Home / owncloud / core
AI Slop Code RIsk Monitor

owncloud/core

:cloud: ownCloud web server core (Files, DAV, etc.)

5.7 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for owncloud/core, a PHP project with 8,833 GitHub stars. SynthScan examined 807,104 lines of code across 6012 source files, recording 4686 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 5.7 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

5.7
Adjusted Signal
5.7
Raw Pattern Score
100%
Time Factor
2026-10-06
Last Push
8.8K
Stars
PHP
Language
807.1K
Lines of Code
6.0K
Files
4.7K
Pattern Hits
2026-10-12
Scan Date
0.01
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 21.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 4470 finding(s).

Hallucinated Dependency & Supply Chain Risk 3.6/100 · LOW

Are imports declared and package/API names verified? 214 finding(s).

Agent Over-Engineering Ratio 21.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 4390 finding(s).

PR Review Velocity Impact 26.7/100 · MEDIUM

Which changes need focused human review? 4686 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 35HIGH 0MEDIUM 2LOW 4649

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4686 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers4388 hits · 3884 pts
SeverityFileLineSnippetContext
LOWsettings/Panels/Helper.php37 public function shareWithGroupMembersOnly() {CODE
LOWsettings/Controller/GroupsController.php169 public function getAssignableAndRemovableGroups() {CODE
LOWsettings/Controller/UsersController.php1334 private function buildUnprocessableEntityResponse(string $message): DataResponse {CODE
LOWsettings/Controller/CertificateController.php78 public function addPersonalRootCertificate() {CODE
LOWsettings/Controller/CertificateController.php134 public function removePersonalRootCertificate($certificateIdentifier) {CODE
LOWsettings/Controller/CertificateController.php148 protected function isCertificateImportAllowed() {CODE
LOWsettings/Controller/CertificateController.php175 public function removeSystemRootCertificate($certificateIdentifier) {CODE
LOWsettings/Controller/AuthSettingsController.php151 private function getServiceNotAvailableResponse() {CODE
LOWsettings/Controller/AuthSettingsController.php164 private function generateRandomDeviceToken() {CODE
LOWsettings/Controller/CheckSetupController.php80 private function isInternetConnectionWorking(): bool {CODE
LOWsettings/Controller/CheckSetupController.php198 private function forwardedForHeadersWorking(): bool {CODE
LOWsettings/Controller/CheckSetupController.php214 private function isCorrectMemcachedPHPModuleInstalled(): bool {CODE
LOWsettings/Controller/CheckSetupController.php228 public function rescanFailedIntegrityCheck(): RedirectResponse {CODE
LOWsettings/Controller/CheckSetupController.php238 public function getFailedIntegrityCheckFiles(): DataDisplayResponse {CODE
LOWcore/js/oc-backbone-webdav.js138 function convertModelAttributesToDavProperties(attrs, davProperties) {CODE
LOWcore/js/tests/specs/shareitemmodelSpec.js670 function createRegisteredAttribute() {CODE
LOWcore/js/tests/specs/shareitemmodelSpec.js692 function parseLastRequestPermissions(){CODE
LOWcore/js/tests/specs/shareitemmodelSpec.js703 function parseLastRequestAttributes() {CODE
LOWcore/js/tests/specs/shareitemmodelSpec.js716 function testAddShareWithAttributes(permissionsToSet, attributesV1ToRegister, sharePropertiesToAdd) {CODE
LOWcore/js/tests/specs/shareitemmodelSpec.js740 function testUpdateShareWithAttributes(permissionsToSet, attributesV1ToRegister, sharePropertiesToUpdate) {CODE
LOWcore/js/tests/specs/files/clientSpec.js614 function getFileInfoWithPermission(webdavPerm, isFile) {CODE
LOWcore/Command/Encryption/EncryptAll.php76 protected function forceSingleUserAndTrashbin() {CODE
LOWcore/Command/Encryption/EncryptAll.php86 protected function resetSingleUserAndTrashbin() {CODE
LOWcore/Command/Encryption/DecryptAll.php87 protected function forceSingleUserAndTrashbin() {CODE
LOWcore/Command/Encryption/DecryptAll.php97 protected function resetSingleUserAndTrashbin() {CODE
LOWcore/Command/Maintenance/Mimetype/UpdateJS.php172 private function generateMimeTypeListContent($aliases, $files, $themes) {CODE
LOWtests/Settings/Middleware/SubadminMiddlewareTest.php47 public function testBeforeControllerAsUserWithExemption() {CODE
LOW⚡tests/Settings/Middleware/SubadminMiddlewareTest.php58 public function testBeforeControllerAsUserWithoutExemption() {CODE
LOW⚡tests/Settings/Middleware/SubadminMiddlewareTest.php67 public function testBeforeControllerAsSubAdminWithoutExemption() {CODE
LOW⚡tests/Settings/Middleware/SubadminMiddlewareTest.php76 public function testBeforeControllerAsSubAdminWithExemption() {CODE
LOW⚡tests/Settings/Middleware/SubadminMiddlewareTest.php85 public function testAfterNotAdminException() {CODE
LOW⚡tests/Settings/Middleware/SubadminMiddlewareTest.php93 public function testAfterRegularException() {CODE
LOWtests/Settings/Panels/Admin/LoggingTest.php49 public function testGetPanelWithNoLogFile() {CODE
LOW…sts/Settings/Controller/AuthSettingsControllerTest.php145 public function testCreateSessionNotAvailable() {CODE
LOWtests/Settings/Controller/GroupsControllerTest.php246 public function testCreateWithExistingGroup() {CODE
LOWtests/Settings/Controller/GroupsControllerTest.php369 public function testGetAssignableAndRemovableGroups() {CODE
LOWtests/Settings/Controller/GroupsControllerTest.php495 public function testGetAssignableAndRemovableGroupsBackendNoActions() {CODE
LOWtests/Settings/Controller/GroupsControllerTest.php544 public function testGetAssignableAndRemovableGroupsSubadmin() {CODE
LOWtests/Settings/Controller/CorsControllerTest.php159 public function testAddInvalidDomainWithPaths() {CODE
LOWtests/Settings/Controller/CorsControllerTest.php183 public function testAddInvalidDomainWithQueryParams() {CODE
LOWtests/Settings/Controller/AppConfigControllerTest.php181 public function testGetValueAllowedOnCoreForNonServiceKey(): void {CODE
LOWtests/Settings/Controller/AppConfigControllerTest.php196 public function testSetValueAllowedNearMisses(): void {CODE
LOWtests/Settings/Controller/AppConfigControllerTest.php234 public function testDeleteKeyAllowedOnCoreForNonServiceKey(): void {CODE
LOWtests/Settings/Controller/AppConfigControllerTest.php251 public function testDeleteKeyAllowedForNonCanonicalAppId(): void {CODE
LOWtests/Settings/Controller/AppConfigControllerTest.php267 public function testDeleteKeyAllowedForHandlerLookingKeyOnAnotherApp(): void {CODE
LOWtests/Settings/Controller/AppConfigControllerTest.php384 public function testGetValueRequiresAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php909 public function testIndexWithBackendNoUser(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php927 public function testCreateSuccessfulWithoutGroupAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php986 public function testCreateSuccessfulWithoutGroupSubAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1087 public function testCreateSuccessfulWithGroupAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1183 public function testCreateSuccessfulWithGroupSubAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1287 public function testCreateUnsuccessfulAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1304 public function testCreateUnsuccessfulSubAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1493 public function testDestroyUnsuccessfulAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1529 public function testDestroyUnsuccessfulSubAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1579 public function testDestroyNotAccessibleToSubAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1629 public function testCreateUnsuccessfulWithInvalidEmailAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1645 public function testCreateSuccessfulWithValidEmailAdmin(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1788 public function testRestorePossibleWithoutEncryption(): void {CODE
LOWtests/Settings/Controller/UsersControllerTest.php1810 public function testRestorePossibleWithAdminAndUserRestore(): void {CODE
4328 more matches not shown…
Hallucination Indicators35 hits · 365 pts
SeverityFileLineSnippetContext
CRITICAL⚡core/js/sharedialogview.js210 var users = result.ocs.data.exact.users.concat(result.ocs.data.users);CODE
CRITICAL⚡core/js/sharedialogview.js211 var groups = result.ocs.data.exact.groups.concat(result.ocs.data.groups);CODE
CRITICAL⚡core/js/sharedialogview.js212 var remotes = result.ocs.data.exact.remotes.concat(result.ocs.data.remotes);CODE
CRITICALcore/js/systemtags/systemtagscollection.js43 return OC.Backbone.Collection.prototype.reset.apply(this, arguments);CODE
CRITICALcore/js/systemtags/systemtagscollection.js77 return OC.Backbone.Collection.prototype.fetch.call(this, options);CODE
CRITICALapps/comments/js/commentstabview.js81 OCA.Files.DetailTabView.prototype.initialize.apply(this, arguments);CODE
CRITICALapps/comments/js/commentcollection.js88 return OC.Backbone.Collection.prototype.reset.apply(this, arguments);CODE
CRITICALapps/files_trashbin/js/filelist.js50 var result = OCA.Files.FileList.prototype.initialize.apply(this, arguments);CODE
CRITICALapps/files_trashbin/js/filelist.js60 var parts = OCA.Files.BreadCrumb.prototype._makeCrumbs.apply(this, arguments);CODE
CRITICALapps/files_trashbin/js/filelist.js79 OCA.Files.FileList.prototype._setCurrentDir.apply(this, arguments);CODE
CRITICALapps/files_trashbin/js/filelist.js89 var tr = OCA.Files.FileList.prototype._createRow.apply(this, arguments);CODE
CRITICALapps/files_trashbin/js/filelist.js108 return OCA.Files.FileList.prototype._renderRow.call(this, fileData, options);CODE
CRITICALapps/files_trashbin/js/filelist.js179 OCA.Files.FileList.prototype._onClickSelectAll.call(this, e, trashbinFiles);CODE
CRITICALapps/files_external/js/statusmanager.js579 OCA.Files.App.fileList.fileActions.display(link.parent(), true, OCA.Files.App.fileList);CODE
CRITICALapps/files_external/js/mountsfilelist.js37 OCA.Files.FileList.prototype.initialize.apply(this, arguments);CODE
CRITICALapps/files_external/js/mountsfilelist.js48 var $tr = OCA.Files.FileList.prototype._createRow.apply(this, arguments);CODE
CRITICALapps/files_external/js/mountsfilelist.js71 OCA.Files.FileList.prototype.updateEmptyContent.apply(this, arguments);CODE
CRITICALapps/systemtags/js/systemtagsfilelist.js48 OCA.Files.FileList.prototype.initialize.apply(this, arguments);CODE
CRITICALapps/systemtags/js/systemtagsfilelist.js67 OCA.Files.FileList.prototype.destroy.apply(this, arguments);CODE
CRITICALapps/systemtags/js/systemtagsfilelist.js187 OCA.Files.FileList.prototype.updateEmptyContent.apply(this, arguments);CODE
CRITICALapps/systemtags/js/systemtagsfilelist.js238 return OCA.Files.FileList.prototype.reloadCallback.call(this, status, result);CODE
CRITICALapps/systemtags/js/systemtagstabview.js53 OCA.Files.DetailTabView.prototype.initialize.apply(this, arguments);CODE
CRITICALapps/files/js/fileactions.js852 OCA.Files.FileActions.prototype.register.call(CODE
CRITICALapps/files/js/fileactions.js859 OCA.Files.FileActions.prototype.display.call(window.FileActions, parent, triggerEvent, fileList);CODE
CRITICALapps/files/js/favoritesfilelist.js40 OCA.Files.FileList.prototype.initialize.apply(this, arguments);CODE
CRITICALapps/files/js/favoritesfilelist.js55 OCA.Files.FileList.prototype.updateEmptyContent.apply(this, arguments);CODE
CRITICALapps/files/js/favoritesfilelist.js106 return OCA.Files.FileList.prototype.reloadCallback.call(this, status, result);CODE
CRITICALapps/files_versions/js/versionstabview.js109 OCA.Files.DetailTabView.prototype.initialize.apply(this, arguments);CODE
CRITICALapps/files_sharing/js/public.js238 OCA.Files.FileList.prototype.updateEmptyContent.apply(this, arguments);CODE
CRITICALapps/files_sharing/js/sharedfilelist.js49 OCA.Files.FileList.prototype.initialize.apply(this, arguments);CODE
CRITICALapps/files_sharing/js/sharedfilelist.js77 return OCA.Files.FileList.prototype._renderRow.apply(this, arguments);CODE
CRITICALapps/files_sharing/js/sharedfilelist.js82 var $tr = OCA.Files.FileList.prototype._createRow.apply(this, arguments);CODE
CRITICALapps/files_sharing/js/sharedfilelist.js191 return OCA.Files.FileList.prototype._updateDetailsView.call(this, fileName, show);CODE
CRITICALapps/files_sharing/js/sharedfilelist.js211 OCA.Files.FileList.prototype.updateEmptyContent.apply(this, arguments);CODE
CRITICALapps/files_sharing/js/sharedfilelist.js309 var fileInfo = OCA.Files.FileList.prototype.elementToFile.apply(this, arguments);CODE
Fake / Example Data179 hits · 221 pts
SeverityFileLineSnippetContext
LOWsettings/js/panels/profile.js172 && !(isIE8or9 && $('#pass2').val() === $('#pass2').attr('placeholder'))) {CODE
LOWsettings/js/users/users.js53 * 'email': 'username@example.org'COMMENT
LOWsettings/js/users/filter.js58 if (isIE8or9 && input == this.filterInput.attr('placeholder')) {CODE
LOWcore/js/sharedialoglinkshareview.js354 .attr('placeholder', PASSWORD_PLACEHOLDER_MESSAGE);CODE
LOWcore/js/jquery-showpassword.js42 if($element.attr('placeholder') !== undefined) {CODE
LOWcore/js/jquery-showpassword.js43 $clone.attr('placeholder', $element.attr('placeholder'));CODE
LOWcore/js/tests/specs/sharedialogviewSpec.js815 shareWithAdditionalInfo: 'user@example.com'CODE
LOWcore/js/tests/specs/sharedialoglinkshareviewSpec.js275 expect(view.$('.linkPassText').attr('placeholder')).toEqual(PASSWORD_PLACEHOLDER_MESSAGE);CODE
LOWcore/js/tests/specs/sharedialoglinkshareviewSpec.js281 expect(view.$('.linkPassText').attr('placeholder')).toEqual(PASSWORD_PLACEHOLDER_STARS);CODE
LOWcore/js/tests/specs/sharedialogmailviewSpec.js53 email: 'someuser@example.org'CODE
LOWcore/js/tests/specs/sharedialogmailviewSpec.js176 recipients: ["glados@aperture.com","someuser@example.org"],CODE
LOWtests/Settings/Controller/UsersControllerTest.php143 ->willReturn('foo@bar.com');CODE
LOWtests/Settings/Controller/UsersControllerTest.php303 'email' => 'foo@bar.com',CODE
LOWtests/Settings/Controller/UsersControllerTest.php383 ->willReturn('foo@bar.com');CODE
LOWtests/Settings/Controller/UsersControllerTest.php573 'email' => 'foo@bar.com',CODE
LOWtests/Settings/Controller/UsersControllerTest.php627 ->willReturn('foo@bar.com');CODE
LOWtests/Settings/Controller/UsersControllerTest.php766 'email' => 'foo@bar.com',CODE
LOWtests/Settings/Controller/UsersControllerTest.php3185 ->willReturn('foo@bar.com');CODE
LOWtests/Settings/Controller/UsersControllerTest.php3241 ->willReturn('foo@bar.com');CODE
LOWtests/Settings/Controller/UsersControllerTest.php3325 ->willReturn('foo@bar.com');CODE
LOWtests/Settings/Controller/UsersControllerTest.php3579 ->willReturn('foo@bar.com');CODE
LOWtests/Settings/Controller/UsersControllerTest.php3627 $this->assertNotEquals('foo@bar.com', $fromMailAddress);CODE
LOWtests/Settings/Controller/UsersControllerTest.php3691 ->willReturn('foo@bar.com');CODE
LOWtests/Settings/Controller/UsersControllerTest.php3826 $secondCreateResult = $this->container['UsersController']->create('foo', null, [], 'foo@bar.com');CODE
LOWtests/Core/Command/User/ModifyTest.php139 ['foo', 'email', 'foo@bar.com'],CODE
LOWtests/Core/Command/User/AddTest.php81 [['uid' => 'user2', '--display-name' => 'John Doe'], ['p@ssw0rd', 'p@ssw0rd'], 'Display name set to '],CODE
LOWtests/Core/Command/User/ResetPasswordTest.php157 ->willReturn('foo@bar.com');CODE
LOW⚡tests/acceptance/usernames.json5 "email": "aliice-email@example.org",CODE
LOW⚡tests/acceptance/usernames.json11 "email": "briaan-email@example.org",CODE
LOW⚡tests/acceptance/usernames.json17 "email": "carol-email@example.org",CODE
LOW⚡tests/acceptance/usernames.json23 "email": "david-email@example.org",CODE
LOW⚡tests/acceptance/features/bootstrap/FeatureContext.php2220 return 'regularuser@example.org';CODE
LOW⚡tests/acceptance/features/bootstrap/FeatureContext.php2222 return 'alice@example.org';CODE
LOW⚡tests/acceptance/features/bootstrap/FeatureContext.php2224 return 'brian@example.org';CODE
LOW⚡tests/acceptance/features/bootstrap/FeatureContext.php2226 return 'carol@example.org';CODE
LOW⚡tests/acceptance/features/bootstrap/FeatureContext.php2228 return 'david@example.org';CODE
LOW⚡tests/acceptance/features/bootstrap/FeatureContext.php2230 return 'emily@example.org';CODE
LOW⚡tests/acceptance/features/bootstrap/FeatureContext.php2232 return 'usergrp@example.org';CODE
LOW⚡tests/acceptance/features/bootstrap/FeatureContext.php2234 return 'sharee1@example.org';CODE
LOW…e/filesForUpload/strängé filename (duplicate #2 &).txt7qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW…e/filesForUpload/strängé filename (duplicate #2 &).txt7qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW…ce/filesForUpload/zzzz-must-be-last-file-in-folder.txt9qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW…ce/filesForUpload/zzzz-must-be-last-file-in-folder.txt9qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt7qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt7qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt14qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt14qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt21qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt21qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt28qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt28qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt35qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt35qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt42qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt42qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt49qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt49qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt56qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt56qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
LOW⚡tests/acceptance/filesForUpload/new-lorem-big.txt63qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit, sed quia non numquam eius modi temporaCODE
119 more matches not shown…
Over-Commented Block46 hits · 46 pts
SeverityFileLineSnippetContext
LOWsettings/Controller/AppConfigController.php141 */COMMENT
LOWcore/Controller/LoginController.php121 */COMMENT
LOWcore/ajax/appconfig.php41}COMMENT
LOWcore/ajax/appconfig.php61// This change is due the fact that an admin may not be expectedCOMMENT
LOW.phan/config.php41 'apps/updatenotification/appinfo/routes.php',COMMENT
LOW.phan/config.php61COMMENT
LOW.phan/config.php81 // Backwards Compatibility Checking. This is slowCOMMENT
LOWconfig/config.apps.sample.php521 // documentation about standard claims:COMMENT
LOWtests/karma.config.js301 // Start these browsers, currently available:COMMENT
LOWtests/TestHelpers/WebDavHelper.php501 // We expect to have a string with 2 parts separated by the exclamation mark.COMMENT
LOWtests/acceptance/run.sh41 COLORS_OPTION="--colors"COMMENT
LOWtests/acceptance/run.sh101# test type is deduced from the suite name, and this environment variableCOMMENT
LOWtests/acceptance/run.sh381 remote_occ ${ADMIN_AUTH} ${OCC_URL} "config:app:set testing enable_alt_user_backend --value yes"COMMENT
LOWtests/acceptance/run.sh441 SCENARIOS_THAT_PASSED=$((SCENARIOS_THAT_PASSED + BASH_REMATCH[1]))COMMENT
LOWtests/acceptance/run.sh621 # If something else went wrong, and there were no failed scenarios,COMMENT
LOWtests/lib/Encryption/ManagerTest.php181 $this->assertTrue($this->manager->setDefaultEncryptionModule('ID1'));COMMENT
LOWtests/lib/Encryption/ManagerTest.php201 // $m->registerEncryptionModule($em);COMMENT
LOWtests/lib/Encryption/ManagerTest.php221 // * @expectedExceptionMessage Module with id: unknown does not exist.COMMENT
LOWtests/lib/AppFramework/Routing/RoutingTest.php221}COMMENT
LOWtests/lib/Preview/CoderPinningTest.php201 # Reuses the in-tree OpenSans rather than adding a font fixture of its own. NoCOMMENT
LOWtests/lib/Preview/CoderPinningTest.php261 $this->requirePortraitPostScriptRender(self::FOREIGN_POSTSCRIPT);COMMENT
LOWtests/lib/Command/CommandJobTest.php81 $serialized = \serialize(new DummyICommand());COMMENT
LOWtests/litmus/run.sh1#!/usr/bin/env bashCOMMENT
LOW…/data/integritycheck/verifier/gen_g1_legacy_fixture.sh1#!/bin/bashCOMMENT
LOWtests/data/integritycheck/verifier/gen_g1_signature.sh81COMMENT
LOW.github/lock.yml21COMMENT
LOWlib/private/PreviewCleanup.php121COMMENT
LOWlib/private/Files/Type/Detection.php281 // escapes callers that guard against a failed detection: it would turn aCOMMENT
LOWlib/private/Preview/Font.php41 # This is the only provider whose coder depends on $mimeType, so it is also theCOMMENT
LOWlib/private/IntegrityCheck/Verifier/AppIdResolver.php61 if ($xmlContent === false || $xmlContent === '') {COMMENT
LOWlib/private/IntegrityCheck/Verifier/ChainValidator.php61 // chain to more than one generation would get a filesystem-dependentCOMMENT
LOWlib/private/IntegrityCheck/Verifier/ChainValidator.php121 // enforcement, since G1 and G2 leaves are held to different constraint rules).COMMENT
LOWapps/files/js/jquery.fileupload.js81 // In addition to the default jQuery Widget methods, the fileupload widgetCOMMENT
LOWapps/files/js/jquery.fileupload.js101 // By default, the file input field is replaced with a clone afterCOMMENT
LOWapps/files/js/jquery.fileupload.js121 limitMultiFileUploadSize: undefined,COMMENT
LOWapps/files/js/jquery.fileupload.js141 // to enable postMessage transport uploads:COMMENT
LOWapps/files/js/jquery.fileupload.js161 recalculateProgress: true,COMMENT
LOWapps/files/js/jquery.fileupload.js201 return form.serializeArray();COMMENT
LOWapps/files/js/jquery.fileupload.js241 // done: function (e, data) {}, // .bind('fileuploaddone', func);COMMENT
LOWapps/files/js/jquery.fileupload.js261 // Callback for change events of the fileInput(s):COMMENT
LOWapps/files/js/file-upload.js1061 add: function(e, data) {COMMENT
LOWapps/files/lib/Command/TransferOwnership.php341 }COMMENT
LOWapps/dav/tests/unit/Files/FileLocksBackendTest.php221 // "public" is locked and is a parent of the link share pathCOMMENT
LOWapps/dav/lib/CardDAV/SyncService.php81COMMENT
LOWapps/dav/lib/Files/PublicFiles/PublicFilesPlugin.php161 // And we want the path of 'meme.jpg' we expect the resourceCOMMENT
LOWapps/files_sharing/js/PublicUploadView.js81 // We can skip this "file" by setting a target folder outside the share.COMMENT
Verbosity Indicators20 hits · 38 pts
SeverityFileLineSnippetContext
LOWlib/private/Preview.php714 // share owner, but not its sharees. Therefore we need to check if theCOMMENT
LOWlib/private/RedisFactory.php163 * We need to check if the current version supports extra connection parameters, otherwise the connect method will throCOMMENT
LOWlib/private/Lock/DBLockingProvider.php250 // since we only keep one shared lock in the db we need to check if we have more then one shared lock locally manuallCOMMENT
LOWlib/private/legacy/helper.php270 // We need to check if the program is in one of these dirs :COMMENT
LOWlib/private/Repair/RepairMismatchFileCachePath.php544 * The purpose of this function is to let execute the run methodCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php101 // Step 1: Load signature fileCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php107 // Step 2: Parse envelope (detects v2 vs legacy)COMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php110 // Step 3: Validate X.509 chainCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php113 // Step 4: Determine algorithm and verify it's permittedCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php123 // Step 5: Determine signed bytes and verify signatureCOMMENT
LOWlib/private/IntegrityCheck/Verifier/Verifier.php141 // Step 6: Check leaf validity and revocationCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php184 // Step 7: Validate identity (app ID or core)COMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php192 // Step 8: Integrity diffCOMMENT
LOWlib/private/IntegrityCheck/Verifier/ChainValidator.php52 // Step 1: Get trusted rootsCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/ChainValidator.php77 // Step 2: Collect candidate intermediates (envelope + bundled)COMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/ChainValidator.php80 // Step 3: Verify each candidate intermediate chains to a trusted rootCOMMENT
LOWlib/private/IntegrityCheck/Verifier/ChainValidator.php98 // Step 4: Build leaf-validation X509 with all trusted roots + verified intermediatesCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/ChainValidator.php120 // Step 5: Determine which root anchored the chain (needed before constraintCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/ChainValidator.php124 // Step 6: Enforce leaf constraints.COMMENT
LOWapps/files_versions/lib/Storage.php987 // we need to check if we have to remove any empty folder based on theCOMMENT
Structural Annotation Overuse14 hits · 29 pts
SeverityFileLineSnippetContext
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php101 // Step 1: Load signature fileCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php107 // Step 2: Parse envelope (detects v2 vs legacy)COMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php110 // Step 3: Validate X.509 chainCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php113 // Step 4: Determine algorithm and verify it's permittedCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php123 // Step 5: Determine signed bytes and verify signatureCOMMENT
LOWlib/private/IntegrityCheck/Verifier/Verifier.php141 // Step 6: Check leaf validity and revocationCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php184 // Step 7: Validate identity (app ID or core)COMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/Verifier.php192 // Step 8: Integrity diffCOMMENT
LOWlib/private/IntegrityCheck/Verifier/ChainValidator.php52 // Step 1: Get trusted rootsCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/ChainValidator.php77 // Step 2: Collect candidate intermediates (envelope + bundled)COMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/ChainValidator.php80 // Step 3: Verify each candidate intermediate chains to a trusted rootCOMMENT
LOWlib/private/IntegrityCheck/Verifier/ChainValidator.php98 // Step 4: Build leaf-validation X509 with all trusted roots + verified intermediatesCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/ChainValidator.php120 // Step 5: Determine which root anchored the chain (needed before constraintCOMMENT
LOW⚡lib/private/IntegrityCheck/Verifier/ChainValidator.php124 // Step 6: Enforce leaf constraints.COMMENT
Decorative Section Separators2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMtests/acceptance/run.sh389# --------------------COMMENT
MEDIUMtests/acceptance/run.sh405# ---------------COMMENT
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOWtests/acceptance/run.sh996# Check if we can rely on a local ./occ command or if we are testingCOMMENT
TODO Padding1 hit · 2 pts
SeverityFileLineSnippetContext
LOWapps/dav/lib/Connector/Sabre/FilesReportPlugin.php185 // TODO: implement this at some point...COMMENT