Apache Pulsar - distributed pub-sub messaging system
This report presents the forensic synthetic code analysis of apache/pulsar, a Java project with 15,297 GitHub stars. SynthScan v2.0 examined 1,078,583 lines of code across 5089 source files, recording 650 pattern matches distributed across 18 syntactic categories. The overall adjusted score of 2.9 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 650 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …g/apache/pulsar/websocket/proxy/ProxyRoleAuthTest.java | 392 | org.apache.pulsar.common.policies.data.ClusterData.builder() | CODE |
| CRITICAL | …g/apache/pulsar/websocket/proxy/ProxyRoleAuthTest.java | 406 | org.apache.pulsar.common.policies.data.TenantInfoImpl.builder() | CODE |
| CRITICAL | …ction/pendingack/impl/MetadataPendingAckStoreTest.java | 158 | new org.apache.pulsar.broker.transaction.metadata.TxnEvent( | CODE |
| CRITICAL | …ction/pendingack/impl/MetadataPendingAckStoreTest.java | 185 | new org.apache.pulsar.broker.transaction.metadata.TxnEvent( | CODE |
| CRITICAL | …ction/pendingack/impl/MetadataPendingAckStoreTest.java | 237 | return new org.apache.pulsar.metadata.api.ScanConsumer() { | CODE |
| CRITICAL | …saction/buffer/impl/MetadataTransactionBufferTest.java | 246 | new org.apache.pulsar.broker.transaction.metadata.SegmentWatermark(5, 0), | CODE |
| CRITICAL | …saction/buffer/impl/MetadataTransactionBufferTest.java | 271 | new org.apache.pulsar.broker.transaction.metadata.SegmentWatermark(5, 0), | CODE |
| CRITICAL | …saction/buffer/impl/MetadataTransactionBufferTest.java | 333 | new org.apache.pulsar.broker.transaction.metadata.SegmentWatermark(5, 0), | CODE |
| CRITICAL | …saction/buffer/impl/MetadataTransactionBufferTest.java | 408 | new org.apache.pulsar.broker.transaction.metadata.SegmentWatermark(5, 0), | CODE |
| CRITICAL | …saction/buffer/impl/MetadataTransactionBufferTest.java | 443 | new org.apache.pulsar.metadata.api.ScanConsumer() { | CODE |
| CRITICAL | …lsar/broker/loadbalance/SimpleLoadManagerImplTest.java | 296 | new org.apache.pulsar.policies.data.loadbalancer.LoadReport(); | CODE |
| CRITICAL | …lsar/broker/loadbalance/SimpleLoadManagerImplTest.java | 373 | new org.apache.pulsar.policies.data.loadbalancer.LoadReport(); | CODE |
| CRITICAL | …lsar/broker/loadbalance/SimpleLoadManagerImplTest.java | 426 | new org.apache.pulsar.policies.data.loadbalancer.LoadReport(); | CODE |
| CRITICAL | …lsar/broker/loadbalance/SimpleLoadManagerImplTest.java | 430 | new org.apache.pulsar.policies.data.loadbalancer.LoadReport(); | CODE |
| CRITICAL | …xtensions/AntiAffinityNamespaceGroupExtensionTest.java | 99 | org.apache.commons.lang3.reflect.FieldUtils.readDeclaredField(antiAffinityGroupPolicyHelper, | CODE |
| CRITICAL | …sar/broker/resourcegroup/ResourceGroupServiceTest.java | 92 | new org.apache.pulsar.common.policies.data.ResourceGroup(); | CODE |
| CRITICAL | …sar/broker/resourcegroup/ResourceGroupServiceTest.java | 152 | new org.apache.pulsar.common.policies.data.ResourceGroup(); | CODE |
| CRITICAL | …sar/broker/resourcegroup/ResourceGroupServiceTest.java | 166 | new org.apache.pulsar.common.policies.data.ResourceGroup(); | CODE |
| CRITICAL | …sar/broker/resourcegroup/ResourceGroupServiceTest.java | 281 | service.resourceGroupCreate(rg, new org.apache.pulsar.common.policies.data.ResourceGroup()); | CODE |
| CRITICAL | …sar/broker/resourcegroup/ResourceGroupServiceTest.java | 350 | rgs.resourceGroupCreate(rgName, new org.apache.pulsar.common.policies.data.ResourceGroup()); | CODE |
| CRITICAL | …sar/broker/resourcegroup/ResourceGroupServiceTest.java | 430 | rgs.resourceGroupCreate(rg, new org.apache.pulsar.common.policies.data.ResourceGroup()); | CODE |
| CRITICAL | …sar/broker/resourcegroup/ResourceGroupServiceTest.java | 471 | rgs.resourceGroupCreate(rg, new org.apache.pulsar.common.policies.data.ResourceGroup()); | CODE |
| CRITICAL | …sar/broker/resourcegroup/ResourceGroupServiceTest.java | 507 | rgs.resourceGroupCreate(rg, new org.apache.pulsar.common.policies.data.ResourceGroup()); | CODE |
| CRITICAL | …r/resourcegroup/ResourceGroupUsageAggregationTest.java | 252 | new org.apache.pulsar.common.policies.data.ResourceGroup(); | CODE |
| CRITICAL | …broker/resourcegroup/ResourceGroupRateLimiterTest.java | 44 | new org.apache.pulsar.common.policies.data.ResourceGroup(); | CODE |
| CRITICAL | …ker/resourcegroup/RGUsageMTAggrWaitForAllMsgsTest.java | 783 | new org.apache.pulsar.common.policies.data.ResourceGroup(); | CODE |
| CRITICAL | …/org/apache/pulsar/broker/admin/TopicPoliciesTest.java | 4753 | org.apache.pulsar.common.util.ObjectMapperFactory.getThreadLocal().writeValueAsBytes(policies), | CODE |
| CRITICAL | …che/pulsar/broker/intercept/BrokerInterceptorTest.java | 281 | jakarta.ws.rs.core.Response.noContent().build().getStatus()); | CODE |
| CRITICAL⚡ | …roker/service/OpenTelemetryTracingIntegrationTest.java | 149 | io.opentelemetry.api.common.AttributeKey.stringKey("messaging.system")), "pulsar"); | CODE |
| CRITICAL⚡ | …roker/service/OpenTelemetryTracingIntegrationTest.java | 158 | io.opentelemetry.api.common.AttributeKey.stringKey("messaging.system")), "pulsar"); | CODE |
| CRITICAL⚡ | …roker/service/OpenTelemetryTracingIntegrationTest.java | 160 | io.opentelemetry.api.common.AttributeKey.stringKey("messaging.pulsar.acknowledgment.type")), | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 267 | io.opentelemetry.api.common.AttributeKey.stringKey("messaging.pulsar.acknowledgment.type")), | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 315 | io.opentelemetry.api.common.AttributeKey.stringKey( | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 369 | io.opentelemetry.api.common.AttributeKey.stringKey( | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 519 | io.opentelemetry.api.common.AttributeKey.stringKey( | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 624 | io.opentelemetry.api.common.AttributeKey.stringKey( | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 678 | io.opentelemetry.api.common.AttributeKey.stringKey( | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 750 | io.opentelemetry.api.common.AttributeKey.stringKey( | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 814 | io.opentelemetry.api.common.AttributeKey.stringKey("messaging.system"))); | CODE |
| CRITICAL | …roker/service/OpenTelemetryTracingIntegrationTest.java | 816 | io.opentelemetry.api.common.AttributeKey.stringKey("messaging.system")), "pulsar"); | CODE |
| CRITICAL | …schema/ProtobufNativeSchemaCompatibilityCheckTest.java | 33 | getSchemaData(org.apache.pulsar.client.api.schema.proto.Test.TestMessage.getDescriptor()); | CODE |
| CRITICAL | …schema/ProtobufNativeSchemaCompatibilityCheckTest.java | 36 | getSchemaData(org.apache.pulsar.client.api.schema.proto.Test.SubMessage.getDescriptor()); | CODE |
| CRITICAL | …ulsar/broker/service/scalable/AutoScaleConfigTest.java | 62 | org.apache.pulsar.common.policies.data.AutoScalePolicyOverride.builder() | CODE |
| CRITICAL | …ulsar/broker/service/scalable/AutoScaleConfigTest.java | 67 | org.apache.pulsar.common.policies.data.AutoScalePolicyOverride.builder() | CODE |
| CRITICAL | …ulsar/broker/service/scalable/AutoScaleConfigTest.java | 97 | org.apache.pulsar.common.policies.data.AutoScalePolicyOverride.builder() | CODE |
| CRITICAL | …/broker/service/scalable/ScalableTopicServiceTest.java | 335 | new org.apache.pulsar.common.scalable.SegmentLoadStats(1, 1, 1, 1)).get(); | CODE |
| CRITICAL⚡ | …oker/service/scalable/ScalableTopicControllerTest.java | 537 | org.apache.pulsar.common.scalable.SegmentInfo seg0 = new org.apache.pulsar.common.scalable.SegmentInfo( | CODE |
| CRITICAL⚡ | …oker/service/scalable/ScalableTopicControllerTest.java | 539 | org.apache.pulsar.common.scalable.HashRange.of(0x0000, 0x3FFF), | CODE |
| CRITICAL⚡ | …oker/service/scalable/ScalableTopicControllerTest.java | 544 | org.apache.pulsar.common.scalable.SegmentInfo seg1 = new org.apache.pulsar.common.scalable.SegmentInfo( | CODE |
| CRITICAL⚡ | …oker/service/scalable/ScalableTopicControllerTest.java | 546 | org.apache.pulsar.common.scalable.HashRange.of(0x4000, 0x7FFF), | CODE |
| CRITICAL⚡ | …oker/service/scalable/ScalableTopicControllerTest.java | 550 | org.apache.pulsar.common.scalable.SegmentInfo seg2 = new org.apache.pulsar.common.scalable.SegmentInfo( | CODE |
| CRITICAL⚡ | …oker/service/scalable/ScalableTopicControllerTest.java | 552 | org.apache.pulsar.common.scalable.HashRange.of(0x8000, 0xFFFF), | CODE |
| CRITICAL | …oker/service/scalable/ScalableTopicControllerTest.java | 617 | new org.apache.pulsar.client.admin.PulsarAdminException.NotFoundException( | CODE |
| CRITICAL | …oker/service/scalable/ScalableTopicControllerTest.java | 634 | new org.apache.pulsar.client.admin.PulsarAdminException( | CODE |
| CRITICAL | …oker/service/scalable/ScalableTopicControllerTest.java | 654 | new org.apache.pulsar.client.admin.PulsarAdminException( | CODE |
| CRITICAL | …oker/service/scalable/ScalableTopicControllerTest.java | 699 | new org.apache.pulsar.common.scalable.SegmentLoadStats(1, 1, 1, 1)).get(); | CODE |
| CRITICAL | …oker/service/scalable/ScalableTopicControllerTest.java | 707 | clock.set(startMs + java.util.concurrent.TimeUnit.MINUTES.toMillis(1) + 1_000L); | CODE |
| CRITICAL | …oker/service/scalable/ScalableTopicControllerTest.java | 796 | new org.apache.pulsar.common.policies.data.Policies(); | CODE |
| CRITICAL | …oker/service/scalable/ScalableTopicControllerTest.java | 798 | new org.apache.pulsar.common.policies.data.RetentionPolicies( | CODE |
| CRITICAL | …che/pulsar/broker/stats/MetricsAuthenticationTest.java | 57 | Client client = jakarta.ws.rs.client.ClientBuilder.newClient(new ClientConfig().register(LoggingFeature.class)); | CODE |
| 183 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .asf.yaml | 1 | # | COMMENT |
| LOW | codecov.yml | 1 | # | COMMENT |
| LOW | docker/get-version.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | docker/publish.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | docker/build.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | docker/pulsar/scripts/apply-config-from-env.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | docker/pulsar/scripts/gen-yml-from-env.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | docker/pulsar/scripts/update-ini-from-env.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | docker/pulsar/scripts/generate-zookeeper-config.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | docker/pulsar/scripts/update-rocksdb-conf-from-env.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | …er/pulsar/scripts/apply-config-from-env-with-prefix.py | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …er/pulsar/scripts/apply-config-from-env-with-prefix.py | 21 | ############################################################ | COMMENT |
| LOW | docker/pulsar/scripts/watch-znode.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | docker/pulsar/scripts/pulsar-zookeeper-ruok.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …ar/build-scripts/remove-unnecessary-native-binaries.sh | 1 | #!/usr/bin/env sh | COMMENT |
| LOW | …saction/buffer/impl/MetadataTransactionBufferTest.java | 221 | // visible — orphans are eliminated by the publish-path ordering reversal (op-record | COMMENT |
| LOW | …saction/buffer/impl/MetadataTransactionBufferTest.java | 341 | assertThat(tb.getOngoingTxnCount()).isOne(); | COMMENT |
| LOW | …ance/extensions/ExtensibleLoadManagerImplBaseTest.java | 201 | protected void initializeState() throws Exception { | COMMENT |
| LOW | …dbalance/extensions/ExtensibleLoadManagerImplTest.java | 1581 | // After a test churns leader election, the channel-topic bundle can be transiently | COMMENT |
| LOW | …ce/extensions/channel/ServiceUnitStateChannelTest.java | 2021 | // targeting this broker to Owned, simulating the broker-restart recovery scenario. | COMMENT |
| LOW | …/service/SystemTopicBasedTopicPoliciesServiceTest.java | 561 | // The reader.close() above drives readMorePoliciesAsync() into cleanPoliciesCacheInitMap(), which logs | COMMENT |
| LOW | …apache/pulsar/broker/service/OneWayReplicatorTest.java | 2021 | }); | COMMENT |
| LOW | …e/persistent/PersistentReplicatorInflightTaskTest.java | 361 | // Rewind the cursor exactly as a failed publish to the remote cluster does. The in-flight read | COMMENT |
| LOW | …va/org/apache/pulsar/broker/service/BrokerService.java | 4041 | return CompletableFuture.completedFuture(false); | COMMENT |
| LOW | …ar/broker/service/persistent/PersistentReplicator.java | 361 | // rewound while this read was in flight (e.g. after a failed publish or a schema change). | COMMENT |
| LOW | …ar/broker/service/persistent/PersistentReplicator.java | 381 | // re-read. This makes the recovery at-least-once, with duplicates bounded to the | COMMENT |
| LOW | …/pulsar/broker/service/persistent/PersistentTopic.java | 1421 | // Unsubscribe compaction cursor and delete compacted ledger. Normally we wait for any in-flight compaction | COMMENT |
| LOW | …istentStickyKeyDispatcherMultipleConsumersClassic.java | 461 | // when consumer1 get message 2,3, the broker will not dispatch messages to consumer1 | COMMENT |
| LOW | …stats/prometheus/metrics/PrometheusTextFormatUtil.java | 61 | // quantile="0.75"} NaN | COMMENT |
| LOW | pulsar-function-go/golangci.yml | 1 | # | COMMENT |
| LOW | pulsar-function-go/pb/Request.pb.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pb/Function.pb.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pb/InstanceCommunication_grpc.pb.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pb/doc.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pb/doc.go | 21 | // uses for the client/broker wire protocol. | COMMENT |
| LOW | pulsar-function-go/pb/generate.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | pulsar-function-go/pb/generate.sh | 21 | # Bash script to automate the generation of the api package using Docker. | COMMENT |
| LOW | pulsar-function-go/pb/generate.sh | 101 | // distributed with this work for additional information | COMMENT |
| LOW | pulsar-function-go/pb/generate.sh | 161 | cat <<EOF >"${outDir}/doc.go" | COMMENT |
| LOW | pulsar-function-go/pb/generate.sh | 181 | // Package ${pkg} provides the protocol buffer messages that Pulsar | COMMENT |
| LOW | pulsar-function-go/pb/InstanceCommunication.pb.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pb/InstanceCommunication.pb.go | 61 | // | COMMENT |
| LOW | pulsar-function-go/pf/function_test.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/instanceConf.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/topicName.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/instance.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/util_test.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/topicName_test.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/mockMessage_test.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/util.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/logAppender.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/context_test.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/stats.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/instance_test.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/instanceConf_test.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/context.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/instanceControlServicer_test.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/instanceControlServicer.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/function.go | 1 | // | COMMENT |
| LOW | pulsar-function-go/pf/function.go | 141 | return val, err | COMMENT |
| 200 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …apache/pulsar/broker/service/OneWayReplicatorTest.java | 1695 | // Step 1: Inject an error to make the replicator is not able to work. | STRING |
| LOW⚡ | …apache/pulsar/broker/service/OneWayReplicatorTest.java | 1699 | // Step 2: Send one message, since the replicator does not work anymore, this message will not be replicated. | STRING |
| LOW⚡ | …apache/pulsar/broker/service/OneWayReplicatorTest.java | 1709 | // Step 3: Unload topic, the replicator will be re-created. | STRING |
| LOW⚡ | …lsar/client/api/v5/V5MultiBrokerScalableTopicTest.java | 345 | // Step 1: force controller materialization + leader election on every broker. | COMMENT |
| LOW⚡ | …lsar/client/api/v5/V5MultiBrokerScalableTopicTest.java | 350 | // Step 2: wait until each broker's metadata store sees the controller-lock znode. | COMMENT |
| LOW⚡ | …sar/broker/service/schema/BookkeeperSchemaStorage.java | 350 | // Step 1: Store the schema data into a new BookKeeper ledger | COMMENT |
| LOW⚡ | …sar/broker/service/schema/BookkeeperSchemaStorage.java | 360 | // Step 2: Create the schema locator z-node pointing to the ledger | COMMENT |
| LOW⚡ | …sar/broker/service/schema/BookkeeperSchemaStorage.java | 368 | // Step 3: Handle failure by cleaning up the orphan ledger | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 696 | // Step 3: Terminate the parent segment topic so producers get TopicTerminated | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 699 | // Step 4: Atomic metadata update (only after topics + cursors are ready + parent terminated) | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 738 | // Step 1: Read the scalable topic's subscriptions from metadata (single source of | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 744 | // Step 2: Terminate both parent segment topics | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 748 | // Step 3: Atomic metadata update (only after topic + cursors are ready + parents terminated) | COMMENT |
| LOW | …r/broker/service/scalable/ScalableTopicController.java | 685 | // Step 1: Read the scalable topic's subscriptions from metadata (the single source | COMMENT |
| LOW | …r/broker/service/scalable/ScalableTopicController.java | 712 | // Step 5: Notify subscriptions of layout change (triggers consumer reassignment) | COMMENT |
| LOW | …broker/authentication/ProxySaslAuthenticationTest.java | 227 | // Step 1: Create Admin Client | COMMENT |
| LOW | …broker/authentication/ProxySaslAuthenticationTest.java | 269 | // Step 3: Pass correct client params | COMMENT |
| LOW | …ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java | 88 | // Step 1: Create Admin Client | COMMENT |
| LOW | …ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java | 102 | // Step 2: Run Pulsar Proxy without forwarding authData - expect Exception | COMMENT |
| LOW | …ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java | 136 | // Step 3: Create proxy with forwardAuthData enabled | COMMENT |
| LOW | …che/pulsar/proxy/server/ProxyRolesEnforcementTest.java | 186 | // Step 1: Create Admin Client | COMMENT |
| LOW⚡ | …che/pulsar/proxy/server/ProxyRolesEnforcementTest.java | 202 | // Step 2: Try to use proxy Client as a normal Client - expect exception | COMMENT |
| LOW⚡ | …che/pulsar/proxy/server/ProxyRolesEnforcementTest.java | 212 | // Step 3: Run Pulsar Proxy and pass proxy params as client params - expect exception | COMMENT |
| LOW | …che/pulsar/proxy/server/ProxyRolesEnforcementTest.java | 252 | // Step 4: Pass correct client params | COMMENT |
| LOW | …pache/pulsar/proxy/server/ProxyAuthenticationTest.java | 272 | // Step 1: Create Admin Client | COMMENT |
| LOW | …pache/pulsar/proxy/server/ProxyAuthenticationTest.java | 288 | // Step 2: Try to use proxy Client as a normal Client - expect exception | COMMENT |
| LOW⚡ | …pache/pulsar/proxy/server/ProxyAuthenticationTest.java | 317 | // Step 3: Pass correct client params and use multiple connections | COMMENT |
| LOW⚡ | …pache/pulsar/proxy/server/ProxyAuthenticationTest.java | 324 | // Step 4: Ensure that all client contexts share the same auth provider | COMMENT |
| LOW | wireshark/README.md | 26 | ## Step 1: prepare PulsarApi.proto file | COMMENT |
| LOW | wireshark/README.md | 38 | ## Step 2: add pulsar.lua to plugins | COMMENT |
| LOW | wireshark/README.md | 46 | ## Step 3: start to use | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …apache/pulsar/broker/service/OneWayReplicatorTest.java | 1695 | // Step 1: Inject an error to make the replicator is not able to work. | STRING |
| LOW⚡ | …apache/pulsar/broker/service/OneWayReplicatorTest.java | 1699 | // Step 2: Send one message, since the replicator does not work anymore, this message will not be replicated. | STRING |
| LOW⚡ | …apache/pulsar/broker/service/OneWayReplicatorTest.java | 1709 | // Step 3: Unload topic, the replicator will be re-created. | STRING |
| LOW⚡ | …lsar/client/api/v5/V5MultiBrokerScalableTopicTest.java | 345 | // Step 1: force controller materialization + leader election on every broker. | COMMENT |
| LOW⚡ | …lsar/client/api/v5/V5MultiBrokerScalableTopicTest.java | 350 | // Step 2: wait until each broker's metadata store sees the controller-lock znode. | COMMENT |
| LOW | …org/apache/pulsar/broker/namespace/OwnershipCache.java | 169 | // If we're not the owner, we need to check if anybody else is | COMMENT |
| LOW⚡ | …sar/broker/service/schema/BookkeeperSchemaStorage.java | 350 | // Step 1: Store the schema data into a new BookKeeper ledger | COMMENT |
| LOW⚡ | …sar/broker/service/schema/BookkeeperSchemaStorage.java | 360 | // Step 2: Create the schema locator z-node pointing to the ledger | COMMENT |
| LOW⚡ | …sar/broker/service/schema/BookkeeperSchemaStorage.java | 368 | // Step 3: Handle failure by cleaning up the orphan ledger | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 696 | // Step 3: Terminate the parent segment topic so producers get TopicTerminated | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 699 | // Step 4: Atomic metadata update (only after topics + cursors are ready + parent terminated) | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 738 | // Step 1: Read the scalable topic's subscriptions from metadata (single source of | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 744 | // Step 2: Terminate both parent segment topics | COMMENT |
| LOW⚡ | …r/broker/service/scalable/ScalableTopicController.java | 748 | // Step 3: Atomic metadata update (only after topic + cursors are ready + parents terminated) | COMMENT |
| LOW | …r/broker/service/scalable/ScalableTopicController.java | 685 | // Step 1: Read the scalable topic's subscriptions from metadata (the single source | COMMENT |
| LOW | …r/broker/service/scalable/ScalableTopicController.java | 712 | // Step 5: Notify subscriptions of layout change (triggers consumer reassignment) | COMMENT |
| LOW | …broker/authentication/ProxySaslAuthenticationTest.java | 227 | // Step 1: Create Admin Client | COMMENT |
| LOW | …broker/authentication/ProxySaslAuthenticationTest.java | 269 | // Step 3: Pass correct client params | COMMENT |
| LOW | …ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java | 88 | // Step 1: Create Admin Client | COMMENT |
| LOW | …ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java | 102 | // Step 2: Run Pulsar Proxy without forwarding authData - expect Exception | COMMENT |
| LOW | …ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java | 136 | // Step 3: Create proxy with forwardAuthData enabled | COMMENT |
| LOW | …che/pulsar/proxy/server/ProxyRolesEnforcementTest.java | 186 | // Step 1: Create Admin Client | COMMENT |
| LOW⚡ | …che/pulsar/proxy/server/ProxyRolesEnforcementTest.java | 202 | // Step 2: Try to use proxy Client as a normal Client - expect exception | COMMENT |
| LOW⚡ | …che/pulsar/proxy/server/ProxyRolesEnforcementTest.java | 212 | // Step 3: Run Pulsar Proxy and pass proxy params as client params - expect exception | COMMENT |
| LOW | …che/pulsar/proxy/server/ProxyRolesEnforcementTest.java | 252 | // Step 4: Pass correct client params | COMMENT |
| LOW | …pache/pulsar/proxy/server/ProxyAuthenticationTest.java | 272 | // Step 1: Create Admin Client | COMMENT |
| LOW | …pache/pulsar/proxy/server/ProxyAuthenticationTest.java | 288 | // Step 2: Try to use proxy Client as a normal Client - expect exception | COMMENT |
| LOW⚡ | …pache/pulsar/proxy/server/ProxyAuthenticationTest.java | 317 | // Step 3: Pass correct client params and use multiple connections | COMMENT |
| LOW⚡ | …pache/pulsar/proxy/server/ProxyAuthenticationTest.java | 324 | // Step 4: Ensure that all client contexts share the same auth provider | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …atest-version-image/python-examples/producer_schema.py | 22 | CODE | |
| LOW | …atest-version-image/python-examples/consumer_schema.py | 22 | CODE | |
| LOW | …functions/python-examples/avro_schema_test_function.py | 22 | CODE | |
| LOW | …tions/instance/src/test/python/test_python_instance.py | 28 | CODE | |
| LOW | …tions/instance/src/main/python/python_instance_main.py | 34 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 20 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 28 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 30 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 30 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 30 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 31 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 32 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 32 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 35 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 37 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 37 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 37 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 38 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 38 | CODE | |
| LOW | …ions/instance/src/main/python/prometheus_client_fix.py | 38 | CODE | |
| LOW | …sar-functions/instance/src/main/python/Function_pb2.py | 9 | CODE | |
| LOW | …ance/src/main/python/InstanceCommunication_pb2_grpc.py | 4 | CODE | |
| LOW | …/instance/src/main/python/InstanceCommunication_pb2.py | 9 | CODE | |
| LOW | …/instance/src/main/python/InstanceCommunication_pb2.py | 17 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …pache/pulsar/socks5/handler/CommandRequestHandler.java | 40 | public class CommandRequestHandler extends SimpleChannelInboundHandler<DefaultSocks5CommandRequest> { | CODE |
| LOW | …/pulsar/socks5/handler/PasswordAuthRequestHandler.java | 32 | public class PasswordAuthRequestHandler extends SimpleChannelInboundHandler<DefaultSocks5PasswordAuthRequest> { | CODE |
| LOW | …pache/pulsar/socks5/handler/InitialRequestHandler.java | 31 | public class InitialRequestHandler extends SimpleChannelInboundHandler<DefaultSocks5InitialRequest> { | CODE |
| LOW | …va/org/apache/pulsar/client/api/MockBrokerService.java | 86 | private class GenericResponseHandler extends AbstractHandler { | CODE |
| LOW | …tions/instance/src/test/python/test_python_instance.py | 75 | def test_context_ack_partitionedtopic(self): | CODE |
| LOW | …tions/instance/src/test/python/test_secretsprovider.py | 35 | def test_cleartext_secretsprovider(self): | CODE |
| LOW | …tions/instance/src/test/python/test_secretsprovider.py | 44 | def test_environment_secretsprovider(self): | CODE |
| LOW | …tions/instance/src/main/python/python_instance_main.py | 59 | def generate_arguments_parser(): | CODE |
| LOW | …r-functions/instance/src/main/python/function_stats.py | 111 | def get_total_processed_successfully(self): | CODE |
| LOW | …r-functions/instance/src/main/python/function_stats.py | 117 | def get_total_user_exceptions(self): | CODE |
| LOW⚡ | …r-functions/instance/src/main/python/function_stats.py | 149 | def incr_total_processed_successfully(self): | CODE |
| LOW⚡ | …r-functions/instance/src/main/python/function_stats.py | 153 | def incr_total_sys_exceptions(self, exception): | CODE |
| LOW⚡ | …r-functions/instance/src/main/python/function_stats.py | 158 | def incr_total_user_exceptions(self, exception): | CODE |
| LOW | …r-functions/instance/src/main/python/function_stats.py | 193 | def report_user_exception_prometheus(self, exception): | CODE |
| LOW | …r-functions/instance/src/main/python/function_stats.py | 211 | def report_system_exception_prometheus(self, exception): | CODE |
| LOW | …lsar-functions/instance/src/main/python/contextimpl.py | 73 | def set_current_message_context(self, message, topic): | CODE |
| LOW | …lsar-functions/instance/src/main/python/contextimpl.py | 89 | def get_current_message_topic_name(self): | CODE |
| LOW | …lsar-functions/instance/src/main/python/contextimpl.py | 100 | def get_message_partition_index(self): | CODE |
| LOW | …lsar-functions/instance/src/main/python/contextimpl.py | 156 | def get_output_serde_class_name(self): | CODE |
| LOW | …-functions/instance/src/main/python/python_instance.py | 132 | def process_spawner_health_check_timer(self): | CODE |
| LOW | …e/pulsar/functions/worker/FunctionMetaDataManager.java | 61 | public class FunctionMetaDataManager implements AutoCloseable { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …va/org/apache/pulsar/broker/service/ServerCnxTest.java | 1367 | // This test is an example of https://github.com/apache/pulsar/issues/19332. Essentially, we're passing | COMMENT |
| MEDIUM | bin/pulsar-admin-common.sh | 140 | # Netty cannot utilize resources from the memory pool and must frequently allocate native memory. | COMMENT |
| MEDIUM | …e/pulsar/common/util/collections/BitSetRecyclable.java | 32 | * Provides {@link BitSetRecyclable#resetWords(long[])} method and leverage with netty recycler. | COMMENT |
| MEDIUM | …tor/NameAndConfigBasedSecretsProviderConfigurator.java | 50 | // environment variables way. Essentially the secretName/secretPath is | COMMENT |
| MEDIUM | …onfigurator/KubernetesSecretsProviderConfigurator.java | 69 | // environment variables way. Essentially the secretName/secretPath | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | pip/pip-259.md | 0 | the maximum size in bytes of the request header. larger headers will allow for more and/or larger cookies plus larger fo | STRING |
| HIGH | …org/apache/pulsar/proxy/server/ProxyConfiguration.java | 0 | the maximum size in bytes of the request header. larger headers will allow for more and/or larger cookies plus larger fo | STRING |
| HIGH | …ava/org/apache/pulsar/broker/ServiceConfiguration.java | 0 | the maximum size in bytes of the request header. larger headers will allow for more and/or larger cookies plus larger fo | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pulsar-functions/instance/src/main/python/log.py | 31 | # Create the logger | COMMENT |
| MEDIUM | …ance/src/main/python/InstanceCommunication_pb2_grpc.py | 117 | # This class is part of an EXPERIMENTAL API. | COMMENT |
| MEDIUM | src/update_python_protobuf_stubs_with_docker.sh | 23 | # Create an inline docker container with alpine:3.23 base image and mount the current directory to it as the | COMMENT |
| MEDIUM | src/update_python_protobuf_stubs.sh | 29 | # Create a temporary virtual environment to avoid polluting the global Python environment | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | AGENTS.md | 46 | ## Agent guardrails | COMMENT |
| MEDIUM | CLAUDE.md | 46 | ## Agent guardrails | COMMENT |
| MEDIUM | .github/copilot-instructions.md | 46 | ## Agent guardrails | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …buffer/impl/SingleSnapshotAbortedTxnProcessorImpl.java | 73 | //In this implementation we clear the invalid aborted txn ID one by one. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/pulsar/scripts/update-ini-from-env.py | 30 | CODE | |
| LOW | docker/pulsar/scripts/update-rocksdb-conf-from-env.py | 34 | CODE | |
| LOW | …tions/instance/src/main/python/python_instance_main.py | 149 | CODE | |
| LOW | …-functions/instance/src/main/python/python_instance.py | 247 | CODE | |
| LOW | …-functions/instance/src/main/python/python_instance.py | 367 | CODE | |
| LOW | …-functions/instance/src/main/python/python_instance.py | 543 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …er/pulsar/scripts/apply-config-from-env-with-prefix.py | 38 | SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" >/dev/null 2>&1 && pwd)" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …-auth-oidc/src/test/java/resources/fakeKubeConfig.yaml | 37 | token: fake-token | CODE |
| LOW | …mon/compression/CompressorCodecBackwardCompatTest.java | 34 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras id massa odio. Duis commodo ligula sed " | CODE |
| LOW | …mon/compression/CompressorCodecBackwardCompatTest.java | 34 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras id massa odio. Duis commodo ligula sed " | CODE |
| LOW | …che/pulsar/common/compression/CompressorCodecTest.java | 35 | private static final String text = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras id massa odio. " | CODE |
| LOW | …che/pulsar/common/compression/CompressorCodecTest.java | 35 | private static final String text = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras id massa odio. " | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pulsar-functions/instance/src/main/python/util.py | 44 | except Exception as e: | CODE |
| LOW | pulsar-functions/instance/src/main/python/util.py | 49 | except Exception as e: | CODE |
| LOW | …-functions/instance/src/main/python/python_instance.py | 282 | except Exception as e: | CODE |
| LOW | …-functions/instance/src/main/python/python_instance.py | 295 | except Exception as e: | CODE |
| LOW | …-functions/instance/src/main/python/python_instance.py | 593 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ance/src/main/python/InstanceCommunication_pb2_grpc.py | 122 | CODE | |
| LOW | …ance/src/main/python/InstanceCommunication_pb2_grpc.py | 149 | CODE | |
| LOW | …ance/src/main/python/InstanceCommunication_pb2_grpc.py | 176 | CODE | |
| LOW | …ance/src/main/python/InstanceCommunication_pb2_grpc.py | 203 | CODE | |
| LOW | …ance/src/main/python/InstanceCommunication_pb2_grpc.py | 230 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/pulsar-ci.yaml | 31 | # if cron expression is changed, make sure to update the expression in jdk_major_version step in preconditions job | COMMENT |
| LOW | .github/workflows/pulsar-ci-flaky.yaml | 31 | # if cron expression is changed, make sure to update the expression in jdk_major_version step in preconditions job | COMMENT |
| LOW | …tions/instance/src/main/python/python_instance_main.py | 314 | # make sure to close all non-daemon threads before this! | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | gradle/setup-test-gpg.sh | 24 | # Usage: | COMMENT |