Home / meteor / meteor
Repository Analysis

meteor/meteor

Meteor, the JavaScript App Platform

1.7 Likely human-written View on GitHub
1.7
Adjusted Score
1.7
Raw Score
100%
Time Factor
2026-05-29
Last Push
44,782
Stars
JavaScript
Language
519,620
Lines of Code
3019
Files
704
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 4HIGH 18MEDIUM 21LOW 661

Pattern Findings

704 matches across 13 categories. Click a row to expand file-level details.

Over-Commented Block505 hits · 505 pts
SeverityFileLineSnippet
LOWguide/source/vue.md481 // 4. Map the components into a list of promises
LOWguide/source/security.md621 mediaSrc: [self],
LOWv3-docs/docs/packages/packages-listing.md21### [accounts-facebook](https://github.com/meteor/meteor/tree/release-3.0/packages/accounts-facebook) {#accounts-faceboo
LOWv3-docs/docs/packages/packages-listing.md41### [boilerplate-generator](https://github.com/meteor/meteor/tree/release-3.0/packages/boilerplate-generator) {#boilerpl
LOWv3-docs/docs/packages/packages-listing.md61### [diff-sequence](https://github.com/meteor/meteor/tree/release-3.0/packages/diff-sequence) {#diff-sequence}
LOWv3-docs/docs/packages/packages-listing.md81### [google-config-ui](https://github.com/meteor/meteor/tree/release-3.0/packages/google-config-ui) {#google-config-ui}
LOWv3-docs/docs/packages/packages-listing.md101### [minifier-js](https://github.com/meteor/meteor/tree/release-3.0/packages/minifier-js) {#minifier-js}
LOWv3-docs/docs/packages/packages-listing.md121### [promise](https://github.com/meteor/meteor/tree/release-3.0/packages/promise) {#promise}
LOWv3-docs/docs/packages/packages-listing.md141### [static-html](https://github.com/meteor/meteor/tree/release-3.0/packages/static-html) {#static-html}
LOWv3-docs/docs/packages/logging.md61### Log.debug
LOWv3-docs/docs/api/packages-listing.md21### [accounts-meetup](https://github.com/meteor/meteor/tree/devel/packages/accounts-meetup) {#accounts-meetup}
LOWv3-docs/docs/api/packages-listing.md41### [browser-policy-common](https://github.com/meteor/meteor/tree/devel/packages/browser-policy-common) {#browser-policy
LOWv3-docs/docs/api/packages-listing.md61### [ecmascript-runtime](https://github.com/meteor/meteor/tree/devel/packages/ecmascript-runtime) {#ecmascript-runtime}
LOWv3-docs/docs/api/packages-listing.md81### [id-map](https://github.com/meteor/meteor/tree/devel/packages/id-map) {#id-map}
LOWv3-docs/docs/api/packages-listing.md101### [modules](https://github.com/meteor/meteor/tree/devel/packages/modules) {#modules}
LOWv3-docs/docs/api/packages-listing.md121### [reactive-dict](https://github.com/meteor/meteor/tree/devel/packages/reactive-dict) {#reactive-dict}
LOWv3-docs/docs/api/packages-listing.md141### [test-in-browser](https://github.com/meteor/meteor/tree/devel/packages/test-in-browser) {#test-in-browser}
LOWv3-docs/docs/tutorials/security/security.md621 mediaSrc: [self],
LOWv3-docs/docs/generators/changelog/order-packages.js1const fs = require("fs").promises;
LOWtools/upgraders.js1/* eslint no-console: 0 */
LOWtools/project-context.js21// This variable was duplicated due to an issue on importing it.
LOWtools/project-context.js41 // authors don't have to add it explicitly. It isn't relevant for local
LOWtools/project-context.js61 // automatically depend on the `isobuild:prod-only` feature package.
LOWtools/project-context.js101 process.env.METEOR_DISALLOW_DELAYED_LEGACY_BUILD || "false"
LOWtools/project-context.js221 self._upgradePackageNames = options.upgradePackageNames;
LOWtools/project-context.js281 self.projectCatalog = null;
LOWtools/packaging/warehouse.js1// This file is used to access the "warehouse" of pre-0.9.0 releases. This code
LOWtools/packaging/warehouse.js21///
LOWtools/packaging/release.js141});
LOWtools/packaging/release.js201 if (!defaultRelease) {
LOWtools/packaging/package-map.js1var _ = require('underscore');
LOWtools/packaging/package-client.js101 }
LOWtools/packaging/package-client.js461}
LOWtools/packaging/package-client.js561// isopack.
LOWtools/packaging/catalog/catalog-remote.js1001// rows where the column is actually the string "1.1", since SQLite thinks
LOWtools/packaging/catalog/catalog-local.js21 // This package directly calls Plugin.registerMinifier. Package authors
LOWtools/packaging/catalog/catalog-local.js41 // Isobuild... just because less@2.0.0 depends on isobuild:compiler-plugin
LOWtools/packaging/catalog/catalog-local.js61 // that is only available on npm, which means downloading the plugin is not
LOWtools/packaging/catalog/catalog-local.js101 // All packages found either by localPackageSearchDirs or
LOWtools/packaging/catalog/catalog-local.js121 var self = this;
LOWtools/cordova/project.js701 assert(pluginVersions);
LOWtools/tool-env/source-map-retriever-stack.js1import sourceMapSupport from 'source-map-support';
LOWtools/tool-env/profile.ts1// Tiny profiler
LOWtools/tool-env/profile.ts21// The advantage of this form is that it doesn't change the
LOWtools/tool-env/profile.ts41// depends on the arguments passed to the function or the value of
LOWtools/tool-env/profile.ts61// foo: function (a) {
LOWtools/tool-env/profile.ts81//
LOWtools/tool-env/profile.ts101//
LOWtools/tool-env/profile.ts121// The leaf time report shows the total time spent within leaf
LOWtools/tool-env/profile.ts141// call to "B":
LOWtools/tool-env/isopackets.js21// An isopacket is a predefined set of isopackages which the meteor command-line
LOWtools/tool-env/isopackets.js41// process if any of their sources have changed.
LOWtools/tool-env/isopackets.js61 // ejson
LOWtools/tool-env/isopackets.js81// instance is known to be ready
LOWtools/tests/galaxy.js161 // running (or the scheduler is lying to GalaxyAPI and claiming that they are
LOWtools/tests/package-tests.js21// sand: a sandbox, that has the main app directory as its cwd.
LOWtools/tests/package-tests.js41 } else {
LOWtools/tests/package-tests.js521// - options:
LOWtools/tests/package-tests.js601//
LOWtools/tests/colon-converter-tests.js21
445 more matches not shown…
Hyper-Verbose Identifiers132 hits · 134 pts
SeverityFileLineSnippet
LOWtools/packaging/package-client.js455export async function createAndPublishBuiltPackage(conn, isopack, isopackCache) {
LOWtools/cordova/index.js38export function ensureDevBundleDependencies() {
LOWtools/cordova/index.js107export function pluginVersionsFromStarManifest(star) {
LOWtools/cordova/index.js173function displayNameForHostPlatform(platform = process.platform) {
LOWtools/tool-env/source-map-retriever-stack.js24function tryAllSourceMapRetrievers(filename) {
LOWtools/tool-env/profile.ts395function shouldRunInspectorProfiling(name: string): boolean {
LOWtools/tool-env/isopackets.js278export async function makeIsopacketBuildContext() {
LOWtools/tests/apps/dynamic-import/tests.js275function maybeClearDynamicImportCache() {
LOW…/apps/modules-modern/imports/links/acorn/src/regexp.js812function isUnicodePropertyNameCharacter(ch) {
LOW…/apps/modules-modern/imports/links/acorn/src/regexp.js827function isUnicodePropertyValueCharacter(ch) {
LOWtools/tests/apps/app-config/tests.js78 function checkEagerLoadingDisabled() {
LOW…s/tests/apps/modules/imports/links/acorn/src/regexp.js812function isUnicodePropertyNameCharacter(ch) {
LOW…s/tests/apps/modules/imports/links/acorn/src/regexp.js827function isUnicodePropertyValueCharacter(ch) {
LOWtools/isobuild/meteor-npm.js244function recordLastRebuildVersions(pkgDir) {
LOWtools/isobuild/meteor-npm.js284function rebuildVersionsAreCompatible(pkgPath) {
LOWtools/isobuild/meteor-npm.js431async function copyNpmPackageWithSymlinkedNodeModules(fromPkgDir, toPkgDir) {
LOWtools/isobuild/meteor-npm.js979function getInstalledDependenciesTreeFromPackageLock({
LOWtools/isobuild/meteor-npm.js1047function getInstalledDependenciesTree(dir) {
LOWtools/isobuild/meteor-npm.js1089function getShrinkwrappedDependenciesTree(dir) {
LOWtools/isobuild/bundler.js1685function addNodeModulesDirToObject(nmd, obj) {
LOWtools/isobuild/compiler.js298async function getLinterSourceProcessorSet({isopack, activePluginPackages}) {
LOWtools/isobuild/compiler-plugin.js81function populateServerLibPackages() {
LOWtools/isobuild/isopack.js999 function isResourceSafeForLegacyBuilds(resource) {
LOWtools/isobuild/js-analyze.js89export function findImportedModuleIdentifiers(source, hash) {
LOWtools/isobuild/linker.js814async function getOutputWithSourceMapCached(file, servePath, options) {
LOWtools/utils/archinfo.ts196export function acceptableMeteorToolArches(): string[] {
LOWtools/cli/main.js137function SpringboardToLatestRelease(track) {
LOWtools/cli/main.js145function SpringboardToSpecificRelease(fullReleaseName, msg) {
LOWtools/cli/commands.js175export function parseServerOptionsForRunCommand(options, runTargets) {
LOWtools/cli/commands.js219function parseCordovaServerPortOption(options = {}) {
LOWtools/static-assets/server/boot.js55async function maybeWaitForDebuggerToAttach() {
LOWtools/static-assets/server/mini-files.ts71export function convertToStandardLineEndings(fileContents: string) {
LOWtools/e2e-tests/babel.test.js80export async function assertFileExtensionModuleRules(outputLines) {
LOWtools/e2e-tests/assertions.js488export async function assertServiceWorkerCaching(port, options = {}) {
LOWtools/e2e-tests/assertions.js556export async function assertServiceWorkerPrecaching(port, options = {}) {
LOWtools/e2e-tests/typescript.test.js139export async function waitForTypeScriptErrorFree(outputLines, options = {}) {
LOWtools/e2e-tests/helpers.js150async function waitForOutputWithMongoWatchdog(outputLines, pattern, options, meteorProcess, env) {
LOWtools/e2e-tests/scripts/create-app.js179function extractEnvVarsFromTestFile(sourceName, isApp) {
LOWtools/meteor-services/config.js59export function getPackageStatsServerDomain() {
LOWtools/meteor-services/config.js66export function getPackageServerFilePrefix(serverUrl) {
LOWtools/meteor-services/config.js94export function getLocalPackageCacheFilename(serverUrl) {
LOWtools/fs/optimistic.ts221export function dirtyNodeModulesDirectory(nodeModulesDir: string) {
LOWtools/fs/safe-watcher-legacy.ts389function maybeSuggestRaisingWatchLimit(error: Error & { errno: number }) {
LOWtools/fs/files.ts872function addExecBitWhenReadBitPresent(fileMode: number) {
LOWtools/fs/files.ts1430export function readBufferWithLengthAndOffset(
LOWtools/tool-testing/sandbox.js529async function setUpBuiltPackageTropohouse() {
LOWtools/tool-testing/test-utils.js79export function getMeteorRuntimeConfigFromHTML(html) {
LOWpackages/callback-hook/hook.js205function wrapHookWithErrorHandling(func, onException, _this) {
LOWpackages/callback-hook/hook.js207 return function executeHookWithErrorHandling(...args) {
LOWpackages/callback-hook/hook.js228function normalizeHookExceptionHandler(exceptionHandler) {
LOWpackages/callback-hook/hook.js237 return function defaultHookExceptionHandler(error) {
LOWpackages/react-fast-refresh/server.js29function enableReactRefreshBabelPlugin(babel) {
LOWpackages/react-fast-refresh/client-runtime.js16function registerExportsForReactRefresh(moduleId, moduleExports) {
LOWpackages/minimongo/minimongo_tests_server.js61 function testSelectorAffectedByModifier(sel, mod, yes, desc) {
LOWpackages/minimongo/minimongo_server.js268function combineImportantPathsIntoProjection(paths, projection) {
LOWpackages/minimongo/common.js551function compileArrayOfDocumentSelectors(selectors, matcher, inElemMatch) {
LOWpackages/minimongo/common.js638function convertElementMatcherToBranchedMatcher(elementMatcher, options = {}) {
LOWpackages/minimongo/common.js1217function populateDocumentWithKeyValue(document, key, value) {
LOWpackages/minimongo/common.js1227function populateDocumentWithObject(document, key, value) {
LOWpackages/minimongo/common.js1257export function populateDocumentWithQueryFields(query, document = {}) {
72 more matches not shown…
Cross-Language Confusion (JS/TS)17 hits · 98 pts
SeverityFileLineSnippet
HIGHtools/tool-env/profile.ts623 print(`(#${reportNum}) Profiling: ${runningName}`);
HIGHtools/tool-env/profile.ts635 print(`(#${reportNum}) Profiling: ${runningName}`);
HIGHtools/tool-env/profile.ts681 print('');
HIGHtools/tool-env/profile.ts684 print('');
HIGHtools/tool-env/profile.ts686 print('');
HIGHtools/tool-env/profile.ts687 print(`(#${reportNum}) Total: ${formatMs(getTopLevelTotal())}` +
HIGHtools/tool-env/profile.ts689 print('');
HIGHtools/tool-env/profile.ts774 print((isParent ? leftRightDots : leftRightAlign)
HIGHtools/tool-env/profile.ts815 print('Top leaves:');
HIGHtools/tool-env/profile.ts832 print(leftRightDots(total.name, formatMs(total.time), 65) + ` (${total.count})`);
HIGH…ps/modules-modern/imports/links/acorn/src/bin/acorn.js10 print("usage: " + basename(process.argv[1]) + " [--ecma3|--ecma5|--ecma6|--ecma7|--ecma8|--ecma9|...|--ecma2015|--ecma
HIGH…ps/modules-modern/imports/links/acorn/src/bin/acorn.js11 print(" [--tokenize] [--locations] [---allow-hash-bang] [--compact] [--silent] [--module] [--help] [--] [infile
HIGH…ts/apps/top-level-await-order/packages/print/server.js3 print(logs) {
HIGH…ests/apps/modules/imports/links/acorn/src/bin/acorn.js10 print("usage: " + basename(process.argv[1]) + " [--ecma3|--ecma5|--ecma6|--ecma7|--ecma8|--ecma9|...|--ecma2015|--ecma
HIGH…ests/apps/modules/imports/links/acorn/src/bin/acorn.js11 print(" [--tokenize] [--locations] [---allow-hash-bang] [--compact] [--silent] [--module] [--help] [--] [infile
HIGHpackages/ecmascript/runtime-tests.js208 print(i);
HIGHpackages/ecmascript/runtime-tests.js215 print(i);
Decorative Section Separators16 hits · 48 pts
SeverityFileLineSnippet
MEDIUMscripts/list_package_changes.sh2# =============================================================================
MEDIUMscripts/list_package_changes.sh17# =============================================================================
MEDIUM.github/workflows/test-tools.yml34 # ─── Setup ────────────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml77 # ─── Isolated Tests ───────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml147 # ─── Test Group 0 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml213 # ─── Test Group 1 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml278 # ─── Test Group 2 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml351 # ─── Test Group 3 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml416 # ─── Test Group 4 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml481 # ─── Test Group 5 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml547 # ─── Test Group 6 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml612 # ─── Test Group 7 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml677 # ─── Test Group 8 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml742 # ─── Test Group 9 ─────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml807 # ─── Test Group 10 ────────────────────────────────────────────────────────────
MEDIUM.github/workflows/test-tools.yml872 # ─── Test Group 11 ────────────────────────────────────────────────────────────
Hallucination Indicators4 hits · 40 pts
SeverityFileLineSnippet
CRITICALtools/isobuild/compiler-plugin.js456 return self._resourceSlot.packageSourceBatch.unibuild.pkg._getServePath(self.getPathInPackage());
CRITICALpackages/oauth/end_of_popup_response.js21 window.opener.Package.oauth.OAuth._handleCredentialSecret(
CRITICALpackages/mongo/tests/mongo_livedata_tests.js1080 o.handle._multiplexer._observeDriver._unpublishedBuffer.forEach(
CRITICALpackages/mongo/tests/mongo_livedata_tests.js1507 o.handle._multiplexer._observeDriver._unpublishedBuffer.forEach(
Verbosity Indicators7 hits · 10 pts
SeverityFileLineSnippet
LOWtools/cordova/project.js606 // We need to check if the directory exists ourselves because Cordova
LOWpackages/ddp-server/livedata_server.js573 // for now, we need to check if the ddp-rate-limiter exists since we
LOWpackages/autoupdate/autoupdate_server.js59 // Step 1: load the current client program on the server
LOWpackages/autoupdate/autoupdate_server.js71 // Step 2: update __meteor_runtime_config__.autoupdate.versions.
LOWpackages/autoupdate/autoupdate_server.js87 // Step 3: form the new client boilerplate which contains the updated
LOWpackages/autoupdate/autoupdate_server.js93 // Step 4: update the ClientVersions collection.
LOWpackages/tools-core/lib/ignore.js64 // For minimal mode with skipLevel, we need to check if the parent is at a level we should skip
Example Usage Blocks7 hits · 10 pts
SeverityFileLineSnippet
LOWtools/tool-env/isopackets.js43// Example usage:
LOWscripts/list_package_changes.sh6# Usage:
LOWscripts/admin/copy-dev-bundle-mac-m1-from-jenkins.sh4# Usage:
LOWscripts/admin/copy-dev-bundle-from-jenkins.sh4# Usage:
LOWscripts/admin/copy-bootstrap-tarballs-from-jenkins.sh4# Usage:
LOW…n-meteor/scripts/admin/copy-dev-bundle-from-jenkins.sh4# Usage:
LOW…/scripts/admin/copy-bootstrap-tarballs-from-jenkins.sh4# Usage:
Fake / Example Data7 hits · 8 pts
SeverityFileLineSnippet
LOWguide/source/data-loading.md659$ curl localhost:3000/users/login -H "Content-Type: application/json" --data '{"email": "user@example.com", "password":
LOWv3-docs/v3-migration-docs/guide/removing-fibers.md127 to: 'user@example.com',
LOWv3-docs/v3-migration-docs/guide/removing-fibers.md135 to: 'user@example.com',
LOWv3-docs/docs/community-packages/mail-preview.md74 to: 'user@example.com',
LOWtools/upgraders.js340 // 1.x.y: Lorem ipsum messages go here...
LOWtools/utils/utils.test.js82 ['user@example.com', true], ['a.b@mail.co.uk', true],
LOWpackages/ejson/ejson_tests.js256 const obj = new EJSONTest.Person('John Doe', d, a);
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippet
HIGHtools/isobuild/npm-discards.ts7// of Meteor packages during `meteor build`, as requested by calling
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippet
MEDIUMpackages/constraint-solver/solver.js172 // A more nuanced reachability analysis that takes versions into account
MEDIUMpackages/test-helpers/async_multi.js20// Essentially, expect("foo", "bar") is equivalent to:
Self-Referential Comments2 hits · 4 pts
SeverityFileLineSnippet
MEDIUMtools/project-context.js608"# This file contains a token that is unique to your project.\n" +
MEDIUMtools/project-context.js1781"# This file contains information which helps Meteor properly upgrade your\n" +
Slop Phrases2 hits · 4 pts
SeverityFileLineSnippet
LOWpackages/rspack/rspack_plugin.js113 logError(`Make sure to replace the paths with your actual entry point files.`);
MEDIUMpackages/accounts-oauth/oauth_common.js27// It's worth noting that already logged in users will remain logged in unless
Redundant / Tautological Comments2 hits · 3 pts
SeverityFileLineSnippet
LOWscripts/benchmarks/initial-start-time.sh31 # Print output
LOW…plugin-meteor/scripts/benchmarks/initial-start-time.sh31 # Print output