Cloudflare’s documentation
This report summarizes scanner evidence for cloudflare/cloudflare-docs, a MDX project with 5,387 GitHub stars. SynthScan examined 556,487 lines of code across 1699 source files, recording 264 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 1.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 176 finding(s).
Are imports declared and package/API names verified? 4 finding(s).
Are wrappers, guards, and repeated structures necessary? 135 finding(s).
Which changes need focused human review? 264 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 264 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .flue/app.ts | 214 | // ── Eval routes ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/ingest-workflow.ts | 84 | // ── 1. Spam / off-topic gate ───────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/ingest-workflow.ts | 229 | // ── 2. Code review (PRs only, draft-gated) ─────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/rebase-workflow.ts | 152 | // ── 1. Prepare: token, fetch PR, validate, post in-progress ───────────── | COMMENT |
| MEDIUM | .flue/orchestrators/rebase-workflow.ts | 228 | // ── 2. Attempt the rebase via the update-branch API ───────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/rebase-workflow.ts | 277 | // ── 3a. Clean rebase ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/rebase-workflow.ts | 322 | // ── 3b. Conflict: AI-assisted resolution + apply ──────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/comment-spam-workflow.ts | 59 | // ── 1. Context + exemptions ───────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/comment-spam-workflow.ts | 82 | // ── 2. Clef verdict ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/comment-spam-workflow.ts | 106 | // ── 3. Act ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/dependabot-review-workflow.ts | 106 | // ── 1. Fetch PR metadata + parse packages ─────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/dependabot-review-workflow.ts | 140 | // ── 2. Placeholder "in progress" comment (comment mode only) ──────────── | COMMENT |
| MEDIUM | .flue/orchestrators/dependabot-review-workflow.ts | 155 | // ── 3. Run the dependabot reviewer agent ──────────────────────────────── | COMMENT |
| MEDIUM | .flue/orchestrators/dependabot-review-workflow.ts | 203 | // ── 4. Render + post/log the final comment ────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.test.ts | 84 | // ── parseRecommendationEvent ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.test.ts | 139 | // ── applyEventToState ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.test.ts | 227 | // ── Head guards (applyUpdatedState / applyClearedState) ─────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.test.ts | 270 | // ── Mentions ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.test.ts | 586 | // ── parseRecommendationsMode ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.test.ts | 596 | // ── shouldSkipRecommendationUpdate ──────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.test.ts | 634 | // ── renderRecommendationsComment ────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/github.ts | 933 | // ── Rebase / Git Data API ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/github-webhook.test.ts | 10 | // ── getIssueOrPullRequestNumber ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/github-webhook.test.ts | 42 | // ── getIssueOrPullRequestUrl ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/github-webhook.test.ts | 86 | // ── getIssueOrPullRequestLabel ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/github-webhook.test.ts | 106 | // ── getIssueOrPullRequestTitle ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/github-webhook.test.ts | 136 | // ── truncateLogValue ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/spam-filter.ts | 20 | // ── Verdict ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/spam-filter.ts | 44 | // ── Comment templates ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/spam-filter.ts | 61 | // ── Constants ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/spam-filter.ts | 66 | // ── Types ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/spam-filter.ts | 86 | // ── Context fetching ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/spam-filter.ts | 159 | // ── Clef evaluation ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.ts | 51 | // ── Bounded projection contract (mirrors corpus events.ts) ─────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.ts | 110 | // ── Valibot schemas ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.ts | 199 | // ── Durable state ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/reviewer-recommendations.ts | 380 | // ── Rendering ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/rebase-conflict.ts | 452 | // ── Run the AI agent (lifted behind the runAgent callback) ──────────────── | COMMENT |
| MEDIUM | .flue/lib/pipeline-entry.ts | 79 | // ── 1. Codeowner slash commands (handled inline) ──────────────────────── | COMMENT |
| MEDIUM | .flue/lib/pipeline-entry.ts | 99 | // ── 1.7 Effort label (additive; issues only) ──────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/pipeline-entry.ts | 117 | // ── 2. Dependabot PR event → dependabot review (skips the spam gate) ───── | COMMENT |
| MEDIUM | .flue/lib/pipeline-entry.ts | 124 | // ── 3. Spam-filter event (issue / non-Dependabot PR) ──────────────────── | COMMENT |
| MEDIUM | .flue/lib/pipeline-entry.ts | 178 | // ── 4. Comment spam gate (issue comments) ─────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/pipeline-entry.ts | 198 | // ── Command handling ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/pipeline-entry.ts | 351 | // ── Changelog date check ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/pipeline-entry.ts | 408 | // ── Logging ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/run-reviewer-recommendations.ts | 41 | // ── Env ─────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .flue/lib/dependabot-review.ts | 15 | // ── Marker ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .flue/lib/dependabot-review.ts | 20 | // ── Types ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .flue/lib/dependabot-review.ts | 29 | // ── Schema ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/dependabot-review.ts | 74 | // ── PR body parser ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/dependabot-review.ts | 120 | // ── Comment rendering ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/dependabot-review.ts | 306 | // ── GitHub comment helpers ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/comment-spam.ts | 20 | // ── Constants ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/comment-spam.ts | 33 | // ── Clef evaluation ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/comment-spam.ts | 111 | // ── Workflow params ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/comment-spam.ts | 126 | // ── Types ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/comment-spam.ts | 163 | // ── Decision helpers ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/comment-spam.ts | 181 | // ── Context fetching ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .flue/lib/comment-spam.ts | 238 | // ── Audit record ────────────────────────────────────────────────────────────── | COMMENT |
| 15 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/content/catalog-models/openai-gpt-5-nano.json | 102 | "text": "You can read a JSON file in Python using the built-in json module. Open the file and use json.load to parse | CODE |
| MEDIUM | src/content/catalog-models/openai-gpt-5-nano.json | 111 | "content": "You can read a JSON file in Python using the built-in json module. Open the file and use json.load to | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4o.json | 103 | "text": "To read a JSON file in Python, you typically use the built-in `json` module, which provides utilities for p | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4o.json | 113 | "content": "To read a JSON file in Python, you typically use the built-in `json` module, which provides utilities | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4.1-nano.json | 103 | "text": "To read a JSON file in Python, you can use the built-in `json` module which provides functions for parsing | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4.1-nano.json | 113 | "content": "To read a JSON file in Python, you can use the built-in `json` module which provides functions for pa | CODE |
| MEDIUM | src/content/catalog-models/meta-muse-spark-1.1.json | 219 | "text": "Here's a small, strict version. It fixes the original bug where `item[key] === undefined` silently created | CODE |
| MEDIUM | src/content/catalog-models/meta-muse-spark-1.1.json | 240 | "text": "Here's a small, strict version. It fixes the original bug where `item[key] === undefined` silently crea | CODE |
| MEDIUM | src/content/catalog-models/google-gemini-3.6-flash.json | 120 | "text": "Here is the standard two-pointer implementation, which achieves optimal **$O(n + m)$** time complexity and | CODE |
| MEDIUM | src/content/catalog-models/google-gemini-3.6-flash.json | 129 | "text": "Here is the standard two-pointer implementation, which achieves optimal **$O(n + m)$** time complexity | CODE |
| MEDIUM | src/content/catalog-models/google-gemini-3.6-flash.json | 217 | "text": "Here is how to optimize your recursive Fibonacci function using **memoization**. \n\nMemoization stores the | CODE |
| MEDIUM | src/content/catalog-models/google-gemini-3.6-flash.json | 226 | "text": "Here is how to optimize your recursive Fibonacci function using **memoization**. \n\nMemoization store | CODE |
| MEDIUM | …/content/catalog-models/anthropic-claude-sonnet-5.json | 87 | "text": "# Reading a JSON File in Python\n\nPython's built-in `json` module makes this straightforward.\n\n## Basic | CODE |
| MEDIUM | …/content/catalog-models/anthropic-claude-sonnet-5.json | 96 | "text": "# Reading a JSON File in Python\n\nPython's built-in `json` module makes this straightforward.\n\n## Basi | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4.1-mini.json | 103 | "text": "To read a JSON file in Python, you can use the built-in `json` module. Here's a simple example:\n\n```pytho | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4.1-mini.json | 103 | "text": "To read a JSON file in Python, you can use the built-in `json` module. Here's a simple example:\n\n```pytho | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4.1-mini.json | 103 | "text": "To read a JSON file in Python, you can use the built-in `json` module. Here's a simple example:\n\n```pytho | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4.1-mini.json | 113 | "content": "To read a JSON file in Python, you can use the built-in `json` module. Here's a simple example:\n\n`` | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4.1-mini.json | 113 | "content": "To read a JSON file in Python, you can use the built-in `json` module. Here's a simple example:\n\n`` | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4.1-mini.json | 113 | "content": "To read a JSON file in Python, you can use the built-in `json` module. Here's a simple example:\n\n`` | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4o-mini.json | 104 | "text": "To read a JSON file in Python, you can use the built-in `json` module, which provides methods for parsing J | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4o-mini.json | 104 | "text": "To read a JSON file in Python, you can use the built-in `json` module, which provides methods for parsing J | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4o-mini.json | 104 | "text": "To read a JSON file in Python, you can use the built-in `json` module, which provides methods for parsing J | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4o-mini.json | 114 | "content": "To read a JSON file in Python, you can use the built-in `json` module, which provides methods for par | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4o-mini.json | 114 | "content": "To read a JSON file in Python, you can use the built-in `json` module, which provides methods for par | CODE |
| MEDIUM⚡ | src/content/catalog-models/openai-gpt-4o-mini.json | 114 | "content": "To read a JSON file in Python, you can use the built-in `json` module, which provides methods for par | CODE |
| MEDIUM | src/content/catalog-models/openai-gpt-4o-mini.json | 179 | "text": "Here are some great stops you can consider on your road trip from San Francisco to Los Angeles, highlightin | CODE |
| MEDIUM | src/content/catalog-models/openai-gpt-4o-mini.json | 189 | "content": "Here are some great stops you can consider on your road trip from San Francisco to Los Angeles, highl | CODE |
| MEDIUM | src/content/catalog-models/google-gemini-3.5-flash.json | 123 | "text": "To read a JSON file in Python, you should use the built-in `json` module. \n\nHere is the standard and most | CODE |
| MEDIUM | src/content/catalog-models/google-gemini-3.5-flash.json | 132 | "text": "To read a JSON file in Python, you should use the built-in `json` module. \n\nHere is the standard and | CODE |
| MEDIUM | …c/content/catalog-models/deepseek-deepseek-v4-pro.json | 94 | "text": "To read a JSON file in Python, you use the built-in `json` module. The most common approach is `json.load() | CODE |
| MEDIUM | …c/content/catalog-models/deepseek-deepseek-v4-pro.json | 106 | "content": "To read a JSON file in Python, you use the built-in `json` module. The most common approach is `json. | CODE |
| MEDIUM | src/content/catalog-models/openai-o4-mini.json | 177 | "text": "Here are two popular ways to make the trip\u2014with suggested stops\u2014so you can pick the one that best | CODE |
| MEDIUM | src/content/catalog-models/openai-o4-mini.json | 186 | "content": "Here are two popular ways to make the trip\u2014with suggested stops\u2014so you can pick the one tha | CODE |
| MEDIUM⚡ | src/content/catalog-models/google-gemini-3.1-pro.json | 123 | "text": "To read a JSON file in Python, you can use the built-in **`json`** module. \n\nHere is the most standard an | CODE |
| MEDIUM⚡ | src/content/catalog-models/google-gemini-3.1-pro.json | 132 | "text": "To read a JSON file in Python, you can use the built-in **`json`** module. \n\nHere is the most standa | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bin/fetch-catalog-models.ts | 114 | function getPlannedDeprecationDate(model: CatalogModel): string | undefined { | CODE |
| LOW | .flue/lib/github.ts | 67 | export async function listOpenDraftPullRequests( | CODE |
| LOW | .flue/lib/github.ts | 479 | export async function listPullRequestReviewComments( | CODE |
| LOW | .flue/lib/github.ts | 533 | export async function listCrossReferencedPullRequests( | CODE |
| LOW | .flue/lib/github.ts | 799 | export async function removeReactionFromComment( | CODE |
| LOW | .flue/lib/draft-stale.ts | 372 | export function findCurrentClosingComment( | CODE |
| LOW | .flue/lib/reviewer-contact-policy.ts | 12 | export function isCodeownersOnlyContactPattern( | CODE |
| LOW | .flue/lib/spam-filter.ts | 137 | export async function getPullRequestDiffSummary( | CODE |
| LOW | .flue/lib/reviewer-recommendations.ts | 37 | export function shouldSkipRecommendationUpdate(pr: { | CODE |
| LOW | .flue/lib/reviewer-recommendations.ts | 319 | export function isCurrentRecommendationEvent( | CODE |
| LOW | .flue/lib/reviewer-recommendations.ts | 457 | export function recommendationRenderSource( | CODE |
| LOW⚡ | .flue/lib/reviewer-recommendations.ts | 519 | export function recommendationCommentBodyHash(body: string): Promise<string> { | CODE |
| LOW⚡ | .flue/lib/reviewer-recommendations.ts | 523 | export function recommendationDisplayHash( | CODE |
| LOW⚡ | .flue/lib/reviewer-recommendations.ts | 533 | export async function shouldWriteRecommendationComment( | CODE |
| LOW | .flue/lib/reviewer-recommendations.ts | 595 | export function renderRecommendationsComment( | CODE |
| LOW | .flue/lib/changelog-date-check.ts | 122 | export function renderChangelogDateComment( | CODE |
| LOW | .flue/lib/changelog-date-check.ts | 170 | export async function reconcileChangelogDateComment( | CODE |
| LOW | .flue/lib/changelog-date-check.ts | 198 | async function removeChangelogDateComment( | CODE |
| LOW | .flue/lib/changelog-date-check.ts | 209 | async function collectStaleChangelogEntries( | CODE |
| LOW | .flue/lib/pipeline-entry.ts | 360 | async function runChangelogDateCheckSafely( | CODE |
| LOW | .flue/lib/run-reviewer-recommendations.ts | 155 | export async function findRecommendationComment( | CODE |
| LOW | .flue/lib/run-reviewer-recommendations.ts | 175 | export function isRetryableRecommendationError(err: unknown): boolean { | CODE |
| LOW | .flue/lib/run-reviewer-recommendations.ts | 217 | async function authorSuppressesRecommendationComment( | CODE |
| LOW | .flue/lib/run-reviewer-recommendations.ts | 259 | export async function processRecommendationEvent( | CODE |
| LOW | .flue/lib/comment-spam.ts | 263 | export function buildCommentSpamAuditRecord( | CODE |
| LOW | .flue/lib/github-webhook.ts | 9 | export function getIssueOrPullRequestNumber( | CODE |
| LOW | .flue/lib/github-webhook.ts | 50 | export function getIssueOrPullRequestLabel(eventType: string): string { | CODE |
| LOW | .flue/lib/github-webhook.ts | 58 | export function getIssueOrPullRequestTitle( | CODE |
| LOW | .flue/lib/github-repo-tools.ts | 311 | export function makeGetNpmPackageInfoTool(): ToolDefinition { | CODE |
| LOW | .flue/lib/github-repo-tools.ts | 454 | export function makeDependabotReviewTools( | CODE |
| LOW⚡ | public/cloudflare-one/static/authenticated-doh.py | 49 | def request_create_service_token(service_token_name): | CODE |
| LOW⚡ | public/cloudflare-one/static/authenticated-doh.py | 57 | def request_list_service_tokens(): | CODE |
| LOW⚡ | public/cloudflare-one/static/authenticated-doh.py | 61 | def request_enable_service_token_for_doh(service_token_id): | CODE |
| LOW | .github/actions/issue-label-assign/helpers.ts | 1 | export function extractDeveloperDocsPaths(content: string): string[] { | CODE |
| LOW | worker/index.preview.ts | 121 | function rewriteRedirectForMarkdown( | CODE |
| LOW | worker/index.ts | 57 | function rewriteRedirectForMarkdown( | CODE |
| LOW | src/util/directory.ts | 42 | export async function getDirectoryEntryBySection( | CODE |
| LOW | src/util/custom-loaders.ts | 84 | export async function downloadToDotTempIfNotPresent( | CODE |
| LOW⚡ | src/util/llms-delegation.ts | 44 | function compareLegacyLlmsSidebarOrder( | CODE |
| LOW⚡ | src/util/llms-delegation.ts | 54 | export function getLlmsSidebarOrderComparator( | CODE |
| LOW⚡ | src/util/llms-delegation.ts | 62 | export function compareLlmsSidebarOrderPath( | CODE |
| LOW | src/util/llms-delegation.ts | 96 | export function isDelegatingIndexNavigationAlias( | CODE |
| LOW | src/util/llms-delegation.ts | 112 | export function getDelegatedIndexLinkBudget( | CODE |
| LOW | src/util/llms-delegation.ts | 118 | export function assertLlmsIndexLinkBudget( | CODE |
| LOW | src/util/llms-delegation.ts | 154 | export function isCoveredByDelegatedIndex( | CODE |
| LOW | src/util/description.ts | 9 | export function generateDescriptionFromHtml(html: string): string | undefined { | CODE |
| LOW | src/content/catalog-models/google-gemini-4-argon.json | 114 | "text": "Here are the two best ways to merge two sorted lists in Python: one using the standard library (recommended | CODE |
| LOW | src/content/catalog-models/google-gemini-4-argon.json | 123 | "text": "Here are the two best ways to merge two sorted lists in Python: one using the standard library (recomm | CODE |
| LOW | src/components/cf/command-reference.ts | 15 | export function formatCommandArgumentName( | CODE |
| LOW | src/components/cf/cf-command-metadata.ts | 260 | export function getCfCommandMetadataVersion(): string { | CODE |
| LOW | src/components/config-explorer/config-examples.ts | 93 | function scalarExamplePropertyValue( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ntent/catalog-models/google-gemini-2.5-flash-lite.json | 119 | "text": "Reading a JSON file in Python is a straightforward process thanks to the built-in `json` module. Here's a b | CODE |
| MEDIUM | …ntent/catalog-models/google-gemini-2.5-flash-lite.json | 128 | "text": "Reading a JSON file in Python is a straightforward process thanks to the built-in `json` module. Here' | CODE |
| MEDIUM | …/content/catalog-models/anthropic-claude-opus-4.8.json | 656 | "url": "https://www.cloudflare.com/press/press-releases/2026/cloudflare-launches-design-partner-designation-to-a | CODE |
| MEDIUM⚡ | src/content/catalog-models/alibaba-qwen3.7-max.json | 102 | "reasoning_content": "Here's a thinking process that leads to the suggested answer:\n\n1. **Understand the User' | CODE |
| MEDIUM⚡ | src/content/catalog-models/alibaba-qwen3.7-max.json | 102 | "reasoning_content": "Here's a thinking process that leads to the suggested answer:\n\n1. **Understand the User' | CODE |
| MEDIUM⚡ | …/content/catalog-models/alibaba-qwen3.5-397b-a17b.json | 98 | "text": "# Reading JSON Files in Python\n\nPython's built-in `json` module makes it easy to read and work with JSON | CODE |
| MEDIUM⚡ | …/content/catalog-models/alibaba-qwen3.5-397b-a17b.json | 98 | "text": "# Reading JSON Files in Python\n\nPython's built-in `json` module makes it easy to read and work with JSON | CODE |
| MEDIUM⚡ | …/content/catalog-models/alibaba-qwen3.5-397b-a17b.json | 107 | "content": "# Reading JSON Files in Python\n\nPython's built-in `json` module makes it easy to read and work with | CODE |
| MEDIUM⚡ | …/content/catalog-models/alibaba-qwen3.5-397b-a17b.json | 107 | "content": "# Reading JSON Files in Python\n\nPython's built-in `json` module makes it easy to read and work with | CODE |
| MEDIUM | src/content/catalog-models/bria-fibo-generate-1.5.json | 47 | "code": "curl https://api.cloudflare.com/client/v4/accounts/$CLOUDFLARE_ACCOUNT_ID/ai/run \\\n --header \"Authoriz | CODE |
| MEDIUM | src/content/catalog-models/google-gemini-2.5-flash.json | 119 | "text": "Reading a JSON (JavaScript Object Notation) file in Python is straightforward, thanks to the built-in `json | CODE |
| MEDIUM | src/content/catalog-models/google-gemini-2.5-flash.json | 128 | "text": "Reading a JSON (JavaScript Object Notation) file in Python is straightforward, thanks to the built-in | CODE |
| MEDIUM | src/content/catalog-models/klingai-kling-v4.json | 112 | "code": "curl https://api.cloudflare.com/client/v4/accounts/$CLOUDFLARE_ACCOUNT_ID/ai/run \\\n --header \"Authoriz | CODE |
| MEDIUM | src/content/catalog-models/openai-gpt-5.5-pro.json | 569 | "text": "Assuming **\u201cthis week\u201d = Jun 16\u201322, 2026**:\n\n- **Cloudflare service incident:** Cloudflare | CODE |
| MEDIUM | src/content/catalog-models/openai-gpt-5.5-pro.json | 676 | "url": "https://www.cloudflare.com/press/press-releases/2026/cloudflare-launches-design-partner-designation-to-ac | CODE |
| MEDIUM | src/content/catalog-models/openai-gpt-5.5-pro.json | 811 | "url": "https://www.cloudflare.com/press/press-releases/2026/cloudflare-launches-design-partner-designation-to | CODE |
| MEDIUM | src/content/catalog-models/openai-gpt-5.5-pro.json | 815 | "text": "Assuming **\u201cthis week\u201d = Jun 16\u201322, 2026**:\n\n- **Cloudflare service incident:** Cloudf | CODE |
| MEDIUM | src/content/release-notes/d1.yaml | 273 | Legacy D1 alpha users who had previously prefixed their database binding manually with `__D1_BETA__` should remove | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/semgrep.yml | 59 | # Check if file list is empty to prevent errors | COMMENT |
| LOW | .github/workflows/image-audit.yml | 28 | # Check if files are referenced in any markdown file | COMMENT |
| LOW | .github/workflows/comment-changed-filenames.yml | 71 | # Check if a comment already exists | COMMENT |
| LOW⚡ | src/content/catalog-models/openai-gpt-4o.json | 103 | "text": "To read a JSON file in Python, you typically use the built-in `json` module, which provides utilities for p | CODE |
| LOW⚡ | src/content/catalog-models/openai-gpt-4o.json | 113 | "content": "To read a JSON file in Python, you typically use the built-in `json` module, which provides utilities | CODE |
| LOW | …/content/catalog-models/anthropic-claude-opus-4.8.json | 90 | "text": "# Reading a JSON File in Python\n\nPython's built-in `json` module makes this straightforward.\n\n## Basic | CODE |
| LOW | …/content/catalog-models/anthropic-claude-opus-4.8.json | 99 | "text": "# Reading a JSON File in Python\n\nPython's built-in `json` module makes this straightforward.\n\n## Basi | CODE |
| LOW⚡ | src/content/catalog-models/openai-gpt-4.1-nano.json | 103 | "text": "To read a JSON file in Python, you can use the built-in `json` module which provides functions for parsing | CODE |
| LOW⚡ | src/content/catalog-models/openai-gpt-4.1-nano.json | 113 | "content": "To read a JSON file in Python, you can use the built-in `json` module which provides functions for pa | CODE |
| LOW | src/content/catalog-models/alibaba-qwen3.7-plus.json | 97 | "text": "To read a JSON file in Python, you can use the built-in **`json`** module. Specifically, you will use the * | CODE |
| LOW | src/content/catalog-models/alibaba-qwen3.7-plus.json | 105 | "content": "To read a JSON file in Python, you can use the built-in **`json`** module. Specifically, you will use | CODE |
| LOW⚡ | src/content/catalog-models/alibaba-qwen3.7-max.json | 93 | "text": "To read a JSON file in Python, you use the built-in **`json`** module along with Python's built-in **`open( | CODE |
| LOW⚡ | src/content/catalog-models/alibaba-qwen3.7-max.json | 101 | "content": "To read a JSON file in Python, you use the built-in **`json`** module along with Python's built-in ** | CODE |
| LOW | …ntent/catalog-models/google-gemini-3.1-flash-lite.json | 122 | "text": "To read a JSON file in Python, you use the built-in `json` module.\n\nHere is the standard way to do it:\n\ | CODE |
| LOW | …ntent/catalog-models/google-gemini-3.1-flash-lite.json | 131 | "text": "To read a JSON file in Python, you use the built-in `json` module.\n\nHere is the standard way to do i | CODE |
| LOW | src/content/catalog-models/google-gemini-3-flash.json | 123 | "text": "To read a JSON file in Python, you use the built-in `json` module.\n\nHere is the most common and recommend | CODE |
| LOW | src/content/catalog-models/google-gemini-3-flash.json | 132 | "text": "To read a JSON file in Python, you use the built-in `json` module.\n\nHere is the most common and reco | CODE |
| LOW⚡ | src/content/catalog-models/google-gemini-2.5-pro.json | 120 | "text": "Of course! Reading a JSON file in Python is a common task, and the built-in `json` module makes it very str | CODE |
| LOW⚡ | src/content/catalog-models/google-gemini-2.5-pro.json | 129 | "text": "Of course! Reading a JSON file in Python is a common task, and the built-in `json` module makes it ver | CODE |
| LOW⚡ | src/content/catalog-models/google-gemini-3.1-pro.json | 123 | "text": "To read a JSON file in Python, you can use the built-in **`json`** module. \n\nHere is the most standard an | CODE |
| LOW⚡ | src/content/catalog-models/google-gemini-3.1-pro.json | 132 | "text": "To read a JSON file in Python, you can use the built-in **`json`** module. \n\nHere is the most standa | CODE |
| LOW | src/content/catalog-models/google-gemini-3.7-flash.json | 207 | "text": "Here is how to memoize the recursive Fibonacci function.\n\n### 1. Using a Dictionary / Cache (Explicit)\n\ | CODE |
| LOW | src/content/catalog-models/google-gemini-3.7-flash.json | 216 | "text": "Here is how to memoize the recursive Fibonacci function.\n\n### 1. Using a Dictionary / Cache (Explici | CODE |
| LOW | src/content/fields/index.yaml | 1268 | # Check if requests to a specific endpoint include any content objects | COMMENT |
| LOW | src/content/fields/index.yaml | 1288 | # Check if requests to a specific endpoint include any malicious content objects | COMMENT |
| LOW | src/content/fields/index.yaml | 1308 | # Check if requests to a specific endpoint contain more than two malicious content objects | COMMENT |
| LOW | src/content/fields/index.yaml | 1389 | # Check if requests to a specific endpoint contain more than two content objects | COMMENT |
| LOW | src/content/fields/index.yaml | 1409 | # Check if requests to a specific endpoint contain any content objects larger than 500 KB (512,000 bytes) | COMMENT |
| LOW | src/content/fields/index.yaml | 1431 | # Check if requests to a specific endpoint contain content objects other than PDFs | COMMENT |
| LOW | src/content/fields/index.yaml | 1453 | # Check if requests to a specific endpoint contain any suspicious or infected content objects | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | public/robots.txt | 20 | # (e.g., retrieval augmented generation, grounding, or other | COMMENT |
| MEDIUM | …ent/catalog-models/xai-grok-4.20-multi-agent-0309.json | 338 | "text": "**Top xAI news stories this week (late April to early May 2026):**[[1]](https://techcrunch.com/2026/04/30/e | CODE |
| MEDIUM | …ent/catalog-models/xai-grok-4.20-multi-agent-0309.json | 487 | "text": "**Top xAI news stories this week (late April to early May 2026):**[[1]](https://techcrunch.com/2026/04/ | CODE |
| MEDIUM | src/content/catalog-models/meta-muse-spark-1.3.json | 305 | "text": "### Blameless Root-Cause Summary\n\n**TL;DR:** A 4x increase in worker concurrency at 09:00 saturated a dow | CODE |
| MEDIUM | src/content/catalog-models/meta-muse-spark-1.3.json | 326 | "text": "### Blameless Root-Cause Summary\n\n**TL;DR:** A 4x increase in worker concurrency at 09:00 saturated a | CODE |
| MEDIUM | src/content/warp-releases/macos/beta/2022.4.21.1.yaml | 2 | *PLEASE NOTE* If you are a Zero Trust customer and have strict firewall rules, you must visit https://developers.cloud | COMMENT |
| MEDIUM | src/content/warp-releases/macos/ga/2022.4.114.0.yaml | 2 | *PLEASE NOTE* If you are a Zero Trust customer and have strict firewall rules, you must visit https://developers.cloud | COMMENT |
| MEDIUM | src/content/warp-releases/windows/beta/2022.4.22.1.yaml | 2 | *PLEASE NOTE* If you are a Zero Trust customer and have strict firewall rules, you must visit https://developers.cloud | COMMENT |
| MEDIUM | src/content/warp-releases/windows/ga/2022.4.115.0.yaml | 2 | *PLEASE NOTE* If you are a Zero Trust customer and have strict firewall rules, you must visit https://developers.cloud | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/eli5/references/EXAMPLES_REFERENCE.md | 511 | ## Step 1: Create Your First Worker | COMMENT |
| LOW | .agents/skills/eli5/references/EXAMPLES_REFERENCE.md | 547 | ## Step 2: Add URL Parsing | COMMENT |
| LOW | .agents/skills/eli5/references/EXAMPLES_REFERENCE.md | 581 | ## Step 3: Store URL Mappings | COMMENT |
| LOW | .agents/skills/eli5/references/content-type-guide.md | 499 | ## Step 1: Create the zone | COMMENT |
| LOW | .agents/skills/eli5/references/content-type-guide.md | 508 | ## Step 2: Add DNS records | COMMENT |
| LOW | .agents/skills/eli5/references/content-type-guide.md | 520 | ## Step 1: Create the zone | COMMENT |
| LOW | .agents/skills/eli5/references/content-type-guide.md | 536 | ## Step 2: Add DNS records | COMMENT |
| LOW | .agents/skills/eli5/references/pattern-library.md | 414 | ## Step 1: Minimal Working Version | COMMENT |
| LOW | .agents/skills/eli5/references/pattern-library.md | 445 | ## Step 2: Parse URLs | COMMENT |
| LOW⚡ | src/content/catalog-models/google-gemini-2.5-pro.json | 120 | "text": "Of course! Reading a JSON file in Python is a common task, and the built-in `json` module makes it very str | CODE |
| LOW⚡ | src/content/catalog-models/google-gemini-2.5-pro.json | 129 | "text": "Of course! Reading a JSON file in Python is a common task, and the built-in `json` module makes it ver | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pnpm-workspace.yaml | 21 | # rolldown 1.1.x has a memory leak (rolldown/rolldown#10554) that causes | COMMENT |
| LOW | .flue/vite.config.ts | 1 | import { cloudflare } from "@cloudflare/vite-plugin"; | COMMENT |
| LOW | .flue/lib/github-repo-tools.ts | 541 | // | COMMENT |
| LOW | public/robots.txt | 1 | # As a condition of accessing this website, you agree to | COMMENT |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 161 | ' "$accounts_json")" | COMMENT |
| LOW | .github/labeler.yml | 1 | # Generated product label rules for actions/labeler. | COMMENT |
| LOW | .github/workflows/auto-format-apply.yml | 201 | core.setOutput('number', prNumber.toString()); | COMMENT |
| LOW | .github/workflows/auto-format-apply.yml | 221 | # changes to `.github/`, `package.json`, lockfiles, `.npmrc`, | COMMENT |
| LOW | worker/index.preview.ts | 1 | // Preview Worker — a self-contained copy of `worker/index.ts` used for | COMMENT |
| LOW | src/content.config.ts | 21 | // so content is ingested unmodified; add new keys here as the build surfaces | COMMENT |
| LOW | src/content.config.ts | 81 | // they showcase, so DocsLayout can render a "Component usage" link. | COMMENT |
| LOW | src/content/partials/prompts/base-prompt.txt | 181 | interface Env { | COMMENT |
| LOW | src/components/react/diagram-weld/shapes.tsx | 1 | // Shared SVG primitives for the weld visual language. Two connector | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | public/robots.txt | 18 | # providing AI-generated search summaries. | COMMENT |
| HIGH | src/content/catalog-models/meta-muse-spark-1.1.json | 622 | "text": "Based on today's coverage **October 8, 2026**, the major technology headlines are:\n\n### 1. Google ope | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .agents/agents/docs.md | 117 | - Use angle brackets: `<YOUR_API_KEY>` | CODE |
| HIGH | .agents/agents/docs.md | 117 | - Use angle brackets: `<YOUR_API_KEY>` | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | public/turnstile/spin/scripts/widget-create.sh | 90 | except Exception: | CODE |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 93 | except Exception: | CODE |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 100 | except Exception: | CODE |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 123 | except Exception: | CODE |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 134 | except Exception: | CODE |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 145 | except Exception: | CODE |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 158 | except Exception: | CODE |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 198 | except Exception: | CODE |
| LOW | public/turnstile/spin/scripts/auth-probe.sh | 256 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/image-audit.yml | 48 | # Create the issue and reference the unused_files variable | COMMENT |
| MEDIUM⚡ | src/content/catalog-models/google-gemini-2.5-pro.json | 120 | "text": "Of course! Reading a JSON file in Python is a common task, and the built-in `json` module makes it very str | CODE |
| MEDIUM⚡ | src/content/catalog-models/google-gemini-2.5-pro.json | 129 | "text": "Of course! Reading a JSON file in Python is a common task, and the built-in `json` module makes it ver | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | src/content/catalog-models/google-gemini-2.5-pro.json | 120 | "text": "Of course! Reading a JSON file in Python is a common task, and the built-in `json` module makes it very str | CODE |
| LOW⚡ | src/content/catalog-models/google-gemini-2.5-pro.json | 129 | "text": "Of course! Reading a JSON file in Python is a common task, and the built-in `json` module makes it ver | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .flue/cloudflare.ts | 119 | await step.do("placeholder", STEP, () => | CODE |
| LOW | public/turnstile/spin/scripts/validate.sh | 122 | echo "validate: dummy-token siteverify request failed" >&2 | CODE |