A self-hosted travel/trip planner with real-time collaboration, interactive maps, PWA support, SSO, budgets, packing lists, and more.
This report presents the forensic synthetic code analysis of liketrek/TREK, a TypeScript project with 11,384 GitHub stars. SynthScan v2.0 examined 446,430 lines of code across 2637 source files, recording 1655 pattern matches distributed across 10 syntactic categories. The overall adjusted score of 9.6 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1655 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugin-sdk/test/checks-parity.test.ts | 51 | // ── 1. the README gate's constants ──────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/test/checks-parity.test.ts | 80 | // ── 2. the registry's real validator, run against an entry we built ─────────── | COMMENT |
| MEDIUM | plugin-sdk/src/index.ts | 353 | // ── integration hook interfaces ────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/ui.ts | 39 | // ── decoration ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/ui.ts | 50 | // ── cancellation ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/ui.ts | 61 | // ── prompts (cancel-checked, stderr-rendered) ──────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/ui.ts | 85 | // ── permissions ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/ui.ts | 281 | // ── flag helpers ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/network.ts | 69 | // ── 1. the tag resolves to the pinned commit ──────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/network.ts | 109 | // ── 2. the manifest at the pinned commit matches the entry ────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/network.ts | 158 | // ── 3. the released artifact ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/network.ts | 220 | // ── 4. the README at the pinned commit ────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/network.ts | 298 | // ── 5. owner binding (NEW — the registry has always enforced this) ─────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/offline.ts | 39 | // ── manifest ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/offline.ts | 240 | // ── code ──────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/offline.ts | 340 | // ── docs ──────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | plugin-sdk/src/cli/checks/offline.ts | 472 | // ── release ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/auth.test.ts | 30 | // ── extractToken ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/auth.test.ts | 68 | // ── authenticate ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/auth.test.ts | 156 | // ── adminOnly ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/validate.test.ts | 16 | // ── maxLength ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/validate.test.ts | 64 | // ── validateStringLengths ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/idempotency.test.ts | 3 | // ── In-memory store + DB mock using vi.hoisted ──────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/mfaPolicy.test.ts | 10 | // ── isPublicApiPath ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/mfaPolicy.test.ts | 66 | // ── isMfaSetupExemptPath ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/tripAccess.test.ts | 39 | // ── requireTripAccess ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/middleware/tripAccess.test.ts | 91 | // ── requireTripOwner ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/plugins/rpc-host.test.ts | 761 | // ── Costs (budget items): db:read:costs / db:write:costs ──────────────────── | COMMENT |
| MEDIUM | server/tests/unit/plugins/egress-policy.test.ts | 126 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/plugins/egress-policy.test.ts | 128 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/plugins/safe-extract.test.ts | 13 | // ── tiny archive builders ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | server/tests/unit/mcp/tools-prompts.test.ts | 133 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | server/tests/unit/mcp/tools-prompts.test.ts | 135 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | server/tests/unit/mcp/tools-prompts.test.ts | 142 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | server/tests/unit/mcp/tools-prompts.test.ts | 144 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/mcp/tools-prompts.test.ts | 165 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/mcp/tools-prompts.test.ts | 167 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/mcp/tools-prompts.test.ts | 241 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/mcp/tools-prompts.test.ts | 243 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/mcp/tools-prompts.test.ts | 312 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/mcp/tools-prompts.test.ts | 314 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/db/migration-hygiene.test.ts | 87 | // ── table rebuilds (data preserved) ────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/db/migration-hygiene.test.ts | 99 | // ── photo/journey table rebuilds (data preserved) ──────────────────────── | COMMENT |
| MEDIUM⚡ | server/tests/unit/db/migration-hygiene.test.ts | 121 | // ── template/cache scaffolding drops (no user content lost) ────────────── | COMMENT |
| MEDIUM⚡ | server/tests/unit/db/migration-hygiene.test.ts | 127 | // ── guarded column drop ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | server/tests/unit/db/migration-hygiene.test.ts | 131 | // ── targeted, bounded DELETEs ──────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/nest/memories.controller.test.ts | 39 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/nest/memories.controller.test.ts | 200 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | server/tests/unit/nest/memories.controller.test.ts | 506 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 63 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 65 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 88 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 90 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 169 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 171 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 215 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 217 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 243 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 245 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …s/unit/services/notificationPreferencesService.test.ts | 276 | // ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| 1424 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugin-sdk/src/manifest.ts | 316 | function validatePluginDependencies(raw: unknown, selfId: string, errors: string[]): PluginDependency[] { | CODE |
| LOW | server/tests/unit/db/migration-hygiene.test.ts | 54 | function findDestructiveStatements(src: string): DestructiveHit[] { | CODE |
| LOW | server/tests/unit/systemNotices/registry.test.ts | 8 | function collectRegisteredActionIds(): Set<string> { | CODE |
| LOW | server/tests/unit/services/backupService.test.ts | 806 | function setupSuccessfulExtraction() { | CODE |
| LOW⚡ | …ver/tests/unit/services/inAppNotificationPrefs.test.ts | 206 | function insertBooleanNotification(recipientId: number, senderId: number | null = null): number { | CODE |
| LOW | server/tests/unit/services/atlasService.test.ts | 36 | function insertReservationEndpoint( | CODE |
| LOW⚡ | server/tests/integration/notifications.test.ts | 406 | function insertBooleanNotification(recipientId: number): number { | CODE |
| LOW | server/tests/integration/share.test.ts | 462 | async function setupSharedPlaceWithPhoto() { | CODE |
| LOW | server/src/scheduler.ts | 314 | function purgeExpiredIdempotencyKeys( | CODE |
| LOW | server/src/scheduler.ts | 343 | function startTrekPhotoCacheCleanup(): void { | CODE |
| LOW | server/src/scheduler.ts | 366 | function startPlacePhotoCacheCleanup(): void { | CODE |
| LOW | server/src/mcp/sessionManager.ts | 37 | export function revokeUserSessionsForClient(userId: number, clientId: string): void { | CODE |
| LOW | server/src/mcp/sessionManager.ts | 53 | export function evictOldestSessionForUser(userId: number): string | null { | CODE |
| LOW | server/src/mcp/tools/notifications.ts | 16 | export function registerNotificationTools(server: McpServer, userId: number, scopes: string[] | null): void { | CODE |
| LOW | server/src/nest/llm-parse/clients/nuextract.ts | 257 | export function nuExtractToKiReservations(parsed: unknown): Record<string, unknown>[] { | CODE |
| LOW | server/src/nest/plugins/plugin-backup.ts | 39 | export function stageExtractedPluginTrees(extractDir: string): boolean { | CODE |
| LOW | server/src/nest/plugins/plugins.service.ts | 358 | export function readUserSettingsDecrypted(pluginId: string, userId: number): Record<string, unknown> { | CODE |
| LOW | server/src/nest/plugins/host/plugin-data.service.ts | 53 | export function checkpointAllPluginDataDbs(): void { | CODE |
| LOW | server/src/services/journeyService.ts | 1128 | export function addProviderPhotoToGallery( | CODE |
| LOW | server/src/services/dayService.ts | 253 | function assertNoInvertedAccommodation(tripId: string | number): void { | CODE |
| LOW | server/src/services/dayService.ts | 449 | function getAccommodationWithPlace(id: number | bigint) { | CODE |
| LOW | server/src/services/dayService.ts | 474 | export function validateAccommodationRefs(tripId: string | number, placeId?: number, startDayId?: number, endDayId?: num | CODE |
| LOW | server/src/services/placeService.ts | 678 | function googleMapsFeatureIdFromItem(item: unknown): string | null { | CODE |
| LOW | server/src/services/transitItineraryService.ts | 168 | export function cleanTransitItineraryNames( | CODE |
| LOW | server/src/services/transitItineraryService.ts | 196 | export function buildTransitReservationParts( | CODE |
| LOW | server/src/services/atlasService.ts | 1183 | export function listManuallyVisitedRegions( | CODE |
| LOW | server/src/services/atlasService.ts | 1203 | function countryCodeFromRegionCode(regionCode: string): string { | CODE |
| LOW | server/src/services/atlasService.ts | 1221 | function hasVisibleRegionForCountry(userId: number, countryCode: string, hidden: Set<string>): boolean { | CODE |
| LOW | server/src/services/budgetService.ts | 302 | export function linkBudgetItemToReservation( | CODE |
| LOW | server/src/services/budgetService.ts | 446 | export function removeUserFromBudgetItems(userId: number): void { | CODE |
| LOW | server/src/services/permissions.ts | 77 | export function invalidatePermissionsCache(): void { | CODE |
| LOW | server/src/services/queryHelpers.ts | 41 | function loadParticipantsByAssignmentIds(assignmentIds: number[]): Record<number, Participant[]> { | CODE |
| LOW | server/src/services/queryHelpers.ts | 55 | function formatAssignmentWithPlace(a: AssignmentRow, tags: Partial<Tag>[], participants: Participant[]) { | CODE |
| LOW | server/src/services/tripInviteService.ts | 32 | export function createOrRotateTripInviteLink( | CODE |
| LOW | server/src/services/oauthService.ts | 333 | export function issueClientCredentialsToken( | CODE |
| LOW | server/src/services/ephemeralTokens.ts | 55 | export function consumeEphemeralTokenWithMeta( | CODE |
| LOW | server/src/services/kmlImport.ts | 101 | export function parseKmlLineStringCoordinates(value: unknown): Array<{ lat: number; lng: number; ele: number | null }> | | CODE |
| LOW | server/src/services/kmlImport.ts | 158 | export function resolveCategoryIdForFolder(folderName: string | null, lookup: Map<string, number>): number | null { | CODE |
| LOW | server/src/services/llmConfig.ts | 44 | export function prepareLlmAddonConfigForWrite( | CODE |
| LOW | server/src/services/vacayService.ts | 104 | export function shiftOwnerEntriesForTripWindow( | CODE |
| LOW | server/src/services/journeyShareService.ts | 19 | export function createOrUpdateJourneyShareLink( | CODE |
| LOW | server/src/services/journeyShareService.ts | 65 | export function validateShareTokenForPhoto(token: string, photoId: number): { journeyId: number; ownerId: number } | nul | CODE |
| LOW | server/src/services/journeyShareService.ts | 84 | export function validateShareTokenForAsset(token: string, assetId: string): { ownerId: number } | null { | CODE |
| LOW | server/src/services/inAppNotifications.ts | 187 | export function createNotificationForRecipient( | CODE |
| LOW | server/src/services/collectionsService.ts | 134 | function loadTagsByCollectionPlaceIds(placeIds: number[]): Record<number, { id: number; name: string; color: string }[]> | CODE |
| LOW | server/src/services/collectionsService.ts | 372 | function isCollectionPlaceDuplicate( | CODE |
| LOW | server/src/services/collectionsService.ts | 387 | function findDuplicateCollectionPlace( | CODE |
| LOW | server/src/services/airtrail/airtrailMapper.ts | 175 | export function mapFlightsToMultiLegReservation( | CODE |
| LOW | server/src/services/airtrail/airtrailSync.ts | 265 | export async function pushReservationToAirtrail(reservationId: number, tripId: number): Promise<void> { | CODE |
| LOW | server/src/services/memories/synologyService.ts | 608 | export async function fetchSynologyThumbnailBytes( | CODE |
| LOW | server/src/services/memories/immichService.ts | 274 | export async function fetchImmichThumbnailBytes( | CODE |
| LOW | server/src/services/memories/immichService.ts | 432 | async function fetchAlbumAssetsViaSearch( | CODE |
| LOW | server/src/services/memories/photoResolverService.ts | 16 | export function getOrCreateTrekPhoto( | CODE |
| LOW | server/src/services/memories/photoResolverService.ts | 40 | export function getOrCreateLocalTrekPhoto( | CODE |
| LOW | server/src/services/memories/photoResolverService.ts | 40 | export function getOrCreateLocalTrekPhoto( | CODE |
| LOW | server/src/services/memories/helpersService.ts | 250 | export function updateSyncTimeForAlbumLink(linkId: string): void { | CODE |
| LOW | client/tests/unit/sync/mutationQueue.conflict.test.ts | 43 | function conflictThenAcceptHandler(serverName = 'Theirs') { | CODE |
| LOW | client/src/utils/touchDragPolyfill.ts | 15 | export function maybeInstallTouchDragPolyfill(): Promise<unknown> | void { | CODE |
| LOW | client/src/utils/dayMerge.ts | 39 | export function getTransportRouteEndpoints( | CODE |
| LOW | client/src/utils/connectionsVisibility.ts | 54 | export function resolveEffectiveConnections(stored: StoredConnections | null, alwaysShowRoutesDefault: boolean): StoredC | CODE |
| 11 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker-compose.yml | 21 | - ENCRYPTION_KEY=${ENCRYPTION_KEY:-} # Recommended. Generate with: openssl rand -hex 32. If unset, falls back to d | COMMENT |
| LOW | charts/trek/values.yaml | 21 | NODE_ENV: production | COMMENT |
| LOW | charts/trek/values.yaml | 41 | # Also used as the base URL for links in email notifications and other external links. | COMMENT |
| LOW | charts/trek/values.yaml | 61 | # OIDC_DISPLAY_NAME: "SSO" | COMMENT |
| LOW | charts/trek/values.yaml | 81 | # OVERPASS_URL: "" | COMMENT |
| LOW | wiki/Install-Helm.md | 101 | port: 3000 | COMMENT |
| LOW | wiki/Plugin-Development.md | 1221 | ```bash | COMMENT |
| LOW | wiki/Plugin-Development.md | 1241 | trek-plugin sign [zip] [--key file] | COMMENT |
| LOW | plugin-sdk/examples/koffi/client/index.html | 61 | #puffS, #squint { transform-box: view-box; } | COMMENT |
| LOW | plugin-sdk/examples/trip-doctor/server/index.js | 1 | // Trip Doctor — a hooks-only TREK plugin that showcases the #1429 capabilities. | COMMENT |
| LOW | plugin-sdk/src/cli/create.ts | 141 | if (egress.length) manifest.egress = egress; | COMMENT |
| LOW | plugin-sdk/src/cli/create.ts | 241 | `; | COMMENT |
| LOW | server/tests/unit/plugins/egress-policy.test.ts | 121 | expect(dgramConnectTarget([53])).toBeNull(); | COMMENT |
| LOW | server/tests/unit/services/passwordPolicy.test.ts | 41 | }); | COMMENT |
| LOW | server/src/config.ts | 1 | import { SUPPORTED_LANGUAGE_CODES as SUPPORTED_LANG_CODES } from '@trek/shared'; | COMMENT |
| LOW | server/src/middleware/globalMiddleware.ts | 61 | } | COMMENT |
| LOW | server/src/middleware/globalMiddleware.ts | 81 | // browser-based DCR/authorization preflights — the global cors({ origin: false }) would | COMMENT |
| LOW | server/src/db/migrations.ts | 2781 | }, | COMMENT |
| LOW | server/src/db/migrations.ts | 2881 | // regions (`visited_regions`) stored the OLD Natural Earth ISO-3166-2 codes; some no | COMMENT |
| LOW | server/src/db/migrations.ts | 3661 | } | COMMENT |
| LOW | server/src/nest/plugins/plugin-runtime.service.ts | 181 | // then swap. Plugins stay down until the app restart the restore already requires. | COMMENT |
| LOW | server/src/nest/plugins/plugin-frame.controller.ts | 81 | // guard is the union of the manifest's http:outbound:<host> grants AND the hosts an admin | COMMENT |
| LOW | server/src/nest/plugins/host/plugin-data.service.ts | 21 | // the (capped) data size — a `WITH RECURSIVE …` can spin the synchronous host | COMMENT |
| LOW | server/src/nest/plugins/runtime/plugin-host-entry.ts | 321 | lock(process, 'send', () => { | COMMENT |
| LOW | server/src/nest/platform/platform.routes.ts | 21 | // IMPORTANT — path resolution: the original blocks lived in src/app.ts, where __dirname | COMMENT |
| LOW | server/src/nest/platform/platform.routes.ts | 41 | // design. All filenames are server-chosen UUID v4 (see `uuid()` in | COMMENT |
| LOW | server/src/services/dayService.ts | 161 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | server/src/services/atlasService.ts | 1 | import { db } from '../db/database'; | COMMENT |
| LOW | server/src/services/atlasService.ts | 621 | // Float64Array rings and boxes are retained (≈1MB vs the ≈145MB parsed geometry, #1576). | COMMENT |
| LOW | server/src/services/atlasService.ts | 1261 | region_name: string; | COMMENT |
| LOW | server/src/services/atlasService.ts | 1421 | // ends in a US state abbreviation that collides with a real ISO code (e.g. "...CA" parsed | COMMENT |
| LOW | server/src/services/mapsService.ts | 361 | const OVERPASS_TIMEOUT_MS = resolveOverpassTimeoutMs(); | COMMENT |
| LOW | server/src/services/backupService.ts | 241 | // every open handle first (the host keeps them open in WAL mode) so the archived | COMMENT |
| LOW | server/src/services/notifications/channelRegistry.ts | 1 | import type { NotifEventType } from '../notificationPreferencesService'; | COMMENT |
| LOW | server/src/services/memories/immichService.ts | 181 | try { | COMMENT |
| LOW | client/e2e/ipad-scroll-1432.spec.ts | 1 | import { test, expect, devices } from '@playwright/test' | COMMENT |
| LOW | client/e2e/screenshots/seed.ts | 321 | await ctx.post(`${collab}/messages`, { data: { text } }).catch(() => {}) | COMMENT |
| LOW | client/src/vite-env.d.ts | 1 | /// <reference types="vite/client" /> | COMMENT |
| LOW | client/src/utils/flightLegs.ts | 1 | // Multi-leg (layover) flight support. | COMMENT |
| LOW | client/src/components/Map/MapViewGL.tsx | 921 | COMMENT | |
| LOW | client/src/components/Map/MapViewAuto.tsx | 1 | import { lazy, Suspense } from 'react' | COMMENT |
| LOW | …ent/src/components/SystemNotices/SystemNoticeModal.tsx | 381 | // 'h' once we classify the gesture as horizontal, 'v' for vertical, null = unclassified | COMMENT |
| LOW | client/src/hooks/useTransportRoutes.ts | 81 | // StrictMode's dev-only mount->cleanup->remount cycle runs this effect's | COMMENT |
| LOW | client/src/pages/JourneyDetailPage.test.tsx | 441 | // The second entry (Florence Day) has no photos, so its menu is a small button | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugin-sdk/test/publish.test.ts | 37 | // publish now gates on the registry's checks BEFORE it packs or releases, so a bare scaffold | COMMENT |
| MEDIUM | plugin-sdk/test/publish.test.ts | 100 | // Deliberately NOT made publishable: this is a fresh scaffold, exactly what a first-time | COMMENT |
| MEDIUM | plugin-sdk/test/sdk.test.ts | 480 | // is how a scaffold could sail through `validate` and then be rejected by the registry. | COMMENT |
| MEDIUM | plugin-sdk/test/sdk.test.ts | 484 | // The scaffold's README references ./docs/screenshot.png and never creates it. The old check | COMMENT |
| MEDIUM | plugin-sdk/test/sdk.test.ts | 608 | // A scaffold-shaped CJS entry that requires the SDK without any node_modules. | COMMENT |
| MEDIUM | plugin-sdk/test/cli.test.ts | 26 | // The scaffold must NOT invent a placeholder — it declares operatorEgress instead, which | COMMENT |
| MEDIUM | plugin-sdk/src/cli/dev.ts | 197 | // one-arg calls work on a fresh scaffold — without this, a fixtures file that omits | COMMENT |
| MEDIUM | plugin-sdk/src/cli/dev.ts | 452 | // hard-coded to 42 while the scaffold seeds trip 1, so the widget's first | COMMENT |
| MEDIUM | plugin-sdk/src/cli/create.ts | 124 | // 3.4.0, not 3.3.0. The `ctx` namespaces this scaffold is written against — ctx.meta, | COMMENT |
| MEDIUM | plugin-sdk/src/cli/create.ts | 139 | // grey square in the store, so the scaffold picks a real one rather than leaving it out. | COMMENT |
| MEDIUM | plugin-sdk/src/cli/create.ts | 206 | // The README has always linked ./docs/screenshot.png, and the scaffold has never created the | COMMENT |
| MEDIUM | plugin-sdk/src/cli/create.ts | 504 | // The scaffold turns each host into a matching http:outbound:<host> grant. Leaving it | COMMENT |
| MEDIUM | server/src/db/migrations.ts | 3292 | // Migration 155: plugin system scaffold (#plugins). A plugin is a row here; | COMMENT |
| MEDIUM | server/src/nest/plugins/plugins.service.ts | 19 | * Read side of the plugin system (#plugins), M0 scaffold. Lists installed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugin-sdk/test/checks.test.ts | 20 | author: 'Jane Doe', | CODE |
| LOW⚡ | server/tests/unit/services/oidcService.test.ts | 600 | const userInfoData = { sub: 'user-sub', email: 'user@example.com', name: 'User Name' }; | CODE |
| LOW⚡ | server/tests/unit/services/oidcService.test.ts | 608 | expect(result.email).toBe('user@example.com'); | CODE |
| LOW | server/tests/unit/services/oidcService.test.ts | 633 | { sub: 'user-sub', email: 'user@example.com', ...overrides }, | CODE |
| LOW | server/tests/unit/services/notificationService.test.ts | 36 | sendMailMock: vi.fn().mockResolvedValue({ accepted: ['test@test.com'] }), | CODE |
| LOW⚡ | server/tests/integration/auth.test.ts | 137 | email: 'admin@example.com', | CODE |
| LOW | client/tests/unit/stores/authStore.test.ts | 189 | const result = await useAuthStore.getState().login('user@example.com', 'password'); | CODE |
| LOW⚡ | client/tests/integration/api/client.test.ts | 852 | await expect(notificationsApi.testSmtp('user@example.com')).resolves.toMatchObject({ ok: true }); | CODE |
| LOW | client/tests/helpers/msw/handlers/admin.ts | 7 | const admin1 = buildAdmin({ username: 'admin', email: 'admin@example.com' }); | CODE |
| LOW | …ient/src/components/Settings/NotificationsTab.test.tsx | 350 | expect(input).toHaveAttribute('placeholder', '••••••••'); | CODE |
| LOW⚡ | client/src/components/Planner/PlaceInspector.test.tsx | 686 | const longText = 'Lorem ipsum dolor sit amet. '.repeat(200); | CODE |
| LOW⚡ | client/src/components/Planner/PlaceInspector.test.tsx | 686 | const longText = 'Lorem ipsum dolor sit amet. '.repeat(200); | CODE |
| LOW | client/src/components/Planner/PlaceInspector.test.tsx | 708 | const longText = 'Lorem ipsum dolor sit amet. '.repeat(200); | CODE |
| LOW | client/src/components/Planner/PlaceInspector.test.tsx | 708 | const longText = 'Lorem ipsum dolor sit amet. '.repeat(200); | CODE |
| LOW | client/src/components/Planner/PlaceFormModal.test.tsx | 110 | const place = buildPlace({ name: 'Test', address: '123 Main St' }); | CODE |
| LOW | client/src/components/Planner/PlaceFormModal.test.tsx | 112 | expect(screen.getByDisplayValue('123 Main St')).toBeInTheDocument(); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 39 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 94 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 126 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 248 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 271 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 299 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 327 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 362 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 400 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 518 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| LOW | client/src/pages/LoginPage.test.tsx | 553 | await user.type(screen.getByPlaceholderText(EMAIL_PLACEHOLDER), 'user@example.com'); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | server/tests/integration/auth.test.ts | 14 | // Step 1: Bare in-memory DB — schema applied in beforeAll after mocks register | COMMENT |
| LOW⚡ | server/tests/integration/auth.test.ts | 566 | // Step 1: login to get mfa_token | COMMENT |
| LOW⚡ | server/tests/integration/auth.test.ts | 573 | // Step 2: verify with a backup code | COMMENT |
| LOW⚡ | server/tests/integration/auth.test.ts | 580 | // Step 3: same backup code is now consumed — second login attempt fails | COMMENT |
| LOW⚡ | server/tests/integration/journey.test.ts | 11 | // Step 1: Bare in-memory DB — schema applied in beforeAll after mocks register | COMMENT |
| LOW⚡ | server/tests/integration/trips.test.ts | 11 | // Step 1: Bare in-memory DB — schema applied in beforeAll after mocks register | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | server/tests/integration/auth.test.ts | 14 | // Step 1: Bare in-memory DB — schema applied in beforeAll after mocks register | COMMENT |
| LOW⚡ | server/tests/integration/auth.test.ts | 566 | // Step 1: login to get mfa_token | COMMENT |
| LOW⚡ | server/tests/integration/auth.test.ts | 573 | // Step 2: verify with a backup code | COMMENT |
| LOW⚡ | server/tests/integration/auth.test.ts | 580 | // Step 3: same backup code is now consumed — second login attempt fails | COMMENT |
| LOW⚡ | server/tests/integration/journey.test.ts | 11 | // Step 1: Bare in-memory DB — schema applied in beforeAll after mocks register | COMMENT |
| LOW⚡ | server/tests/integration/trips.test.ts | 11 | // Step 1: Bare in-memory DB — schema applied in beforeAll after mocks register | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | wiki/Troubleshooting.md | 327 | -H "X-Goog-Api-Key: YOUR_API_KEY" \ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker-compose.yml | 39 | # - OIDC_ONLY=false # Set true to force SSO-only mode: disables password login and registration, overrides Admin > | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | client/e2e/screenshots/seed.ts | 317 | ['admin', "It's included — kaiseki, 18:30. Added it to the to-dos so we don't forget to confirm."], | CODE |