Repository Analysis

coollabsio/coolify

An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 280+ one-click services on your own servers.

2.8 Likely human-written View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of coollabsio/coolify, a PHP project with 58,467 GitHub stars. SynthScan v2.0 examined 304,769 lines of code across 2162 source files, recording 569 pattern matches distributed across 14 syntactic categories. The overall adjusted score of 2.8 places this repository in the Likely human-written band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

2.8
Adjusted Score
2.8
Raw Score
100%
Time Factor
2026-07-13
Last Push
58.5K
Stars
PHP
Language
304.8K
Lines of Code
2.2K
Files
569
Pattern Hits
2026-07-14
Scan Date
0.00
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 2HIGH 1MEDIUM 78LOW 488

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 569 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers339 hits · 348 pts
SeverityFileLineSnippetContext
LOWdatabase/seeders/DevelopmentRailpackExamplesSeeder.php366 private function ensureDevelopmentPrerequisitesExist(): voidCODE
LOWdatabase/seeders/DevelopmentRailpackExamplesSeeder.php425 private function ensurePublicGithubSourceExists(): voidCODE
LOW.cursor/skills/laravel-actions/references/job.md392public function getJobDeleteWhenMissingModels(): boolCODE
LOWdocker/coolify-realtime/terminal-utils.js3export function getTerminalSessionTimeout() {CODE
LOWdocker/coolify-realtime/terminal-utils.js84export function normalizeHostForAuthorization(host) {CODE
LOWbootstrap/helpers/shared.php241function validateDatabasesBackupInput(string $input): stringCODE
LOWbootstrap/helpers/shared.php798function extractYamlEnvironmentComments(string $rawYaml): arrayCODE
LOWbootstrap/helpers/shared.php866function extractEnvVarCommentFromYamlLine(string $line): ?arrayCODE
LOWbootstrap/helpers/shared.php981function extractCommentFromRemainder(string $remainder): ?stringCODE
LOWbootstrap/helpers/shared.php1108function queryDatabaseByUuidWithinTeam(string $uuid, string $teamId)CODE
LOWbootstrap/helpers/shared.php1356function parseCommandFromMagicEnvVariable(Str|string $key): StringableCODE
LOWbootstrap/helpers/shared.php1787function isAnyDeploymentInprogress()CODE
LOWbootstrap/helpers/shared.php3480function convertToKeyValueCollection($environment)CODE
LOWbootstrap/helpers/shared.php3621function defaultNginxConfiguration(string $type = 'static'): stringCODE
LOWbootstrap/helpers/shared.php3778function addPreviewDeploymentSuffix(string $name, int $pull_request_id = 0): stringCODE
LOWbootstrap/helpers/shared.php3783function generateDockerComposeServiceName(mixed $services, int $pullRequestId = 0): CollectionCODE
LOWbootstrap/helpers/shared.php3958function shouldSkipPasswordConfirmation(): boolCODE
LOWbootstrap/helpers/shared.php3983function verifyPasswordConfirmation(mixed $password, ?Component $component = null): boolCODE
LOWbootstrap/helpers/shared.php4008function extractHardcodedEnvironmentVariables(string $dockerComposeRaw): CollectionCODE
LOWbootstrap/helpers/shared.php4138function resolveSharedEnvironmentVariables(?string $value, $resource): ?stringCODE
LOWbootstrap/helpers/subscriptions.php33function isSubscriptionOnGracePeriod()CODE
LOWbootstrap/helpers/subscriptions.php59function getStripeCustomerPortalSession(Team $team)CODE
LOWbootstrap/helpers/subscriptions.php73function allowedPathsForUnsubscribedAccounts()CODE
LOWbootstrap/helpers/subscriptions.php85function allowedPathsForBoardingAccounts()CODE
LOWbootstrap/helpers/subscriptions.php93function allowedPathsForInvalidAccounts()CODE
LOWbootstrap/helpers/subscriptions.php104function updateStripeCustomerEmail(Team $team, string $newEmail): voidCODE
LOWbootstrap/helpers/domains.php142function checkIfDomainIsAlreadyUsedViaAPI(Collection|array $domains, ?string $teamId = null, ?string $uuid = null)CODE
LOWbootstrap/helpers/docker.php14function getCurrentApplicationContainerStatus(Server $server, int $id, ?int $pullRequestId = null, ?bool $includePullreqCODE
LOWbootstrap/helpers/docker.php63function getCurrentServiceContainerStatus(Server $server, int $id): CollectionCODE
LOWbootstrap/helpers/docker.php130function checkMinimumDockerEngineVersion($dockerVersion)CODE
LOWbootstrap/helpers/docker.php184function generateApplicationContainerName(Application $application, $pull_request_id = 0)CODE
LOWbootstrap/helpers/docker.php256function generateServiceSpecificFqdns(ServiceApplication|Application $resource)CODE
LOWbootstrap/helpers/docker.php651function generateLabelsApplication(Application $application, ?ApplicationPreview $preview = null): arrayCODE
LOWbootstrap/helpers/docker.php848function isDatabaseImageWithContext(string $imageName, array $serviceConfig): boolCODE
LOWbootstrap/helpers/docker.php990function convertDockerRunToCompose(?string $custom_docker_run_options = null)CODE
LOWbootstrap/helpers/docker.php1160function generateCustomDockerRunOptionsForDatabases($docker_run_options, $docker_compose, $container_name, $network)CODE
LOWbootstrap/helpers/docker.php1465function injectDockerComposeBuildArgs(string $command, string $buildArgsString): stringCODE
LOWbootstrap/helpers/services.php28function extractBalancedBraceContent(string $str, int $startPos = 0): ?arrayCODE
LOWbootstrap/helpers/services.php71function splitOnOperatorOutsideNested(string $content): ?arrayCODE
LOWbootstrap/helpers/services.php139function getFilesystemVolumesFromServer(ServiceApplication|ServiceDatabase|Application $oneService, bool $isInit = falseCODE
LOWbootstrap/helpers/services.php423function parseServiceEnvironmentVariable(string $key): arrayCODE
LOWbootstrap/helpers/services.php469function applyServiceApplicationPrerequisites(Service $service): voidCODE
LOWbootstrap/helpers/github.php68function generateGithubInstallationToken(GithubApp $source)CODE
LOWbootstrap/helpers/github.php172function getGithubCommitRangeFiles(?GithubApp $source, string $owner, string $repo, string $beforeSha, string $afterSha)CODE
LOWbootstrap/helpers/github.php198function getGithubPullRequestFiles(?GithubApp $source, string $owner, string $repo, int $pullRequestId): arrayCODE
LOWbootstrap/helpers/proxy.php18function isDockerPredefinedNetwork(string $network): boolCODE
LOWbootstrap/helpers/proxy.php25function collectProxyDockerNetworksByServer(Server $server)CODE
LOWbootstrap/helpers/proxy.php40function collectDockerNetworksByServer(Server $server)CODE
LOWbootstrap/helpers/proxy.php170function extractCustomProxyCommands(Server $server, string $existing_config): arrayCODE
LOWbootstrap/helpers/proxy.php226function generateDefaultProxyConfiguration(Server $server, array $custom_commands = [])CODE
LOWbootstrap/helpers/proxy.php404function getExactTraefikVersionFromContainer(Server $server): ?stringCODE
LOWbootstrap/helpers/proxy.php447function getTraefikVersionFromDockerCompose(Server $server): ?stringCODE
LOWbootstrap/helpers/timezone.php12function formatDateInServerTimezone($date, $server = null)CODE
LOWbootstrap/helpers/parsers.php27function validateDockerComposeForInjection(string $composeYaml): voidCODE
LOWbootstrap/helpers/parsers.php110function validateVolumeStringForInjection(string $volumeString): voidCODE
LOWbootstrap/helpers/api.php184function removeUnnecessaryFieldsFromRequest(Request $request)CODE
LOWbootstrap/helpers/sudo.php23function parseCommandsByLineForSudo(Collection $commands, Server $server): arrayCODE
LOWapp/Traits/HasNotificationSettings.php54 public function isNotificationTypeEnabled(string $channel, string $event): boolCODE
LOWapp/Traits/EnvironmentVariableProtection.php15 protected function isProtectedEnvironmentVariable(string $key): boolCODE
LOWapp/Traits/EnvironmentVariableProtection.php27 protected function isEnvironmentVariableUsedInDockerCompose(string $key, ?string $dockerCompose): arrayCODE
279 more matches not shown…
Decorative Section Separators30 hits · 93 pts
SeverityFileLineSnippetContext
MEDIUMtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php6// ─── Malformed Variables ───────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php86// ─── Edge Cases with Braces and Special Characters ─────────────────────────────COMMENT
MEDIUMtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php178// ─── Deeply Nested Defaults ────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php263// ─── Backwards Compatibility ───────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseCredentialValidationPatternTest.php6// ── DB_IDENTIFIER_PATTERN ─────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseCredentialValidationPatternTest.php45// ── DB_PASSWORD_PATTERN ───────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseCredentialValidationPatternTest.php83// ── Rule helpers ──────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseCredentialValidationPatternTest.php131// ── Validator integration ─────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseHealthcheckCommandInjectionTest.php21// ─── PostgreSQL ──────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseHealthcheckCommandInjectionTest.php41// ─── KeyDB ────────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseHealthcheckCommandInjectionTest.php58// ─── Dragonfly ────────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseHealthcheckCommandInjectionTest.php75// ─── ClickHouse ───────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseHealthcheckCommandInjectionTest.php92// ─── Verify unaffected databases still use their safe patterns ────────────────COMMENT
MEDIUMtests/Unit/DatabaseSslCredentialEscapingTest.php10// ── executeInDocker + escapeshellarg chown pattern ────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseSslCredentialEscapingTest.php90// ── MongoDB JS init script JSON-escaping ──────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseSslCredentialEscapingTest.php137// ── Healthcheck CMD exec-form structure (no shell parsing) ────────────────────COMMENT
MEDIUMtests/Unit/DatabaseCredentialDirtyValidationTest.php5// ── databasePasswordRules ─────────────────────────────────────────────────────COMMENT
MEDIUMtests/Unit/DatabaseCredentialDirtyValidationTest.php47// ── databaseIdentifierRules ───────────────────────────────────────────────────COMMENT
MEDIUMtests/Feature/StorageApiTest.php64// ──────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/Feature/StorageApiTest.php66// ──────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/Feature/StorageApiTest.php288// ──────────────────────────────────────────────────────────────COMMENT
MEDIUMtests/Feature/StorageApiTest.php290// ──────────────────────────────────────────────────────────────COMMENT
MEDIUMtemplates/test-database-detection.yaml9 # =============================================================================COMMENT
MEDIUMtemplates/test-database-detection.yaml11 # =============================================================================COMMENT
MEDIUMtemplates/test-database-detection.yaml115 # =============================================================================COMMENT
MEDIUMtemplates/test-database-detection.yaml117 # =============================================================================COMMENT
MEDIUMtemplates/test-database-detection.yaml256 # =============================================================================COMMENT
MEDIUMtemplates/test-database-detection.yaml258 # =============================================================================COMMENT
MEDIUMtemplates/test-database-detection.yaml333 # =============================================================================COMMENT
MEDIUMtemplates/test-database-detection.yaml335 # =============================================================================COMMENT
Redundant / Tautological Comments40 hits · 70 pts
SeverityFileLineSnippetContext
LOWother/nightly/install.sh62# Check if environment variables were explicitly providedCOMMENT
LOWother/nightly/install.sh76 # Check if systemctl is availableCOMMENT
LOWother/nightly/install.sh85 # Check if service command is availableCOMMENT
LOWother/nightly/install.sh140# Check if daemon.json exists and extract existing address pool configurationCOMMENT
LOWother/nightly/install.sh151 # Check if environment variables were explicitly providedCOMMENT
LOWother/nightly/install.sh156 # Check if force override is enabledCOMMENT
LOWother/nightly/install.sh273# Check if the OS is manjaro, if so, change it to archCOMMENT
LOWother/nightly/install.sh278# Check if the OS is Endeavour OS, if so, change it to archCOMMENT
LOWother/nightly/install.sh283# Check if the OS is Cachy OS, if so, change it to archCOMMENT
LOWother/nightly/install.sh288# Check if the OS is Asahi Linux, if so, change it to fedoraCOMMENT
LOWother/nightly/install.sh293# Check if the OS is popOS, if so, change it to ubuntuCOMMENT
LOWother/nightly/install.sh298# Check if the OS is linuxmint, if so, change it to ubuntuCOMMENT
LOWother/nightly/install.sh303#Check if the OS is zorin, if so, change it to ubuntuCOMMENT
LOWother/nightly/install.sh700 # Check if we need to update log settingsCOMMENT
LOWother/nightly/install.sh742 # Check if address pools were changedCOMMENT
LOWother/nightly/upgrade.sh69# Check if custom compose file existsCOMMENT
LOWother/nightly/upgrade.sh75# Check if PostgreSQL upgrade override existsCOMMENT
LOWother/nightly/upgrade.sh153# Check if Docker config file existsCOMMENT
LOWscripts/install.sh62# Check if environment variables were explicitly providedCOMMENT
LOWscripts/install.sh76 # Check if systemctl is availableCOMMENT
LOWscripts/install.sh85 # Check if service command is availableCOMMENT
LOWscripts/install.sh140# Check if daemon.json exists and extract existing address pool configurationCOMMENT
LOWscripts/install.sh151 # Check if environment variables were explicitly providedCOMMENT
LOWscripts/install.sh156 # Check if force override is enabledCOMMENT
LOWscripts/install.sh273# Check if the OS is manjaro, if so, change it to archCOMMENT
LOWscripts/install.sh278# Check if the OS is Endeavour OS, if so, change it to archCOMMENT
LOWscripts/install.sh283# Check if the OS is Cachy OS, if so, change it to archCOMMENT
LOWscripts/install.sh288# Check if the OS is Asahi Linux, if so, change it to fedoraCOMMENT
LOWscripts/install.sh293# Check if the OS is popOS, if so, change it to ubuntuCOMMENT
LOWscripts/install.sh298# Check if the OS is linuxmint, if so, change it to ubuntuCOMMENT
LOWscripts/install.sh303#Check if the OS is zorin, if so, change it to ubuntuCOMMENT
LOWscripts/install.sh700 # Check if we need to update log settingsCOMMENT
LOWscripts/install.sh742 # Check if address pools were changedCOMMENT
LOWscripts/upgrade.sh69# Check if custom compose file existsCOMMENT
LOWscripts/upgrade.sh75# Check if PostgreSQL upgrade override existsCOMMENT
LOWscripts/upgrade.sh162# Check if Docker config file existsCOMMENT
LOWtemplates/compose/calcom.yaml40 # Set this to 1 if you don't want Cal to collect anonymous usageCOMMENT
LOWtemplates/compose/dify.yaml494 # Check if the certificate and key files for the specified domain existCOMMENT
LOWtemplates/compose/matrix-synapse-with-sqlite.yaml34 # Set public_baseurl to actual deployment URL (may differ from server_name)COMMENT
LOWtemplates/compose/electricsql.yaml9## Set DATABASE_URL to an existing Postgres instance with logical replication enabled.COMMENT
AI Slop Vocabulary24 hits · 68 pts
SeverityFileLineSnippetContext
MEDIUM…/monaco-editor-0.52.2/min/vs/language/css/cssWorker.js73This is used to produce an effect that is known as tate-ch\u016B-yoko (\u7E26\u4E2D\u6A2A) in Japanese, or as \u76F4\u66CODE
MEDIUM…onaco-editor-0.52.2/min/vs/language/html/htmlWorker.js259 * To learn about this declaration in Firefox for Mobile, see [this article](https://developer.mozilla.org/en-US/doCOMMENT
MEDIUM…onaco-editor-0.52.2/min/vs/language/html/htmlWorker.js270Default mode, which indicates no preference for the decoding mode. The browser decides what is best for the user.`}},{naCODE
MEDIUM…onaco-editor-0.52.2/min/vs/language/html/htmlWorker.js270Default mode, which indicates no preference for the decoding mode. The browser decides what is best for the user.`}},{naCODE
MEDIUM…onaco-editor-0.52.2/min/vs/language/html/htmlWorker.js288**Note**: Sites that automatically play audio (or videos with an audio track) can be an unpleasant experience for users,CODE
MEDIUMtemplates/compose/nextcloud-with-mysql.yaml2# slogan: NextCloud is a self-hosted, open-source platform that provides file storage, collaboration, and communication COMMENT
MEDIUMtemplates/compose/nextcloud-with-postgres.yaml2# slogan: NextCloud is a self-hosted, open-source platform that provides file storage, collaboration, and communication COMMENT
MEDIUMtemplates/compose/observium.yaml2# slogan: Observium is a comprehensive network monitoring platform designed to deliver powerful monitoring capabilities,COMMENT
MEDIUMtemplates/compose/gitlab.yaml2# slogan: The all-in-one DevOps platform for seamless collaboration and continuous delivery.COMMENT
MEDIUMtemplates/compose/pingvinshare.yaml3# slogan: A self-hosted file sharing platform that combines lightness and beauty, perfect for seamless and efficient filCOMMENT
MEDIUMtemplates/compose/nextcloud.yaml2# slogan: NextCloud is a self-hosted, open-source platform that provides file storage, collaboration, and communication COMMENT
MEDIUMtemplates/compose/cloudflare-ddns.yaml2# slogan: A small, feature-rich, and robust Cloudflare DDNS updater.COMMENT
MEDIUMtemplates/compose/sparkyfitness.yaml2# slogan: SparkyFitness is a comprehensive fitness tracking and management application designed to help users monitor thCOMMENT
MEDIUMtemplates/compose/unleash-with-postgresql.yaml4# tags: unleash,feature flags,feature toggles,ab testing,open sourceCOMMENT
MEDIUMtemplates/compose/unleash-with-postgresql.yaml5# logo: svgs/unleash.svgCOMMENT
MEDIUMtemplates/compose/nextcloud-with-mariadb.yaml2# slogan: NextCloud is a self-hosted, open-source platform that provides file storage, collaboration, and communication COMMENT
MEDIUMtemplates/compose/pingvinshare-with-clamav.yaml3# slogan: A self-hosted file sharing platform that combines lightness and beauty, perfect for seamless and efficient filCOMMENT
MEDIUMtemplates/compose/unleash-without-database.yaml4# tags: unleash,feature flags,feature toggles,ab testing,open sourceCOMMENT
MEDIUMtemplates/compose/unleash-without-database.yaml5# logo: svgs/unleash.svgCOMMENT
MEDIUMtemplates/compose/logto.yaml2# slogan: A comprehensive identity solution covering both the front and backend, complete with pre-built infrastructure COMMENT
MEDIUMtemplates/compose/logto.yaml19 # Or, you can leverage it for local testing.COMMENT
MEDIUMtemplates/compose/cloudbeaver.yaml2# slogan: CloudBeaver is a lightweight web application designed for comprehensive data management.COMMENT
MEDIUMtemplates/compose/mixpost.yaml2# slogan: Mixpost is a robust and versatile social media management software, designed to streamline social media operatCOMMENT
MEDIUMtemplates/compose/edgedb.yaml3# slogan: An open-source database designed as a spiritual successor to SQL and the relational paradigm. Powered by the PCOMMENT
Verbosity Indicators27 hits · 55 pts
SeverityFileLineSnippetContext
LOWbootstrap/helpers/docker.php1320 // Step 1: Escape backslashes first (must be done before other escaping)COMMENT
LOWbootstrap/helpers/docker.php1323 // Step 2: Escape double quotesCOMMENT
LOWbootstrap/helpers/docker.php1326 // Step 3: Escape backticks (command substitution)COMMENT
LOWbootstrap/helpers/docker.php1329 // Step 4: Escape invalid $ patterns while preserving valid variable referencesCOMMENT
LOWapp/Livewire/Server/New/ByHetzner.php37 // Step 1: Token selectionCOMMENT
LOWapp/Livewire/Server/New/ByHetzner.php40 // Step 2: Server configurationCOMMENT
LOWapp/Actions/Server/CleanupDocker.php93 // Step 1: Always prune dangling images (untagged)COMMENT
LOWapp/Actions/User/DeleteUserTeams.php188 // In Stripe, we need to check if the customer email matches the user's emailCOMMENT
LOWapp/Actions/Application/CleanupPreviewDeployment.php50 // Step 1: Cancel all active deployments for this PR and kill helper containersCOMMENT
LOWapp/Actions/Application/CleanupPreviewDeployment.php57 // Step 2: Stop and remove all running PR containersCOMMENT
LOWapp/Actions/Application/CleanupPreviewDeployment.php64 // Step 3: Find or use provided preview, then dispatch cleanup job for thorough cleanupCOMMENT
LOWapp/Jobs/DatabaseBackupJob.php324 // Step 1: Create local backupCOMMENT
LOWapp/Jobs/DatabaseBackupJob.php425 // Step 2: Upload to S3 if enabled (independent of local backup)COMMENT
LOWapp/Jobs/DatabaseBackupJob.php442 // Step 3: Update status and send notifications based on resultsCOMMENT
LOWapp/Jobs/ApplicationDeploymentJob.php2846 // Step 1: Generate build plan with railpack prepareCOMMENT
LOWapp/Jobs/ApplicationDeploymentJob.php2873 // Step 2: Build image using docker buildx with railpack frontend.COMMENT
LOWapp/Jobs/ApplicationDeploymentJob.php2904 // Step 3: If static, copy built assets into nginx imageCOMMENT
LOWtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php322 // Step 1: Extract outer contentCOMMENT
LOWtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php327 // Step 2: Split on outer operatorCOMMENT
LOWtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php333 // Step 3: Find all nested variables in defaultCOMMENT
LOWtests/Unit/NestedEnvironmentVariableParsingTest.php167 // Step 1: Extract outer variable contentCOMMENT
LOWtests/Unit/NestedEnvironmentVariableParsingTest.php171 // Step 2: Split on operatorCOMMENT
LOWtests/Unit/NestedEnvironmentVariableParsingTest.php177 // Step 3: Extract nested variableCOMMENT
LOWtests/Feature/ServerManagerJobShouldRunNowTest.php63 // Step 1: 15:00 — not due for midnight cron, but seeds cacheCOMMENT
LOWtests/Feature/ServerManagerJobShouldRunNowTest.php69 // Step 2: Next day at 00:05 — delayed 5 minutes past midnightCOMMENT
LOWtests/Feature/ScheduledJobManagerShouldRunNowTest.php126 // Step 1: 10:00 — not due, but seeds cache with previousDue (02:00 today)COMMENT
LOWtests/Feature/ScheduledJobManagerShouldRunNowTest.php130 // Step 2: Next day at 02:03 — delayed 3 minutes past cron.COMMENT
Structural Annotation Overuse26 hits · 53 pts
SeverityFileLineSnippetContext
LOWbootstrap/helpers/docker.php1320 // Step 1: Escape backslashes first (must be done before other escaping)COMMENT
LOWbootstrap/helpers/docker.php1323 // Step 2: Escape double quotesCOMMENT
LOWbootstrap/helpers/docker.php1326 // Step 3: Escape backticks (command substitution)COMMENT
LOWbootstrap/helpers/docker.php1329 // Step 4: Escape invalid $ patterns while preserving valid variable referencesCOMMENT
LOWapp/Livewire/Server/New/ByHetzner.php37 // Step 1: Token selectionCOMMENT
LOWapp/Livewire/Server/New/ByHetzner.php40 // Step 2: Server configurationCOMMENT
LOWapp/Actions/Server/CleanupDocker.php93 // Step 1: Always prune dangling images (untagged)COMMENT
LOWapp/Actions/Application/CleanupPreviewDeployment.php50 // Step 1: Cancel all active deployments for this PR and kill helper containersCOMMENT
LOWapp/Actions/Application/CleanupPreviewDeployment.php57 // Step 2: Stop and remove all running PR containersCOMMENT
LOWapp/Actions/Application/CleanupPreviewDeployment.php64 // Step 3: Find or use provided preview, then dispatch cleanup job for thorough cleanupCOMMENT
LOWapp/Jobs/DatabaseBackupJob.php324 // Step 1: Create local backupCOMMENT
LOWapp/Jobs/DatabaseBackupJob.php425 // Step 2: Upload to S3 if enabled (independent of local backup)COMMENT
LOWapp/Jobs/DatabaseBackupJob.php442 // Step 3: Update status and send notifications based on resultsCOMMENT
LOWapp/Jobs/ApplicationDeploymentJob.php2846 // Step 1: Generate build plan with railpack prepareCOMMENT
LOWapp/Jobs/ApplicationDeploymentJob.php2873 // Step 2: Build image using docker buildx with railpack frontend.COMMENT
LOWapp/Jobs/ApplicationDeploymentJob.php2904 // Step 3: If static, copy built assets into nginx imageCOMMENT
LOWtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php322 // Step 1: Extract outer contentCOMMENT
LOWtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php327 // Step 2: Split on outer operatorCOMMENT
LOWtests/Unit/EnvironmentVariableParsingEdgeCasesTest.php333 // Step 3: Find all nested variables in defaultCOMMENT
LOWtests/Unit/NestedEnvironmentVariableParsingTest.php167 // Step 1: Extract outer variable contentCOMMENT
LOWtests/Unit/NestedEnvironmentVariableParsingTest.php171 // Step 2: Split on operatorCOMMENT
LOWtests/Unit/NestedEnvironmentVariableParsingTest.php177 // Step 3: Extract nested variableCOMMENT
LOWtests/Feature/ServerManagerJobShouldRunNowTest.php63 // Step 1: 15:00 — not due for midnight cron, but seeds cacheCOMMENT
LOWtests/Feature/ServerManagerJobShouldRunNowTest.php69 // Step 2: Next day at 00:05 — delayed 5 minutes past midnightCOMMENT
LOWtests/Feature/ScheduledJobManagerShouldRunNowTest.php126 // Step 1: 10:00 — not due, but seeds cache with previousDue (02:00 today)COMMENT
LOWtests/Feature/ScheduledJobManagerShouldRunNowTest.php130 // Step 2: Next day at 02:03 — delayed 3 minutes past cron.COMMENT
Modern AI Meta-Vocabulary14 hits · 42 pts
SeverityFileLineSnippetContext
MEDIUMtemplates/compose/spacebot.yaml2# slogan: An agentic AI system with specialized processes for thinking, working, and remembering.COMMENT
MEDIUMtemplates/compose/spacebot.yaml4# tags: ai, agent, anthropic, openai, discord, slack, llm, agenticCOMMENT
MEDIUMtemplates/compose/flowise.yaml2# slogan: Flowise is an open source low-code tool for developers to build customized LLM orchestration flows & AI agentsCOMMENT
MEDIUMtemplates/compose/flowise-with-databases.yaml2# slogan: Flowise is an open source low-code tool for developers to build customized LLM orchestration flows & AI agentsCOMMENT
MEDIUMtemplates/compose/dify.yaml3# slogan: Dify is an open-source LLM app development platform. Dify's intuitive interface combines AI workflow, RAG pipeCOMMENT
MEDIUMtemplates/compose/dify.yaml5# tags: ai, weaviate, openai, gpt, llm, lmops, dify, redis, postgres, qdrant, RAG, agentCOMMENT
MEDIUMtemplates/compose/unstructured.yaml2# slogan: Unstructured provides a platform and tools to ingest and process unstructured documents for Retrieval AugmenteCOMMENT
MEDIUMtemplates/compose/unstructured.yaml4# tags: workflow, orchestration, data-pipeline, python, data, machine-learning, data-science, nlp, unstructured, ocr, daCOMMENT
MEDIUMtemplates/compose/labelstudio.yaml4# tags: workflow, orchestration, data-pipeline, python, labelstudio, ai, elasticsearch, datasets, data, machine-learningCOMMENT
MEDIUMtemplates/compose/anythingllm.yaml2# slogan: AnythingLLM is the easiest to use, all-in-one AI application that can do RAG, AI Agents, and much more with noCOMMENT
MEDIUMtemplates/compose/sftpgo.yaml2# slogan: SFTPGo is an event-driven SFTP, FTP/S, HTTP/S and WebDAV server.COMMENT
MEDIUMtemplates/compose/prefect.yaml2# slogan: Prefect is an orchestration and observability platform that empowers developers to build and scale workflows qCOMMENT
MEDIUMtemplates/compose/prefect.yaml4# tags: workflow, orchestration, data-pipeline, python, automation, data-processing, data-integration, etlCOMMENT
MEDIUMtemplates/compose/argilla.yaml4# tags: workflow, orchestration, data-pipeline, python, argilla, ai, elasticsearch, datasets, data, machine-learning, daCOMMENT
Hallucination Indicators2 hits · 30 pts
SeverityFileLineSnippetContext
CRITICALpublic/js/apexcharts.js7 "use strict"; function t(t, e) { var i = Object.keys(t); if (Object.getOwnPropertySymbols) { var a = Object.getOwnPrCODE
CRITICALpublic/js/apexcharts.js15 function () { function t(t) { t.remember("_draggable", this), this.el = t } t.prototype.init = function (t, e) {CODE
Fake / Example Data26 hits · 26 pts
SeverityFileLineSnippetContext
LOW…sor/skills/laravel-best-practices/rules/http-client.md140 'name' => 'John Doe',CODE
LOW…s/laravel-best-practices/rules/events-notifications.md43Notification::route('mail', 'admin@example.com')->notify(new SystemAlert());CODE
LOW…sources/views/components/forms/env-var-input.blade.php221 placeholder="{{ $attributes->get('placeholder') }}"CODE
LOWresources/views/components/forms/input.blade.php24 name="{{ $name }}" placeholder="{{ $attributes->get('placeholder') }}"CODE
LOWresources/views/components/forms/input.blade.php25 aria-placeholder="{{ $attributes->get('placeholder') }}"CODE
LOWresources/views/components/forms/input.blade.php59 placeholder="{{ $attributes->get('placeholder') }}"CODE
LOWresources/views/components/forms/textarea.blade.php39 name="{{ $name }}" placeholder="{{ $attributes->get('placeholder') }}"CODE
LOWresources/views/components/forms/textarea.blade.php40 aria-placeholder="{{ $attributes->get('placeholder') }}">CODE
LOWresources/views/livewire/settings/index.blade.php53 @input="open = true" class="w-full input" :placeholder="placeholder"CODE
LOWresources/views/livewire/server/show.blade.php242 @input="open = true" class="w-full input" :placeholder="placeholder"CODE
LOWtests/Unit/HetznerServiceTest.php37 $service = new HetznerService('fake-token');CODE
LOWtests/Unit/HetznerServiceTest.php64 $service = new HetznerService('fake-token');CODE
LOWtests/Unit/HetznerServiceTest.php90 $service = new HetznerService('fake-token');CODE
LOWtests/Unit/HetznerServiceTest.php104 $service = new HetznerService('fake-token');CODE
LOWtests/Unit/HetznerServiceTest.php146 $service = new HetznerService('fake-token');CODE
LOWtests/Unit/Notifications/Channels/EmailChannelTest.php20 $user2 = new User(['email' => 'admin@example.com']);CODE
LOWtests/Feature/CaCertificateCommandInjectionTest.php67 'ssl_certificate' => 'placeholder',CODE
LOWtests/Feature/CaCertificateCommandInjectionTest.php83 'ssl_certificate' => 'placeholder',CODE
LOW…nts/skills/laravel-best-practices/rules/http-client.md140 'name' => 'John Doe',CODE
LOW…s/laravel-best-practices/rules/events-notifications.md43Notification::route('mail', 'admin@example.com')->notify(new SystemAlert());CODE
LOW…ude/skills/laravel-best-practices/rules/http-client.md140 'name' => 'John Doe',CODE
LOW…s/laravel-best-practices/rules/events-notifications.md43Notification::route('mail', 'admin@example.com')->notify(new SystemAlert());CODE
LOWpublic/js/purify.min.js2!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&defineCODE
LOW…onaco-editor-0.52.2/min/vs/language/html/htmlWorker.js440**Note:** Do not use this attribute, as it is non-standard and only implemented in some versions of Microsoft Internet ECODE
LOW…/monaco-editor-0.52.2/min/vs/base/worker/workerMain.js29`||e===" "}}),X(J[69],Z([0,1]),function(W,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.WrappingIndCODE
LOWtemplates/compose/hatchet.yaml15 # Default credentials are "admin@example.com" and "Admin123!!"COMMENT
Over-Commented Block26 hits · 26 pts
SeverityFileLineSnippetContext
LOWdocker-compose-maxio.dev.yml121 mailpit:COMMENT
LOWdocker-compose-maxio.dev.yml161 # pull_policy: alwaysCOMMENT
LOWcliff.toml1# git-cliff ~ default configuration fileCOMMENT
LOWcliff.toml41# render body even when there are no releases to processCOMMENT
LOWbootstrap/helpers/parsers.php2561 // Preserve empty strings and null values with correct Docker Compose semantics:COMMENT
LOWapp/Http/Middleware/CanUpdateResource.php21use Illuminate\Support\Facades\Gate;COMMENT
LOWapp/Http/Middleware/CanUpdateResource.php41 // } elseif ($request->route('database_uuid')) {COMMENT
LOWapp/Http/Middleware/CanUpdateResource.php61 // } elseif ($request->route('project_uuid')) {COMMENT
LOWapp/Actions/Server/CleanupDocker.php101 })->implode('|');COMMENT
LOWapp/Console/Commands/Emails.php181 'database_id' => $db->id,COMMENT
LOWconfig/purify.php121 // 'serializer' => [COMMENT
LOWother/nightly/install.sh1#!/bin/bashCOMMENT
LOWtests/Pest.php61// {COMMENT
LOWtests/Unit/ApplicationComposeEditorLoadTest.php61 // 5. BUT component property is never updated, so Monaco editor stays emptyCOMMENT
LOWscripts/install.sh1#!/bin/bashCOMMENT
LOWscripts/railpack-smoke.sh1#!/usr/bin/env bashCOMMENT
LOWtemplates/compose/posthog.yaml2021 # command: sh -c "python manage.py migrate && python manage.py migrate_clickhouse && python manage.py run_async_migrCOMMENT
LOWtemplates/compose/calcom.yaml1# ignore: trueCOMMENT
LOWtemplates/compose/zep.yaml61 target: /app/config.yamlCOMMENT
LOWtemplates/compose/zep.yaml141 log:COMMENT
LOWtemplates/compose/zep.yaml161 # <current_summary>{{.PrevSummary}}</current_summary>COMMENT
LOWtemplates/compose/glances.yaml21 test: ["CMD", "curl", "-f", "http://localhost:61208"]COMMENT
LOWtemplates/compose/supabase.yaml381 plugins:COMMENT
LOWtemplates/compose/supabase.yaml441 config:COMMENT
LOWtemplates/compose/supabase.yaml1241 - GOTRUE_SMS_AUTOCONFIRM=${ENABLE_PHONE_AUTOCONFIRM:-true}COMMENT
LOWtemplates/compose/cap.yaml1# documentation: https://cap.soCOMMENT
Slop Phrases8 hits · 16 pts
SeverityFileLineSnippetContext
MEDIUMconfig/telescope.php131 | a request or task is executed. Feel free to customize this list.CODE
LOWpublic/js/apexcharts.js7 "use strict"; function t(t, e) { var i = Object.keys(t); if (Object.getOwnPropertySymbols) { var a = Object.getOwnPrCODE
LOW…/monaco-editor-0.52.2/min/vs/language/css/cssWorker.js32`),[{language:"html",value:r}]}doPrint(e,t){for(let r of e)this.doPrintElement(r,t),r.children&&this.doPrint(r.children,CODE
MEDIUM…onaco-editor-0.52.2/min/vs/language/html/htmlWorker.js306**Usage note:** Do not use this attribute, as it has been deprecated. The [\`<caption>\`](https://developer.mozilla.org/CODE
LOWtemplates/compose/posthog.yaml1171 Regexps are not aligned: don't forget to add ^ and $. Also don't forget to escape dot (.)CODE
MEDIUMtemplates/compose/wordpress-with-mysql.yaml2# slogan: WordPress is open source software you can use to create a beautiful website, blog, or app.COMMENT
MEDIUMtemplates/compose/wordpress-without-database.yaml2# slogan: WordPress is open source software you can use to create a beautiful website, blog, or app.COMMENT
MEDIUMtemplates/compose/wordpress-with-mariadb.yaml2# slogan: WordPress is open source software you can use to create a beautiful website, blog, or app.COMMENT
Self-Referential Comments5 hits · 14 pts
SeverityFileLineSnippetContext
MEDIUMapp/Models/Server.php353 "# This file is generated by Coolify, do not edit it manually.\n".CODE
MEDIUMapp/Models/Server.php569 "# This file is automatically generated by Coolify.\n".CODE
MEDIUMother/nightly/install.sh705 # Create a configuration without address pools to preserve existing onesCOMMENT
MEDIUMscripts/install.sh705 # Create a configuration without address pools to preserve existing onesCOMMENT
MEDIUMtemplates/test-database-detection.yaml2# This file contains various services to test the isDatabaseImage() functionCOMMENT
Synthetic Comment Markers1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHCONTRIBUTING.md221- **No AI-Generated Code**: Do not submit code generated by AI tools without fully understanding and verifying it. AI-geCODE
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWscripts/railpack-smoke.sh17# Usage:COMMENT