The Deterministic Foundation for your SDLC
This report presents the forensic synthetic code analysis of flox/flox, a Rust project with 4,080 GitHub stars. SynthScan v2.0 examined 161,045 lines of code across 594 source files, recording 838 pattern matches distributed across 12 syntactic categories. The overall adjusted score of 6.3 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 838 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …st_data/manually_generated/v1_curl_hello/manifest.toml | 1 | ## Flox Environment Manifest ----------------------------------------- | COMMENT |
| LOW | …st_data/manually_generated/v1_curl_hello/manifest.toml | 21 | # gum.version = "^0.14.5" | COMMENT |
| LOW | …st_data/manually_generated/v1_curl_hello/manifest.toml | 41 | # # - FLOX_ENV=/home/user/example/.flox/run | COMMENT |
| LOW | …st_data/manually_generated/v1_curl_hello/manifest.toml | 61 | COMMENT | |
| LOW | …st_data/manually_generated/v1_curl_hello/manifest.toml | 81 | ## $ flox build | COMMENT |
| LOW | …st_data/manually_generated/v1_curl_hello/manifest.toml | 101 | # "x86_64-darwin", | COMMENT |
| LOW | package-builder/closure.c | 21 | #include <stddef.h> | COMMENT |
| LOW | package-builder/sandbox.c | 21 | #include <fcntl.h> | COMMENT |
| LOW | package-builder/sandbox.c | 41 | // /proc). | COMMENT |
| LOW | package-builder/sandbox.c | 61 | static pthread_once_t init_once = PTHREAD_ONCE_INIT; | COMMENT |
| LOW | package-builder/sandbox.c | 81 | COMMENT | |
| LOW | package-builder/sandbox.c | 201 | // calls this before consulting sandbox_level or the original function | COMMENT |
| LOW | package-builder/sandbox.c | 221 | // TODO: find way to detect changes in /proc/self/exe rather than | COMMENT |
| LOW | package-builder/sandbox.c | 261 | // be more than enough for most cases. | COMMENT |
| LOW | package-builder/sandbox.c | 501 | return false; | COMMENT |
| LOW | package-builder/sandbox.c | 561 | // fatal on its own: it is context, not the access itself. Whether to abort is | COMMENT |
| LOW | package-builder/sandbox.c | 621 | // on another machine. Any path within the environment's closure is fine, | COMMENT |
| LOW | package-builder/glibc-bindings.h | 1 | #ifndef GLIBC_BINDINGS_H | COMMENT |
| LOW | package-builder/tests/run-tests.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 41 | /// | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 121 | /// ```json | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 141 | /// "title": "Page", | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 201 | /// | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 221 | /// "properties": { | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 241 | /// "format": "date-time" | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 261 | /// }, | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 301 | /// | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 321 | pub detail: ::std::string::String, | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 401 | <D::Error as ::serde::de::Error>::custom(e.to_string()) | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 501 | /// <details><summary>JSON schema</summary> | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 601 | /// <details><summary>JSON schema</summary> | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 621 | /// ], | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 641 | /// "type": [ | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 661 | /// "format": "date-time" | COMMENT |
| LOW | cli/factory-api-v1/src/client.rs | 701 | /// | COMMENT |
| LOW | cli/factory-api-v1/src/hooks.rs | 1 | use std::sync::Arc; | COMMENT |
| LOW | cli/factory-api-v1/src/status.rs | 1 | //! Hand-written, tolerant replacement for the generated `BuildResponse.status` | COMMENT |
| LOW | cli/floxhub-client/src/factory.rs | 41 | /// Deliberately carries no detail: the calling verb knows what it asked | COMMENT |
| LOW | cli/floxhub-client/src/factory.rs | 61 | /// The Flox Factory reported a server-side error (HTTP 5xx, or 422). | COMMENT |
| LOW | cli/floxhub-client/src/factory.rs | 161 | /// a missing build, an auth rejection, a server-side fault, and a 200 whose body | COMMENT |
| LOW | cli/floxhub-client/src/factory.rs | 221 | impl fmt::Display for BuildId { | COMMENT |
| LOW | cli/floxhub-client/src/factory.rs | 241 | /// ANDs across fields (all must match). | COMMENT |
| LOW | cli/floxhub-client/src/factory.rs | 261 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | cli/floxhub-client/src/client.rs | 41 | &api_types::PackageSearchResult { | COMMENT |
| LOW | cli/floxhub-client/src/client.rs | 141 | /// Useful in tests where setup operations should not be captured. | COMMENT |
| LOW | cli/floxhub-client/src/client.rs | 281 | ) -> Result<HashMap<String, Vec<StoreInfo>>, FloxhubClientError>; | COMMENT |
| LOW | cli/floxhub-client/src/client.rs | 1241 | // This does the same as the previous test except for initializing the | COMMENT |
| LOW | cli/floxhub-client/src/accounts.rs | 1 | //! The accounts surface of [`FloxhubClient`](crate::FloxhubClient), | COMMENT |
| LOW | cli/floxhub-client/src/lib.rs | 1 | //! FloxHub SDK client — catalog and factory API surfaces. | COMMENT |
| LOW | cli/floxhub-client/src/lib.rs | 21 | //! let config = FloxhubClientConfig { | COMMENT |
| LOW | cli/floxhub-client/src/mock.rs | 181 | /// whose `when.body` is absent, not valid JSON, or contains none of the | COMMENT |
| LOW | cli/floxhub-client/src/auth/identity.rs | 21 | /// The identity behind a credential. | COMMENT |
| LOW | cli/floxhub-client/src/auth/identity.rs | 41 | } | COMMENT |
| LOW | cli/floxhub-client/src/auth/mod.rs | 1 | //! FloxHub authentication. | COMMENT |
| LOW | cli/floxhub-client/src/auth/auth_context.rs | 1 | //! [`AuthContext`] — the credential threaded through the CLI. | COMMENT |
| LOW | cli/floxhub-client/src/auth/auth_context.rs | 21 | /// interactive recovery is possible. | COMMENT |
| LOW | cli/floxhub-client/src/auth/auth_context.rs | 41 | /// | COMMENT |
| LOW | cli/floxhub-client/src/auth/token/floxhub_token.rs | 121 | /// { | COMMENT |
| LOW | cli/floxhub-client/src/auth/token/floxhub_token.rs | 141 | /// { | COMMENT |
| LOW | cli/floxhub-client/src/auth/token/floxhub_token.rs | 161 | /// "sub": "github|424242", | COMMENT |
| 640 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …st_data/manually_generated/v1_curl_hello/manifest.toml | 7 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM | …st_data/manually_generated/v1_curl_hello/manifest.toml | 16 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM | …st_data/manually_generated/v1_curl_hello/manifest.toml | 27 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM | …st_data/manually_generated/v1_curl_hello/manifest.toml | 34 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM | …st_data/manually_generated/v1_curl_hello/manifest.toml | 48 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …st_data/manually_generated/v1_curl_hello/manifest.toml | 66 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …st_data/manually_generated/v1_curl_hello/manifest.toml | 73 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …st_data/manually_generated/v1_curl_hello/manifest.toml | 83 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM | package-builder/tests/run-tests.sh | 26 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | package-builder/tests/run-tests.sh | 30 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | package-builder/tests/run-tests.sh | 67 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | package-builder/tests/run-tests.sh | 76 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | package-builder/tests/run-tests.sh | 122 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | package-builder/tests/run-tests.sh | 124 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | package-builder/tests/run-tests.sh | 132 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | package-builder/tests/run-tests.sh | 134 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | package-builder/tests/run-tests.sh | 332 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | package-builder/tests/run-tests.sh | 337 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | package-builder/tests/run-tests.sh | 345 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | package-builder/tests/run-tests.sh | 347 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | cli/tests/setup_suite.bash | 272 | # ------------------------ | COMMENT |
| MEDIUM | cli/tests/setup_suite.bash | 370 | # ---------------------------- | COMMENT |
| MEDIUM | cli/tests/test_support.bash | 143 | # ---------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-manifest/src/lib.rs | 2 | //! ┌───────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | cli/flox-manifest/src/lib.rs | 11 | //! via serde will have a different │ ┌──Validated───────►TypedOnly │ | COMMENT |
| MEDIUM⚡ | cli/flox-manifest/src/lib.rs | 13 | //! comments, and won't have a │ │ │ ┌──────────┘ │ │ | COMMENT |
| MEDIUM⚡ | cli/flox-manifest/src/lib.rs | 15 | //! dealbreaker. │ │ Migrated───────► MigratedTypedOnly │ | COMMENT |
| MEDIUM⚡ | cli/flox-manifest/src/lib.rs | 19 | //! └───────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 457 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 466 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 475 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 482 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 514 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 521 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 531 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 583 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 592 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 601 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 608 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 640 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 647 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 657 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 712 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 721 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 730 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 737 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 836 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 845 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 854 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 861 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 949 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 958 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 967 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 974 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 1006 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 1013 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | cli/flox-rust-sdk/src/providers/manifest_init.rs | 1023 | ## ------------------------------------------------------------------ | COMMENT |
| MEDIUM | cli/flox-rust-sdk/src/providers/manifest_init.rs | 83 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM | cli/flox-rust-sdk/src/providers/manifest_init.rs | 139 | ## ------------------------------------------------------------------- | COMMENT |
| MEDIUM | cli/flox-rust-sdk/src/providers/manifest_init.rs | 156 | ## ------------------------------------------------------------------- | COMMENT |
| 27 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cli/floxhub-client/src/mock.rs | 261 | /// shape ever drifted. Stripping wherever the keys appear is the more robust | COMMENT |
| MEDIUM | cli/tests/shell-state-restoration/dump.zsh | 12 | # Only true shell internals and host/harness noise are filtered here; | COMMENT |
| MEDIUM | cli/tests/shell-state-restoration/dump.bash | 17 | # Only true shell internals and host/harness noise are filtered here; | COMMENT |
| LOW | …lox-rust-sdk/src/providers/services/process_compose.rs | 68 | #[error("{0}")] // just pass through whatever the message is | COMMENT |
| MEDIUM | cli/flox-rust-sdk/src/models/environment/generations.rs | 92 | /// Essentially the branches in a Floxmeta repository. | COMMENT |
| MEDIUM | cli/flox/src/commands/install.rs | 516 | // Essentially we're going to convert the `PackageNotFound` variants into | COMMENT |
| MEDIUM | cli/flox/src/commands/containerize/mod.rs | 359 | /// Essentially spawns a `docker load` or `podman load` process | COMMENT |
| MEDIUM | cli/flox/src/commands/services/mod.rs | 202 | /// but this may change in the future for a more robust solution. | COMMENT |
| MEDIUM | cli/flox/src/commands/services/mod.rs | 259 | /// may not be the most robust solution, but is currently used consistently. | COMMENT |
| MEDIUM | .github/workflows/claude-review.yml | 11 | # effort, harness and prompt, with no inline-comment tooling. Use it for | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cli/flox-rust-sdk/src/models/environment/uninstall.rs | 212 | /// The purpose of this function is to determine the _new_ list of outputs | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 87 | // Step 3: Setup root span with PID, so that logs contain PID. | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 94 | // Step 4: Setup Sentry, so that we get exception reports. | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 99 | // Step 5: Catch errors from sub-reaper and setsid. | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 109 | // Step 6: Set up signal handlers (among other watchers). | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 116 | // Step 7: Signal SIGUSR1 when all setup and possible errors have passed. | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 120 | // Step 8: Spawn non-essential GC threads | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 124 | // Step 9: Enter the monitoring loop | COMMENT |
| LOW | cli/flox-activations/src/cli/executive/mod.rs | 62 | // Step 1: Extract context which we need to do anything. | COMMENT |
| LOW | cli/flox-activations/src/cli/executive/mod.rs | 75 | // Step 2: Setup logger, so that we can record errors. | COMMENT |
| LOW | cli/flox/src/commands/run.rs | 257 | // Step 1: scan flags until we see `--` or the first positional. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cli/tests/setup_suite.bash | 229 | # Create a GPG key to test commit signing. | COMMENT |
| MEDIUM | cli/tests/setup_suite.bash | 252 | # Create a temporary `gitconfig' suitable for this test suite. | COMMENT |
| MEDIUM | cli/tests/setup_suite.bash | 260 | # Create a temporary `ssh' key for use by `git'. | COMMENT |
| MEDIUM | cli/tests/test_support.bash | 194 | # Create a set of dotfiles to simulate the sorts of things users can do that | COMMENT |
| MEDIUM | cli/flox-rust-sdk/src/providers/build.rs | 3522 | # Create a valid executable in $out/bin for a clean build. | COMMENT |
| MEDIUM | buildenv/builder.pl | 404 | # Create the symlinks. | COMMENT |
| MEDIUM | buildenv/builder.pl | 846 | # Create the symlinks. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 87 | // Step 3: Setup root span with PID, so that logs contain PID. | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 94 | // Step 4: Setup Sentry, so that we get exception reports. | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 99 | // Step 5: Catch errors from sub-reaper and setsid. | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 109 | // Step 6: Set up signal handlers (among other watchers). | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 116 | // Step 7: Signal SIGUSR1 when all setup and possible errors have passed. | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 120 | // Step 8: Spawn non-essential GC threads | COMMENT |
| LOW⚡ | cli/flox-activations/src/cli/executive/mod.rs | 124 | // Step 9: Enter the monitoring loop | COMMENT |
| LOW | cli/flox-activations/src/cli/executive/mod.rs | 62 | // Step 1: Extract context which we need to do anything. | COMMENT |
| LOW | cli/flox-activations/src/cli/executive/mod.rs | 75 | // Step 2: Setup logger, so that we can record errors. | COMMENT |
| LOW | cli/flox/src/commands/run.rs | 257 | // Step 1: scan flags until we see `--` or the first positional. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 42 | **Flox is a software environment platform for engineering teams** that delivers cryptographically pinned, reproducible e | CODE |
| MEDIUM | README.md | 145 | | **AI-ready** | Works with Claude Code, Cursor, Copilot, and Codex | Give AI coding agents a deterministic, reproducibl | CODE |
| MEDIUM | cli/flox-rust-sdk/src/utils/invocation_sources.rs | 31 | // Other agentic tools | COMMENT |
| MEDIUM | cli/flox-rust-sdk/src/utils/invocation_sources.rs | 69 | /// 2. Inference heuristics for CI, containerd, agentic tooling, and other contexts | COMMENT |
| MEDIUM | cli/flox-rust-sdk/src/utils/invocation_sources.rs | 87 | // Apply all inference heuristics (CI, containerd, agentic tools, etc.) | COMMENT |
| MEDIUM | cli/flox-rust-sdk/src/utils/invocation_sources.rs | 271 | // CI + containerd + agentic — all preserved | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | cli/flox-manifest/src/raw/mod.rs | 913 | self.inner.migrated_parsed.options.systems.as_ref(), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | cli/flox-manifest/src/lockfile/flake.rs | 57 | /// List of output names to install as requested by the user | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cli/tests/shell-state-restoration/dump.zsh | 16 | # Usage: | COMMENT |
| LOW | cli/tests/shell-state-restoration/dump.bash | 12 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cli/flox-rust-sdk/src/models/environment/mod.rs | 71 | // don't forget to update the man page | COMMENT |
| LOW | cli/flox-rust-sdk/src/models/environment/mod.rs | 73 | // don't forget to update the man page | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | buildenv/builder.pl | 888 | # Close the file | COMMENT |