🙃 A delightful community-driven (with 2,500+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool that makes it easy to keep up with the latest updates from the community.
This report summarizes scanner evidence for ohmyzsh/ohmyzsh, a Shell project with 190,075 GitHub stars. SynthScan examined 91,568 lines of code across 833 source files, recording 402 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 7.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 297 finding(s).
Are imports declared and package/API names verified? 3 finding(s).
Are wrappers, guards, and repeated structures necessary? 104 finding(s).
Which changes need focused human review? 402 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 402 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | plugins/man/man.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/man/man.plugin.zsh | 7 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/man/man.plugin.zsh | 13 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/per-directory-history/per-directory-history.zsh | 12 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/per-directory-history/per-directory-history.zsh | 14 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/per-directory-history/per-directory-history.zsh | 19 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/per-directory-history/per-directory-history.zsh | 21 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/per-directory-history/per-directory-history.zsh | 55 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/per-directory-history/per-directory-history.zsh | 57 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/per-directory-history/per-directory-history.zsh | 64 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/per-directory-history/per-directory-history.zsh | 66 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/per-directory-history/per-directory-history.zsh | 89 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/per-directory-history/per-directory-history.zsh | 91 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …per-directory-history/per-directory-history.plugin.zsh | 12 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …per-directory-history/per-directory-history.plugin.zsh | 14 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …per-directory-history/per-directory-history.plugin.zsh | 19 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …per-directory-history/per-directory-history.plugin.zsh | 21 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …per-directory-history/per-directory-history.plugin.zsh | 55 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …per-directory-history/per-directory-history.plugin.zsh | 57 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …per-directory-history/per-directory-history.plugin.zsh | 64 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …per-directory-history/per-directory-history.plugin.zsh | 66 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …per-directory-history/per-directory-history.plugin.zsh | 89 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …per-directory-history/per-directory-history.plugin.zsh | 91 | #------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/gitfast/git-completion.bash | 207 | # ============================================================================== | COMMENT |
| MEDIUM | plugins/n98-magerun/n98-magerun.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/n98-magerun/n98-magerun.plugin.zsh | 7 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …/history-substring-search/history-substring-search.zsh | 42 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …/history-substring-search/history-substring-search.zsh | 44 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …/history-substring-search/history-substring-search.zsh | 53 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …/history-substring-search/history-substring-search.zsh | 55 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/history-substring-search/history-substring-search.zsh | 70 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/history-substring-search/history-substring-search.zsh | 72 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/history-substring-search/history-substring-search.zsh | 97 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/history-substring-search/history-substring-search.zsh | 99 | #----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/emotty/emotty.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/emotty/emotty.plugin.zsh | 11 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/grunt/grunt.plugin.zsh | 3 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/grunt/grunt.plugin.zsh | 10 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/grunt/grunt.plugin.zsh | 20 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/grunt/grunt.plugin.zsh | 48 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/sfffe/sfffe.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/sfffe/sfffe.plugin.zsh | 7 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/wd/wd.plugin.zsh | 4 | # ============== | COMMENT |
| MEDIUM | plugins/wd/wd.sh | 4 | # ============== | COMMENT |
| MEDIUM⚡ | plugins/systemadmin/systemadmin.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/systemadmin/systemadmin.plugin.zsh | 3 | # ----------- | COMMENT |
| MEDIUM⚡ | plugins/systemadmin/systemadmin.plugin.zsh | 7 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/systemadmin/systemadmin.plugin.zsh | 13 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/emoji-clock/emoji-clock.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/emoji-clock/emoji-clock.plugin.zsh | 8 | # ----------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/gnu-utils/gnu-utils.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/gnu-utils/gnu-utils.plugin.zsh | 6 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/sbt/sbt.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | plugins/sbt/sbt.plugin.zsh | 6 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/sudo/sudo.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/sudo/sudo.plugin.zsh | 3 | # ----------- | COMMENT |
| MEDIUM⚡ | plugins/sudo/sudo.plugin.zsh | 7 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | plugins/sudo/sudo.plugin.zsh | 16 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …syntax-highlighting/zsh-syntax-highlighting.plugin.zsh | 1 | # ------------------------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …syntax-highlighting/zsh-syntax-highlighting.plugin.zsh | 25 | # ------------------------------------------------------------------------------------------------- | COMMENT |
| 40 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/changelog.sh | 181 | fi | COMMENT |
| LOW | tools/changelog.sh | 241 | COMMENT | |
| LOW | tools/install.sh | 1 | #!/bin/sh | COMMENT |
| LOW | tools/install.sh | 21 | # [2] https://zsh.sourceforge.io/Doc/Release/Files.html#index-ZDOTDIR_002c-use-of | COMMENT |
| LOW | tools/install.sh | 41 | # | COMMENT |
| LOW | tools/install.sh | 121 | # • without privilege: exits with error code 1 and prints the message: | COMMENT |
| LOW | tools/install.sh | 161 | # You may obtain a copy of the License at | COMMENT |
| LOW | tools/upgrade.sh | 61 | } | COMMENT |
| LOW | plugins/man/man.plugin.zsh | 1 | # ------------------------------------------------------------------------------ | COMMENT |
| LOW | plugins/per-directory-history/per-directory-history.zsh | 1 | #!/usr/bin/env zsh | COMMENT |
| LOW | plugins/per-directory-history/per-directory-history.zsh | 21 | #------------------------------------------------------------------------------- | COMMENT |
| LOW | plugins/per-directory-history/per-directory-history.zsh | 41 | # freely, subject to the following restrictions: | COMMENT |
| LOW | …per-directory-history/per-directory-history.plugin.zsh | 1 | #!/usr/bin/env zsh | COMMENT |
| LOW | …per-directory-history/per-directory-history.plugin.zsh | 21 | #------------------------------------------------------------------------------- | COMMENT |
| LOW | …per-directory-history/per-directory-history.plugin.zsh | 41 | # freely, subject to the following restrictions: | COMMENT |
| LOW | plugins/gitfast/git-prompt.sh | 1 | # bash/zsh git prompt support | COMMENT |
| LOW | plugins/gitfast/git-prompt.sh | 21 | # you would put in $PS1 before and after the status string | COMMENT |
| LOW | plugins/gitfast/git-prompt.sh | 41 | # bash.showDirtyState variable, which defaults to true once | COMMENT |
| LOW | plugins/gitfast/git-prompt.sh | 61 | # | COMMENT |
| LOW | plugins/gitfast/git-prompt.sh | 81 | # | COMMENT |
| LOW | plugins/gitfast/git-prompt.sh | 101 | # If you would like a colored hint about the current dirty state, set | COMMENT |
| LOW | plugins/gitfast/git-prompt.sh | 361 | # set PS1 to a plain prompt so that we can | COMMENT |
| LOW | plugins/gitfast/git-prompt.sh | 381 | # This protects the user from arbitrary code execution via | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 1 | # bash/zsh completion support for core Git. | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 21 | # | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 41 | # __git_complete gk gitk | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 61 | # When set to "1" suggest all options, including options which are | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 101 | # 2: A prefix to be added to each possible completion word (optional). | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 121 | COMMENT | |
| LOW | plugins/gitfast/git-completion.bash | 541 | local fer_pfx="${pfx//\%/%%}" # "escape" for-each-ref format specifiers | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 681 | # | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 1721 | } | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 3421 | if [[ -n ${ZSH_VERSION-} && -z ${GIT_SOURCING_ZSH_COMPLETION-} ]]; then | COMMENT |
| LOW | plugins/gitfast/git-completion.bash | 3441 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | COMMENT |
| LOW | plugins/pow/pow.plugin.zsh | 1 | # Restart a rack app running under pow | COMMENT |
| LOW | plugins/dotenv/dotenv.plugin.zsh | 121 | # READER'S NOTE: this is actually a "best effort" check (works in tests), but | COMMENT |
| LOW | …ins/zsh-autosuggestions/zsh-autosuggestions.plugin.zsh | 1 | # Fish-like fast/unobtrusive autosuggestions for zsh. | COMMENT |
| LOW | …ins/zsh-autosuggestions/zsh-autosuggestions.plugin.zsh | 21 | # OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND | COMMENT |
| LOW | …ins/zsh-autosuggestions/zsh-autosuggestions.plugin.zsh | 621 | zpty -r $ZSH_AUTOSUGGEST_COMPLETIONS_PTY_NAME line '*'$'\0''*'$'\0' | COMMENT |
| LOW | …ins/zsh-autosuggestions/zsh-autosuggestions.plugin.zsh | 661 | # Give the first history item matching the pattern as the suggestion | COMMENT |
| LOW | plugins/zsh-autosuggestions/src/strategies/history.zsh | 1 | COMMENT | |
| LOW | …/zsh-autosuggestions/src/strategies/match_prev_cmd.zsh | 1 | COMMENT | |
| LOW | plugins/dirhistory/dirhistory.plugin.zsh | 1 | ## | COMMENT |
| LOW | plugins/gulp/gulp.plugin.zsh | 1 | #!/usr/bin/env zsh | COMMENT |
| LOW | plugins/kube-ps1/kube-ps1.plugin.zsh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/symfony6/symfony6.plugin.zsh | 1 | #compdef console | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 1 | #!/usr/bin/env zsh | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 21 | # disclaimer in the documentation and/or other materials provided | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 101 | zmodload -F zsh/parameter | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 121 | if [[ $KEYS == [[:print:]] ]]; then | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 141 | ( autoload -U +X -- "$1" 2>/dev/null ) | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 181 | fi | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 281 | # query string. | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 301 | local search_pattern="${(j:*:)_history_substring_search_query_parts[@]//(#m)[\][()|\\*?#<>~^]/\\$MATCH}*" | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 321 | # In order to stay as responsive as possible, we will process the raw | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 341 | # are beyond the end of $_history_substring_search_matches and that we | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 401 | "$(($highlight_start_index - 1)) $(($highlight_end_index - 1)) ${_history_substring_search_query_highlight}${h | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 421 | # before removing search highlight and exiting. This ensures no highlights | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 461 | _history-substring-search-down-buffer() { | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 541 | COMMENT | |
| 144 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | oh-my-zsh.sh | 41 | # Check if in emulation mode, if so early return | COMMENT |
| LOW | oh-my-zsh.sh | 53 | # Set ZSH_CUSTOM to the path where your custom config files | COMMENT |
| LOW | oh-my-zsh.sh | 57 | # Set ZSH_CACHE_DIR to the path where cache files should be created | COMMENT |
| LOW | tools/check_for_upgrade.sh | 256 | # Check if there are updates available before proceeding | COMMENT |
| LOW | tools/install.sh | 111 | # Check if sudo is installed | COMMENT |
| LOW | tools/install.sh | 450 | # Check if we're running on Termux | COMMENT |
| LOW | tools/install.sh | 488 | # Check if user has sudo privileges to run `chsh` with or without `sudo` | COMMENT |
| LOW | tools/install.sh | 506 | # Check if the shell change was successful | COMMENT |
| LOW | tools/upgrade.sh | 279 | # Check if it was really updated or not | COMMENT |
| LOW | tools/require_tool.sh | 13 | # Set d1 to be the next thing to compare from v1, and likewise for d2. | COMMENT |
| LOW | plugins/autoenv/autoenv.plugin.zsh | 5 | # Check if activate.sh is in $PATH | COMMENT |
| LOW | …ins/zsh-autosuggestions/zsh-autosuggestions.plugin.zsh | 447 | # Set POSTDISPLAY to text right of the cursor | COMMENT |
| LOW | …ins/zsh-autosuggestions/zsh-autosuggestions.plugin.zsh | 770 | # Close the file descriptor and remove the handler | COMMENT |
| LOW | plugins/zsh-autosuggestions/src/widgets.zsh | 183 | # Set POSTDISPLAY to text right of the cursor | COMMENT |
| LOW | plugins/zsh-autosuggestions/src/async.zsh | 13 | # Close the file descriptor and remove the handler | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 127 | # Check if $1 denotes the name of a callable function, i.e. it is fully | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 434 | # Check if the UP arrow was pressed to move the cursor within a multi-line | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 463 | # Check if the DOWN arrow was pressed to move the cursor within a multi-line | COMMENT |
| LOW | plugins/python/python.plugin.zsh | 27 | # Check if command exists | COMMENT |
| LOW | plugins/emoji/update_emoji.py | 183 | # Check if there is an alias available in the Gemoji DB | COMMENT |
| LOW | plugins/wd/wd.sh | 270 | # Check if fzf is installed | COMMENT |
| LOW | plugins/wd/wd.sh | 281 | # Check if config file exists | COMMENT |
| LOW | plugins/wd/wd.sh | 324 | # Check if config file exists | COMMENT |
| LOW | plugins/emacs/emacsclient.sh | 32 | # Check if there are suitable frames | COMMENT |
| LOW | plugins/ssh-agent/ssh-agent.plugin.zsh | 20 | # Check if ssh-agent is already running | COMMENT |
| LOW | plugins/vim-interaction/vim-interaction.plugin.zsh | 51 | # Open files passed (:A means abs path resolving symlinks, :q means quoting special chars) | COMMENT |
| LOW | plugins/mercurial/mercurial.plugin.zsh | 99 | # Check if there are modifications | COMMENT |
| LOW | plugins/tmux/tmux.plugin.zsh | 20 | # Set term to screen or screen-256color based on current terminal support | COMMENT |
| LOW | plugins/nestjs/nestjs.plugin.zsh | 3 | # Check if nest command exists | COMMENT |
| LOW | plugins/sudo/sudo.plugin.zsh | 58 | # Check if the typed command is really an alias to $EDITOR | COMMENT |
| LOW | …ax-highlighting/highlighters/main/main-highlighter.zsh | 1182 | # Check if $arg is variable assignment | COMMENT |
| LOW | …ax-highlighting/highlighters/main/main-highlighter.zsh | 1203 | # Check if $1 is a path. | COMMENT |
| LOW | …ax-highlighting/highlighters/main/main-highlighter.zsh | 1235 | # Check if this is a blacklisted path | COMMENT |
| LOW | plugins/vscode/vscode.plugin.zsh | 8 | # Verify if any manual user choice of VS Code exists first. | COMMENT |
| LOW | plugins/drush/drush.complete.sh | 27 | # Set DRUSH_PS1_SHOWCOLORHINTS to a non-empty value and define a | COMMENT |
| LOW | plugins/drush/drush.complete.sh | 40 | # Set IFS to newline (locally), since we only use newline separators, and | COMMENT |
| LOW | plugins/bundler/bundler.plugin.zsh | 60 | # Check if in the root or a subdirectory of a bundled project | COMMENT |
| LOW | plugins/git/git.plugin.zsh | 86 | # Check if a commit without "--wip--" was found and it's not the same as HEAD | COMMENT |
| LOW | plugins/cake/cake.plugin.zsh | 1 | # Set this to 1 if you want to cache the tasks | COMMENT |
| LOW | lib/async_prompt.zsh | 61 | # Close the file descriptor and remove the handler | COMMENT |
| LOW | lib/git.zsh | 194 | # Check if git_prompt_info is used in a prompt variable | COMMENT |
| LOW | lib/cli.zsh | 510 | # Check if its a valid plugin | COMMENT |
| LOW | lib/cli.zsh | 519 | # Check if it has completion to reload compinit | COMMENT |
| LOW | lib/cli.zsh | 566 | # Check if there are PR branches | COMMENT |
| LOW | lib/cli.zsh | 630 | # Check if Pull Request has the "testers needed" label | COMMENT |
| LOW | lib/cli.zsh | 645 | # Check if the label is present with jq or grep | COMMENT |
| LOW | lib/cli.zsh | 889 | # Check if git command is available | COMMENT |
| LOW | lib/cli.zsh | 895 | # Check if --unattended was passed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/gitfast/git-completion.bash | 70 | # The following functions are meant to modify COMPREPLY, which should not be | COMMENT |
| MEDIUM | plugins/gitfast/git-completion.bash | 331 | # This function is equivalent to | COMMENT |
| MEDIUM | plugins/gitfast/git-completion.bash | 3426 | # The following function is based on code from: | COMMENT |
| MEDIUM | …ins/zsh-autosuggestions/zsh-autosuggestions.plugin.zsh | 190 | # Create the bound widget | COMMENT |
| MEDIUM | plugins/zsh-autosuggestions/src/bind.zsh | 58 | # Create the bound widget | COMMENT |
| MEDIUM | plugins/debian/debian.plugin.zsh | 151 | # Create a basic .deb package | COMMENT |
| MEDIUM | plugins/symfony6/symfony6.plugin.zsh | 3 | # This file is part of the Symfony package. | COMMENT |
| MEDIUM | …/history-substring-search/history-substring-search.zsh | 153 | # The following code is based on the zsh-syntax-highlighting plugin. | COMMENT |
| MEDIUM | plugins/python/python.plugin.zsh | 90 | # Create a new virtual environment using the specified name. | COMMENT |
| MEDIUM | plugins/meteor/meteor.plugin.zsh | 10 | alias mc='meteor create' # Create a new project. | CODE |
| MEDIUM | plugins/safe-paste/safe-paste.plugin.zsh | 33 | # Create a new keymap to use while pasting | COMMENT |
| MEDIUM | plugins/emoji/update_emoji.py | 20 | # This file is auto-generated by update_emoji.py. Do not edit it manually. | COMMENT |
| MEDIUM | plugins/emoji/emoji-char-definitions.zsh | 4 | # This file is auto-generated by update_emoji.py. Do not edit it manually. | COMMENT |
| MEDIUM | plugins/z/z.plugin.zsh | 516 | # Create the lockfile 0600-from-birth and silently (umask in a | COMMENT |
| MEDIUM | plugins/emacs/emacsclient.sh | 49 | # Create a tempfile to hold stdin | COMMENT |
| MEDIUM | plugins/extract/extract.plugin.zsh | 76 | # Create an extraction directory based on the file name | COMMENT |
| MEDIUM | …syntax-highlighting/zsh-syntax-highlighting.plugin.zsh | 117 | # This function is supposed to be called whenever the ZLE state changes. | COMMENT |
| MEDIUM | …ax-highlighting/highlighters/main/main-highlighter.zsh | 1448 | # This function is currently never called for the command word, so $2 is hard-coded as 0. | COMMENT |
| MEDIUM | plugins/ubuntu/ubuntu.plugin.zsh | 60 | # Create a basic .deb package | COMMENT |
| MEDIUM | .github/workflows/dependencies/updater.py | 281 | # Create a GitHub issue to notify maintainer | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/gitfast/git-prompt.sh | 362 | # simply return early if the prompt should not | COMMENT |
| LOW | plugins/debian/debian.plugin.zsh | 2 | # You can just set apt_pref='apt-get' to override it. | COMMENT |
| LOW | …/history-substring-search/history-substring-search.zsh | 618 | # returns whether any more matches were available, so just return | COMMENT |
| MEDIUM | plugins/emoji/emoji.plugin.zsh | 23 | # These additional emoji are not in the definition file, but are useful in conjunction with it | COMMENT |
| MEDIUM | plugins/vi-mode/vi-mode.plugin.zsh | 123 | # See zsh-autosuggestions.zsh for a more generic and more robust wrapper | COMMENT |
| MEDIUM | lib/diagnostics.zsh | 52 | # * Consider whether to move default output file location to TMPDIR. More robust | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/debian/debian.plugin.zsh | 172 | # Usage: | COMMENT |
| LOW | plugins/forklift/forklift.plugin.zsh | 7 | # Usage: | COMMENT |
| LOW | plugins/pip/pip.plugin.zsh | 1 | # Usage: | COMMENT |
| LOW | plugins/ubuntu/ubuntu.plugin.zsh | 83 | # Usage: | COMMENT |
| LOW | lib/diagnostics.zsh | 9 | # Usage: | COMMENT |
| LOW | lib/clipboard.zsh | 25 | # Usage: | COMMENT |
| LOW | lib/clipboard.zsh | 35 | # Usage: | COMMENT |
| LOW | lib/functions.zsh | 168 | # Usage: | COMMENT |
| LOW | lib/functions.zsh | 253 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/uninstall.sh | 41 | echo "Don't forget to restart your terminal!" | CODE |
| MEDIUM | plugins/gitfast/git-completion.bash | 28 | # If you use complex aliases of form '!f() { ... }; f', you can use the null | COMMENT |
| MEDIUM | plugins/gitfast/git-completion.bash | 35 | # like completion, you can use __git_complete: | COMMENT |
| LOW | plugins/opentofu/opentofu.plugin.zsh | 18 | # make sure to escape % signs in the workspace name to prevent command injection | COMMENT |
| LOW | plugins/opentofu/opentofu.plugin.zsh | 26 | # make sure to escape % signs in the version string to prevent command injection | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | plugins/gitfast/git-completion.bash | 1383 | # logic, as requested by the user. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/workflows/dependencies/updater.py | 244 | Git.push(branch) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/git-prompt/gitstatus.py | 2 | CODE | |
| LOW | plugins/aliases/termcolor.py | 26 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/emotty/emotty_stellar_set.zsh | 4 | # NOTE: The following emoji show as $'character' in the title | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/dependencies/updater.py | 270 | print(f"Error copying files: {e}", file=sys.stderr) | STRING |
| LOW | .github/workflows/dependencies/updater.py | 294 | except Exception as e: | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/dependencies/updater.py | 147 | def update_dependency_version(path: str, version: str) -> DependencyYAML: | STRING |
| LOW | .github/workflows/dependencies/updater.py | 368 | def checkout_or_create_branch(branch_name: str): | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/dependencies/updater.py | 201 | CODE |