Pattern Findings

The scanner identified 4117 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers3954 hits · 4192 pts

Severity	File	Line	Snippet	Context
LOW	externals/mimemailparser/MimeMailParser.class.php	342	private function getPartContentDisposition($part) {	CODE
LOW	externals/stripe-php/lib/Stripe/Util.php	30	public static function convertStripeObjectToArray($values)	CODE
LOW	externals/phpqrcode/phpqrcode.php	1209	public function estimateBitStreamSizeOfEntry($version)	CODE
LOW	externals/phpqrcode/phpqrcode.php	1364	public function insertStructuredAppendHeader($size, $index, $parity)	CODE
LOW	support/startup/PhabricatorStartup.php	68	public static function getMicrosecondsSinceStart() {	CODE
LOW	support/startup/PhabricatorStartup.php	323	public static function didEncounterFatalException(	CODE
LOW	src/__tests__/PhabricatorInfrastructureTestCase.php	5	protected function getPhabricatorTestCaseConfiguration() {	CODE
LOW	src/__tests__/PhabricatorInfrastructureTestCase.php	11	public function testApplicationsInstalled() {	CODE
LOW⚡	src/view/AphrontDialogView.php	231	public function setDisableWorkflowOnSubmit($disable_workflow_on_submit) {	CODE
LOW⚡	src/view/AphrontDialogView.php	236	public function getDisableWorkflowOnSubmit() {	CODE
LOW⚡	src/view/AphrontDialogView.php	240	public function setDisableWorkflowOnCancel($disable_workflow_on_cancel) {	CODE
LOW⚡	src/view/AphrontDialogView.php	245	public function getDisableWorkflowOnCancel() {	CODE
LOW	src/view/page/PhabricatorStandardPageView.php	686	private function getHighSecurityWarningConfig() {	CODE
LOW	src/view/page/PhabricatorStandardPageView.php	826	private function buildAphlictListenConfigData() {	CODE
LOW	src/view/page/PhabricatorStandardPageView.php	837	private function getQuicksandURIPatternBlacklist() {	CODE
LOW	src/view/page/menu/PhabricatorMainMenuSearchView.php	119	public static function getGlobalSearchScopeItems(	CODE
LOW	src/view/page/menu/PhabricatorMainMenuView.php	222	public function renderApplicationMenuButton() {	CODE
LOW	src/view/page/menu/PhabricatorMainMenuView.php	282	private function renderPhabricatorSearchMenu() {	CODE
LOW	src/view/page/menu/PhabricatorMainMenuBarExtension.php	58	public function isExtensionEnabledForViewer(PhabricatorUser $viewer) {	CODE
LOW	src/view/form/PHUIFormLayoutView.php	33	public function appendRemarkupInstructions($remarkup) {	CODE
LOW	src/view/form/AphrontFormView.php	86	public function appendRemarkupInstructions($remarkup) {	CODE
LOW	src/view/form/AphrontFormView.php	91	public function newInstructionsRemarkupView($remarkup) {	CODE
LOW	src/view/form/control/AphrontFormDateControlValue.php	260	private function getFormattedDateFromParts(	CODE
LOW	src/view/__tests__/PhabricatorUnitsTestCase.php	55	public function testDetailedDurationFormatting() {	CODE
LOW	src/view/__tests__/PhabricatorLocalTimeTestCase.php	5	protected function getPhabricatorTestCaseConfiguration() {	CODE
LOW	src/view/phui/PHUIPagerView.php	114	public function setEnableKeyboardShortcuts($enable) {	CODE
LOW	…s/doorkeeper/phid/DoorkeeperExternalObjectPHIDType.php	16	public function getPHIDTypeApplicationClass() {	CODE
LOW	…pplications/doorkeeper/bridge/DoorkeeperBridgeJIRA.php	135	public static function getJIRAIssueBrowseURIFromJIRARestURI(	CODE
LOW	…eper/bridge/__tests__/DoorkeeperBridgeJIRATestCase.php	5	public function testJIRABridgeRestAPIURIConversion() {	CODE
LOW	…ns/doorkeeper/option/PhabricatorAsanaConfigOptions.php	47	public function renderContextualDescription(	CODE
LOW	…ns/doorkeeper/option/PhabricatorAsanaConfigOptions.php	124	private function renderContextualProjectDescription(	CODE
LOW	…rkeeper/edge/PhabricatorObjectHasJiraIssueEdgeType.php	11	public function shouldWriteInverseTransactions() {	CODE
LOW	…rkeeper/edge/PhabricatorJiraIssueHasObjectEdgeType.php	11	public function shouldWriteInverseTransactions() {	CODE
LOW	…rkeeper/edge/PhabricatorObjectHasAsanaTaskEdgeType.php	11	public function shouldWriteInverseTransactions() {	CODE
LOW	…rkeeper/edge/PhabricatorAsanaTaskHasObjectEdgeType.php	11	public function shouldWriteInverseTransactions() {	CODE
LOW	…eper/edge/PhabricatorObjectHasAsanaSubtaskEdgeType.php	12	public function shouldWriteInverseTransactions() {	CODE
LOW	…eper/edge/PhabricatorAsanaSubtaskHasObjectEdgeType.php	12	public function shouldWriteInverseTransactions() {	CODE
LOW	…ations/doorkeeper/worker/DoorkeeperAsanaFeedWorker.php	512	private function getSynchronizationWarning() {	CODE
LOW	…ations/doorkeeper/worker/DoorkeeperAsanaFeedWorker.php	541	private function loadAsanaExternalAccounts(array $user_phids) {	CODE
LOW	…ations/doorkeeper/worker/DoorkeeperAsanaFeedWorker.php	567	private function findAnyValidAsanaAccessToken(array $user_phids) {	CODE
LOW	…ons/doorkeeper/engine/DoorkeeperFeedStoryPublisher.php	38	public function setRenderWithImpliedContext($render_with_implied_context) {	CODE
LOW	…ons/doorkeeper/engine/DoorkeeperFeedStoryPublisher.php	50	public function getRenderWithImpliedContext() {	CODE
LOW	…ons/doorkeeper/engine/DoorkeeperFeedStoryPublisher.php	89	abstract public function isStoryAboutObjectCreation($object);	CODE
LOW	…ons/doorkeeper/engine/DoorkeeperFeedStoryPublisher.php	90	abstract public function isStoryAboutObjectClosure($object);	CODE
LOW	…plications/differential/DifferentialGetWorkingCopy.php	50	public static function getCleanMercurialWorkspace(	CODE
LOW	…r/DifferentialDoorkeeperRevisionFeedStoryPublisher.php	10	public function isStoryAboutObjectCreation($object) {	CODE
LOW	…r/DifferentialDoorkeeperRevisionFeedStoryPublisher.php	17	public function isStoryAboutObjectClosure($object) {	CODE
LOW	…/typeahead/DifferentialExactUserFunctionDatasource.php	14	public function getDatasourceApplicationClass() {	CODE
LOW	…ential/typeahead/DifferentialResponsibleDatasource.php	14	public function getDatasourceApplicationClass() {	CODE
LOW	…l/typeahead/DifferentialBlockingReviewerDatasource.php	14	public function getDatasourceApplicationClass() {	CODE
LOW	…ad/DifferentialResponsibleViewerFunctionDatasource.php	14	public function getDatasourceApplicationClass() {	CODE
LOW	…ad/DifferentialResponsibleViewerFunctionDatasource.php	69	private function renderViewerFunctionToken() {	CODE
LOW	…ferential/typeahead/DifferentialReviewerDatasource.php	14	public function getDatasourceApplicationClass() {	CODE
LOW	…al/typeahead/DifferentialResponsibleUserDatasource.php	14	public function getDatasourceApplicationClass() {	CODE
LOW	…typeahead/DifferentialRevisionOpenStatusDatasource.php	16	public function getDatasourceApplicationClass() {	CODE
LOW	…ial/typeahead/DifferentialRevisionStatusDatasource.php	14	public function getDatasourceApplicationClass() {	CODE
LOW	…peahead/DifferentialRevisionClosedStatusDatasource.php	16	public function getDatasourceApplicationClass() {	CODE
LOW	…ential/typeahead/DifferentialNoReviewersDatasource.php	16	public function getDatasourceApplicationClass() {	CODE
LOW	…l/typeahead/DifferentialReviewerFunctionDatasource.php	14	public function getDatasourceApplicationClass() {	CODE
LOW	…agecollector/DifferentialViewStateGarbageCollector.php	12	public function getDefaultRetentionPolicy() {	CODE
3894 more matches not shown…

Over-Commented Block120 hits · 118 pts

Severity	File	Line	Snippet	Context
LOW	…urces/sql/autopatches/20150503.repositorysymbols.2.php	1	<?php	COMMENT
LOW	resources/sql/autopatches/20150504.symbolsproject.1.php	1	<?php	COMMENT
LOW	resources/sql/autopatches/20140218.passwords.4.vcs.php	1	<?php	COMMENT
LOW	resources/sql/autopatches/20160223.paste.fileedges.php	1	<?php	COMMENT
LOW	…urces/sql/autopatches/20190412.dashboard.01.panels.php	1	<?php	COMMENT
LOW	resources/sql/patches/20130530.sessionhash.php	1	<?php	COMMENT
LOW	…sources/sql/patches/20131121.repocredentials.2.mig.php	1	<?php	COMMENT
LOW	resources/sql/patches/102.heraldcleanup.php	1	<?php	COMMENT
LOW	webroot/rsrc/js/core/DraggableList.js	221	// original where it is in the document, and put the clone at top-level	COMMENT
LOW	webroot/rsrc/js/core/behavior-oncopy.js	101	// side of a diff, then clicks the selection on the left side of the	COMMENT
LOW	webroot/rsrc/js/phuix/PHUIXAutocomplete.js	581	if (text.indexOf(ignore[ii]) === 0) {	COMMENT
LOW	webroot/rsrc/js/application/diff/DiffChangeset.js	581	if (sequence != this._sequence) {	COMMENT
LOW	webroot/rsrc/js/application/diff/DiffInline.js	221		COMMENT
LOW	webroot/rsrc/externals/javelin/core/Stratcom.js	181	// the same listener a whole bunch of times: if we install for two	COMMENT
LOW	webroot/rsrc/externals/javelin/core/install.js	321	// listen(). If you listen to an instance you get events for that	COMMENT
LOW	…root/rsrc/externals/javelin/core/__tests__/stratcom.js	161	} catch (error) {	COMMENT
LOW	webroot/rsrc/externals/javelin/lib/Scrollbar.js	41	// Wrap the frame content in a bunch of nodes. The frame itself stays on	COMMENT
LOW	webroot/rsrc/externals/javelin/lib/Leader.js	161	return;	COMMENT
LOW	…c/externals/javelin/lib/control/tokenizer/Tokenizer.js	281	metrics.setDim(focus);	COMMENT
LOW	externals/xhprof/xhprof_lib.php	1	<?php	COMMENT
LOW	externals/figlet/inflate.c	61	#endif	COMMENT
LOW	externals/figlet/inflate.c	81	#ifndef WINDOWSIZE	COMMENT
LOW	externals/figlet/zipio.c	81	#include "zipio.h"	COMMENT
LOW	externals/figlet/zipio.c	101	#ifndef ZIPSIGNATURE	COMMENT
LOW	externals/figlet/zipio.c	141	#endif	COMMENT
LOW	externals/figlet/zipio.c	181	* Macros for run-time type identification	COMMENT
LOW	externals/figlet/figlet.c	61	#ifdef __STDC__	COMMENT
LOW	externals/figlet/figlet.c	81		COMMENT
LOW	externals/figlet/figlet.c	141	Globals dealing with chars that are written	COMMENT
LOW	externals/figlet/figlet.c	201		COMMENT
LOW	externals/figlet/getopt.c	21	* reflects the actual behavior of this getopt. However, I am not about to	COMMENT
LOW	externals/figlet/tests/res002.txt	1	# #	COMMENT
LOW	externals/figlet/tests/res002.txt	21	## # # # # # # # # # # ### #####	COMMENT
LOW	externals/figlet/tests/res002.txt	41	# #	COMMENT
LOW	externals/figlet/tests/res002.txt	61	# ####### # # # # # # # ###### ##	COMMENT
LOW	externals/figlet/tests/res002.txt	81	### ### ###	COMMENT
LOW	externals/figlet/tests/res002.txt	101	###### ##### ###### # # # # # # # # # # #	COMMENT
LOW	externals/figlet/tests/res002.txt	121		COMMENT
LOW	externals/figlet/tests/res002.txt	141	# ###### # # # # # # # # # # #	COMMENT
LOW	externals/figlet/tests/res002.txt	161		COMMENT
LOW	externals/figlet/tests/res002.txt	181	# ## # ###### # # # # #	COMMENT
LOW	externals/figlet/tests/res002.txt	201	# #	COMMENT
LOW	externals/figlet/tests/res026.txt	1	########## ## # #	COMMENT
LOW	externals/figlet/tests/res025.txt	1	########## ## # #	COMMENT
LOW	support/startup/preamble-utils.php	41	// to network-adjacent devices we control. Usually, we're behind a single	COMMENT
LOW	scripts/repository/commit_hook.php	1	#!/usr/bin/env php	COMMENT
LOW	src/view/form/control/AphrontFormPolicyControl.php	181	);	COMMENT
LOW	…ations/doorkeeper/worker/DoorkeeperAsanaFeedWorker.php	201	$silent_followers = array_select_keys($phid_aid_map, $active_phids) +	COMMENT
LOW	…cations/differential/parser/DifferentialHunkParser.php	861	private function updateChangeTypesForNormalization() {	COMMENT
LOW	…ial/field/DifferentialRevisionIDCommitMessageField.php	21	// If the complete commit message we are parsing has unrecognized custom	COMMENT
LOW	…applications/differential/storage/DifferentialHunk.php	101	$number = $this->newOffset;	COMMENT
LOW	…fferential/engine/DifferentialDiffExtractionEngine.php	381	}	COMMENT
LOW	…r/PhabricatorRepositorySvnCommitChangeParserWorker.php	1	<?php	COMMENT
LOW	…/repository/engine/PhabricatorRepositoryPullEngine.php	381		COMMENT
LOW	…/repository/engine/PhabricatorRepositoryPullEngine.php	501	$this->installHook($root.$path);	COMMENT
LOW	…/repository/engine/PhabricatorRepositoryPullEngine.php	721	// NOTE: Between versions 2.1 and 2.1.1, Mercurial changed the behavior	COMMENT
LOW	…/applications/phrequent/storage/PhrequentTimeBlock.php	121	// \|xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\|	COMMENT
LOW	…conduit/controller/PhabricatorConduitAPIController.php	641	// as HTTP POST parameters in an array, e.g.:	COMMENT
LOW	…ons/config/check/PhabricatorPHPPreflightSetupCheck.php	61	// difficult for us to be sure we'll even survive setup if these options	COMMENT
LOW	…plications/config/check/PhabricatorMySQLSetupCheck.php	241	// NOTE: The default value of "innodb_ft_min_token_size" is 3, which is	COMMENT
60 more matches not shown…

Fake / Example Data26 hits · 31 pts

Severity	File	Line	Snippet	Context
LOW⚡	webroot/rsrc/externals/javelin/lib/DOM.js	233	* JX.$N('div', {}, 'Lorem ipsum...'); // No attributes.	COMMENT
LOW⚡	webroot/rsrc/externals/javelin/lib/DOM.js	234	* JX.$N('div', 'Lorem ipsum...') // Same as above.	COMMENT
LOW⚡	webroot/rsrc/externals/javelin/lib/DOM.js	239	* <div>Lorem ipsum...</div>	COMMENT
LOW	src/view/page/menu/PhabricatorMainMenuSearchView.php	70	'placeholder' => pht('Search'),	CODE
LOW	src/view/form/control/AphrontFormTokenizerControl.php	117	'placeholder' => $placeholder,	CODE
LOW	src/view/form/control/AphrontFormTextControl.php	61	'placeholder' => $this->getPlaceholder(),	CODE
LOW	src/view/form/control/AphrontFormTypeaheadControl.php	39	'placeholder' => $this->placeholder,	CODE
LOW	src/view/form/control/AphrontFormTextAreaControl.php	93	'placeholder' => $this->getPlaceHolder(),	CODE
LOW	src/view/phui/PHUITagView.php	27	const COLOR_PLACEHOLDER = 'placeholder';	CODE
LOW	…er/PhabricatorTypeaheadModularDatasourceController.php	233	'placeholder' => $source->getPlaceholderText(),	CODE
LOW	…cations/uiexample/examples/PHUIPropertyListExample.php	34	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. '.	CODE
LOW	…cations/uiexample/examples/PHUIPropertyListExample.php	34	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. '.	CODE
LOW	…lications/diffusion/controller/DiffusionController.php	475	'placeholder' => pht('Pattern Search'),	CODE
LOW	…rigger/PhabricatorProjectTriggerManiphestOwnerRule.php	114	'placeholder' => $datasource->getPlaceholderText(),	CODE
LOW	…rigger/PhabricatorProjectTriggerRemoveProjectsRule.php	81	'placeholder' => $datasource->getPlaceholderText(),	CODE
LOW	…t/trigger/PhabricatorProjectTriggerAddProjectsRule.php	81	'placeholder' => $datasource->getPlaceholderText(),	CODE
LOW	…/transactions/bulk/type/BulkTokenizerParameterType.php	33	'placeholder' => $datasource->getPlaceholderText(),	CODE
LOW	…action/PhabricatorEditEngineTokenizerCommentAction.php	48	'placeholder' => $datasource->getPlaceholderText(),	CODE
LOW	…tions/conpherence/controller/ConpherenceController.php	185	'placeholder' => pht('Search %s...', $name),	CODE
LOW	…ions/conpherence/view/ConpherenceDurableColumnView.php	445	'placeholder' => pht('Send a message...'),	CODE
LOW	…owners/controller/PhabricatorOwnersPathsController.php	83	'placeholder' => $datasource->getPlaceholderText(),	CODE
LOW	…pplications/herald/value/HeraldTokenizerFieldValue.php	60	'placeholder' => $datasource->getPlaceholderText(),	CODE
LOW	src/applications/policy/rule/PhabricatorPolicyRule.php	51	'placeholder' => $datasource->getPlaceholderText(),	CODE
LOW	…ustomfield/standard/PhabricatorStandardCustomField.php	282	return $this->getFieldConfigValue('placeholder', null);	CODE
LOW	…cture/markup/blockrule/PhutilRemarkupListBlockRule.php	7	* win blocks which begin ` - Lorem ipsum`.	COMMENT
LOW	…structure/markup/blockrule/PhutilRemarkupBlockRule.php	14	* patterns. For example, ` - Lorem ipsum...` may be a code block or a	COMMENT

AI Slop Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	…controller/LegalpadDocumentSignatureViewController.php	20	// Essentially, this power is for document managers. Notably, this prevents	COMMENT
MEDIUM	…calendar/editor/PhabricatorCalendarEventEditEngine.php	96	// This may eventually deserve a more nuanced approach.	COMMENT
MEDIUM	src/applications/files/query/PhabricatorFileQuery.php	195	// profile images or builtins. We could be slightly more nuanced	COMMENT

Structural Annotation Overuse5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	externals/mimemailparser/MimeMailParser.class.php	193	// NOTE: This function has been modified for Phabricator. The default	COMMENT
LOW⚡	…tial/xaction/DifferentialRevisionInlineTransaction.php	6	// NOTE: This class is NOT an actual Differential modular transaction type!	COMMENT
LOW	…ications/pholio/xaction/PholioImageFileTransaction.php	106	// NOTE: This method is a little weird (and includes ALL the file PHIDs,	COMMENT
LOW	src/infrastructure/storage/lisk/LiskDAO.php	1588	// NOTE: This method is very performance-sensitive (many thousands of calls	COMMENT
LOW	…orage/connection/AphrontIsolatedDatabaseConnection.php	105	// NOTE: This method is intentionally simplified for now, since we're only	COMMENT

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	externals/cowsay/install.sh	10	## This file is part of cowsay. (c) 1999 Tony Monroe.	COMMENT

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…erential/controller/DifferentialDiffViewController.php	51	// TODO: implement optgroup support in AphrontFormSelectControl?	COMMENT
LOW	…/HarbormasterUploadArtifactBuildStepImplementation.php	44	// TODO: Handle exceptions.	COMMENT

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	src/applications/phid/type/PhabricatorPHIDType.php	188	// Otherwise, we need to check if this application is installed before	COMMENT
LOW	src/applications/people/storage/PhabricatorUser.php	784	* With certain settings, we need to check if a user has MFA on every page,	COMMENT

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ructure/diff/view/PHUIDiffInlineCommentRowScaffold.php	39	// NOTE: When this scaffold is turned into an "undo" template, it is	COMMENT

Slop Phrases2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	externals/phpmailer/class.phpmailer-lite.php	2101	$lines[$key]=$heading.":".trim($value) ; // Don't forget to remove WSP around the value	CODE
LOW	externals/phpmailer/class.phpmailer.php	2239	$lines[$key]=$heading.":".trim($value) ; // Don't forget to remove WSP around the value	CODE

Decorative Section Separators1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	externals/figlet/tests/res018.txt	27	┛┛ ┛#━━━━━━ ┛┛ ┛ ┛━━━━┛┛━━━━┛	CODE

phacility/phabricator

Open-Source Code Quality, Security and Technical Debt Review

Risk Review · Payload v1

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings