |
| LOW⚡ | …/nacos/lock/service/impl/LockOperationServiceImpl.java | 393 | // Step 3: If lock was released and now clear, handle post-release logic | COMMENT |
| LOW⚡ | …/nacos/lock/service/impl/LockOperationServiceImpl.java | 402 | // Step 4: If lock is still held by another connection, notify the new first waiter. | COMMENT |
| LOW⚡ | …alibaba/nacos/ai/pipeline/PublishPipelineExecutor.java | 94 | // Step 1: Get matching pipeline services | COMMENT |
| LOW⚡ | …alibaba/nacos/ai/pipeline/PublishPipelineExecutor.java | 101 | // Step 2: Create execution record | COMMENT |
| LOW | …alibaba/nacos/ai/pipeline/PublishPipelineExecutor.java | 122 | // Step 3: Submit async task | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 467 | // Step 1: Parse ZIP and validate | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 475 | // Step 2: Skip if already exists, don't overwrite user-customized content | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 482 | // Step 3: Write to storage (unlike upload, bootstrap skips draft workflow and writes directly) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 490 | // Step 4: Insert meta + version rows with status directly set to online (published) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 496 | // Step 5: Initialize index manifest for client discovery | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 970 | // Step 1: Find meta and verify read permission | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 979 | // Step 2: Load all version rows and assemble version summary list | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1236 | // Step 1: Read content from base version and copy to new version's storage path | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1244 | // Step 2: Insert draft version row | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1254 | // Step 3: Update meta's editingVersion pointer | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1272 | // Step 1: Validate parameters | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1282 | // Step 2: Confirm meta exists, has write permission, and has an editing draft | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1341 | // Step 1: Verify meta exists and has write permission | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1346 | // Step 2: Determine the target version to submit (prefer explicit version, otherwise infer from editing/reviewi | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1354 | // Step 3: If the version is still being reviewed, submit is idempotent. | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1360 | // Step 4: Move draft or reviewed version status to reviewing. | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1365 | // Step 5: Build pipeline context (containing SKILL.md and all resource files) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1373 | // Step 6: Check if a publish pipeline is available | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1429 | // Step 1: Update version status to online, clear reviewing pointer in meta | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1433 | // Step 2: Write version's file list to index manifest (for client discovery) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1599 | // Step 1: Verify meta exists and is readable | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1606 | // Step 2: Find available versions from index manifest | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1614 | // Step 3: Resolve actual version from version/label params (labels like "latest" are looked up in manifest) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1621 | // Step 4: Verify the version is indexed, then read using its persisted storage descriptor | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1982 | // Step 1: Copy labels from meta (e.g., latest tag) | COMMENT |
| LOW⚡ | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1988 | // Step 2: Iterate all version rows, collect online versions and their file lists | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1002 | // Step 3: Merge meta info and version list into SkillMeta detail response | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1107 | // Step 1: Build name matching condition: exact match or fuzzy match (with wildcards) | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1118 | // Step 2: Assemble query conditions (with visibility filtering) and execute paginated query | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1130 | // Step 3: Convert meta rows to SkillSummary (with version labels, editing/reviewing status, etc.) | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1298 | // Step 3: Overwrite storage files and refresh metadata for the selected display version | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1384 | // Step 7: Run pipeline asynchronously; fall back to direct publish if startup fails | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 1635 | // Step 5: Publish download event for download count tracking | COMMENT |
| LOW | …nacos/ai/service/skills/SkillOperationServiceImpl.java | 2004 | // Step 3: Only write manifest when online versions exist | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 82 | // Step 1: Resolve target version up-front so we can short-circuit on MD5 match without | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 87 | // Step 2: Read the published content MD5 directly from the version row's storage JSON. | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 90 | // Step 3: Fast path — client cache is fresh, no need to load skill bytes. | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 96 | // Step 4: Load the skill via the regular query path. This also validates meta visibility | COMMENT |
| LOW⚡ | …ai/service/skills/SkillClientOperationServiceImpl.java | 100 | // Step 5: Decide effective MD5. When the version row is missing the field (legacy publish | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 185 | // Step 1: Find meta and verify read permission | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 194 | // Step 2: Load all version rows and assemble version summary list | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 467 | // Step 1: Parse ZIP and validate | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 474 | // Step 2: If already exists, try to repair broken built-in data; otherwise skip | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 632 | // Step 2: Resolve target version from version/label params (labels like "latest" are looked up in meta versionI | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 638 | // Step 3: Confirm version is online, then load full content from storage | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 674 | // Step 2: Read stored contentMd5 from version row's storage JSON | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 677 | // Step 3: Fast path — client cache is fresh | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 683 | // Step 4: Load full AgentSpec from storage | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 811 | // Step 1: Copy storage content from base version to new version path | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 817 | // Step 2: Insert draft version row | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 822 | // Step 3: Update meta's editingVersion pointer | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 899 | // Step 1: Verify meta exists and has write permission | COMMENT |
| LOW⚡ | …/service/agentspecs/AgentSpecOperationServiceImpl.java | 904 | // Step 2: Determine the target version to submit | COMMENT |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ibaba/nacos/core/auth/RemoteRequestAuthFilterTest.java | 235 | static class MockRequestHandler extends RequestHandler<Request, HealthCheckResponse> { | CODE |
| LOW | …ibaba/nacos/core/auth/RemoteRequestAuthFilterTest.java | 244 | static class MockInnerRequestHandler extends RequestHandler<Request, HealthCheckResponse> { | CODE |
| LOW | …ba/nacos/core/remote/grpc/GrpcRequestAcceptorTest.java | 527 | class MockRequestHandler extends RequestHandler<HealthCheckRequest, HealthCheckResponse> { | CODE |
| LOW | …r/remote/request/PluginAvailabilityRequestHandler.java | 47 | public class PluginAvailabilityRequestHandler | CODE |
| LOW | …ibaba/nacos/core/remote/HealthCheckRequestHandler.java | 34 | public class HealthCheckRequestHandler | CODE |
| LOW | …java/com/alibaba/nacos/core/remote/RequestHandler.java | 32 | public abstract class RequestHandler<T extends Request, S extends Response> { | CODE |
| LOW | …s/core/remote/core/ServerLoaderInfoRequestHandler.java | 47 | public class ServerLoaderInfoRequestHandler | CODE |
| LOW | …cos/core/remote/core/ServerReloaderRequestHandler.java | 48 | public class ServerReloaderRequestHandler | CODE |
| LOW | …os/config/server/remote/ConfigQueryRequestHandler.java | 65 | public class ConfigQueryRequestHandler | CODE |
| LOW | …s/config/server/remote/ConfigRemoveRequestHandler.java | 51 | public class ConfigRemoveRequestHandler | CODE |
| LOW | …rver/remote/ConfigChangeClusterSyncRequestHandler.java | 48 | public class ConfigChangeClusterSyncRequestHandler | CODE |
| LOW | …nfig/server/remote/ConfigFuzzyWatchRequestHandler.java | 57 | public class ConfigFuzzyWatchRequestHandler | CODE |
| LOW | …rver/remote/ConfigChangeBatchListenRequestHandler.java | 49 | public class ConfigChangeBatchListenRequestHandler | CODE |
| LOW | …/config/server/remote/ConfigPublishRequestHandler.java | 59 | public class ConfigPublishRequestHandler | CODE |
| LOW | console-ui/src/utils/validateContent.js | 70 | function validateKeyOrValueForProperty(property, start, end) { | CODE |
| LOW | console-ui/src/utils/pipelineApi.js | 31 | export function fetchPipelineExecutionDetail(pipelineId, callbacks) { | CODE |
| LOW | console-ui/src/utils/pipelineApi.js | 47 | export function fetchPipelineExecutionList(query, callbacks) { | CODE |
| LOW | console-ui/src/utils/pipelineApi.js | 74 | export function mapExecutionToPipelineInfo(exec) { | CODE |
| LOW | console-ui-next/src/utils/skillUploadParser.ts | 27 | export async function buildSkillBatchZipExcludingPrefixes( | CODE |
| LOW | …xt/src/components/ai/VisibilityAuthorizationDialog.tsx | 63 | export function VisibilityAuthorizationDialog({ | CODE |
| LOW | …i-next/src/components/ai/VersionLifecycleActionBar.tsx | 11 | export function VersionLifecycleActionBar({ | CODE |
| LOW | …i-next/src/components/ai/VersionLifecycleActionBar.tsx | 24 | export function VersionLifecycleActionDivider() { | CODE |
| LOW | …ext/src/components/ai/CreateDraftFromVersionButton.tsx | 36 | export function CreateDraftFromVersionButton({ | CODE |
| LOW | console-ui-next/src/components/ai/mcp/McpToolList.tsx | 443 | function ErrorResponseTemplateSection({ data }: { data: string }) { | CODE |
| LOW | console-ui-next/src/lib/change-password.ts | 11 | export function validateChangePasswordForm( | CODE |
| LOW | console-ui-next/src/lib/mcp-endpoint-utils.ts | 39 | export function isManagedDirectEndpointRef(serviceRef?: McpServiceRef) { | CODE |
| LOW | console-ui-next/src/lib/markdown-utils.ts | 11 | export function hasNonFrontmatterMarkdownBody(md: string): boolean { | CODE |
| LOW | console-ui-next/src/lib/markdown-utils.ts | 25 | export function prepareSkillMarkdownPreview(md: string): string { | CODE |
| LOW | console-ui-next/src/pages/skillDetail/index.tsx | 103 | function renderSkillMarkdownPreview(source: string) { | CODE |
| LOW | console-ui-next/src/pages/skillDetail/index.tsx | 1673 | function suggestNextVersionFromBase(baseVersion: string): string { | CODE |
| LOW | …next/src/pages/pluginManagement/plugin-config-state.ts | 80 | export function validatePluginConfigValue( | CODE |
| LOW | console-ui-next/src/pages/newAgentSpec/index.tsx | 85 | function resolveSelectedEditorFile( | CODE |
| LOW | console-ui-next/src/pages/newAgentSpec/version-mode.ts | 16 | export function planAgentSpecEditorVersionMode({ | CODE |
| LOW | …sole-ui-next/src/pages/newMcpServer/service-options.ts | 12 | function unwrapServiceListResponse(response: unknown): ServiceListResponse { | CODE |
| LOW | …sole-ui-next/src/pages/newAgent/agent-console-model.ts | 193 | export function endpointSourceModeLabelKey(mode: EndpointSourceMode): EndpointSourceLabelKey { | CODE |
| LOW | …sole-ui-next/src/pages/newAgent/agent-console-model.ts | 202 | export function endpointSourceOrderLabelKey( | CODE |
| LOW | …sole-ui-next/src/pages/newAgent/agent-console-model.ts | 396 | function buildStructuredCallInterface( | CODE |
| LOW | …sole-ui-next/src/pages/newAgent/agent-console-model.ts | 550 | export function createStructuredProtocolEditor( | CODE |
| LOW | …sole-ui-next/src/pages/newAgent/agent-console-model.ts | 651 | export function buildAgentStatusUpdateData( | CODE |
| LOW | …sole-ui-next/src/pages/newAgent/agent-console-model.ts | 693 | export function callInterfacesToProtocolEditors( | CODE |
| LOW | …sole-ui-next/src/pages/newAgent/agent-console-model.ts | 722 | export function callInterfacesToEditorValues( | CODE |
| LOW | …sole-ui-next/src/pages/permissionsManagement/index.tsx | 36 | export default function PermissionsManagementPage() { | CODE |
| LOW | …le-ui-next/src/pages/configurationManagement/index.tsx | 59 | export default function ConfigurationManagementPage() { | CODE |
| LOW | console-ui-next/src/pages/agentSpecDetail/index.tsx | 1620 | function suggestNextVersionFromBase(baseVersion: string): string { | CODE |
| LOW | console-ui-next/src/pages/agentSpecDetail/index.tsx | 1632 | function validateDraftTargetVersion(targetVersion: string, basedOnVersion: string): string | null { | CODE |
| LOW | …-ui-next/src/pages/agentSpecDetail/version-workflow.ts | 8 | export function buildAgentSpecEditorSearch({ | CODE |
| LOW | …SpecDetail/__tests__/layout-alignment.property.test.ts | 38 | function extractCardHeaderClassNames(src: string): string[] { | CODE |
| LOW⚡ | …SpecDetail/__tests__/layout-alignment.property.test.ts | 52 | function extractCardTitleClassNames(src: string): string[] { | CODE |
| LOW | …es/promptManagement/components/prompt-version-utils.ts | 49 | export function getValidActionsWithContext( | CODE |
| LOW | …/src/pages/skillManagement/components/version-utils.ts | 49 | export function getValidActionsWithContext( | CODE |
| LOW | …ole-ui-next/src/pages/mcpServerDetail/mcp-lifecycle.ts | 39 | export function isMcpLifecycleUnavailable(error: unknown): boolean { | CODE |
| LOW | …ui-next/src/pages/mcpServerDetail/mcp-client-config.ts | 150 | export function buildMcpClientConfigurations( | CODE |
| LOW | …/nacos/lock/remote/rpc/handler/LockRequestHandler.java | 44 | public class LockRequestHandler | CODE |
| LOW | …/common/http/client/handler/StringResponseHandler.java | 31 | public class StringResponseHandler extends AbstractResponseHandler<String> { | CODE |
| LOW | …mmon/http/client/handler/ByteArrayResponseHandler.java | 33 | public class ByteArrayResponseHandler extends AbstractResponseHandler<byte[]> { | CODE |
| LOW | …mon/http/client/handler/RestResultResponseHandler.java | 32 | public class RestResultResponseHandler<T> extends AbstractResponseHandler<T> { | CODE |
| LOW | …os/common/http/client/handler/BeanResponseHandler.java | 32 | public class BeanResponseHandler<T> extends AbstractResponseHandler<T> { | CODE |
| LOW | …ommon/http/client/handler/AbstractResponseHandler.java | 32 | public abstract class AbstractResponseHandler<T> implements ResponseHandler<T> { | CODE |
| LOW | …/com/alibaba/nacos/common/remote/client/RpcClient.java | 470 | class ConnectResetRequestHandler implements ServerRequestHandler { | CODE |
| LOW | …libaba/nacos/common/remote/client/grpc/GrpcClient.java | 611 | class SetupRequestHandler implements ServerRequestHandler { | CODE |
| 53 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/java-sdk-test/ai-transport-fixture.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | test/java-sdk-test/run-ai-api-compatibility.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …/com/alibaba/nacos/test/lock/ClusterJucLockITCase.java | 101 | // running 同时控制两条压力线: | COMMENT |
| LOW | test/scripts/default-auth-reliability-it.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | test/scripts/auth-it-identity.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | test/scripts/native-build-it.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | …cos/config/server/aspect/CapacityManagementAspect.java | 201 | private Object do4Delete(ProceedingJoinPoint pjp, String group, String namespaceId, | COMMENT |
| LOW | …le-ui/src/pages/AI/McpDetail/CreateTools/DeleteTool.js | 21 | // description: serverConfig?.description, | COMMENT |
| LOW | console-ui/src/pages/AI/NewMcpServer/NewMcpServer.js | 861 | // | COMMENT |
| LOW | console-ui-next/src/layouts/AppLayout.tsx | 21 | fetchState(); | COMMENT |
| LOW | …/alibaba/nacos/plugin/control/utils/DiskUtilsTest.java | 141 | Files.write(f.toPath(), first.getBytes(StandardCharsets.UTF_8)); | COMMENT |
| LOW | distribution/bin/startup-native.sh | 1 | #!/bin/bash | COMMENT |
| LOW | distribution/bin/startup.sh | 1 | #!/bin/bash | COMMENT |
| LOW | distribution/bin/shutdown.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …baba/nacos/common/packagescan/classreading/Symbol.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …nacos/common/packagescan/classreading/ClassReader.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …st/java/com/alibaba/nacos/sys/utils/DiskUtilsTest.java | 481 | } | COMMENT |
| LOW | …in/resources/static/console-ui/public/js/codemirror.js | 941 | return found != null ? found : bidiOther | COMMENT |
| LOW | …in/resources/static/console-ui/public/js/codemirror.js | 2781 | if (!lineObj) { lineObj = getLine(cm.doc, pos.line); } | COMMENT |
| LOW | …in/resources/static/console-ui/public/js/codemirror.js | 4361 | // the scroll effect that the first few mouse wheel events have, | COMMENT |
| LOW | …in/resources/static/console-ui/public/js/codemirror.js | 5461 | else { no = lineNo(handle); } | COMMENT |
| LOW | …in/resources/static/console-ui/public/js/codemirror.js | 5721 | COMMENT | |
| LOW | …in/resources/static/console-ui/public/js/codemirror.js | 7961 | // The textarea is kept positioned near the cursor to prevent the | COMMENT |
| LOW | …sole/src/main/resources/static/legacy/js/codemirror.js | 941 | return found != null ? found : bidiOther | COMMENT |
| LOW | …sole/src/main/resources/static/legacy/js/codemirror.js | 2781 | if (!lineObj) { lineObj = getLine(cm.doc, pos.line); } | COMMENT |
| LOW | …sole/src/main/resources/static/legacy/js/codemirror.js | 4361 | // the scroll effect that the first few mouse wheel events have, | COMMENT |
| LOW | …sole/src/main/resources/static/legacy/js/codemirror.js | 5461 | else { no = lineNo(handle); } | COMMENT |
| LOW | …sole/src/main/resources/static/legacy/js/codemirror.js | 5721 | COMMENT | |
| LOW | …sole/src/main/resources/static/legacy/js/codemirror.js | 7961 | // The textarea is kept positioned near the cursor to prevent the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …sole/src/main/resources/static/next/js/vendor-react.js | 9 | `).replace(Ad,``)}function Md(e,t){return t=jd(t),jd(e)===t}function $(e,t,n,r,i,a){switch(n){case`children`:typeof r==` | CODE |
| MEDIUM | …n/resources/static/next/assets/html.worker-CPEOnXO1.js | 279 | **Warning:** Do not use this value, as it is obsolete. There is no replacement as there was no real usage for it.`}],ref | CODE |
| MEDIUM | …n/resources/static/next/assets/html.worker-CPEOnXO1.js | 304 | Default mode, which indicates no preference for the decoding mode. The browser decides what is best for the user.`}},{na | CODE |
| MEDIUM | …n/resources/static/next/assets/html.worker-CPEOnXO1.js | 304 | Default mode, which indicates no preference for the decoding mode. The browser decides what is best for the user.`}},{na | CODE |
| MEDIUM | …urces/static/console-ui/assets/html.worker-CwpTb9lJ.js | 277 | * To learn about this declaration in Firefox for Mobile, see [this article](https://developer.mozilla.org/en-US/do | COMMENT |
| MEDIUM | …urces/static/console-ui/assets/html.worker-CwpTb9lJ.js | 288 | Default mode, which indicates no preference for the decoding mode. The browser decides what is best for the user.`}},{na | CODE |
| MEDIUM | …urces/static/console-ui/assets/html.worker-CwpTb9lJ.js | 288 | Default mode, which indicates no preference for the decoding mode. The browser decides what is best for the user.`}},{na | CODE |
| MEDIUM | …urces/static/console-ui/assets/html.worker-CwpTb9lJ.js | 306 | **Note**: Sites that automatically play audio (or videos with an audio track) can be an unpleasant experience for users, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/ai/pipeline/spi/impl/SkillScannerScanOptionsTest.java | 54 | p.setProperty(SkillScannerPluginConfig.LLM_API_KEY, "your_api_key"); | CODE |
| HIGH | …/ai/pipeline/spi/impl/SkillScannerScanOptionsTest.java | 67 | assertEquals("your_api_key", env.get("SKILL_SCANNER_LLM_API_KEY")); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …main/resources/static/console-ui/js/button-D4VgS8ri.js | 1 | import{r as y,i as ot,k as nt,m as st,j as me,n as at}from"./main.js";const it=(e,t,r,o)=>{const s=[r,{code:t,...o||{}}] | CODE |
| LOW | …ic/console-ui/public/js/vs/language/html/htmlWorker.js | 35 | function(e){if("object"==typeof module&&"object"==typeof module.exports){var t=e(require,exports);void 0!==t&&(module.ex | CODE |
| LOW | …urces/static/console-ui/assets/json.worker-BoL8UZqY.js | 7 | `))}}class Yo extends Error{constructor(e,n){super(e),this.name="ListenerLeakError",this.stack=n}}class Ko extends Error | CODE |
| LOW | …urces/static/console-ui/assets/html.worker-CwpTb9lJ.js | 7 | `))}}class go extends Error{constructor(e,n){super(e),this.name="ListenerLeakError",this.stack=n}}class bo extends Error | CODE |
| LOW | …urces/static/console-ui/assets/html.worker-CwpTb9lJ.js | 458 | **Note:** Do not use this attribute, as it is non-standard and only implemented in some versions of Microsoft Internet E | CODE |
| LOW | …ces/static/console-ui/assets/editor.worker-DEFp6fw-.js | 7 | `))}}class Zs extends Error{constructor(e,n){super(e),this.name="ListenerLeakError",this.stack=n}}class Ks extends Error | CODE |
| LOW | …ources/static/legacy/js/vs/language/html/htmlWorker.js | 35 | function(e){if("object"==typeof module&&"object"==typeof module.exports){var t=e(require,exports);void 0!==t&&(module.ex | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/java-sdk-test/ai-transport-fixture.py | 90 | data = b'{"code":501,"message":"Watch unavailable in transport fixture","data":null}' | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | test/java-sdk-test/ai-transport-fixture.py | 168 | except OSError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …n/resources/static/next/assets/html.worker-CPEOnXO1.js | 348 | **Usage note:** Do not use this attribute, as it has been deprecated. The [\`<caption>\`](https://developer.mozilla.org/ | CODE |
| MEDIUM | …urces/static/console-ui/assets/html.worker-CwpTb9lJ.js | 324 | **Usage note:** Do not use this attribute, as it has been deprecated. The [\`<caption>\`](https://developer.mozilla.org/ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/java-sdk-test/ai-transport-fixture.py | 63 | CODE | |
| LOW | test/java-sdk-test/ai-transport-fixture.py | 86 | CODE | |
| LOW | test/java-sdk-test/ai-transport-fixture.py | 147 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | console/src/main/resources/static/next/js/main.js | 3 | `);return l=p.pop()||``,p.forEach(e=>{if(e.startsWith(`event:`)){let t=e.substring(6).trim();if(u=t,t===`error`&&d){let | CODE |