Home / kanidm / kanidm
AI Slop Code RIsk Monitor

kanidm/kanidm

Kanidm: A simple, secure, and fast identity management platform

12.0 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for kanidm/kanidm, a Rust project with 5,451 GitHub stars. SynthScan examined 441,891 lines of code across 1021 source files, recording 2462 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 12.0 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

12.0
Adjusted Signal
12.0
Raw Pattern Score
100%
Time Factor
2026-10-08
Last Push
5.5K
Stars
Rust
Language
441.9K
Lines of Code
1.0K
Files
2.5K
Pattern Hits
2026-10-12
Scan Date
0.73
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 8.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 797 finding(s).

Hallucinated Dependency & Supply Chain Risk 7.8/100 · LOW

Are imports declared and package/API names verified? 895 finding(s).

Agent Over-Engineering Ratio 38.5/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 1318 finding(s).

PR Review Velocity Impact 50.6/100 · HIGH

Which changes need focused human review? 2462 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 745MEDIUM 20LOW 1697

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2462 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Cross-File Repetition741 hits · 3705 pts
SeverityFileLineSnippetContext
HIGHpykanidm/kanidm_openapi_client/configuration.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/rest.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/__init__.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/exceptions.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/api_client.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…/kanidm_openapi_client/models/single_string_request.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm/kanidm_openapi_client/models/scim_sort_order.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm_openapi_client/models/credential_detail_type.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/filter_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…openapi_client/models/identify_user_response_one_of.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm_openapi_client/models/operation_error_one_of13.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm_openapi_client/models/consistency_error_one_of6.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/auth_state.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…napi_client/models/scim_application_password_create.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm/kanidm_openapi_client/models/uat_purpose_status.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/cu_reg_state.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/uat_status.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm/kanidm_openapi_client/models/scim_sync_request.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…dels/consistency_error_one_of16_keyprovidernotfound.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/filter_one_of5.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm/kanidm_openapi_client/models/cu_intent_token.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/ssh_public_key.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/cu_ext_portal.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…dm_openapi_client/models/consistency_error_one_of13.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm_openapi_client/models/consistency_error_one_of2.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…napi_client/models/scim_sync_retention_mode_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…anidm_openapi_client/models/scim_entry_post_generic.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/filter_one_of4.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm_openapi_client/models/password_feedback_one_of.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/attribute.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…dm_openapi_client/models/consistency_error_one_of12.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm_openapi_client/models/consistency_error_one_of3.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/auth_mech.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…anidm/kanidm_openapi_client/models/cu_session_token.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/auth_allowed_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm_openapi_client/models/operation_error_one_of12.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm_openapi_client/models/consistency_error_one_of7.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/totp_algo.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…/kanidm_openapi_client/models/identify_user_request.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…dm_openapi_client/models/consistency_error_one_of16.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm_openapi_client/models/identify_user_response.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/app_link.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/modify_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/uat_purpose.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm/kanidm_openapi_client/models/auth_state_one_of2.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm/kanidm_openapi_client/models/search_response.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…anidm_openapi_client/models/operation_error_one_of4.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/ui_hint.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/schema_error_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/passkey_detail.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…ent/models/identify_user_request_one_of_submit_code.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/modify_list.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm/kanidm_openapi_client/models/web_error_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…penapi_client/models/credential_detail_type_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm/kanidm_openapi_client/models/whoami_response.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…anidm_openapi_client/models/auth_credential_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/plugin_error_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/schema_error_one_of5.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm_openapi_client/models/auth_credential_one_of.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/cu_reg_state_one_of2.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
681 more matches not shown…
Unused Imports887 hits · 713 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/__init__.py230CODE
LOWpykanidm/kanidm_openapi_client/__init__.py231CODE
LOWpykanidm/kanidm_openapi_client/__init__.py232CODE
LOWpykanidm/kanidm_openapi_client/__init__.py233CODE
LOWpykanidm/kanidm_openapi_client/__init__.py234CODE
LOWpykanidm/kanidm_openapi_client/__init__.py235CODE
LOWpykanidm/kanidm_openapi_client/__init__.py236CODE
LOWpykanidm/kanidm_openapi_client/__init__.py237CODE
LOWpykanidm/kanidm_openapi_client/__init__.py238CODE
LOWpykanidm/kanidm_openapi_client/__init__.py239CODE
LOWpykanidm/kanidm_openapi_client/__init__.py240CODE
LOWpykanidm/kanidm_openapi_client/__init__.py241CODE
LOWpykanidm/kanidm_openapi_client/__init__.py242CODE
LOWpykanidm/kanidm_openapi_client/__init__.py243CODE
LOWpykanidm/kanidm_openapi_client/__init__.py244CODE
LOWpykanidm/kanidm_openapi_client/__init__.py245CODE
LOWpykanidm/kanidm_openapi_client/__init__.py246CODE
LOWpykanidm/kanidm_openapi_client/__init__.py247CODE
LOWpykanidm/kanidm_openapi_client/__init__.py248CODE
LOWpykanidm/kanidm_openapi_client/__init__.py249CODE
LOWpykanidm/kanidm_openapi_client/__init__.py250CODE
LOWpykanidm/kanidm_openapi_client/__init__.py251CODE
LOWpykanidm/kanidm_openapi_client/__init__.py252CODE
LOWpykanidm/kanidm_openapi_client/__init__.py253CODE
LOWpykanidm/kanidm_openapi_client/__init__.py254CODE
LOWpykanidm/kanidm_openapi_client/__init__.py255CODE
LOWpykanidm/kanidm_openapi_client/__init__.py258CODE
LOWpykanidm/kanidm_openapi_client/__init__.py259CODE
LOWpykanidm/kanidm_openapi_client/__init__.py260CODE
LOWpykanidm/kanidm_openapi_client/__init__.py261CODE
LOWpykanidm/kanidm_openapi_client/__init__.py262CODE
LOWpykanidm/kanidm_openapi_client/__init__.py263CODE
LOWpykanidm/kanidm_openapi_client/__init__.py264CODE
LOWpykanidm/kanidm_openapi_client/__init__.py265CODE
LOWpykanidm/kanidm_openapi_client/__init__.py266CODE
LOWpykanidm/kanidm_openapi_client/__init__.py269CODE
LOWpykanidm/kanidm_openapi_client/__init__.py270CODE
LOWpykanidm/kanidm_openapi_client/__init__.py271CODE
LOWpykanidm/kanidm_openapi_client/__init__.py272CODE
LOWpykanidm/kanidm_openapi_client/__init__.py273CODE
LOWpykanidm/kanidm_openapi_client/__init__.py274CODE
LOWpykanidm/kanidm_openapi_client/__init__.py275CODE
LOWpykanidm/kanidm_openapi_client/__init__.py276CODE
LOWpykanidm/kanidm_openapi_client/__init__.py277CODE
LOWpykanidm/kanidm_openapi_client/__init__.py278CODE
LOWpykanidm/kanidm_openapi_client/__init__.py279CODE
LOWpykanidm/kanidm_openapi_client/__init__.py280CODE
LOWpykanidm/kanidm_openapi_client/__init__.py281CODE
LOWpykanidm/kanidm_openapi_client/__init__.py282CODE
LOWpykanidm/kanidm_openapi_client/__init__.py283CODE
LOWpykanidm/kanidm_openapi_client/__init__.py284CODE
LOWpykanidm/kanidm_openapi_client/__init__.py285CODE
LOWpykanidm/kanidm_openapi_client/__init__.py286CODE
LOWpykanidm/kanidm_openapi_client/__init__.py287CODE
LOWpykanidm/kanidm_openapi_client/__init__.py288CODE
LOWpykanidm/kanidm_openapi_client/__init__.py289CODE
LOWpykanidm/kanidm_openapi_client/__init__.py290CODE
LOWpykanidm/kanidm_openapi_client/__init__.py291CODE
LOWpykanidm/kanidm_openapi_client/__init__.py292CODE
LOWpykanidm/kanidm_openapi_client/__init__.py293CODE
827 more matches not shown…
Hyper-Verbose Identifiers544 hits · 492 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/api_client.py339 def sanitize_for_serialization(self, obj):CODE
LOWpykanidm/kanidm_openapi_client/api_client.py598 def select_header_content_type(self, content_types):CODE
LOW…kanidm_openapi_client/models/credential_detail_type.py60 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/auth_state.py62 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/cu_reg_state.py71 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/cu_ext_portal.py57 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/attribute.py433 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…/kanidm_openapi_client/models/identify_user_request.py57 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…kanidm_openapi_client/models/identify_user_response.py63 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/uat_purpose.py55 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/auth_allowed.py64 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/web_error.py59 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…kanidm/kanidm_openapi_client/models/operation_error.py532 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/scim_attr.py63 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…nidm/kanidm_openapi_client/models/password_feedback.py111 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/schema_error.py82 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…nidm_openapi_client/models/scim_sync_retention_mode.py58 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…kanidm/kanidm_openapi_client/models/scim_sync_state.py55 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/scim_value.py60 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/modify.py59 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…anidm/kanidm_openapi_client/models/uat_status_state.py57 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/filter.py67 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…anidm/kanidm_openapi_client/models/b_tree_map_value.py63 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…kanidm/kanidm_openapi_client/models/auth_credential.py67 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/plugin_error.py61 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/auth_step.py62 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…nidm/kanidm_openapi_client/models/consistency_error.py113 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py107 async def recycle_bin_get_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py172 async def recycle_bin_get_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py232 def _recycle_bin_get_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py363 async def recycle_bin_id_get_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py432 async def recycle_bin_id_get_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py496 def _recycle_bin_id_get_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py561 async def recycle_bin_revive_id_post(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py630 async def recycle_bin_revive_id_post_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py699 async def recycle_bin_revive_id_post_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py763 def _recycle_bin_revive_id_post_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py109 async def person_get_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py174 async def person_get_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py365 async def person_id_delete_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py434 async def person_id_delete_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py498 def _person_id_delete_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py632 async def person_id_get_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py701 async def person_id_get_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py903 async def person_id_patch_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py976 async def person_id_patch_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1044 def _person_id_patch_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1125 async def person_identify_user_post(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1198 async def person_identify_user_post_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1271 async def person_identify_user_post_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1339 def _person_identify_user_post_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1489 async def person_post_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1558 async def person_post_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1769 async def person_search_id_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1838 async def person_search_id_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1902 def _person_search_id_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_attr_api.py114 async def person_id_delete_attr_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_attr_api.py187 async def person_id_delete_attr_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_attr_api.py255 def _person_id_delete_attr_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_attr_api.py396 async def person_id_get_attr_with_http_info(CODE
484 more matches not shown…
Over-Commented Block219 hits · 215 pts
SeverityFileLineSnippetContext
LOWCargo.toml61# while the build is linking multiple binaries in parallelCOMMENT
LOWCargo.toml81debug = falseCOMMENT
LOWCargo.toml121# crypto-glue = { path = "../crypto-glue" }COMMENT
LOWtools/mail_sender/src/main.rs1#![deny(warnings)]COMMENT
LOWtools/cli/src/cli/lib.rs1#![deny(warnings)]COMMENT
LOWtools/cli/src/cli/main.rs1#![deny(warnings)]COMMENT
LOWtools/cli/src/cli/webauthn/mod.rs1#[cfg(any(target_os = "linux", target_os = "macos"))]COMMENT
LOWtools/cli/src/cli/webauthn/mod.rs21/// * On other platforms, this uses Mozilla's `authenticator-rs`.COMMENT
LOWtools/cli/src/opt/kanidm.rs161 AuthSessionExpiry { name: String, expiry: u32 },COMMENT
LOWtools/cli/src/opt/kanidm.rs181 /// from <https://crates.io/crates/fido-mds-tool>COMMENT
LOWtools/cli/src/opt/kanidm.rs201 name: String,COMMENT
LOWtools/cli/src/opt/kanidm.rs241 /// Create a new groupCOMMENT
LOWtools/cli/src/opt/kanidm.rs261 /// mail address in the list is the `primary` and the remainder are aliases. SettingCOMMENT
LOWtools/cli/src/opt/kanidm.rs281 Rename {COMMENT
LOWtools/cli/src/opt/kanidm.rs341 #[clap(flatten)]COMMENT
LOWtools/cli/src/opt/kanidm.rs401#[derive(Debug, Subcommand, Clone)]COMMENT
LOWtools/cli/src/opt/kanidm.rs421 #[clap(long)]COMMENT
LOWtools/cli/src/opt/kanidm.rs441 SoftlockReset {COMMENT
LOWtools/cli/src/opt/kanidm.rs621 /// View a specific personCOMMENT
LOWtools/cli/src/opt/kanidm.rs661 Status(AccountNamedOpt),COMMENT
LOWtools/cli/src/opt/kanidm.rs681 #[clap(name = "label")]COMMENT
LOWtools/cli/src/opt/kanidm.rs761 },COMMENT
LOWtools/cli/src/opt/kanidm.rs781 #[clap(name = "create")]COMMENT
LOWtools/cli/src/opt/kanidm.rs801 },COMMENT
LOWtools/cli/src/opt/kanidm.rs961 Delete {COMMENT
LOWtools/cli/src/opt/kanidm.rs981 #[clap(name = "name")]COMMENT
LOWtools/cli/src/opt/kanidm.rs1041 /// Reset the client basic secret. You will need to update your client afterCOMMENT
LOWtools/cli/src/opt/kanidm.rs1121 /// Enable legacy signing crypto on this oauth2 client. This defaults to being disabled.COMMENT
LOWtools/cli/src/opt/kanidm.rs1141 /// Use the 'name' attribute instead of 'spn' for the preferred_usernameCOMMENT
LOWtools/cli/src/opt/kanidm.rs1161 #[clap(value_parser = parse_rfc3339)]COMMENT
LOWtools/cli/src/opt/kanidm.rs1181 #[clap(name = "new-display-name")]COMMENT
LOWtools/cli/src/opt/kanidm.rs1241 /// Examples are `o=organisation` or `dc=domain,dc=name`. Must be a valid ldapCOMMENT
LOWtools/cli/src/opt/kanidm.rs1261 /// Enable or disable easter eggs in the server. This includes seasonal icons, kanidmCOMMENT
LOWtools/cli/src/opt/kanidm.rs1341 },COMMENT
LOWtools/cli/src/opt/kanidm.rs1361 #[clap()]COMMENT
LOWtools/cli/src/opt/kanidm.rs1381 Finalise {COMMENT
LOWtools/orca/src/opt.rs21 #[clap(name = "generate")]COMMENT
LOWtools/orca/src/opt.rs61 // TODO - support the extra uris field for replicated tests.COMMENT
LOWtools/orca/src/opt.rs81 TestConnection {COMMENT
LOWtools/orca/src/state.rs61 ExtendPrivilegedAuthExpiry,COMMENT
LOWtools/iam_migrations/ldap/src/opt.rs1use kanidm_proto::constants::DEFAULT_CLIENT_CONFIG_PATH;COMMENT
LOWtools/iam_migrations/ldap/src/opt.rs21 /// No actions are taken on the kanidm instance, this is purely a dump of theCOMMENT
LOWtools/iam_migrations/ldap/src/main.rs1#![deny(warnings)]COMMENT
LOWtools/iam_migrations/freeipa/src/opt.rs1use kanidm_proto::constants::DEFAULT_CLIENT_CONFIG_PATH;COMMENT
LOWtools/iam_migrations/freeipa/src/opt.rs21 /// No actions are taken on the kanidm instance, this is purely a dump of theCOMMENT
LOWtools/iam_migrations/freeipa/src/main.rs1#![deny(warnings)]COMMENT
LOWtools/iam_migrations/freeipa/src/main.rs561 // This *also* means that when a user is updated that we also need toCOMMENT
LOWserver/core/src/config.rs61 /// - every day at 22:00 UTC (default): `"00 22 * * *"`COMMENT
LOWserver/core/src/config.rs301 }COMMENT
LOWserver/core/src/config.rs321 /// The filesystem type, either "zfs" or "generic". Defaults to "generic" if unset. I you change this, run a databasCOMMENT
LOWserver/core/src/lib.rs1//! These contain the server "cores". These are able to startup the serverCOMMENT
LOWserver/core/src/crypto.rs41const CA_VALID_DAYS: u64 = 30;COMMENT
LOWserver/core/src/https/oauth2.rs101// oauth2 pkceCOMMENT
LOWserver/core/src/https/oauth2.rs121// | -+----(A)-- & Redirection URI ---->| |COMMENT
LOWserver/core/src/https/oauth2.rs141// In this diagram, kanidm is the authorisation server. Each step is handled by:COMMENT
LOWserver/core/src/https/v1.rs3221 .route("/v1/self/_uat", get(whoami_uat))COMMENT
LOWserver/core/src/https/manifest.rs61 #[serde(rename = "rtl")]COMMENT
LOWserver/core/src/https/manifest.rs81 /// application launcher, etc. In this mode, the user agent will exclude UICOMMENT
LOWserver/core/src/https/v1_scim.rs901 // GET Retrieves one or more complete or partial resources.COMMENT
LOWserver/core/src/https/v1_scim.rs921 // DELETE (Section 3.6)COMMENT
159 more matches not shown…
Decorative Section Separators17 hits · 74 pts
SeverityFileLineSnippetContext
MEDIUM⚡server/lib/src/credential/softlock.rs30//! ┌────────────────────────┐COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs32//! ─└────────────────────────┘COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs35//! ┌─────┐ .─────. ┌────┐ │COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs37//! ┌────┴─────┴───────────────────────(count = 0)─────┴────┴┐ │COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs40//! │ ┌────────────────────────┐▲ │COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs42//! │ └────────────────────────┘│ │COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs45//! │ ├─────┬───────┬──┐ ▼ │COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs46//! │ │ │ Fail │ │ .─────.COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs48//! ▼ .─────. └───────┘ │ ; Locked :COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs49//! ┌────────────┐ ╱ ╲ └─────────▶: count > 0 ;◀─┤COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs50//! │Auth Success│◀─┬─────┬──(Unlocked ) ╲ ╱ │COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs51//! └────────────┘ │Valid│ `. ,' `. ,' │COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs52//! └─────┘ `───' `───' │COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs55//! └─────┬──────────────────────────┬┴┬───────┴──────────────────┐COMMENT
MEDIUM⚡server/lib/src/credential/softlock.rs57//! └──────────────────────────┘ └──────────────────────────┘COMMENT
MEDIUMbook/src/server_updates.md25# ------------------------COMMENT
MEDIUMbook/src/server_updates.md55# ------------------------COMMENT
Structural Annotation Overuse14 hits · 21 pts
SeverityFileLineSnippetContext
LOWserver/testkit/tests/testkit/oauth2_test.rs168 // Step 0 - get the openid discovery details and the public key.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs249 // Step 0 - get the jwks public key.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs270 // Step 1 - the Oauth2 Resource Server would send a redirect to the authorisationCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs328 // Step 2 - we now send the consent get to the server which yields a redirect with aCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs369 // Step 3 - the "resource server" then uses this state and code to directly contactCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs421 // Step 4 - inspect the granted token.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs476 // Step 5 - check that the id_token (openid) matches the userinfo endpoint.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs536 // Step 6 - Show that our client can perform a client credentials grantCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs562 // Step 7 - inspect the granted client credentials token.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs866 // Step 0 - get the jwks public key.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs887 // Step 1 - the Oauth2 Resource Server would send a redirect to the authorisationCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs949 // Step 2 - we now send the consent get to the server which yields a redirect with aCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs995 // Step 3 - the "resource server" then uses this state and code to directly contactCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs1023 // Step 5 - check that the id_token (openid) matches the userinfo endpoint.COMMENT
Empty Error Handlers3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHpykanidm/kanidm_openapi_client/exceptions.py129except Exception:CODE
HIGHpykanidm/kanidm/types.py144except ValueError:CODE
HIGHrlm_python/radius_entrypoint.py72except shutil.SameFileError:CODE
Deep Nesting9 hits · 9 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/rest.py91CODE
LOWpykanidm/kanidm_openapi_client/api_client.py289CODE
LOWpykanidm/kanidm_openapi_client/api_client.py339CODE
LOWpykanidm/kanidm_openapi_client/api_client.py432CODE
LOWpykanidm/kanidm_openapi_client/api_client.py479CODE
LOWpykanidm/kanidm_openapi_client/api_client.py509CODE
LOWpykanidm/kanidm_openapi_client/api_client.py548CODE
LOWpykanidm/tests/test_radius_token.py24CODE
LOWpykanidm/tests/test_openapi_spec.py85CODE
Fake / Example Data8 hits · 8 pts
SeverityFileLineSnippetContext
LOWserver/testkit/tests/testkit/integration.rs192 assert!(str_output.contains("foo@bar.com"));CODE
LOWserver/lib/src/idm/ldap.rs936 .do_bind(idms, "admin@example.com", TEST_PASSWORD)CODE
LOWserver/lib/src/idm/ldap.rs982 .do_bind(idms, "admin@example.com", TEST_PASSWORD)CODE
LOWserver/lib/src/idm/server.rs2950 assert_eq!(tok_r.spn, "admin@example.com");CODE
LOWserver/lib/src/idm/server.rs2966 assert_eq!(tok_g.spn, "admin@example.com");CODE
LOWpykanidm/tests/test_radius_check_vlan.py49 group=RadiusTokenGroup(spn="foo@bar.com", uuid="lol"),CODE
LOWbook/src/integrations/oauth2/examples.md577kanidm person update '<user>' --legalname 'Personal Name' --mail 'user@example.com'CODE
LOWbook/src/integrations/oauth2/examples.md994kanidm person update <user> --legalname "Personal Name" --mail "user@example.com"CODE
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHpykanidm/kanidm_openapi_client/rest.py160 # Content-Type which generated by aiohttpCOMMENT
Modern Structural Boilerplate5 hits · 6 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/configuration.py335 def set_default(cls, default: Optional[Self]) -> None:CODE
LOWpykanidm/kanidm_openapi_client/__init__.py20__all__ = [CODE
LOWpykanidm/tests/conftest.py47__all__ = [CODE
LOW⚡pykanidm/kanidm/openapi.py46__all__ = [CODE
LOWpykanidm/kanidm/__init__.py150 def _set_auth_token(self, token: Optional[str]) -> None:CODE
Verbosity Indicators3 hits · 4 pts
SeverityFileLineSnippetContext
LOWtools/orca/src/models/latency_measurer.rs129 // We need to check if the group was successfully created or not, and act accordingly!COMMENT
LOWserver/lib/src/idm/ldap.rs576 // we need to check if the entry exists at all (without the ava).COMMENT
LOWserver/lib/src/server/access/search.rs334 // Okay, now we need to check if the uuids line up.COMMENT
Excessive Try-Catch Wrapping4 hits · 4 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/exceptions.py129 except Exception:CODE
LOW⚡pykanidm/kanidm/__init__.py675 except Exception as error:CODE
LOWpykanidm/kanidm/radius/__init__.py134 except Exception as error_message: # pylint: disable=broad-exceptCODE
LOWpykanidm/kanidm/radius/__init__.py193 except Exception as error_message: # pylint: disable=broad-exceptCODE
AI Structural Patterns4 hits · 4 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/configuration.py173CODE
LOWpykanidm/kanidm_openapi_client/api_client.py145CODE
LOWpykanidm/kanidm/openapi_codegen.py163CODE
LOWpykanidm/kanidm/__init__.py101CODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMserver/lib/src/server/access/mod.rs1272 // because the schema system is well tested an robust. Instead we targetCOMMENT
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMscripts/pykanidm/integration_test.py33 # Define the new working directoryCOMMENT
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMbook/src/developers/faq.md17## Is the project going to create a microservice like architecture?COMMENT