Instant is the best backend for AI-coded apps. You get auth, permissions, storage, presence, and streams — everything you need to ship apps your users will love.
This report summarizes scanner evidence for instantdb/instant, a TypeScript project with 10,565 GitHub stars. SynthScan examined 348,404 lines of code across 1799 source files, recording 418 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 1.5 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 314 finding(s).
Are imports declared and package/API names verified? 70 finding(s).
Are wrappers, guards, and repeated structures necessary? 297 finding(s).
Which changes need focused human review? 418 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 418 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | server/scripts/tests/test_host_diagnostics.py | 69 | def test_process_stat_handles_parentheses_and_spaces(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 75 | def test_host_and_process_deltas_have_correct_units(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 93 | def test_missing_counters_and_reset_counters_are_not_zero_deltas(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 103 | def test_inaccessible_process_io_preserves_other_evidence(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 115 | def test_pid_reuse_does_not_attribute_old_io_to_new_process(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 121 | def test_new_reader_is_visible_without_inventing_a_rate(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 132 | def test_partial_cpu_counter_reset_omits_cpu_rate(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 140 | def test_pid_reuse_during_scan_is_discarded(self): | CODE |
| LOW⚡ | server/scripts/tests/test_host_diagnostics.py | 152 | def test_missing_sample_requires_new_process_io_baseline(self): | CODE |
| LOW⚡ | server/scripts/tests/test_host_diagnostics.py | 159 | def test_boot_identity_change_clears_baselines(self): | CODE |
| LOW⚡ | server/scripts/tests/test_host_diagnostics.py | 167 | def test_selection_is_bounded_and_keeps_services(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 185 | def test_cgroup_io_captures_short_lived_processes_without_duplicate_scopes(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 196 | def test_missing_host_source_is_explicit_and_does_not_stop_sample(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 208 | def test_installation_failure_does_not_fail_deployment(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 230 | def test_rotation_retains_only_complete_lines_within_bound(self): | CODE |
| LOW | server/scripts/tests/test_host_diagnostics.py | 246 | def test_oversized_sample_cannot_exceed_disk_bound(self): | CODE |
| LOW | examples/vercel-ai-sdk/src/lib/refreshPreviewApp.ts | 16 | export async function refreshPreviewAppIfNeeded(chatId: string) { | CODE |
| LOW | examples/ai-chat/src/lib/mockModel.ts | 22 | async function getRandomWikipediaArticle(): Promise<{ | CODE |
| LOW | client/www/app/getadb/provision/[token]/route.ts | 49 | function placeholderNotReplacedMarkdown(): string { | CODE |
| LOW | …ponents/product/sync/OfflinePersistenceWalkthrough.tsx | 580 | export function OfflinePersistenceWalkthrough() { | CODE |
| LOW | …ponents/product/sync/ConflictResolutionWalkthrough.tsx | 297 | export function ConflictResolutionWalkthrough() { | CODE |
| LOW | client/www/components/dash/OAuthApps.tsx | 691 | function AuthorizedRedirectUrlsInput({ | CODE |
| LOW | client/www/components/dash/BackupDownloadDialog.tsx | 46 | async function registerDownloadServiceWorker(): Promise<void> { | CODE |
| LOW | …ent/www/components/dash/PersonalAccessTokensScreen.tsx | 29 | async function fetchPersonalAccessTokens( | CODE |
| LOW | …ent/www/components/dash/PersonalAccessTokensScreen.tsx | 46 | async function createPersonalAccessToken( | CODE |
| LOW | …ent/www/components/dash/PersonalAccessTokensScreen.tsx | 65 | async function deletePersonalAccessToken( | CODE |
| LOW | client/www/components/dash/auth/Email.tsx | 669 | function MagicCodeExpirationSection({ app }: { app: InstantApp }) { | CODE |
| LOW | client/www/lib/auth.ts | 27 | function recordLoggedInStateInCookie(authInfo: AuthInfo) { | CODE |
| LOW | client/www/lib/auth.ts | 224 | export async function exchangeOAuthCodeForToken({ code }: { code: string }) { | CODE |
| LOW | client/www/lib/hooks/useCustomSenderVerification.ts | 32 | function sendSenderVerificationCode({ | CODE |
| LOW | client/www/lib/hooks/useCustomSenderVerification.ts | 47 | function verifySenderVerificationCode({ | CODE |
| LOW | client/www/pages/labs/oauth_apps_demo.tsx | 468 | function CreateAuthorizationUrlStep({ | CODE |
| LOW | client/www/pages/intern/overview.tsx | 185 | function flattenedProxiedConnections( | CODE |
| LOW | client/www/pages/intern/deployment-settings.tsx | 290 | function InstantConfigSettingsContent({ | CODE |
| LOW | client/www/pages/intern/deployment-settings.tsx | 882 | function DeploymentSettingsContent() { | CODE |
| LOW | client/sandbox/solid-vite/src/lib/db.ts | 49 | async function getOrCreateApp(): Promise<EphemeralApp> { | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 47 | def test_check_magic_code_round_trip(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 59 | def test_create_and_verify_token_round_trip(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 73 | def test_transact_query_delete_cycle(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 88 | def test_link_and_nested_query_via_chained_ops(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 116 | def test_debug_query_returns_check_results(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 126 | def test_storage_upload_bytes(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 158 | def test_rooms_get_presence_returns_dict(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 167 | def test_invalid_app_id_raises_parsed_error(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 186 | def test_webhooks_create_list_delete(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 203 | def test_webhooks_process_payload_dispatches_to_sync_handler(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 229 | def test_webhooks_validate_with_fixture(db: Instant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 240 | def test_webhooks_validate_rejects_tampered(db: Instant) -> None: | CODE |
| LOW⚡ | client/sandbox/admin-sdk-python/src/main.py | 215 | async def test_as_guest_query_doesnt_crash(db: AsyncInstant) -> None: | CODE |
| LOW⚡ | client/sandbox/admin-sdk-python/src/main.py | 222 | async def test_debug_query_returns_check_results(db: AsyncInstant) -> None: | CODE |
| LOW⚡ | client/sandbox/admin-sdk-python/src/main.py | 230 | async def test_debug_transact_returns_check_results(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 35 | async def test_check_magic_code_round_trip(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 47 | async def test_create_and_verify_token_round_trip(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 74 | async def test_sign_out_does_not_error(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 87 | async def test_transact_query_delete_cycle(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 104 | async def test_link_and_nested_query_via_chained_ops(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 130 | async def test_unlink_removes_the_link(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 164 | async def test_create_succeeds_new_eid_fails_existing(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 182 | async def test_tx_rule_params_op_accepted_by_server(db: AsyncInstant) -> None: | CODE |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 193 | async def test_merge_preserves_other_keys(db: AsyncInstant) -> None: | CODE |
| 201 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | server/scripts/clone_app.sh | 4 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | server/scripts/clone_app.sh | 20 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | client/www/components/new-landing/BatteriesForAI.tsx | 18 | // ─── Auth Demo ─────────────────────────────────────────── | COMMENT |
| MEDIUM | client/www/components/new-landing/BatteriesForAI.tsx | 263 | // ─── Permissions Demo ──────────────────────────────────── | COMMENT |
| MEDIUM | client/www/components/new-landing/BatteriesForAI.tsx | 422 | // ─── Storage Demo ──────────────────────────────────────── | COMMENT |
| MEDIUM | client/www/components/new-landing/BatteriesForAI.tsx | 794 | // ─── Main Export ────────────────────────────────────────── | COMMENT |
| MEDIUM | client/www/components/new-landing/StreamsDemoJoin.tsx | 6 | // ─── Pre-defined doodle: Instant logo ─────────────────── | COMMENT |
| MEDIUM | client/www/components/new-landing/StreamsDemoJoin.tsx | 39 | // ─── Drawing helpers ──────────────────────────────────── | COMMENT |
| MEDIUM | client/www/components/new-landing/StreamsDemoJoin.tsx | 151 | // ─── StreamsDemo class ────────────────────────────────── | COMMENT |
| MEDIUM | client/www/components/new-landing/StreamsDemoJoin.tsx | 591 | // ─── StreamsDemoJoin component ─────────────────────────── | COMMENT |
| MEDIUM | …nt/www/components/new-landing/OfflineDemoReactions.tsx | 27 | // ─── Rolling digit counter ────────────────────────────────────────── | COMMENT |
| MEDIUM | …ww/components/product/database/ArchDiagramAnimated.tsx | 6 | // ─── Shared ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …ww/components/product/database/ArchDiagramAnimated.tsx | 16 | // ─── SVG pieces ───────────────────────────────────────── | COMMENT |
| MEDIUM | …ww/components/product/database/ArchDiagramAnimated.tsx | 261 | // ─── Layout data ──────────────────────────────────────── | COMMENT |
| MEDIUM | …ww/components/product/database/ArchDiagramAnimated.tsx | 284 | // ─── Component ────────────────────────────────────────── | COMMENT |
| MEDIUM | …nt/sandbox/react-nextjs/pages/bugs/reactivity-loss.tsx | 36 | // ── Actions ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …nt/sandbox/react-nextjs/pages/bugs/reactivity-loss.tsx | 97 | // ── Render ─────────────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 13 | CODE | |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 11 | CODE | |
| LOW | client/packages/python/tests/test_logger.py | 3 | CODE | |
| LOW | client/packages/python/scripts/run_unasync.py | 21 | CODE | |
| LOW | client/packages/python/src/instantdb/_io.py | 8 | CODE | |
| LOW | client/packages/python/src/instantdb/_transact.py | 7 | CODE | |
| LOW | client/packages/python/src/instantdb/__init__.py | 12 | CODE | |
| LOW | client/packages/python/src/instantdb/__init__.py | 13 | CODE | |
| LOW | client/packages/python/src/instantdb/__init__.py | 13 | CODE | |
| LOW | client/packages/python/src/instantdb/__init__.py | 14 | CODE | |
| LOW | client/packages/python/src/instantdb/__init__.py | 15 | CODE | |
| LOW | client/packages/python/src/instantdb/__init__.py | 16 | CODE | |
| LOW | client/packages/python/src/instantdb/__init__.py | 16 | CODE | |
| LOW | client/packages/python/src/instantdb/__init__.py | 17 | CODE | |
| LOW | client/packages/python/src/instantdb/_logger.py | 13 | CODE | |
| LOW | …ient/packages/python/src/instantdb/_webhooks_crypto.py | 3 | CODE | |
| LOW | client/packages/python/src/instantdb/_http_errors.py | 6 | CODE | |
| LOW | client/packages/python/src/instantdb/_async/rooms.py | 3 | CODE | |
| LOW | client/packages/python/src/instantdb/_async/auth.py | 3 | CODE | |
| LOW | …ient/packages/python/src/instantdb/_async/subscribe.py | 30 | CODE | |
| LOW | client/packages/python/src/instantdb/_async/client.py | 3 | CODE | |
| LOW | client/packages/python/src/instantdb/_async/http.py | 9 | CODE | |
| LOW | client/packages/python/src/instantdb/_async/storage.py | 8 | CODE | |
| LOW | …ent/packages/python/src/instantdb/_async/_upload_io.py | 10 | CODE | |
| LOW | …ckages/python/src/instantdb/_async/streams/__init__.py | 21 | CODE | |
| LOW | …packages/python/src/instantdb/_async/streams/reader.py | 10 | CODE | |
| LOW | …packages/python/src/instantdb/_async/streams/writer.py | 9 | CODE | |
| LOW | …ges/python/src/instantdb/_async/streams/_connection.py | 13 | CODE | |
| LOW | …kages/python/src/instantdb/_async/webhooks/receiver.py | 12 | CODE | |
| LOW | …kages/python/src/instantdb/_async/webhooks/__init__.py | 3 | CODE | |
| LOW | …kages/python/src/instantdb/_async/webhooks/__init__.py | 5 | CODE | |
| LOW | …kages/python/src/instantdb/_async/webhooks/__init__.py | 6 | CODE | |
| LOW | …ckages/python/src/instantdb/_async/webhooks/manager.py | 9 | CODE | |
| LOW | client/packages/python/src/instantdb/_sync/rooms.py | 5 | CODE | |
| LOW | client/packages/python/src/instantdb/_sync/auth.py | 5 | CODE | |
| LOW | client/packages/python/src/instantdb/_sync/client.py | 5 | CODE | |
| LOW | client/packages/python/src/instantdb/_sync/http.py | 11 | CODE | |
| LOW | client/packages/python/src/instantdb/_sync/storage.py | 10 | CODE | |
| LOW | …ient/packages/python/src/instantdb/_sync/_upload_io.py | 12 | CODE | |
| LOW | …ckages/python/src/instantdb/_sync/webhooks/receiver.py | 14 | CODE | |
| LOW | …ckages/python/src/instantdb/_sync/webhooks/__init__.py | 5 | CODE | |
| LOW | …ckages/python/src/instantdb/_sync/webhooks/__init__.py | 7 | CODE | |
| LOW | …ckages/python/src/instantdb/_sync/webhooks/__init__.py | 8 | CODE | |
| LOW | …ackages/python/src/instantdb/_sync/webhooks/manager.py | 11 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | client/packages/python/tests/test_webhooks_crypto.py | 112 | b'{"payloadUrl": null, "token": "t"}', | CODE |
| HIGH⚡ | client/packages/python/tests/test_webhooks_crypto.py | 114 | b'{"payloadUrl": "x", "token": null}', | CODE |
| HIGH | client/packages/python/tests/test_webhooks_dispatch.py | 171 | """Server contract is `data: []`, but `{"data": null}` shouldn't crash.""" | STRING |
| HIGH | client/packages/python/src/instantdb/_async/rooms.py | 27 | # Server returns {"sessions": null} for empty rooms; normalize to {}. | COMMENT |
| HIGH | client/packages/python/src/instantdb/_sync/rooms.py | 29 | # Server returns {"sessions": null} for empty rooms; normalize to {}. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 18 | ## Step 1: Create App ID | COMMENT |
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 29 | ## Step 2: Create Services ID | COMMENT |
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 39 | ## Step 3: Configure Services ID (Web Popup flow) | COMMENT |
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 53 | ## Step 3: Configure Services ID (Web Redirect flow) | COMMENT |
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 77 | ## Step 3: Configure Services ID (React Native flow) | COMMENT |
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 82 | ## Step 4: Register your OAuth client with Instant | COMMENT |
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 174 | ## Step 5: Add Sign In code to your app (Web Popup flow) | COMMENT |
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 223 | ## Step 5: Add Sign In code to your app (Web Popup flow) | COMMENT |
| LOW | client/www/app/docs/auth/apple/[[...tab]]/page.md | 245 | ## Step 5: Add Sign In code to your app (React Native flow) | COMMENT |
| LOW⚡ | …ckages/components/src/hooks/__tests__/explorer.test.ts | 83 | // Step 1: User types a search, onSearchChange syncs filters to explorer state | COMMENT |
| LOW⚡ | …ckages/components/src/hooks/__tests__/explorer.test.ts | 91 | // Step 2: User clicks relationship link — current state saved to history | COMMENT |
| LOW⚡ | …ckages/components/src/hooks/__tests__/explorer.test.ts | 100 | // Step 3: User hits back — old state restored from history | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | server/vector.yaml | 21 | # https://vector.dev/docs/reference/configuration/transforms/remap/ | COMMENT |
| LOW | server/vector.yaml | 41 | ingestion_time = .timestamp | COMMENT |
| LOW | server/vector.yaml | 61 | # skew). Trade-off: long spans land in the minute their exporter | COMMENT |
| LOW | server/scripts/clone_app.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | examples/ai-chat/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | .github/workflows/clojure.yml | 141 | COMMENT | |
| LOW | client/www/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | client/www/lib/cel.ts | 1 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | client/www/lib/product/storage/musicPreview.ts | 1 | // Audio sources and licenses | COMMENT |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 261 | # Uncomment a call to run it. | COMMENT |
| LOW | client/sandbox/admin-sdk-python/src/main_sync.py | 281 | # # error path: | COMMENT |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 721 | raise AssertionError("expected InstantError on tampered body") | COMMENT |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 741 | # await test_sign_out_does_not_error(db) | COMMENT |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 761 | # # rooms: | COMMENT |
| LOW | client/sandbox/admin-sdk-python/src/main.py | 781 | # # webhooks: | COMMENT |
| LOW | client/sandbox/admin-sdk-express/src/with-schema.ts | 221 | .filter((name) => name.includes(keyword)); | COMMENT |
| LOW | client/packages/core/src/infiniteQuery.ts | 21 | // | COMMENT |
| LOW | client/packages/core/src/infiniteQuery.ts | 41 | // When item 4 is added, the forward chunk subscription gets updated so that | COMMENT |
| LOW | client/packages/core/src/infiniteQuery.ts | 61 | // | COMMENT |
| LOW | client/packages/core/src/utils/PersistedObject.ts | 1 | // PersistedObjects save data outside of memory. | COMMENT |
| LOW | client/packages/python/src/instantdb/_sync/__init__.py | 1 | # AUTOGENERATED from ../_async/. DO NOT EDIT THIS FILE BY HAND. | COMMENT |
| LOW | client/packages/admin/src/index.ts | 261 | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | client/www/app/docs/backend/page.md | 257 | // user: { id: '...', email: 'foo@bar.com', ... }, | COMMENT |
| LOW | client/www/components/essays/sketch/allExactCounts.json | 40215 | "placeholder": 1, | CODE |
| LOW | client/www/components/about/PermissionsDemo.tsx | 79 | email: 'admin@example.com', | CODE |
| LOW | client/www/lib/muxVideos.ts | 1 | // Note: mux lets you specify a 'placeholder' image | COMMENT |
| LOW | client/www/lib/product/database/examples.ts | 148 | "name": "Acme Corp", | CODE |
| LOW | client/www/pages/resources/ui.tsx | 51 | <strong>Lorem ipsum</strong> dolor sit amet{' '} | CODE |
| LOW | client/www/pages/resources/ui.tsx | 51 | <strong>Lorem ipsum</strong> dolor sit amet{' '} | CODE |
| LOW | client/www/pages/resources/ui.tsx | 69 | Lorem ipsum dolor sit amet consectetur adipisicing elit. Doloremque | CODE |
| LOW | client/www/pages/resources/ui.tsx | 69 | Lorem ipsum dolor sit amet consectetur adipisicing elit. Doloremque | CODE |
| LOW | client/www/pages/resources/ui.tsx | 235 | { id: 'org-2', title: 'Acme Corp' }, | CODE |
| LOW | client/sandbox/react-nextjs/pages/play/dev-devtool.tsx | 22 | Lorem ipsum dolor, sit amet consectetur adipisicing elit. Mollitia | CODE |
| LOW | …stant-app/__tests__/e2e/create-instant-app.e2e.test.ts | 295 | 'fake-token', | CODE |
| LOW | …/svelte/src/tests/InstantSvelteDatabase.svelte.test.ts | 396 | authCb!({ user: { id: 'u1', email: 'test@test.com' } }); | CODE |
| LOW | …/svelte/src/tests/InstantSvelteDatabase.svelte.test.ts | 399 | expect(auth.user).toEqual({ id: 'u1', email: 'test@test.com' }); | CODE |
| LOW | client/packages/core/__tests__/src/store.test.ts | 603 | email: 'test@test.com', | CODE |
| LOW | …nt/packages/core/__tests__/src/queryValidation.test.ts | 617 | 'author.name': 'John Doe', | CODE |
| LOW | …ient/packages/vue/src/tests/InstantVueDatabase.test.ts | 239 | authCb!({ user: { id: 'u1', email: 'test@test.com' } }); | CODE |
| LOW | …ient/packages/vue/src/tests/InstantVueDatabase.test.ts | 242 | expect(result.user.value).toEqual({ id: 'u1', email: 'test@test.com' }); | CODE |
| LOW | client/packages/cli/__tests__/e2e/cli.e2e.test.ts | 1248 | INSTANT_APP_ADMIN_TOKEN: 'fake-token', | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | server/infra/jvm_autoscaling.yaml | 81 | except Exception as exc: | CODE |
| LOW | server/infra/jvm_autoscaling.yaml | 189 | except Exception as exc: | CODE |
| LOW | …ient/packages/python/src/instantdb/_async/subscribe.py | 208 | except Exception as e: | CODE |
| LOW | …packages/python/src/instantdb/_async/streams/reader.py | 75 | except Exception: | CODE |
| LOW | …packages/python/src/instantdb/_async/streams/reader.py | 98 | except Exception as e: | CODE |
| LOW | …packages/python/src/instantdb/_async/streams/writer.py | 83 | except Exception: | CODE |
| LOW | …packages/python/src/instantdb/_async/streams/writer.py | 162 | except Exception as e: | CODE |
| LOW | …packages/python/src/instantdb/_async/streams/writer.py | 167 | except Exception as e: | CODE |
| LOW | …packages/python/src/instantdb/_async/streams/writer.py | 252 | except Exception as e: | CODE |
| LOW | …packages/python/src/instantdb/_async/streams/writer.py | 269 | except Exception as e: | CODE |
| LOW | …ges/python/src/instantdb/_async/streams/_connection.py | 235 | except Exception as e: | CODE |
| LOW | …ges/python/src/instantdb/_async/streams/_connection.py | 282 | except Exception as e: | CODE |
| MEDIUM | …ges/python/src/instantdb/_async/streams/_connection.py | 278 | def _do_reconnect(self) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | client/www/app/docs/self-hosting/page.md | 64 | SENDGRID_TOKEN=replace-with-your-api-key | CODE |
| HIGH | client/www/app/docs/self-hosting/page.md | 89 | RESEND_TOKEN=replace-with-your-api-key | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | server/scripts/host_diagnostics.py | 187 | CODE | |
| LOW | server/scripts/host_diagnostics.py | 238 | CODE | |
| LOW | server/scripts/tests/test_host_diagnostics.py | 208 | CODE | |
| LOW | …ient/packages/python/src/instantdb/_async/subscribe.py | 144 | CODE | |
| LOW | …ient/packages/python/src/instantdb/_async/subscribe.py | 199 | CODE | |
| LOW | …packages/python/src/instantdb/_async/streams/reader.py | 184 | CODE | |
| LOW | …packages/python/src/instantdb/_async/streams/writer.py | 171 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …ckages/components/src/hooks/__tests__/explorer.test.ts | 83 | // Step 1: User types a search, onSearchChange syncs filters to explorer state | COMMENT |
| LOW⚡ | …ckages/components/src/hooks/__tests__/explorer.test.ts | 91 | // Step 2: User clicks relationship link — current state saved to history | COMMENT |
| LOW⚡ | …ckages/components/src/hooks/__tests__/explorer.test.ts | 100 | // Step 3: User hits back — old state restored from history | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | server/vector.yaml | 314 | # Test harness assigns a current `.timestamp` automatically; the | COMMENT |
| MEDIUM | server/vector.yaml | 324 | # it stays as the test-harness-assigned ingestion time (a real | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | client/www/_posts/pg_upgrade.md | 455 | [^6]: We did see a note about replication in ["Switchover Guardrails"](https://docs.aws.amazon.com/AmazonRDS/latest/Auro | CODE |
| MEDIUM | client/www/_posts/pg_upgrade.md | 455 | [^6]: We did see a note about replication in ["Switchover Guardrails"](https://docs.aws.amazon.com/AmazonRDS/latest/Auro | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | client/packages/python/src/instantdb/__init__.py | 19 | __all__ = [ | CODE |
| LOW | …ckages/python/src/instantdb/_async/streams/__init__.py | 67 | __all__ = ["AsyncStreamReader", "AsyncStreamWriter", "AsyncStreams"] | CODE |
| LOW | …kages/python/src/instantdb/_async/webhooks/__init__.py | 8 | __all__ = ["AsyncWebhooks", "AsyncWebhooksManager"] | CODE |
| LOW | …ckages/python/src/instantdb/_sync/webhooks/__init__.py | 10 | __all__ = ["Webhooks", "WebhooksManager"] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | server/scripts/mirror_vector.sh | 36 | # Create the repo if it doesn't already exist. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | server/scripts/tests/test_host_diagnostics.py | 16 | CODE | |
| LOW | client/packages/python/src/instantdb/_async/client.py | 32 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ient/sandbox/react-nextjs/pages/play/refresh-batch.tsx | 60 | Here's how you can trigger the invalidator to send multiple | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | server/scripts/mirror_vector.sh | 9 | # Usage: | COMMENT |