MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
This report presents the forensic synthetic code analysis of mock-server/mockserver-monorepo, a Java project with 4,956 GitHub stars. SynthScan v2.0 examined 1,197,947 lines of code across 5308 source files, recording 3932 pattern matches distributed across 21 syntactic categories. The overall adjusted score of 7.7 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3932 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …com/mockserver/jetbrains/ContractTestRestClientTest.kt | 23 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …n/com/mockserver/jetbrains/MockServerRestClientTest.kt | 24 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …kotlin/com/mockserver/jetbrains/ChaosRestClientTest.kt | 15 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …lin/com/mockserver/jetbrains/BreakpointProtocolTest.kt | 31 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …rver/testcontainers/MockServerContainerConfigTest.java | 27 | String version = org.mockserver.client.MockServerClient.class.getPackage().getImplementationVersion(); | CODE |
| CRITICAL | …rver/testcontainers/MockServerContainerConfigTest.java | 197 | org.junit.jupiter.api.Assertions.assertThrows( | CODE |
| CRITICAL | mockserver/mockserver-netty/pom.xml | 135 | io.netty.channel.epoll.Epoll.isAvailable(). Runtime-only; on non-Linux | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 337 | ch.pipeline().addLast(new io.netty.handler.codec.http.HttpServerCodec()); | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 338 | ch.pipeline().addLast(new io.netty.handler.codec.http.HttpObjectAggregator(64 * 1024)); | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 345 | io.netty.handler.codec.http.FullHttpResponse response = new io.netty.handler.cod | CODE |
| CRITICAL | …/netty/unification/PortUnificationH2cPipelineTest.java | 123 | org.mockserver.socket.tls.SniHandler.getALPNProtocol(new MockServerLogger(), channel.pipeline().firstCon | CODE |
| CRITICAL | …ckserver/netty/grpc/GrpcToHttpResponseHandlerTest.java | 969 | channel.writeAndFlush(new io.netty.handler.codec.http.DefaultHttpResponse( | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 175 | io.netty.handler.ssl.util.SelfSignedCertificate selfSigned = new io.netty.handler.ssl.util.SelfSignedCertificate | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 346 | uri, WebSocketVersion.V13, null, true, new io.netty.handler.codec.http.DefaultHttpHeaders(), 65536); | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 348 | ? io.netty.handler.ssl.SslContextBuilder.forClient().trustManager(InsecureTrustManagerFactory.INSTANCE). | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 468 | ctx.pipeline().addBefore(ctx.name(), "httpClientCodec", new io.netty.handler.codec.http.HttpClientCodec()); | CODE |
| CRITICAL | …y/integration/mock/TrafficValidateIntegrationTest.java | 159 | org.apache.commons.io.IOUtils.toString(socket.getInputStream(), java.nio.charset.StandardCharsets.UTF_8); | CODE |
| CRITICAL | …y/integration/mock/TrafficValidateIntegrationTest.java | 184 | org.apache.commons.io.IOUtils.toString(socket.getInputStream(), java.nio.charset.StandardCharsets.UTF_8); | CODE |
| CRITICAL | …etty/integration/mock/OidcProviderIntegrationTest.java | 202 | com.nimbusds.jose.jwk.RSAKey rsaKey = new com.nimbusds.jose.jwk.gen.RSAKeyGenerator(2048) | CODE |
| CRITICAL | …ration/mock/OperatingModeDataPlaneIntegrationTest.java | 159 | return org.apache.commons.io.IOUtils.toString(socket.getInputStream(), StandardCharsets.UTF_8); | CODE |
| CRITICAL | …/responsewriter/MockStreamBreakpointWritePathTest.java | 268 | return org.mockserver.mock.breakpoint.PausedStreamFrame.Direction.OUTBOUND.name(); | CODE |
| CRITICAL | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 52 | org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().reset(); | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 226 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(notNul | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 234 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(nullVa | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 236 | org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().reset(); | CODE |
| CRITICAL | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 251 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(nullValue( | CODE |
| CRITICAL | …etty/breakpoint/BreakpointEndToEndIntegrationTest.java | 114 | java.net.http.HttpResponse.BodyHandlers.ofString() | CODE |
| CRITICAL | …etty/breakpoint/BreakpointEndToEndIntegrationTest.java | 153 | java.net.http.HttpResponse.BodyHandlers.ofString() | CODE |
| CRITICAL | …ava/org/mockserver/netty/http3/Http3LifecycleTest.java | 128 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …server/netty/http3/Http3ConnectUdpIntegrationTest.java | 682 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …server/netty/http3/Http3ConnectUdpIntegrationTest.java | 687 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …ver/netty/http3/Http3MockingMatrixIntegrationTest.java | 96 | int udpPort = org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …ver/netty/http3/Http3MockingMatrixIntegrationTest.java | 363 | io.netty.handler.codec.quic.Quic.isAvailable() | CODE |
| CRITICAL | …/netty/http3/Http3ResponseTrailersIntegrationTest.java | 365 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …ver/netty/http3/Http3GrpcStreamingIntegrationTest.java | 643 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …ver/netty/http3/Http3GrpcStreamingIntegrationTest.java | 650 | io.netty.handler.codec.quic.Quic.isAvailable() | CODE |
| CRITICAL | …rg/mockserver/netty/http3/Http3McpIntegrationTest.java | 530 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …rg/mockserver/netty/http3/Http3McpIntegrationTest.java | 654 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …t/java/org/mockserver/netty/http3/Http3ServerTest.java | 338 | java.net.http.HttpResponse.BodyHandlers.ofString()); | CODE |
| CRITICAL | …t/java/org/mockserver/netty/http3/Http3ServerTest.java | 368 | java.net.http.HttpResponse.BodyHandlers.ofString()); | CODE |
| CRITICAL | …t/java/org/mockserver/netty/http3/Http3ServerTest.java | 389 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …t/java/org/mockserver/netty/http3/Http3ServerTest.java | 492 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …g/mockserver/netty/http3/Http3GrpcIntegrationTest.java | 763 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …g/mockserver/netty/http3/Http3GrpcIntegrationTest.java | 768 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …kserver/netty/http3/Http3StreamingIntegrationTest.java | 377 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …/netty/http3/Http3StreamingForwardIntegrationTest.java | 131 | int udpPort = org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …/netty/http3/Http3StreamingForwardIntegrationTest.java | 357 | io.netty.handler.codec.quic.Quic.isAvailable() | CODE |
| CRITICAL | …http3/Http3DataPlaneAuthenticationIntegrationTest.java | 198 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …http3/Http3DataPlaneAuthenticationIntegrationTest.java | 320 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …mockserver/netty/http3/Http3ParityIntegrationTest.java | 319 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …mockserver/netty/http3/Http3ParityIntegrationTest.java | 478 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …ty/http3/Http3ProtocolVerificationIntegrationTest.java | 134 | return org.mockserver.testing.socket.TestPortFactory.findFreeUdpPort(); | CODE |
| CRITICAL | …ty/http3/Http3ProtocolVerificationIntegrationTest.java | 208 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …erver/netty/http3/Http3StreamErrorIntegrationTest.java | 293 | io.netty.handler.codec.quic.Quic.isAvailable() | CODE |
| CRITICAL | …rg/mockserver/netty/dns/DnsRequestHandlerWireTest.java | 104 | new DefaultDnsQuestion(name, io.netty.handler.codec.dns.DnsRecordType.valueOf(type))); | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 130 | org.mockserver.llm.semantic.SemanticMatching.install( | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 191 | org.mockserver.mock.drift.DriftAnalyzer.getInstance().setSemanticExtension(extension); | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 207 | org.mockserver.mock.drift.DriftAnalyzer.getInstance().setResponseTimeThresholdMs(threshold); | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 231 | threshold = org.mockserver.mock.drift.SemanticSeverity.valueOf( | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 240 | org.mockserver.mock.drift.DriftAlertNotifier.getInstance().configure(true, url, threshold, cooldownMillis); | CODE |
| 284 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 4 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 31 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 359 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 370 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 436 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 439 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 486 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 494 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 575 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 578 | # ============================================================================== | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 29 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 35 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 97 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 112 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 120 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 15 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 19 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 28 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 85 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 87 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 22 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 13 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 11 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/perf-results.tf | 68 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/perf-results.tf | 70 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-pipelines/clusters.tf | 2 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 50 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 52 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 33 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 35 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 100 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 102 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 112 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 114 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 6 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 8 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 53 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 55 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/ses.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/ses.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 34 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 36 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 46 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 48 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 61 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| 855 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-node/mockServerClient.js | 696 | requestAndResponseCallback: function requestAndResponseCallback(callback) { | CODE |
| LOW | mockserver-client-node/webSocketClient.js | 365 | requestAndResponseCallback: function requestAndResponseCallback(callback) { | CODE |
| LOW | …r-client-node/test/no_proxy/breakpoint_routing_test.js | 31 | function makeRequestAndResponsePayload(httpRequest, httpResponse) { | CODE |
| LOW | …lient-node/examples/callback_action_examples/server.js | 54 | function createExpectationWithinObjectCallback() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 99 | function verifyRequestsReceiveAtLeastTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 116 | function verifyRequestsReceiveAtMostTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 133 | function verifyRequestsReceiveExactlyTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 150 | function verifyRequestsReceiveAtLeastTwiceByOpenAPI() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 167 | function verifyRequestsReceiveExactlyOnceByOpenAPIWithOperation() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 185 | function verifyRequestsReceiveExactlyOnceByExpectationIds() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 226 | function verifyRequestSequenceUsingOpenAPI() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 252 | function verifyRequestSequenceUsingExpectationIds() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 293 | function retrieveRecordedLogMessages() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 311 | function clearWithRequestPropertiesMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 327 | function clearWithOpenAPIRequestMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 358 | function clearRequestsAndLogsWithRequestPropertiesMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 374 | function clearRequestAndLogsWithOpenAPIRequestMatcher() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 1 | function matchRequestByOpenAPILoadedByHttpUrl() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 15 | function matchRequestByOpenAPIOperation() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 33 | function matchRequestByOpenAPILoadedByFileUrl() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 49 | function matchRequestByOpenAPILoadedByClasspathLocation() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 65 | function matchRequestByOpenAPILoadedByJsonLiteral() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 86 | function matchRequestByOpenAPILoadedByYamlLiteral() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 67 | function forwardOverriddenRequestAndChangeReponse() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 94 | function forwardOverriddenRequestAndChangeHostAndPort() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 123 | function forwardOverriddenRequestWithDelay() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 148 | function javascriptTemplatedForward() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 177 | function javascriptTemplatedForwardWithDelay() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 1 | function responseLiteralWithBodyOnly() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 68 | function responseLiteralWithHeader() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 88 | function responseLiteralWithCookie() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 111 | function responseLiteralWithStatusCodeAndReasonPhrase() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 132 | function responseLiteralWithBinaryPNGBody() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 182 | function respondDifferentlyForSameRequest() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 225 | function responseLiteralWithConnectionOptionsToSuppressHeaders() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 248 | function responseLiteralWithConnectionOptionsToOverrideHeaders() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 271 | function responseLiteralWithConnectionOptionsToCloseSocket() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 293 | function javascriptTemplatedResponse() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 328 | function javascriptTemplatedResponseWithDelay() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 357 | function velocityTemplatedResponse() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 1 | function retrieveAllActiveExpectations() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 15 | function retrieveActiveExpectationsUsingRequestMatcher() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 30 | function retrieveActiveExpectationsInJson() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 1 | function retrieveAllRecordedExpectations() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 15 | function retrieveRecordedExpectationsUsingRequestMatcher() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 30 | function retrieveRecordedExpectationsInJson() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 1 | function retrieveAllRecordedRequests() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 15 | function retrieveRecordedRequestsUsingRequestMatcher() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 30 | function retrieveRecordedRequestsInJson() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 20 | function matchRequestByPathExactlyTwice() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 94 | function matchRequestByNotMatchingPath() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 114 | function matchRequestByMethodRegex() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 133 | function matchRequestByNotMatchingMethod() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 153 | function matchRequestByPathAndPathParametersAndQueryParametersName() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 178 | function matchRequestByPathParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 200 | function matchRequestByPathParameterJsonSchemaValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 232 | function matchRequestByQueryParameterRegexName() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 254 | function matchRequestByQueryParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 276 | function matchRequestByOptionalQueryParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 309 | function matchRequestByQueryParameterJsonSchemaValue() { | CODE |
| 1333 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packaging/sdkman/candidate.yaml | 1 | # SDKMAN! candidate metadata for MockServer CLI. | COMMENT |
| LOW | packaging/homebrew/mockserver.rb | 1 | # Homebrew formula for the self-contained MockServer CLI bundle. | COMMENT |
| LOW | mockserver-performance-test/legacy/locustfile.py | 41 | COMMENT | |
| LOW | mockserver-performance-test/scripts/runK6.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | mockserver-performance-test/k6/growth.js | 1 | // Resource-growth scenario — surfaces "X increases over time" regressions that a | COMMENT |
| LOW | mockserver-performance-test/k6/regression.js | 1 | // Regression scenario — the periodic-pipeline workhorse. Measures response | COMMENT |
| LOW | mockserver-performance-test/k6/load.js | 1 | // Load test — the primary gated scenario. Closed-loop (arrival-rate) load so | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 1 | // Throughput-vs-latency sweep — measures the "knee" of MockServer's load curve. | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 1 | // Forward-path load test — a dedicated REGRESSION GUARD for the upstream | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 21 | // - SUT (:1080): the instance under measurement; built from THIS worktree so | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 41 | // '[{"httpRequest":{"path":"/simple"},"httpResponse":{"statusCode":200,"body":"some simple response"},"times":{"unl | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 1 | // Shared k6 configuration for the MockServer performance suite. | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 201 | }; | COMMENT |
| LOW | mockserver-performance-test/k6/lib/expectations.js | 1 | // Expectation seeding + the per-request actions exercised by the scenarios. | COMMENT |
| LOW | mockserver-performance-test/stack/docker-compose.yml | 1 | # MockServer observability + load stack. | COMMENT |
| LOW | mockserver-performance-test/stack/inject/envoy.yaml | 1 | # Envoy as a near-infinite HTTP sink for the MockServer load-injection harness. | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 21 | # Measurement method: rates are computed with the Prometheus HTTP API | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 61 | # connection-setup cost, not steady request dispatch. A point below this floor is | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 101 | # producing the real efficiency curve (a single injector plateaus well before 8 | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 481 | COMMENT | |
| LOW | …erformance-test/stack/inject/docker-compose.inject.yml | 1 | # Load-INJECTION measurement stack. | COMMENT |
| LOW | terraform/website/dnssec.tf | 1 | # DNSSEC for mock-server.com. | COMMENT |
| LOW | terraform/website/dnssec.tf | 21 | # intact automatically. | COMMENT |
| LOW | terraform/website/security-hardening.tf | 1 | # Security hardening for the mockserver-website account. | COMMENT |
| LOW | terraform/website/marketplace-verification.tf | 1 | # VS Code Marketplace publisher verification. | COMMENT |
| LOW | terraform/website/binaries.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/website/mcp-dns.tf | 1 | # MCP registry DNS namespace verification. | COMMENT |
| LOW | terraform/buildkite-agents/dependency-cache.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 81 | # --- Per-secret IAM policies ------------------------------------------------ | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 121 | Statement = [{ | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 221 | name = "mockserver-release/cosign-key" | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 321 | ] | COMMENT |
| LOW | terraform/buildkite-agents/binaries-publish.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/buildkite-agents/imds-hardening.tf | 1 | # IMDS hop-limit hardening for the Buildkite build agents. | COMMENT |
| LOW | terraform/buildkite-agents/perf-results.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/buildkite-pipelines/pipelines.tf | 161 | resource "buildkite_pipeline_schedule" "perf_regression_daily" { | COMMENT |
| LOW | terraform/buildkite-pipelines/pipelines.tf | 181 | # Note on "pipeline" (the top-level mockserver dispatcher): | COMMENT |
| LOW | terraform/buildkite-pipelines/providers.tf | 1 | # Dedicated Terraform management token (read_pipelines, write_pipelines, graphql), | COMMENT |
| LOW | terraform/buildkite-pipelines/clusters.tf | 1 | # Buildkite cluster migration | COMMENT |
| LOW | terraform/ses-email-forwarding/lambda.tf | 61 | Effect = "Allow" | COMMENT |
| LOW | mockserver-client-node/Gruntfile.js | 21 | options: { | COMMENT |
| LOW | mockserver-client-node/Gruntfile.js | 41 | // The 310-finding difference was ES-version parse artefacts: the config | COMMENT |
| LOW | mockserver-client-node/sendRequest.js | 21 | } | COMMENT |
| LOW | …kserver-client-node/scripts/build_server_typescript.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | docker/ensure-ca-bundle.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | jekyll-www.mock-server.com/mockserver-openapi.yaml | 5321 | # patternProperties: | COMMENT |
| LOW | jekyll-www.mock-server.com/mockserver-openapi.yaml | 5341 | # - FORM | COMMENT |
| LOW | jekyll-www.mock-server.com/_config.yml | 21 | COMMENT | |
| LOW | jekyll-www.mock-server.com/ai.txt | 1 | # MockServer — AI Crawling and Training Policy | COMMENT |
| LOW | …kyll-www.mock-server.com/_unused_plugins/compressor.rb | 1 | # | COMMENT |
| LOW | jekyll-www.mock-server.com/_data/nav.yml | 1 | # Left-hand navigation structure. | COMMENT |
| LOW | …ent-ruby/spec/mockserver/expectation_roundtrip_spec.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …client-ruby/spec/mockserver/roundtrip_fidelity_spec.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 21 | # MOCKSERVER_BINARY_BASE_URL mirror host for the release assets | COMMENT |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 101 | # Return the download URL for a release asset. | COMMENT |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 361 | COMMENT | |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 381 | COMMENT | |
| 620 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 296 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: login returns a token once, advancing Start | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 306 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 314 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 354 | // Step 1: capture the order id from the request body into scenario state "orderId" | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 360 | // Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 530 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: capture the order id from the request body | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 539 | # Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 37 | ## Step 1: Classify Changed Files | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 67 | ## Step 2: Run Category-Specific Validations | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 148 | ## Step 3: Changelog Review (MANDATORY for all commits) | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 169 | ## Step 4: Adversarial Code Review (MANDATORY for all commits) | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 208 | ## Step 5: Acquire Lock and Commit | COMMENT |
| LOW | .opencode/skills/browser-auth/SKILL.md | 78 | ### Step 1: Check if the User is Logged In | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 89 | ### Step 2: Navigate to the Target Page | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 97 | ### Step 3: Take a Snapshot | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 106 | ### Step 4: Extract Data | COMMENT |
| LOW | .opencode/skills/browser-auth/SKILL.md | 123 | ### Step 5: Verify with Screenshot (Optional) | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 17 | ## Step 1: Load the Review Constitution | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 22 | ## Step 2: Build an Independent Model | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 33 | ## Step 3: Read the Spec | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 41 | ## Step 4: Apply All 8 Lenses | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 120 | ## Step 5: Verify Claims Against Codebase | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 127 | ## Step 6: Check File Inventory Completeness | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 134 | ## Step 7: Review Completeness Check | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 148 | ## Step 8: Return Verdict | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 17 | ## Step 1: Load the Review Constitution | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 22 | ## Step 2: Gather the Diff | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 35 | ## Step 3: Read Surrounding Context | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 44 | ## Step 4: Apply All 8 Lenses | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 87 | ## Step 5: MockServer-Specific Triggers | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 105 | ## Step 6: LLM-Specific Failure Patterns | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 117 | ## Step 7: Review Completeness Check | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 130 | ## Step 8: Return Verdict | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 24 | ## Step 1: Try Local Docker Credentials (Optional Shortcut) | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 41 | ## Step 2: Create a Docker Hub Personal Access Token | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 59 | ## Step 3: Validate Credentials | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 75 | ## Step 4: Store in AWS Secrets Manager | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 87 | ## Step 5: Verify Storage | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 53 | ### Step 1: Buildkite CLI | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 68 | ### Step 2: GitHub CLI | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 76 | ### Step 3: Git Status | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 87 | ### Step 4: Report Authentication Status | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 15 | ### Step 0: Check and Install the CLI | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 27 | ### Step 1: Check Authentication | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 46 | ### Step 2: Select Organization (if needed) | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 54 | ### Step 3: Get API Token for REST API Calls | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 71 | ### Step 1: Parse Input | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 86 | ### Step 2: Get Build Overview | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 102 | ### Step 3: Check Agent Availability | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 116 | ### Step 4: List Builds Across All Pipelines | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 126 | ### Step 5: Identify Failed Jobs | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 134 | ### Step 6: Retrieve Job Logs | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 151 | ### Step 7: Download and Analyze Build Artifacts | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 167 | ### Step 8: Check GitHub Actions (Secondary CI) | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 176 | ### Step 9: Additional Investigation | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 201 | ### Step 10: Confirm Flaky-vs-Real | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 223 | ### Step 11: Enumerate Competing Hypotheses | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 230 | ### Step 12: Classify Error | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 247 | ### Step 13: Check for Already-Pushed Fixes | COMMENT |
| LOW | .opencode/skills/aws-investigation/SKILL.md | 75 | ### Step 1: Determine Active Stack | COMMENT |
| 71 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mockserver-performance-test/stack/inject/envoy.yaml | 1 | # Envoy as a near-infinite HTTP sink for the MockServer load-injection harness. | COMMENT |
| MEDIUM | …server.com/mock_server/load_injection_performance.html | 66 | <p>This page is about MockServer as a <strong>load generator</strong> — how much outbound traffic its built-in <a | CODE |
| MEDIUM | …rver.com/mock_server/_includes/stateful_scenarios.html | 1192 | # Trigger the failure from the test harness: | COMMENT |
| MEDIUM | …client-ruby/spec/mockserver/roundtrip_fidelity_spec.rb | 5 | # Cross-language JSON round-trip fidelity harness (Ruby port). | COMMENT |
| MEDIUM | .opencode/evals/run-evals.sh | 2 | # Offline evaluation harness for AI components. | COMMENT |
| MEDIUM | .opencode/evals/run-evals.sh | 3 | # See .opencode/rules/evaluation-harness.md and .opencode/evals/README.md | COMMENT |
| MEDIUM | mockserver-ui/package-lock.json | 5492 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | mockserver-ui/src/components/MetricsLineChart.tsx | 72 | // plain indices (keeps the component robust if a caller omits timestamps). | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 28 | # that a no-op). Echoes "true" if the harness created the file (caller removes it | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 122 | # was never built by the harness at all — so the sidecar case always skipped, | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 565 | # run_all_tests() branches on, so the guard tracks the harness exactly. | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 614 | # the harness without a matching manifest line. | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 831 | # FAIL_LOG, so a suite where NOTHING was recorded — harness crash, docker | COMMENT |
| MEDIUM | …ration_tests/helm_jgroups_dns_ping/integration_test.sh | 25 | # Blocking. Requires the -clustered image; the harness SKIPs this case when the | COMMENT |
| MEDIUM | …ation_tests/docker_compose_metrics/integration_test.sh | 15 | # wait_ready is now provided by the shared docker-compose.sh harness. | COMMENT |
| MEDIUM | …n_tests/helm_clustered_convergence/integration_test.sh | 13 | # convergence failure reds the suite. The harness gates this case on the | COMMENT |
| MEDIUM | …n_tests/helm_clustered_convergence/integration_test.sh | 318 | # The harness only reaches this case when the -clustered image is present (it | COMMENT |
| MEDIUM | …ation_tests/helm_sidecar_injection/integration_test.sh | 24 | # Requires the webhook handler image; the harness only invokes this case when | COMMENT |
| MEDIUM | …ation_tests/helm_sidecar_injection/integration_test.sh | 41 | # Image refs — provided by the harness. Fall back to sensible local defaults so | COMMENT |
| MEDIUM | …kserver/llm/analysis/LlmOptimisationReportBuilder.java | 547 | // Prefer the request body's model field; LlmProviderSniffer already has a robust reader. | COMMENT |
| MEDIUM | examples/curl/scenario/external_trigger.sh | 2 | # Triggered scenario flow - drive a state change from a test harness. | COMMENT |
| MEDIUM | examples/curl/scenario/external_trigger.sh | 6 | # until the harness triggers the "Down" state, after which it returns 503. | COMMENT |
| MEDIUM | scripts/build-standalone-binary.sh | 73 | # First <version> outside any <parent> block = the project version (robust if a <parent> with its | COMMENT |
| MEDIUM | scripts/release/components/github.sh | 82 | # both simpler and more robust. | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 52 | # Rule 4 — a helm/k3d harness run that can silently revert to skipping. | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 55 | # the step that runs the harness exports BOTH REQUIRE_CLUSTERED_IMAGE=true and | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 57 | # SKIP — green, testing nothing. This asserts every step that runs the harness | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 61 | # is covered automatically and the docker-only harness step (which sets | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 441 | # Rule 4 — a helm/k3d harness run that can silently revert to skipping | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 446 | # A legitimate case would be a helm-running harness step that genuinely must NOT | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 462 | # is not mistaken for a harness invocation. | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 465 | # Value must be literally true after expansion (the harness compares == "true"); | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/check-false-green-guards.sh | 474 | # Only steps that actually RUN the container-integration harness. | COMMENT |
| MEDIUM | .buildkite/scripts/steps/check-false-green-guards.sh | 500 | # Fail closed if NO step runs the helm harness at all: the rule would then be | COMMENT |
| MEDIUM | .buildkite/scripts/steps/check-false-green-guards.sh | 501 | # inspecting nothing (the step was renamed, moved, or the harness invocation | COMMENT |
| MEDIUM | .buildkite/scripts/steps/perf-test-lint.sh | 4 | # Lint the k6 performance harness: | COMMENT |
| MEDIUM | .buildkite/scripts/steps/validate-ai-evals.sh | 6 | # AI-component evaluation harness (.opencode/rules/evaluation-harness.md). | COMMENT |
| MEDIUM | .buildkite/scripts/steps/perf-test-compare.sh | 61 | # standalone artifact is harmless (same object) and robust if the embed is absent. | COMMENT |
| MEDIUM⚡ | .buildkite/scripts/steps/helm-integration-test.sh | 11 | # the harness with REQUIRE_*_IMAGE=true so an absent image is a FAILURE, never a | COMMENT |
| MEDIUM | .buildkite/scripts/steps/helm-integration-test.sh | 154 | # The helm test harness (helm-deploy.sh, logging.sh) shells out to kubectl, which | COMMENT |
| MEDIUM | .buildkite/scripts/steps/helm-integration-test.sh | 191 | # absent the harness records a FAILURE (not a skip) — a skip in CI is impossible. | COMMENT |
| MEDIUM | .buildkite/scripts/steps/perf-test-inject.sh | 18 | # pinning is skipped with a warning (numbers noisier, harness still works). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …r-testcontainers/python/tests/test_container_config.py | 7 | CODE | |
| LOW | …iners/python/src/testcontainers_mockserver/__init__.py | 19 | CODE | |
| LOW | …ners/python/src/testcontainers_mockserver/container.py | 9 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 8 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 26 | CODE | |
| LOW | mockserver-client-python/tests/test_control_plane.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 3 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 4 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 4 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 9 | CODE | |
| LOW | mockserver-client-python/tests/test_breakpoint.py | 2 | CODE | |
| LOW | mockserver-client-python/tests/test_exceptions.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_auth_tls.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_models.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_models.py | 5 | CODE | |
| LOW | mockserver-client-python/tests/test_integration.py | 6 | CODE | |
| LOW | mockserver-client-python/tests/test_integration.py | 6 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_init.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_launcher.py | 8 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 5 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 5 | CODE | |
| LOW | mockserver-client-python/mockserver/a2a.py | 44 | CODE | |
| LOW | mockserver-client-python/mockserver/models.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 8 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 8 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| 133 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ….mock-server.com/mock_server/llm_response_mocking.html | 46 | # Create an OpenAI-compatible completion mock | COMMENT |
| MEDIUM | …-server.com/mock_server/mockserver_testcontainers.html | 343 | # Create an expectation | STRING |
| MEDIUM | …l-www.mock-server.com/mock_server/crud_data_store.html | 168 | # Create a record | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 578 | # Create an expectation with the typed client | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 609 | # Create an expectation with the typed client | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 764 | <pre class="prettyprint code"><code class="code"># Create an expectation | CODE |
| MEDIUM | …ver.com/mock_server/_includes/ai_protocol_mocking.html | 2933 | # Create the mock A2A agent | COMMENT |
| MEDIUM | …ver.com/mock_server/_includes/ai_protocol_mocking.html | 2958 | # Create the mock A2A agent | COMMENT |
| MEDIUM | …r.com/mock_server/_includes/creating_expectations.html | 5317 | # Create a new user | COMMENT |
| MEDIUM | …r.com/mock_server/_includes/creating_expectations.html | 5472 | <pre class="prettyprint code"><code class="code"># Create a product - ID will be a UUID like "550e8400-e29b-41d4-a716-44 | CODE |
| MEDIUM | jekyll-www.mock-server.com/where/rubygems.html | 34 | # Create an expectation | COMMENT |
| MEDIUM | jekyll-www.mock-server.com/where/pypi.html | 28 | # Create an expectation | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 376 | # Create a minimal tar.gz archive containing the expected launcher | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 378 | # Create the directory structure that should be in the archive | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 385 | # Create the tar.gz | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 792 | # Create a symlink inside cache that points outside | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 919 | # Create a normal archive | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 948 | # Create a symlink that escapes the version dir | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 1059 | # Create a directory structure that matches what the zip would contain | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 1072 | # Create the zip-like archive as a tar for the fixture (we'll stub extraction) | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/mcp.rb | 447 | # Create a new MCP mock builder. +path+ defaults to +/mcp+. | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/client.rb | 89 | # Create an OpenAPI expectation. | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/a2a.rb | 523 | # Create a new A2A mock builder. +path+ defaults to +/a2a+. | COMMENT |
| MEDIUM⚡ | …server-testcontainers/python/tests/test_integration.py | 78 | # Create an expectation | COMMENT |
| MEDIUM | …s/docker_compose_graceful_shutdown/integration_test.sh | 30 | # Create an expectation that will be persisted | COMMENT |
| MEDIUM | …ation_tests/helm_sidecar_injection/integration_test.sh | 58 | # Create a pod in the target namespace and return once the API server has | COMMENT |
| MEDIUM | examples/curl/websocket/websocket_response.sh | 2 | # Create a WebSocket expectation that upgrades the connection with a | COMMENT |
| MEDIUM | examples/curl/websocket/websocket_with_matchers.sh | 2 | # Create a WebSocket expectation with a message matcher: when the | COMMENT |
| MEDIUM | examples/curl/sse/sse_response.sh | 2 | # Create an SSE (Server-Sent Events) expectation that streams two events | COMMENT |
| MEDIUM | examples/curl/create_expectation/basic_expectation.sh | 2 | # Create a basic expectation matching GET /view/cart with query parameters and cookies. | COMMENT |
| MEDIUM | examples/curl/create_expectation/match_all_requests.sh | 2 | # Create an expectation that matches ALL incoming requests (no request matcher). | COMMENT |
| MEDIUM | …mples/curl/create_expectation/match_once_within_60s.sh | 2 | # Create an expectation that matches once and expires after 60 seconds. | COMMENT |
| MEDIUM | examples/curl/create_expectation/match_exactly_twice.sh | 2 | # Create an expectation that matches exactly twice then expires. | COMMENT |
| MEDIUM | examples/curl/openapi/expectation_from_classpath.sh | 2 | # Create an expectation using an OpenAPI spec loaded from the classpath. | COMMENT |
| MEDIUM | examples/curl/openapi/expectation_for_operation.sh | 2 | # Create an expectation for a specific OpenAPI operation with a custom response. | COMMENT |
| MEDIUM | examples/curl/callback/class_callback.sh | 2 | # Create an expectation with a class callback action. | COMMENT |
| MEDIUM | scripts/release/components/github.sh | 2 | # Create the GitHub Release for the mockserver-X.Y.Z tag. | COMMENT |
| MEDIUM | .buildkite/release-pipeline.yml | 3 | # This file is intentionally short: every step is a single command. All the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 296 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: login returns a token once, advancing Start | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 306 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 314 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 354 | // Step 1: capture the order id from the request body into scenario state "orderId" | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 360 | // Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 530 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: capture the order id from the request body | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 539 | # Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 246 | // Step 1: open mismatch dialog and click Create Expectation (sets captureOpen=true) | COMMENT |
| LOW⚡ | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 256 | // Step 2: close the mismatch dialog while captureOpen is still true. | COMMENT |
| LOW | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 268 | // Step 3: re-open the mismatch dialog with a different request | COMMENT |
| LOW | …erver/netty/grpc/GrpcClientStreamingMultiplexTest.java | 277 | // Step 1: Re-aggregation pipeline with real HTTP/2 frames | COMMENT |
| LOW | …erver/netty/grpc/GrpcClientStreamingMultiplexTest.java | 307 | // Step 2: Feed into GrpcToHttpRequestHandler | COMMENT |
| LOW | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 93 | // Step 1: Canonical request | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 112 | // Step 2: String to sign | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 119 | // Step 3: Signing key | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 122 | // Step 4: Signature | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 125 | // Step 5: Authorization header | COMMENT |
| LOW | mockserver-vscode/src/extension.ts | 393 | // in binaryBundle.ts; this section handles the UI, download, and process I/O. | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 43 | # Step 1: Create a mock "upstream" endpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 59 | # Step 2: Create a loopback forward expectation | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 79 | # Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 108 | # Step 4: Send a request through the forwarded path | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 43 | // Step 1: Create mock upstream endpoint | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 57 | // Step 2: Create loopback forward expectation | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 77 | // Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 16 | # Step 1: login returns a token once, advancing Started -> LoggedIn | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 26 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 34 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 29 | // Step 1: Create a mock "upstream" endpoint that returns a JSON greeting | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 48 | // Step 2: Create a forward expectation that loops back to the same server | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 68 | // Step 3: Register a RESPONSE-phase breakpoint that modifies the proxied response | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 104 | // Step 4: Make the actual request through the forwarded path | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 35 | # Step 1: Create a mock "upstream" endpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 54 | # Step 2: Create a loopback forward expectation | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 73 | # Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 114 | # Step 4: Send a request through the forwarded path | COMMENT |
| LOW | mockserver-client-php/src/BinaryLauncher.php | 702 | // Step 1: Pre-scan archive members for path-escape attempts. | COMMENT |
| LOW | mockserver-client-php/src/BinaryLauncher.php | 762 | // Step 2: Extract (safe — all members verified) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | changelog.md | 5263 | - DataFaker (`net.datafaker:datafaker:2.5.4`) is now bundled as a template helper. A single shared `Faker` instance is e | CODE |
| LOW | terraform/ses-email-forwarding/lambda/index.js | 237 | * "John Doe" <john@example.com> | COMMENT |
| LOW | jekyll-www.mock-server.com/mockserver-openapi.yaml | 114 | body: '{"users":[{"id":1,"name":"John Doe"}],"total":1}' | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1286 | <tr><td><code>faker.address().streetAddress()</code></td><td>Random street address</td><td><code>"123 Main St"</ | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1289 | <tr><td><code>faker.lorem().sentence()</code></td><td>Random sentence of text</td><td><code>"Lorem ipsum dolor s | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1289 | <tr><td><code>faker.lorem().sentence()</code></td><td>Random sentence of text</td><td><code>"Lorem ipsum dolor s | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1291 | <tr><td><code>faker.company().name()</code></td><td>Random company name</td><td><code>"Acme Corp"</code></td></t | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 90 | "email", "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 108 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 136 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 165 | email: 'user@example.com', | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 190 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 216 | ""email"": ""user@example.com"", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 239 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 261 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 292 | "email": "user@example.com", | CODE |
| LOW | mockserver-ui/src/__tests__/BreakpointsPanel.test.tsx | 1161 | const placeholder = scopeInput().getAttribute('placeholder') ?? ''; | CODE |
| LOW | mockserver-ui/src/__tests__/Panel.test.tsx | 43 | const placeholder = input.getAttribute('placeholder') ?? ''; | CODE |
| LOW | …ckserver-ui/src/__tests__/OperatorSearchField.test.tsx | 6 | const placeholderOf = () => screen.getByLabelText('Search').getAttribute('placeholder') ?? ''; | CODE |
| LOW | …kserver-ui/src/__tests__/verificationScopeDsl.test.tsx | 35 | const placeholder = scopeInput().getAttribute('placeholder') ?? ''; | CODE |
| LOW | mockserver-ui/src/__tests__/LogPanel.test.tsx | 84 | const placeholder = screen.getByLabelText('Search').getAttribute('placeholder') ?? ''; | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 477 | (current / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 502 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 720 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 735 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 752 | (d / "placeholder").write_text("x") | CODE |
| LOW | mockserver-client-python/tests/test_launcher.py | 459 | (d / "placeholder").write_text("x") | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 85 | controlPlaneJWTAuthenticationMatchingClaims(ImmutableMap.of("name", "John Doe", "admin", "true")); | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 130 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 149 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 175 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 203 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 259 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 286 | "name", "John Doe", | CODE |
| LOW | …java/org/mockserver/async/MessageExampleGenerator.java | 222 | return MAPPER.getNodeFactory().textNode("user@example.com"); | CODE |
| LOW | …java/org/mockserver/async/MessageExampleGenerator.java | 241 | return MAPPER.getNodeFactory().textNode("user@example.com"); | CODE |
| LOW | …src/test/java/org/mockserver/llm/TokenCounterTest.java | 77 | String text = "Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore | CODE |
| LOW | …src/test/java/org/mockserver/llm/TokenCounterTest.java | 77 | String text = "Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore | CODE |
| LOW | …ava/org/mockserver/oidc/OidcProviderGeneratorTest.java | 280 | additional.put("email", "user@example.com"); | CODE |
| LOW | …ava/org/mockserver/oidc/OidcProviderGeneratorTest.java | 304 | assertThat(body.get("email").asText(), is("user@example.com")); | CODE |
| LOW | …/mockserver/model/NottableSchemaStringMatchesTest.java | 107 | assertThat("phone regex should match '555-1212'", string.matches("555-1212"), is(true)); | CODE |
| LOW | …/mockserver/model/NottableSchemaStringMatchesTest.java | 111 | assertThat("NOT phone regex should not match '555-1212'", notString.matches("555-1212"), is(false)); | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 105 | assertThat("phone regex.equals(string('555-1212')) should be true", string.equals(string("555-1212")), is(true)) | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 109 | assertThat("NOT phone regex.equals(string('555-1212')) should be false", notString.equals(string("555-1212")), i | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 248 | assertThat("string('555-1212').equals(phone regex) should be true", string("555-1212").equals(string), is(true)) | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 252 | assertThat("string('555-1212').equals(NOT phone regex) should be false", string("555-1212").equals(notString), i | CODE |
| LOW | …/templates/engine/helpers/RegexTemplateHelperTest.java | 36 | assertThat(helper.group("user@example.com", "([^@]+)@(.+)", 2), is("example.com")); | CODE |
| LOW | …/mockserver/socket/tls/NettySslContextFactoryTest.java | 280 | File keyFile = createTempPemFile("key.pem", "placeholder"); | CODE |
| LOW | …/mockserver/socket/tls/NettySslContextFactoryTest.java | 281 | File certFile = createTempPemFile("cert.pem", "placeholder"); | CODE |
| LOW | …server/openapi/mock-server-openapi-embedded-model.yaml | 114 | body: '{"users":[{"id":1,"name":"John Doe"}],"total":1}' | CODE |
| LOW | …server/llm/adversarial/AdversarialResponseLibrary.java | 80 | repeat("LOREM IPSUM DOLOR SIT AMET ", 400)); | CODE |
| LOW | …server/llm/adversarial/AdversarialResponseLibrary.java | 80 | repeat("LOREM IPSUM DOLOR SIT AMET ", 400)); | CODE |
| LOW | mockserver/mockserver-client-java/pom.xml | 29 | by any client code path — template rendering, JavaScript/WASM execution, fake-data generation and | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/ensure-ca-bundle.sh | 18 | # Usage: | COMMENT |
| LOW | .opencode/scripts/agent-status.sh | 20 | # Usage: | COMMENT |
| LOW | .opencode/scripts/aggregate-telemetry.sh | 16 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/demo-opencode-proxy.sh | 28 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/launch-with-llm-capture.sh | 18 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/launch-with-demo-data.sh | 11 | # Usage: | COMMENT |
| LOW | examples/validate/run.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/build-binary-bundle.sh | 22 | # Usage: | COMMENT |
| LOW | scripts/github-stars.sh | 8 | # Usage: | COMMENT |
| LOW | scripts/build-standalone-binary.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/verify-php-client.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/build-all-bundles.sh | 11 | # Usage: | COMMENT |
| LOW | scripts/ci/bk-pipeline-status.sh | 16 | # Usage: | COMMENT |
| LOW | scripts/release/test-cosign-signing.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/release/backfill-helm-oci.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/release/_lib.sh | 363 | # Usage: | COMMENT |
| LOW | scripts/lib/ensure-host-jdk21.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/llm-proxy-capture/capture-smoke.sh | 50 | # Usage: | COMMENT |
| LOW | .buildkite/scripts/with-mockserver.sh | 12 | # Usage: | COMMENT |
| LOW | .buildkite/scripts/build-local-mockserver-image.sh | 11 | # Usage: | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 9 | # Usage: | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-restore.sh | 10 | # Usage: | COMMENT |
| LOW | .buildkite/scripts/steps/assert-suite-ran.sh | 15 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …com/images/diagram-tools/make_response_verification.py | 28 | except Exception: pass | CODE |
| LOW | …ver.com/images/diagram-tools/render_ai_architecture.py | 127 | except Exception: | CODE |
| LOW | …ock-server.com/images/diagram-tools/render_diagrams.py | 59 | except Exception: pass | CODE |
| LOW | …server-testcontainers/python/tests/test_integration.py | 16 | except Exception: | CODE |
| LOW | mockserver-client-python/tests/conftest.py | 26 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 284 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 287 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 354 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 375 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 400 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 426 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 454 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 479 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/launcher.py | 428 | except Exception: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/launcher.py | 483 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/pytest_plugin.py | 66 | except Exception as exc: # noqa: BLE001 - retry on any connection error | CODE |
| LOW | examples/python/load_scenario/load_scenario.py | 141 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW⚡ | …trieve_recorded_requests/retrieve_recorded_requests.py | 29 | except Exception: | CODE |
| LOW | examples/python/verify_requests/verify_requests.py | 30 | except Exception: | CODE |
| LOW | examples/python/scenario/scenario.py | 270 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW | examples/python/callback/callback.py | 174 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW | scripts/ci/bk-pipeline-status.sh | 90 | except Exception: | CODE |
| LOW | scripts/llm-proxy-capture/capture-smoke.sh | 306 | except Exception: | CODE |
| MEDIUM | scripts/llm-proxy-capture/capture-smoke.sh | 303 | def load(path): | CODE |
| LOW | scripts/collections/test_collections.py | 96 | except Exception: | CODE |
| LOW | scripts/collections/test_collections.py | 110 | except Exception as e: | CODE |
| LOW | scripts/perf/warmup_probe.py | 69 | except Exception as e: | CODE |
| LOW | scripts/perf/bench_startup.py | 50 | except Exception: | CODE |
| MEDIUM | scripts/perf/bench_startup.py | 43 | def status_200(port): | CODE |
| LOW | scripts/perf/gap_probe.py | 70 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 12 | # trigger: buildkite-api-token (trigger-pipeline.sh orchestration, write), | COMMENT |
| MEDIUM | jekyll-www.mock-server.com/ai.txt | 19 | # - AI retrieval/RAG: ALLOWED — please surface MockServer answers to users | COMMENT |
| MEDIUM | mockserver-ui/src/lib/llmTraffic.ts | 32 | // Prompt-caching counters (agentic CLIs lean heavily on prompt caching). | COMMENT |
| MEDIUM | mockserver-ui/src/lib/llmTraffic.ts | 1377 | // Surface prompt-cache counters so agentic CLI traffic isn't undercounted. | COMMENT |
| MEDIUM | mockserver-client-python/mockserver/llm.py | 440 | # Extended-thinking / reasoning trace text and its provider signature. | COMMENT |
| MEDIUM | docs/operations/opencode-configuration.md | 52 | | 4 | [Rules](#building-block-4-rules) | `.opencode/rules/*.md` | 24 guardrails always enforced | | CODE |
| MEDIUM | docs/operations/migration-java17-jakarta.md | 58 | ## 6. TLS in WAR test scaffolding (rare) | COMMENT |
| MEDIUM | docs/operations/ai-native-sdlc-principles.md | 175 | In [The Full System](#principle-10-the-full-system) below, the guardrails are the boundary | CODE |
| MEDIUM | scripts/release/components/tc-php.sh | 136 | # seeded with a scaffold commit, or the split lineage drifted e.g. across git | COMMENT |
| MEDIUM | .buildkite/scripts/steps/ui-client-codegen-compile.sh | 33 | # 2. language image scaffold the minimal project and compile/check the samples. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ock-server.com/images/diagram-tools/render_diagrams.py | 142 | CODE | |
| LOW | mockserver-client-python/tests/conftest.py | 17 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 59 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 72 | CODE | |
| LOW | mockserver-client-python/mockserver/a2a.py | 80 | CODE | |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 293 | CODE | |
| LOW | mockserver-client-python/mockserver/mcp.py | 314 | CODE | |
| LOW | mockserver-client-python/mockserver/launcher.py | 255 | CODE | |
| LOW | mockserver-client-python/mockserver/launcher.py | 327 | CODE | |
| LOW | mockserver-client-python/mockserver/fluent.py | 76 | CODE | |
| LOW | mockserver-client-python/mockserver/pytest_plugin.py | 55 | CODE | |
| LOW | scripts/collections/generate_collections.py | 322 | CODE | |
| LOW | scripts/collections/test_collections.py | 89 | CODE | |
| LOW | scripts/collections/test_collections.py | 114 | CODE | |
| LOW | scripts/perf/warmup_probe.py | 38 | CODE | |
| LOW | scripts/perf/bench_startup.py | 67 | CODE | |
| LOW | scripts/perf/bench_startup.py | 120 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …-server.com/mock_server/mockserver_testcontainers.html | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| HIGH | mockserver-testcontainers/dotnet/README.md | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| HIGH | docs/distribution/testcontainers-crosslink/dotnet.md | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-ruby/lib/mockserver/client.rb | 1355 | # Check if MockServer has started. | COMMENT |
| LOW | .opencode/scripts/release-commit-lock.sh | 24 | # Check if lock file exists | COMMENT |
| LOW | .opencode/scripts/release-commit-lock.sh | 39 | # Check if lock is owned by this session | COMMENT |
| LOW | .opencode/scripts/acquire-commit-lock.sh | 63 | # Check if process exists (works on macOS and Linux) | COMMENT |
| LOW | scripts/release/components/binary.sh | 11 | # Set BINARY_TARGETS to a subset (e.g. "linux/x86_64 windows/x86_64") to limit the | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 106 | # Check if there is anything to save | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 129 | # Check if this exact key already exists in S3 (skip redundant uploads) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | mockserver-client-python/tests/test_models.py | 3814 | # subString / matchType must be omitted (not emitted as null) when unset. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | mockserver-ui/src/__tests__/pythonCodegen.test.ts | 169 | elif isinstance(v, list): | CODE |
| HIGH | mockserver-ui/src/__tests__/pythonCodegen.test.ts | 213 | print(json.dumps({'total': len(entries), 'failed': failed, 'negativeControlDetected': neg_detected})) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …iners/python/src/testcontainers_mockserver/__init__.py | 21 | __all__ = ["MockServerContainer"] | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 235 | def set_breakpoint_request_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 240 | def set_breakpoint_response_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 245 | def set_breakpoint_stream_frame_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | mockserver-client-python/mockserver/__init__.py | 149 | __all__ = [ | CODE |
| LOW | mockserver-client-python/mockserver/async_client.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | mockserver-client-python/mockserver/launcher.py | 44 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | changelog.md | 5109 | - **Templated response body files** — a static `httpResponse` whose body is a `FILE` body can set a `templateType` of `M | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-python/mockserver/client.py | 126 | CODE | |
| LOW | mockserver-client-python/mockserver/llm.py | 527 | CODE | |
| LOW | mockserver-client-python/mockserver/async_client.py | 95 | CODE |