The world's most flexible commerce platform for agents and developers
This report summarizes scanner evidence for medusajs/medusa, a TypeScript project with 37,025 GitHub stars. SynthScan examined 1,547,158 lines of code across 21505 source files, recording 1702 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 1.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 760 finding(s).
Are imports declared and package/API names verified? 932 finding(s).
Are wrappers, guards, and repeated structures necessary? 423 finding(s).
Which changes need focused human review? 1702 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1702 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tests/http/__tests__/order/admin/transfer-flow.spec.ts | 276 | { token: "fake-token" }, | CODE |
| LOW | …tests/http/__tests__/order/admin/transfer-flow.spec.ts | 653 | { token: "fake-token" }, | CODE |
| LOW | …ation-tests/http/__tests__/exchanges/exchanges.spec.ts | 175 | email: "foo@bar.com", | CODE |
| LOW | …ation-tests/http/__tests__/exchanges/exchanges.spec.ts | 993 | email: "foo@bar.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 271 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 277 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 309 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 314 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 370 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 374 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 430 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 435 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 516 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 521 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 579 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 583 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 644 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 649 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 771 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 776 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 835 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 839 | address_1: "123 Main St", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 900 | email: "test@test.com", | CODE |
| LOW | …ts__/draft-order/admin/draft-order-translation.spec.ts | 905 | address_1: "123 Main St", | CODE |
| LOW | …ft-order/admin/draft-order-calculated-shipping.spec.ts | 193 | email: "test@test.com", | CODE |
| LOW | …ft-order/admin/draft-order-calculated-shipping.spec.ts | 197 | address_1: "123 Main St", | CODE |
| LOW | …s/http/__tests__/draft-order/admin/draft-order.spec.ts | 161 | email: "test@test.com", | CODE |
| LOW | …s/http/__tests__/draft-order/admin/draft-order.spec.ts | 165 | address_1: "123 Main St", | CODE |
| LOW | …s/http/__tests__/draft-order/admin/draft-order.spec.ts | 189 | email: "test@test.com", | CODE |
| LOW | …s/http/__tests__/draft-order/admin/draft-order.spec.ts | 236 | expect(response.data.draft_order.email).toBe("test@test.com") | CODE |
| LOW | …s/http/__tests__/draft-order/admin/draft-order.spec.ts | 1797 | address_1: "123 Main St", | CODE |
| LOW | …s/http/__tests__/draft-order/admin/draft-order.spec.ts | 1853 | address_1: "123 Main St", | CODE |
| LOW | …tegration-tests/http/__tests__/user/admin/user.spec.ts | 125 | email: "test@test.com", | CODE |
| LOW | …/__tests__/loyalty/admin/store-credit-accounts.spec.ts | 43 | { email: "test@test.com" }, | CODE |
| LOW | …-tests/http/__tests__/loyalty/admin/gift-cards.spec.ts | 43 | { email: "test@test.com" }, | CODE |
| LOW | …sts/http/__tests__/promotions/admin/promotions.spec.ts | 1544 | { email: "test@test.com" }, | CODE |
| LOW | …tegration-tests/http/__tests__/cart/store/cart.spec.ts | 6029 | email: "test@test.com", | CODE |
| LOW | …ests/http/__tests__/returns/return-translation.spec.ts | 223 | email: "foo@bar.com", | CODE |
| LOW | …tegration-tests/http/__tests__/returns/returns.spec.ts | 99 | email: "foo@bar.com", | CODE |
| LOW | …/http/__tests__/customer/admin/customer-export.spec.ts | 69 | address_1: "123 Main St", | CODE |
| LOW | …/http/__tests__/customer/admin/customer-export.spec.ts | 137 | address_1: "123 Main St", | CODE |
| LOW | …n-tests/http/__tests__/order-edits/order-edits.spec.ts | 197 | email: "foo@bar.com", | CODE |
| LOW | …n-tests/http/__tests__/order-edits/order-edits.spec.ts | 798 | email: "foo@bar.com", | CODE |
| LOW | …n-tests/http/__tests__/order-edits/order-edits.spec.ts | 1390 | email: "foo@bar.com", | CODE |
| LOW | …n-tests/http/__tests__/order-edits/order-edits.spec.ts | 2671 | email: "foo@bar.com", | CODE |
| LOW | …n-tests/http/__tests__/order-edits/order-edits.spec.ts | 2827 | email: "foo@bar.com", | CODE |
| LOW | integration-tests/http/__tests__/claims/claims.spec.ts | 151 | email: "foo@bar.com", | CODE |
| LOW | integration-tests/http/__tests__/claims/claims.spec.ts | 1353 | email: "foo@bar.com", | CODE |
| LOW | …ests/http/__tests__/claims/claims-translations.spec.ts | 416 | email: "foo@bar.com", | CODE |
| LOW | integration-tests/modules/__tests__/order/order.spec.ts | 331 | email: "foo@bar.com", | CODE |
| LOW | integration-tests/modules/__tests__/order/order.spec.ts | 844 | email: "foo@bar.com", | CODE |
| LOW | integration-tests/modules/__tests__/order/order.spec.ts | 911 | email: "foo@bar.com", | CODE |
| LOW | …s/__tests__/order/workflows/begin-order-return.spec.ts | 239 | email: "foo@bar.com", | CODE |
| LOW | …es/__tests__/order/workflows/begin-order-claim.spec.ts | 238 | email: "foo@bar.com", | CODE |
| LOW | …s/__tests__/order/workflows/create-fulfillment.spec.ts | 240 | email: "foo@bar.com", | CODE |
| LOW | …ules/__tests__/order/workflows/create-shipment.spec.ts | 242 | email: "foo@bar.com", | CODE |
| LOW | …__tests__/order/workflows/begin-order-exchange.spec.ts | 295 | email: "foo@bar.com", | CODE |
| LOW | …tests__/order/workflows/create-complete-return.spec.ts | 251 | email: "foo@bar.com", | CODE |
| LOW | …tests__/order/workflows/create-complete-return.spec.ts | 456 | email: "foo@bar.com", | CODE |
| LOW | …odules/__tests__/order/workflows/__fixtures__/index.ts | 31 | email: "foo@bar.com", | CODE |
| 865 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …modules/__tests__/rbac-match-endpoint-entities.spec.ts | 41 | async function collectAdminEndpointEntities(): Promise<Set<string>> { | CODE |
| LOW | …modules/__tests__/rbac-match-endpoint-entities.spec.ts | 78 | function collectPolicyResourceEntities(): Set<string> { | CODE |
| LOW | …tests/modules/__tests__/product/admin/products.spec.ts | 18 | async function createProductsWithVariants( | CODE |
| LOW | …ping-options/workflows/batch-shipping-options-rules.ts | 29 | async function createShippingOptionFixture({ | CODE |
| LOW | …n-medusa-theme/src/resources/helpers/events-listing.ts | 54 | function combineEventVariablesByCategory(children: DeclarationReflection[]) { | CODE |
| LOW | …heme/src/resources/helpers/type-declaration-members.ts | 67 | function getComponentMarkdownContent({ | CODE |
| LOW | …ypedoc-plugin-medusa-theme/src/utils/build-doc-page.ts | 167 | function reflectionTypeParameterBlocks( | CODE |
| LOW | …ypedoc-plugin-medusa-theme/src/utils/build-doc-page.ts | 666 | function buildExpandedMemberBlocks( | CODE |
| LOW | …-theme/src/utils/get-correct-declaration-reflection.ts | 9 | export default function getCorrectDeclarationReflection( | CODE |
| LOW | …plugin-medusa-theme/src/utils/build-workflow-blocks.ts | 246 | function buildWorkflowDiagramBlock( | CODE |
| LOW | …n-medusa-theme/src/utils/reflection-type-parameters.ts | 28 | export function getReflectionTypeParameters({ | CODE |
| LOW | …ypedoc-plugin-medusa-theme/src/utils/workflow-utils.ts | 7 | export function getWorkflowReflectionFromNamespace( | CODE |
| LOW | …ypedoc-plugin-medusa-theme/src/utils/workflow-utils.ts | 25 | export function getPackageNameForWorkflowReflection( | CODE |
| LOW | …-plugin-medusa-theme/src/utils/reflection-formatter.ts | 123 | export function reflectionComponentFormatter({ | CODE |
| LOW | …-plugin-medusa-theme/src/utils/build-events-listing.ts | 51 | function combineEventVariablesByCategory( | CODE |
| LOW | …a-theme/src/utils/format-workflow-diagram-component.ts | 1 | export function formatWorkflowDiagramComponent({ | CODE |
| LOW | …s/typedoc-plugin-medusa-theme/src/utils/frontmatter.ts | 39 | function resolveFrontmatterVariables( | CODE |
| LOW | …doc-plugin-medusa-theme/src/utils/react-query-utils.ts | 29 | export function getReactQueryQueryParameterType( | CODE |
| LOW | …/packages/docs-automator/src/commands/analyze-cloud.ts | 7 | export function registerAnalyzeCloudCommand(program: Command) { | CODE |
| LOW | …ckages/docs-automator/src/commands/analyze-webhooks.ts | 10 | export function registerAnalyzeWebhooksCommand(program: Command) { | CODE |
| LOW | …typedoc-plugin-custom/src/resolve-references-plugin.ts | 268 | function getOrCreateInternalNs({ | CODE |
| LOW | …ages/docs-generator/src/utils/get-output-base-paths.ts | 34 | export function getRouteExamplesOutputBasePath() { | CODE |
| LOW | …ackages/docs-generator/src/utils/medusa-react-utils.ts | 89 | export function shouldHaveCustomNamespace(node: ts.Node): boolean { | CODE |
| LOW | www/utils/packages/utils/src/examples-utils.ts | 21 | function getReflectionTypeFakeValue({ | CODE |
| LOW | www/utils/packages/utils/src/examples-utils.ts | 203 | export function getReflectionTypeFakeValueStr({ | CODE |
| LOW | www/utils/packages/utils/src/workflow-utils.ts | 72 | export function findReflectionInNamespaces( | CODE |
| LOW | …ges/docs-ui/src/utils/check-sidebar-item-visibility.ts | 1 | export function checkSidebarItemVisibility( | CODE |
| LOW | …ges/docs-ui/src/utils/check-sidebar-item-visibility.ts | 11 | function checkSidebarItemVisibilityRelative( | CODE |
| LOW | …ges/docs-ui/src/utils/check-sidebar-item-visibility.ts | 30 | function checkSidebarItemVisibilityTransition( | CODE |
| LOW | …/packages/docs-ui/src/hooks/use-scroll-utils/index.tsx | 70 | function useScrollControllerContextValue({ | CODE |
| LOW | …w/packages/remark-rehype-plugins/src/cloudinary-img.ts | 7 | export function cloudinaryImgRehypePlugin({ | CODE |
| LOW | …s/remark-rehype-plugins/src/attach-frontmatter-data.ts | 3 | export function remarkAttachFrontmatterDataPlugin(): Transformer { | CODE |
| LOW | …mark-rehype-plugins/src/workflow-diagram-link-fixer.ts | 5 | export function workflowDiagramLinkFixerPlugin( | CODE |
| LOW | …/remark-rehype-plugins/src/prerequisites-link-fixer.ts | 5 | export function prerequisitesLinkFixerPlugin( | CODE |
| LOW | …kages/remark-rehype-plugins/src/md-content-override.ts | 16 | export function mdContentOverrideRehypePlugin(): Transformer { | CODE |
| LOW | www/packages/docs-utils/src/api-ref-paths.ts | 71 | export function getApiRefTagOperationSlugs( | CODE |
| LOW | www/packages/build-scripts/src/generate-sidebar.ts | 40 | async function getAutogeneratedSidebarItems( | CODE |
| LOW | www/packages/build-scripts/src/generate-sidebar.ts | 113 | async function getAutogeneratedTagSidebarItems( | CODE |
| LOW | …cripts/src/utils/sidebar-attach-href-common-options.ts | 7 | export function sidebarAttachCommonOptions( | CODE |
| LOW | …ripts/src/utils/get-core-flows-ref-sidebar-children.ts | 5 | export default async function getCoreFlowsRefSidebarChildren(): Promise< | CODE |
| LOW | …pps/ui/specs/examples/dropdown-menu-disabled-icons.tsx | 4 | export default function DropdownMenuDisabledAndIcons() { | CODE |
| LOW | www/apps/ui/specs/examples/dropdown-menu-shortcuts.tsx | 14 | export default function DropdownMenuWithShortcuts() { | CODE |
| LOW | …ps/ui/specs/examples/progress-accordion-controlled.tsx | 4 | export default function ProgressAccordionControlled() { | CODE |
| LOW | …apps/ui/specs/examples/progress-accordion-disabled.tsx | 3 | export default function ProgressAccordionDisabled() { | CODE |
| LOW | …w/apps/resources/app/api/references/[...slug]/route.ts | 82 | async function loadReferencesFileUncached( | CODE |
| LOW | …faces/types.InventoryTypes.IInventoryService/page.json | 1 | {"slug":"/references/types/InventoryTypes/interfaces/types.InventoryTypes.IInventoryService","title":"IInventoryService" | CODE |
| LOW | …oryService.restoreReservationItemsByLineItem/page.json | 1 | {"slug":"/references/inventory-next/restoreReservationItemsByLineItem","title":"restoreReservationItemsByLineItem - Inve | CODE |
| LOW | …s/api-reference/utils/get-security-schema-type-name.ts | 3 | export default function getSecuritySchemaTypeName( | CODE |
| LOW | packages/medusa-test-utils/src/medusa-test-runner.ts | 384 | export function medusaIntegrationTestRunner({ | CODE |
| LOW | packages/medusa-test-utils/src/database.ts | 455 | async function unregisterFrameworkPgConnection(pgConnection: any) { | CODE |
| LOW | …tils/src/medusa-test-runner-utils/postgres-template.ts | 3 | function getWaitingroomCredentials() { | CODE |
| LOW | …tils/src/medusa-test-runner-utils/postgres-template.ts | 87 | async function terminateDatabaseConnections( | CODE |
| LOW | …tils/src/medusa-test-runner-utils/postgres-template.ts | 100 | async function cancelAndTerminateDatabaseConnections( | CODE |
| LOW | …tils/src/medusa-test-runner-utils/postgres-template.ts | 167 | export async function createPostgresDatabaseTemplate({ | CODE |
| LOW | …tils/src/medusa-test-runner-utils/postgres-template.ts | 191 | export async function restorePostgresDatabaseFromTemplate({ | CODE |
| LOW | …tils/src/medusa-test-runner-utils/postgres-template.ts | 212 | export async function dropPostgresDatabaseTemplate(templateName: string) { | CODE |
| LOW | …e/core-flows/src/order/workflows/create-fulfillment.ts | 121 | function prepareRegisterOrderFulfillmentData({ | CODE |
| LOW | …core/core-flows/src/order/workflows/create-shipment.ts | 105 | function prepareRegisterShipmentData({ | CODE |
| LOW | …order/workflows/mark-order-fulfillment-as-delivered.ts | 126 | function prepareRegisterDeliveryData({ | CODE |
| LOW | …-flows/src/order/workflows/cancel-order-fulfillment.ts | 144 | function prepareCancelOrderFulfillmentData({ | CODE |
| 353 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ls/writing-tutorials/reference/tutorial-conventions.md | 291 | // class scaffold with constructor only, no method implementations yet | COMMENT |
| MEDIUM | www/packages/tags/src/tags/order.ts | 80 | "path": "https://docs.medusajs.com/resources/how-to-tutorials/tutorials/agentic-commerce" | CODE |
| MEDIUM | www/packages/tags/src/tags/tutorial.ts | 32 | "path": "https://docs.medusajs.com/resources/how-to-tutorials/tutorials/agentic-commerce" | CODE |
| MEDIUM | www/packages/tags/src/tags/cart.ts | 28 | "path": "https://docs.medusajs.com/resources/how-to-tutorials/tutorials/agentic-commerce" | CODE |
| MEDIUM | www/packages/tags/src/tags/server.ts | 96 | "path": "https://docs.medusajs.com/resources/how-to-tutorials/tutorials/agentic-commerce" | CODE |
| MEDIUM | …ypes/types/types.CommonTypes.MedusaContainer/page.json | 1 | {"slug":"/references/types/CommonTypes/types/types.CommonTypes.MedusaContainer","title":"MedusaContainer","frontmatter": | CODE |
| MEDIUM | …es/workflows/types/workflows.MedusaContainer/page.json | 1 | {"slug":"/references/workflows/types/workflows.MedusaContainer","title":"MedusaContainer","frontmatter":{},"toc":[],"blo | CODE |
| MEDIUM | …eferences/utils/classes/utils.VectorProperty/page.json | 1 | {"slug":"/references/utils/classes/utils.VectorProperty","title":"VectorProperty","frontmatter":{},"toc":[{"title":"Type | CODE |
| MEDIUM | scripts/add_comment.sh | 7 | # --workflow <triage|review|fix|guardrails> \ | COMMENT |
| MEDIUM | scripts/labels.sh | 7 | # --workflow <triage|review|fix|guardrails> \ | COMMENT |
| MEDIUM⚡ | scripts/close_issue.sh | 9 | # triage and fix (issues), `gh pr close` for review and guardrails (PRs). | COMMENT |
| MEDIUM⚡ | scripts/close_issue.sh | 15 | # GITHUB_EVENT_NUMBER=N ./scripts/close_issue.sh --workflow <triage|review|fix|guardrails> | COMMENT |
| MEDIUM⚡ | scripts/reopen.sh | 9 | # triage and fix (issues), `gh pr reopen` for review and guardrails (PRs). | COMMENT |
| MEDIUM⚡ | scripts/reopen.sh | 12 | # GITHUB_EVENT_NUMBER=N ./scripts/reopen.sh --workflow <triage|review|fix|guardrails> | COMMENT |
| MEDIUM | packages/medusa-test-utils/CHANGELOG.md | 115 | - [#16298](https://github.com/medusajs/medusa/pull/16298) [`5f4d93c374b0ad0b0a31e75de98c7557e0415677`](https://github.co | CODE |
| MEDIUM | packages/medusa-test-utils/CHANGELOG.md | 498 | - [#12903](https://github.com/medusajs/medusa/pull/12903) [`c5d609d09cb29c6cf01d1c6c65305cc566f391c5`](https://github.co | CODE |
| MEDIUM | packages/medusa-test-utils/CHANGELOG.md | 508 | - [#12886](https://github.com/medusajs/medusa/pull/12886) [`e9a33d0700c47c3d2357bb325791bc272a4d4569`](https://github.co | CODE |
| MEDIUM | packages/core/core-flows/CHANGELOG.md | 1055 | - [#11190](https://github.com/medusajs/medusa/pull/11190) [`e98d3c615e8a42e09974ded9cc3ca3277e3a9217`](https://github.co | CODE |
| MEDIUM | packages/core/core-flows/CHANGELOG.md | 1355 | - [#5811](https://github.com/medusajs/medusa/pull/5811) [`07107f356`](https://github.com/medusajs/medusa/commit/07107f35 | CODE |
| MEDIUM | packages/core/workflows-sdk/CHANGELOG.md | 503 | - [#13319](https://github.com/medusajs/medusa/pull/13319) [`ff152e7ace60232c02932bbd06a759e555a823d4`](https://github.co | CODE |
| MEDIUM | packages/core/workflows-sdk/CHANGELOG.md | 962 | - [#5951](https://github.com/medusajs/medusa/pull/5951) [`bf63c4e6a`](https://github.com/medusajs/medusa/commit/bf63c4e6 | CODE |
| MEDIUM | packages/core/workflows-sdk/CHANGELOG.md | 966 | - [#6020](https://github.com/medusajs/medusa/pull/6020) [`fbee006e5`](https://github.com/medusajs/medusa/commit/fbee006e | CODE |
| MEDIUM | packages/core/types/CHANGELOG.md | 139 | - [#16298](https://github.com/medusajs/medusa/pull/16298) [`5f4d93c374b0ad0b0a31e75de98c7557e0415677`](https://github.co | CODE |
| MEDIUM | packages/core/types/CHANGELOG.md | 525 | - [#13391](https://github.com/medusajs/medusa/pull/13391) [`d7692100e7a2b2f078756cac9ca2b33784d3d1ff`](https://github.co | CODE |
| MEDIUM | packages/core/types/CHANGELOG.md | 729 | - [#11263](https://github.com/medusajs/medusa/pull/11263) [`65fae943c9d919f658c8660e5b46626c1b302e31`](https://github.co | CODE |
| MEDIUM | packages/core/types/CHANGELOG.md | 1192 | - [#5025](https://github.com/medusajs/medusa/pull/5025) [`3d68be2b6`](https://github.com/medusajs/medusa/commit/3d68be2b | CODE |
| MEDIUM | packages/core/types/CHANGELOG.md | 1198 | - [#5023](https://github.com/medusajs/medusa/pull/5023) [`107aaa371`](https://github.com/medusajs/medusa/commit/107aaa37 | CODE |
| MEDIUM | packages/core/framework/CHANGELOG.md | 177 | - [#16298](https://github.com/medusajs/medusa/pull/16298) [`5f4d93c374b0ad0b0a31e75de98c7557e0415677`](https://github.co | CODE |
| MEDIUM | packages/core/framework/CHANGELOG.md | 1072 | - [#11190](https://github.com/medusajs/medusa/pull/11190) [`e98d3c615e8a42e09974ded9cc3ca3277e3a9217`](https://github.co | CODE |
| MEDIUM | packages/core/utils/CHANGELOG.md | 132 | - [#16533](https://github.com/medusajs/medusa/pull/16533) [`f7317903600e5b64f06c21c29a73e0e569d2fe3a`](https://github.co | CODE |
| MEDIUM | packages/core/utils/CHANGELOG.md | 155 | - [#16298](https://github.com/medusajs/medusa/pull/16298) [`5f4d93c374b0ad0b0a31e75de98c7557e0415677`](https://github.co | CODE |
| MEDIUM | packages/core/utils/CHANGELOG.md | 1254 | - [#6020](https://github.com/medusajs/medusa/pull/6020) [`fbee006e5`](https://github.com/medusajs/medusa/commit/fbee006e | CODE |
| MEDIUM | packages/core/utils/CHANGELOG.md | 1321 | - [#5337](https://github.com/medusajs/medusa/pull/5337) [`e47461d95`](https://github.com/medusajs/medusa/commit/e47461d9 | CODE |
| MEDIUM | packages/core/modules-sdk/CHANGELOG.md | 89 | - [#16298](https://github.com/medusajs/medusa/pull/16298) [`5f4d93c374b0ad0b0a31e75de98c7557e0415677`](https://github.co | CODE |
| MEDIUM | packages/core/modules-sdk/CHANGELOG.md | 826 | - [#6742](https://github.com/medusajs/medusa/pull/6742) [`06f22bb48a`](https://github.com/medusajs/medusa/commit/06f22bb | CODE |
| MEDIUM | packages/core/modules-sdk/CHANGELOG.md | 1029 | - [#4930](https://github.com/medusajs/medusa/pull/4930) [`c3dba0694`](https://github.com/medusajs/medusa/commit/c3dba069 | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 1 | # @medusajs/orchestration | COMMENT |
| MEDIUM⚡ | packages/core/orchestration/CHANGELOG.md | 435 | - [#12951](https://github.com/medusajs/medusa/pull/12951) [`e74044af4de213ba6326a8fb2b5d02e5875b8a4a`](https://github.co | CODE |
| MEDIUM⚡ | packages/core/orchestration/CHANGELOG.md | 437 | - [#12903](https://github.com/medusajs/medusa/pull/12903) [`c5d609d09cb29c6cf01d1c6c65305cc566f391c5`](https://github.co | CODE |
| MEDIUM⚡ | packages/core/orchestration/CHANGELOG.md | 447 | - [#12886](https://github.com/medusajs/medusa/pull/12886) [`e9a33d0700c47c3d2357bb325791bc272a4d4569`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 7 | - [#17408](https://github.com/medusajs/medusa/pull/17408) [`958ce34`](https://github.com/medusajs/medusa/commit/958ce349 | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 71 | - [#16533](https://github.com/medusajs/medusa/pull/16533) [`f7317903600e5b64f06c21c29a73e0e569d2fe3a`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 235 | - [#14719](https://github.com/medusajs/medusa/pull/14719) [`583deb57ea5805a1cce7be8342bd8533b29682b5`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 389 | - [#13391](https://github.com/medusajs/medusa/pull/13391) [`d7692100e7a2b2f078756cac9ca2b33784d3d1ff`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 417 | - [#13319](https://github.com/medusajs/medusa/pull/13319) [`ff152e7ace60232c02932bbd06a759e555a823d4`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 541 | - [#12066](https://github.com/medusajs/medusa/pull/12066) [`92c7baa56193e052c6af41ea240b8d2cecd9fb77`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 543 | - [#12138](https://github.com/medusajs/medusa/pull/12138) [`31abba8cdeedee65328e5529e172d4d3b23661f3`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 581 | - [#11190](https://github.com/medusajs/medusa/pull/11190) [`e98d3c615e8a42e09974ded9cc3ca3277e3a9217`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 583 | - [#11263](https://github.com/medusajs/medusa/pull/11263) [`65fae943c9d919f658c8660e5b46626c1b302e31`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 613 | - [#10913](https://github.com/medusajs/medusa/pull/10913) [`01acf9e7009300c01544f022c2a97d4d3f0fdb65`](https://github.co | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 765 | - [#6742](https://github.com/medusajs/medusa/pull/6742) [`06f22bb48a`](https://github.com/medusajs/medusa/commit/06f22bb | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 817 | - [#5951](https://github.com/medusajs/medusa/pull/5951) [`bf63c4e6a`](https://github.com/medusajs/medusa/commit/bf63c4e6 | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 819 | - [#6020](https://github.com/medusajs/medusa/pull/6020) [`fbee006e5`](https://github.com/medusajs/medusa/commit/fbee006e | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 831 | - [#5811](https://github.com/medusajs/medusa/pull/5811) [`07107f356`](https://github.com/medusajs/medusa/commit/07107f35 | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 865 | - [#5449](https://github.com/medusajs/medusa/pull/5449) [`5c77029cb`](https://github.com/medusajs/medusa/commit/5c77029c | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 874 | - [#5337](https://github.com/medusajs/medusa/pull/5337) [`e47461d95`](https://github.com/medusajs/medusa/commit/e47461d9 | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 900 | - [#5025](https://github.com/medusajs/medusa/pull/5025) [`3d68be2b6`](https://github.com/medusajs/medusa/commit/3d68be2b | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 902 | - [#5023](https://github.com/medusajs/medusa/pull/5023) [`107aaa371`](https://github.com/medusajs/medusa/commit/107aaa37 | CODE |
| MEDIUM | packages/core/orchestration/CHANGELOG.md | 920 | - [#4930](https://github.com/medusajs/medusa/pull/4930) [`c3dba0694`](https://github.com/medusajs/medusa/commit/c3dba069 | CODE |
| MEDIUM | packages/core/orchestration/AGENTS.md | 1 | # @medusajs/orchestration | COMMENT |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | jest.config.js | 61 | // useCoverage ? `jest-junit` : [] | COMMENT |
| LOW | .eslintrc.js | 1 | const path = require("path") | COMMENT |
| LOW | …__/payment-collection/admin/payment-collection.spec.ts | 21 | it("lists payment collections", async () => {}) | COMMENT |
| LOW | …__/payment-collection/admin/payment-collection.spec.ts | 41 | // }) | COMMENT |
| LOW | …__/payment-collection/admin/payment-collection.spec.ts | 61 | // amount: 10000, | COMMENT |
| LOW | …__/payment-collection/admin/payment-collection.spec.ts | 81 | // id: paymentCollection.id, | COMMENT |
| LOW | …__/payment-collection/admin/payment-collection.spec.ts | 101 | // deleted: true, | COMMENT |
| LOW | …__/payment-collection/admin/payment-collection.spec.ts | 121 | // expect(1).toBe(2) // should be ignored | COMMENT |
| LOW | …tp/__tests__/sales-channel/admin/sales-channel.spec.ts | 521 | // - Filtering products by sales channel | COMMENT |
| LOW | …ion-tests/http/__tests__/product/admin/product.spec.ts | 341 | }), | COMMENT |
| LOW | …ion-tests/http/__tests__/product/admin/product.spec.ts | 361 | // conditions: [ | COMMENT |
| LOW | …ion-tests/http/__tests__/product/admin/product.spec.ts | 381 | // ) | COMMENT |
| LOW | …ion-tests/http/__tests__/product/admin/product.spec.ts | 861 | // async () => { | COMMENT |
| LOW | …ion-tests/http/__tests__/product/admin/product.spec.ts | 881 | // description: "Test", | COMMENT |
| LOW | …ion-tests/http/__tests__/product/admin/product.spec.ts | 3561 | // // Validate that the price exists | COMMENT |
| LOW | …ion-tests/http/__tests__/product/admin/product.spec.ts | 3581 | // where: { | COMMENT |
| LOW | …ion-tests/http/__tests__/product/admin/product.spec.ts | 3601 | // expect(pricePre).toBeTruthy() | COMMENT |
| LOW | …sts/http/__tests__/price-list/admin/price-list.spec.ts | 761 | // BREAKING: There is no longer a DELETE /admin/price-lists/test-list/products/${product.id}/prices endpoint | COMMENT |
| LOW | …sts/http/__tests__/price-list/admin/price-list.spec.ts | 781 | COMMENT | |
| LOW | …sts/http/__tests__/price-list/admin/price-list.spec.ts | 801 | // console.log(err) | COMMENT |
| LOW | …sts/http/__tests__/price-list/admin/price-list.spec.ts | 821 | // id: "customer-group-1", | COMMENT |
| LOW | …sts/http/__tests__/price-list/admin/price-list.spec.ts | 841 | // expect(response.data.price_list).toEqual( | COMMENT |
| LOW | …sts/http/__tests__/price-list/admin/price-list.spec.ts | 861 | // { includes_tax: true }, | COMMENT |
| LOW | …lows-diagrams-generator/src/classes/diagram-builder.ts | 181 | const linePrefix = this.getLinePrefix(level) | COMMENT |
| LOW | …lows-diagrams-generator/src/classes/diagram-builder.ts | 201 | // ++nodesInCurrentLine | COMMENT |
| LOW | www/packages/docs-ui/src/global-config.ts | 1 | // The version config lives in `docs-utils` so that non-React consumers (the | COMMENT |
| LOW | scripts/sanitize_pr_body.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | scripts/confine_search_paths.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | scripts/search_prs.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/get_dependency_releases.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/get_linear_ticket.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/check_hidden_content.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/get_pr_diff.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/add_comment.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/add_comment.sh | 21 | # (e.g. lowercase keys) are ignored — the caller is responsible for | COMMENT |
| LOW | scripts/check_team_review.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/labels.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/convert_to_discussion.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/close_issue.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/sanitize_untrusted.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | scripts/sanitize_untrusted.py | 21 | # cursor / erase codes, OSC). Pasted-log colors, stray | COMMENT |
| LOW | scripts/reopen.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/issue_hash.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | scripts/get_linked_issues.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …/core/core-flows/src/tax/workflows/update-tax-rates.ts | 61 | // async (input: StepInput, { container }) => { | COMMENT |
| LOW | packages/core/types/src/caching/index.ts | 21 | // cacheGetFn: () => Promise<any>, | COMMENT |
| LOW | packages/core/types/src/event-bus/common.ts | 1 | import { Context } from "../shared-context" | COMMENT |
| LOW | packages/core/utils/src/core-flows/events.ts | 1281 | // export interface EventBusEventsOptions { | COMMENT |
| LOW | packages/core/utils/src/core-flows/events.ts | 1301 | // [OrderWorkflowEvents.FULFILLMENT_CANCELED]?: EventOptions | COMMENT |
| LOW | packages/core/utils/src/core-flows/events.ts | 1321 | // // Sales Channel events | COMMENT |
| LOW | packages/core/utils/src/core-flows/events.ts | 1341 | // // Product events | COMMENT |
| LOW | packages/core/utils/src/core-flows/events.ts | 1361 | // // Invite events | COMMENT |
| LOW | packages/core/utils/src/core-flows/events.ts | 1381 | // // Shipping Option events | COMMENT |
| LOW | packages/core/utils/src/notification/events.ts | 21 | // [NotificationEvents.NOTIFICATION_ATTACHED]?: EventOptions | COMMENT |
| LOW | packages/core/utils/src/fulfillment/events.ts | 41 | DELIVERY_CREATED: "delivery.created", | COMMENT |
| LOW | packages/core/utils/src/fulfillment/events.ts | 61 | // [FulfillmentEvents.SERVICE_ZONE_DETACHED]?: EventOptions | COMMENT |
| LOW | packages/core/utils/src/fulfillment/events.ts | 81 | // [FulfillmentEvents.SHIPPING_OPTION_TYPE_UPDATED]?: EventOptions | COMMENT |
| LOW | packages/core/utils/src/fulfillment/events.ts | 101 | // [FulfillmentEvents.SHIPPING_OPTION_RULE_DETACHED]?: EventOptions | COMMENT |
| LOW | packages/core/utils/src/fulfillment/events.ts | 121 | // [FulfillmentEvents.FULFILLMENT_ITEM_UPDATED]?: EventOptions | COMMENT |
| LOW | packages/core/utils/src/user/events.ts | 21 | // [UserEvents.USER_ATTACHED]?: EventOptions | COMMENT |
| 90 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ation-tests/http/__tests__/view-configurations.spec.ts | 715 | // Step 1: Create a system default view | COMMENT |
| LOW | …ation-tests/http/__tests__/view-configurations.spec.ts | 749 | // Step 2: Retrieve active view - should return the system default | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 36 | // Step 1: Create base policies | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 82 | // Step 2: Create base roles with their policies | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 123 | // Step 3: Create "Admin" role that inherits from both Viewer and Editor, plus additional permissions | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 143 | // Step 4: Verify role parent was created | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 162 | // Step 5: Verify direct policies for Admin role | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 175 | // Step 6: List ALL policies for Admin role (including inherited) | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 228 | // Step 7: Verify Viewer role only has its direct policies | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 245 | // Step 8: Verify Editor role only has its direct policies | COMMENT |
| LOW⚡ | .claude/agents/codebase-pattern-finder.md | 42 | ### Step 1: Identify Pattern Types | COMMENT |
| LOW⚡ | .claude/agents/codebase-pattern-finder.md | 52 | ### Step 2: Search! | COMMENT |
| LOW⚡ | .claude/agents/codebase-pattern-finder.md | 56 | ### Step 3: Read and Extract | COMMENT |
| LOW⚡ | .claude/agents/codebase-analyzer.md | 42 | ### Step 1: Read Entry Points | COMMENT |
| LOW⚡ | .claude/agents/codebase-analyzer.md | 48 | ### Step 2: Follow the Code Path | COMMENT |
| LOW⚡ | .claude/agents/codebase-analyzer.md | 56 | ### Step 3: Document Key Logic | COMMENT |
| LOW | .claude/commands/create_plan.md | 39 | ### Step 1: Context Gathering & Initial Analysis | COMMENT |
| LOW | .claude/commands/create_plan.md | 91 | ### Step 2: Research & Discovery | COMMENT |
| LOW | .claude/commands/create_plan.md | 144 | ### Step 3: Plan Structure Development | COMMENT |
| LOW | .claude/commands/create_plan.md | 166 | ### Step 4: Detailed Plan Writing | COMMENT |
| LOW | .claude/commands/create_plan.md | 285 | ### Step 5: Review | COMMENT |
| LOW | …e/skills/writing-tutorials/reference/building-phase.md | 74 | ## Step 5 - Validate Implementation | COMMENT |
| LOW | …ls/writing-tutorials/reference/tutorial-conventions.md | 57 | ## Step 1: Install a Medusa Application | COMMENT |
| LOW | …ls/writing-tutorials/reference/tutorial-conventions.md | 77 | ## Step 1: Install a Medusa Application | COMMENT |
| LOW | …ls/writing-tutorials/reference/tutorial-conventions.md | 276 | ## Step 3: Create Mailchimp Module Provider | COMMENT |
| LOW | .claude/skills/updating-dependencies/SKILL.md | 39 | ### Step 1: Read the group | COMMENT |
| LOW⚡ | .claude/skills/updating-dependencies/SKILL.md | 52 | ### Step 2: Research | COMMENT |
| LOW⚡ | .claude/skills/updating-dependencies/SKILL.md | 56 | ### Step 3: Apply | COMMENT |
| LOW⚡ | .claude/skills/updating-dependencies/SKILL.md | 60 | ### Step 4: Verify | COMMENT |
| LOW⚡ | .claude/skills/updating-dependencies/SKILL.md | 64 | ### Step 5: Emit the result | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 103 | // Step 1: Crawl all directories in parallel | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 134 | // Step 2: Parse all OAS files in parallel and collect valid ones | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 204 | // Step 3: Create a single TypeScript program for all route files | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 278 | // Step 4: Check which OAS files should be kept (parallel processing) | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 322 | // Step 5: Collect tags and schemas from ALL valid OAS files (parallel) | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 397 | // Step 6: Delete invalid OAS files in parallel batches | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 409 | // Step 7: Process base files in parallel | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 454 | // Step 8: Process schema files in parallel | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 481 | // Step 9: Clean up unused schemas | COMMENT |
| LOW | …ion-tests/__fixtures__/workflow_sync_retry_interval.ts | 28 | // Step 1: Fails first 2 times, succeeds on 3rd attempt | COMMENT |
| LOW | …ion-tests/__fixtures__/workflow_sync_retry_interval.ts | 52 | // Step 2: Always succeeds (to verify workflow continues after retry) | COMMENT |
| LOW | …egration-tests/__fixtures__/workflow_retry_interval.ts | 17 | // Step 1: Fails first 2 times, succeeds on 3rd attempt | COMMENT |
| LOW | …egration-tests/__fixtures__/workflow_retry_interval.ts | 42 | // Step 2: Always succeeds (to verify workflow continues after retry) | COMMENT |
| LOW | …ion-tests/__fixtures__/workflow_sync_retry_interval.ts | 28 | // Step 1: Fails first 2 times, succeeds on 3rd attempt | COMMENT |
| LOW | …ion-tests/__fixtures__/workflow_sync_retry_interval.ts | 52 | // Step 2: Always succeeds (to verify workflow continues after retry) | COMMENT |
| LOW | …egration-tests/__fixtures__/workflow_retry_interval.ts | 17 | // Step 1: Fails first 2 times, succeeds on 3rd attempt | COMMENT |
| LOW | …egration-tests/__fixtures__/workflow_retry_interval.ts | 42 | // Step 2: Always succeeds (to verify workflow continues after retry) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ation-tests/http/__tests__/view-configurations.spec.ts | 715 | // Step 1: Create a system default view | COMMENT |
| LOW | …ation-tests/http/__tests__/view-configurations.spec.ts | 749 | // Step 2: Retrieve active view - should return the system default | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 36 | // Step 1: Create base policies | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 82 | // Step 2: Create base roles with their policies | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 123 | // Step 3: Create "Admin" role that inherits from both Viewer and Editor, plus additional permissions | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 143 | // Step 4: Verify role parent was created | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 162 | // Step 5: Verify direct policies for Admin role | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 175 | // Step 6: List ALL policies for Admin role (including inherited) | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 228 | // Step 7: Verify Viewer role only has its direct policies | COMMENT |
| LOW | …on-tests/modules/__tests__/rbac/rbac-workflows.spec.ts | 245 | // Step 8: Verify Editor role only has its direct policies | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 103 | // Step 1: Crawl all directories in parallel | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 134 | // Step 2: Parse all OAS files in parallel and collect valid ones | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 204 | // Step 3: Create a single TypeScript program for all route files | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 278 | // Step 4: Check which OAS files should be kept (parallel processing) | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 322 | // Step 5: Collect tags and schemas from ALL valid OAS files (parallel) | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 397 | // Step 6: Delete invalid OAS files in parallel batches | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 409 | // Step 7: Process base files in parallel | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 454 | // Step 8: Process schema files in parallel | COMMENT |
| LOW | …tils/packages/docs-generator/src/commands/clean-oas.ts | 481 | // Step 9: Clean up unused schemas | COMMENT |
| LOW | …ion-tests/__fixtures__/workflow_sync_retry_interval.ts | 28 | // Step 1: Fails first 2 times, succeeds on 3rd attempt | COMMENT |
| LOW | …ion-tests/__fixtures__/workflow_sync_retry_interval.ts | 52 | // Step 2: Always succeeds (to verify workflow continues after retry) | COMMENT |
| LOW | …egration-tests/__fixtures__/workflow_retry_interval.ts | 17 | // Step 1: Fails first 2 times, succeeds on 3rd attempt | COMMENT |
| LOW | …egration-tests/__fixtures__/workflow_retry_interval.ts | 42 | // Step 2: Always succeeds (to verify workflow continues after retry) | COMMENT |
| LOW | …ion-tests/__fixtures__/workflow_sync_retry_interval.ts | 28 | // Step 1: Fails first 2 times, succeeds on 3rd attempt | COMMENT |
| LOW | …ion-tests/__fixtures__/workflow_sync_retry_interval.ts | 52 | // Step 2: Always succeeds (to verify workflow continues after retry) | COMMENT |
| LOW | …egration-tests/__fixtures__/workflow_retry_interval.ts | 17 | // Step 1: Fails first 2 times, succeeds on 3rd attempt | COMMENT |
| LOW | …egration-tests/__fixtures__/workflow_retry_interval.ts | 42 | // Step 2: Always succeeds (to verify workflow continues after retry) | COMMENT |
| LOW | …ign-system/toolbox/src/commands/tokens/utils/colors.ts | 40 | * So we need to check if the opacity is defined, and if it is, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …nt-adyen/src/services/__tests__/adyen-provider.spec.ts | 292 | const keys = checkout.PaymentsApi.payments.mock.calls.map( | CODE |
| CRITICAL | …ges/modules/search/src/utils/__tests__/seeding.spec.ts | 371 | context.provider.deleteIndex.mock.calls.map(([call]) => call.index) | CODE |
| CRITICAL | …ges/modules/search/src/utils/__tests__/seeding.spec.ts | 686 | context.provider.deleteIndex.mock.calls.map(([call]) => call.index) | CODE |
| CRITICAL | .github/workflows/close-linked-prs.yml | 52 | mergedPrData.repository.pullRequest.closingIssuesReferences.nodes.map( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .claude/skills/reviewing-prs/reference/ai-content.md | 25 | Code", "Generated by Claude Code", "Generated with [Claude Code](...)" | CODE |
| HIGH | .claude/skills/triaging-issues/reference/outcomes.md | 83 | "Generated with Claude Code", "Generated by Claude Code", "Generated with | CODE |
| HIGH | .github/workflows/triage-dependabot-alerts.yml | 213 | echo "> Generated by Claude via the \`diagnosing-dependabot-alerts\` skill. Review carefully before merging | CODE |
| HIGH | .github/workflows/cloud-docs-automation.yml | 197 | // Title generated by Claude, with a fallback if it is missing or malformed | COMMENT |
| HIGH | .github/workflows/admin-i18n-sync.yml | 207 | echo "Translates strings in \`en.json\` that are missing from the other locale files. Translations were gene | CODE |
| HIGH | .github/workflows/cloud-webhooks-docs-automation.yml | 188 | // Title generated by Claude, with a fallback if it is missing or malformed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ages/medusa/src/commands/__tests__/run-scripts.spec.ts | 13 | // ─── Mocks ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/medusa/src/commands/__tests__/run-scripts.spec.ts | 54 | // ─── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ages/medusa/src/commands/__tests__/run-scripts.spec.ts | 78 | // ─── Tests ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sa/src/commands/db/__tests__/db-migrate-search.spec.ts | 4 | // ─── Mocks ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sa/src/commands/db/__tests__/db-migrate-search.spec.ts | 59 | // ─── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …sa/src/commands/db/__tests__/db-migrate-search.spec.ts | 125 | // ─── Tests ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/medusa/src/commands/db/__tests__/db-migrate.spec.ts | 5 | // ─── Mocks ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/medusa/src/commands/db/__tests__/db-migrate.spec.ts | 55 | // ─── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …es/medusa/src/commands/db/__tests__/db-migrate.spec.ts | 106 | // ─── Tests ──────────────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …es/src/constants/merger-custom-options/notification.ts | 178 | Make sure to replace the value of \`template\` to the ID of the template in your provider. | CODE |
| LOW | …earch_provider.AbstractSearchProviderService/page.json | 1 | {"slug":"/references/search/provider","title":"How to Create a Search Module Provider","frontmatter":{"slug":"/reference | CODE |
| MEDIUM | …es/interfaces/types.CommonTypes.ConfigModule/page.json | 1 | {"slug":"/references/types/CommonTypes/interfaces/types.CommonTypes.ConfigModule","title":"ConfigModule","frontmatter":{ | CODE |
| LOW | …es/interfaces/types.CommonTypes.ConfigModule/page.json | 1 | {"slug":"/references/types/CommonTypes/interfaces/types.CommonTypes.ConfigModule","title":"ConfigModule","frontmatter":{ | CODE |
| LOW | …faces/types.CommonTypes.ProjectConfigOptions/page.json | 1 | {"slug":"/references/types/CommonTypes/interfaces/types.CommonTypes.ProjectConfigOptions","title":"ProjectConfigOptions" | CODE |
| MEDIUM | …nces/types/interfaces/types.ILockingProvider/page.json | 1 | {"slug":"/references/types/interfaces/types.ILockingProvider","title":"ILockingProvider","frontmatter":{},"toc":[{"title | CODE |
| LOW | …fication.AbstractNotificationProviderService/page.json | 1 | {"slug":"/references/notification-provider-module","title":"How to Create a Notification Module Provider","frontmatter": | CODE |
| MEDIUM | …/locking/interfaces/locking.ILockingProvider/page.json | 1 | {"slug":"/references/locking-module-provider","title":"How to Create a Locking Module Provider","frontmatter":{"slug":"/ | CODE |
| LOW | …eferences/mfa/interfaces/mfa.AuthMfaProvider/page.json | 1 | {"slug":"/references/auth/mfa-module-provider","title":"How to Create a Multi-Factor Authentication (MFA) Module Provide | CODE |
| LOW | …sdk/types/modules_sdk.ModuleBootstrapOptions/page.json | 1 | {"slug":"/references/modules_sdk/types/modules_sdk.ModuleBootstrapOptions","title":"ModuleBootstrapOptions","frontmatter | CODE |
| LOW | …ing/interfaces/caching.ICachingModuleService/page.json | 1 | {"slug":"/references/caching-service","title":"How to Use Caching Module","frontmatter":{"slug":"/references/caching-ser | CODE |
| LOW | …hods/pricing.IPricingModuleService.addPrices/page.json | 1 | {"slug":"/references/pricing/addPrices","title":"addPrices - Pricing Module Reference","frontmatter":{"displayed_sidebar | CODE |
| LOW | packages/core/modules-sdk/src/medusa-module.ts | 78 | * Don't forget to clear the instances (MedusaModule.clearInstances()) after the migration are done. | COMMENT |
| LOW | packages/cli/medusa-cli/cli.js | 10 | "ts-node cannot be loaded and used, if you are running in production don't forget to set your NODE_ENV to producti | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | www/apps/ui/specs/examples/code-block-demo.tsx | 7 | code: `curl 'http://localhost:9000/store/products/PRODUCT_ID'\n -H 'x-publishable-key: YOUR_API_KEY'`, | CODE |
| HIGH | …em/ui/src/components/code-block/code-block.stories.tsx | 23 | code: `curl -H 'x-publishable-key: YOUR_API_KEY' 'http://localhost:9000/store/products/PRODUCT_ID'`, | CODE |
| HIGH | …em/ui/src/components/code-block/code-block.stories.tsx | 28 | code: `// Install the JS Client in your storefront project: @medusajs/medusa-js\n\nimport Medusa from "@medusajs/med | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/sanitize_pr_body.py | 5 | # Usage: | COMMENT |
| LOW | scripts/get_dependency_releases.sh | 6 | # Usage: | COMMENT |
| LOW | scripts/add_comment.sh | 5 | # Usage: | COMMENT |
| LOW | scripts/labels.sh | 5 | # Usage: | COMMENT |
| LOW⚡ | scripts/close_issue.sh | 14 | # Usage: | COMMENT |
| LOW | scripts/sanitize_untrusted.py | 6 | # Usage: | COMMENT |
| LOW⚡ | scripts/reopen.sh | 11 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/core/modules-sdk/src/loaders/module-loader.ts | 71 | // TODO: implement external Resolvers | COMMENT |
| LOW | …t/components/edit-location-form/edit-location-form.tsx | 27 | phone: zod.string().optional(), // TODO: Add validation | CODE |
| LOW | …-create-return/components/return-create-form/schema.ts | 15 | // TODO: implement this | COMMENT |
| LOW | …aim/components/claim-create-form/claim-create-form.tsx | 111 | // TODO: implement confirm claim request | COMMENT |
| LOW | …aim/components/claim-create-form/claim-create-form.tsx | 118 | // TODO: implement update claim request | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …pes/interfaces/types.FileTypes.IFileProvider/page.json | 1 | {"slug":"/references/types/FileTypes/interfaces/types.FileTypes.IFileProvider","title":"IFileProvider","frontmatter":{}, | CODE |
| LOW | …ses/payment_provider.AbstractPaymentProvider/page.json | 1 | {"slug":"/references/payment/provider","title":"How to Create a Payment Module Provider","frontmatter":{"slug":"/referen | CODE |
| MEDIUM | scripts/add_comment.sh | 107 | # Render the template in Python for robust handling of multi-line values | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/deps-analyze/update-dependency-versions.sh | 16 | # Check if package exists in dependencies or devDependencies | COMMENT |
| LOW | .github/workflows/sync-resources-references-to-r2.yml | 58 | # Write the file lists to disk (.github/outputs/*.txt) instead of only | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/sanitize_untrusted.py | 356 | print(f"Error: invalid JSON on stdin: {err}", file=sys.stderr) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/sanitize_untrusted.py | 307 | CODE |