Connect your users to their apps
This report presents the forensic synthetic code analysis of corsairdev/corsair, a TypeScript project with 10,631 GitHub stars. SynthScan v2.0 examined 1,028,624 lines of code across 6100 source files, recording 3032 pattern matches distributed across 11 syntactic categories. The overall adjusted score of 7.7 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3032 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | demo/minimal/oauth.ts | 11 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | demo/minimal/oauth.ts | 13 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | demo/minimal/oauth.ts | 24 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | demo/minimal/oauth.ts | 26 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 69 | // ── package.json ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 113 | // ── tsconfig.json ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 139 | // ── tsup.config.ts ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 160 | // ── webhooks/tenant-matcher.ts + oauth-tenant-link.ts ───────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 170 | // ── index.ts ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 370 | // ── client.ts ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 437 | // ── error-handlers.ts ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 474 | // ── endpoints/types.ts ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 509 | // ── endpoints/example.ts ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 530 | // ── endpoints/index.ts ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 543 | // ── webhooks/types.ts ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 607 | // ── webhooks/example.ts ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 640 | // ── webhooks/index.ts ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 655 | // ── schema/database.ts ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 670 | // ── schema/index.ts ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 680 | // ── jest.config.cjs + starter test ──────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin.ts | 767 | // ── Update core/constants.ts to register the new provider ───────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin-from-json.ts | 12 | // ── JSON shape ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin-from-json.ts | 55 | // ── Name helpers ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin-from-json.ts | 168 | // ── Auth helpers ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin-from-json.ts | 211 | // ── Zod schema code generation ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin-from-json.ts | 316 | // ── File content builders ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin-from-json.ts | 944 | // ── Main ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/generate-plugin-from-json.ts | 1298 | // ── Entry ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/attio/index.ts | 46 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/attio/index.ts | 48 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/attio/index.ts | 57 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/attio/index.ts | 59 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/attio/index.ts | 928 | // ── Key Builder ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/attio/index.ts | 931 | // ── Webhook Signature ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/attio/index.ts | 941 | // ── Static key shortcut ─────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/attio/index.ts | 946 | // ── API Key auth ────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 72 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 74 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 104 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 106 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 234 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 236 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 699 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 701 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 854 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 856 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 873 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 875 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 890 | // ── OAuth Config ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 972 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/attio/index.ts | 974 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 28 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 30 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 60 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 62 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 94 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 96 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 114 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 116 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/abstract/index.ts | 139 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| 2252 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | demo/testing/src/scripts/test-hub.ts | 53 | async function testDeliveryEndpointHealth(): Promise<void> { | CODE |
| LOW | demo/testing/src/scripts/test-hub.ts | 107 | async function testManagedConnectSession(): Promise<void> { | CODE |
| LOW | demo/testing/src/scripts/test-hub.ts | 145 | async function testIntegrationCredentials(): Promise<void> { | CODE |
| LOW | demo/testing/src/scripts/test-hub.ts | 164 | async function testStoredGoogleCalendarTokens(): Promise<void> { | CODE |
| LOW | demo/testing/src/scripts/test-hub.ts | 186 | async function testStoredGitHubManagedTokens(): Promise<void> { | CODE |
| LOW | demo/testing/src/scripts/test-hub.ts | 208 | async function testGoogleCalendarApiCall(): Promise<void> { | CODE |
| LOW | demo/testing/src/scripts/test-hub.ts | 240 | async function testManagedOAuthDeliveryHandler(): Promise<void> { | CODE |
| LOW | www/scripts/migrate-blog-to-sanity.ts | 72 | async function uploadImageFromPublicPath( | CODE |
| LOW | www/src/app/oss/oss-integrations-shell.tsx | 20 | function OssIntegrationsShellInner({ | CODE |
| LOW | www/src/app/oss/active-claim-deadline-banner.tsx | 23 | export function ActiveClaimDeadlineBanner({ | CODE |
| LOW | www/src/app/oss/mark-finished-button.tsx | 123 | export function ReadyToReviewStatusCallout({ | CODE |
| LOW | www/src/app/oss/oss-sections.tsx | 54 | export async function OssCategoryOnboardingSection({ | CODE |
| LOW | www/src/app/oss/contributor-profile.tsx | 177 | function ContributorIntegrationRow({ | CODE |
| LOW | www/src/app/oss/[slug]/integration-detail-sections.tsx | 127 | export async function IntegrationCapabilitiesSection({ | CODE |
| LOW | www/src/app/oss/[slug]/integration-detail-sections.tsx | 154 | export function IntegrationHeaderSkeleton() { | CODE |
| LOW | www/src/app/oss/[slug]/integration-detail-sections.tsx | 187 | export function IntegrationCapabilitiesSkeleton() { | CODE |
| LOW | www/src/app/oss/[slug]/integration-capability-list.tsx | 21 | export function IntegrationCapabilityList({ | CODE |
| LOW | www/src/app/oss/[slug]/integration-auth-scheme-list.tsx | 9 | export function IntegrationAuthSchemeList({ | CODE |
| LOW | www/src/server/integration-cache.ts | 23 | function getCachedIntegrationSummary(slug: string) { | CODE |
| LOW | www/src/server/integration-cache.ts | 34 | function getCachedIntegrationCapabilities(slug: string) { | CODE |
| LOW | www/src/server/oss-public-cache.ts | 19 | export function revalidateOssWriteSurface() { | CODE |
| LOW | www/src/server/oss-public-cache.ts | 77 | export async function getIntegrationListForPage( | CODE |
| LOW | www/src/server/github-users.ts | 10 | function getGithubAvatarFallbackUrl(username: string): string { | CODE |
| LOW | www/src/server/enterprise-contact.ts | 17 | function formatEnterpriseContactMessage(input: SubmitEnterpriseContactInput) { | CODE |
| LOW | www/src/server/enterprise-contact.ts | 30 | export async function sendEnterpriseContactNotification( | CODE |
| LOW | www/src/server/integrations/claim-integration.ts | 104 | export async function claimIntegrationAtomically( | CODE |
| LOW | www/src/server/actions/mark-ready-to-review.ts | 10 | export async function markIntegrationReadyToReview(integrationId: string) { | CODE |
| LOW | www/src/server/actions/admin-mark-merged.ts | 11 | export async function adminMarkIntegrationMerged(integrationId: string) { | CODE |
| LOW | www/src/server/api/routers/integrations.ts | 125 | function visibleIntegrationsFilter(query?: string, tagSlugs?: string[]): SQL { | CODE |
| LOW | www/src/server/api/routers/integrations.ts | 151 | function mapIntegrationClaimFields( | CODE |
| LOW | www/src/server/api/routers/integrations.ts | 181 | async function maybeAdvancePhaseAfterUrlUpdate( | CODE |
| LOW | …nts/landing/use-cases/corsair-infrastructure-layer.tsx | 4 | export function CorsairInfrastructureLayer() { | CODE |
| LOW | …nents/landing/hooks/use-window-pointer-interactions.ts | 43 | export function useWindowPointerInteractions({ | CODE |
| LOW | www/src/lib/integration-phases.ts | 32 | export function isIntegrationActivelyClaimed( | CODE |
| LOW | www/src/lib/integration-urls.ts | 10 | export function formatIntegrationIssueLabel(url: string | null | undefined) { | CODE |
| LOW | www/src/lib/auth-emails.ts | 70 | export function buildMagicLinkEmailFromUrl(url: string) { | CODE |
| LOW | www/src/db/integration-tags.ts | 7 | export async function fetchIntegrationTagsByIntegrationIds( | CODE |
| LOW | www/src/db/integration-status.ts | 84 | export async function getLatestStatusForIntegration( | CODE |
| LOW | www/src/db/integration-status.ts | 108 | export async function getLatestStatusesForIntegrations( | CODE |
| LOW | www/src/db/integration-status.ts | 138 | export async function getIntegrationStatusHistory( | CODE |
| LOW | www/src/db/integration-status.ts | 171 | export async function getUserActiveDeadlineClaim(db: DB, userId: string) { | CODE |
| LOW | www/src/db/index.ts | 13 | function normalizeConnectionString(connectionString: string) { | CODE |
| LOW | www/src/db/integration-tag-definitions.ts | 314 | export function assignIntegrationTagSlugs( | CODE |
| LOW | www/src/db/integration-tag-definitions.ts | 349 | export function getIntegrationTagDefinition(slug: string) { | CODE |
| LOW | www/src/db/integration-urls.ts | 35 | export async function fetchIntegrationUrlsByIntegrationIds( | CODE |
| LOW | www/src/db/integration-urls.ts | 111 | export async function clearContributorIntegrationUrls( | CODE |
| LOW | scripts/plugin-tenant-routing-scaffold.ts | 92 | export function formatTenantRoutingPluginFields(pascalName: string): string { | CODE |
| LOW | scripts/generate-plugin-docs.ts | 181 | function discoverPluginPackageDirs(root: string): string[] { | CODE |
| LOW | scripts/generate-plugin-docs.ts | 321 | function inferAuthTypesFromPluginSource(source: string): string[] { | CODE |
| LOW | scripts/generate-plugin-docs.ts | 340 | function inferDefaultAuthTypeFromSource(source: string): string | undefined { | CODE |
| LOW | scripts/generate-plugin-docs.ts | 375 | function authTypeCredentialInstructions( | CODE |
| LOW | scripts/generate-plugin-docs.ts | 426 | function isPlaceholderExampleWebhookOnly( | CODE |
| LOW | scripts/generate-plugin-docs.ts | 554 | function validateExampleArgsAgainstInput( | CODE |
| LOW | scripts/generate-plugin-docs.ts | 1677 | function orderedPluginPageBasenames(pluginDir: string): string[] { | CODE |
| LOW | scripts/generate-plugin-docs.ts | 1826 | async function generatePluginDocsForEntry( | CODE |
| LOW | scripts/build-explorer-catalog.ts | 75 | function discoverPluginPackageDirs(root: string): string[] { | CODE |
| LOW | scripts/build-explorer-catalog.ts | 123 | function titleFromPackageDescription(desc: string | undefined): string | null { | CODE |
| LOW | scripts/build-explorer-catalog.ts | 154 | function inferDefaultAuthTypeFromSource( | CODE |
| LOW | scripts/lint-docs-imports.ts | 97 | function reportInvalidBindingAccess( | CODE |
| LOW | scripts/pr-review/pr-scope-main.ts | 40 | function changedFilesForPullRequest(repo: string, pr: string): string[] { | CODE |
| 406 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | demo/sdk/slack/tests/models.test.ts | 318 | real_name: 'John Doe', | CODE |
| LOW | demo/sdk/slack/tests/models.test.ts | 331 | real_name: 'John Doe', | CODE |
| LOW | demo/sdk/posthog/README.md | 122 | email: 'user@example.com', | CODE |
| LOW | demo/sdk/posthog/README.md | 123 | name: 'John Doe', | CODE |
| LOW | demo/sdk/unified-sdk/tests/slack/models.test.ts | 318 | real_name: 'John Doe', | CODE |
| LOW | demo/sdk/unified-sdk/tests/slack/models.test.ts | 331 | real_name: 'John Doe', | CODE |
| LOW | packages/abstract/error-handlers.test.ts | 8 | const error = new AbstractAPIError('placeholder', status); | CODE |
| LOW | packages/abstract/api.test.ts | 95 | { query: { email: 'test@test.com' } }, | CODE |
| LOW⚡ | packages/allimagesai/endpoints.test.ts | 34 | harness.queue({ body: { email: 'user@example.com' } }); | CODE |
| LOW⚡ | packages/allimagesai/endpoints.test.ts | 43 | expect(result.email).toBe('user@example.com'); | CODE |
| LOW⚡ | packages/allimagesai/endpoints.test.ts | 48 | harness.queue({ body: { email: 'user@example.com' } }); | CODE |
| LOW⚡ | packages/allimagesai/endpoints.test.ts | 52 | email: 'user@example.com', | CODE |
| LOW | packages/allimagesai/client.test.ts | 22 | harness.queue({ body: { email: 'user@example.com' } }); | CODE |
| LOW | packages/altoviz/endpoints.test.ts | 166 | const payload = auditPayload({ customerId: 42, companyName: 'Acme Corp' }); | CODE |
| LOW | packages/altoviz/endpoints.test.ts | 173 | companyName: 'Acme Corp', | CODE |
| LOW | packages/corsair/tests/retry-recover.test.ts | 70 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/retry-recover.test.ts | 101 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/hooks.test.ts | 68 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/hooks.test.ts | 116 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/hooks.test.ts | 164 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/hooks.test.ts | 231 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/hooks.test.ts | 302 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/hooks.test.ts | 376 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/hooks.test.ts | 453 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/hooks.test.ts | 514 | key: 'fake-key', | CODE |
| LOW | packages/corsair/tests/connect-link.test.ts | 157 | const result = await boundFn({ to: 'user@example.com' }); | CODE |
| LOW | packages/circleci/integration.test.ts | 215 | value: 'placeholder', | CODE |
| LOW | packages/circleci/integration.test.ts | 220 | expect(created.value).not.toBe('placeholder'); | CODE |
| LOW | packages/wiza/schema.test.ts | 63 | individual_reveal: { full_name: 'Jane Doe', company: 'Acme' }, | CODE |
| LOW | packages/wiza/schema.test.ts | 151 | name: 'Jane Doe', | CODE |
| LOW | packages/wiza/schema.test.ts | 192 | full_name: 'Jane Doe', | CODE |
| LOW | packages/wiza/schema.test.ts | 377 | full_name: 'Jane Doe', | CODE |
| LOW | packages/wiza/schema.test.ts | 398 | expect.objectContaining({ full_name: 'Jane Doe' }), | CODE |
| LOW | packages/canva/api.test.ts | 336 | display_name: 'Jane Doe', | CODE |
| LOW | packages/canva/api.test.ts | 340 | expect(result.profile.display_name).toBe('Jane Doe'); | CODE |
| LOW | packages/canva/api.test.ts | 600 | author: { id: 'auDAbliZ2rQNNOsUl5OLu', display_name: 'John Doe' }, | CODE |
| LOW | packages/canva/api.test.ts | 607 | expect(result.thread.author?.display_name).toBe('John Doe'); | CODE |
| LOW | packages/insightoai/api.test.ts | 113 | email: 'user@example.com', | CODE |
| LOW | packages/insightoai/api.test.ts | 339 | input: { user_id: 'user_123', email: 'user@example.com' }, | CODE |
| LOW | packages/diffbot/api.test.ts | 240 | name: 'John Doe', | CODE |
| LOW | packages/diffbot/api.test.ts | 243 | expect(input.name).toBe('John Doe'); | CODE |
| LOW | packages/mailchimp/tests/utils.test.ts | 16 | expect(subscriberHash('foo@bar.com')).toBe( | CODE |
| LOW | packages/mailchimp/tests/utils.test.ts | 37 | expect(subscriberHash('foo@bar.com')).toBe(subscriberHash('foo@bar.com')); | CODE |
| LOW | packages/customgpt/schema.test.ts | 609 | { session_id: 'sess_1', query_id: 1, email: 'user@example.com' }, | CODE |
| LOW | packages/mailboxlayer/error-handlers.test.ts | 8 | const error = new MailboxLayerAPIError('placeholder', { apiCode }); | CODE |
| LOW | packages/unione/schema.test.ts | 76 | email: 'user@example.com', | CODE |
| LOW | packages/unione/api.test.ts | 81 | recipients: [{ email: 'user@example.com' }], | CODE |
| LOW | packages/unione/api.test.ts | 113 | email: 'user@example.com', | CODE |
| LOW | packages/unione/api.test.ts | 121 | email: 'user@example.com', | CODE |
| LOW | packages/unione/api.test.ts | 149 | await unsubscribe(makeCtx(), { email: 'user@example.com' }); | CODE |
| LOW⚡ | packages/unione/api.test.ts | 208 | { email: 'user@example.com', project_id: 'p1', cause: 'unsubscribed' }, | CODE |
| LOW⚡ | packages/unione/api.test.ts | 209 | { email: 'user@example.com', project_id: 'p2', cause: 'spam' }, | CODE |
| LOW⚡ | packages/unione/api.test.ts | 219 | email: 'user@example.com', | CODE |
| LOW⚡ | packages/unione/api.test.ts | 227 | await suppressionGet(makeCtx(), { email: 'user@example.com' }); | CODE |
| LOW | packages/unione/api.test.ts | 276 | await suppressionGet(makeCtx(), { email: 'user@example.com' }); | CODE |
| LOW | packages/unione/api.test.ts | 280 | await suppressionDelete(makeCtx(), { email: 'user@example.com' }); | CODE |
| LOW | packages/unione/api.test.ts | 321 | to_email: 'user@example.com', | CODE |
| LOW | packages/unione/api.test.ts | 322 | from_name: 'Jane Doe', | CODE |
| LOW | packages/unione/api.test.ts | 348 | recipients: [{ email: 'user@example.com' }], | CODE |
| LOW | packages/unione/api.test.ts | 363 | recipients: [{ email: 'user@example.com' }], | CODE |
| 51 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | demo/sdk/linear/ENV_SETUP.md | 193 | ### Step 1: Verify API Key | COMMENT |
| LOW | demo/sdk/linear/ENV_SETUP.md | 206 | ### Step 2: Verify Team ID (if set) | COMMENT |
| LOW | demo/sdk/linear/ENV_SETUP.md | 214 | ### Step 3: Verify Webhook Setup | COMMENT |
| LOW⚡ | demo/sdk/hubspot/README.md | 17 | #### Step 1: Navigate to Private Apps | COMMENT |
| LOW⚡ | demo/sdk/hubspot/README.md | 24 | #### Step 2: Create a New Private App | COMMENT |
| LOW⚡ | demo/sdk/hubspot/README.md | 32 | #### Step 3: Configure Scopes (Permissions) | COMMENT |
| LOW | demo/sdk/hubspot/README.md | 55 | #### Step 4: Get Your Access Token | COMMENT |
| LOW | demo/sdk/hubspot/README.md | 63 | #### Step 5: Create Environment File | COMMENT |
| LOW | demo/sdk/hubspot/README.md | 93 | #### Step 1: Get Your Webhook Secret (Optional but Recommended) | COMMENT |
| LOW | demo/sdk/hubspot/README.md | 100 | #### Step 2: Set Up Local Webhook Server | COMMENT |
| LOW | demo/sdk/hubspot/README.md | 114 | #### Step 3: Create Webhook Subscription in HubSpot | COMMENT |
| LOW | demo/sdk/hubspot/README.md | 126 | #### Step 4: Test Webhooks | COMMENT |
| LOW | demo/sdk/slack/README.md | 17 | #### Step 1: Create a Slack App | COMMENT |
| LOW | demo/sdk/slack/README.md | 26 | #### Step 2: Configure Bot Token Scopes | COMMENT |
| LOW⚡ | demo/sdk/slack/README.md | 55 | #### Step 3: Install App to Workspace | COMMENT |
| LOW⚡ | demo/sdk/slack/README.md | 62 | #### Step 4: Get User Token (Optional) | COMMENT |
| LOW⚡ | demo/sdk/slack/README.md | 72 | #### Step 5: Find Channel and User IDs | COMMENT |
| LOW | demo/sdk/slack/README.md | 93 | #### Step 6: Create Environment File | COMMENT |
| LOW⚡ | demo/sdk/posthog/README.md | 17 | #### Step 1: Get Your Project API Key | COMMENT |
| LOW⚡ | demo/sdk/posthog/README.md | 24 | #### Step 2: Get Your Personal API Key (Optional, for API access) | COMMENT |
| LOW⚡ | demo/sdk/posthog/README.md | 32 | #### Step 3: Create Environment File | COMMENT |
| LOW | demo/sdk/posthog/README.md | 64 | #### Step 1: Set Up Local Webhook Server | COMMENT |
| LOW | demo/sdk/posthog/README.md | 78 | #### Step 2: Create Webhook Destination in PostHog | COMMENT |
| LOW | demo/sdk/posthog/README.md | 87 | #### Step 3: Test Webhooks | COMMENT |
| LOW⚡ | demo/sdk/gmail/README.md | 36 | ### Step 1: Create Google Cloud Project | COMMENT |
| LOW⚡ | demo/sdk/gmail/README.md | 42 | ### Step 2: Enable Gmail API | COMMENT |
| LOW⚡ | demo/sdk/gmail/README.md | 48 | ### Step 3: Create OAuth 2.0 Credentials | COMMENT |
| LOW⚡ | demo/sdk/gmail/README.md | 56 | ### Step 4: Get Access Token | COMMENT |
| LOW | demo/sdk/gmail/README.md | 96 | ### Step 5: Configure Environment Variables | COMMENT |
| LOW⚡ | packages/googlecalendar/setup.ts | 32 | ### Step 2: Enable the Google Calendar API | COMMENT |
| LOW⚡ | packages/googlecalendar/setup.ts | 42 | ### Step 3: Configure the OAuth Consent Screen | COMMENT |
| LOW⚡ | packages/googlecalendar/setup.ts | 129 | ### Step 9: Get a Public Webhook URL | COMMENT |
| LOW⚡ | packages/googlecalendar/setup.ts | 139 | ### Step 10: Set Up ngrok | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 19 | ### Step 1: Check for an existing GCP project | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 61 | ### Step 4: Create OAuth 2.0 Credentials | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 77 | ### Step 5: Enter Client ID and Client Secret | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 88 | ### Step 6: Get Access Token and Refresh Token (OAuth Playground) | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 106 | ### Step 7: Enter Access Token and Refresh Token | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 117 | ### Step 8: Webhook Setup (Optional) | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 174 | ### Step 11: Create the Calendar Watch Channel | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | demo/testing/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | demo/testing/src/scripts/test-hub.ts | 321 | } | COMMENT |
| LOW | demo/testing/src/scripts/test-hub.ts | 341 | // 'GitHub API (repositories.list)', | COMMENT |
| LOW | demo/testing/src/scripts/test-hub.ts | 361 | // message.includes('Bad credentials') || | COMMENT |
| LOW | explorer/pnpm-workspace.yaml | 1 | # Stops pnpm from walking up into the parent monorepo's workspace. This app is | COMMENT |
| LOW | www/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | packages/ably/schema/database.ts | 1 | // Ably has no persisted database entities — messaging, presence, | COMMENT |
| LOW | packages/abstract/index.ts | 241 | keyBuilder: async (ctx: AbstractKeyBuilderContext, source) => { | COMMENT |
| LOW | packages/twochat/webhooks/types.ts | 1 | // 2Chat has no incoming webhooks in this integration. | COMMENT |
| LOW | packages/webflow/endpoints/factory.ts | 501 | response: unknown, | COMMENT |
| LOW | packages/contentfulgraphql/schema.test.ts | 21 | // Per .github/PLUGIN_PR_RULES.md (R2), every implemented endpoint | COMMENT |
| LOW | packages/contentfulgraphql/schema/database.ts | 1 | // This integration is a read-only GraphQL query API, so it defines no | COMMENT |
| LOW | packages/corsair/core/management/body-limit.ts | 1 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| LOW | packages/corsair/core/management/adapters/next.ts | 1 | import type { ManagementHandlerOptions } from '../handler'; | COMMENT |
| LOW | packages/corsair/core/management/adapters/express.ts | 21 | // | COMMENT |
| LOW | packages/corsair/core/management/adapters/hono.ts | 1 | import type { ManagementHandlerOptions } from '../handler'; | COMMENT |
| LOW | packages/corsair/core/management/adapters/fastify.ts | 21 | // // parser consumes request.raw BEFORE any handler runs, and re-serializing | COMMENT |
| LOW | …kages/corsair/core/management/adapters/node-request.ts | 1 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| LOW | packages/corsair/tests/framework-body-fidelity.test.ts | 21 | import { signDeliveryEnvelope } from '../hub/signing/envelope'; | COMMENT |
| LOW | packages/corsair/tests/framework-body-fidelity.test.ts | 41 | // - Express, no body parser (recommended) → adapter drains the raw stream. | COMMENT |
| LOW | packages/corsair/tests/framework-realserver.test.ts | 21 | // | COMMENT |
| LOW | packages/corsair/tests/management-client.test.ts | 1 | import { CorsairClientError, createCorsairClient } from '../client'; | COMMENT |
| LOW | packages/corsair/tests/management-handler.test.ts | 1 | import { createCorsair } from '../core'; | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 1 | // import * as dotenv from 'dotenv'; | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 21 | // }); | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 41 | // 'retry-after': String(mockRetryAfterSeconds), | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 61 | COMMENT | |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 81 | // expect(capturedError?.status).toBe(429); | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 101 | // headers: { | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 121 | // ]; | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 141 | COMMENT | |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 161 | // enabled: true, | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 181 | // errorHandlers, | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 201 | // }, | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 221 | COMMENT | |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 241 | // expect(result.headersRetryAfterMs).toBeUndefined(); | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 261 | // }); | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 281 | // rateLimitConfig: { | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 301 | // {}, | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 321 | // { | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 341 | // 'content-type': 'application/json', | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 361 | COMMENT | |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 381 | // expect(capturedError?.status).toBe(429); | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 401 | // const SLACK_BOT_TOKEN = process.env.SLACK_BOT_TOKEN; | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 421 | COMMENT | |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 441 | // console.log( | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 461 | // const secondStart = Date.now(); | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 481 | // rateLimitConfig: { | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 501 | // const secondElapsed = Date.now() - secondStart; | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 521 | // const successCount = results.filter( | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 541 | // console.log( | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 561 | // ); | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 581 | // console.warn('Your Slack workspace has extremely high rate limits.'); | COMMENT |
| LOW | …ges/corsair/tests/slack-rate-limit-integration.test.ts | 601 | // 'Consider using the simulated test or a workspace with lower limits.', | COMMENT |
| LOW | packages/corsair/workflows/probe.ts | 1 | import * as vm from 'node:vm'; | COMMENT |
| LOW | packages/corsair/workflows/execute.ts | 1 | import { createHash } from 'node:crypto'; | COMMENT |
| LOW | packages/corsair/client/react/index.ts | 21 | // over one client instance and returns typed hooks. This avoids a React context | COMMENT |
| LOW | packages/corsair/hub/chats.ts | 1 | import { hubApiGet, hubApiPost } from './client/http'; | COMMENT |
| LOW | packages/corsair/hub/contracts/tunnel.ts | 41 | COMMENT | |
| LOW | packages/gemini/schema/database.ts | 1 | // Gemini has no persisted database entities — all operations are stateless | COMMENT |
| 13 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | packages/circleci/endpoints.test.ts | 1033 | const entityIds = db.projectEnvVars.upsertByEntityId.mock.calls.map( | CODE |
| CRITICAL | packages/doppler/endpoints.test.ts | 1034 | const calledKeys = db.environments.upsertByEntityId.mock.calls.map( | CODE |
| CRITICAL | packages/twilio/integration.test.ts | 238 | await corsair.twilio.webhooks.message.received.handler({ | CODE |
| CRITICAL | packages/apininjas/behaviour.test.ts | 122 | const kinds = db.vehicles.upsertByEntityId.mock.calls.map( | CODE |
| CRITICAL | packages/apininjas/behaviour.test.ts | 125 | const ids = db.vehicles.upsertByEntityId.mock.calls.map((call) => call[0]); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/googlemeet/scripts/setup-test-db.ts | 171 | print(f'Opening database: {db_path}') | CODE |
| HIGH⚡ | packages/googlemeet/scripts/setup-test-db.ts | 190 | print(f'\\nIntegration rows: {len(integrations)}') | CODE |
| HIGH⚡ | packages/googlemeet/scripts/setup-test-db.ts | 192 | print(f' id={row[0]}, name={row[1]}') | CODE |
| HIGH⚡ | packages/googlemeet/scripts/setup-test-db.ts | 196 | print(f'\\nAccount rows: {len(accounts)}') | CODE |
| HIGH⚡ | packages/googlemeet/scripts/setup-test-db.ts | 198 | print(f' id={row[0]}, tenant_id={row[1]}') | CODE |
| HIGH⚡ | packages/googlemeet/scripts/setup-test-db.ts | 201 | print('\\nDone! Google Meet plugin is ready to test.') | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | demo/sdk/posthog/README.md | 173 | token: 'your-api-key-here', | CODE |
| HIGH | packages/accrediblecertificates/client.ts | 46 | // "Use the format: Token token=YOUR_API_KEY". | COMMENT |
| HIGH | packages/googlecalendar/setup.ts | 157 | 4. Run: \`ngrok config add-authtoken YOUR_TOKEN_HERE\` | CODE |
| HIGH | packages/serpapi/client.ts | 38 | // (confirmed from the docs: `?api_key=YOUR_API_KEY`, not a header). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | packages/googlecalendar/setup.ts | 32 | ### Step 2: Enable the Google Calendar API | COMMENT |
| LOW⚡ | packages/googlecalendar/setup.ts | 42 | ### Step 3: Configure the OAuth Consent Screen | COMMENT |
| LOW⚡ | packages/googlecalendar/setup.ts | 129 | ### Step 9: Get a Public Webhook URL | COMMENT |
| LOW⚡ | packages/googlecalendar/setup.ts | 139 | ### Step 10: Set Up ngrok | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 19 | ### Step 1: Check for an existing GCP project | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 61 | ### Step 4: Create OAuth 2.0 Credentials | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 77 | ### Step 5: Enter Client ID and Client Secret | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 88 | ### Step 6: Get Access Token and Refresh Token (OAuth Playground) | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 106 | ### Step 7: Enter Access Token and Refresh Token | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 117 | ### Step 8: Webhook Setup (Optional) | COMMENT |
| LOW | packages/googlecalendar/setup.ts | 174 | ### Step 11: Create the Calendar Watch Channel | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/nextdns/client.ts | 84 | // it in a generic error class here (the generator's original scaffold | COMMENT |
| MEDIUM | packages/habitica/error-handlers.test.ts | 73 | // The scaffold matched 'rate_limited', which Habitica never sends. | COMMENT |
| MEDIUM | packages/serpapi/client.ts | 59 | // it in a generic error class here (the generator's original scaffold | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/zoom/endpoints/types.ts | 331 | // AI-generated summary detail items have an open-ended structure that Zoom may extend | COMMENT |