Home / openai / openai-node
AI Slop Code RIsk Monitor

openai/openai-node

Official JavaScript / TypeScript library for the OpenAI API

11.7 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for openai/openai-node, a TypeScript project with 11,214 GitHub stars. SynthScan examined 381,820 lines of code across 1104 source files, recording 870 pattern matches distributed across 11 syntactic categories. The legacy adjusted pattern signal is 11.7 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

11.7
Adjusted Signal
11.7
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
11.2K
Stars
TypeScript
Language
381.8K
Lines of Code
1.1K
Files
870
Pattern Hits
2026-10-12
Scan Date
0.31
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 6.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 513 finding(s).

Hallucinated Dependency & Supply Chain Risk 40.2/100 · MEDIUM

Are imports declared and package/API names verified? 357 finding(s).

Agent Over-Engineering Ratio 5.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 430 finding(s).

PR Review Velocity Impact 40.5/100 · MEDIUM

Which changes need focused human review? 870 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 339HIGH 8MEDIUM 3LOW 520

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 870 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators339 hits · 3902 pts
SeverityFileLineSnippetContext
CRITICAL⚡MIGRATION.md65- `client.beta.threads.runs.steps.retrieve()`CODE
CRITICAL⚡MIGRATION.md66- `client.beta.threads.runs.steps.list()`CODE
CRITICAL⚡MIGRATION.md70- `client.admin.organization.users.roles.retrieve()`CODE
CRITICAL⚡MIGRATION.md71- `client.admin.organization.users.roles.delete()`CODE
CRITICAL⚡MIGRATION.md72- `client.admin.organization.groups.users.retrieve()`CODE
CRITICAL⚡MIGRATION.md73- `client.admin.organization.groups.users.delete()`CODE
CRITICAL⚡MIGRATION.md74- `client.admin.organization.groups.roles.retrieve()`CODE
CRITICAL⚡MIGRATION.md75- `client.admin.organization.groups.roles.delete()`CODE
CRITICAL⚡MIGRATION.md76- `client.admin.organization.projects.users.retrieve()`CODE
CRITICAL⚡MIGRATION.md77- `client.admin.organization.projects.users.update()`CODE
CRITICAL⚡MIGRATION.md78- `client.admin.organization.projects.users.delete()`CODE
CRITICAL⚡MIGRATION.md79- `client.admin.organization.projects.users.roles.create()`CODE
CRITICAL⚡MIGRATION.md80- `client.admin.organization.projects.users.roles.retrieve()`CODE
CRITICAL⚡MIGRATION.md81- `client.admin.organization.projects.users.roles.list()`CODE
CRITICAL⚡MIGRATION.md82- `client.admin.organization.projects.users.roles.delete()`CODE
CRITICAL⚡MIGRATION.md83- `client.admin.organization.projects.serviceAccounts.retrieve()`CODE
CRITICAL⚡MIGRATION.md84- `client.admin.organization.projects.serviceAccounts.update()`CODE
CRITICAL⚡MIGRATION.md85- `client.admin.organization.projects.serviceAccounts.delete()`CODE
CRITICAL⚡MIGRATION.md86- `client.admin.organization.projects.serviceAccounts.apiKeys.create()`CODE
CRITICAL⚡MIGRATION.md87- `client.admin.organization.projects.apiKeys.retrieve()`CODE
CRITICAL⚡MIGRATION.md88- `client.admin.organization.projects.apiKeys.delete()`CODE
CRITICAL⚡MIGRATION.md89- `client.admin.organization.projects.rateLimits.updateRateLimit()`CODE
CRITICAL⚡MIGRATION.md90- `client.admin.organization.projects.groups.retrieve()`CODE
CRITICAL⚡MIGRATION.md91- `client.admin.organization.projects.groups.delete()`CODE
CRITICAL⚡MIGRATION.md92- `client.admin.organization.projects.groups.roles.create()`CODE
CRITICAL⚡MIGRATION.md93- `client.admin.organization.projects.groups.roles.retrieve()`CODE
CRITICAL⚡MIGRATION.md94- `client.admin.organization.projects.groups.roles.list()`CODE
CRITICAL⚡MIGRATION.md95- `client.admin.organization.projects.groups.roles.delete()`CODE
CRITICAL⚡MIGRATION.md96- `client.admin.organization.projects.roles.retrieve()`CODE
CRITICAL⚡MIGRATION.md97- `client.admin.organization.projects.roles.update()`CODE
CRITICAL⚡MIGRATION.md98- `client.admin.organization.projects.roles.delete()`CODE
CRITICAL⚡MIGRATION.md99- `client.admin.organization.projects.spendAlerts.retrieve()`CODE
CRITICAL⚡MIGRATION.md100- `client.admin.organization.projects.spendAlerts.update()`CODE
CRITICAL⚡MIGRATION.md101- `client.admin.organization.projects.spendAlerts.delete()`CODE
CRITICAL⚡MIGRATION.md175- `client.admin.organization.users.roles.list()`CODE
CRITICAL⚡MIGRATION.md177- `client.admin.organization.groups.users.list()`CODE
CRITICAL⚡MIGRATION.md178- `client.admin.organization.groups.roles.list()`CODE
CRITICAL⚡MIGRATION.md184- `client.admin.organization.projects.users.list()`CODE
CRITICAL⚡MIGRATION.md185- `client.admin.organization.projects.serviceAccounts.list()`CODE
CRITICAL⚡MIGRATION.md186- `client.admin.organization.projects.apiKeys.list()`CODE
CRITICAL⚡MIGRATION.md187- `client.admin.organization.projects.rateLimits.listRateLimits()`CODE
CRITICAL⚡MIGRATION.md188- `client.admin.organization.projects.groups.list()`CODE
CRITICAL⚡MIGRATION.md189- `client.admin.organization.projects.roles.list()`CODE
CRITICAL⚡MIGRATION.md190- `client.admin.organization.projects.spendAlerts.list()`CODE
CRITICAL⚡MIGRATION.md191- `client.admin.organization.projects.certificates.list()`CODE
CRITICALtests/lib/root-turn-items-pagination.test.ts45 const result = client.beta.agents.sessions.turns.items.list('turn_test', {CODE
CRITICALtests/lib/environment-files-legacy-options.test.ts20 client.beta.agents.environments.files.list(...args);CODE
CRITICALtests/lib/environment-files-legacy-options.test.ts38 await client.beta.agents.environments.files.list('env_test', query, {CODE
CRITICALtests/lib/agent-files.test.ts166 const prepared = await client.beta.agents.environments.files.prepare(CODE
CRITICALtests/lib/agent-files.test.ts187 client.beta.agents.environments.files.prepare({ [path]: new File(['a'], 'a') }),CODE
CRITICALtests/lib/agent-files.test.ts194 const prepare = client.beta.agents.environments.files.prepare.bind(client.beta.agents.environments.files);CODE
CRITICALtests/lib/agent-files.test.ts207 client.beta.agents.environments.files.prepare(Object.fromEntries(paths.map((path) => [path, file]))),CODE
CRITICALtests/lib/agent-files.test.ts214 const prepared = await client.beta.agents.environments.files.prepare(CODE
CRITICALtests/lib/agent-files.test.ts232 const prepared = await client.beta.agents.environments.files.prepare({ '/workspace/a': stream });CODE
CRITICALtests/lib/agent-files.test.ts244 const prepared = await client.beta.agents.environments.files.prepare(files);CODE
CRITICAL⚡tests/lib/agent-files.test.ts280 await expect(client.beta.agents.environments.files.prepare(files)).rejects.toThrow('Idempotency-Key');CODE
CRITICAL⚡tests/lib/agent-files.test.ts282 await client.beta.agents.environments.files.prepare(files, { headers: { 'Idempotency-Key': null } });CODE
CRITICAL⚡tests/lib/agent-files.test.ts289 const prepared = client.beta.agents.environments.files.prepare(CODE
CRITICALtests/lib/agent-files.test.ts306 await client.beta.agents.environments.files.prepare(CODE
CRITICALtests/lib/agent-files.test.ts336 const result = await client.beta.agents.environments.files.upload(CODE
279 more matches not shown…
Hyper-Verbose Identifiers429 hits · 440 pts
SeverityFileLineSnippetContext
LOWecosystem-tests/cli.ts35async function writeCloudflareCredentialFile(CODE
LOWecosystem-tests/cli.ts51async function readCloudflareCredentialSnapshot(CODE
LOWecosystem-tests/cli.ts82function cloudflareCredentialMatchesIdentity(CODE
LOWecosystem-tests/cli.ts97function unlinkCloudflareCredentialArtifact(candidate: string, identity: CloudflareCredentialIdentity): void {CODE
LOWecosystem-tests/cli.ts104async function withCloudflareCredentials(apiKey: string, runLiveTest: () => Promise<void>): Promise<void> {CODE
LOW…osystem-tests/vercel-edge/src/uploadWebApiTestCases.ts147 async function expectAndDeleteUploadedFile(file: { filename: string; id: string }) {CODE
LOWtests/responsesItems.test.ts12function isInputCompatibleOutputItem(CODE
LOW…ystem-cloudflare-credential-lifecycle-security.test.ts179function holdOriginalCredentialDescriptor(fixture: Fixture): string {CODE
LOW…ystem-cloudflare-credential-lifecycle-security.test.ts210function expectNoCloudflareCredentialArtifacts(fixture: Fixture) {CODE
LOWtests/bedrock-websocket-security.test.ts60function expectPrivateBedrockCredentialFailure(failure: unknown, credential: string): void {CODE
LOWtests/bedrock-websocket-security.test.ts96function createUnauthenticatedClient(): OpenAI {CODE
LOW…ts/auth/azure-imds-rejected-response-lifecycle.test.ts38async function expectPrivateAzureFailure(operation: () => Promise<unknown>, status: number): Promise<void> {CODE
LOW…uth/workload-identity-success-response-privacy.test.ts158function withPrototypeTextOverride(response: Response, readText: () => Promise<string>): Response {CODE
LOWtests/auth/gcp-metadata-token-privacy.test.ts38function createMetadataFailureResponse(failure: MetadataFailure) {CODE
LOWtests/auth/gcp-metadata-token-privacy.test.ts47async function expectPrivateMetadataFailure(CODE
LOWtests/auth/azure-imds-success-response-privacy.test.ts24function createCauseFreeJSONFailure(privateValue: string): Error {CODE
LOWtests/auth/azure-imds-success-response-privacy.test.ts35function createCrossRealmJSONFailure(privateValue: string, wrapped = false): unknown {CODE
LOWtests/auth/azure-imds-success-response-privacy.test.ts65async function expectPrivateParseFailure(CODE
LOW…s/benchmarks/structured-output-and-embeddings.bench.ts241function assertEmbeddingDimensions(value: number[] | undefined): void {CODE
LOWtests/lib/bedrock-provider.test.ts119function trackedBedrockCredentials(baseURL = TRUSTED_BEDROCK_BASE_URL) {CODE
LOWtests/lib/ChatCompletionRunFunctions.test.ts57function mockStreamingChatCompletionFetch() {CODE
LOWtests/lib/assistant-stream-delta-error-privacy.test.ts215async function expectPrivateStreamFailure(CODE
LOWtests/lib/bedrock-provider-bearer-cancellation.test.ts90async function expectImmediateCancellation(CODE
LOWtests/lib/structured-output-parse-privacy.test.ts202function createStreamingToolClient(content: string | readonly string[], tool: ChatCompletionFunctionTool) {CODE
LOWtests/lib/structured-output-parse-privacy.test.ts264function createStreamingContentClient(CODE
LOW…/lib/response-stream-unsupported-event-privacy.test.ts256 const getter = vi.fn(function recordOriginalEventReceiver(this: typeof event) {CODE
LOWtests/lib/bedrock-bearer-credential-privacy.test.ts119async function expectPrivateCredentialFailure(CODE
LOWtests/helpers/standard-schema-security.test.ts11function strictSchemasForAllHelpers(jsonSchema: Record<string, unknown>) {CODE
LOWtests/helpers/standard-schema-security.test.ts35function makePrototypeManipulationSchema(): Record<string, unknown> {CODE
LOWtests/helpers/standard-schema-security.test.ts43function expectPrototypeSafeClosedSchema(schema: Record<string, unknown>) {CODE
LOWtests/helpers/zod.test.ts77function expectDefinitionRefsToResolve(schema: Record<string, unknown>) {CODE
LOWtests/helpers/standard-schema.test.ts86function makeStrictSchemaFactories(jsonSchema: Record<string, unknown>) {CODE
LOWtests/helpers/standard-schema.test.ts105function strictSchemasForAllHelpers(jsonSchema: Record<string, unknown>) {CODE
LOWscripts/mock-server-fetch.ts4export function bufferSteadyMultipartUploads(CODE
LOWscripts/castiron/test_custom_code_github.py60 def test_trusted_report_recomputes_pr_output_in_a_bare_repository(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py163 def test_fork_association_fallback_paginates_candidates(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py181 def test_trusted_report_rejects_invalid_or_stale_association_before_fetch(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py246 def test_queue_membership_uses_synthetic_commit_not_original_pr_ancestry(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py317 def test_merge_queue_rule_is_required_before_passing(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py324 def test_wrong_or_superseded_source_runs_fail_before_fetching(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py338 def test_reuses_only_matching_main_job_report(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py364 def test_queue_cannot_reuse_pr_measurement(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py370 def test_evaluation_error_emits_failure_outputs_and_diagnostic_summary(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py425 def test_queue_context_refuses_stale_checkout_before_fetching(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py432 def test_github_uses_fresh_bare_data_repo_and_checks_current_head(self) -> None:CODE
LOWscripts/castiron/test_custom_code_github.py458 def test_stale_pull_and_wrong_target_fail_before_objects_created(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py19 def test_git_preserves_authentication_without_inherited_repository_routing(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py48 def test_rust_and_python_hashes_match(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py72 def test_reporting_script_can_be_a_mixed_file(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py82 def test_hash_vector_and_exclusions(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py126 def test_report_ignores_handwritten_files_and_shows_custom_patch(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py144 def test_bad_hash_and_lost_checkpoint_fail(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py156 def test_stats_symlink_is_rejected(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py165 def test_public_snapshot_rejects_private_governance_and_unpublished_paths(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py196 def test_zero_new_files_summary_reports_existing_changes(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py211 def test_new_mixed_file_headline_includes_changed_generated_baselines(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py229 def test_removals_include_changed_baselines_but_not_handwritten_only_files(self) -> None:CODE
LOWscripts/castiron/test_custom_code_report.py256 def test_public_snapshot_has_no_private_history_and_reports_without_private_remote(CODE
LOW⚡scripts/castiron/test_custom_code_budget.py32 def test_additions_and_deletions_do_not_cancel(self) -> None:CODE
LOW⚡scripts/castiron/test_custom_code_budget.py38 def test_below_equal_and_above_limit(self) -> None:CODE
369 more matches not shown…
Over-Commented Block65 hits · 51 pts
SeverityFileLineSnippetContext
LOWecosystem-tests/cloudflare-worker/tsconfig.json21 // "jsxFragmentFactory": "", /* Specify the JSX Fragment reference used for fragments when tarCOMMENT
LOWecosystem-tests/cloudflare-worker/tsconfig.json41 "allowJs": true /* Allow JavaScript files to be a part of your program. Use the `checkJS` option to get errors from thCOMMENT
LOWecosystem-tests/cloudflare-worker/tsconfig.json61 // "emitBOM": true, /* Emit a UTF-8 Byte Order Mark (BOM) in the beginning of output COMMENT
LOWecosystem-tests/cloudflare-worker/tsconfig.json81 // "strictFunctionTypes": true, /* When assigning functions, check to ensure parameters and the rCOMMENT
LOWecosystem-tests/cloudflare-worker/wrangler.toml1name = "cfw"COMMENT
LOWecosystem-tests/cloudflare-worker/wrangler.toml21# binding = "MY_BUCKET"COMMENT
LOWtests/qs/utils.test.ts21 const oneMerged = merge({ foo: 'bar' }, { foo: { first: '123' } });COMMENT
LOWtests/qs/stringify.test.ts61 stringify({ 'name.obj': { first: 'John', last: 'Doe' } }, { allowDots: true, encodeDotInKeys: false }),COMMENT
LOWtests/qs/stringify.test.ts81 // { allowDots: true, encodeDotInKeys: false },COMMENT
LOWtests/qs/stringify.test.ts141 ),COMMENT
LOWtests/qs/stringify.test.ts181 });COMMENT
LOWtests/qs/stringify.test.ts261 // st.equal(stringify({ a: { b: 'c' } }, { allowDots: true }), 'a.b=c');COMMENT
LOWtests/qs/stringify.test.ts281 // 'comma => comma',COMMENT
LOWtests/qs/stringify.test.ts341 test('should throw when allowEmptyArrays is not of type boolean', () => {COMMENT
LOWtests/qs/stringify.test.ts401 });COMMENT
LOWtests/qs/stringify.test.ts441 // );COMMENT
LOWtests/qs/stringify.test.ts541COMMENT
LOWtests/qs/stringify.test.ts581 ).toBe('a=%2C&a=&a=c%2Cd%25');COMMENT
LOWtests/qs/stringify.test.ts621 stringify({ a: [',', '', 'c,d%'] }, { encode: true, encodeValuesOnly: false, arrayFormat: 'comma' }),COMMENT
LOWtests/qs/stringify.test.ts641 // st.equal(COMMENT
LOWtests/qs/stringify.test.ts661 // { a: ',', b: '', c: 'c,d%' },COMMENT
LOWtests/qs/stringify.test.ts701COMMENT
LOWtests/qs/stringify.test.ts761 // ),COMMENT
LOWtests/qs/stringify.test.ts801 expect(stringify({ a: { b: ['c', 'd'] } }, { allowDots: true, encodeValuesOnly: true })).toBe(COMMENT
LOWtests/qs/stringify.test.ts821 // );COMMENT
LOWtests/qs/stringify.test.ts841 // st.equal(COMMENT
LOWtests/qs/stringify.test.ts861 );COMMENT
LOWtests/qs/stringify.test.ts881 // '???',COMMENT
LOWtests/qs/stringify.test.ts901 });COMMENT
LOWtests/qs/stringify.test.ts921 // );COMMENT
LOWtests/qs/stringify.test.ts1021 // );COMMENT
LOWtests/qs/stringify.test.ts1061 // st.equal(COMMENT
LOWtests/qs/stringify.test.ts1121 // with skipNullsCOMMENT
LOWtests/qs/stringify.test.ts1261COMMENT
LOWtests/qs/stringify.test.ts1281 // },COMMENT
LOWtests/qs/stringify.test.ts1321 };COMMENT
LOWtests/qs/stringify.test.ts1361 'filters[$and][function]=gte&filters[$and][arguments][function]=hour_of_day&filters[$and][arguments]=0&filters[$anCOMMENT
LOWtests/qs/stringify.test.ts1381 // { a: { b: [1, 2, 3, 4], c: 'd' }, c: 'f' },COMMENT
LOWtests/qs/stringify.test.ts1461 });COMMENT
LOWtests/qs/stringify.test.ts1501 // encoder: function (str) {COMMENT
LOWtests/qs/stringify.test.ts1581 // st['throws'](function () {COMMENT
LOWtests/qs/stringify.test.ts1661 }).toThrow(SyntaxError);COMMENT
LOWtests/qs/stringify.test.ts1701 // return d.getTime();COMMENT
LOWtests/qs/stringify.test.ts1801 // ),COMMENT
LOWtests/qs/stringify.test.ts1841 // stringify({ a: 'b', c: ['d', 'e'], f: [['g'], ['h']] }, { arrayFormat: 'indices' }),COMMENT
LOWtests/qs/stringify.test.ts1961 expect(stringify({ KeY: 'vAlUe' }, { encoder })).toBe('key=VALUE');COMMENT
LOWtests/qs/stringify.test.ts1981 // 'no array, indices',COMMENT
LOWtests/qs/stringify.test.ts2001 // 'a[b][0][c]=d&a[b][0][e]=f',COMMENT
LOWtests/qs/stringify.test.ts2021 // '???',COMMENT
LOWtests/qs/stringify.test.ts2061 // { encodeValuesOnly: true, arrayFormat: 'indices' },COMMENT
LOWtests/qs/stringify.test.ts2081 ).toBe('a[1][b][2][c]=1');COMMENT
LOWtests/qs/stringify.test.ts2121 // stringify(COMMENT
LOWtests/qs/stringify.test.ts2181 // );COMMENT
LOWtests/qs/stringify.test.ts2201 });COMMENT
LOWexamples/chat-completions/stream-to-client-next.ts1import OpenAI from 'openai';COMMENT
LOWexamples/chat-completions/stream-to-client-express.ts1#!/usr/bin/env -S npm run tsn -- -TCOMMENT
LOWexamples/chat-completions/stream-to-client-express.ts81COMMENT
LOWexamples/chat-completions/stream-to-client-raw.ts1#!/usr/bin/env -S npm run tsn -- -TCOMMENT
LOWexamples/chat-completions/stream-to-client-raw.ts81app.use(express.text());COMMENT
LOWexamples/chat-completions/tool-calls-stream.ts1#!/usr/bin/env -S npm run tsn -- -TCOMMENT
5 more matches not shown…
Synthetic Comment Markers5 hits · 38 pts
SeverityFileLineSnippetContext
HIGHsrc/resources/content-provenance-checks.ts22 * uploaded file. The content could still have been generated by OpenAI if theCOMMENT
HIGHsrc/resources/content-provenance-checks.ts80 * file. The content could still have been generated by OpenAI if the metadata wasCOMMENT
HIGHsrc/resources/content-provenance-checks.ts114 * could still have been generated by OpenAI if the metadata was stripped or hasCOMMENT
HIGHsrc/resources/fine-tuning/jobs/jobs.ts740 * through directly to WandB. Some default tags are generated by OpenAI:COMMENT
HIGHsrc/resources/fine-tuning/jobs/jobs.ts924 * through directly to WandB. Some default tags are generated by OpenAI:COMMENT
Cross-Language Confusion3 hits · 10 pts
SeverityFileLineSnippetContext
HIGHscripts/castiron/custom_code_report.py6Hash v1: SHA256(domain || u64(entry count) || entries), where each entry isSTRING
HIGHscripts/castiron/custom_code_report.py7u64(path length) || path bytes || six ASCII Git mode bytes || u64(blob length)STRING
HIGHscripts/castiron/test_custom_code_budget.py138 '{"schema_version":1,"max_custom_patch_lines":null}',CODE
Modern AI Meta-Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMsrc/lib/ChatCompletionStream.ts1026 // SAFETY: The fallback is a serialization scaffold: the code below installs the captured wire fields before the tool COMMENT
MEDIUMsrc/lib/responses/responses-websocket-accumulator.ts153 // the selected entry. The caller-supplied wire scaffold may not be an array.COMMENT
MEDIUMsrc/lib/responses/responses-websocket-accumulator.ts228 // oxlint-disable-next-line anti-slop/no-runtime-typeof -- The server identity on an MCP scaffold is raw data,COMMENT
Fake / Example Data8 hits · 8 pts
SeverityFileLineSnippetContext
LOWtests/lib/parser.test.ts93 "content": "{"type":"form","label":"User Profile Form","children":[{"type":"field","label":"First Name","childCODE
LOWtests/lib/parser.test.ts108 "name": "placeholder",CODE
LOWtests/lib/parser.test.ts127 "name": "placeholder",CODE
LOWtests/lib/parser.test.ts146 "name": "placeholder",CODE
LOWtests/lib/parser.test.ts630 "content": "{"person1":{"name":"Jane Doe","phone_number":".","roles":["other"],"description":"Engineer at OpenCODE
LOWtests/lib/parser.test.ts634 "name": "Jane Doe",CODE
LOWtests/lib/response-accumulator-item-identity.test.ts406 const replacement = makeOutput('message', 'placeholder');CODE
LOWtests/lib/response-accumulator-item-identity.test.ts557 const changing = makeOutput('reasoning', 'placeholder');CODE
Unused Imports7 hits · 7 pts
SeverityFileLineSnippetContext
LOWscripts/castiron/custom_code_budget.py9CODE
LOWscripts/castiron/test_custom_code_github.py4CODE
LOWscripts/castiron/test_custom_code_report.py2CODE
LOWscripts/castiron/custom_code_report.py12CODE
LOWscripts/castiron/custom_code_test_support.py4CODE
LOWscripts/castiron/test_custom_code_budget.py3CODE
LOWscripts/castiron/test_custom_code_publication.py4CODE
Deep Nesting7 hits · 6 pts
SeverityFileLineSnippetContext
LOWscripts/castiron/test_custom_code_github.py60CODE
LOWscripts/castiron/test_custom_code_github.py181CODE
LOWscripts/castiron/test_custom_code_github.py338CODE
LOWscripts/castiron/custom_code_report.py598CODE
LOWscripts/castiron/custom_code_report.py950CODE
LOWscripts/castiron/test_custom_code_budget.py111CODE
LOWscripts/castiron/test_custom_code_publication.py44CODE
Overly Generic Function Names3 hits · 3 pts
SeverityFileLineSnippetContext
LOWtests/utils/mock-fetch.ts53 function handleRequest(handle: typeof fetch): Promise<void> {CODE
LOWtests/lib/ChatCompletionRunFunctions.test.ts34 function handleRequest(CODE
LOWtests/lib/ChatCompletionRunFunctions.test.ts60 function handleRequest(CODE
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWscripts/castiron/test_custom_code_publication.py313CODE