Repository Analysis

kanidm/kanidm

Kanidm: A simple, secure, and fast identity management platform

12.1 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of kanidm/kanidm, a Rust project with 5,127 GitHub stars. SynthScan v2.0 examined 434,858 lines of code across 1000 source files, recording 2459 pattern matches distributed across 16 syntactic categories. The overall adjusted score of 12.1 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

12.1
Adjusted Score
12.1
Raw Score
100%
Time Factor
2026-07-14
Last Push
5.1K
Stars
Rust
Language
434.9K
Lines of Code
1.0K
Files
2.5K
Pattern Hits
2026-07-14
Scan Date
0.74
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 742MEDIUM 20LOW 1697

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 2459 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Cross-File Repetition741 hits · 3705 pts
SeverityFileLineSnippetContext
HIGHpykanidm/kanidm_openapi_client/configuration.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/rest.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/__init__.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/exceptions.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/api_client.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…/kanidm_openapi_client/models/single_string_request.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm/kanidm_openapi_client/models/scim_sort_order.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm_openapi_client/models/credential_detail_type.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/filter_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…openapi_client/models/identify_user_response_one_of.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm_openapi_client/models/operation_error_one_of13.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm_openapi_client/models/consistency_error_one_of6.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/auth_state.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…napi_client/models/scim_application_password_create.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm/kanidm_openapi_client/models/uat_purpose_status.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/cu_reg_state.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/uat_status.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm/kanidm_openapi_client/models/scim_sync_request.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…dels/consistency_error_one_of16_keyprovidernotfound.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/filter_one_of5.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm/kanidm_openapi_client/models/cu_intent_token.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/ssh_public_key.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/cu_ext_portal.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…dm_openapi_client/models/consistency_error_one_of13.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm_openapi_client/models/consistency_error_one_of2.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…napi_client/models/scim_sync_retention_mode_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…anidm_openapi_client/models/scim_entry_post_generic.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/filter_one_of4.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm_openapi_client/models/password_feedback_one_of.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/attribute.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…dm_openapi_client/models/consistency_error_one_of12.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm_openapi_client/models/consistency_error_one_of3.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/auth_mech.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…anidm/kanidm_openapi_client/models/cu_session_token.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/auth_allowed_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm_openapi_client/models/operation_error_one_of12.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm_openapi_client/models/consistency_error_one_of7.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/totp_algo.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…/kanidm_openapi_client/models/identify_user_request.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…dm_openapi_client/models/consistency_error_one_of16.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm_openapi_client/models/identify_user_response.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/app_link.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/modify_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/uat_purpose.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…idm/kanidm_openapi_client/models/auth_state_one_of2.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm/kanidm_openapi_client/models/search_response.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…anidm_openapi_client/models/operation_error_one_of4.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/ui_hint.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/schema_error_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/passkey_detail.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…ent/models/identify_user_request_one_of_submit_code.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGHpykanidm/kanidm_openapi_client/models/modify_list.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…nidm/kanidm_openapi_client/models/web_error_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…penapi_client/models/credential_detail_type_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm/kanidm_openapi_client/models/whoami_response.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…anidm_openapi_client/models/auth_credential_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/plugin_error_one_of1.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/schema_error_one_of5.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…kanidm_openapi_client/models/auth_credential_one_of.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
HIGH…m/kanidm_openapi_client/models/cu_reg_state_one_of2.py0kanidm api for interacting with the kanidm system. this is a work in progress. the version of the openapi document: 1.9.STRING
681 more matches not shown…
Unused Imports887 hits · 713 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/__init__.py230CODE
LOWpykanidm/kanidm_openapi_client/__init__.py231CODE
LOWpykanidm/kanidm_openapi_client/__init__.py232CODE
LOWpykanidm/kanidm_openapi_client/__init__.py233CODE
LOWpykanidm/kanidm_openapi_client/__init__.py234CODE
LOWpykanidm/kanidm_openapi_client/__init__.py235CODE
LOWpykanidm/kanidm_openapi_client/__init__.py236CODE
LOWpykanidm/kanidm_openapi_client/__init__.py237CODE
LOWpykanidm/kanidm_openapi_client/__init__.py238CODE
LOWpykanidm/kanidm_openapi_client/__init__.py239CODE
LOWpykanidm/kanidm_openapi_client/__init__.py240CODE
LOWpykanidm/kanidm_openapi_client/__init__.py241CODE
LOWpykanidm/kanidm_openapi_client/__init__.py242CODE
LOWpykanidm/kanidm_openapi_client/__init__.py243CODE
LOWpykanidm/kanidm_openapi_client/__init__.py244CODE
LOWpykanidm/kanidm_openapi_client/__init__.py245CODE
LOWpykanidm/kanidm_openapi_client/__init__.py246CODE
LOWpykanidm/kanidm_openapi_client/__init__.py247CODE
LOWpykanidm/kanidm_openapi_client/__init__.py248CODE
LOWpykanidm/kanidm_openapi_client/__init__.py249CODE
LOWpykanidm/kanidm_openapi_client/__init__.py250CODE
LOWpykanidm/kanidm_openapi_client/__init__.py251CODE
LOWpykanidm/kanidm_openapi_client/__init__.py252CODE
LOWpykanidm/kanidm_openapi_client/__init__.py253CODE
LOWpykanidm/kanidm_openapi_client/__init__.py254CODE
LOWpykanidm/kanidm_openapi_client/__init__.py255CODE
LOWpykanidm/kanidm_openapi_client/__init__.py258CODE
LOWpykanidm/kanidm_openapi_client/__init__.py259CODE
LOWpykanidm/kanidm_openapi_client/__init__.py260CODE
LOWpykanidm/kanidm_openapi_client/__init__.py261CODE
LOWpykanidm/kanidm_openapi_client/__init__.py262CODE
LOWpykanidm/kanidm_openapi_client/__init__.py263CODE
LOWpykanidm/kanidm_openapi_client/__init__.py264CODE
LOWpykanidm/kanidm_openapi_client/__init__.py265CODE
LOWpykanidm/kanidm_openapi_client/__init__.py266CODE
LOWpykanidm/kanidm_openapi_client/__init__.py269CODE
LOWpykanidm/kanidm_openapi_client/__init__.py270CODE
LOWpykanidm/kanidm_openapi_client/__init__.py271CODE
LOWpykanidm/kanidm_openapi_client/__init__.py272CODE
LOWpykanidm/kanidm_openapi_client/__init__.py273CODE
LOWpykanidm/kanidm_openapi_client/__init__.py274CODE
LOWpykanidm/kanidm_openapi_client/__init__.py275CODE
LOWpykanidm/kanidm_openapi_client/__init__.py276CODE
LOWpykanidm/kanidm_openapi_client/__init__.py277CODE
LOWpykanidm/kanidm_openapi_client/__init__.py278CODE
LOWpykanidm/kanidm_openapi_client/__init__.py279CODE
LOWpykanidm/kanidm_openapi_client/__init__.py280CODE
LOWpykanidm/kanidm_openapi_client/__init__.py281CODE
LOWpykanidm/kanidm_openapi_client/__init__.py282CODE
LOWpykanidm/kanidm_openapi_client/__init__.py283CODE
LOWpykanidm/kanidm_openapi_client/__init__.py284CODE
LOWpykanidm/kanidm_openapi_client/__init__.py285CODE
LOWpykanidm/kanidm_openapi_client/__init__.py286CODE
LOWpykanidm/kanidm_openapi_client/__init__.py287CODE
LOWpykanidm/kanidm_openapi_client/__init__.py288CODE
LOWpykanidm/kanidm_openapi_client/__init__.py289CODE
LOWpykanidm/kanidm_openapi_client/__init__.py290CODE
LOWpykanidm/kanidm_openapi_client/__init__.py291CODE
LOWpykanidm/kanidm_openapi_client/__init__.py292CODE
LOWpykanidm/kanidm_openapi_client/__init__.py293CODE
827 more matches not shown…
Hyper-Verbose Identifiers544 hits · 492 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/api_client.py339 def sanitize_for_serialization(self, obj):CODE
LOWpykanidm/kanidm_openapi_client/api_client.py598 def select_header_content_type(self, content_types):CODE
LOW…kanidm_openapi_client/models/credential_detail_type.py60 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/auth_state.py62 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/cu_reg_state.py71 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/cu_ext_portal.py57 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/attribute.py433 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…/kanidm_openapi_client/models/identify_user_request.py57 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…kanidm_openapi_client/models/identify_user_response.py63 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/uat_purpose.py55 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/auth_allowed.py64 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/web_error.py59 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…kanidm/kanidm_openapi_client/models/operation_error.py532 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/scim_attr.py63 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…nidm/kanidm_openapi_client/models/password_feedback.py111 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/schema_error.py82 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…nidm_openapi_client/models/scim_sync_retention_mode.py58 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…kanidm/kanidm_openapi_client/models/scim_sync_state.py55 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/scim_value.py60 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/modify.py59 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…anidm/kanidm_openapi_client/models/uat_status_state.py57 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/filter.py67 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…anidm/kanidm_openapi_client/models/b_tree_map_value.py63 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…kanidm/kanidm_openapi_client/models/auth_credential.py67 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/plugin_error.py61 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/models/auth_step.py62 def actual_instance_must_validate_oneof(cls, v):CODE
LOW…nidm/kanidm_openapi_client/models/consistency_error.py113 def actual_instance_must_validate_oneof(cls, v):CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py107 async def recycle_bin_get_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py172 async def recycle_bin_get_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py232 def _recycle_bin_get_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py363 async def recycle_bin_id_get_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py432 async def recycle_bin_id_get_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py496 def _recycle_bin_id_get_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py561 async def recycle_bin_revive_id_post(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py630 async def recycle_bin_revive_id_post_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py699 async def recycle_bin_revive_id_post_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/recycle_bin_api.py763 def _recycle_bin_revive_id_post_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py109 async def person_get_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py174 async def person_get_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py365 async def person_id_delete_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py434 async def person_id_delete_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py498 def _person_id_delete_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py632 async def person_id_get_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py701 async def person_id_get_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py903 async def person_id_patch_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py976 async def person_id_patch_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1044 def _person_id_patch_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1125 async def person_identify_user_post(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1198 async def person_identify_user_post_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1271 async def person_identify_user_post_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1339 def _person_identify_user_post_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1489 async def person_post_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1558 async def person_post_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1769 async def person_search_id_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1838 async def person_search_id_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_api.py1902 def _person_search_id_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_attr_api.py114 async def person_id_delete_attr_with_http_info(CODE
LOWpykanidm/kanidm_openapi_client/api/person_attr_api.py187 async def person_id_delete_attr_without_preload_content(CODE
LOWpykanidm/kanidm_openapi_client/api/person_attr_api.py255 def _person_id_delete_attr_serialize(CODE
LOWpykanidm/kanidm_openapi_client/api/person_attr_api.py396 async def person_id_get_attr_with_http_info(CODE
484 more matches not shown…
Over-Commented Block219 hits · 214 pts
SeverityFileLineSnippetContext
LOWCargo.toml81# Single Largest Binary Maximum: 16GBCOMMENT
LOWtools/mail_sender/src/main.rs1#![deny(warnings)]COMMENT
LOWtools/cli/src/cli/lib.rs1#![deny(warnings)]COMMENT
LOWtools/cli/src/cli/main.rs1#![deny(warnings)]COMMENT
LOWtools/cli/src/cli/webauthn/mod.rs1#[cfg(any(target_os = "linux", target_os = "macos"))]COMMENT
LOWtools/cli/src/cli/webauthn/mod.rs21/// * On other platforms, this uses Mozilla's `authenticator-rs`.COMMENT
LOWtools/cli/src/opt/kanidm.rs141 AuthSessionExpiry { name: String, expiry: u32 },COMMENT
LOWtools/cli/src/opt/kanidm.rs161 /// from <https://crates.io/crates/fido-mds-tool>COMMENT
LOWtools/cli/src/opt/kanidm.rs181 name: String,COMMENT
LOWtools/cli/src/opt/kanidm.rs221 /// Create a new groupCOMMENT
LOWtools/cli/src/opt/kanidm.rs241 /// mail address in the list is the `primary` and the remainder are aliases. SettingCOMMENT
LOWtools/cli/src/opt/kanidm.rs261 Rename {COMMENT
LOWtools/cli/src/opt/kanidm.rs321 #[clap(flatten)]COMMENT
LOWtools/cli/src/opt/kanidm.rs381#[derive(Debug, Subcommand, Clone)]COMMENT
LOWtools/cli/src/opt/kanidm.rs401 #[clap(long)]COMMENT
LOWtools/cli/src/opt/kanidm.rs421 SoftlockReset {COMMENT
LOWtools/cli/src/opt/kanidm.rs501#[derive(Debug, Subcommand, Clone)]COMMENT
LOWtools/cli/src/opt/kanidm.rs561 /// Manage radius access for this personCOMMENT
LOWtools/cli/src/opt/kanidm.rs581 Ssh {COMMENT
LOWtools/cli/src/opt/kanidm.rs621 /// Reset and generate a new service account password. This password can NOTCOMMENT
LOWtools/cli/src/opt/kanidm.rs641 label: String,COMMENT
LOWtools/cli/src/opt/kanidm.rs721 /// Manage sessions (user auth tokens) associated to this service account.COMMENT
LOWtools/cli/src/opt/kanidm.rs761 /// (Deprecated - due for removal in v1.1.0-15) - Convert a service account into a person. This is used during the aCOMMENT
LOWtools/cli/src/opt/kanidm.rs901 // Set(),COMMENT
LOWtools/cli/src/opt/kanidm.rs921 #[clap(name = "displayname")]COMMENT
LOWtools/cli/src/opt/kanidm.rs961 group: String,COMMENT
LOWtools/cli/src/opt/kanidm.rs1041 /// may not support it. You should request the client to enable PKCE!COMMENT
LOWtools/cli/src/opt/kanidm.rs1061 EnablePublicLocalhost { name: String },COMMENT
LOWtools/cli/src/opt/kanidm.rs1081 /// have concerns a key is compromised, then you should revoke it instead.COMMENT
LOWtools/cli/src/opt/kanidm.rs1161 new_max_queryable_attrs: usize,COMMENT
LOWtools/cli/src/opt/kanidm.rs1181 SetAllowAccountRecovery {COMMENT
LOWtools/cli/src/opt/kanidm.rs1241 /// List all configured IDM sync accountsCOMMENT
LOWtools/cli/src/opt/kanidm.rs1281 /// and are allowed to be modified by kanidm and users. Any attributes not listed inCOMMENT
LOWtools/cli/src/opt/kanidm.rs1301 /// Kanidm. ⚠️ This action can NOT be undone. Once complete, it is most likelyCOMMENT
LOWtools/cli/src/opt/kanidm.rs1321#[derive(Debug, Subcommand, Clone)]COMMENT
LOWtools/orca/src/opt.rs21 #[clap(name = "generate")]COMMENT
LOWtools/orca/src/opt.rs61 // TODO - support the extra uris field for replicated tests.COMMENT
LOWtools/orca/src/opt.rs81 TestConnection {COMMENT
LOWtools/orca/src/state.rs61 ExtendPrivilegedAuthExpiry,COMMENT
LOWtools/iam_migrations/ldap/src/opt.rs1use kanidm_proto::constants::DEFAULT_CLIENT_CONFIG_PATH;COMMENT
LOWtools/iam_migrations/ldap/src/opt.rs21 /// No actions are taken on the kanidm instance, this is purely a dump of theCOMMENT
LOWtools/iam_migrations/ldap/src/main.rs1#![deny(warnings)]COMMENT
LOWtools/iam_migrations/freeipa/src/opt.rs1use kanidm_proto::constants::DEFAULT_CLIENT_CONFIG_PATH;COMMENT
LOWtools/iam_migrations/freeipa/src/opt.rs21 /// No actions are taken on the kanidm instance, this is purely a dump of theCOMMENT
LOWtools/iam_migrations/freeipa/src/main.rs1#![deny(warnings)]COMMENT
LOWtools/iam_migrations/freeipa/src/main.rs561 //COMMENT
LOWserver/core/src/config.rs61 /// - every 6th hours (four times a day) at 3 minutes past the hour, :COMMENT
LOWserver/core/src/config.rs281COMMENT
LOWserver/core/src/config.rs301COMMENT
LOWserver/core/src/lib.rs1//! These contain the server "cores". These are able to startup the serverCOMMENT
LOWserver/core/src/lib.rs101COMMENT
LOWserver/core/src/crypto.rs41// |Method |Date |Symmetric| FM |DL Key| DL Group|Elliptic Curve|Hash|COMMENT
LOWserver/core/src/https/oauth2.rs101// https://tools.ietf.org/html/rfc7636COMMENT
LOWserver/core/src/https/oauth2.rs121// | User- | | Authorization |COMMENT
LOWserver/core/src/https/oauth2.rs141//COMMENT
LOWserver/core/src/https/v1.rs3201 .route(COMMENT
LOWserver/core/src/https/manifest.rs61 Rtl,COMMENT
LOWserver/core/src/https/v1_scim.rs901 // PUT Modifies a resource by replacing existing attributes with aCOMMENT
LOWserver/core/src/https/v1_scim.rs921 // PATCH (Section 3.5.2),COMMENT
LOWserver/core/src/https/v1_scim.rs941 // Bulk /Bulk POST (Section 3.7) Bulk updates to oneCOMMENT
159 more matches not shown…
Decorative Section Separators17 hits · 74 pts
SeverityFileLineSnippetContext
MEDIUMserver/lib/src/credential/softlock.rs30//! ┌────────────────────────┐COMMENT
MEDIUMserver/lib/src/credential/softlock.rs32//! ─└────────────────────────┘COMMENT
MEDIUMserver/lib/src/credential/softlock.rs35//! ┌─────┐ .─────. ┌────┐ │COMMENT
MEDIUMserver/lib/src/credential/softlock.rs37//! ┌────┴─────┴───────────────────────(count = 0)─────┴────┴┐ │COMMENT
MEDIUMserver/lib/src/credential/softlock.rs40//! │ ┌────────────────────────┐▲ │COMMENT
MEDIUMserver/lib/src/credential/softlock.rs42//! │ └────────────────────────┘│ │COMMENT
MEDIUMserver/lib/src/credential/softlock.rs45//! │ ├─────┬───────┬──┐ ▼ │COMMENT
MEDIUMserver/lib/src/credential/softlock.rs46//! │ │ │ Fail │ │ .─────.COMMENT
MEDIUMserver/lib/src/credential/softlock.rs48//! ▼ .─────. └───────┘ │ ; Locked :COMMENT
MEDIUMserver/lib/src/credential/softlock.rs49//! ┌────────────┐ ╱ ╲ └─────────▶: count > 0 ;◀─┤COMMENT
MEDIUMserver/lib/src/credential/softlock.rs50//! │Auth Success│◀─┬─────┬──(Unlocked ) ╲ ╱ │COMMENT
MEDIUMserver/lib/src/credential/softlock.rs51//! └────────────┘ │Valid│ `. ,' `. ,' │COMMENT
MEDIUMserver/lib/src/credential/softlock.rs52//! └─────┘ `───' `───' │COMMENT
MEDIUMserver/lib/src/credential/softlock.rs55//! └─────┬──────────────────────────┬┴┬───────┴──────────────────┐COMMENT
MEDIUMserver/lib/src/credential/softlock.rs57//! └──────────────────────────┘ └──────────────────────────┘COMMENT
MEDIUMbook/src/server_updates.md25# ------------------------COMMENT
MEDIUMbook/src/server_updates.md55# ------------------------COMMENT
Structural Annotation Overuse14 hits · 21 pts
SeverityFileLineSnippetContext
LOWserver/testkit/tests/testkit/oauth2_test.rs162 // Step 0 - get the openid discovery details and the public key.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs243 // Step 0 - get the jwks public key.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs264 // Step 1 - the Oauth2 Resource Server would send a redirect to the authorisationCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs320 // Step 2 - we now send the consent get to the server which yields a redirect with aCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs361 // Step 3 - the "resource server" then uses this state and code to directly contactCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs413 // Step 4 - inspect the granted token.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs468 // Step 5 - check that the id_token (openid) matches the userinfo endpoint.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs528 // Step 6 - Show that our client can perform a client credentials grantCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs554 // Step 7 - inspect the granted client credentials token.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs858 // Step 0 - get the jwks public key.COMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs879 // Step 1 - the Oauth2 Resource Server would send a redirect to the authorisationCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs939 // Step 2 - we now send the consent get to the server which yields a redirect with aCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs985 // Step 3 - the "resource server" then uses this state and code to directly contactCOMMENT
LOWserver/testkit/tests/testkit/oauth2_test.rs1013 // Step 5 - check that the id_token (openid) matches the userinfo endpoint.COMMENT
Deep Nesting9 hits · 9 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/rest.py91CODE
LOWpykanidm/kanidm_openapi_client/api_client.py289CODE
LOWpykanidm/kanidm_openapi_client/api_client.py339CODE
LOWpykanidm/kanidm_openapi_client/api_client.py432CODE
LOWpykanidm/kanidm_openapi_client/api_client.py479CODE
LOWpykanidm/kanidm_openapi_client/api_client.py509CODE
LOWpykanidm/kanidm_openapi_client/api_client.py548CODE
LOWpykanidm/tests/test_radius_token.py24CODE
LOWpykanidm/tests/test_openapi_spec.py85CODE
Fake / Example Data8 hits · 8 pts
SeverityFileLineSnippetContext
LOWserver/testkit/tests/testkit/integration.rs192 assert!(str_output.contains("foo@bar.com"));CODE
LOWserver/lib/src/idm/ldap.rs912 .do_bind(idms, "admin@example.com", TEST_PASSWORD)CODE
LOWserver/lib/src/idm/ldap.rs958 .do_bind(idms, "admin@example.com", TEST_PASSWORD)CODE
LOWserver/lib/src/idm/server.rs2939 assert_eq!(tok_r.spn, "admin@example.com");CODE
LOWserver/lib/src/idm/server.rs2955 assert_eq!(tok_g.spn, "admin@example.com");CODE
LOWpykanidm/tests/test_radius_check_vlan.py49 group=RadiusTokenGroup(spn="foo@bar.com", uuid="lol"),CODE
LOWbook/src/integrations/oauth2/examples.md577kanidm person update '<user>' --legalname 'Personal Name' --mail 'user@example.com'CODE
LOWbook/src/integrations/oauth2/examples.md994kanidm person update <user> --legalname "Personal Name" --mail "user@example.com"CODE
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHpykanidm/kanidm_openapi_client/rest.py160 # Content-Type which generated by aiohttpCOMMENT
Modern Structural Boilerplate5 hits · 6 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/configuration.py335 def set_default(cls, default: Optional[Self]) -> None:CODE
LOWpykanidm/kanidm_openapi_client/__init__.py20__all__ = [CODE
LOWpykanidm/tests/conftest.py47__all__ = [CODE
LOWpykanidm/kanidm/openapi.py46__all__ = [CODE
LOWpykanidm/kanidm/__init__.py150 def _set_auth_token(self, token: Optional[str]) -> None:CODE
Verbosity Indicators3 hits · 4 pts
SeverityFileLineSnippetContext
LOWtools/orca/src/models/latency_measurer.rs129 // We need to check if the group was successfully created or not, and act accordingly!COMMENT
LOWserver/lib/src/idm/ldap.rs571 // we need to check if the entry exists at all (without the ava).COMMENT
LOWserver/lib/src/server/access/search.rs338 // Okay, now we need to check if the uuids line up.COMMENT
Excessive Try-Catch Wrapping4 hits · 4 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/exceptions.py129 except Exception:CODE
LOWpykanidm/kanidm/__init__.py675 except Exception as error:CODE
LOWpykanidm/kanidm/radius/__init__.py134 except Exception as error_message: # pylint: disable=broad-exceptCODE
LOWpykanidm/kanidm/radius/__init__.py193 except Exception as error_message: # pylint: disable=broad-exceptCODE
AI Structural Patterns4 hits · 4 pts
SeverityFileLineSnippetContext
LOWpykanidm/kanidm_openapi_client/configuration.py173CODE
LOWpykanidm/kanidm_openapi_client/api_client.py145CODE
LOWpykanidm/kanidm/openapi_codegen.py163CODE
LOWpykanidm/kanidm/__init__.py101CODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMserver/lib/src/server/access/mod.rs1262 // because the schema system is well tested an robust. Instead we targetCOMMENT
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMscripts/pykanidm/integration_test.py33 # Define the new working directoryCOMMENT
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMbook/src/developers/faq.md17## Is the project going to create a microservice like architecture?COMMENT