MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
This report presents the forensic synthetic code analysis of mock-server/mockserver-monorepo, a Java project with 4,915 GitHub stars. SynthScan v2.0 examined 1,097,358 lines of code across 5030 source files, recording 3512 pattern matches distributed across 21 syntactic categories. The overall adjusted score of 7.5 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3512 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …com/mockserver/jetbrains/ContractTestRestClientTest.kt | 23 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …n/com/mockserver/jetbrains/MockServerRestClientTest.kt | 24 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …kotlin/com/mockserver/jetbrains/ChaosRestClientTest.kt | 15 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …lin/com/mockserver/jetbrains/BreakpointProtocolTest.kt | 31 | override fun onNext(item: java.nio.ByteBuffer) { sb.append(java.nio.charset.StandardCharsets.UTF_8.decode(it | CODE |
| CRITICAL | …rver/testcontainers/MockServerContainerConfigTest.java | 27 | String version = org.mockserver.client.MockServerClient.class.getPackage().getImplementationVersion(); | CODE |
| CRITICAL | …rver/testcontainers/MockServerContainerConfigTest.java | 197 | org.junit.jupiter.api.Assertions.assertThrows( | CODE |
| CRITICAL | mockserver/mockserver-netty/pom.xml | 95 | io.netty.channel.epoll.Epoll.isAvailable(). Runtime-only; on non-Linux | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 337 | ch.pipeline().addLast(new io.netty.handler.codec.http.HttpServerCodec()); | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 338 | ch.pipeline().addLast(new io.netty.handler.codec.http.HttpObjectAggregator(64 * 1024)); | CODE |
| CRITICAL⚡ | …r/netty/ForwardConnectionPoolLoopbackCallbackTest.java | 345 | io.netty.handler.codec.http.FullHttpResponse response = new io.netty.handler.cod | CODE |
| CRITICAL | …/netty/unification/PortUnificationH2cPipelineTest.java | 123 | org.mockserver.socket.tls.SniHandler.getALPNProtocol(new MockServerLogger(), channel.pipeline().firstCon | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 175 | io.netty.handler.ssl.util.SelfSignedCertificate selfSigned = new io.netty.handler.ssl.util.SelfSignedCertificate | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 346 | uri, WebSocketVersion.V13, null, true, new io.netty.handler.codec.http.DefaultHttpHeaders(), 65536); | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 348 | ? io.netty.handler.ssl.SslContextBuilder.forClient().trustManager(InsecureTrustManagerFactory.INSTANCE). | CODE |
| CRITICAL | …ebsocket/WebSocketProxyPassthroughIntegrationTest.java | 468 | ctx.pipeline().addBefore(ctx.name(), "httpClientCodec", new io.netty.handler.codec.http.HttpClientCodec()); | CODE |
| CRITICAL | …y/integration/mock/TrafficValidateIntegrationTest.java | 135 | org.apache.commons.io.IOUtils.toString(socket.getInputStream(), java.nio.charset.StandardCharsets.UTF_8); | CODE |
| CRITICAL | …etty/integration/mock/OidcProviderIntegrationTest.java | 91 | com.nimbusds.jose.jwk.RSAKey rsaKey = new com.nimbusds.jose.jwk.gen.RSAKeyGenerator(2048) | CODE |
| CRITICAL | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 50 | org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().reset(); | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 223 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(notNul | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 231 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(nullVa | CODE |
| CRITICAL⚡ | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 233 | org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().reset(); | CODE |
| CRITICAL | …java/org/mockserver/netty/mcp/McpToolRegistryTest.java | 248 | assertThat(org.mockserver.mock.action.http.ServiceChaosRegistry.getInstance().get("payments.svc"), is(nullValue( | CODE |
| CRITICAL | …server/netty/http3/Http3ConnectUdpIntegrationTest.java | 676 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …/netty/http3/Http3ResponseTrailersIntegrationTest.java | 365 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …ver/netty/http3/Http3GrpcStreamingIntegrationTest.java | 646 | io.netty.handler.codec.quic.Quic.isAvailable() | CODE |
| CRITICAL | …rg/mockserver/netty/http3/Http3McpIntegrationTest.java | 644 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …t/java/org/mockserver/netty/http3/Http3ServerTest.java | 336 | java.net.http.HttpResponse.BodyHandlers.ofString()); | CODE |
| CRITICAL | …t/java/org/mockserver/netty/http3/Http3ServerTest.java | 366 | java.net.http.HttpResponse.BodyHandlers.ofString()); | CODE |
| CRITICAL | …t/java/org/mockserver/netty/http3/Http3ServerTest.java | 490 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …g/mockserver/netty/http3/Http3GrpcIntegrationTest.java | 627 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …kserver/netty/http3/Http3StreamingIntegrationTest.java | 377 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …http3/Http3DataPlaneAuthenticationIntegrationTest.java | 315 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …mockserver/netty/http3/Http3ParityIntegrationTest.java | 470 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …ty/http3/Http3ProtocolVerificationIntegrationTest.java | 204 | boolean available = io.netty.handler.codec.quic.Quic.isAvailable(); | CODE |
| CRITICAL | …erver/netty/http3/Http3StreamErrorIntegrationTest.java | 293 | io.netty.handler.codec.quic.Quic.isAvailable() | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 127 | org.mockserver.llm.semantic.SemanticMatching.install( | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 188 | org.mockserver.mock.drift.DriftAnalyzer.getInstance().setSemanticExtension(extension); | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 204 | org.mockserver.mock.drift.DriftAnalyzer.getInstance().setResponseTimeThresholdMs(threshold); | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 228 | threshold = org.mockserver.mock.drift.SemanticSeverity.valueOf( | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 237 | org.mockserver.mock.drift.DriftAlertNotifier.getInstance().configure(true, url, threshold, cooldownMillis); | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 388 | org.mockserver.llm.semantic.SemanticMatching.clear(); | CODE |
| CRITICAL | …/src/main/java/org/mockserver/lifecycle/LifeCycle.java | 690 | org.mockserver.socket.tls.KeyAndCertificateFactoryFactory.createKeyAndCertificateFactory(configuration, | CODE |
| CRITICAL | …erver-netty/src/main/java/org/mockserver/cli/Main.java | 988 | systemOut.println(NEW_LINE + " " + com.google.common.base.Strings.padEnd("", maxLengthMessage, '=')); | CODE |
| CRITICAL | …erver-netty/src/main/java/org/mockserver/cli/Main.java | 992 | systemOut.println(" " + com.google.common.base.Strings.padEnd("", maxLengthMessage, '=') + NEW_LINE); | CODE |
| CRITICAL | …tty/src/main/java/org/mockserver/netty/MockServer.java | 221 | org.mockserver.netty.proxy.MockServerIpTransparentHelper.applyIfEnabled(serverServerBootstrap, configuration); | CODE |
| CRITICAL⚡ | …main/java/org/mockserver/netty/HttpRequestHandler.java | 93 | org.mockserver.mock.action.http.LoadScenarioOrchestrator.getInstance() | CODE |
| CRITICAL⚡ | …main/java/org/mockserver/netty/HttpRequestHandler.java | 95 | org.mockserver.mock.action.http.LoadScenarioOrchestrator.getInstance() | CODE |
| CRITICAL⚡ | …main/java/org/mockserver/netty/HttpRequestHandler.java | 100 | org.mockserver.mock.drift.DriftAlertNotifier.getInstance() | CODE |
| CRITICAL⚡ | …main/java/org/mockserver/netty/HttpRequestHandler.java | 104 | org.mockserver.mock.action.http.PreemptionSimulator.getInstance().setInFlightSupplier(server::getRequestsInFligh | CODE |
| CRITICAL | …main/java/org/mockserver/netty/HttpRequestHandler.java | 172 | org.mockserver.mock.action.http.PreemptionSimulator simulator = org.mockserver.mock.action.http.PreemptionSi | CODE |
| CRITICAL | …main/java/org/mockserver/netty/HttpRequestHandler.java | 180 | emittedGoAway = org.mockserver.netty.unification.Http2GoAwayEmitter.emit( | CODE |
| CRITICAL | …main/java/org/mockserver/netty/HttpRequestHandler.java | 535 | org.mockserver.llm.analysis.LlmDatasetExporter.DatasetFormat.fromWire(format); | CODE |
| CRITICAL | …main/java/org/mockserver/netty/HttpRequestHandler.java | 543 | new org.mockserver.llm.analysis.LlmOptimisationReportService.Filter( | CODE |
| CRITICAL | …main/java/org/mockserver/netty/HttpRequestHandler.java | 653 | return new org.mockserver.llm.analysis.LlmOptimisationReportService.Filter(null, null, null); | CODE |
| CRITICAL | …main/java/org/mockserver/netty/HttpRequestHandler.java | 657 | return new org.mockserver.llm.analysis.LlmOptimisationReportService.Filter( | CODE |
| CRITICAL | …main/java/org/mockserver/netty/HttpRequestHandler.java | 693 | return new org.mockserver.llm.analysis.AgentRunDiff.RunSide( | CODE |
| CRITICAL | …/org/mockserver/netty/proxy/SoOriginalDstResolver.java | 79 | if (!io.netty.channel.epoll.Epoll.isAvailable()) { | CODE |
| CRITICAL | …erver/netty/proxy/EbpfOriginalDestinationResolver.java | 142 | if (!io.netty.channel.epoll.Epoll.isAvailable()) { | CODE |
| CRITICAL | …kserver/netty/proxy/MockServerIpTransparentHelper.java | 71 | if (!io.netty.channel.epoll.Epoll.isAvailable()) { | CODE |
| CRITICAL | …a/org/mockserver/netty/grpc/GrpcBidiStreamHandler.java | 390 | org.mockserver.mock.breakpoint.StreamFrameCallbackDispatcher.getInstance().dispatchFrame( | CODE |
| 241 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 4 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 31 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 359 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 370 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 436 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 439 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 486 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 494 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 575 | # ============================================================================== | COMMENT |
| MEDIUM | mockserver-performance-test/stack/inject/run-inject.sh | 578 | # ============================================================================== | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 29 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 35 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 97 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 112 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/dnssec.tf | 120 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/website/binaries.tf | 15 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 19 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 28 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 85 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/dependency-cache.tf | 87 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 22 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/binaries-publish.tf | 13 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 3 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | terraform/buildkite-agents/perf-results.tf | 11 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/perf-results.tf | 68 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-agents/perf-results.tf | 70 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/buildkite-pipelines/clusters.tf | 2 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 50 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/s3.tf | 52 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 33 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/lambda.tf | 35 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 100 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 102 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 112 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/lambda.tf | 114 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 6 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 8 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 53 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/monitoring.tf | 55 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/ses.tf | 1 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | terraform/ses-email-forwarding/ses.tf | 3 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 34 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 36 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 46 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 48 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | terraform/ses-email-forwarding/ses.tf | 61 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| 763 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-node/mockServerClient.js | 670 | requestAndResponseCallback: function requestAndResponseCallback(callback) { | CODE |
| LOW | mockserver-client-node/webSocketClient.js | 365 | requestAndResponseCallback: function requestAndResponseCallback(callback) { | CODE |
| LOW | …r-client-node/test/no_proxy/breakpoint_routing_test.js | 31 | function makeRequestAndResponsePayload(httpRequest, httpResponse) { | CODE |
| LOW | …lient-node/examples/callback_action_examples/server.js | 54 | function createExpectationWithinObjectCallback() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 99 | function verifyRequestsReceiveAtLeastTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 116 | function verifyRequestsReceiveAtMostTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 133 | function verifyRequestsReceiveExactlyTwice() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 150 | function verifyRequestsReceiveAtLeastTwiceByOpenAPI() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 167 | function verifyRequestsReceiveExactlyOnceByOpenAPIWithOperation() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 185 | function verifyRequestsReceiveExactlyOnceByExpectationIds() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 226 | function verifyRequestSequenceUsingOpenAPI() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 252 | function verifyRequestSequenceUsingExpectationIds() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 293 | function retrieveRecordedLogMessages() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 311 | function clearWithRequestPropertiesMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 327 | function clearWithOpenAPIRequestMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 358 | function clearRequestsAndLogsWithRequestPropertiesMatcher() { | CODE |
| LOW | …kserver-client-node/examples/client_examples/server.js | 374 | function clearRequestAndLogsWithOpenAPIRequestMatcher() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 1 | function matchRequestByOpenAPILoadedByHttpUrl() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 15 | function matchRequestByOpenAPIOperation() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 33 | function matchRequestByOpenAPILoadedByFileUrl() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 49 | function matchRequestByOpenAPILoadedByClasspathLocation() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 65 | function matchRequestByOpenAPILoadedByJsonLiteral() { | CODE |
| LOW | …-node/examples/openapi_expectations_examples/server.js | 86 | function matchRequestByOpenAPILoadedByYamlLiteral() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 67 | function forwardOverriddenRequestAndChangeReponse() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 94 | function forwardOverriddenRequestAndChangeHostAndPort() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 123 | function forwardOverriddenRequestWithDelay() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 148 | function javascriptTemplatedForward() { | CODE |
| LOW | …client-node/examples/forward_action_examples/server.js | 177 | function javascriptTemplatedForwardWithDelay() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 1 | function responseLiteralWithBodyOnly() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 68 | function responseLiteralWithHeader() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 88 | function responseLiteralWithCookie() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 111 | function responseLiteralWithStatusCodeAndReasonPhrase() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 132 | function responseLiteralWithBinaryPNGBody() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 182 | function respondDifferentlyForSameRequest() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 225 | function responseLiteralWithConnectionOptionsToSuppressHeaders() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 248 | function responseLiteralWithConnectionOptionsToOverrideHeaders() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 271 | function responseLiteralWithConnectionOptionsToCloseSocket() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 293 | function javascriptTemplatedResponse() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 328 | function javascriptTemplatedResponseWithDelay() { | CODE |
| LOW | …lient-node/examples/response_action_examples/server.js | 357 | function velocityTemplatedResponse() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 1 | function retrieveAllActiveExpectations() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 15 | function retrieveActiveExpectationsUsingRequestMatcher() { | CODE |
| LOW | …amples/retrieve_active_expectations_examples/server.js | 30 | function retrieveActiveExpectationsInJson() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 1 | function retrieveAllRecordedExpectations() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 15 | function retrieveRecordedExpectationsUsingRequestMatcher() { | CODE |
| LOW | …ples/retrieve_recorded_expectations_examples/server.js | 30 | function retrieveRecordedExpectationsInJson() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 1 | function retrieveAllRecordedRequests() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 15 | function retrieveRecordedRequestsUsingRequestMatcher() { | CODE |
| LOW | …eve_recorded_requests_and_responses_examples/server.js | 30 | function retrieveRecordedRequestsInJson() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 20 | function matchRequestByPathExactlyTwice() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 94 | function matchRequestByNotMatchingPath() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 114 | function matchRequestByMethodRegex() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 133 | function matchRequestByNotMatchingMethod() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 153 | function matchRequestByPathAndPathParametersAndQueryParametersName() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 178 | function matchRequestByPathParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 200 | function matchRequestByPathParameterJsonSchemaValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 232 | function matchRequestByQueryParameterRegexName() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 254 | function matchRequestByQueryParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 276 | function matchRequestByOptionalQueryParameterRegexValue() { | CODE |
| LOW | …examples/request_properties_matcher_examples/server.js | 309 | function matchRequestByQueryParameterJsonSchemaValue() { | CODE |
| 1250 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packaging/sdkman/candidate.yaml | 1 | # SDKMAN! candidate metadata for MockServer CLI. | COMMENT |
| LOW | packaging/homebrew/mockserver.rb | 1 | # Homebrew formula for the self-contained MockServer CLI bundle. | COMMENT |
| LOW | mockserver-performance-test/legacy/locustfile.py | 41 | COMMENT | |
| LOW | mockserver-performance-test/scripts/runK6.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | mockserver-performance-test/k6/growth.js | 1 | // Resource-growth scenario — surfaces "X increases over time" regressions that a | COMMENT |
| LOW | mockserver-performance-test/k6/regression.js | 1 | // Regression scenario — the periodic-pipeline workhorse. Measures response | COMMENT |
| LOW | mockserver-performance-test/k6/load.js | 1 | // Load test — the primary gated scenario. Closed-loop (arrival-rate) load so | COMMENT |
| LOW | mockserver-performance-test/k6/sweep.js | 1 | // Throughput-vs-latency sweep — measures the "knee" of MockServer's load curve. | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 1 | // Forward-path load test — a dedicated REGRESSION GUARD for the upstream | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 21 | // - SUT (:1080): the instance under measurement; built from THIS worktree so | COMMENT |
| LOW | mockserver-performance-test/k6/forward.js | 41 | // '[{"httpRequest":{"path":"/simple"},"httpResponse":{"statusCode":200,"body":"some simple response"},"times":{"unl | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 1 | // Shared k6 configuration for the MockServer performance suite. | COMMENT |
| LOW | mockserver-performance-test/k6/lib/config.js | 201 | }; | COMMENT |
| LOW | mockserver-performance-test/k6/lib/expectations.js | 1 | // Expectation seeding + the per-request actions exercised by the scenarios. | COMMENT |
| LOW | mockserver-performance-test/stack/docker-compose.yml | 1 | # MockServer observability + load stack. | COMMENT |
| LOW | mockserver-performance-test/stack/inject/envoy.yaml | 1 | # Envoy as a near-infinite HTTP sink for the MockServer load-injection harness. | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 21 | # Measurement method: rates are computed with the Prometheus HTTP API | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 61 | # connection-setup cost, not steady request dispatch. A point below this floor is | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 101 | # producing the real efficiency curve (a single injector plateaus well before 8 | COMMENT |
| LOW | mockserver-performance-test/stack/inject/run-inject.sh | 481 | COMMENT | |
| LOW | …erformance-test/stack/inject/docker-compose.inject.yml | 1 | # Load-INJECTION measurement stack. | COMMENT |
| LOW | terraform/website/dnssec.tf | 1 | # DNSSEC for mock-server.com. | COMMENT |
| LOW | terraform/website/dnssec.tf | 21 | # intact automatically. | COMMENT |
| LOW | terraform/website/security-hardening.tf | 1 | # Security hardening for the mockserver-website account. | COMMENT |
| LOW | terraform/website/marketplace-verification.tf | 1 | # VS Code Marketplace publisher verification. | COMMENT |
| LOW | terraform/website/binaries.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/website/mcp-dns.tf | 1 | # MCP registry DNS namespace verification. | COMMENT |
| LOW | terraform/buildkite-agents/dependency-cache.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 81 | # --- Per-secret IAM policies ------------------------------------------------ | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 121 | Statement = [{ | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 221 | name = "mockserver-release/cosign-key" | COMMENT |
| LOW | terraform/buildkite-agents/build-secrets.tf | 321 | ] | COMMENT |
| LOW | terraform/buildkite-agents/binaries-publish.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/buildkite-agents/imds-hardening.tf | 1 | # IMDS hop-limit hardening for the Buildkite build agents. | COMMENT |
| LOW | terraform/buildkite-agents/perf-results.tf | 1 | # --------------------------------------------------------------------------- | COMMENT |
| LOW | terraform/buildkite-pipelines/pipelines.tf | 161 | resource "buildkite_pipeline_schedule" "perf_regression_daily" { | COMMENT |
| LOW | terraform/buildkite-pipelines/pipelines.tf | 181 | # Note on "pipeline" (the top-level mockserver dispatcher): | COMMENT |
| LOW | terraform/buildkite-pipelines/providers.tf | 1 | # Dedicated Terraform management token (read_pipelines, write_pipelines, graphql), | COMMENT |
| LOW | terraform/buildkite-pipelines/clusters.tf | 1 | # Buildkite cluster migration | COMMENT |
| LOW | terraform/ses-email-forwarding/lambda.tf | 61 | Effect = "Allow" | COMMENT |
| LOW | mockserver-client-node/sendRequest.js | 21 | } | COMMENT |
| LOW | …ent-node/test/no_proxy/mock_server_node_client_test.js | 1361 | // ======================================================================== | COMMENT |
| LOW | docker/ensure-ca-bundle.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | jekyll-www.mock-server.com/mockserver-openapi.yaml | 4121 | # items: | COMMENT |
| LOW | jekyll-www.mock-server.com/_config.yml | 21 | COMMENT | |
| LOW | jekyll-www.mock-server.com/ai.txt | 1 | # MockServer — AI Crawling and Training Policy | COMMENT |
| LOW | …kyll-www.mock-server.com/_unused_plugins/compressor.rb | 1 | # | COMMENT |
| LOW | jekyll-www.mock-server.com/_data/nav.yml | 1 | # Left-hand navigation structure. | COMMENT |
| LOW | …ent-ruby/spec/mockserver/expectation_roundtrip_spec.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …client-ruby/spec/mockserver/roundtrip_fidelity_spec.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 21 | # MOCKSERVER_BINARY_BASE_URL mirror host for the release assets | COMMENT |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 101 | # Return the download URL for a release asset. | COMMENT |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 361 | COMMENT | |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 381 | COMMENT | |
| LOW | …ckserver-client-ruby/lib/mockserver/binary_launcher.rb | 461 | # Compare two version strings using semver-aware numeric segment comparison (H7). | COMMENT |
| LOW | mockserver-client-ruby/lib/mockserver/mcp.rb | 1 | # frozen_string_literal: true | COMMENT |
| LOW | mockserver-client-ruby/lib/mockserver/llm.rb | 1 | # frozen_string_literal: true | COMMENT |
| 456 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 296 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: login returns a token once, advancing Start | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 306 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 314 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 354 | // Step 1: capture the order id from the request body into scenario state "orderId" | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 360 | // Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 530 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: capture the order id from the request body | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 539 | # Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 36 | ## Step 1: Classify Changed Files | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 66 | ## Step 2: Run Category-Specific Validations | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 145 | ## Step 3: Changelog Review (MANDATORY for all commits) | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 166 | ## Step 4: Adversarial Code Review (MANDATORY for all commits) | COMMENT |
| LOW | .opencode/rules/commit-workflow.md | 205 | ## Step 5: Acquire Lock and Commit | COMMENT |
| LOW | .opencode/skills/browser-auth/SKILL.md | 78 | ### Step 1: Check if the User is Logged In | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 89 | ### Step 2: Navigate to the Target Page | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 97 | ### Step 3: Take a Snapshot | COMMENT |
| LOW⚡ | .opencode/skills/browser-auth/SKILL.md | 106 | ### Step 4: Extract Data | COMMENT |
| LOW | .opencode/skills/browser-auth/SKILL.md | 123 | ### Step 5: Verify with Screenshot (Optional) | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 17 | ## Step 1: Load the Review Constitution | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 22 | ## Step 2: Build an Independent Model | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 33 | ## Step 3: Read the Spec | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 41 | ## Step 4: Apply All 8 Lenses | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 120 | ## Step 5: Verify Claims Against Codebase | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 127 | ## Step 6: Check File Inventory Completeness | COMMENT |
| LOW⚡ | .opencode/skills/review-spec/SKILL.md | 134 | ## Step 7: Review Completeness Check | COMMENT |
| LOW | .opencode/skills/review-spec/SKILL.md | 148 | ## Step 8: Return Verdict | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 17 | ## Step 1: Load the Review Constitution | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 22 | ## Step 2: Gather the Diff | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 35 | ## Step 3: Read Surrounding Context | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 44 | ## Step 4: Apply All 8 Lenses | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 87 | ## Step 5: MockServer-Specific Triggers | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 105 | ## Step 6: LLM-Specific Failure Patterns | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 117 | ## Step 7: Review Completeness Check | COMMENT |
| LOW | .opencode/skills/review-code/SKILL.md | 130 | ## Step 8: Return Verdict | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 24 | ## Step 1: Try Local Docker Credentials (Optional Shortcut) | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 41 | ## Step 2: Create a Docker Hub Personal Access Token | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 59 | ## Step 3: Validate Credentials | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 75 | ## Step 4: Store in AWS Secrets Manager | COMMENT |
| LOW | .opencode/skills/dockerhub-credentials/SKILL.md | 87 | ## Step 5: Verify Storage | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 53 | ### Step 1: Buildkite CLI | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 68 | ### Step 2: GitHub CLI | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 76 | ### Step 3: Git Status | COMMENT |
| LOW | .opencode/skills/build-monitor/SKILL.md | 87 | ### Step 4: Report Authentication Status | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 15 | ### Step 0: Check and Install the CLI | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 27 | ### Step 1: Check Authentication | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 46 | ### Step 2: Select Organization (if needed) | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 54 | ### Step 3: Get API Token for REST API Calls | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 71 | ### Step 1: Parse Input | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 86 | ### Step 2: Get Build Overview | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 102 | ### Step 3: Check Agent Availability | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 116 | ### Step 4: List Builds Across All Pipelines | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 126 | ### Step 5: Identify Failed Jobs | COMMENT |
| LOW⚡ | .opencode/skills/pipeline-investigation/SKILL.md | 134 | ### Step 6: Retrieve Job Logs | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 151 | ### Step 7: Download and Analyze Build Artifacts | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 167 | ### Step 8: Check GitHub Actions (Secondary CI) | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 176 | ### Step 9: Additional Investigation | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 201 | ### Step 10: Confirm Flaky-vs-Real | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 223 | ### Step 11: Enumerate Competing Hypotheses | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 230 | ### Step 12: Classify Error | COMMENT |
| LOW | .opencode/skills/pipeline-investigation/SKILL.md | 247 | ### Step 13: Check for Already-Pushed Fixes | COMMENT |
| LOW | .opencode/skills/aws-investigation/SKILL.md | 75 | ### Step 1: Determine Active Stack | COMMENT |
| 68 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …r-testcontainers/python/tests/test_container_config.py | 7 | CODE | |
| LOW | …iners/python/src/testcontainers_mockserver/__init__.py | 19 | CODE | |
| LOW | …ners/python/src/testcontainers_mockserver/container.py | 9 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 8 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 12 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | mockserver-client-python/tests/test_llm.py | 44 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 26 | CODE | |
| LOW | mockserver-client-python/tests/test_control_plane.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 3 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 4 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 4 | CODE | |
| LOW | mockserver-client-python/tests/test_fluent.py | 9 | CODE | |
| LOW | mockserver-client-python/tests/test_breakpoint.py | 2 | CODE | |
| LOW | mockserver-client-python/tests/test_exceptions.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_async_client.py | 17 | CODE | |
| LOW | mockserver-client-python/tests/test_auth_tls.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_models.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_models.py | 5 | CODE | |
| LOW | mockserver-client-python/tests/test_integration.py | 6 | CODE | |
| LOW | mockserver-client-python/tests/test_integration.py | 6 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_client.py | 11 | CODE | |
| LOW | mockserver-client-python/tests/test_init.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_launcher.py | 8 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 1 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 5 | CODE | |
| LOW | mockserver-client-python/tests/test_websocket_client.py | 5 | CODE | |
| LOW | mockserver-client-python/mockserver/a2a.py | 44 | CODE | |
| LOW | mockserver-client-python/mockserver/models.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 8 | CODE | |
| LOW | mockserver-client-python/mockserver/client.py | 8 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| LOW | mockserver-client-python/mockserver/__init__.py | 1 | CODE | |
| 133 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ….mock-server.com/mock_server/llm_response_mocking.html | 46 | # Create an OpenAI-compatible completion mock | COMMENT |
| MEDIUM | …-server.com/mock_server/mockserver_testcontainers.html | 311 | # Create an expectation | STRING |
| MEDIUM | …l-www.mock-server.com/mock_server/crud_data_store.html | 168 | # Create a record | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 578 | # Create an expectation with the typed client | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 609 | # Create an expectation with the typed client | COMMENT |
| MEDIUM | …-www.mock-server.com/mock_server/contract_testing.html | 764 | <pre class="prettyprint code"><code class="code"># Create an expectation | CODE |
| MEDIUM | …ver.com/mock_server/_includes/ai_protocol_mocking.html | 2933 | # Create the mock A2A agent | COMMENT |
| MEDIUM | …ver.com/mock_server/_includes/ai_protocol_mocking.html | 2958 | # Create the mock A2A agent | COMMENT |
| MEDIUM | …r.com/mock_server/_includes/creating_expectations.html | 5317 | # Create a new user | COMMENT |
| MEDIUM | …r.com/mock_server/_includes/creating_expectations.html | 5472 | <pre class="prettyprint code"><code class="code"># Create a product - ID will be a UUID like "550e8400-e29b-41d4-a716-44 | CODE |
| MEDIUM | jekyll-www.mock-server.com/where/rubygems.html | 34 | # Create an expectation | COMMENT |
| MEDIUM | jekyll-www.mock-server.com/where/pypi.html | 28 | # Create an expectation | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 376 | # Create a minimal tar.gz archive containing the expected launcher | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 378 | # Create the directory structure that should be in the archive | COMMENT |
| MEDIUM⚡ | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 385 | # Create the tar.gz | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 792 | # Create a symlink inside cache that points outside | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 919 | # Create a normal archive | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 948 | # Create a symlink that escapes the version dir | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 1059 | # Create a directory structure that matches what the zip would contain | COMMENT |
| MEDIUM | …er-client-ruby/spec/mockserver/binary_launcher_spec.rb | 1072 | # Create the zip-like archive as a tar for the fixture (we'll stub extraction) | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/mcp.rb | 447 | # Create a new MCP mock builder. +path+ defaults to +/mcp+. | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/client.rb | 89 | # Create an OpenAPI expectation. | COMMENT |
| MEDIUM | mockserver-client-ruby/lib/mockserver/a2a.rb | 523 | # Create a new A2A mock builder. +path+ defaults to +/a2a+. | COMMENT |
| MEDIUM⚡ | …server-testcontainers/python/tests/test_integration.py | 71 | # Create an expectation | COMMENT |
| MEDIUM | …s/docker_compose_graceful_shutdown/integration_test.sh | 27 | # Create an expectation that will be persisted | COMMENT |
| MEDIUM | examples/curl/websocket/websocket_response.sh | 2 | # Create a WebSocket expectation that upgrades the connection with a | COMMENT |
| MEDIUM | examples/curl/websocket/websocket_with_matchers.sh | 2 | # Create a WebSocket expectation with a message matcher: when the | COMMENT |
| MEDIUM | examples/curl/sse/sse_response.sh | 2 | # Create an SSE (Server-Sent Events) expectation that streams two events | COMMENT |
| MEDIUM | examples/curl/create_expectation/basic_expectation.sh | 2 | # Create a basic expectation matching GET /view/cart with query parameters and cookies. | COMMENT |
| MEDIUM | examples/curl/create_expectation/match_all_requests.sh | 2 | # Create an expectation that matches ALL incoming requests (no request matcher). | COMMENT |
| MEDIUM | …mples/curl/create_expectation/match_once_within_60s.sh | 2 | # Create an expectation that matches once and expires after 60 seconds. | COMMENT |
| MEDIUM | examples/curl/create_expectation/match_exactly_twice.sh | 2 | # Create an expectation that matches exactly twice then expires. | COMMENT |
| MEDIUM | examples/curl/openapi/expectation_from_classpath.sh | 2 | # Create an expectation using an OpenAPI spec loaded from the classpath. | COMMENT |
| MEDIUM | examples/curl/openapi/expectation_for_operation.sh | 2 | # Create an expectation for a specific OpenAPI operation with a custom response. | COMMENT |
| MEDIUM | examples/curl/callback/class_callback.sh | 2 | # Create an expectation with a class callback action. | COMMENT |
| MEDIUM | scripts/release/components/github.sh | 2 | # Create the GitHub Release for the mockserver-X.Y.Z tag. | COMMENT |
| MEDIUM | .buildkite/release-pipeline.yml | 3 | # This file is intentionally short: every step is a single command. All the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 296 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: login returns a token once, advancing Start | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 306 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 314 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 354 | // Step 1: capture the order id from the request body into scenario state "orderId" | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 360 | // Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 530 | <pre class="prettyprint lang-bash code"><code class="code"># Step 1: capture the order id from the request body | CODE |
| LOW⚡ | …rver.com/mock_server/_includes/stateful_scenarios.html | 539 | # Step 3: read the captured id back in a JavaScript response template | COMMENT |
| LOW⚡ | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 246 | // Step 1: open mismatch dialog and click Create Expectation (sets captureOpen=true) | COMMENT |
| LOW⚡ | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 256 | // Step 2: close the mismatch dialog while captureOpen is still true. | COMMENT |
| LOW | …/src/__tests__/createExpectationFromUnmatched.test.tsx | 268 | // Step 3: re-open the mismatch dialog with a different request | COMMENT |
| LOW | …erver/netty/grpc/GrpcClientStreamingMultiplexTest.java | 277 | // Step 1: Re-aggregation pipeline with real HTTP/2 frames | COMMENT |
| LOW | …erver/netty/grpc/GrpcClientStreamingMultiplexTest.java | 307 | // Step 2: Feed into GrpcToHttpRequestHandler | COMMENT |
| LOW | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 93 | // Step 1: Canonical request | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 112 | // Step 2: String to sign | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 119 | // Step 3: Signing key | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 122 | // Step 4: Signature | COMMENT |
| LOW⚡ | …ain/java/org/mockserver/llm/client/AwsSigV4Signer.java | 125 | // Step 5: Authorization header | COMMENT |
| LOW | mockserver-vscode/src/extension.ts | 393 | // in binaryBundle.ts; this section handles the UI, download, and process I/O. | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 43 | # Step 1: Create a mock "upstream" endpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 59 | # Step 2: Create a loopback forward expectation | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 79 | # Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.py | 108 | # Step 4: Send a request through the forwarded path | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 43 | // Step 1: Create mock upstream endpoint | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 57 | // Step 2: Create loopback forward expectation | COMMENT |
| LOW | …amples/mockserver/BreakpointModifyProxiedExamples.java | 77 | // Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 16 | # Step 1: login returns a token once, advancing Started -> LoggedIn | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 26 | # Step 2: once LoggedIn, GET /profile returns the user | COMMENT |
| LOW⚡ | examples/curl/scenario/state_machine.sh | 34 | # Step 3: before login (Started), GET /profile is unauthorised | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 29 | // Step 1: Create a mock "upstream" endpoint that returns a JSON greeting | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 48 | // Step 2: Create a forward expectation that loops back to the same server | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 68 | // Step 3: Register a RESPONSE-phase breakpoint that modifies the proxied response | COMMENT |
| LOW | …ples/node/breakpoint_modify_proxied_examples/server.js | 104 | // Step 4: Make the actual request through the forwarded path | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 35 | # Step 1: Create a mock "upstream" endpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 54 | # Step 2: Create a loopback forward expectation | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 73 | # Step 3: Register a RESPONSE-phase breakpoint | COMMENT |
| LOW⚡ | …breakpoint_modify_proxied/breakpoint_modify_proxied.rb | 114 | # Step 4: Send a request through the forwarded path | COMMENT |
| LOW | mockserver-client-php/src/BinaryLauncher.php | 702 | // Step 1: Pre-scan archive members for path-escape attempts. | COMMENT |
| LOW | mockserver-client-php/src/BinaryLauncher.php | 762 | // Step 2: Extract (safe — all members verified) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | mockserver-performance-test/stack/inject/envoy.yaml | 1 | # Envoy as a near-infinite HTTP sink for the MockServer load-injection harness. | COMMENT |
| MEDIUM | …server.com/mock_server/load_injection_performance.html | 66 | <p>This page is about MockServer as a <strong>load generator</strong> — how much outbound traffic its built-in <a | CODE |
| MEDIUM | …rver.com/mock_server/_includes/stateful_scenarios.html | 1192 | # Trigger the failure from the test harness: | COMMENT |
| MEDIUM | …client-ruby/spec/mockserver/roundtrip_fidelity_spec.rb | 5 | # Cross-language JSON round-trip fidelity harness (Ruby port). | COMMENT |
| MEDIUM | .opencode/evals/run-evals.sh | 2 | # Offline evaluation harness for AI components. | COMMENT |
| MEDIUM | .opencode/evals/run-evals.sh | 3 | # See .opencode/rules/evaluation-harness.md and .opencode/evals/README.md | COMMENT |
| MEDIUM | mockserver-ui/package-lock.json | 5484 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | mockserver-ui/src/components/MetricsLineChart.tsx | 72 | // plain indices (keeps the component robust if a caller omits timestamps). | COMMENT |
| MEDIUM | container_integration_tests/integration_tests.sh | 28 | # that a no-op). Echoes "true" if the harness created the file (caller removes it | COMMENT |
| MEDIUM | …ation_tests/docker_compose_metrics/integration_test.sh | 15 | # wait_ready is now provided by the shared docker-compose.sh harness. | COMMENT |
| MEDIUM | …kserver/llm/analysis/LlmOptimisationReportBuilder.java | 546 | // Prefer the request body's model field; LlmProviderSniffer already has a robust reader. | COMMENT |
| MEDIUM | examples/curl/scenario/external_trigger.sh | 2 | # Triggered scenario flow - drive a state change from a test harness. | COMMENT |
| MEDIUM | examples/curl/scenario/external_trigger.sh | 6 | # until the harness triggers the "Down" state, after which it returns 503. | COMMENT |
| MEDIUM | scripts/build-standalone-binary.sh | 73 | # First <version> outside any <parent> block = the project version (robust if a <parent> with its | COMMENT |
| MEDIUM | scripts/release/components/github.sh | 49 | # both simpler and more robust. | COMMENT |
| MEDIUM | .buildkite/scripts/steps/perf-test-lint.sh | 4 | # Lint the k6 performance harness: | COMMENT |
| MEDIUM | .buildkite/scripts/steps/perf-test-compare.sh | 61 | # standalone artifact is harmless (same object) and robust if the embed is absent. | COMMENT |
| MEDIUM | .buildkite/scripts/steps/helm-integration-test.sh | 122 | # The helm test harness (helm-deploy.sh, logging.sh) shells out to kubectl, which | COMMENT |
| MEDIUM | .buildkite/scripts/steps/perf-test-inject.sh | 18 | # pinning is skipped with a warning (numbers noisier, harness still works). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | changelog.md | 2009 | - DataFaker (`net.datafaker:datafaker:2.5.4`) is now bundled as a template helper. A single shared `Faker` instance is e | CODE |
| LOW | terraform/ses-email-forwarding/lambda/index.js | 237 | * "John Doe" <john@example.com> | COMMENT |
| LOW | jekyll-www.mock-server.com/mockserver-openapi.yaml | 106 | body: '{"users":[{"id":1,"name":"John Doe"}],"total":1}' | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1280 | <tr><td><code>faker.address().streetAddress()</code></td><td>Random street address</td><td><code>"123 Main St"</ | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1283 | <tr><td><code>faker.lorem().sentence()</code></td><td>Random sentence of text</td><td><code>"Lorem ipsum dolor s | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1283 | <tr><td><code>faker.lorem().sentence()</code></td><td>Random sentence of text</td><td><code>"Lorem ipsum dolor s | CODE |
| LOW⚡ | …ww.mock-server.com/mock_server/response_templates.html | 1285 | <tr><td><code>faker.company().name()</code></td><td>Random company name</td><td><code>"Acme Corp"</code></td></t | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 82 | "email", "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 100 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 128 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 157 | email: 'user@example.com', | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 182 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 208 | ""email"": ""user@example.com"", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 231 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 253 | "email": "user@example.com", | CODE |
| LOW | …rver.com/mock_server/mock_openid_connect_provider.html | 284 | "email": "user@example.com", | CODE |
| LOW | mockserver-ui/src/__tests__/Panel.test.tsx | 43 | const placeholder = input.getAttribute('placeholder') ?? ''; | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 477 | (current / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 502 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 720 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 735 | (d / "placeholder").write_text("x") | CODE |
| LOW⚡ | mockserver-client-python/tests/test_launcher.py | 752 | (d / "placeholder").write_text("x") | CODE |
| LOW | mockserver-client-python/tests/test_launcher.py | 459 | (d / "placeholder").write_text("x") | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 85 | controlPlaneJWTAuthenticationMatchingClaims(ImmutableMap.of("name", "John Doe", "admin", "true")); | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 130 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 149 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 175 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 203 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 259 | "name", "John Doe", | CODE |
| LOW | …laneUsingJWTClientNotAuthenticatedIntegrationTest.java | 286 | "name", "John Doe", | CODE |
| LOW | …java/org/mockserver/async/MessageExampleGenerator.java | 222 | return MAPPER.getNodeFactory().textNode("user@example.com"); | CODE |
| LOW | …java/org/mockserver/async/MessageExampleGenerator.java | 241 | return MAPPER.getNodeFactory().textNode("user@example.com"); | CODE |
| LOW | …src/test/java/org/mockserver/llm/TokenCounterTest.java | 77 | String text = "Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore | CODE |
| LOW | …src/test/java/org/mockserver/llm/TokenCounterTest.java | 77 | String text = "Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore | CODE |
| LOW | …ava/org/mockserver/oidc/OidcProviderGeneratorTest.java | 256 | additional.put("email", "user@example.com"); | CODE |
| LOW | …ava/org/mockserver/oidc/OidcProviderGeneratorTest.java | 272 | assertThat(body.get("email").asText(), is("user@example.com")); | CODE |
| LOW | …/mockserver/model/NottableSchemaStringMatchesTest.java | 107 | assertThat("phone regex should match '555-1212'", string.matches("555-1212"), is(true)); | CODE |
| LOW | …/mockserver/model/NottableSchemaStringMatchesTest.java | 111 | assertThat("NOT phone regex should not match '555-1212'", notString.matches("555-1212"), is(false)); | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 105 | assertThat("phone regex.equals(string('555-1212')) should be true", string.equals(string("555-1212")), is(true)) | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 109 | assertThat("NOT phone regex.equals(string('555-1212')) should be false", notString.equals(string("555-1212")), i | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 248 | assertThat("string('555-1212').equals(phone regex) should be true", string("555-1212").equals(string), is(true)) | CODE |
| LOW | …g/mockserver/model/NottableSchemaStringEqualsTest.java | 252 | assertThat("string('555-1212').equals(NOT phone regex) should be false", string("555-1212").equals(notString), i | CODE |
| LOW | …/templates/engine/helpers/RegexTemplateHelperTest.java | 36 | assertThat(helper.group("user@example.com", "([^@]+)@(.+)", 2), is("example.com")); | CODE |
| LOW | …server/llm/adversarial/AdversarialResponseLibrary.java | 80 | repeat("LOREM IPSUM DOLOR SIT AMET ", 400)); | CODE |
| LOW | …server/llm/adversarial/AdversarialResponseLibrary.java | 80 | repeat("LOREM IPSUM DOLOR SIT AMET ", 400)); | CODE |
| LOW | mockserver/mockserver-client-java/pom.xml | 29 | by any client code path — template rendering, JavaScript/WASM execution, fake-data generation and | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …com/images/diagram-tools/make_response_verification.py | 28 | except Exception: pass | CODE |
| LOW | …ver.com/images/diagram-tools/render_ai_architecture.py | 127 | except Exception: | CODE |
| LOW | …ock-server.com/images/diagram-tools/render_diagrams.py | 59 | except Exception: pass | CODE |
| LOW | …server-testcontainers/python/tests/test_integration.py | 16 | except Exception: | CODE |
| LOW | mockserver-client-python/tests/conftest.py | 26 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 284 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 287 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 354 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 375 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 400 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 426 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 454 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 479 | except Exception: | CODE |
| LOW | mockserver-client-python/mockserver/launcher.py | 428 | except Exception: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/launcher.py | 483 | except Exception as exc: | CODE |
| LOW | mockserver-client-python/mockserver/pytest_plugin.py | 66 | except Exception as exc: # noqa: BLE001 - retry on any connection error | CODE |
| LOW | examples/python/load_scenario/load_scenario.py | 141 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW⚡ | …trieve_recorded_requests/retrieve_recorded_requests.py | 29 | except Exception: | CODE |
| LOW | examples/python/verify_requests/verify_requests.py | 30 | except Exception: | CODE |
| LOW | examples/python/scenario/scenario.py | 270 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW | examples/python/callback/callback.py | 174 | except Exception as error: # noqa: BLE001 - surface any runtime error | CODE |
| LOW | scripts/ci/bk-pipeline-status.sh | 90 | except Exception: | CODE |
| LOW | scripts/llm-proxy-capture/capture-smoke.sh | 306 | except Exception: | CODE |
| MEDIUM | scripts/llm-proxy-capture/capture-smoke.sh | 303 | def load(path): | CODE |
| LOW | scripts/collections/test_collections.py | 65 | except Exception: | CODE |
| LOW | scripts/collections/test_collections.py | 79 | except Exception as e: | CODE |
| LOW | scripts/perf/warmup_probe.py | 69 | except Exception as e: | CODE |
| LOW | scripts/perf/bench_startup.py | 50 | except Exception: | CODE |
| MEDIUM | scripts/perf/bench_startup.py | 43 | def status_200(port): | CODE |
| LOW | scripts/perf/gap_probe.py | 70 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/ensure-ca-bundle.sh | 18 | # Usage: | COMMENT |
| LOW | .opencode/scripts/agent-status.sh | 20 | # Usage: | COMMENT |
| LOW | .opencode/scripts/aggregate-telemetry.sh | 16 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/demo-opencode-proxy.sh | 28 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/launch-with-llm-capture.sh | 18 | # Usage: | COMMENT |
| LOW | mockserver-ui/scripts/launch-with-demo-data.sh | 11 | # Usage: | COMMENT |
| LOW | examples/validate/run.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/build-binary-bundle.sh | 22 | # Usage: | COMMENT |
| LOW | scripts/build-standalone-binary.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/verify-php-client.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/build-all-bundles.sh | 11 | # Usage: | COMMENT |
| LOW | scripts/ci/bk-pipeline-status.sh | 16 | # Usage: | COMMENT |
| LOW | scripts/release/test-cosign-signing.sh | 17 | # Usage: | COMMENT |
| LOW | scripts/release/backfill-helm-oci.sh | 9 | # Usage: | COMMENT |
| LOW | scripts/release/_lib.sh | 324 | # Usage: | COMMENT |
| LOW | scripts/lib/ensure-host-jdk21.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/llm-proxy-capture/capture-smoke.sh | 50 | # Usage: | COMMENT |
| LOW | .buildkite/scripts/build-local-mockserver-image.sh | 11 | # Usage: | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 9 | # Usage: | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-restore.sh | 10 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | terraform/buildkite-agents/build-secrets.tf | 12 | # trigger: buildkite-api-token (trigger-pipeline.sh orchestration, write), | COMMENT |
| MEDIUM | jekyll-www.mock-server.com/ai.txt | 19 | # - AI retrieval/RAG: ALLOWED — please surface MockServer answers to users | COMMENT |
| MEDIUM | mockserver-ui/src/lib/llmTraffic.ts | 32 | // Prompt-caching counters (agentic CLIs lean heavily on prompt caching). | COMMENT |
| MEDIUM | mockserver-ui/src/lib/llmTraffic.ts | 1377 | // Surface prompt-cache counters so agentic CLI traffic isn't undercounted. | COMMENT |
| MEDIUM | mockserver-client-python/mockserver/llm.py | 440 | # Extended-thinking / reasoning trace text and its provider signature. | COMMENT |
| MEDIUM | docs/operations/opencode-configuration.md | 52 | | 4 | [Rules](#building-block-4-rules) | `.opencode/rules/*.md` | 24 guardrails always enforced | | CODE |
| MEDIUM | docs/operations/migration-java17-jakarta.md | 58 | ## 6. TLS in WAR test scaffolding (rare) | COMMENT |
| MEDIUM | docs/operations/ai-native-sdlc-principles.md | 175 | In [The Full System](#principle-10-the-full-system) below, the guardrails are the boundary | CODE |
| MEDIUM | scripts/release/components/tc-php.sh | 136 | # seeded with a scaffold commit, or the split lineage drifted e.g. across git | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ock-server.com/images/diagram-tools/render_diagrams.py | 142 | CODE | |
| LOW | mockserver-client-python/tests/conftest.py | 17 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 59 | CODE | |
| LOW | …kserver-client-python/tests/test_roundtrip_fidelity.py | 72 | CODE | |
| LOW | mockserver-client-python/mockserver/a2a.py | 80 | CODE | |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 293 | CODE | |
| LOW | mockserver-client-python/mockserver/mcp.py | 314 | CODE | |
| LOW | mockserver-client-python/mockserver/launcher.py | 255 | CODE | |
| LOW | mockserver-client-python/mockserver/launcher.py | 327 | CODE | |
| LOW | mockserver-client-python/mockserver/fluent.py | 76 | CODE | |
| LOW | mockserver-client-python/mockserver/pytest_plugin.py | 55 | CODE | |
| LOW | scripts/collections/generate_collections.py | 306 | CODE | |
| LOW | scripts/collections/test_collections.py | 58 | CODE | |
| LOW | scripts/collections/test_collections.py | 83 | CODE | |
| LOW | scripts/perf/warmup_probe.py | 38 | CODE | |
| LOW | scripts/perf/bench_startup.py | 67 | CODE | |
| LOW | scripts/perf/bench_startup.py | 120 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …-server.com/mock_server/mockserver_testcontainers.html | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| HIGH | mockserver-testcontainers/dotnet/README.md | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| HIGH | docs/distribution/testcontainers-crosslink/dotnet.md | 0 | { "httprequest": { "method": "get", "path": "/hello" }, "httpresponse": { "statuscode": 200, "body": "world" } } | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-ruby/lib/mockserver/client.rb | 1242 | # Check if MockServer has started. | COMMENT |
| LOW | .opencode/scripts/release-commit-lock.sh | 24 | # Check if lock file exists | COMMENT |
| LOW | .opencode/scripts/release-commit-lock.sh | 39 | # Check if lock is owned by this session | COMMENT |
| LOW | .opencode/scripts/acquire-commit-lock.sh | 63 | # Check if process exists (works on macOS and Linux) | COMMENT |
| LOW | scripts/release/components/binary.sh | 11 | # Set BINARY_TARGETS to a subset (e.g. "linux/x86_64 windows/x86_64") to limit the | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 106 | # Check if there is anything to save | COMMENT |
| LOW⚡ | .buildkite/scripts/cache-save.sh | 129 | # Check if this exact key already exists in S3 (skip redundant uploads) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | mockserver-client-python/tests/test_models.py | 3814 | # subString / matchType must be omitted (not emitted as null) when unset. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | mockserver-ui/src/__tests__/pythonCodegen.test.ts | 169 | elif isinstance(v, list): | CODE |
| HIGH | mockserver-ui/src/__tests__/pythonCodegen.test.ts | 213 | print(json.dumps({'total': len(entries), 'failed': failed, 'negativeControlDetected': neg_detected})) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …iners/python/src/testcontainers_mockserver/__init__.py | 21 | __all__ = ["MockServerContainer"] | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 235 | def set_breakpoint_request_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 240 | def set_breakpoint_response_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW⚡ | mockserver-client-python/mockserver/websocket_client.py | 245 | def set_breakpoint_stream_frame_handler(self, breakpoint_id: str, handler: Callable) -> None: | CODE |
| LOW | mockserver-client-python/mockserver/websocket_client.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | mockserver-client-python/mockserver/__init__.py | 149 | __all__ = [ | CODE |
| LOW | mockserver-client-python/mockserver/async_client.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | mockserver-client-python/mockserver/launcher.py | 44 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | changelog.md | 1855 | - **Templated response body files** — a static `httpResponse` whose body is a `FILE` body can set a `templateType` of `M | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mockserver-client-python/mockserver/client.py | 126 | CODE | |
| LOW | mockserver-client-python/mockserver/llm.py | 527 | CODE | |
| LOW | mockserver-client-python/mockserver/async_client.py | 95 | CODE |