🚫 Stop saying "you forgot to …" in code review (in Ruby)
This report summarizes scanner evidence for danger/danger, a Ruby project with 5,695 GitHub stars. SynthScan examined 26,808 lines of code across 239 source files, recording 146 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 6.7 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 143 finding(s).
Are imports declared and package/API names verified? 1 finding(s).
Are wrappers, guards, and repeated structures necessary? 36 finding(s).
Which changes need focused human review? 146 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 146 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .rubocop_todo.yml | 1 | # This configuration was generated by | COMMENT |
| LOW | spec/lib/danger/danger_core/message_aggregator_spec.rb | 81 | let(:file_a) { "README.md" } | COMMENT |
| LOW | lib/danger/danger_core/standard_error.rb | 41 | def contents | COMMENT |
| LOW | lib/danger/danger_core/messages/base.rb | 21 | order = file <=> other.file | COMMENT |
| LOW | lib/danger/danger_core/plugins/dangerfile_git_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | lib/danger/danger_core/plugins/dangerfile_git_plugin.rb | 21 | # @example Fail really big diffs | COMMENT |
| LOW | lib/danger/danger_core/plugins/dangerfile_git_plugin.rb | 81 | # List of renamed files | COMMENT |
| LOW | lib/danger/danger_core/plugins/dangerfile_git_plugin.rb | 121 | # The log of commits inside the diff | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 21 | # | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 41 | # danger.import_dangerfile(url: custom_url) | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 161 | # Download and execute a remote Dangerfile. | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 181 | # Download and execute a remote Dangerfile. | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 201 | # A https url where the Dangerfile is. | COMMENT |
| LOW | …nger_core/plugins/dangerfile_bitbucket_cloud_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …nger_core/plugins/dangerfile_bitbucket_cloud_plugin.rb | 21 | # @example Ensure there is a summary for a PR | COMMENT |
| LOW | …nger_core/plugins/dangerfile_bitbucket_cloud_plugin.rb | 41 | # message "This PR changes #{ bitbucket_cloud.html_link(config_files) }" | COMMENT |
| LOW | …nger_core/plugins/dangerfile_bitbucket_cloud_plugin.rb | 121 | # The branch to which the PR is going to be merged from. | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 21 | # @example Check if a user is in a specific GitHub org, and message them if so | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 41 | # | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 61 | # | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 101 | # | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 141 | # @!group PR Metadata | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 181 | # @!group PR Commit Metadata | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 201 | # @return [Octokit::Client] | COMMENT |
| LOW | …ger/danger_core/plugins/dangerfile_messaging_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …ger/danger_core/plugins/dangerfile_messaging_plugin.rb | 21 | # message 'Hello', 'World', file: "Dangerfile", line: 1 | COMMENT |
| LOW | …ger/danger_core/plugins/dangerfile_messaging_plugin.rb | 41 | # failure ["This is example", "with array"] | COMMENT |
| LOW | …ger/danger_core/plugins/dangerfile_messaging_plugin.rb | 61 | # markdown "### First issue", "### Second issue" | COMMENT |
| LOW | …ger/danger_core/plugins/dangerfile_messaging_plugin.rb | 81 | end | COMMENT |
| LOW | …ger/danger_core/plugins/dangerfile_messaging_plugin.rb | 121 | side: side, | COMMENT |
| LOW | …ger/danger_core/plugins/dangerfile_messaging_plugin.rb | 181 | # | COMMENT |
| LOW | …ger_core/plugins/dangerfile_bitbucket_server_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …ger_core/plugins/dangerfile_bitbucket_server_plugin.rb | 21 | # @example Ensure there is a summary for a PR | COMMENT |
| LOW | …ger_core/plugins/dangerfile_bitbucket_server_plugin.rb | 41 | # message "This PR changes #{ bitbucket_server.html_link(config_files) }" | COMMENT |
| LOW | …ger_core/plugins/dangerfile_bitbucket_server_plugin.rb | 121 | # The branch to which the PR is going to be merged from. | COMMENT |
| LOW | …ger_core/plugins/dangerfile_bitbucket_server_plugin.rb | 141 | @bs.pr_json[:fromRef][:latestCommit].to_s | COMMENT |
| LOW | …ger_core/plugins/dangerfile_bitbucket_server_plugin.rb | 161 | # Returns a list of Markdown links for a file, or files in the head repository. | COMMENT |
| LOW | …er/danger_core/plugins/dangerfile_local_only_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_gitlab_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_gitlab_plugin.rb | 21 | # @example Ensure that all MRs have an assignee. | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_gitlab_plugin.rb | 41 | # warn("This MR cannot be merged yet.") unless can_merge | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_gitlab_plugin.rb | 61 | # reviewer = gitlab.api.group_members(gitlab.api.merge_request_approvals(project_id, mr_id).to_hash["approve | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_gitlab_plugin.rb | 121 | # The labels assigned to the Merge Request | COMMENT |
| LOW | …danger/danger_core/plugins/dangerfile_gitlab_plugin.rb | 161 | COMMENT | |
| LOW | …danger/danger_core/plugins/dangerfile_gitlab_plugin.rb | 201 | end | COMMENT |
| LOW | …b/danger/danger_core/plugins/dangerfile_vsts_plugin.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …b/danger/danger_core/plugins/dangerfile_vsts_plugin.rb | 21 | # @example Only accept PRs to the develop branch | COMMENT |
| LOW | …b/danger/danger_core/plugins/dangerfile_vsts_plugin.rb | 41 | # | COMMENT |
| LOW | …b/danger/danger_core/plugins/dangerfile_vsts_plugin.rb | 101 | COMMENT | |
| LOW | …b/danger/danger_core/plugins/dangerfile_vsts_plugin.rb | 141 | def base_commit | COMMENT |
| LOW | lib/danger/ci_source/surf.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | lib/danger/ci_source/screwdriver.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | lib/danger/ci_source/appveyor.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | lib/danger/ci_source/appveyor.rb | 21 | # | COMMENT |
| LOW | lib/danger/ci_source/xcode_cloud.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | lib/danger/ci_source/buildkite.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | lib/danger/ci_source/jenkins.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | lib/danger/ci_source/jenkins.rb | 21 | # | COMMENT |
| 34 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | spec/support/gitlab_helper.rb | 55 | def stub_merge_request_changes(fixture, slug, merge_request_id) | CODE |
| LOW⚡ | spec/support/gitlab_helper.rb | 61 | def stub_merge_request_commits(fixture, slug, merge_request_id) | CODE |
| LOW⚡ | spec/support/gitlab_helper.rb | 67 | def stub_merge_request_comments(fixture, slug, merge_request_id) | CODE |
| LOW⚡ | spec/support/gitlab_helper.rb | 73 | def stub_merge_request_discussions(fixture, slug, merge_request_id) | CODE |
| LOW⚡ | spec/support/gitlab_helper.rb | 79 | def stub_commit_merge_requests(fixture, slug, commit_sha) | CODE |
| LOW | spec/support/ci_helper.rb | 209 | def with_travis_setup_and_is_a_pull_request(request_source: nil) | CODE |
| LOW | spec/lib/danger/danger_core/executor_spec.rb | 183 | def prepare_fake_swiftweekly_repository(dir) | CODE |
| LOW | spec/lib/danger/plugin_support/gems_resolver_spec.rb | 28 | def fake_bundle_install_path_vendor_gems_in(spec_root) | CODE |
| LOW | lib/danger/scm_source/git_repo.rb | 107 | def git_fetch_branch_to_depth(branch, depth) | CODE |
| LOW | lib/danger/scm_source/git_repo.rb | 115 | def raise_if_we_cannot_find_the_commit(commitish) | CODE |
| LOW | lib/danger/scm_source/git_repo.rb | 142 | def find_merge_base_with_incremental_fetch(repo, from, to) | CODE |
| LOW | lib/danger/danger_core/environment_manager.rb | 80 | def raise_error_for_no_request_source(env, ui) | CODE |
| LOW | lib/danger/danger_core/environment_manager.rb | 104 | def extract_title_and_subtitle_from_source(repo_url) | CODE |
| LOW | lib/danger/danger_core/environment_manager.rb | 117 | def ui_display_no_request_source_error_message(ui, env, title, subtitle) | CODE |
| LOW | lib/danger/danger_core/dangerfile.rb | 123 | def method_values_for_plugin_hashes(plugin_hashes) | CODE |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 137 | def import_dangerfile_from_path(path) | CODE |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 151 | def import_dangerfile_from_gem(name) | CODE |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 171 | def import_dangerfile_from_github(slug, branch = nil, path = nil) | CODE |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 191 | def import_dangerfile_from_gitlab(slug_or_project_id, branch = nil, path = nil) | CODE |
| LOW | …danger/danger_core/plugins/dangerfile_danger_plugin.rb | 204 | def import_dangerfile_from_url(url) | CODE |
| LOW | …danger/danger_core/plugins/dangerfile_github_plugin.rb | 246 | def dismiss_out_of_range_messages(dismiss = true) | CODE |
| LOW | …danger/danger_core/plugins/dangerfile_gitlab_plugin.rb | 257 | def dismiss_out_of_range_messages(dismiss = true) | CODE |
| LOW⚡ | lib/danger/request_sources/code_insights_api.rb | 120 | def violation_hash_with_severity(violation, severity) | CODE |
| LOW⚡ | lib/danger/request_sources/code_insights_api.rb | 129 | def report_endpoint_at_commit(commit) | CODE |
| LOW⚡ | lib/danger/request_sources/code_insights_api.rb | 133 | def annotation_endpoint_at_commit(commit) | CODE |
| LOW | lib/danger/request_sources/gitlab.rb | 294 | def dismiss_out_of_range_messages_for(kind) | CODE |
| LOW | lib/danger/request_sources/gitlab.rb | 470 | def find_old_position_in_diff(changes, message) | CODE |
| LOW | lib/danger/request_sources/github/github.rb | 301 | def delete_old_inline_violations(danger_comments: [], non_danger_comments: []) | CODE |
| LOW | lib/danger/request_sources/github/github.rb | 549 | def dismiss_out_of_range_messages_for(kind) | CODE |
| LOW | lib/danger/ci_source/support/pull_request_finder.rb | 62 | def generate_remote_pull_request(remote_pull_request) | CODE |
| LOW | lib/danger/helpers/comments_helper.rb | 115 | def generate_message_group_comment(message_group:, | CODE |
| LOW | lib/danger/helpers/comments_helper.rb | 133 | def generate_inline_comment_body(emoji, | CODE |
| LOW | lib/danger/helpers/comments_helper.rb | 145 | def generate_inline_markdown_body(markdown, danger_id: "danger", template: "github") | CODE |
| LOW | lib/danger/helpers/comments_parsing_helper.rb | 19 | def parse_tables_from_comment(comment) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | lib/danger/danger_core/dangerfile_dsl.rb | 11 | # you can use to pull out extra bits of information. _Warning_ | COMMENT |
| LOW | lib/danger/ci_source/xcode_cloud.rb | 13 | # If running on GitHub Enterprise, make sure you also set the expected values for | COMMENT |
| MEDIUM | lib/danger/ci_source/teamcity.rb | 64 | # TeamCity provides `%teamcity.build.branch%`, which you can use at the top of your Simple Command Runner: | COMMENT |
| MEDIUM | lib/danger/ci_source/github_actions.rb | 9 | # And so, you can use GITHUB_TOKEN secret as `DANGER_GITHUB_API_TOKEN` environment variable. | COMMENT |
| MEDIUM | lib/danger/ci_source/circle.rb | 20 | # With "Only build pull requests" enabled, you can add `bundle exec danger` to your `config.yml` (Circle 2.0). | COMMENT |
| LOW | lib/danger/ci_source/code_build.rb | 9 | # In CodeBuild, make sure to correctly forward `CODEBUILD_BUILD_ID`, `CODEBUILD_SOURCE_VERSION`, `CODEBUILD_SOURCE_REP | COMMENT |
| LOW | lib/danger/ci_source/code_build.rb | 10 | # In CodeBuild with batch builds, make sure to correctly forward `CODEBUILD_BUILD_ID`, `CODEBUILD_WEBHOOK_TRIGGER`, `C | COMMENT |
| LOW | lib/danger/ci_source/codefresh.rb | 21 | # Don't forget to add the `DANGER_GITHUB_API_TOKEN` variable to your pipeline settings so that Danger can properly po | COMMENT |
| MEDIUM | lib/danger/commands/init.rb | 133 | ui.say "It's worth noting that you #{'should not'.bold.white} re-use this token for OSS repos." | CODE |
| LOW | lib/danger/commands/init.rb | 136 | ui.say "Additionally, don't forget to add your new GitHub account as a collaborator to your Closed Source projec | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | lib/danger/ci_source/appveyor.rb | 28 | # DANGER_GITHUB_API_TOKEN: <YOUR_TOKEN_HERE> | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | lib/danger/danger_core/executor.rb | 20 | # Create a silent Cork instance if cork is nil, as it's likely a test | COMMENT |
| MEDIUM | lib/danger/plugin_support/plugin_parser.rb | 144 | # Create the center params, `thing: OK, other: Thing` | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | lib/danger/danger_core/standard_error.rb | 55 | # ------------------------------------------- | COMMENT |
| MEDIUM | lib/danger/danger_core/standard_error.rb | 59 | # ------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | lib/danger/danger_core/dangerfile.rb | 297 | # Print results in the terminal | COMMENT |
| LOW | lib/danger/ci_source/drone.rb | 63 | # Check if this build is valid for CI with drone 0.6 or later | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | lib/danger/helpers/comments_parsing_helper.rb | 67 | # The new method uses a more robust data-danger-table | COMMENT |