AI Slop Code Risk Monitor

ddev/ddev

SlopCodeMonitor badge for ddev/ddev Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Docker-based local PHP+Node.js web development environments

2.1 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for ddev/ddev, a Go project with 3,940 GitHub stars. SynthScan examined 203,239 lines of code across 1343 source files, recording 293 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 2.1 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.1
Adjusted Signal
2.1
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
3.9K
Stars
Go
Language
203.2K
Lines of Code
1.3K
Files
293
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 253 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 13 finding(s).

Agent Over-Engineering Ratio 2.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 36 finding(s).

PR Review Velocity Impact 9.6/100 · LOW

Which changes need focused human review? 293 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 3MEDIUM 50LOW 240

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 293 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block182 hits · 182 pts
SeverityFileLineSnippetContext
LOW.goreleaser.yml661COMMENT
LOW.goreleaser.yml681# #COMMENT
LOW.goreleaser.yml701# require_license_acceptance: trueCOMMENT
LOW.goreleaser.yml721# release_notes: "https://github.com/{{ .Env.REPOSITORY_OWNER }}/ddev/releases/tag/v{{ .Version }}"COMMENT
LOW.ci-scripts/cloudsmith_backfill.sh1#!/usr/bin/env bashCOMMENT
LOWcmd/ddev/cmd/utility-dockercheck.go181 // Test buildx with a trivial build on the host, and --load the result.COMMENT
LOWcmd/ddev/cmd/utility-port-diagnose_test.go561 // but always mention "apache" somewhere in the output.COMMENT
LOW…tomConfigCmd/mock-myservice/config.mock-myservice.yaml1#ddev-generatedCOMMENT
LOW…ck-myservice/traefik/static_config.mock-myservice.yaml1#ddev-generatedCOMMENT
LOW…gCmd/mock-myservice/traefik/config/mock-myservice.yaml1#ddev-generatedCOMMENT
LOW…rvice/traefik/custom-global-config/mock-myservice.yaml1#ddev-generatedCOMMENT
LOW…estdata/TestCmdAddonComplex/project/.platform.app.yaml1# This file describes an application. You can have multiple applicationsCOMMENT
LOW…estdata/TestCmdAddonComplex/project/.platform.app.yaml81# The configuration of app when it is exposed to the web.COMMENT
LOW…hExtractedDir/extracted_dir_addon/additional-script.sh1#!/bin/bashCOMMENT
LOW…nWithExtractedDir/extracted_dir_addon/main-config.yaml1#ddev-generatedCOMMENT
LOW…cies/runtime_deps_addon/config.runtime-deps-addon.yaml1#ddev-generatedCOMMENT
LOW…imeDependencies/php_runtime_deps_addon/php-config.yaml1#ddev-generatedCOMMENT
LOWthird_party/ampli/ampli.go1// ampli.goCOMMENT
LOWthird_party/ampli/ampli.go61COMMENT
LOWscripts/test-concurrent-commands.sh1#!/usr/bin/env bashCOMMENT
LOWscripts/linux-podman-rootless.sh1#!/usr/bin/env bashCOMMENT
LOWscripts/linux-podman-rootless.sh21# half from Homebrew starts no containers at all.COMMENT
LOWscripts/linux-podman-rootless.sh501 # firewall backend, got iptables"). Distro netavark 1.x predates nftables,COMMENT
LOWscripts/compare-start-perf.sh1#!/usr/bin/env bashCOMMENT
LOWscripts/compare-start-perf.sh21# scripts/compare-start-perf.sh [options] <commit-a> <commit-b>COMMENT
LOW.github/workflows/release-commenter.yml1name: Comment on releaseCOMMENT
LOW.github/workflows/perf-collect.yml1name: Collect and publish nightly performance resultsCOMMENT
LOW.github/workflows/perf-collect.yml161 - name: Trigger docs-publish rebuildCOMMENT
LOW.github/workflows/image-build-push.yml1name: Image buildCOMMENT
LOW.buildkite/dump-docker-desktop-state.sh1#!/usr/bin/env bashCOMMENT
LOW.buildkite/installer-test.sh1#!/usr/bin/env bashCOMMENT
LOW.buildkite/restart-docker-desktop.sh1#!/usr/bin/env bashCOMMENT
LOW.buildkite/windows-installer.yml1# Windows GUI installer tests, decoupled from the traditional Windows suite.COMMENT
LOW.buildkite/start-docker-desktop.sh1#!/usr/bin/env bashCOMMENT
LOW.buildkite/perf-macos-shared-providers.yml1# Nightly performance benchmark: the macOS Docker providers that share theCOMMENT
LOW.buildkite/sanetestbot.sh21fiCOMMENT
LOW.buildkite/sanetestbot.sh101doneCOMMENT
LOWcontainers/image-metadata.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/image-configs.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/image-configs.sh21DDEV_IMAGE_CONFIGS=(COMMENT
LOWcontainers/required-image-tag.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/release-prep.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/validate-image-tag.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/autotag.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/image-tag-for.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/check-image-tags.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/image-tag-cleanup-candidates.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/wait-for-images.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/wait-for-images.sh21# Fast path (the common case - nothing changed): one registry check per image,COMMENT
LOWcontainers/validate-image-repo.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/image-tag-keep-set.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/delete-image-tags.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/image-tag-cleanup.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/image-tag-cleanup.sh21# Flags:COMMENT
LOWcontainers/image-tag-cleanup.sh41# --limit <n> act on only the first n candidates, sorted; theCOMMENT
LOW…/files/usr/local/bin/ddev-router-fallback-responder.sh1#!/bin/shCOMMENT
LOW…raefik-router/files/usr/local/bin/docker-entrypoint.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/ddev-dbserver/variants.txt1# The ddev-dbserver variant matrix - one line per variant:COMMENT
LOWcontainers/ddev-dbserver/variants.sh1#!/usr/bin/env bashCOMMENT
LOWcontainers/ddev-dbserver/files/docker-entrypoint.sh161 # MySQL 5.5 !includedir skips names with more than one dot, like mysql_5.5.cnfCOMMENT
122 more matches not shown…
Decorative Section Separators27 hits · 81 pts
SeverityFileLineSnippetContext
MEDIUMscripts/linux-podman-rootless.sh92# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/linux-podman-rootless.sh94# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/linux-podman-rootless.sh191# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/linux-podman-rootless.sh193# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/linux-podman-rootless.sh660# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/linux-podman-rootless.sh662# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/linux-podman-rootless.sh1332# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/linux-podman-rootless.sh1334# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/linux-podman-rootless.sh1558# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh56# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh58# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh150# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh152# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh258# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh260# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh315# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh317# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh372# ---------------------------------------------------------------------------COMMENT
MEDIUMcontainers/image_tag_cleanup_test.sh374# ---------------------------------------------------------------------------COMMENT
MEDIUM…ver/generic-files/usr/local/bin/build_php_extension.sh89# -------------COMMENT
MEDIUM…ver/generic-files/usr/local/bin/build_php_extension.sh92# -------------COMMENT
MEDIUM…ver/generic-files/usr/local/bin/build_php_extension.sh105# -------------COMMENT
MEDIUM…ver/generic-files/usr/local/bin/build_php_extension.sh108# -------------COMMENT
MEDIUM…ver/generic-files/usr/local/bin/build_php_extension.sh120# -------------COMMENT
MEDIUM…ver/generic-files/usr/local/bin/build_php_extension.sh123# -------------COMMENT
MEDIUM…ver/generic-files/usr/local/bin/build_php_extension.sh135# -------------COMMENT
MEDIUM…ver/generic-files/usr/local/bin/build_php_extension.sh141# -------------COMMENT
AI Slop Vocabulary15 hits · 40 pts
SeverityFileLineSnippetContext
MEDIUMperf/collector/collect-per-test.js174// but `filename` doesn't, so matching filename is robust either way.COMMENT
MEDIUMpkg/dockerutil/docker_compose_internal_test.go172// logger) and is robust against parallel tests touching logrus.COMMENT
LOWpkg/ddevapp/testdata/TestLagoonPush/.lagoon.yml30 # TODO: How can this be done properly in a new project? Or should we just set MARIADB_HOST etc?COMMENT
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
LOW⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
LOWpkg/ddevapp/testdata/TestLagoonPull/.lagoon.yml30 # TODO: How can this be done properly in a new project? Or should we just set MARIADB_HOST etc?COMMENT
Redundant / Tautological Comments15 hits · 22 pts
SeverityFileLineSnippetContext
LOWcmd/ddev/cmd/scripts/diagnose_ddev.sh140# Check if project is in home directoryCOMMENT
LOWcmd/ddev/cmd/scripts/diagnose_ddev.sh171# Check if we're in a DDEV projectCOMMENT
LOWscripts/ddev-linux-package-postinstall.sh19 # Check if the WSL2 binaries exist (fallback)COMMENT
LOW.buildkite/test.sh126 # Check if there are any changes in the specified directories or files since the merge baseCOMMENT
LOWcontainers/ddev-traefik-router/files/healthcheck.sh166# Check if configuration is healthy:COMMENT
LOW…k-router/files/usr/local/bin/monitor-traefik-stderr.sh21 # Check if line contains "ERR" after stripping ANSI color codesCOMMENT
LOWcontainers/testscripts/check_key_expirations.sh66 # Check if the key expires within DDEV_MAX_DAYS_BEFORE_CERT_EXPIRATION daysCOMMENT
LOWcontainers/testscripts/check_key_expirations.sh90# Check if there are any warnings or errors related to signature validationCOMMENT
LOWcontainers/devcontainers/install-ddev/post-create.sh10# Check if DDEV should be built from source (for development)COMMENT
LOW…iles/usr/local/bin/mariadb-skip-ssl-wrapper-install.sh59 # Check if the command supports --skip-ssl-verify-server-cert flagCOMMENT
LOW…ver-base-files/usr/local/bin/mariadb-compat-install.sh29 # Check if it's our wrapper by looking for #ddev-generated markerCOMMENT
LOW…s/ddev-webserver/ddev-php-files/extract-php-configs.sh107 # Check if cli/php.ini and fpm/php.ini exist (core config files)COMMENT
LOW…s/ddev-webserver/ddev-php-files/extract-php-configs.sh146 # Check if DDEV configs existCOMMENT
LOW…s/ddev-webserver/ddev-php-files/extract-php-configs.sh205 # Check if extension config exists in new versionCOMMENT
LOW…server/ddev-php-files/reconcile-php85-comprehensive.sh48 # Check if it already existsCOMMENT
Slop Phrases8 hits · 21 pts
SeverityFileLineSnippetContext
MEDIUM.ci-scripts/bump_homebrew.sh13# For testing, you can change GITHUB_USERNAME to, for example, rfay so releases can be testedCOMMENT
MEDIUMpkg/globalconfig/global_config.go610# project_tld to that top-level domain. Otherwise, you can use additional-hostnames orCOMMENT
MEDIUMpkg/ddevapp/hooks_test.go61 // 2022-02-16: I'm unable to get the Composer examples to work here. Intermittent resultsCOMMENT
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
LOW⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUMpkg/ddevapp/mutagen_config_assets/mutagen.yml31 # so you can add:COMMENT
LOWpkg/testcommon/testcommon.go233// Don't forget to run ResetGlobalDdevDir(t, tmpXdgConfigHomeDir)COMMENT
Fake / Example Data13 hits · 15 pts
SeverityFileLineSnippetContext
LOWcmd/ddev/cmd/snapshot_list_test.go66 require.NoError(t, os.WriteFile(filepath.Join(repoRoot, "README.md"), []byte("placeholder"), 0o644))CODE
LOWperf/metrics/03-drupal-install/install-timer.js119 await page.type('#edit-site-mail', 'admin@example.com');CODE
LOWpkg/dockerutil/containers_internal_test.go37 input: "John Doe",CODE
LOWpkg/dockerutil/containers_internal_test.go42 input: "user@example.com",CODE
LOWpkg/dockerutil/containers.go113 // Example problem usernames: "André Kraus", "Mück", "DOMAIN\user", "user@example.com"COMMENT
LOW⚡pkg/ddevapp/addons_test.go890 t.Setenv("DDEV_GITHUB_TOKEN", "dummy-token")CODE
LOW⚡pkg/ddevapp/addons_test.go891 t.Setenv("GH_TOKEN", "dummy-token")CODE
LOW⚡pkg/ddevapp/addons_test.go892 t.Setenv("GITHUB_TOKEN", "dummy-token")CODE
LOWpkg/ddevapp/snapshot_test.go202 require.NoError(t, os.WriteFile(filepath.Join(repoRoot, "README.md"), []byte("placeholder"), 0o644))CODE
LOWpkg/ddevapp/providerPantheon_test.go110 out, err := exec.RunHostCommand("bash", "-c", fmt.Sprintf(`echo 'select COUNT(*) from users_field_data where mail="admiCODE
LOW…estdata/TestDdevImportDB/mariadb/modern_collations.sql39INSERT INTO `modern_mysql` VALUES (1,'John Doe','john@example.com');CODE
LOWpkg/ddevapp/testdata/TestMailpit/send_email.php13$mail->setFrom('admin@example.com', 'Sender Name');CODE
LOWpkg/github/github_internal_test.go64 t.Setenv("DDEV_GITHUB_TOKEN", "fake-token")CODE
Synthetic Comment Markers2 hits · 15 pts
SeverityFileLineSnippetContext
HIGH⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
HIGH⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
Structural Annotation Overuse8 hits · 14 pts
SeverityFileLineSnippetContext
LOWcmd/ddev/cmd/utility-xdebug-diagnose.go625 // Step 1: Environment DetectionCOMMENT
LOWcmd/ddev/cmd/utility-xdebug-diagnose.go651 // Step 2: Connectivity testCOMMENT
LOWcmd/ddev/cmd/utility-xdebug-diagnose.go682 // Step 3: IDE InformationCOMMENT
LOW⚡cmd/ddev/cmd/utility-xdebug-diagnose.go725 // Step 4: Enable listeningCOMMENT
LOW⚡cmd/ddev/cmd/utility-xdebug-diagnose.go730 // Step 5: Protocol testCOMMENT
LOWdocs/content/users/install/ddev-installation.md211 ### Step 1: Install WSL2COMMENT
LOWdocs/content/users/install/ddev-installation.md243 ### Step 2: Install DDEVCOMMENT
LOWdocs/content/users/install/ddev-installation.md329 ### Step 3: Start working in WSL2COMMENT
Verbosity Indicators5 hits · 9 pts
SeverityFileLineSnippetContext
LOWcmd/ddev/cmd/utility-xdebug-diagnose.go625 // Step 1: Environment DetectionCOMMENT
LOWcmd/ddev/cmd/utility-xdebug-diagnose.go651 // Step 2: Connectivity testCOMMENT
LOWcmd/ddev/cmd/utility-xdebug-diagnose.go682 // Step 3: IDE InformationCOMMENT
LOW⚡cmd/ddev/cmd/utility-xdebug-diagnose.go725 // Step 4: Enable listeningCOMMENT
LOW⚡cmd/ddev/cmd/utility-xdebug-diagnose.go730 // Step 5: Protocol testCOMMENT
Hyper-Verbose Identifiers9 hits · 9 pts
SeverityFileLineSnippetContext
LOW…data/TestConfigUpdate/drupal11-git/core/lib/Drupal.php724 public static function entityDefinitionUpdateManager() {CODE
LOW…ConfigUpdate/drupal11-composer/web/core/lib/Drupal.php724 public static function entityDefinitionUpdateManager() {CODE
LOW…ConfigUpdate/drupal10-composer/web/core/lib/Drupal.php724 public static function entityDefinitionUpdateManager() {CODE
LOWperf/collector/collect-test-runtime.js123function makeTargetFromArtifactName(artifactName) {CODE
LOW…ata/TestDetectAppType/drupal11/web/core/lib/Drupal.php722 public static function entityDefinitionUpdateManager() {CODE
LOW…ata/TestDetectAppType/drupal10/web/core/lib/Drupal.php722 public static function entityDefinitionUpdateManager() {CODE
LOW…data/TestDetectAppType/drupal8/web/core/lib/Drupal.php722 public static function entityDefinitionUpdateManager() {CODE
LOW…ata/TestDetectAppType/drupal12/web/core/lib/Drupal.php741 public static function entityDefinitionUpdateManager() {CODE
LOW…data/TestDetectAppType/drupal9/web/core/lib/Drupal.php722 public static function entityDefinitionUpdateManager() {CODE
Modern AI Meta-Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
MEDIUM⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
AI Response Leakage1 hit · 8 pts
SeverityFileLineSnippetContext
HIGH⚡…ta/TestDdevImportDB/mariadb/posts_with_ddl_content.sql72INSERT INTO `wp_posts` VALUES (1305,1,'2020-08-12 05:31:16','2020-08-12 11:31:16','<!-- wp:paragraph -->\n<p>Getting newCODE
Self-Referential Comments2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMtesting/ddev-perf-test.sh56 # Create the config.ymlCOMMENT
MEDIUM…s/ddev-webserver/ddev-php-files/extract-php-configs.sh72 # Create a temporary container nameCOMMENT
Example Usage Blocks3 hits · 4 pts
SeverityFileLineSnippetContext
LOWscripts/linux-podman-rootless.sh6# Usage:COMMENT
LOWscripts/compare-start-perf.sh20# Usage:COMMENT
LOW.buildkite/dump-docker-desktop-state.sh10# Usage:COMMENT