Home / oblien / openship
AI Slop Code RIsk Monitor

oblien/openship

Self-hosted deployment platform

4.8 Low pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for oblien/openship, a TypeScript project with 14,677 GitHub stars. SynthScan examined 1,519,311 lines of code across 5450 source files, recording 3206 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 4.8 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

4.8
Adjusted Signal
4.8
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
14.7K
Stars
TypeScript
Language
1.5M
Lines of Code
5.5K
Files
3.2K
Pattern Hits
2026-10-12
Scan Date
0.03
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 4.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1429 finding(s).

Hallucinated Dependency & Supply Chain Risk 3.9/100 · LOW

Are imports declared and package/API names verified? 277 finding(s).

Agent Over-Engineering Ratio 16.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 2426 finding(s).

PR Review Velocity Impact 20.9/100 · LOW

Which changes need focused human review? 3206 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 35HIGH 111MEDIUM 1518LOW 1542

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 3206 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators1484 hits · 4620 pts
SeverityFileLineSnippetContext
MEDIUMdocker-compose.yml1# ──────────────────────────────────────────────────────────COMMENT
MEDIUMdocker-compose.yml44# ──────────────────────────────────────────────────────────COMMENT
MEDIUMdocker-compose.yml53 # ─── Database (storage, private) ──────────────────────COMMENT
MEDIUMdocker-compose.yml73 # ─── Cache / Queue / Rate-limit (private) ─────────────COMMENT
MEDIUMdocker-compose.yml90 # ─── API (control plane) ──────────────────────────────COMMENT
MEDIUMdocker-compose.yml124 # ─── Dashboard (app UI) ───────────────────────────────COMMENT
MEDIUMdocker-compose.yml143 # ─── Web / Landing ────────────────────────────────────COMMENT
MEDIUMdocker/docker-compose.build.yml1# ──────────────────────────────────────────────────────────COMMENT
MEDIUMdocker/docker-compose.build.yml13# ──────────────────────────────────────────────────────────COMMENT
MEDIUMdocker/docker-compose.yml1# ──────────────────────────────────────────────────────────COMMENT
MEDIUMdocker/docker-compose.yml58# ──────────────────────────────────────────────────────────COMMENT
MEDIUMdocker/docker-compose.yml69 # ─── Database (storage, private) ──────────────────────COMMENT
MEDIUMdocker/docker-compose.yml97 # ─── Cache / Queue / Rate-limit (private) ─────────────COMMENT
MEDIUMdocker/docker-compose.yml114 # ─── API (control plane) ──────────────────────────────COMMENT
MEDIUMdocker/docker-compose.yml199 # ─── Dashboard (app UI) ───────────────────────────────COMMENT
MEDIUMdocker/docker-compose.yml216 # ─── Edge (OpenResty on :80/:443) ─────────────────────COMMENT
MEDIUMscripts/install.sh49# ── 1. Resolve the release tag ──────────────────────────────────────────────COMMENT
MEDIUMscripts/install.sh60# ── 2. Download + verify + extract the payload → cli/<tag> ──────────────────COMMENT
MEDIUMscripts/install.sh89# ── 3. Resolve Node: system >= NODE_MAJOR, else vendor from nodejs.org ───────COMMENT
MEDIUMscripts/install.sh154# ── 5. Record the distribution marker (read by `openship update`) ───────────COMMENT
MEDIUMscripts/install.sh170# ── 7. Put `openship` on PATH ───────────────────────────────────────────────COMMENT
MEDIUMscripts/install.sh197# ── 9. Next steps ───────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/mail_app.ts45// ─── user_settings ─────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/mail_app.ts64// ─── user_hotkeys ──────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/mail_app.ts83// ─── summary ───────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/mail_app.ts112// ─── note ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/mail_app.ts141// ─── writing_style_matrix ──────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/mail_app.ts161// ─── email_template ────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/mail_app.ts185// ─── Type exports ──────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts43// ─── Reusable column factories ─────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts61// ─── admin ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts85// ─── alias ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts107// ─── moderators ────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts127// ─── maillist_owners ───────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts146// ─── forwardings ───────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts176// ─── domain ────────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts205// ─── alias_domain ──────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts223// ─── domain_admins ─────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts243// ─── mailbox ───────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts349// ─── maillists ─────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts379// ─── sender_bcc_domain ─────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts399// ─── sender_bcc_user ───────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts421// ─── recipient_bcc_domain ──────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts441// ─── recipient_bcc_user ────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts462// ─── sender_relayhost ──────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts474// ─── deleted_mailboxes ─────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts500// ─── share_folder ──────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts516// ─── anyone_shares ─────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts527// ─── last_login ────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts549// ─── used_quota ────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/db-email/src/schema/vmail.ts566// ─── Type exports ──────────────────────────────────────────────────────────COMMENT
MEDIUM⚡packages/core/src/stacks.ts135// ─── Stack categories ────────────────────────────────────────────────────────COMMENT
MEDIUM⚡packages/core/src/stacks.ts139// ─── Project type (determines deploy-page UI path) ──────────────────────────COMMENT
MEDIUM⚡packages/core/src/stacks.ts143// ─── Stack definition ────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/core/src/stacks.ts25// ─── Language definitions ────────────────────────────────────────────────────COMMENT
MEDIUMpackages/core/src/stacks.ts238// ─── The registry ────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/core/src/stacks.ts242 // ── JavaScript / TypeScript - Frontend & Fullstack ─────────────────────────COMMENT
MEDIUMpackages/core/src/stacks.ts437 // ── JavaScript / TypeScript - Backend ──────────────────────────────────────COMMENT
MEDIUMpackages/core/src/stacks.ts519 // ── Go ─────────────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/core/src/stacks.ts577 // ── Rust ───────────────────────────────────────────────────────────────────COMMENT
1424 more matches not shown…
Hyper-Verbose Identifiers926 hits · 940 pts
SeverityFileLineSnippetContext
LOWpackages/core/src/stacks.ts1038export function buildOutputTransferExcludes(CODE
LOWpackages/core/src/stacks.ts1133export function packageManagerEnsureCommand(packageManager?: string): string {CODE
LOWpackages/core/src/cluster-workload.ts6export function clusterWorkloadNeedsOperator(CODE
LOWpackages/core/src/access-grants.ts100export function isOrgSingletonResourceType(type: string): boolean {CODE
LOWpackages/core/src/access-grants.ts230export function isSelfHostedOnlyGrantType(type: string): boolean {CODE
LOWpackages/core/src/cloud-capacity.ts27export function cloudAllocationShortfalls(CODE
LOWpackages/core/src/cluster-database.ts74export function validateClusterDatabaseImportArtifact(CODE
LOWpackages/core/src/cluster-database.ts217export function validateClusterDatabaseUpdate(CODE
LOWpackages/core/src/package-manager-bootstrap.ts6export function managedPackageManagerEnsureCommand(manager: ManagedPackageManager): string {CODE
LOWpackages/core/src/source-access.ts330export function serializeSourceAccessScope(CODE
LOWpackages/core/src/package-manager-version.ts17export function declaredPackageManagerPin(pkg: unknown, manager: string): string | undefined {CODE
LOWpackages/core/src/managed-network.ts96export function normalizeManagedNetworkInput(CODE
LOWpackages/core/src/managed-network.ts130export function withoutManagedNetworkMember(CODE
LOWpackages/core/src/managed-network.ts155export function initialManagedNetworkInput(CODE
LOWpackages/core/src/cluster-storage.ts119export function validateClusterVolumeMounts(mounts: ClusterVolumeMount[]) {CODE
LOWpackages/core/src/utils.ts35export function normalizeProjectRootDirectory(value?: string): string {CODE
LOWpackages/core/src/deployment-ownership.ts2export function deploymentBelongsToProject(CODE
LOW…ckages/core/src/package-manager-bootstrap.generated.ts3export const PACKAGE_MANAGER_BOOTSTRAP_SOURCE = "var __create=Object.create;var __getProtoOf=Object.getPrototypeOf;var _CODE
LOWpackages/core/src/compose-spec.ts42function composeOptionRequestsSomething(value: unknown): boolean {CODE
LOWpackages/core/src/project-source.ts259export function validateReleaseVersionUrl(value: string): string | null {CODE
LOWpackages/core/src/project-source.ts289export function validateReleaseRepository(value: string): string | null {CODE
LOWpackages/core/src/cluster-runtime.ts80export function clusterRuntimeConnections(CODE
LOWpackages/core/src/cluster-runtime.ts109export function assertClusterRuntimeNetwork(CODE
LOWpackages/core/src/cluster-runtime.ts138export function allocateClusterRuntimeRanges(reserved: readonly string[]): {CODE
LOWpackages/core/src/cluster-runtime.ts166export function assertClusterRuntimeRanges(CODE
LOWpackages/core/src/types.ts67export function deriveProjectDeployTarget(project: {CODE
LOWpackages/core/src/service-status.ts55export function serviceStatusToContainerState(CODE
LOWpackages/core/src/host-channel.ts288export function summarizeHostChannelCause(CODE
LOWpackages/core/src/backup-catalog.ts539export function restoreNeedsLiveContainer(kind: PayloadKind): boolean {CODE
LOWpackages/core/src/backup-catalog.ts544export function restoreAppliesAfterBounce(kind: PayloadKind): boolean {CODE
LOWpackages/core/src/backup-catalog.ts555export function restoreFailureLeavesTargetIntact(kind: PayloadKind): boolean {CODE
LOWpackages/core/src/infrastructure.ts232export function isInfrastructurePrivateIp(value: string): boolean {CODE
LOWpackages/core/src/infrastructure.ts393export function suggestNativeClusterConfig(CODE
LOWpackages/core/src/compose-namespace.ts133export function composeNamespaceDependencies(CODE
LOWpackages/core/src/mail-certificate.ts37export function currentMailCertificateHealth(CODE
LOWpackages/core/src/credentials.ts231export function normalizeCredentialSelector(CODE
LOWpackages/core/src/rollback-window.ts64export function computeAutoRollbackWindow(input: AutoRollbackWindowInput): number {CODE
LOWpackages/core/src/connectivity.ts83export function classifyConnectivityError(CODE
LOWpackages/core/src/host-firewall.ts494export function clusterRuntimeFirewallScript(ctx: {CODE
LOWpackages/core/src/service-routing.ts25export function findPublicUrlPlaceholders(value: string): PublicUrlPlaceholder[] {CODE
LOWpackages/core/src/service-routing.ts76export function resolvePublicUrlPlaceholders(CODE
LOWpackages/core/src/service-routing.ts231export function defaultServiceHostnameLabel(CODE
LOWpackages/core/src/service-routing.ts331export function aliasConflictsWithSiblings(CODE
LOWpackages/core/src/service-routing.ts346export function resolveServiceHostnameLabel(CODE
LOWpackages/core/src/scale/clusterTopology.ts101export function availableClusterAdditions(resource: DatabaseResource) {CODE
LOWpackages/core/src/updates/changelog-parser.ts2export function normalizeChangelogVersion(version: string): string {CODE
LOWpackages/core/src/workspaces/toml-helpers.ts20export function extractStringArrayFromSection(CODE
LOWpackages/core/src/workspaces/node.ts45function parsePackageJsonWorkspaces(content: string): string[] {CODE
LOWpackages/core/src/diagnostics/node.ts97export function installNodeErrorReporting(source: ErrorContext["source"]): void {CODE
LOWpackages/core/src/metadata/index.ts28export function missingOutputDirectoryMessage(outputDirectory?: string, subject?: string): string {CODE
LOWpackages/core/src/metadata/vercel.ts152export function vercelCompatibilityWarnings(raw: string): string[] {CODE
LOWpackages/contracts/test/fixtures.ts28export function domainDnsChallengeFixture(): DomainDnsChallenge {CODE
LOWpackages/contracts/test/server-cluster-fixtures.ts33export function clusterCapabilitiesFixture(): ClusterCapabilities {CODE
LOWpackages/contracts/test/managed-network-fixtures.ts12export function managedPreparationFixture(ids?: string[]): ManagedNetworkPreparation {CODE
LOWpackages/contracts/test/managed-network-fixtures.ts46export function managedPreparationSummaryFixture(): ManagedNetworkPreparationSummary {CODE
LOWpackages/contracts/test/cluster-runtime-fixtures.ts3export function clusterRuntimePlanFixture(): ClusterRuntimePlan {CODE
LOWpackages/contracts/src/project-controls.ts117export function normalizeProjectDeleteOptions(input: RemoveProjectInput) {CODE
LOWpackages/contracts/src/token-inputs.ts79export function wildcardProjectGrantRejected(g: {CODE
LOWpackages/contracts/src/deployments.ts34export function parseCreateDeploymentInput(value: unknown): CreateDeploymentInput {CODE
LOWpackages/contracts/src/environment-scope.ts9export function parseOptionalEnvironmentScope(value: unknown): Environment | undefined {CODE
866 more matches not shown…
Cross-Language Confusion (JS/TS)110 hits · 684 pts
SeverityFileLineSnippetContext
HIGHpackages/core/src/host-firewall.ts295 print(json.dumps(clean([row for row in rows if ('chain' in row and row['chain'].get('name', '').startswith(prefix)) CODE
HIGHpackages/core/src/host-firewall.ts299 print(json.dumps(clean(foreign), sort_keys=True))CODE
HIGHpackages/core/src/host-firewall.ts363print(json.dumps(snapshot, sort_keys=True))CODE
HIGHpackages/adapters/src/cluster/storage-host.ts20elif p.exists() and any(p.iterdir()):CODE
HIGHpackages/adapters/src/cluster/storage-host.ts32print(json.dumps({'path':str(p),'freeGiB':usage.free/1024**3}))CODE
HIGHpackages/adapters/src/cluster/k3s-host.ts48 if not OWNER.exists(): return NoneCODE
HIGHpackages/adapters/src/cluster/k3s-host.ts101 elif not pathlib.Path('/sys/fs/cgroup/memory').is_dir(): raise RuntimeError('The memory cgroup controller is unavailCODE
HIGHpackages/adapters/src/cluster/k3s-host.ts322 elif BIN.exists() or CONFIG.exists() or DATA.exists():CODE
HIGH⚡packages/adapters/src/cluster/k3s-host.ts344 elif ACTION == 'ready': result = readiness()CODE
HIGH⚡packages/adapters/src/cluster/k3s-host.ts345 elif ACTION == 'empty': result = assert_empty()CODE
HIGH⚡packages/adapters/src/cluster/k3s-host.ts346 elif ACTION == 'state':CODE
HIGH⚡packages/adapters/src/cluster/k3s-host.ts349 elif ACTION == 'nodes': result = json.loads(kubectl(['get', 'nodes', '-o', 'json']))CODE
HIGH⚡packages/adapters/src/cluster/k3s-host.ts350 elif ACTION == 'claim':CODE
HIGH⚡packages/adapters/src/cluster/k3s-host.ts361 print(json.dumps(result))CODE
HIGH⚡packages/adapters/src/cluster/k3s-host.ts364 print(json.dumps({'error': message[-3000:], 'code': 'CLUSTER_RUNTIME_NOT_EMPTY' if isinstance(error, NotEmptyError) CODE
HIGH⚡packages/adapters/src/cluster/k3s.test.ts61 elif args == ['ip', '-j', '-4', 'route', 'show', 'table', 'all']:CODE
HIGH⚡packages/adapters/src/cluster/k3s.test.ts63 elif args == ['systemctl', 'is-active', '--quiet', 'docker']:CODE
HIGH⚡packages/adapters/src/cluster/k3s.test.ts65 elif args == ['docker', 'network', 'ls', '-q']:CODE
HIGH⚡packages/adapters/src/cluster/k3s.test.ts67 elif args == ['docker', 'network', 'inspect', 'host-id', 'none-id', 'bridge-id', 'application-id']:CODE
HIGH…kages/adapters/src/network/network-diagnostics.test.ts155 elif args[:3] == ['docker', 'network', 'inspect']: output = '[{"IPAM":{"Config":[]}}]'CODE
HIGH…kages/adapters/src/network/network-diagnostics.test.ts156 elif args[0] == 'sh': output = ''CODE
HIGH⚡…kages/adapters/src/network/network-diagnostics.test.ts291 elif args[-1] == 'peers': output = 'peer-b\npeer-c\n'CODE
HIGH⚡…kages/adapters/src/network/network-diagnostics.test.ts292 elif args[-1] == 'public-key': output = 'different-key' if input.get('drift') else 'local-public'CODE
HIGH⚡…kages/adapters/src/network/network-diagnostics.test.ts293 elif args[-1] == 'pubkey': output = 'local-public'CODE
HIGH⚡…kages/adapters/src/network/network-diagnostics.test.ts294 elif args[-1] == 'listen-port': output = '51820'CODE
HIGH⚡…kages/adapters/src/network/network-diagnostics.test.ts295 elif args[-1] == 'allowed-ips': output = 'peer-b\t10.244.0.2/32\npeer-c\t10.244.0.3/32\n'CODE
HIGH⚡…kages/adapters/src/network/network-diagnostics.test.ts296 elif args == ['ip', '-d', '-j', 'addr', 'show']:CODE
HIGH⚡packages/adapters/src/network/private-network.ts35 print(json.dumps({'error': 'Linux hosts are required.', 'code': 'NETWORK_HOST_UNSUPPORTED'})); sys.exit(0)CODE
HIGH⚡packages/adapters/src/network/private-network.ts38 print(json.dumps({'interfaces': [{CODE
HIGH⚡packages/adapters/src/network/private-network.ts44 print(json.dumps({'error': 'Install iproute2 and Python 3, then inspect the network again.', 'code': 'NETWORK_TOOLS_CODE
HIGHpackages/adapters/src/network/private-network.ts61 print(json.dumps({'error': 'The verification port is unavailable on this private address. Choose another port or fixCODE
HIGHpackages/adapters/src/network/private-network.ts105 elif data == prefix + b'tcp\n' or data == prefix + b'stop\n':CODE
HIGHpackages/adapters/src/network/private-network.ts165 print(json.dumps({'peers': list(pool.map(check, c['peers']))}))CODE
HIGHpackages/adapters/src/network/private-network.ts204print(json.dumps(r))CODE
HIGHpackages/adapters/src/network/private-network.ts215print('{}')CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts27 elif args[:2] == ['wg', 'setconf']:CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts36 elif args[:2] == ['wg', 'show']:CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts38 elif args[-1] == 'peers': output = '\n'.join(state['peers'])CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts39 elif args[-1] == 'listen-port': output = str(state['listenPort'])CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts40 elif args[-1] == 'allowed-ips': output = '\n'.join(key + '\t' + state['allowedIps'].get(key, '(none)') for key in statCODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts41 elif args[-1] == 'latest-handshakes': output = '\n'.join(key + ' 1700000000' for key in state['peers'])CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts42 elif args[0] == 'ip':CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts45 elif args == ['ip', '-j', '-4', 'route', 'show', 'table', 'main']:CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts47 elif args[-2:] == ['link', 'show']:CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts49 elif args[1:3] == ['link', 'add']: state['exists'] = TrueCODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts50 elif args[1:3] == ['link', 'delete']: state.update(exists=False, addresses=[], routes=[], peers=[])CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts51 elif args[1:3] == ['address', 'add']: state['addresses'].append(args[3])CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts52 elif args[1:3] == ['link', 'set']:CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts54 elif args[1:4] == ['-4', 'route', 'add']:CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts59 elif args[1:3] != ['link', 'set']: raise AssertionError('Unexpected ip command: ' + str(args))CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts60 elif args[0] == 'sh':CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts62 elif args[-1] == 'disable-owned-service': state['enabled'] = FalseCODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts63 elif args[-1] == 'apply-owned-firewall': state['firewall'] = TrueCODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts64 elif args[-1] == 'remove-owned-firewall': state['firewall'] = FalseCODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts65 elif args[-1] == 'inspect-owned-firewall': output = 'OSWG_' + 'a' * 16 + '_IN' if state['firewall'] else ''CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts66 elif args[-1] == 'snapshot-owned-firewall': output = state['firewallRevision'] if state['firewall'] else 'missing'CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts126 elif scenario == 'boot': result = invoke('boot')CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts127 elif scenario == 'timer':CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts130 elif scenario in ('rollback', 'failed'): result = invoke('rollback')CODE
HIGH⚡…adapters/src/network/managed-network-transport.test.ts131 elif scenario.startswith('missing_receipt'):CODE
50 more matches not shown…
Over-Commented Block461 hits · 444 pts
SeverityFileLineSnippetContext
LOWdocker-compose.yml1# ──────────────────────────────────────────────────────────COMMENT
LOWdocker-compose.yml21# unprivileged control plane.COMMENT
LOWdocker/docker-compose.build.yml1# ──────────────────────────────────────────────────────────COMMENT
LOWdocker/docker-compose.yml1# ──────────────────────────────────────────────────────────COMMENT
LOWdocker/docker-compose.yml21# equivalent stack at ~/.openship/compose/. This file is the reference forCOMMENT
LOWdocker/docker-compose.yml41# build + run your deployed apps as host containers (Docker-out-of-Docker). TheCOMMENT
LOWdocker/docker-compose.yml121 # OPENSHIP_BIND_ADDR opts into a public/LAN interface (see header note).COMMENT
LOWdocker/docker-compose.yml141 # translation and a bare→container conversion inherits existing certs.COMMENT
LOWdocker/docker-compose.yml161 # by `openship up`; by hand on this file — see .env.example). Harmless whenCOMMENT
LOWscripts/install.sh1#!/bin/shCOMMENT
LOWscripts/release.ts81COMMENT
LOWscripts/install-source.sh1#!/bin/shCOMMENT
LOWpackages/core/src/mail-server/routing/build-routes.ts201 },COMMENT
LOWpackages/contracts/src/github-types.ts241 clone_url: string;COMMENT
LOWpackages/contracts/src/service-inputs.ts261 ...ComposeFieldsBlock,COMMENT
LOWpackages/platform/src/engine/config/env.ts621// (/setup, /desktop-auth-start). If INTERNAL_TOKEN is unset on aCOMMENT
LOWpackages/platform/src/engine/config/env.ts641 throw new Error(COMMENT
LOWpackages/platform/src/engine/lib/deployment-runtime.ts361 return "cloud";COMMENT
LOWpackages/platform/src/engine/lib/deployment-runtime.ts701 }COMMENT
LOWpackages/platform/src/engine/lib/deployment-runtime.ts721 //COMMENT
LOWpackages/platform/src/engine/lib/upstream-url.ts181 const running = info.status === "running";COMMENT
LOW…ages/platform/src/engine/lib/organization-lifecycle.ts101 // is_team flag now only LABELS the workspace (a user's auto-createdCOMMENT
LOWpackages/platform/src/engine/lib/ssh-key-path.ts101 // like `/etc/openship/ssh-keys` is an explicit carve-out.COMMENT
LOWpackages/platform/src/engine/lib/self-host.ts61 // public IP uniquely identifies one interface, so a genuinely remote box canCOMMENT
LOWpackages/platform/src/engine/lib/edge-target.ts101 return `${scheme}//${url.hostname.toLowerCase()}${port ? `:${port}` : ""}`;COMMENT
LOWpackages/platform/src/engine/lib/edge-target.ts281 // failure reason below reads those same arrays, so a source added here isCOMMENT
LOWpackages/platform/src/engine/lib/domain-ssl.ts501COMMENT
LOW…ckages/platform/src/engine/lib/notification-workers.ts341 // The secret is encrypt()'d at storage time (seeCOMMENT
LOWpackages/platform/src/engine/lib/ssh-manager.ts441 return cached.executor;COMMENT
LOWpackages/platform/src/engine/lib/ssh-manager.ts921 if (this.isConnected(serverId)) return { reachable: true, code: "ok" };COMMENT
LOWpackages/platform/src/engine/lib/routing-domains.ts181 // port-based deploy of the same hostname sets `targetPort` alongside it withoutCOMMENT
LOWpackages/platform/src/engine/lib/routing-domains.ts681 };COMMENT
LOWpackages/platform/src/engine/lib/routing-domains.ts841 // letting project B overwrite project A's vhost (and serve A's domain on A'sCOMMENT
LOWpackages/platform/src/engine/lib/project-analytics.ts121COMMENT
LOW…ges/platform/src/engine/lib/notification-categories.ts221 //COMMENT
LOWpackages/platform/src/engine/lib/auth.ts401 expiresIn: 60 * 10, // 10 minutesCOMMENT
LOWpackages/platform/src/engine/lib/auth.ts421 // mail transport at all. Because CLOUD_MODE is true there,COMMENT
LOW…/platform/src/engine/modules/domains/domain.service.ts1221 domain.hostname,COMMENT
LOW…/platform/src/engine/modules/domains/domain.service.ts1781 // (issuing the cert IS the proof), not a DNS dig.COMMENT
LOW…rm/src/engine/modules/domains/project-route.service.ts461 // SSH executor.COMMENT
LOW…rm/src/engine/modules/domains/routing-apply.service.ts341 // Re-emit any migration path-fan-out domains from live upstreams (a domainCOMMENT
LOW…c/engine/modules/incoming-webhooks/incoming.service.ts281 if (!hook.enabled) {COMMENT
LOW…latform/src/engine/modules/mail/mail-health.service.ts101 unit: "clamav-freshclam",COMMENT
LOW…kages/platform/src/engine/modules/mail/mail.service.ts661 // the engine that now exists, instead of trusting a "none" a status poll cachedCOMMENT
LOW…kages/platform/src/engine/modules/mail/mail.service.ts801 : null;COMMENT
LOW…ckages/platform/src/engine/modules/mail/mail-engine.ts721 // turned a healthy sidecar into a required-component failure that haltedCOMMENT
LOW…/engine/modules/mail/admin/platform-mailbox.service.ts261 }COMMENT
LOW…tform/src/engine/modules/mail/admin/domains.service.ts141 // (amavis keypair + 50-user config splice + reload), then record theCOMMENT
LOW…tform/src/engine/modules/mail/admin/domains.service.ts161 // so a static reverse-import would form a load-time cycle. SameCOMMENT
LOW…engine/modules/mail/webmail/webmail-install.service.ts321 if (plan.settings.length > 0) {COMMENT
LOW…atform/src/engine/modules/projects/project-teardown.ts361COMMENT
LOW…atform/src/engine/modules/projects/project-teardown.ts441COMMENT
LOW…atform/src/engine/modules/projects/project-teardown.ts641 const cancellationNotes: string[] = [];COMMENT
LOW…atform/src/engine/modules/projects/project-teardown.ts681 observeCaughtError(err, "platform/engine/modules/projects/project-teardown");COMMENT
LOW…/engine/modules/projects/project-connection.service.ts381 const { source, target, output, template, declaredPort } = ends;COMMENT
LOW…gine/modules/projects/project-inspection.operations.ts41 );COMMENT
LOW…rm/src/engine/modules/projects/project-crud.service.ts741 routingConfig: data.routingConfig ?? null,COMMENT
LOW…rm/src/engine/modules/projects/project-crud.service.ts921 const { authorization } = await import("../../lib/authorization");COMMENT
LOW…rm/src/engine/modules/projects/project-crud.service.ts1761 // no sibling fan-out. gitUrl is derived by the linker, so it's not set hereCOMMENT
LOW…rm/src/engine/modules/projects/project-crud.service.ts1941 // domain/port re-sync above. Self-hosted → OpenResty, cloud → the Oblien edge;COMMENT
401 more matches not shown…
Hallucination Indicators35 hits · 375 pts
SeverityFileLineSnippetContext
CRITICALpackages/core/src/scale/topology.ts564 definition.deployments.standalone.limits.cpu.some((cpu) => cpu === value.cpu) &&CODE
CRITICALpackages/core/src/scale/topology.ts565 definition.deployments.standalone.limits.memory.some((memory) => memory === value.memory) &&CODE
CRITICAL⚡…ckages/adapters/src/runtime/cloud-build-limits.test.ts70 expect(h.executor.exec.mock.calls.at(-1)![0]).toContain("buildx rm --force 'openship-");CODE
CRITICAL⚡…ckages/adapters/src/runtime/cloud-build-limits.test.ts72 expect(h.executor.exec.mock.calls.at(-1)![0]).not.toContain("--keep-state");CODE
CRITICAL⚡…ckages/adapters/src/runtime/cloud-build-limits.test.ts80 expect(h.executor.exec.mock.calls.at(-1)![0]).toContain("buildx rm --force 'openship-");CODE
CRITICAL⚡…ckages/adapters/src/runtime/cloud-build-limits.test.ts81 expect(h.executor.exec.mock.calls.at(-1)![0]).not.toContain("--keep-state");CODE
CRITICAL⚡…ckages/adapters/src/runtime/cloud-build-limits.test.ts82 expect(h.executor.exec.mock.calls.at(-1)![0]).not.toContain("prune");CODE
CRITICAL…ckages/adapters/src/runtime/cloud-build-limits.test.ts93 expect(h.executor.exec.mock.calls.at(-1)![0]).toContain("buildx rm --force 'openship-");CODE
CRITICAL…ckages/adapters/src/runtime/cloud-build-limits.test.ts94 expect(h.executor.exec.mock.calls.at(-1)![0]).not.toContain("--keep-state");CODE
CRITICAL…test/modules/projects/cloud-routing-regression.test.ts161 expect(h.fixture.routes.set.mock.calls.map(([host, table]) => [host, table.routes[0]?.action])).toEqual([CODE
CRITICAL…modules/cloud-workspaces/lifecycle.integration.test.ts568 new Set(h.client.workspaces.create.mock.calls.map(([input]: any[]) => input.idempotency_key))CODE
CRITICAL…modules/cloud-workspaces/lifecycle.integration.test.ts929 expect(h.billing.cancelCapacityCheckout.mock.calls.map(([, request]: any[]) => request)).toEqual([saved, saved]);CODE
CRITICAL…modules/cloud-workspaces/lifecycle.integration.test.ts1062 expect(h.billing.createCheckout.mock.calls.map(([input]) => input)).toEqual([original, original, replacement]);CODE
CRITICAL…modules/cloud-workspaces/lifecycle.integration.test.ts1467 expect(h.billing.getEntitlement.mock.calls.every(([namespace]: [string]) => namespace === workspace.namespace)).toBeCODE
CRITICAL…modules/cloud-workspaces/lifecycle.integration.test.ts1490 expect(h.billing.getEntitlement.mock.calls.every(([namespace]: [string]) => namespace === workspace.namespace)).toBeCODE
CRITICAL…modules/cloud-workspaces/lifecycle.integration.test.ts1585 expect(h.billing.getEntitlement.mock.calls.every(([namespace]: [string]) => namespace === workspace.namespace)).toBeCODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts773 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts1085 const meta = repos.deployment.create.mock.calls.at(-1)?.[0]?.meta;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts1789 const meta = repos.deployment.create.mock.calls.at(-1)?.[0]?.meta;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2029 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2414 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2452 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2480 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2502 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2546 const persisted = repos.service.syncFromCompose.mock.calls.at(-1)?.[1]?.[0];CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2652 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2685 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2723 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2753 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2806 const meta = repos.deployment.create.mock.calls.at(-1)?.[0]?.meta;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2846 const persisted = repos.service.syncFromCompose.mock.calls.at(-1)?.[1]?.[0];CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2857 repos.deployment.create.mock.calls.at(-1)?.[0]?.meta.composeServices[0].environment,CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts2954 const meta = repos.deployment.create.mock.calls.at(-1)?.[0].meta as any;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts3038 const captured = repos.deployment.create.mock.calls.at(-1)?.[0]?.envVars;CODE
CRITICALapps/api/test/modules/deployments/build.service.test.ts3073 const meta = repos.deployment.create.mock.calls.at(-1)?.[0]?.meta;CODE
Fake / Example Data132 hits · 142 pts
SeverityFileLineSnippetContext
LOWpackages/core/src/apps/catalog.json966 "placeholder": "UTC",CODE
LOWpackages/core/src/apps/catalog.json975 "placeholder": "en"CODE
LOWpackages/core/src/apps/catalog.json1171 "ADMIN_EMAIL": "admin@example.com"CODE
LOWpackages/core/src/apps/catalog.json1295 "NC_ADMIN_EMAIL": "admin@example.com"CODE
LOWpackages/core/src/apps/catalog.json1495 "GITEA_ADMIN_EMAIL": "admin@example.com"CODE
LOWpackages/core/src/apps/catalog.json3939 "placeholder": "mail.example.com",CODE
LOWpackages/core/src/apps/catalog.json3949 "placeholder": "mail.example.com",CODE
LOWpackages/core/src/apps/catalog.json3962 "placeholder": "993",CODE
LOWpackages/core/src/apps/catalog.json3976 "placeholder": "587",CODE
LOWpackages/core/src/apps/catalog.json3994 "placeholder": "https://mail.example.com",CODE
LOWpackages/core/src/apps/catalog/directus.json32 "ADMIN_EMAIL": "admin@example.com"CODE
LOWpackages/core/src/apps/catalog/n8n.json65 "placeholder": "UTC",CODE
LOWpackages/core/src/apps/catalog/n8n.json74 "placeholder": "en"CODE
LOWpackages/core/src/apps/catalog/nocodb.json26 "NC_ADMIN_EMAIL": "admin@example.com"CODE
LOWpackages/core/src/apps/catalog/webmail.json65 "placeholder": "mail.example.com",CODE
LOWpackages/core/src/apps/catalog/webmail.json75 "placeholder": "mail.example.com",CODE
LOWpackages/core/src/apps/catalog/webmail.json88 "placeholder": "993",CODE
LOWpackages/core/src/apps/catalog/webmail.json102 "placeholder": "587",CODE
LOWpackages/core/src/apps/catalog/webmail.json120 "placeholder": "https://mail.example.com",CODE
LOWpackages/core/src/apps/catalog/gitea.json28 "GITEA_ADMIN_EMAIL": "admin@example.com"CODE
LOWpackages/adapters/src/system/tls-probe.test.ts107 for (const host of ["*.example.com", "example.com:22", "user@example.com", "example.com/path"])CODE
LOWapps/web/public/app.schema.json365 "placeholder": { "description": "Input placeholder.", "type": "string" },CODE
LOWapps/cli/test/e2e/reset-admin-password.test.ts59 ? { status: 200, json: { ok: true, email: "admin@example.com" } }CODE
LOWapps/cli/test/e2e/reset-admin-password.test.ts79 expect(r.out).toContain("admin@example.com");CODE
LOW⚡apps/dashboard/src/lib/dotenv.test.ts14 expect(parseDotenv("just some text\nTOKEN=dummy-value")).toEqual([CODE
LOW⚡apps/dashboard/src/lib/dotenv.test.ts15 { key: "TOKEN", value: "dummy-value" },CODE
LOW⚡apps/dashboard/src/lib/dotenv.test.ts21 expect(parseDotenv("1FOO=x\nFOO-BAR=x\nGOOD_KEY=dummy-value")).toEqual([CODE
LOW⚡apps/dashboard/src/lib/dotenv.test.ts22 { key: "GOOD_KEY", value: "dummy-value" },CODE
LOW⚡apps/dashboard/src/lib/dotenv.test.ts31 expect(parseDotenv('A="fake-token"')).toEqual([{ key: "A", value: "fake-token" }]);CODE
LOW⚡apps/dashboard/src/lib/dotenv.test.ts32 expect(parseDotenv("B='dummy-value'")).toEqual([{ key: "B", value: "dummy-value" }]);CODE
LOWapps/dashboard/src/lib/dotenv.test.ts58 expect(parseDotenv("\uFEFFA=fake-value\r\nB=dummy-value\r\n")).toEqual([CODE
LOWapps/dashboard/src/lib/dotenv.test.ts60 { key: "B", value: "dummy-value" },CODE
LOWapps/dashboard/src/lib/sseMessageProcessors.test.ts880 const result = processor.parseMessage({ type: "custom-event", foo: "dummy-value" });CODE
LOWapps/dashboard/src/lib/sseMessageProcessors.test.ts881 expect(result).toMatchObject({ type: "custom-event", foo: "dummy-value" });CODE
LOWapps/dashboard/src/i18n/project-rename-copy.test.ts37 for (const key of ["title", "description", "label", "placeholder", "save", "cancel"]) {CODE
LOWapps/dashboard/src/i18n/locales/ja/settings.json241 "placeholder": "ghp_… または github_pat_…",CODE
LOWapps/dashboard/src/i18n/locales/ja/settings.json376 "placeholder": "Acme Inc",CODE
LOWapps/dashboard/src/i18n/locales/ja/settings.json376 "placeholder": "Acme Inc",CODE
LOWapps/dashboard/src/i18n/locales/ja/chrome.json8 "namePlaceholder": "Acme Corp",CODE
LOWapps/dashboard/src/i18n/locales/ja/projectSettings.json137 "placeholder": "マイプロジェクト",CODE
LOWapps/dashboard/src/i18n/locales/ja/projectSettings.json398 "placeholder": "storage\nuploads:/app/public/uploads",CODE
LOWapps/dashboard/src/i18n/locales/pt/settings.json241 "placeholder": "ghp_… ou github_pat_…",CODE
LOWapps/dashboard/src/i18n/locales/pt/settings.json376 "placeholder": "Acme Inc",CODE
LOWapps/dashboard/src/i18n/locales/pt/settings.json376 "placeholder": "Acme Inc",CODE
LOWapps/dashboard/src/i18n/locales/pt/chrome.json8 "namePlaceholder": "Acme Corp",CODE
LOWapps/dashboard/src/i18n/locales/pt/projectSettings.json137 "placeholder": "Meu projeto",CODE
LOWapps/dashboard/src/i18n/locales/pt/projectSettings.json398 "placeholder": "storage\nuploads:/app/public/uploads",CODE
LOWapps/dashboard/src/i18n/locales/zh/settings.json241 "placeholder": "ghp_… 或 github_pat_…",CODE
LOWapps/dashboard/src/i18n/locales/zh/settings.json376 "placeholder": "Acme Inc",CODE
LOWapps/dashboard/src/i18n/locales/zh/settings.json376 "placeholder": "Acme Inc",CODE
LOWapps/dashboard/src/i18n/locales/zh/settings.json564 "namePlaceholder": "Jane Doe",CODE
LOWapps/dashboard/src/i18n/locales/zh/chrome.json8 "namePlaceholder": "Acme Corp",CODE
LOWapps/dashboard/src/i18n/locales/zh/projectSettings.json137 "placeholder": "我的项目",CODE
LOWapps/dashboard/src/i18n/locales/zh/projectSettings.json398 "placeholder": "storage\nuploads:/app/public/uploads",CODE
LOWapps/dashboard/src/i18n/locales/ar/settings.json241 "placeholder": "ghp_… أو github_pat_…",CODE
LOWapps/dashboard/src/i18n/locales/ar/settings.json376 "placeholder": "Acme Inc",CODE
LOWapps/dashboard/src/i18n/locales/ar/settings.json376 "placeholder": "Acme Inc",CODE
LOWapps/dashboard/src/i18n/locales/ar/settings.json564 "namePlaceholder": "Jane Doe",CODE
LOWapps/dashboard/src/i18n/locales/ar/chrome.json8 "namePlaceholder": "Acme Corp",CODE
LOWapps/dashboard/src/i18n/locales/ar/projectSettings.json137 "placeholder": "مشروعي",CODE
72 more matches not shown…
Self-Referential Comments21 hits · 63 pts
SeverityFileLineSnippetContext
MEDIUMapps/email/engine/iRedMail.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/tools/migrate_sql_alias_table.py2# This file is used to migrate SQL table `vmail.alias` for SQL backends.COMMENT
MEDIUMapps/email/engine/dialog/virtual_domain_config.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/dialog/pgsql_config.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/dialog/optional_components.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/dialog/config_via_dialog.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/pkgs/get_all.sh7# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/pkgs/get_all.sh112 # Create a temp file to store shasumCOMMENT
MEDIUMapps/email/engine/functions/amavisd.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/amavisd.sh117 # Create a empty disclaimer.COMMENT
MEDIUMapps/email/engine/functions/packages_freebsd.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/postgresql.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/backend.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/iredapd.sh7# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/clamav.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/dovecot.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/cleanup.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/postfix.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/postfix.sh416 # Create the directory if not present.COMMENT
MEDIUMapps/email/engine/functions/fail2ban.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
MEDIUMapps/email/engine/functions/packages.sh6# This file is part of iRedMail, which is an open source mail serverCOMMENT
Excessive Try-Catch Wrapping16 hits · 21 pts
SeverityFileLineSnippetContext
LOWpackages/adapters/src/cluster/k3s-host.ts246 except Exception as error: return {'ready': False, 'message': str(error)[-2000:]}CODE
LOW⚡packages/adapters/src/cluster/k3s-host.ts362except Exception as error:CODE
LOW⚡packages/adapters/src/network/private-network.ts43except Exception:CODE
LOW⚡packages/adapters/src/network/managed-network-host.ts431except Exception as error:CODE
MEDIUMapps/email/engine/tools/create_mail_user_OpenLDAP.py293 print("Error: file not exist:", CSV)CODE
LOWapps/email/engine/tools/ldap_assign_user_to_groups.py150except Exception as e:STRING
LOW…ail/engine/tools/ldap_move_members_to_another_group.py120 except Exception as e:STRING
LOWapps/email/engine/tools/migrate_sql_alias_table.py52except Exception as e:CODE
LOWapps/email/engine/tools/migrate_sql_alias_table.py145 except Exception as e:CODE
MEDIUMapps/email/engine/tools/migrate_sql_alias_table.py150 print("Error while migrating %s %s: %s" % (_type, m, repr(e)))CODE
LOWapps/email/engine/tools/migrate_sql_alias_table.py168 except Exception as e:CODE
MEDIUMapps/email/engine/tools/migrate_sql_alias_table.py173 print("Error while migrating moderators of alias account %s: %s" % (m, repr(e)))CODE
LOW…ps/email/engine/update/ldap/update-ldap-dovecot-2.3.py58 except Exception as e:CODE
MEDIUM…ps/email/engine/update/ldap/update-ldap-dovecot-2.3.py59 print("Error while updating user {}: {}".format(mail, repr(e)))CODE
LOWapps/email/engine/update/1.4.1/update-ldap.py55 except Exception as e:CODE
MEDIUMapps/email/engine/update/1.4.1/update-ldap.py56 print("Error while updating user {}: {}".format(mail, repr(e)))CODE
AI Slop Vocabulary4 hits · 12 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/scaling-e2e.yml78 # the local test harness or on a user's server.COMMENT
MEDIUM.github/workflows/scaling-e2e.yml85 # this cleanup into the local test harness or prune arbitrary volumes.COMMENT
MEDIUM…/dashboard/src/app/(auth)/select-organization/page.tsx133 // payloads — robust against shared members between orgs.COMMENT
MEDIUMapps/email/client/components/mail/thread-display.tsx195 // wiring robust to row-click misses, keyboard navigation, and directCOMMENT
Modern AI Meta-Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMpackages/adapters/src/infra/openresty-lua.ts794# scaffolding, not a site.COMMENT
MEDIUMapps/dashboard/src/components/monitoring/VisitorMap.tsx463 // bg-card shell with solid bg-muted blocks — an outline-only scaffold reads asCOMMENT
MEDIUMapps/api/src/modules/system/setup.controller.ts460 // guardrails authMiddleware does. Using the shared guard (canonical authModeCOMMENT
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHpackages/db-email/src/schema/mail_app.ts84// AI-generated summary of a single message. `connection_id` upstream isCOMMENT
Example Usage Blocks3 hits · 5 pts
SeverityFileLineSnippetContext
LOWapps/email/engine/tools/fail2ban_unban_ip.sh6# Usage:COMMENT
LOWapps/email/engine/tools/create_mail_user_SQL.sh8# Usage:COMMENT
LOW⚡apps/email/engine/functions/cleanup.sh30# Usage:COMMENT
Verbosity Indicators3 hits · 4 pts
SeverityFileLineSnippetContext
LOW…rc/engine/modules/github/github-application.service.ts336 // Step 2: OAuth done. Check if installations already exist.COMMENT
LOW…ashboard/src/context/deployment/useDeploymentBuild.tsx789 // Step 1: Ensure project existsCOMMENT
LOW…ashboard/src/context/deployment/useDeploymentBuild.tsx906 // Step 2: Create deployment with config snapshot + env varsCOMMENT
Structural Annotation Overuse3 hits · 4 pts
SeverityFileLineSnippetContext
LOW…rc/engine/modules/github/github-application.service.ts336 // Step 2: OAuth done. Check if installations already exist.COMMENT
LOW…ashboard/src/context/deployment/useDeploymentBuild.tsx789 // Step 1: Ensure project existsCOMMENT
LOW…ashboard/src/context/deployment/useDeploymentBuild.tsx906 // Step 2: Create deployment with config snapshot + env varsCOMMENT
Deep Nesting2 hits · 2 pts
SeverityFileLineSnippetContext
LOWapps/email/engine/tools/create_mail_user_OpenLDAP.py128CODE
LOWapps/email/engine/tools/migrate_sql_alias_table.py69CODE
Slop Phrases1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMapps/email/client/components/create/email-phrases.ts70 'Let me know if you need any clarification ',CODE
Overly Generic Function Names1 hit · 1 pts
SeverityFileLineSnippetContext
LOWapps/email/client/app/entry.server.tsx6export default async function handleRequest(CODE