guzzle/guzzle

Pattern Findings

The scanner identified 1757 distinct pattern matches across 3 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers1750 hits · 1296 pts

Severity	File	Line	Snippet	Context
LOW	tests/HandlerStackTest.php	29	public function testCanSetDifferentHandlerAfterConstruction(): void	CODE
LOW	tests/HandlerStackTest.php	46	public function testResolveRejectsNonCallableHandler(): void	CODE
LOW	tests/HandlerStackTest.php	63	public function testResolveRejectsNonCallableMiddleware(): void	CODE
LOW⚡	tests/HandlerStackTest.php	82	public function testRejectsNativePhpUnserialization(): void	CODE
LOW⚡	tests/HandlerStackTest.php	92	public function testRejectsNativePhpUnserializationWithRuntimeClassName(): void	CODE
LOW⚡	tests/HandlerStackTest.php	102	public function testResolveRejectsMiddlewareReturningNonCallable(): void	CODE
LOW	tests/HandlerStackTest.php	133	public function testUnshiftsInReverseOrder(): void	CODE
LOW	tests/HandlerStackTest.php	149	public function testCanRemoveMiddlewareByInstance(): void	CODE
LOW	tests/HandlerStackTest.php	164	public function testCanRemoveMiddlewareByCallableStringName(): void	CODE
LOW	tests/HandlerStackTest.php	178	public function testCanRemoveMiddlewareByCallableStringInstance(): void	CODE
LOW	tests/HandlerStackTest.php	192	public function testRemovePrefersNameWhenStringIsAlsoCallable(): void	CODE
LOW	tests/HandlerStackTest.php	209	public function testRemoveRejectsNonStringNonCallable(): void	CODE
LOW	tests/HandlerStackTest.php	236	public function testEnsuresHandlerExistsByName(): void	CODE
LOW	tests/HandlerStackTest.php	263	public function testPicksUpCookiesFromRedirects(): void	CODE
LOW⚡	tests/BodySummarizerTest.php	15	public function testSummarizeReadsFromStartAndRestoresBodyCursor(): void	CODE
LOW⚡	tests/BodySummarizerTest.php	25	public function testSummarizeWithCustomTruncationRestoresBodyCursor(): void	CODE
LOW⚡	tests/BodySummarizerTest.php	35	public function testSummarizeReturnsNullWhenBodySummaryFails(): void	CODE
LOW	tests/BodySummarizerTest.php	47	public function testSummarizePropagatesBodySummaryError(): void	CODE
LOW	tests/AuthMiddlewareTest.php	57	public function testRejectsInvalidBasicAuth(array $auth, string $message): void	CODE
LOW	tests/AuthMiddlewareTest.php	76	public function testBasicAuthReplacesExistingAuthorizationHeader(): void	CODE
LOW	tests/AuthMiddlewareTest.php	89	public function testCustomAuthStringPassesThrough(): void	CODE
LOW	tests/AuthMiddlewareTest.php	100	public function testHandlesDigestChallenge(): void	CODE
LOW	tests/AuthMiddlewareTest.php	130	public function testDigestAuthIntOnlyChallengeDoesNotRetry(): void	CODE
LOW	tests/AuthMiddlewareTest.php	147	public function testDigestUnsafeUsernameReturnsChallengeWithoutRetry(): void	CODE
LOW	tests/AuthMiddlewareTest.php	164	public function testDigestUnsafeCnonceReturnsChallengeWithoutRetry(): void	CODE
LOW	tests/AuthMiddlewareTest.php	183	public function testDigestStaleChallengeRetriesOnceMore(): void	CODE
LOW	tests/AuthMiddlewareTest.php	216	public function testDigestProbeOmitsRequestBodyAndEntityHeaders(): void	CODE
LOW	tests/AuthMiddlewareTest.php	257	public function testDigestProbeStripsPayloadDescriptorHeaders(): void	CODE
LOW	tests/AuthMiddlewareTest.php	302	public function testDigestProbeUsesConfiguredStreamFactory(): void	CODE
LOW	tests/AuthMiddlewareTest.php	332	public function testDigestWithNonSeekableRequestBodySucceeds(): void	CODE
LOW	tests/AuthMiddlewareTest.php	358	public function testDigestWithNonTellableRequestBodySucceeds(): void	CODE
LOW	tests/AuthMiddlewareTest.php	389	public function testDigestProbeRewindsPrePositionedSeekableBody(): void	CODE
LOW	tests/AuthMiddlewareTest.php	417	public function testDigestProbeStripsBodyWhenSizeCannotBeDetermined(): void	CODE
LOW	tests/AuthMiddlewareTest.php	451	public function testDigestStaleRetryRewindsAndResendsSeekableBody(): void	CODE
LOW	tests/AuthMiddlewareTest.php	482	public function testDigestStaleRetryStillFailsWhenConsumedBodyCannotRewind(): void	CODE
LOW	tests/AuthMiddlewareTest.php	518	public function testDigestUnchallengedBodyWithheldProbeRejects(ResponseInterface $probeResponse): void	CODE
LOW	tests/AuthMiddlewareTest.php	534	public static function nonRedirectLikeProbeResponseProvider(): iterable	CODE
LOW	tests/AuthMiddlewareTest.php	543	public function testDigestUnchallengedBodyWithheldProbeRejectsAfterRestoringSink(): void	CODE
LOW	tests/AuthMiddlewareTest.php	571	public function testDigestUnchallengedProbeWithoutBodyReturnsResponse(): void	CODE
LOW	tests/AuthMiddlewareTest.php	597	public function testDigestRedirectLikeProbeResponsePassesThrough(): void	CODE
LOW	tests/AuthMiddlewareTest.php	612	public function testDigestProbeOmitsBodyThroughDefaultStack(): void	CODE
LOW	tests/AuthMiddlewareTest.php	643	public function testDigestProbeDoesNotRegainExpectWithUnknownSizeProbeStream(): void	CODE
LOW	tests/AuthMiddlewareTest.php	694	public function testDigestHandshakeRepeatsAfterBodyPreservingRedirect(): void	CODE
LOW	tests/AuthMiddlewareTest.php	730	public function testDigestHandshakeRunsAfterBodyWithheldProbeRedirect(int $statusCode): void	CODE
LOW	tests/AuthMiddlewareTest.php	764	public static function bodyPreservingRedirectStatusProvider(): iterable	CODE
LOW	tests/AuthMiddlewareTest.php	773	public function testDigestHandshakeRunsAfterMethodRewritingProbeRedirect(int $statusCode): void	CODE
LOW	tests/AuthMiddlewareTest.php	810	public static function methodRewritingRedirectStatusProvider(): iterable	CODE
LOW	tests/AuthMiddlewareTest.php	817	public function testDigestGetWithBodyProbesBodyless(): void	CODE
LOW	tests/AuthMiddlewareTest.php	842	public function testDigestZeroSizeNonTellableRequestBodySucceeds(): void	CODE
LOW	tests/AuthMiddlewareTest.php	874	public function testDigestBodyRewindFailureRejects(): void	CODE
LOW	tests/AuthMiddlewareTest.php	899	public function testDigestBodyRewindFailureRestoresOriginalSink(): void	CODE
LOW	tests/AuthMiddlewareTest.php	940	public function testDigestBodyRewindErrorPropagates(): void	CODE
LOW	tests/AuthMiddlewareTest.php	977	public function testDigestDoesNotWriteChallengeBodyToUserSink(): void	CODE
LOW	tests/AuthMiddlewareTest.php	1002	public function testDigestTemporarySinkUsesConfiguredStreamFactory(): void	CODE
LOW	tests/AuthMiddlewareTest.php	1031	public function testDigestRestoredResourceSinkDetachesOnClose(): void	CODE
LOW	tests/AuthMiddlewareTest.php	1059	public function testDigestChallengeBodyDoesNotReachSinkWhenStreamRequested(): void	CODE
LOW	tests/AuthMiddlewareTest.php	1086	public function testDigestChallengeBodyDoesNotReachStreamSinkWhenStreamRequested(): void	CODE
LOW	tests/AuthMiddlewareTest.php	1107	public function testDigestRestoreDrainsStreamedBodyIntoSinkWhenHandlerHonorsStream(): void	CODE
LOW	tests/AuthMiddlewareTest.php	1141	public function testDigestRetriesDoNotReapplyDelay(): void	CODE
LOW	tests/AuthMiddlewareTest.php	1175	public function testDigestSinkRestoreFailureRejectsWithResponseException(): void	CODE
1690 more matches not shown…

Over-Commented Block6 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	src/Handler/CurlFactory.php	1241	// Two transfer outcomes warrant rewinding the body and retrying:	COMMENT
LOW	src/Handler/CurlFactory.php	2081	}	COMMENT
LOW	src/Handler/CurlFactory.php	2801	throw new InvalidArgumentException('progress client option must be callable');	COMMENT
LOW	src/Handler/CurlVersion.php	21	// multiplexed by default since 7.62.0 - but a 7.65.0-7.65.1 regression	COMMENT
LOW	src/Handler/CurlVersion.php	41	// lower-version connections to prior-knowledge transfers in 8.14.0; below	COMMENT
LOW	src/Handler/CurlVersion.php	81	// curl 8.22.0 applies the cURL multi connection caps from the transfer's	COMMENT

Fake / Example Data1 hit · 0 pts

Severity	File	Line	Snippet	Context
LOW	tests/Auth/DigestAuthTest.php	406	'WWW-Authenticate' => 'Digest realm="api@example.org", qop="auth", algorithm=SHA-512-256, nonce="5TsQWLVdgBd	CODE

Maintenance and Governance Review

Risk Review · v3

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings