2.1

Adjusted Signal

2.1

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

29.5K

Stars

Language

428.3K

Lines of Code

2.4K

Files

529

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 304 finding(s).

Hallucinated Dependency & Supply Chain Risk 7.3/100 · LOW

Are imports declared and package/API names verified? 225 finding(s).

Agent Over-Engineering Ratio 0.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 47 finding(s).

PR Review Velocity Impact 10.7/100 · LOW

Which changes need focused human review? 529 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 47HIGH 0MEDIUM 7LOW 475

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 529 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators47 hits · 490 pts

Severity	File	Line	Snippet	Context
CRITICAL	internal/configuration/validator/notifier_test.go	164	suite.Equal(uint16(tls.VersionTLS11), suite.config.SMTP.TLS.MinimumVersion.MinVersion())	CODE
CRITICAL	internal/configuration/validator/authentication_test.go	1052	suite.Equal(schema.DefaultLDAPAuthenticationBackendConfigurationImplementationCustom.TLS.MinimumVersion.Value, suite.co	CODE
CRITICAL	internal/middlewares/identity_verification_test.go	304	s.mock.Ctx.Request.Header.Del(fasthttp.HeaderXForwardedHost)	CODE
CRITICAL	internal/middlewares/identity_verification_test.go	318	s.mock.Ctx.Request.Header.Set("X-Original-URL", "https://auth.notexample.com")	CODE
CRITICAL	internal/middlewares/identity_verification_test.go	365	before := string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session"))	CODE
CRITICAL	internal/middlewares/identity_verification_test.go	373	assert.Equal(t, before, string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")))	CODE
CRITICAL	internal/middlewares/identity_verification_test.go	393	before := string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session"))	CODE
CRITICAL	internal/middlewares/identity_verification_test.go	400	assert.NotEqual(s.T(), before, string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")))	CODE
CRITICAL	internal/middlewares/identity_verification_test.go	418	before := string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session"))	CODE
CRITICAL	internal/middlewares/identity_verification_test.go	425	assert.NotEqual(s.T(), before, string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")))	CODE
CRITICAL	internal/regulation/regulator_blackbox_test.go	43	s.mock.Ctx.Request.Header.Set(fasthttp.HeaderXForwardedFor, "127.0.0.1")	CODE
CRITICAL	internal/handlers/handler_authz_test.go	1261	token, signature, err := mock.Ctx.Providers.OpenIDConnect.Strategy.Core.GenerateAccessToken(mock.Ctx, requester)	CODE
CRITICAL	internal/handlers/handler_authz_test.go	1356	token, signature, err := mock.Ctx.Providers.OpenIDConnect.Strategy.Core.GenerateAccessToken(mock.Ctx, requester)	CODE
CRITICAL	internal/handlers/handler_authz_test.go	1448	token, signature, err := mock.Ctx.Providers.OpenIDConnect.Strategy.Core.GenerateAccessToken(mock.Ctx, requester)	CODE
CRITICAL	internal/handlers/handler_logout_test.go	43	b := s.mock.Ctx.Response.Header.PeekCookie("authelia_session")	CODE
CRITICAL	internal/handlers/handler_firstfactor_password_test.go	1216	session.SetOneFactorPasskey(s.mock.Ctx.Providers.Clock.Now(), &authentication.UserDetails{Username: testValue}, false,	CODE
CRITICAL	internal/handlers/handler_firstfactor_password_test.go	1517	session.SetOneFactorPasskey(s.mock.Ctx.Providers.Clock.Now(), &authentication.UserDetails{Username: testValue}, false,	CODE
CRITICAL	internal/handlers/handler_firstfactor_password_test.go	1776	s.mock.Ctx.Request.Header.Set("X-Original-URL", "https://auth.notexample.com")	CODE
CRITICAL	internal/handlers/handler_sign_duo_test.go	736	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL	internal/handlers/handler_sign_duo_test.go	743	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	413	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	420	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	604	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	611	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	648	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	655	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL⚡	internal/handlers/handler_sign_totp_test.go	689	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL⚡	internal/handlers/handler_sign_totp_test.go	696	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL⚡	internal/handlers/handler_sign_totp_test.go	705	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL⚡	internal/handlers/handler_sign_totp_test.go	712	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	759	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	768	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	787	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	794	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	807	res := r.FindAllStringSubmatch(string(s.mock.Ctx.Response.Header.PeekCookie("authelia_session")), -1)	CODE
CRITICAL	internal/handlers/handler_sign_totp_test.go	814	string(s.mock.Ctx.Request.Header.Cookie("authelia_session")))	CODE
CRITICAL	internal/handlers/response.go	362	if signature, err = ctx.Providers.OpenIDConnect.Strategy.Core.RFC8628UserCodeSignature(ctx, userCode); err != nil {	CODE
CRITICAL	internal/handlers/handler_oauth2_consent_extra_test.go	327	signature, err := mock.Ctx.Providers.OpenIDConnect.Strategy.Core.RFC8628UserCodeSignature(mock.Ctx, userCode)	CODE
CRITICAL	internal/handlers/handler_oauth2_consent_extra_test.go	661	signature, err := mock.Ctx.Providers.OpenIDConnect.Strategy.Core.RFC8628UserCodeSignature(mock.Ctx, userCode)	CODE
CRITICAL	internal/handlers/handler_oauth2_consent_extra_test.go	864	signature, err := mock.Ctx.Providers.OpenIDConnect.Strategy.Core.RFC8628UserCodeSignature(mock.Ctx, userCode)	CODE
CRITICAL	internal/handlers/response_flow_test.go	244	signature, err := mock.Ctx.Providers.OpenIDConnect.Strategy.Core.RFC8628UserCodeSignature(mock.Ctx, userCode)	CODE
CRITICAL	internal/handlers/handler_oauth2_consent.go	460	if signature, err = ctx.Providers.OpenIDConnect.Strategy.Core.RFC8628UserCodeSignature(ctx, code); err != nil {	CODE
CRITICAL	internal/handlers/handler_oauth2_consent.go	729	if signature, err = ctx.Providers.OpenIDConnect.Strategy.Core.RFC8628UserCodeSignature(ctx, userCode); err != nil {	CODE
CRITICAL	internal/handlers/handler_oauth2_consent_device_test.go	52	signature, err := mock.Ctx.Providers.OpenIDConnect.Strategy.Core.RFC8628UserCodeSignature(mock.Ctx, userCode)	CODE
CRITICAL	internal/handlers/handler_state_test.go	62	assert.Equal(s.T(), []byte("application/json; charset=utf-8"), s.mock.Ctx.Response.Header.ContentType())	CODE
CRITICAL	internal/handlers/handler_state_test.go	96	assert.Equal(s.T(), []byte("application/json; charset=utf-8"), s.mock.Ctx.Response.Header.ContentType())	CODE
CRITICAL	internal/handlers/handler_state_test.go	101	s.mock.Ctx.Request.Header.Set(fasthttp.HeaderXForwardedHost, "unknown.example.org")	CODE

Over-Commented Block248 hits · 182 pts

Severity	File	Line	Snippet	Context
LOW	config.template.yml	1	# yamllint disable rule:comments-indentation	COMMENT
LOW	config.template.yml	21	##	COMMENT
LOW	config.template.yml	41	## Formats:	COMMENT
LOW	config.template.yml	61		COMMENT
LOW	config.template.yml	81		COMMENT
LOW	config.template.yml	101	## This section is considered advanced and it SHOULD NOT be configured unless you've read the relevant documentation.	COMMENT
LOW	config.template.yml	121	## Options are 'storage', 'session', 'user', 'notification', 'ntp', 'expressions', and 'webauthn-metadata'.	COMMENT
LOW	config.template.yml	141	# implementation: 'AuthRequest'	COMMENT
LOW	config.template.yml	161	## Whether to also log to stdout when a log_file_path is defined.	COMMENT
LOW	config.template.yml	181	## The default scheme is 'unix' if the address is an absolute path otherwise it's 'tcp'. The default port is '9959'.	COMMENT
LOW	config.template.yml	201	# write: '6 seconds'	COMMENT
LOW	config.template.yml	221		COMMENT
LOW	config.template.yml	241	## The allowed algorithms for a user to pick from.	COMMENT
LOW	config.template.yml	261	## Disable the Apple App Store badge.	COMMENT
LOW	config.template.yml	281	# disable: false	COMMENT
LOW	config.template.yml	301	## Permitted AAGUID's. If configured specifically only allows the listed AAGUID's.	COMMENT
LOW	config.template.yml	321	# metadata:	COMMENT
LOW	config.template.yml	341	# validate_entry_permit_zero_aaguid: false	COMMENT
LOW	config.template.yml	361	# duo_api:	COMMENT
LOW	config.template.yml	381	# jwt_algorithm: 'HS256'	COMMENT
LOW	config.template.yml	401		COMMENT
LOW	config.template.yml	421	# max_desync: '3 seconds'	COMMENT
LOW	config.template.yml	441	# definition_name:	COMMENT
LOW	config.template.yml	461	# authentication_backend:	COMMENT
LOW	config.template.yml	481	## The amount of time to wait before we refresh data from the authentication backend in the duration common syntax.	COMMENT
LOW	config.template.yml	501	# address: 'ldaps://127.0.0.1:636'	COMMENT
LOW	config.template.yml	521		COMMENT
LOW	config.template.yml	541		COMMENT
LOW	config.template.yml	561	## Enable Pooling.	COMMENT
LOW	config.template.yml	581	## The users filter used in search queries to find the user profile based on input filled in login form.	COMMENT
LOW	config.template.yml	601	## be found at: https://www.authelia.com/c/ldap#groups-filter-replacements	COMMENT
LOW	config.template.yml	621	# attributes:	COMMENT
LOW	config.template.yml	641	## the first one returned by the directory server is used.	COMMENT
LOW	config.template.yml	661	## Important: Kubernetes (or HA) users must read https://www.authelia.com/t/statelessness	COMMENT
LOW	config.template.yml	681	# block_size: 8	COMMENT
LOW	config.template.yml	701		COMMENT
LOW	config.template.yml	721	## Require special characters.	COMMENT
LOW	config.template.yml	741	## on a per-browser basis.	COMMENT
LOW	config.template.yml	761	## Definition: A 'rule' is an object with the following keys: 'domain', 'subject', 'policy' and 'resources'.	COMMENT
LOW	config.template.yml	781	## Rules applied to everyone	COMMENT
LOW	config.template.yml	801	# - 'internal'	COMMENT
LOW	config.template.yml	821	# - 'group:admins'	COMMENT
LOW	config.template.yml	841	# resources:	COMMENT
LOW	config.template.yml	861	session:	COMMENT
LOW	config.template.yml	881	## - Match the host portion of this URI.	COMMENT
LOW	config.template.yml	901	# same_site: 'lax'	COMMENT
LOW	config.template.yml	921	## Cookie Session Domain default 'name' value.	COMMENT
LOW	config.template.yml	941	# redis:	COMMENT
LOW	config.template.yml	961		COMMENT
LOW	config.template.yml	981		COMMENT
LOW	config.template.yml	1001	# -----BEGIN PRIVATE KEY-----	COMMENT
LOW	config.template.yml	1021	# - host: 'sentinel-node1'	COMMENT
LOW	config.template.yml	1041		COMMENT
LOW	config.template.yml	1061		COMMENT
LOW	config.template.yml	1081	## The default scheme is 'unix' if the address is an absolute path otherwise it's 'tcp'. The default port is '3306'.	COMMENT
LOW	config.template.yml	1101	# server_name: 'mysql.example.com'	COMMENT
LOW	config.template.yml	1121	# ...	COMMENT
LOW	config.template.yml	1141	## The default scheme is 'unix' if the address is an absolute path otherwise it's 'tcp'. The default port is '5432'.	COMMENT
LOW	config.template.yml	1161	# ...	COMMENT
LOW	config.template.yml	1181	## The connection timeout in the duration common syntax.	COMMENT
188 more matches not shown…

Fake / Example Data178 hits · 163 pts

Severity	File	Line	Snippet	Context
LOW	web/src/views/Settings/Security/SecurityView.test.tsx	17	userInfo: { display_name: "John Doe", emails: ["john@example.com"], groups: [] } as any,	CODE
LOW	web/src/views/Settings/Security/SecurityView.test.tsx	94	mocks.userInfo = { display_name: "John Doe", emails: ["john@example.com"], groups: [] };	CODE
LOW	web/src/views/Settings/Security/SecurityView.test.tsx	130	display_name: "John Doe",	CODE
LOW⚡	web/src/views/Settings/Security/SecurityView.test.tsx	156	mocks.userInfo = { display_name: "John Doe", groups: [] };	CODE
LOW⚡	web/src/views/Settings/Security/SecurityView.test.tsx	165	expect(screen.getByTestId("change-password-dialog")).toHaveAttribute("data-username", "John Doe");	CODE
LOW⚡	web/src/views/Settings/Security/SecurityView.test.tsx	166	expect(screen.getByTestId("second-factor-dialog")).toHaveAttribute("data-display-name", "John Doe");	CODE
LOW	web/src/views/ConsentPortal/ConsentPortal.test.tsx	63	const userInfo = { display_name: "John Doe", emails: [] };	CODE
LOW	web/src/views/ConsentPortal/ConsentPortal.test.tsx	126	expect(await screen.findByTestId("openid-consent")).toHaveAttribute("data-display-name", "John Doe");	CODE
LOW	internal/configuration/provider_test.go	478	assert.Contains(t, data, "sender: 'admin@example.org'")	CODE
LOW	internal/configuration/provider_test.go	536	assert.Contains(t, string(file.Data), "sender: 'admin@example.org'")	CODE
LOW	internal/configuration/provider_test.go	1253	assert.Equal(t, "admin@example.com", config.Notifier.SMTP.Sender.Address)	CODE
LOW	internal/configuration/provider_test.go	1288	assert.Equal(t, "admin@example.com", config.Notifier.SMTP.Sender.Address)	CODE
LOW	internal/configuration/koanf_callbacks_test.go	61	"AUTHELIA_FAKE_KEY": "fake_key",	CODE
LOW	internal/configuration/koanf_callbacks_test.go	62	"AUTHELIA__FAKE_KEY": "fake_key",	CODE
LOW	internal/configuration/koanf_callbacks_test.go	80	assert.Equal(t, "fake_key", key)	CODE
LOW	…nfiguration/test_resources/config_with_definitions.yml	191	sender: 'admin@example.com'	CODE
LOW	…rnal/configuration/test_resources/config.durations.yml	175	sender: 'admin@example.com'	CODE
LOW	internal/configuration/test_resources/config_nolog.yml	172	sender: 'admin@example.com'	CODE
LOW	…/configuration/test_resources/config_authz_subpath.yml	180	sender: 'admin@example.com'	CODE
LOW	…nfiguration/test_resources/config_domain_bad_regex.yml	126	sender: 'admin@example.com'	CODE
LOW	…onfiguration/test_resources/config_no_address_smtp.yml	169	sender: 'admin@example.com'	CODE
LOW	…uration/test_resources/config_oidc_disable_entropy.yml	126	sender: 'admin@example.com'	CODE
LOW	…iguration/test_resources/config_oidc_empty_jwk_key.yml	126	sender: 'admin@example.com'	CODE
LOW	…nfiguration/test_resources/config_no_address_mysql.yml	169	sender: 'admin@example.com'	CODE
LOW	internal/configuration/test_resources/config_regex.yml	140	sender: 'admin@example.com'	CODE
LOW	…nal/configuration/test_resources/config.no-refresh.yml	174	sender: 'admin@example.com'	CODE
LOW	…guration/test_resources/config_no_address_postgres.yml	169	sender: 'admin@example.com'	CODE
LOW	…al/configuration/test_resources/config_with_secret.yml	129	sender: 'admin@example.com'	CODE
LOW	internal/configuration/test_resources/config_oidc.yml	126	sender: 'admin@example.com'	CODE
LOW	internal/configuration/test_resources/config.yml	178	sender: 'admin@example.com'	CODE
LOW	…l/configuration/test_resources/config_domain_regex.yml	133	sender: 'admin@example.com'	CODE
LOW	…nal/configuration/test_resources/config_no_automap.yml	176	sender: 'admin@example.com'	CODE
LOW	…ernal/configuration/test_resources/config_bad_keys.yml	125	sender: 'admin@example.com'	CODE
LOW	…al/configuration/test_resources/userdb/debug-tests.yml	10	displayname: 'John Doe'	CODE
LOW	…l/configuration/test_resources/config_walk/general.yml	153	sender: 'admin@example.com'	CODE
LOW	internal/suites/scenario_custom_headers_test.go	71	s.Assert().NotContains(b, "John Doe")	CODE
LOW	internal/suites/scenario_custom_headers_test.go	119	s.Assert().Equal("John Doe", payload.Headers.ForwardedName[0])	CODE
LOW	internal/suites/scenario_oidc_test.go	129	{oidc.ClaimFullName, "", "John Doe"},	CODE
LOW	internal/suites/suite_standalone_test.go	331	s.Assert().Equal("John Doe", res.Header.Get("Remote-Name"))	CODE
LOW	internal/suites/OIDCTraefik/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/OIDCTraefik/configuration.yml	27	sender: 'admin@example.com'	CODE
LOW	internal/suites/Docker/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/Docker/configuration.yml	27	sender: 'admin@example.com'	CODE
LOW	internal/suites/MariaDB/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/MariaDB/configuration.yml	30	sender: 'admin@example.com'	CODE
LOW	internal/suites/NetworkACL/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/NetworkACL/configuration.yml	27	sender: 'admin@example.com'	CODE
LOW	internal/suites/OneFactorOnly/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/Standalone/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/Standalone/configuration.yml	84	sender: 'admin@example.com'	CODE
LOW	internal/suites/TwoFactor/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/TwoFactor/configuration.yml	53	sender: 'admin@example.com'	CODE
LOW	…suites/example/kube/authelia/configs/configuration.yml	28	sender: 'admin@example.com'	CODE
LOW	internal/suites/LDAP/configuration.yml	46	sender: 'admin@example.com'	CODE
LOW	internal/suites/ActiveDirectory/configuration.yml	38	sender: 'admin@example.com'	CODE
LOW	internal/suites/MultiCookieDomain/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/MultiCookieDomain/configuration.yml	33	sender: 'admin@example.com'	CODE
LOW	internal/suites/ShortTimeouts/users.yml	8	displayname: "John Doe"	CODE
LOW	internal/suites/ShortTimeouts/configuration.yml	27	sender: 'admin@example.com'	CODE
LOW	internal/suites/BypassAll/users.yml	8	displayname: "John Doe"	CODE
118 more matches not shown…

Hyper-Verbose Identifiers47 hits · 48 pts

Severity	File	Line	Snippet	Context
LOW	web/src/contexts/NotificationsContext.tsx	29	export default function NotificationsContextProvider(props: Props) {	CODE
LOW	web/src/contexts/LocalStorageMethodContext.tsx	24	export default function LocalStorageMethodContextProvider(props: Props) {	CODE
LOW	web/src/contexts/LocalStorageMethodContext.tsx	83	export function useLocalStorageMethodContext() {	CODE
LOW	web/src/utils/Configuration.ts	38	export function getResetPasswordCustomURL() {	CODE
LOW	web/src/utils/Configuration.ts	62	export function getPrivacyPolicyRequireAccept() {	CODE
LOW	web/src/models/WebAuthn.ts	61	export function AssertionResultFailureString(result: AssertionResult) {	CODE
LOW	web/src/models/WebAuthn.ts	84	export function AttestationResultFailureString(result: AttestationResult) {	CODE
LOW	web/src/hooks/WebAuthnCredentials.ts	8	export function useUserWebAuthnCredentials() {	CODE
LOW	web/src/hooks/UserInfoTOTPConfiguration.ts	11	export function useUserInfoTOTPConfiguration() {	CODE
LOW	web/src/hooks/UserInfoTOTPConfiguration.ts	15	export function useUserInfoTOTPConfigurationOptional() {	CODE
LOW	…tPortal/OpenIDConnect/DecisionFormPreConfiguration.tsx	17	function DecisionFormPreConfiguration({ checked, onChangePreConfiguration, pre_configuration }: Props) {	CODE
LOW	…tPortal/OpenIDConnect/DecisionFormReauthentication.tsx	25	function DecisionFormReauthentication({ disabled, error, failure, onChange, ref, value }: Props) {	CODE
LOW	…views/ConsentPortal/OpenIDConnect/DecisionFormView.tsx	413	function DecisionFormReauthenticationField(props: Omit<ReauthenticationProps, "disabled">) {	CODE
LOW	…ntPortal/OpenIDConnect/DeviceAuthorizationFormView.tsx	39	function DeviceAuthorizationFormView({ state }: Props) {	CODE
LOW	…ntPortal/OpenIDConnect/DeviceAuthorizationFormView.tsx	157	function DeviceAuthorizationSubmit({ children, disabled }: { children: string; disabled: boolean }) {	CODE
LOW	web/src/services/PushNotification.ts	20	export function completePushNotificationSignIn(	CODE
LOW	web/src/services/PushNotification.ts	60	export async function initiateDuoDeviceSelectionProcess(signal?: AbortSignal) {	CODE
LOW	web/src/services/PushNotification.ts	73	export async function completeDuoDeviceSelectionProcess(device: DuoDevicePostRequest, signal?: AbortSignal) {	CODE
LOW	web/src/services/Password.ts	58	export async function postFirstFactorReauthenticate(	CODE
LOW	web/src/services/UserInfoTOTPConfiguration.ts	32	function toUserInfoTOTPConfiguration(payload: UserInfoTOTPConfigurationPayload): UserInfoTOTPConfiguration {	CODE
LOW	web/src/services/UserInfoTOTPConfiguration.ts	43	export async function getUserInfoTOTPConfiguration(): Promise<UserInfoTOTPConfiguration> {	CODE
LOW	web/src/services/UserInfoTOTPConfiguration.ts	49	export async function getUserInfoTOTPConfigurationOptional(): Promise<null \| UserInfoTOTPConfiguration> {	CODE
LOW	web/src/services/UserInfoTOTPConfiguration.ts	85	export async function deleteUserTOTPConfiguration() {	CODE
LOW	web/src/services/ResetPassword.ts	16	export async function initiateResetPasswordProcess(username: string) {	CODE
LOW	web/src/services/ResetPassword.ts	20	export async function completeResetPasswordProcess(token: string) {	CODE
LOW⚡	web/src/services/Api.ts	109	export function validateStatusAuthentication(status: number) {	CODE
LOW⚡	web/src/services/Api.ts	113	export function validateStatusOneTimeCode(status: number) {	CODE
LOW⚡	web/src/services/Api.ts	117	export function validateStatusWebAuthnCreation(status: number) {	CODE
LOW	web/src/services/PasswordPolicyConfiguration.ts	33	export async function getPasswordPolicyConfiguration(): Promise<PasswordPolicyConfiguration> {	CODE
LOW	web/src/services/WebAuthn.ts	38	function getAttestationResultFromDOMException(exception: DOMException): AttestationResult {	CODE
LOW	web/src/services/WebAuthn.ts	64	function getAssertionResultFromDOMException(	CODE
LOW	web/src/services/WebAuthn.ts	163	export async function getWebAuthnPasskeyOptions(	CODE
LOW	web/src/services/WebAuthn.ts	192	export async function postWebAuthnPasskeyResponse(	CODE
LOW	web/src/services/WebAuthn.ts	215	export async function getWebAuthnRegistrationOptions(	CODE
LOW	web/src/services/WebAuthn.ts	240	export async function startWebAuthnRegistration(options: PublicKeyCredentialCreationOptionsJSON) {	CODE
LOW	web/src/services/WebAuthn.ts	265	async function postWebAuthnRegistrationResponse(	CODE
LOW	web/src/services/WebAuthn.ts	271	export async function finishWebAuthnRegistration(response: RegistrationResponseJSON) {	CODE
LOW	web/src/services/WebAuthn.ts	294	export async function deleteUserWebAuthnCredential(credentialID: string) {	CODE
LOW	web/src/services/WebAuthn.ts	302	export async function updateUserWebAuthnCredential(credentialID: string, description: string) {	CODE
LOW	web/src/services/UserWebAuthnCredentials.ts	9	export async function getUserWebAuthnCredentials(): Promise<WebAuthnCredential[]> {	CODE
LOW	web/src/services/RateLimit.ts	49	export function registerRateLimitInterceptor(instance: AxiosInstance = axios) {	CODE
LOW	web/src/services/UserSessionElevation.ts	46	export async function generateUserSessionElevation() {	CODE
LOW	web/src/services/UserSessionElevation.ts	50	export async function verifyUserSessionElevation(otc: string) {	CODE
LOW	web/src/services/UserSessionElevation.ts	61	export async function deleteUserSessionElevation(deleteID: string) {	CODE
LOW	web/src/services/ConsentOpenIDConnect.ts	53	export function postConsentResponseAccept(	CODE
LOW	web/src/services/ConsentOpenIDConnect.ts	74	export function putDeviceCodeFlowUserCode(flowID: string, userCode: string) {	CODE
LOW	web/src/services/ConsentOpenIDConnect.ts	83	export function postConsentResponseReject(clientID: string, flowID?: string, subflow?: string, userCode?: string) {	CODE

AI Slop Vocabulary4 hits · 10 pts

Severity	File	Line	Snippet	Context
MEDIUM	internal/oidc/client.go	521	// GetPushedAuthorizeContextLifespan should return a custom lifespan or a duration of 0 seconds to utilize the	COMMENT
MEDIUM	internal/duo/types.go	18	// BaseProvider describes the upstream provider we intend to utilize. Implemented by duoapi.	COMMENT
MEDIUM	docs/config/_default/languages.toml	15	lead = 'Authelia is an open-source <a href="./overview/authentication/introduction/">authentication</a> and <a href=	CODE
MEDIUM	docs/config/_default/params.toml	12	lead = 'Authelia is an open-source <a href="./overview/authentication/introduction/">authentication</a> and <a href="./o	CODE

Slop Phrases3 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	internal/configuration/validator/session_test.go	264	assert.EqualError(t, validator.Warnings()[0], "session: domain config #1 (domain '.example.com'): option 'domain' has a	CODE
MEDIUM	internal/configuration/validator/session_test.go	873	{"ShouldRaiseWarningOnDomainWithLeadingDot", ".example.com", []string{"session: domain config #1 (domain '.example.com	CODE
MEDIUM	docs/layouts/_shortcodes/oidc-common.html	84	1. The value used in this guide is merely for demonstration purposes and you __should absolutely not__ use this	CODE

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	docs/content/blog/authelia-traefik-setup-guide/index.md	399	## WARNING: This is a default password for testing only!	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.buildkite/steps/lint.sh	7	# Usage:	COMMENT

authelia/authelia

Open-Source Code Quality, Security and Technical Debt Review