🪢 Open source agent evals & observability: Trace, evaluate, and improve LLM applications with one open platform.
This report summarizes scanner evidence for langfuse/langfuse, a TypeScript project with 36,786 GitHub stars. SynthScan examined 1,486,566 lines of code across 6848 source files, recording 2752 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 2.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 2413 finding(s).
Are imports declared and package/API names verified? 286 finding(s).
Are wrappers, guards, and repeated structures necessary? 1923 finding(s).
Which changes need focused human review? 2752 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2752 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/.storybook/storybook-flat-story-titles.ts | 113 | export function assertNoExplicitStoryTitle(code: string, fileName: string) { | CODE |
| LOW | web/.storybook/docs/componentRelationshipData.ts | 82 | export function buildComponentRelationshipGraph( | CODE |
| LOW | web/.storybook/docs/ComponentRelationshipGraph.tsx | 183 | export function ComponentRelationshipGraph() { | CODE |
| LOW | web/scripts/python-sdk/patch-generated-deprecations.ts | 99 | export function getFernPythonDeprecations( | CODE |
| LOW | web/scripts/python-sdk/patch-generated-deprecations.ts | 209 | function ensureTypingExtensionsImport( | CODE |
| LOW | web/scripts/python-sdk/patch-generated-deprecations.ts | 234 | export function patchGeneratedPythonDeprecations({ | CODE |
| LOW | web/scripts/openapi/fern-deprecations.ts | 73 | export function getFernDeprecatedOperations( | CODE |
| LOW | web/scripts/openapi/fern-deprecations.ts | 120 | export function getFernDeprecatedProperties( | CODE |
| LOW | …scripts/typescript-sdk/patch-generated-deprecations.ts | 96 | function definitionResourceSegments( | CODE |
| LOW | …scripts/typescript-sdk/patch-generated-deprecations.ts | 147 | function deprecatedAvailabilityPaths( | CODE |
| LOW | …scripts/typescript-sdk/patch-generated-deprecations.ts | 169 | export function getFernTypeScriptDeprecations( | CODE |
| LOW | …scripts/typescript-sdk/patch-generated-deprecations.ts | 521 | export function patchGeneratedTypeScriptDeprecations({ | CODE |
| LOW | web/src/__e2e__/ai-gateway.gatewaye2e.ts | 703 | async function restoreProviderConnections() { | CODE |
| LOW | web/src/__e2e__/ai-gateway.gatewaye2e.ts | 823 | async function gatewayControlPlaneRequest(input: { | CODE |
| LOW | web/src/__e2e__/ai-gateway.gatewaye2e.ts | 994 | function gatewayIngestionAuthorization(token: string) { | CODE |
| LOW | web/src/__e2e__/ai-gateway.gatewaye2e.ts | 1040 | function expectRequestedProviderModel(actual: unknown, requested: string) { | CODE |
| LOW | …omainDialogController/VerifyDomainDialogController.tsx | 7 | export function VerifyDomainDialogController({ | CODE |
| LOW | …dDomainsSettingsTable/VerifiedDomainsSettingsTable.tsx | 23 | export function VerifiedDomainsSettingsTable({ | CODE |
| LOW | …ettingsTable/ConnectedVerifiedDomainsSettingsTable.tsx | 13 | export function ConnectedVerifiedDomainsSettingsTable({ | CODE |
| LOW | web/src/ee/features/sfdc-sync/server/planChangeSync.ts | 111 | async function linkExistingMembersToSfdc( | CODE |
| LOW | web/src/ee/features/sfdc-sync/server/leadSource.ts | 18 | export async function deriveLeadSourceFromMemberships( | CODE |
| LOW | web/src/ee/features/sfdc-sync/server/sfdcService.ts | 610 | export function resetSfdcServiceCacheForTests(): void { | CODE |
| LOW | …/features/support-access/server/conductorOneWebhook.ts | 29 | export async function conductorOneWebhookHandler( | CODE |
| LOW | …/features/support-access/server/conductorOnePayload.ts | 82 | export function parseConductorOneEnvelope(rawBody: Buffer) { | CODE |
| LOW | …src/ee/features/support-access/server/supportAccess.ts | 26 | export function getActiveSupportAccessGrants( | CODE |
| LOW | …src/ee/features/support-access/server/supportAccess.ts | 35 | export async function getSupportAccessMemberships( | CODE |
| LOW | …/ee/features/support-access/server/conductorOneAuth.ts | 16 | export async function verifyConductorOneRequest(params: { | CODE |
| LOW | …/src/ee/features/multi-tenant-sso/validateSsoConfig.ts | 104 | function discoveryWhitelistFromEnv() { | CODE |
| LOW | web/src/ee/features/multi-tenant-sso/utils.ts | 135 | export async function getSsoAuthProviderIdForDomain( | CODE |
| LOW | …features/multi-tenant-sso/createNewSsoConfigHandler.ts | 11 | export async function createNewSsoConfigHandler( | CODE |
| LOW | …b/src/ee/features/billing/server/defaultSpendAlerts.ts | 115 | export async function createDefaultSpendAlertsForStripeProduct({ | CODE |
| LOW | …rc/ee/features/billing/server/chb/chbWebhookHandler.ts | 179 | async function getOrgByChbOrganizationId( | CODE |
| LOW | …rc/ee/features/billing/server/chb/chbWebhookHandler.ts | 553 | async function handleAttachedPlanCreated( | CODE |
| LOW | …rc/ee/features/billing/server/chb/chbWebhookHandler.ts | 614 | async function handleAttachedPlanChanged( | CODE |
| LOW | …rc/ee/features/billing/server/chb/chbWebhookHandler.ts | 640 | async function handleAttachedPlanCancelled( | CODE |
| LOW | …features/billing/server/stripe/stripeWebhookHandler.ts | 158 | async function getOrgBasedOnActiveSubscriptionId( | CODE |
| LOW | …features/billing/server/stripe/stripeWebhookHandler.ts | 194 | async function getOrgBasedOnCheckoutSessionAttachedToSubscription( | CODE |
| LOW | …features/billing/server/stripe/stripeWebhookHandler.ts | 259 | async function getOrgForSubscriptionWithFallbacks( | CODE |
| LOW | …features/billing/server/stripe/stripeWebhookHandler.ts | 374 | async function ensureMetadataIsSetOnStripeSubscription( | CODE |
| LOW | …features/billing/server/stripe/stripeWebhookHandler.ts | 455 | async function updateOrgBillingCycleAnchor(orgId: string, anchor?: Date) { | CODE |
| LOW | …features/billing/server/stripe/stripeWebhookHandler.ts | 464 | export async function handleSubscriptionChanged( | CODE |
| LOW | web/src/ee/features/billing/utils/isCloudBilling.ts | 11 | export function useIsCloudBillingAvailable(): boolean { | CODE |
| LOW | …es/billing/components/ConnectedBillingInvoiceTable.tsx | 12 | export function ConnectedBillingInvoiceTable() { | CODE |
| LOW | …ndAlerts/ConnectedDeleteSpendAlertDialogController.tsx | 8 | export function ConnectedDeleteSpendAlertDialogController({ | CODE |
| LOW | …ts/SpendAlerts/ConnectedSpendAlertDialogController.tsx | 46 | export function ConnectedSpendAlertDialogController({ | CODE |
| LOW | …g/components/SpendAlerts/ConnectedSpendAlertsTable.tsx | 8 | export function ConnectedSpendAlertsTable({ orgId }: { orgId: string }) { | CODE |
| LOW | …ettings/components/DeleteSsoConfigDialogController.tsx | 7 | export function DeleteSsoConfigDialogController({ | CODE |
| LOW | …/sso-settings/components/SsoConfigDialogController.tsx | 88 | export function SsoConfigDialogController({ | CODE |
| LOW | web/src/ee/features/admin-api/server/memberships.ts | 217 | function assertAuthorizeMembershipChange( | CODE |
| LOW | web/src/ee/features/admin-api/server/memberships.ts | 232 | export async function assertValidOwnershipChange({ | CODE |
| LOW | web/src/ee/features/admin-api/server/memberships.ts | 254 | function assertAuthorizeOwnershipChange( | CODE |
| LOW | …res/admin-api/server/organizations/organizationById.ts | 22 | export async function handleGetOrganizationById( | CODE |
| LOW | …n-api/server/projects/projectById/memberships/index.ts | 229 | function findMembershipWithOrganization( | CODE |
| LOW | …n-api/server/projects/projectById/memberships/index.ts | 240 | function assertMembershipOrganization(membershipOrgId: string, orgId: string) { | CODE |
| LOW | …n-api/server/projects/projectById/memberships/index.ts | 297 | function assertAuthorizeMembershipChange({ | CODE |
| LOW | …raceTimestampFromQuery/parseTraceTimestampFromQuery.ts | 8 | export function parseTraceTimestampFromQuery( | CODE |
| LOW | …rc/features/organizations/OrganizationSettingsPage.tsx | 54 | export function useOrganizationSettingsPages(): OrganizationSettingsPage[] { | CODE |
| LOW | …rc/features/organizations/OrganizationSettingsPage.tsx | 404 | function OrganizationMembersSettings({ orgId }: { orgId: string }) { | CODE |
| LOW | …src/features/organizations/utils/gatewayOnlyLanding.ts | 33 | function canViewOrganizationProjects( | CODE |
| LOW | …/features/organizations/components/AIFeatureSwitch.tsx | 97 | function handleTelemetrySwitchChange(newValue: boolean) { | CODE |
| 1810 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pnpm-workspace.yaml | 141 | # evaluation needs exports (validatorSymbol) that only exist in its own | COMMENT |
| LOW | pnpm-workspace.yaml | 161 | handlebars: 4.7.10 | COMMENT |
| LOW | ai-gateway/src/server/connection.rs | 1 | //! Socket write accounting for accepted connections, logged when each closes. | COMMENT |
| LOW | ai-gateway/src/resolution/mod.rs | 41 | resolve_limits: ControlPlaneLimits, | COMMENT |
| LOW | web/instrumentation-client.ts | 61 | if (isNoisyHttpClientPollEvent(event)) { | COMMENT |
| LOW | web/entrypoint.sh | 1 | #!/bin/sh | COMMENT |
| LOW | web/src/__e2e__/create-project.spec.ts | 1 | /* eslint-disable @typescript-eslint/no-use-before-define */ | COMMENT |
| LOW | web/src/ee/features/ui-customization/index.ts | 1 | // The ui-customization feature's public client surface (RFC rule 8). | COMMENT |
| LOW | web/src/ee/features/multi-tenant-sso/index.ts | 1 | // The multi-tenant-sso feature's public client surface (RFC rule 8). | COMMENT |
| LOW | web/src/ee/features/billing/index.ts | 1 | // The billing feature's public client surface (RFC rule 8). Named | COMMENT |
| LOW | …rc/ee/features/billing/server/chb/chbWebhookHandler.ts | 41 | COMMENT | |
| LOW | …rc/ee/features/billing/server/chb/chbBillingService.ts | 301 | idempotencyKey, | COMMENT |
| LOW | web/src/fns/observedMetadata/metadataPaths.ts | 1 | // Client-side metadata structure analysis feeding the bar's `metadata.<key>` | COMMENT |
| LOW | web/src/features/organizations/index.ts | 1 | // The organizations feature's public client surface (RFC rule 8). Named | COMMENT |
| LOW | web/src/features/filters/index.ts | 1 | // The filters feature's public surface (RFC rule 8). Named re-exports only — | COMMENT |
| LOW | …b/src/features/filters/hooks/useSidebarFilterState.tsx | 721 | // filters, expand the sidebar sections that have an active filter. Sidebar | COMMENT |
| LOW | …b/src/features/filters/hooks/useSidebarFilterState.tsx | 1081 | COMMENT | |
| LOW | …b/src/features/filters/hooks/useSidebarFilterState.tsx | 1941 | // `environment:default` (any-of the default set), which now persists. | COMMENT |
| LOW | …b/src/features/filters/lib/managedEnvironmentPolicy.ts | 41 | return { | COMMENT |
| LOW | web/src/features/in-app-agent/server/watch.ts | 61 | COMMENT | |
| LOW | …ures/in-app-agent/components/InAppAgentWindowShell.tsx | 141 | const isHandheld = useIsHandheld(); | COMMENT |
| LOW | web/src/features/rbac/index.ts | 1 | // The rbac feature's public client surface (RFC rule 8). Named | COMMENT |
| LOW | web/src/features/comments/index.ts | 1 | // The comments feature's public client surface (RFC rule 8). Named | COMMENT |
| LOW | web/src/features/traces/index.ts | 1 | // The traces feature's public surface (RFC rule 8). Named re-exports only — | COMMENT |
| LOW | …/src/features/traces/components/TraceLayoutDesktop.tsx | 61 | ), | COMMENT |
| LOW | …/src/features/traces/components/TraceLayoutDesktop.tsx | 81 | // scrolls. When either panel is collapsed the pin is dropped so the open panel | COMMENT |
| LOW | …/src/features/traces/components/TraceLayoutDesktop.tsx | 101 | // the real width, not a fixed percent — otherwise a legitimately-open (but | COMMENT |
| LOW | …/src/features/traces/components/TraceLayoutDesktop.tsx | 341 | cancelAnimationFrame(outerFrame); | COMMENT |
| LOW | …/src/features/traces/components/TraceLayoutDesktop.tsx | 361 | pendingExpand !== null || | COMMENT |
| LOW | …traces/components/TraceTimelineDense/TimelineDense.tsx | 801 | setViewport(revealed); | COMMENT |
| LOW | …traces/components/TraceTimelineDense/TimelineDense.tsx | 1021 | // Every pointer type reaches here now: the box is decided below and drawn on | COMMENT |
| LOW | …traces/components/TraceTimelineDense/TimelineDense.tsx | 1521 | {result.nodes.map((node) => { | COMMENT |
| LOW | …s/AdvancedJsonViewer/hooks/useMultiSectionTreeState.ts | 61 | return tree; | COMMENT |
| LOW | …ponents/AdvancedJsonViewer/lazy/react/rowModelStore.ts | 241 | const window = await model.getRows(s, c); | COMMENT |
| LOW | …features/traces/components/IOPreview/IOPreviewJSON.tsx | 201 | () => countJsonRows(metadataParsed), | COMMENT |
| LOW | …/src/features/search-bar/server/resolveFilterPrompt.ts | 1 | // Resolve the v4 search-bar Ask AI system prompt. | COMMENT |
| LOW | …/src/features/search-bar/server/resolveFilterPrompt.ts | 21 | // link, both inside `router.ts`'s `traceSinkParams`. A telemetry-off org | COMMENT |
| LOW | web/src/features/search-bar/server/router.ts | 1 | // v4 search-bar AI filter endpoint. | COMMENT |
| LOW | web/src/features/search-bar/server/router.ts | 221 | // Pre-generated (rather than left to `getLangfuseAITraceSinkParams`'s | COMMENT |
| LOW | web/src/features/search-bar/server/router.ts | 301 | // explain WHY the model produced what it did. refine_mode marks | COMMENT |
| LOW | web/src/features/search-bar/server/buildFilterPrompt.ts | 1 | // Registry-derived system prompt for the v4 search-bar AI filter generator. | COMMENT |
| LOW | …/src/features/search-bar/server/parseOutcomeScoring.ts | 1 | // Score the PARSE OUTCOME of an Ask AI filter completion onto the | COMMENT |
| LOW | …/src/features/search-bar/server/parseOutcomeScoring.ts | 81 | }, | COMMENT |
| LOW | …rc/features/search-bar/server/parseFilterCompletion.ts | 141 | // retracted. Distinct from a non-empty array that yields no VALID filter | COMMENT |
| LOW | …features/search-bar/components/ComposerWithPreview.tsx | 1 | // Composition wrapper: the real SearchComposer plus a read-only preview | COMMENT |
| LOW | …/features/search-bar/components/EventsSearchBarRow.tsx | 1 | /* eslint-disable @repo/no-style-props */ | COMMENT |
| LOW | …/src/features/search-bar/components/SearchComposer.tsx | 1 | /* eslint-disable no-nested-ternary */ | COMMENT |
| LOW | …/src/features/search-bar/components/SearchComposer.tsx | 781 | // Close the undo-coalesce window at the commit boundary, mirroring undo()/ | COMMENT |
| LOW | …/src/features/search-bar/components/SearchComposer.tsx | 861 | COMMENT | |
| LOW | …/src/features/search-bar/components/ComposerTokens.tsx | 21 | deriveComposerSegments, | COMMENT |
| LOW | …c/features/search-bar/components/SearchBarAiPrompt.tsx | 1 | // AI sub-mode for the search bar: a natural-language prompt that replaces the | COMMENT |
| LOW | web/src/features/search-bar/hooks/useEventsSearchBar.ts | 1 | // Container hook: wires the draft-only search-bar store to the table's filter | COMMENT |
| LOW | web/src/features/search-bar/lib/explain.ts | 1 | // Plain-language explanation of a single query token: the field in bold, then | COMMENT |
| LOW | web/src/features/search-bar/lib/ast.ts | 1 | // Editor AST for the search-bar query language: a discriminated union | COMMENT |
| LOW | web/src/features/search-bar/lib/completions.ts | 1 | /* eslint-disable no-nested-ternary */ | COMMENT |
| LOW | web/src/features/search-bar/lib/completions.ts | 621 | // (you type the value first, then anchor it). Caller only invokes this when | COMMENT |
| LOW | web/src/features/search-bar/lib/completions.ts | 1301 | } | COMMENT |
| LOW | web/src/features/search-bar/lib/langQ.ts | 1 | /* eslint-disable no-nested-ternary */ | COMMENT |
| LOW | web/src/features/search-bar/lib/langQ.ts | 921 | // ---- serializer ---- | COMMENT |
| LOW | web/src/features/search-bar/lib/validate.ts | 1 | // Semantic validation — the single "is this committable" gate. | COMMENT |
| 189 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/in-app-agent/components/InAppAgentMessage.stories.tsx | 110 | "Contrary to popular belief, Lorem Ipsum is not simply random text. It has roots in a piece of classical Latin | CODE |
| LOW | …n-app-agent/components/InAppAgentWindow.clienttest.tsx | 746 | ).toHaveAttribute("placeholder", "Let me know what I can do for you..."); | CODE |
| LOW | …n-app-agent/components/InAppAgentWindow.clienttest.tsx | 770 | ).toHaveAttribute("placeholder", "Reply..."); | CODE |
| LOW | …n-app-agent/components/InAppAgentWindow.clienttest.tsx | 821 | ).toHaveAttribute("placeholder", "Let me know what I can do for you..."); | CODE |
| LOW | …n-app-agent/components/InAppAgentWindow.clienttest.tsx | 879 | ).toHaveAttribute("placeholder", "Reply..."); | CODE |
| LOW | …ures/monitors/automations/components/PrefixedInput.tsx | 27 | | "placeholder" | CODE |
| LOW | …/monitors/automations/components/SlackActionFields.tsx | 216 | "selectedChannelId" | "selectedChannel" | "onChannelSelect" | "placeholder" | CODE |
| LOW | …/src/features/comments/lib/mentionParser.clienttest.ts | 287 | "Lorem ipsum ".repeat(800) + | CODE |
| LOW | …/src/features/comments/lib/mentionParser.clienttest.ts | 289 | "dolor sit amet ".repeat(800); | CODE |
| LOW | …src/features/traces/fns/chatMessageUtils.clienttest.ts | 149 | type: "placeholder", | CODE |
| LOW | …src/features/traces/fns/chatMessageUtils.clienttest.ts | 255 | type: "placeholder", | CODE |
| LOW | web/src/features/traces/fns/chatMessageUtils.ts | 61 | return message.type === "placeholder"; | CODE |
| LOW | …ents/AdvancedJsonViewer/utils/searchJson.clienttest.ts | 71 | { email: "user@example.com", name: "user123" }, | CODE |
| LOW | …mponents/AdvancedJsonViewer/lazy/benchByteJsonIndex.ts | 93 | `"note":"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt."${blob}}`; | CODE |
| LOW | …mponents/AdvancedJsonViewer/lazy/benchByteJsonIndex.ts | 93 | `"note":"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt."${blob}}`; | CODE |
| LOW | …races/components/IOPreview/IOPreviewPretty.stories.tsx | 46 | `system-prompt-line-${i + 1} lorem ipsum dolor sit amet consectetur adipiscing elit`, | CODE |
| LOW | …races/components/IOPreview/IOPreviewPretty.stories.tsx | 46 | `system-prompt-line-${i + 1} lorem ipsum dolor sit amet consectetur adipiscing elit`, | CODE |
| LOW | …onents/IOPreview/components/ChatMessage.clienttest.tsx | 74 | `system-prompt-line-${i + 1} lorem ipsum dolor sit amet consectetur adipiscing elit`, | CODE |
| LOW | …onents/IOPreview/components/ChatMessage.clienttest.tsx | 74 | `system-prompt-line-${i + 1} lorem ipsum dolor sit amet consectetur adipiscing elit`, | CODE |
| LOW | …redentials/components/ResetPasswordPage.clienttest.tsx | 148 | email: "user@example.com", | CODE |
| LOW | …redentials/components/ResetPasswordPage.clienttest.tsx | 157 | initialEmail="user@example.com" | CODE |
| LOW | …redentials/components/ResetPasswordPage.clienttest.tsx | 177 | email: "user@example.com", | CODE |
| LOW | …redentials/components/ResetPasswordPage.clienttest.tsx | 183 | email: "user@example.com", | CODE |
| LOW | …redentials/components/ResetPasswordPage.clienttest.tsx | 343 | data: { user: { email: "user@example.com", hasPassword: true } }, | CODE |
| LOW | …redentials/components/ResetPasswordPage.clienttest.tsx | 349 | initialEmail="user@example.com" | CODE |
| LOW | …ponents/RequestResetPasswordEmailButton.clienttest.tsx | 68 | email="user@example.com" | CODE |
| LOW | …ponents/RequestResetPasswordEmailButton.clienttest.tsx | 79 | email: "user@example.com", | CODE |
| LOW | …ponents/RequestResetPasswordEmailButton.clienttest.tsx | 91 | email="user@example.com" | CODE |
| LOW | …ponents/RequestResetPasswordEmailButton.clienttest.tsx | 114 | email: "user@example.com", | CODE |
| LOW | …ponents/RequestResetPasswordEmailButton.clienttest.tsx | 144 | email="user@example.com" | CODE |
| LOW | …ls/components/ResetPasswordPage.captcha.clienttest.tsx | 83 | initialEmail="user@example.com" | CODE |
| LOW | …ls/components/ResetPasswordPage.captcha.clienttest.tsx | 115 | email: "user@example.com", | CODE |
| LOW | …nModelStateEditor/DecisionModelStateEditor.stories.tsx | 135 | content: `Turn ${index}: ${"lorem ipsum dolor sit amet ".repeat(12)}`, | CODE |
| LOW | …nModelStateEditor/DecisionModelStateEditor.stories.tsx | 135 | content: `Turn ${index}: ${"lorem ipsum dolor sit amet ".repeat(12)}`, | CODE |
| LOW | web/src/features/auth/SignUpPage.clienttest.tsx | 92 | fireEvent.change(screen.getByPlaceholderText("Jane Doe"), { | CODE |
| LOW | web/src/features/auth/SignUpPage.clienttest.tsx | 93 | target: { value: "Jane Doe" }, | CODE |
| LOW | web/src/features/auth/SignUpPage.tsx | 346 | <Input placeholder="Jane Doe" {...field} /> | CODE |
| LOW | web/src/features/auth/SignUpPage.tsx | 572 | <Input placeholder="Jane Doe" {...field} /> | CODE |
| LOW | web/src/features/feature-flags/utils.clienttest.ts | 16 | const context = { email: "user@example.com", v4BetaEnabled: true }; | CODE |
| LOW | web/src/features/feature-flags/utils.clienttest.ts | 45 | { email: "user@example.com", v4BetaEnabled: true }, | CODE |
| LOW | web/src/features/feature-flags/utils.clienttest.ts | 101 | email: "user@example.com", | CODE |
| LOW | web/src/features/feature-flags/utils.clienttest.ts | 118 | { email: "user@example.com", v4BetaEnabled: true }, | CODE |
| LOW | web/src/features/feature-flags/utils.clienttest.ts | 127 | email: "user@example.com", | CODE |
| LOW⚡ | web/src/features/feature-flags/utils.clienttest.ts | 138 | { email: "user@example.com", v4BetaEnabled: true }, | CODE |
| LOW⚡ | web/src/features/feature-flags/utils.clienttest.ts | 148 | email: "user@example.com", | CODE |
| LOW⚡ | web/src/features/feature-flags/utils.clienttest.ts | 155 | email: "user@example.com", | CODE |
| LOW | web/src/features/feature-flags/utils.clienttest.ts | 189 | email: "user@example.com", | CODE |
| LOW⚡ | web/src/features/feature-flags/utils.clienttest.ts | 201 | email: "user@example.com", | CODE |
| LOW⚡ | web/src/features/feature-flags/utils.clienttest.ts | 211 | email: "user@example.com", | CODE |
| LOW⚡ | web/src/features/feature-flags/utils.clienttest.ts | 217 | { email: "user@example.com", v4BetaEnabled: true }, | CODE |
| LOW⚡ | web/src/features/feature-flags/utils.clienttest.ts | 226 | email: "user@example.com", | CODE |
| LOW⚡ | web/src/features/feature-flags/utils.clienttest.ts | 232 | { email: "user@example.com", v4BetaEnabled: true }, | CODE |
| LOW | web/src/features/feature-flags/utils.clienttest.ts | 244 | email: "user@example.com", | CODE |
| LOW | web/src/features/feature-flags/utils.clienttest.ts | 256 | email: "user@example.com", | CODE |
| LOW⚡ | …/features/mcp/server/prompts/tools/createChatPrompt.ts | 29 | * shape ({role, content} or {type: 'placeholder', name}). | COMMENT |
| LOW⚡ | …/features/mcp/server/prompts/tools/createChatPrompt.ts | 33 | .enum(["message", "placeholder"]) | CODE |
| LOW⚡ | …/features/mcp/server/prompts/tools/createChatPrompt.ts | 36 | "Message type. Defaults to 'message'. Use 'placeholder' to reference a runtime variable value (e.g. conversation h | CODE |
| LOW | …/features/mcp/server/prompts/tools/createChatPrompt.ts | 52 | "The variable name for 'placeholder' type messages (e.g. 'history'). Required for 'placeholder' type.", | CODE |
| LOW | …/features/mcp/server/prompts/tools/createChatPrompt.ts | 58 | * or a placeholder reference ({type: 'placeholder', name}) that is replaced | COMMENT |
| LOW | …/features/mcp/server/prompts/tools/createChatPrompt.ts | 78 | "Array of chat messages. Each message is either {role, content} or a placeholder {type: 'placeholder', name: '<var | CODE |
| 209 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …pp-agent/components/InAppAgentExecution.clienttest.tsx | 419 | providerMocks.utils.inAppAgent.getConversation.fetch.mockResolvedValueOnce( | CODE |
| CRITICAL | …pp-agent/components/InAppAgentExecution.clienttest.tsx | 549 | providerMocks.utils.inAppAgent.getConversation.fetch.mockResolvedValueOnce( | CODE |
| CRITICAL | …pp-agent/components/InAppAgentExecution.clienttest.tsx | 661 | providerMocks.utils.inAppAgent.getConversation.fetch.mockImplementationOnce( | CODE |
| CRITICAL | …pp-agent/components/InAppAgentExecution.clienttest.tsx | 695 | providerMocks.utils.inAppAgent.getConversation.fetch.mockResolvedValue( | CODE |
| CRITICAL | …SavedDialogContainer/EvaluatorSavedDialogContainer.tsx | 169 | await utils.client.evalsV2.rules.listRulesForEvaluator.query({ | CODE |
| CRITICAL | …SavedDialogContainer/EvaluatorSavedDialogContainer.tsx | 189 | const currentRule = await utils.client.evalsV2.rules.get.query({ | CODE |
| CRITICAL | web/src/server/otel/processOtelIngestion.ts | 82 | $root.opentelemetry.proto.collector.trace.v1.ExportTraceServiceRequest.decode( | CODE |
| CRITICAL | web/src/server/otel/processOtelIngestion.ts | 86 | $root.opentelemetry.proto.collector.trace.v1.ExportTraceServiceRequest.toObject( | CODE |
| CRITICAL | web/src/__tests__/server/otel-api.servertest.ts | 753 | $root.opentelemetry.proto.collector.logs.v1.ExportLogsServiceRequest.encode( | CODE |
| CRITICAL | web/src/__tests__/server/otel-api.servertest.ts | 754 | $root.opentelemetry.proto.collector.logs.v1.ExportLogsServiceRequest.fromObject( | CODE |
| CRITICAL | worker/src/features/in-app-agent/runtime/agent.ts | 694 | !params.options.langfuseMcp.toolPolicy.autoApproved.has( | CODE |
| CRITICAL | worker/src/features/in-app-agent/runtime/agent.test.ts | 1577 | instrumentationMocks.instrumentation.recordEvents.mock.calls.flatMap( | CODE |
| CRITICAL | worker/src/features/in-app-agent/runtime/agent.test.ts | 2762 | instrumentationMocks.instrumentation.recordEvents.mock.calls.flatMap( | CODE |
| CRITICAL⚡ | …eatures/v4/__tests__/handleV4LegacyApiUsageJob.test.ts | 99 | mocks.logger.info.mock.calls.find( | CODE |
| CRITICAL⚡ | …eatures/v4/__tests__/handleV4LegacyApiUsageJob.test.ts | 104 | mocks.logger.warn.mock.calls.find( | CODE |
| CRITICAL⚡ | …eatures/v4/__tests__/handleV4LegacyApiUsageJob.test.ts | 109 | mocks.logger.error.mock.calls.find( | CODE |
| CRITICAL | worker/src/features/topics/models.test.ts | 857 | state.encoding.encode.mock.calls.every(([text]) => text.length <= 4096), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/features/traces/hooks/useParsedObservation.ts | 142 | // Step 2: Parse the data in Web Worker (React Query caches THIS too!) | COMMENT |
| LOW | web/src/features/datasets/server/dataset-router.ts | 2003 | // Step 1: Return dataset item ids for which the run items match the filters | COMMENT |
| LOW | web/src/features/datasets/server/dataset-router.ts | 2017 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW⚡ | web/src/features/datasets/server/service.ts | 198 | // Step 1: Group by dataset run id | COMMENT |
| LOW⚡ | web/src/features/datasets/server/service.ts | 201 | // Step 2: Parallel enrichment per run (with timestamp) | COMMENT |
| LOW | web/src/features/datasets/server/service.ts | 215 | // Step 3: Group by dataset item ID -> Record of runId -> enriched data | COMMENT |
| LOW | web/src/features/events/hooks/useEventsTraceData.ts | 69 | // Step 1: Fetch all observations for this trace (without I/O for performance) | COMMENT |
| LOW | web/src/features/events/hooks/useEventsTraceData.ts | 84 | // Step 2: Find root observation and calculate time range for batchIO | COMMENT |
| LOW | web/src/features/events/hooks/useEventsTraceData.ts | 115 | // Step 3: Fetch I/O for the primary trace observation. | COMMENT |
| LOW⚡ | web/src/features/events/hooks/useEventsTraceData.ts | 141 | // Step 4: Fetch scores for the trace | COMMENT |
| LOW⚡ | web/src/features/events/hooks/useEventsTraceData.ts | 151 | // Step 5: Transform and merge data | COMMENT |
| LOW | …/score-analytics/components/ScoreAnalyticsProvider.tsx | 100 | // Step 1: Run estimate query first | COMMENT |
| LOW | …/score-analytics/components/ScoreAnalyticsProvider.tsx | 127 | // Step 2: Only run main query after estimate succeeds | COMMENT |
| LOW | web/src/server/api/routers/models.ts | 448 | // Step 1: Use existing findModel from shared | COMMENT |
| LOW | web/src/server/api/routers/models.ts | 477 | // Step 3: Find the full tier details | COMMENT |
| LOW⚡ | web/src/__tests__/buildStepData.clienttest.ts | 230 | // Step 1: long_task, short_overlap (they overlap) | COMMENT |
| LOW⚡ | web/src/__tests__/buildStepData.clienttest.ts | 233 | // Step 2: late_start (processed in recursive call) | COMMENT |
| LOW⚡ | web/src/__tests__/buildStepData.clienttest.ts | 234 | // Step 3: independent (completely separate) | COMMENT |
| LOW⚡ | web/src/__tests__/server/dataset-service.servertest.ts | 2731 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW⚡ | web/src/__tests__/server/dataset-service.servertest.ts | 2741 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1776 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1833 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1888 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1932 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1976 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2016 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2060 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2423 | // Step 1: Return dataset item ids for which the run items match the filters | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2458 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2552 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2613 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2670 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2788 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2853 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2925 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3001 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3048 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3102 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3142 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3174 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3246 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | …onent-cleaner/references/component-cleanup-todolist.md | 7 | ## Step 1: Making the interface strict. | COMMENT |
| LOW | …onent-cleaner/references/component-cleanup-todolist.md | 16 | ## Step 2: Cleaning up the tightened interface | COMMENT |
| LOW | …onent-cleaner/references/component-cleanup-todolist.md | 34 | ## Step 3: Audit composite components | COMMENT |
| LOW⚡ | …onent-cleaner/references/component-cleanup-todolist.md | 70 | ## Step 4: Audit the changes | COMMENT |
| LOW⚡ | …onent-cleaner/references/component-cleanup-todolist.md | 74 | ## Step 5: Document the component | COMMENT |
| LOW⚡ | …onent-cleaner/references/component-cleanup-todolist.md | 78 | ## Step 6: Final report | COMMENT |
| LOW | .agents/skills/skill-creator/SKILL.md | 306 | ### Step 1: Understanding the Skill with Concrete Examples | COMMENT |
| LOW | .agents/skills/skill-creator/SKILL.md | 324 | ### Step 2: Planning the Reusable Skill Contents | COMMENT |
| LOW | .agents/skills/skill-creator/SKILL.md | 348 | ### Step 3: Initializing the Skill | COMMENT |
| LOW | .agents/skills/skill-creator/SKILL.md | 390 | ### Step 4: Edit the Skill | COMMENT |
| LOW | .agents/skills/skill-creator/SKILL.md | 427 | ### Step 5: Validate the Skill | COMMENT |
| LOW | .agents/skills/skill-creator/SKILL.md | 437 | ### Step 6: Iterate | COMMENT |
| LOW⚡ | .agents/skills/turborepo/command/turborepo.md | 9 | ### Step 1: Load turborepo skill | COMMENT |
| LOW⚡ | .agents/skills/turborepo/command/turborepo.md | 15 | ### Step 2: Identify task type from user request | COMMENT |
| LOW⚡ | .agents/skills/turborepo/command/turborepo.md | 24 | ### Step 3: Read relevant reference files | COMMENT |
| LOW | .agents/skills/turborepo/command/turborepo.md | 38 | ### Step 4: Execute task | COMMENT |
| LOW | .agents/skills/turborepo/command/turborepo.md | 57 | ### Step 5: Summarize | COMMENT |
| LOW | …ckages/shared/src/server/repositories/dataset-items.ts | 2013 | // Step 1: Get the latest creation timestamp from dataset run items (ClickHouse) | COMMENT |
| LOW | …ckages/shared/src/server/repositories/dataset-items.ts | 2049 | // Step 2: Resolve to dataset version using temporal query (PostgreSQL) | COMMENT |
| 40 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | web/.storybook/preview.tsx | 40 | // Reproduce the app's DOM scaffold so the layout rules in globals.css that are | COMMENT |
| MEDIUM⚡ | web/.storybook/preview.tsx | 43 | // inside `#__next > div`, and without this scaffold Storybook only loosely | COMMENT |
| MEDIUM⚡ | web/.storybook/preview.tsx | 43 | // inside `#__next > div`, and without this scaffold Storybook only loosely | COMMENT |
| MEDIUM | web/src/features/traces/fns/graphAvailability.ts | 23 | // "Real" agent graph: agentic observation types or LangGraph step metadata. | COMMENT |
| MEDIUM | …features/evals/v2/constants/managedTemplatesCatalog.ts | 169 | ## Examples (few-shot) [RECOMMENDED TO SWAP OUT EXAMPLES] | COMMENT |
| MEDIUM | …rc/features/search-bar/server/parseFilterCompletion.ts | 152 | // downstream guardrails already use. | COMMENT |
| MEDIUM | …kills/add-model-price/references/model-audit-memory.md | 246 | | Anthropic | claude-fable-5-1 | Input $10/MTok, Output $50/MTok, 5m $12.50/MTok, 1h $20/MTok, read $0.25/MTok (0.025x, | CODE |
| MEDIUM | …kills/add-model-price/references/model-audit-memory.md | 250 | | Anthropic | claude-opus-5-5 | Input $4/MTok, Output $20/MTok, 5m $5/MTok, 1h $8/MTok, read $0.20/MTok (0.05x, not the | CODE |
| MEDIUM | .design-sync/ds-package/LangfuseProvider.tsx | 3 | // next-themes ThemeProvider (class strategy), the `div#__next > div` DOM scaffold | COMMENT |
| MEDIUM | .design-sync/ds-package/LangfuseProvider.tsx | 3 | // next-themes ThemeProvider (class strategy), the `div#__next > div` DOM scaffold | COMMENT |
| MEDIUM | packages/shared/scripts/seeder/utils/markdown.txt | 227 | # Main orchestration trace | COMMENT |
| MEDIUM | packages/shared/scripts/seeder/utils/README.md | 12 | ├── seeder-orchestrator.ts # Main orchestration logic | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 16 | "output": "\"{\\\"sdk_http_response\\\":{\\\"headers\\\":{\\\"content-type\\\":\\\"application/json; charset=UTF-8\\ | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 16 | "output": "\"{\\\"sdk_http_response\\\":{\\\"headers\\\":{\\\"content-type\\\":\\\"application/json; charset=UTF-8\\ | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 17 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages.0. | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 17 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages.0. | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 104 | "text": "**Langfuse** is an **open-source observability and evaluation platform specifically desig | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 104 | "text": "**Langfuse** is an **open-source observability and evaluation platform specifically desig | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 140 | "llm.output_messages.0.message.content": "**Langfuse** is an **open-source observability and evaluation platfo | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 140 | "llm.output_messages.0.message.content": "**Langfuse** is an **open-source observability and evaluation platfo | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 213 | "text": "**Langfuse** is an **open-source observability and evaluation platform specifically designed | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 213 | "text": "**Langfuse** is an **open-source observability and evaluation platform specifically designed | CODE |
| MEDIUM | packages/shared/scripts/seeder/scenarios/trace-tree.ts | 44 | // The shape that historically had NO graph view: no agentic types, no | COMMENT |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 409 | '{"sdk_http_response":{"headers":{"content-type":"application/json; charset=UTF-8","vary":"Origin, X-Origin, Ref | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 409 | '{"sdk_http_response":{"headers":{"content-type":"application/json; charset=UTF-8","vary":"Origin, X-Origin, Ref | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 411 | '{"attributes":{"llm.input_messages.0.message.content":"What is Langfuse?","llm.input_messages.0.message.role":" | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 411 | '{"attributes":{"llm.input_messages.0.message.content":"What is Langfuse?","llm.input_messages.0.message.role":" | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 431 | text: '**Langfuse** is an **open-source observability and evaluation platform specifically designed for La | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 431 | text: '**Langfuse** is an **open-source observability and evaluation platform specifically designed for La | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 451 | '{"candidates": [{"content": {"role": "model", "parts": [{"text": "**Langfuse** is an **open-source observabilit | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 453 | '{"attributes":{"input.value":"{\\"contents\\": [{\\"role\\": \\"user\\", \\"parts\\": [{\\"text\\": \\"What is | CODE |
| MEDIUM | …normalized-io/conventions/providers/gemini/fixtures.ts | 478 | text: '**Langfuse** is an **open-source observability and evaluation platform specifically designed for La | CODE |
| MEDIUM | …alized-io/conventions/providers/otel-genai/fixtures.ts | 801 | '{"attributes":{"otel.exception_pointers":"94867131908120","gen_ai.operation.name":"chat","gen_ai.request.model" | CODE |
| MEDIUM | .github/workflows/pipeline.yml | 1 | # The "Weekly CI runtime analyst" agentic workflow subscribes to this | COMMENT |
| MEDIUM | …-traces/csharp-agent-with-gemini-2026-03-09.trace.json | 447 | "metadata": "{\"attributes\":{\"gen_ai.operation.name\":\"chat\",\"gen_ai.request.model\":\"gemini-2.5-flash\",\"g | CODE |
| MEDIUM | …-traces/csharp-agent-with-gemini-2026-03-09.trace.json | 501 | "metadata": "{\"attributes\":{\"otel.exception_pointers\":\"94867131908120\",\"gen_ai.operation.name\":\"chat\",\" | CODE |
| MEDIUM | …-traces/csharp-agent-with-gemini-2026-03-09.trace.json | 555 | "metadata": "{\"attributes\":{\"gen_ai.operation.name\":\"chat\",\"gen_ai.request.model\":\"gemini-2.5-flash\",\"g | CODE |
| MEDIUM | …-traces/csharp-agent-with-gemini-2026-03-09.trace.json | 598 | "metadata": "{\"attributes\":{\"otel.exception_pointers\":\"94867131908120\",\"langfuse.trace.name\":\"Insights Ag | CODE |
| MEDIUM | …-traces/csharp-agent-with-gemini-2026-03-09.trace.json | 770 | "metadata": "{\"attributes\":{\"gen_ai.operation.name\":\"execute_tool\",\"gen_ai.tool.type\":\"function\",\"gen_a | CODE |
| MEDIUM | …atml/framework-traces/vertex-ai-2025-08-01.chatml.json | 17 | "content": "**Langfuse** is an **open-source observability and evaluation platform specifically designed for L | CODE |
| MEDIUM⚡ | …hatml/framework-traces/vertex-ai-2025-08-01.trace.json | 16 | "output": "\"{\\\"candidates\\\":[{\\\"content\\\":{\\\"role\\\":\\\"model\\\",\\\"parts\\\":[{\\\"text\\\":\\\"**La | CODE |
| MEDIUM⚡ | …hatml/framework-traces/vertex-ai-2025-08-01.trace.json | 19 | "metadata": "{\"attributes\":{\"input.value\":\"{\\\"contents\\\": [{\\\"role\\\": \\\"user\\\", \\\"parts\\\": [{\\ | CODE |
| MEDIUM | …hatml/framework-traces/vertex-ai-2025-08-01.trace.json | 145 | "output": "{\"candidates\": [{\"content\": {\"role\": \"model\", \"parts\": [{\"text\": \"**Langfuse** is an **ope | CODE |
| MEDIUM | …hatml/framework-traces/vertex-ai-2025-08-01.trace.json | 180 | "metadata": "{\"attributes\":{\"input.value\":\"{\\\"contents\\\": [{\\\"role\\\": \\\"user\\\", \\\"parts\\\": [{ | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 16 | "output": "\"{\\\"sdk_http_response\\\":{\\\"headers\\\":{\\\"content-type\\\":\\\"application/json; charset=UTF-8\\ | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 16 | "output": "\"{\\\"sdk_http_response\\\":{\\\"headers\\\":{\\\"content-type\\\":\\\"application/json; charset=UTF-8\\ | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 19 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages.0. | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 19 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages.0. | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 143 | "output": "{\"sdk_http_response\":{\"headers\":{\"content-type\":\"application/json; charset=UTF-8\",\"vary\":\"Or | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 143 | "output": "{\"sdk_http_response\":{\"headers\":{\"content-type\":\"application/json; charset=UTF-8\",\"vary\":\"Or | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 176 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages. | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 176 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages. | CODE |
| MEDIUM⚡ | …/framework-traces/google-gemini-2025-08-01.chatml.json | 17 | "content": "**Langfuse** is an **open-source observability and evaluation platform specifically designed for L | CODE |
| MEDIUM⚡ | …/framework-traces/google-gemini-2025-08-01.chatml.json | 17 | "content": "**Langfuse** is an **open-source observability and evaluation platform specifically designed for L | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | web/src/features/evals/utils/template-form-schema.ts | 60 | // ═══════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | web/src/features/evals/utils/template-form-schema.ts | 62 | // ═══════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | web/src/features/evals/utils/template-form-schema.ts | 75 | // ═══════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | web/src/features/evals/utils/template-form-schema.ts | 77 | // ═══════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | web/src/features/search-bar/hooks/useEventsSearchBar.ts | 9 | // └──────────── setFilterState/… ◀── commit() ◀────┘ | COMMENT |
| MEDIUM | …/widgets/chart-library/LineChartTimeSeries.stories.tsx | 139 | // ── Legend summary ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/widgets/chart-library/LineChartTimeSeries.stories.tsx | 161 | // ── Overload handling (decide the de-clutter approach here) ─────────────────── | COMMENT |
| MEDIUM | …_tests__/server/dashboard-widget-version.servertest.ts | 107 | // ── requiresV2 helper tests ───────────────────────────────────────── | COMMENT |
| MEDIUM | …_tests__/server/dashboard-widget-version.servertest.ts | 259 | // ── Service layer tests ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …_tests__/server/dashboard-widget-version.servertest.ts | 588 | // ── tRPC measure-aggregation validation ────────────────────────────── | COMMENT |
| MEDIUM | …_tests__/server/dashboard-widget-version.servertest.ts | 698 | // ── tRPC uiHidden dimension validation ──────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 65 | // ── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 194 | // ── Data mode toggle ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 204 | // ── Seeder mode: copy seed data into an isolated project ───────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 253 | // ── Synthetic mode: build data from scratch ────────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 587 | // ─── 1. Traces tile - total count ────────────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 607 | // ─── 2. Traces grouped by name ───────────────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 630 | // ─── 3. Traces time series ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 676 | // ─── 4. User consumption - Token cost tab ────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 758 | // ─── 5. User consumption - count of traces ───────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 782 | // ─── 6. Trace latency percentiles ────────────────────────────────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 1500 | // ─── v2 empty trace_name fallback to semantic-root names ──────────── | COMMENT |
| MEDIUM | …sts__/server/dashboard-v1-v2-consistency.servertest.ts | 1919 | // ─── v2 traces optimization: uniq(trace_id) on observations view ────── | COMMENT |
| MEDIUM | …b/src/__tests__/server/nullIfEmptyFilter.servertest.ts | 8 | // ─── NULL_IF_EMPTY_RE ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …b/src/__tests__/server/nullIfEmptyFilter.servertest.ts | 34 | // ─── Filter classes with emptyEqualsNull ──────────────────────────────────── | COMMENT |
| MEDIUM | …rver/repositories/scores-selective-seek.golden.test.ts | 68 | // ── Filter fixtures ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …rver/repositories/scores-selective-seek.golden.test.ts | 139 | // ── Emitted SQL shape ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …rver/repositories/scores-selective-seek.golden.test.ts | 223 | // ── Correctness parity vs FINAL over a multi-version fixture ───────────────── | COMMENT |
| MEDIUM | packages/shared/src/server/repositories/traces.ts | 1517 | // ─── TRACE_FIELD_GROUPS (public-API field selection) ───────────────────────── | COMMENT |
| MEDIUM | packages/shared/src/server/repositories/traces.ts | 1529 | // ─── Public-API trace query helpers ────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/shared/src/server/repositories/scores.ts | 1706 | // ── Selective seek ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/shared/src/server/repositories/scores.ts | 1754 | // ── Dedup without FINAL ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/shared/src/server/repositories/scores.ts | 3006 | // ─── Cursor helpers (v3 pagination) ─────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/shared/src/server/repositories/scores.ts | 3038 | // ─── v1/v2 public-API score query helpers ───────────────────────────────────── | COMMENT |
| MEDIUM | packages/shared/src/server/repositories/scores.ts | 3258 | // ─── v3 public-API score query helpers ──────────────────────────────────────── | COMMENT |
| MEDIUM | packages/shared/src/server/repositories/observations.ts | 2110 | // ─── Public-API observation query helpers ───────────────────────────────────── | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 185 | // ┌─────────────────────────┐ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 187 | // └───────────┬─────────────┘ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 190 | // ┌────────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 193 | // └─────┬──────────────────────────────┬───┘ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 196 | // ┌──────────────────┐ ┌───────────────────────┐ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 199 | // └─────┬──────┬─────┘ └─────┬─────────────┬───┘ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 202 | // ┌─────────┐ ┌────────┐ ▼ ▼ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 203 | // │Set: │ │Set: │ ┌─────────┐ ┌──────────┐ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 207 | // └─────────┘ └────────┘ │backoff │ └──────────┘ | COMMENT |
| MEDIUM⚡ | worker/src/queues/evalQueue.ts | 208 | // └─────────┘ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/features/traces/hooks/useParsedObservation.ts | 142 | // Step 2: Parse the data in Web Worker (React Query caches THIS too!) | COMMENT |
| LOW | web/src/features/datasets/server/dataset-router.ts | 2003 | // Step 1: Return dataset item ids for which the run items match the filters | COMMENT |
| LOW | web/src/features/datasets/server/dataset-router.ts | 2017 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW⚡ | web/src/features/datasets/server/service.ts | 198 | // Step 1: Group by dataset run id | COMMENT |
| LOW⚡ | web/src/features/datasets/server/service.ts | 201 | // Step 2: Parallel enrichment per run (with timestamp) | COMMENT |
| LOW | web/src/features/datasets/server/service.ts | 215 | // Step 3: Group by dataset item ID -> Record of runId -> enriched data | COMMENT |
| LOW | web/src/features/events/hooks/useEventsTraceData.ts | 69 | // Step 1: Fetch all observations for this trace (without I/O for performance) | COMMENT |
| LOW | web/src/features/events/hooks/useEventsTraceData.ts | 84 | // Step 2: Find root observation and calculate time range for batchIO | COMMENT |
| LOW | web/src/features/events/hooks/useEventsTraceData.ts | 115 | // Step 3: Fetch I/O for the primary trace observation. | COMMENT |
| LOW⚡ | web/src/features/events/hooks/useEventsTraceData.ts | 141 | // Step 4: Fetch scores for the trace | COMMENT |
| LOW⚡ | web/src/features/events/hooks/useEventsTraceData.ts | 151 | // Step 5: Transform and merge data | COMMENT |
| LOW | …/score-analytics/components/ScoreAnalyticsProvider.tsx | 100 | // Step 1: Run estimate query first | COMMENT |
| LOW | …/score-analytics/components/ScoreAnalyticsProvider.tsx | 127 | // Step 2: Only run main query after estimate succeeds | COMMENT |
| LOW | web/src/server/api/routers/models.ts | 448 | // Step 1: Use existing findModel from shared | COMMENT |
| LOW | web/src/server/api/routers/models.ts | 477 | // Step 3: Find the full tier details | COMMENT |
| LOW | web/src/components/DiffViewer.tsx | 66 | // removed, so we need to check if there is an addition next. | COMMENT |
| LOW | web/src/components/DiffViewer.tsx | 121 | // removed, so we need to check if there is an addition next. | COMMENT |
| LOW⚡ | web/src/__tests__/buildStepData.clienttest.ts | 230 | // Step 1: long_task, short_overlap (they overlap) | COMMENT |
| LOW⚡ | web/src/__tests__/buildStepData.clienttest.ts | 233 | // Step 2: late_start (processed in recursive call) | COMMENT |
| LOW⚡ | web/src/__tests__/buildStepData.clienttest.ts | 234 | // Step 3: independent (completely separate) | COMMENT |
| LOW⚡ | web/src/__tests__/server/dataset-service.servertest.ts | 2731 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW⚡ | web/src/__tests__/server/dataset-service.servertest.ts | 2741 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1776 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1833 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1888 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1932 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 1976 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2016 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2060 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2423 | // Step 1: Return dataset item ids for which the run items match the filters | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2458 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2552 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2613 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2670 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2788 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2853 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 2925 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3001 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3048 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3102 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3142 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3174 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | web/src/__tests__/server/dataset-service.servertest.ts | 3246 | // Step 2: Given dataset item ids, lookup dataset run items in clickhouse | COMMENT |
| LOW | …ckages/shared/src/server/repositories/dataset-items.ts | 2013 | // Step 1: Get the latest creation timestamp from dataset run items (ClickHouse) | COMMENT |
| LOW | …ckages/shared/src/server/repositories/dataset-items.ts | 2049 | // Step 2: Resolve to dataset version using temporal query (PostgreSQL) | COMMENT |
| LOW | …es/shared/src/server/repositories/dataset-run-items.ts | 973 | // Step 1: Get DRI data matching [datasetId, runId, datasetItemId] | COMMENT |
| LOW | …es/shared/src/server/repositories/dataset-run-items.ts | 999 | // Step 2: Convert to domain | COMMENT |
| LOW | worker/src/features/batch-project-blob-cleaner/index.ts | 63 | // Step 1: Query PG for soft-deleted projects | COMMENT |
| LOW | worker/src/features/batch-project-blob-cleaner/index.ts | 81 | // Step 2: Check ClickHouse for which projects still have blob refs | COMMENT |
| LOW | worker/src/features/batch-project-blob-cleaner/index.ts | 113 | // Step 3: Delete under lock | COMMENT |
| LOW | …features/eventPropagation/handleEventPropagationJob.ts | 108 | // Step 1: Get the last processed partition from Redis and find the next one to process | COMMENT |
| LOW | …features/eventPropagation/handleEventPropagationJob.ts | 159 | // Step 2: Join observations_batch_staging with traces and insert into events | COMMENT |
| LOW | …features/eventPropagation/handleEventPropagationJob.ts | 381 | // Step 3: Update the last processed partition cursor in Redis | COMMENT |
| LOW⚡ | …/features/eventPropagation/handleExperimentBackfill.ts | 886 | // Step 1: Fetch dataset run items within time window [lastRun, upperBound] | COMMENT |
| LOW | …/features/eventPropagation/handleExperimentBackfill.ts | 919 | // Step 2: Process in chunks | COMMENT |
| LOW | …valuation/__tests__/productionDeps.integration.test.ts | 376 | // Step 1: Scheduler creates job execution | COMMENT |
| LOW | …valuation/__tests__/productionDeps.integration.test.ts | 387 | // Step 2: Scheduler uploads observation to S3 | COMMENT |
| LOW | …valuation/__tests__/productionDeps.integration.test.ts | 413 | // Step 3: Executor processes and updates to COMPLETED | COMMENT |
| LOW | …valuation/__tests__/productionDeps.integration.test.ts | 428 | // Step 4: Executor uploads score to S3 | COMMENT |
| LOW | worker/src/features/otel-ingestion/processOtelEvents.ts | 126 | // Step 1: Create enriched event record (required for both evals and writes) | COMMENT |
| 25 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | web/src/features/filters/hooks/useFilterState.ts | 221 | // TODO: make this more robust, will change with new filters | COMMENT |
| MEDIUM | …/src/features/traces/components/TraceLayoutDesktop.tsx | 292 | // collapsed panel, which is more robust than chaining the per-panel | COMMENT |
| MEDIUM | …eatures/trace-graph-view/components/TraceGraphView.tsx | 102 | // TODO: make detection more robust based on metadata | COMMENT |
| MEDIUM | …/src/features/widgets/chart-library/prepareTimeAxis.ts | 251 | // real gap, robust to hundreds of points. This is the "measure labels, | COMMENT |
| MEDIUM | …es/widgets/chart-library/prepareTimeAxis.clienttest.ts | 145 | // width-aware, robust to hundreds of points. | COMMENT |
| MEDIUM | …/table/table-view-presets/hooks/useTableViewManager.ts | 683 | // columns. A robust resolution needs the column-state-model rework | COMMENT |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 16 | "output": "\"{\\\"sdk_http_response\\\":{\\\"headers\\\":{\\\"content-type\\\":\\\"application/json; charset=UTF-8\\ | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 17 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages.0. | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 104 | "text": "**Langfuse** is an **open-source observability and evaluation platform specifically desig | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 140 | "llm.output_messages.0.message.content": "**Langfuse** is an **open-source observability and evaluation platfo | CODE |
| MEDIUM⚡ | …r/utils/framework-traces/google-gemini-2025-08-01.json | 213 | "text": "**Langfuse** is an **open-source observability and evaluation platform specifically designed | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 409 | '{"sdk_http_response":{"headers":{"content-type":"application/json; charset=UTF-8","vary":"Origin, X-Origin, Ref | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 411 | '{"attributes":{"llm.input_messages.0.message.content":"What is Langfuse?","llm.input_messages.0.message.role":" | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 431 | text: '**Langfuse** is an **open-source observability and evaluation platform specifically designed for La | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 451 | '{"candidates": [{"content": {"role": "model", "parts": [{"text": "**Langfuse** is an **open-source observabilit | CODE |
| MEDIUM⚡ | …normalized-io/conventions/providers/gemini/fixtures.ts | 453 | '{"attributes":{"input.value":"{\\"contents\\": [{\\"role\\": \\"user\\", \\"parts\\": [{\\"text\\": \\"What is | CODE |
| MEDIUM | …normalized-io/conventions/providers/gemini/fixtures.ts | 478 | text: '**Langfuse** is an **open-source observability and evaluation platform specifically designed for La | CODE |
| MEDIUM | …atml/framework-traces/vertex-ai-2025-08-01.chatml.json | 17 | "content": "**Langfuse** is an **open-source observability and evaluation platform specifically designed for L | CODE |
| MEDIUM⚡ | …hatml/framework-traces/vertex-ai-2025-08-01.trace.json | 16 | "output": "\"{\\\"candidates\\\":[{\\\"content\\\":{\\\"role\\\":\\\"model\\\",\\\"parts\\\":[{\\\"text\\\":\\\"**La | CODE |
| MEDIUM⚡ | …hatml/framework-traces/vertex-ai-2025-08-01.trace.json | 19 | "metadata": "{\"attributes\":{\"input.value\":\"{\\\"contents\\\": [{\\\"role\\\": \\\"user\\\", \\\"parts\\\": [{\\ | CODE |
| MEDIUM | …hatml/framework-traces/vertex-ai-2025-08-01.trace.json | 145 | "output": "{\"candidates\": [{\"content\": {\"role\": \"model\", \"parts\": [{\"text\": \"**Langfuse** is an **ope | CODE |
| MEDIUM | …hatml/framework-traces/vertex-ai-2025-08-01.trace.json | 180 | "metadata": "{\"attributes\":{\"input.value\":\"{\\\"contents\\\": [{\\\"role\\\": \\\"user\\\", \\\"parts\\\": [{ | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 16 | "output": "\"{\\\"sdk_http_response\\\":{\\\"headers\\\":{\\\"content-type\\\":\\\"application/json; charset=UTF-8\\ | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 19 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages.0. | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 143 | "output": "{\"sdk_http_response\":{\"headers\":{\"content-type\":\"application/json; charset=UTF-8\",\"vary\":\"Or | CODE |
| MEDIUM⚡ | …l/framework-traces/google-gemini-2025-08-01.trace.json | 176 | "metadata": "{\"attributes\":{\"llm.input_messages.0.message.content\":\"What is Langfuse?\",\"llm.input_messages. | CODE |
| MEDIUM⚡ | …/framework-traces/google-gemini-2025-08-01.chatml.json | 17 | "content": "**Langfuse** is an **open-source observability and evaluation platform specifically designed for L | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/entrypoint.sh | 75 | # Check if DATABASE_URL is not set | COMMENT |
| LOW | web/entrypoint.sh | 77 | # Check if all required variables are provided | COMMENT |
| LOW | web/entrypoint.sh | 110 | # Check if CLICKHOUSE_URL is not set | COMMENT |
| LOW | web/entrypoint.sh | 116 | # Set DIRECT_URL to the value of DATABASE_URL if it is not set, required for migrations | COMMENT |
| LOW | .agents/skills/skill-creator/scripts/init_skill.py | 274 | # Check if directory already exists | COMMENT |
| LOW⚡ | packages/shared/clickhouse/scripts/dev-tables.sh | 23 | # Check if CLICKHOUSE_MIGRATION_URL is configured | COMMENT |
| LOW⚡ | packages/shared/clickhouse/scripts/dev-tables.sh | 30 | # Check if CLICKHOUSE_USER is set | COMMENT |
| LOW⚡ | packages/shared/clickhouse/scripts/dev-tables.sh | 37 | # Check if CLICKHOUSE_PASSWORD is set | COMMENT |
| LOW | packages/shared/clickhouse/scripts/drop.sh | 14 | # Check if golang-migrate is installed | COMMENT |
| LOW | packages/shared/clickhouse/scripts/down.sh | 8 | # Check if CLICKHOUSE_URL is configured | COMMENT |
| LOW | packages/shared/clickhouse/scripts/down.sh | 14 | # Check if golang-migrate is installed | COMMENT |
| LOW⚡ | packages/shared/clickhouse/scripts/up.sh | 8 | # Check if CLICKHOUSE_URL is configured | COMMENT |
| LOW⚡ | packages/shared/clickhouse/scripts/up.sh | 15 | # Check if CLICKHOUSE_MIGRATION_URL is configured | COMMENT |
| LOW⚡ | packages/shared/clickhouse/scripts/up.sh | 22 | # Check if CLICKHOUSE_USER is set | COMMENT |
| LOW⚡ | packages/shared/clickhouse/scripts/up.sh | 29 | # Check if CLICKHOUSE_PASSWORD is set | COMMENT |
| LOW⚡ | packages/shared/clickhouse/scripts/up.sh | 36 | # Check if golang-migrate is installed | COMMENT |
| LOW | worker/entrypoint.sh | 19 | # Check if DATABASE_URL is not set | COMMENT |
| LOW | worker/entrypoint.sh | 21 | # Check if all required variables are provided | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/skill-creator/scripts/init_skill.py | 283 | except Exception as e: | CODE |
| LOW⚡ | .agents/skills/skill-creator/scripts/init_skill.py | 295 | except Exception as e: | CODE |
| LOW⚡ | .agents/skills/skill-creator/scripts/init_skill.py | 304 | except Exception as e: | CODE |
| LOW⚡ | .agents/skills/skill-creator/scripts/init_skill.py | 312 | except Exception as e: | CODE |
| LOW | scripts/code-eval-runners/bootstrap-floci.py | 55 | except Exception: | CODE |
| LOW | …ts/code-eval-runners/python/code_based_eval_handler.py | 110 | except Exception as error: | CODE |
| LOW | …ts/code-eval-runners/python/code_based_eval_handler.py | 125 | except Exception as error: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …omponents/layouts/app-layout/hooks/useProjectAccess.ts | 43 | // Demo project is always accessible for demonstration purposes | COMMENT |
| MEDIUM | .github/workflows/codeql.yml | 54 | # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/preview-build.yml | 427 | # Create the native "View deployment" entry and retire the previous | COMMENT |
| MEDIUM | .github/workflows/build-sandbox-microvm-image.yml | 158 | # Create the MicroVM image when it does not exist yet. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .agents/skills/skill-creator/scripts/init_skill.py | 259 | Initialize a new skill directory with template SKILL.md. Args: skill_name: Name of the skill p | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/ci/cargo-security.sh | 19 | # Usage: | COMMENT |
| LOW | packages/shared/clickhouse/scripts/dev-tables.sh | 8 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | worker/src/queues/webhooks.ts | 935 | // TODO: implement a strategy/policy + registry pattern for different webhook providers. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tils/code-eval-template-starter-examples.clienttest.ts | 49 | const source = `def helper(value): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .agents/skills/skill-creator/scripts/init_skill.py | 230 | CODE |