Repository Analysis

gofiber/fiber

⚡️ Express inspired web framework written in Go

3.2 Likely human-written View on GitHub
3.2
Adjusted Score
3.2
Raw Score
100%
Time Factor
2026-05-29
Last Push
39,788
Stars
Go
Language
145,094
Lines of Code
391
Files
233
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 21HIGH 0MEDIUM 0LOW 212

Pattern Findings

233 matches across 5 categories. Click a row to expand file-level details.

Hallucination Indicators21 hits · 250 pts
SeverityFileLineSnippet
CRITICALres.go144 h := r.c.app.toString(r.c.fasthttp.Response.Header.Peek(field))
CRITICALres.go335 r.c.fasthttp.Response.Header.SetCookie(fcookie)
CRITICALres.go394 r.c.fasthttp.Response.Header.SetContentType(handlers[0].MediaType)
CRITICALres.go422 r.c.fasthttp.Response.Header.SetContentType(h.MediaType)
CRITICALres.go478 return defaultString(r.c.app.toString(r.c.fasthttp.Response.Header.Peek(key)), defaultValue)
CRITICALres.go582 r.c.fasthttp.Response.Header.SetContentType(MIMETextJavaScriptCharsetUTF8)
CRITICALres.go769 r.c.fasthttp.Response.Header.Add("Link", h)
CRITICALres.go1005 r.c.fasthttp.Response.Header.Set(key, val)
CRITICALres.go1009 r.c.fasthttp.Response.Header.SetCanonical(utils.UnsafeBytes(key), utils.UnsafeBytes(val))
CRITICALres.go1038 r.c.fasthttp.Response.Header.SetContentType(mimeType + "; charset=" + charset[0])
CRITICALres.go1042 r.c.fasthttp.Response.Header.SetContentType(mimeType + "; charset=utf-8")
CRITICALres.go1044 r.c.fasthttp.Response.Header.SetContentType(mimeType)
CRITICALreq.go52 header := joinHeaderValues(r.c.fasthttp.Request.Header.PeekAll(HeaderAccept))
CRITICALreq.go58 header := joinHeaderValues(r.c.fasthttp.Request.Header.PeekAll(HeaderAcceptCharset))
CRITICALreq.go64 header := joinHeaderValues(r.c.fasthttp.Request.Header.PeekAll(HeaderAcceptEncoding))
CRITICALreq.go71 header := joinHeaderValues(r.c.fasthttp.Request.Header.PeekAll(HeaderAcceptLanguage))
CRITICALreq.go78 header := joinHeaderValues(r.c.fasthttp.Request.Header.PeekAll(HeaderAcceptLanguage))
CRITICALreq.go345 return defaultString(r.c.app.toString(r.c.fasthttp.Request.Header.Cookie(key)), defaultValue)
CRITICALreq.go689 ct := r.c.app.toString(r.c.fasthttp.Request.Header.ContentType())
CRITICALreq.go768 return r.c.app.toString(r.c.fasthttp.Request.Header.RequestURI())
CRITICALreq.go866 return r.c.app.toString(r.c.fasthttp.Request.Header.Protocol())
Over-Commented Block180 hits · 176 pts
SeverityFileLineSnippet
LOWreq_interface_gen.go21 AcceptsLanguages(offers ...string) string
LOWreq_interface_gen.go41 // RequestCtx returns *fasthttp.RequestCtx that carries a deadline
LOWreq_interface_gen.go61 // If a default value is given, it will return that value if the form value does not exist.
LOWreq_interface_gen.go81 // Make copies or use the Immutable setting instead.
LOWreq_interface_gen.go101 // Please use Config.TrustProxy to prevent header spoofing if your app is behind a proxy.
LOWreq_interface_gen.go121 // RequestHandler. Additionally, Close method is called on each value
LOWreq_interface_gen.go141 // Scheme contains the request protocol string: http or https for TLS requests.
LOWreq_interface_gen.go161 // Queries()["field2"] == "value3"
LOWregister.go41// })
LOWdomain.go221// DomainParam returns the value of a domain parameter from the context.
LOWdomain.go241
LOWcolor.go1// ⚡️ Fiber is an Express inspired web framework written in Go with ☕️
LOWcolor.go21 // Optional. Default: "\u001b[92m"
LOWres.go21 "github.com/gofiber/utils/v2"
LOWres.go41
LOWctx_interface_gen.go21 // BaseURL returns (protocol + host + base path).
LOWctx_interface_gen.go41 // The close of the Done channel may happen asynchronously,
LOWctx_interface_gen.go61 Response() *fasthttp.Response
LOWctx_interface_gen.go81 // Returned value is only valid within the handler. Do not store any references.
LOWctx_interface_gen.go101 RequestID() string
LOWctx_interface_gen.go121 Matched() bool
LOWctx_interface_gen.go141 Status(status int) Ctx
LOWctx_interface_gen.go161 // returned to the pool when ReleaseCtx is called.
LOWctx_interface_gen.go221 AcceptsJSON() bool
LOWctx_interface_gen.go241 // Returned value is only valid within the handler. Do not store any references.
LOWctx_interface_gen.go261 FormFile(key string) (*multipart.FileHeader, error)
LOWctx_interface_gen.go281 // while `Hostname` refers specifically to the name assigned to a device on a network, excluding any port information.
LOWctx_interface_gen.go301 // extractIPFromHeader will attempt to pull the real client IP from the given header when IP validation is enabled.
LOWctx_interface_gen.go321 // Otherwise, it updates the context's method and returns the overridden method as a string.
LOWctx_interface_gen.go341 // Make copies or use the Immutable setting to use the value outside the Handler.
LOWctx_interface_gen.go361 // Queries()["filters.category.name"] == "Technology"
LOWctx_interface_gen.go381 getBody() []byte
LOWctx_interface_gen.go401 // that default handler is called. If no format is found and no default is given,
LOWctx_interface_gen.go421 // Content-Type header equal to ctype. If ctype is not given,
LOWctx_interface_gen.go441 // Nil receivers and missing routes return ErrNotFound to match Route.URL semantics.
LOWctx_interface_gen.go461 SendEarlyHints(hints []string) error
LOWctx_interface_gen.go481 Type(extension string, charset ...string) Ctx
LOWgroup.go41 if err := grp.app.hooks.executeOnGroupNameHooks(*grp); err != nil {
LOWgroup.go201}
LOWapp.go41
LOWapp.go181 // When set to true, enables case-sensitive routing.
LOWapp.go201
LOWapp.go221
LOWapp.go241
LOWapp.go261 WriteTimeout time.Duration `json:"write_timeout"`
LOWapp.go281
LOWapp.go301 // Default: false
LOWapp.go321 //
LOWapp.go341
LOWapp.go361 // Server pre parses multipart form data by default.
LOWapp.go381 JSONEncoder utils.JSONMarshal `json:"-"`
LOWapp.go401 // Default: binder.UnimplementedMsgpackUnmarshal
LOWapp.go421 // Allowing for flexibility in using another XML library for encoding
LOWapp.go441 // 1. c.Scheme() get value from X-Forwarded-Proto, X-Forwarded-Protocol, X-Forwarded-Ssl or X-Url-Scheme header
LOWapp.go461 TrustProxyConfig TrustProxyConfig `json:"trust_proxy_config"`
LOWapp.go481 // RequestMethods provides customizability for HTTP methods. You can add/remove methods as you wish.
LOWapp.go501 ServicesStartupContextProvider func() context.Context
LOWapp.go521 // })
LOWapp.go541 //
LOWapp.go621 c.Set(HeaderContentType, MIMETextPlainCharsetUTF8)
120 more matches not shown…
Fake / Example Data25 hits · 26 pts
SeverityFileLineSnippet
LOWbind_test.go656 c.Request().Header.Add("Name", "John Doe")
LOWbind_test.go685 c.Request().Header.Add("Name", "Jane Doe")
LOWbind_test.go698 require.Equal(t, "Jane Doe", h2.Name) // check value get overwritten
LOWbind_test.go727 c.Request().Header.Add("Name", "John Doe")
LOWbind_test.go914 c.Response().Header.Add("Name", "John Doe")
LOWbind_test.go943 c.Response().Header.Add("Name", "Jane Doe")
LOWbind_test.go956 require.Equal(t, "Jane Doe", h2.Name) // check value get overwritten
LOWbind_test.go985 c.Response().Header.Add("Name", "John Doe")
LOWbind_test.go1146 c.Request().Header.Add("Name", "John Doe")
LOWbind_test.go1167 c.Request().Header.Add("Name", "John Doe")
LOWbind_test.go1194 c.Response().Header.Add("Name", "John Doe")
LOWbind_test.go1215 c.Response().Header.Add("Name", "John Doe")
LOWbind_test.go1867 c.Request().Header.SetCookie("Name", "John Doe")
LOWbind_test.go1896 c.Request().Header.SetCookie("Name", "Jane Doe")
LOWbind_test.go1909 require.Equal(t, "Jane Doe", h2.Name) // check value get overwritten
LOWbind_test.go1940 c.Request().Header.SetCookie("Name", "John Doe")
LOWbind_test.go2127 c.Request().Header.SetCookie("Name", "John Doe")
LOWbind_test.go2150 c.Request().Header.SetCookie("Name", "John Doe")
LOWdocs/middleware/session.md161 if email == "admin@example.com" && password == "secret" {
LOWdocs/middleware/session.md741 if email != "user@example.com" || password != "password" {
LOWdocs/middleware/session.md774 return email == "user@example.com" && password == "password"
LOWdocs/api/ctx.md2036 user := User{"John Doe"}
LOWdocs/api/ctx.md2040 // => {"Name":"John Doe"}
LOWdocs/client/request.md452 Name: "John Doe",
LOWdocs/client/request.md475 "Name": "John Doe"
Verbosity Indicators5 hits · 8 pts
SeverityFileLineSnippet
LOWredirect_test.go599 // Step 1: Make the initial request to the source route
LOWredirect_test.go617 // Step 2: Make the second request to the target route with the cookie
LOWredirect_test.go665 // Step 1: Make the initial request
LOWredirect_test.go682 // Step 2: Make the second request with the cookie
LOWhelpers.go320 // Step 2: first subtag must match (or be '*')
Example Usage Blocks2 hits · 3 pts
SeverityFileLineSnippet
LOWreq.go925// Example usage:
LOWextractors/extractors.go9// Example usage: