rmyndharis/OpenWA

Pattern Findings

112 matches across 5 categories. Click a row to expand file-level details.

Decorative Section Separators64 hits · 216 pts

Severity	File	Line	Snippet
MEDIUM	docs/10-devops-infrastructure.md	400	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	402	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	409	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	411	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	422	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	424	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	445	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	447	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	457	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	459	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	473	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	475	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	480	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	482	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	487	# ===========================================
MEDIUM	docs/10-devops-infrastructure.md	489	# ===========================================
MEDIUM	dashboard/src/hooks/queries.ts	12	// ── Query Keys ────────────────────────────────────────────────────────
MEDIUM	dashboard/src/hooks/queries.ts	28	// ── Session Queries ───────────────────────────────────────────────────
MEDIUM	dashboard/src/hooks/queries.ts	97	// ── Webhook Queries ───────────────────────────────────────────────────
MEDIUM	dashboard/src/hooks/queries.ts	140	// ── API Key Queries ───────────────────────────────────────────────────
MEDIUM	dashboard/src/hooks/queries.ts	181	// ── Logs Queries ──────────────────────────────────────────────────────
MEDIUM	dashboard/src/hooks/queries.ts	196	// ── Infrastructure Queries ────────────────────────────────────────────
MEDIUM	dashboard/src/hooks/queries.ts	206	// ── Plugin Queries ────────────────────────────────────────────────────
MEDIUM	sdk/javascript/src/index.ts	25	// ── Client Configuration ──────────────────────────────────────────
MEDIUM	sdk/javascript/src/index.ts	38	// ── Response Types ────────────────────────────────────────────────
MEDIUM	sdk/javascript/src/index.ts	53	// ── Client Class ──────────────────────────────────────────────────
MEDIUM	sdk/javascript/src/index.ts	84	// ── Internal HTTP client ──────────────────────────────────────────
MEDIUM	.github/workflows/release.yml	15	# ──── Build & Test Gate ───────────────────────────────────────────
MEDIUM	.github/workflows/release.yml	37	# ──── Create GitHub Release ───────────────────────────────────────
MEDIUM	.github/workflows/release.yml	76	# ──── Docker Image with Version Tag ───────────────────────────────
MEDIUM	src/modules/webhook/webhook.service.spec.ts	82	// ── create ────────────────────────────────────────────────────────
MEDIUM	src/modules/webhook/webhook.service.spec.ts	126	// ── findBySession / findAll / findOne ──────────────────────────────
MEDIUM	src/modules/webhook/webhook.service.spec.ts	166	// ── update ────────────────────────────────────────────────────────
MEDIUM	src/modules/webhook/webhook.service.spec.ts	181	// ── delete ────────────────────────────────────────────────────────
MEDIUM	src/modules/webhook/webhook.service.spec.ts	195	// ── dispatch (direct mode — queue disabled) ───────────────────────
MEDIUM	src/modules/webhook/webhook.service.spec.ts	288	// ── generateSignature (via dispatch) ──────────────────────────────
MEDIUM	src/modules/webhook/webhook.service.spec.ts	344	// ── dispatch (queue mode) ─────────────────────────────────────────
MEDIUM	src/modules/auth/auth.service.spec.ts	58	// ── createApiKey ──────────────────────────────────────────────────
MEDIUM	src/modules/auth/auth.service.spec.ts	100	// ── findAll / findOne ─────────────────────────────────────────────
MEDIUM	src/modules/auth/auth.service.spec.ts	130	// ── update ────────────────────────────────────────────────────────
MEDIUM	src/modules/auth/auth.service.spec.ts	145	// ── delete / revoke ───────────────────────────────────────────────
MEDIUM	src/modules/auth/auth.service.spec.ts	177	// ── validateApiKey ────────────────────────────────────────────────
MEDIUM	src/modules/auth/auth.service.spec.ts	250	// ── hasPermission ─────────────────────────────────────────────────
MEDIUM	src/modules/auth/auth.service.spec.ts	279	// ── hashKey (via validateApiKey) ──────────────────────────────────
MEDIUM	src/modules/auth/auth.service.spec.ts	294	// ── isIpAllowed / ipInCidr (via validateApiKey) ───────────────────
MEDIUM	src/modules/message/message.service.spec.ts	70	// ── sendText ──────────────────────────────────────────────────────
MEDIUM	src/modules/message/message.service.spec.ts	139	// ── sendImage ─────────────────────────────────────────────────────
MEDIUM	src/modules/message/message.service.spec.ts	170	// ── sendVideo / sendAudio / sendDocument / sendSticker ────────────
MEDIUM	src/modules/message/message.service.spec.ts	216	// ── sendLocation ──────────────────────────────────────────────────
MEDIUM	src/modules/message/message.service.spec.ts	235	// ── sendContact ───────────────────────────────────────────────────
MEDIUM	src/modules/message/message.service.spec.ts	253	// ── reply / forward ───────────────────────────────────────────────
MEDIUM	src/modules/message/message.service.spec.ts	295	// ── saveIncomingMessage ───────────────────────────────────────────
MEDIUM	src/modules/message/message.service.spec.ts	315	// ── buildMediaInput (via sendImage) ───────────────────────────────
MEDIUM	src/modules/message/message.service.spec.ts	334	// ── reactToMessage / deleteMessage ────────────────────────────────
MEDIUM	src/modules/session/session.service.spec.ts	107	// ── create ────────────────────────────────────────────────────────
MEDIUM	src/modules/session/session.service.spec.ts	134	// ── findAll / findOne / findByName ────────────────────────────────
MEDIUM	src/modules/session/session.service.spec.ts	180	// ── delete ────────────────────────────────────────────────────────
MEDIUM	src/modules/session/session.service.spec.ts	214	// ── start ─────────────────────────────────────────────────────────
MEDIUM	src/modules/session/session.service.spec.ts	256	// ── stop ──────────────────────────────────────────────────────────
MEDIUM	src/modules/session/session.service.spec.ts	277	// ── getQRCode ─────────────────────────────────────────────────────
4 more matches not shown…

Magic Placeholder Names33 hits · 208 pts

Severity	File	Line	Snippet
HIGH	README.md	178	-H "X-API-Key: YOUR_API_KEY" \
HIGH	README.md	187	-H "X-API-Key: YOUR_API_KEY"
HIGH	README.md	191	-H "X-API-Key: YOUR_API_KEY"
HIGH	README.md	199	-H "X-API-Key: YOUR_API_KEY" \
HIGH	README.md	211	-H "X-API-Key: YOUR_API_KEY" \
HIGH	docs/18-sdk-design.md	62	apiKey: 'your-api-key',
HIGH	docs/18-sdk-design.md	551	api_key="your-api-key"
HIGH	docs/18-sdk-design.md	860	'apiKey' => 'your-api-key',
HIGH	docs/README.md	115	-H "X-API-Key: your-api-key" \
HIGH	docs/README.md	121	-H "X-API-Key: your-api-key"
HIGH	docs/README.md	125	-H "X-API-Key: your-api-key"
HIGH	docs/README.md	129	-H "X-API-Key: your-api-key" \
HIGH	docs/README.md	140	extraHeaders: { 'X-API-Key': 'your-api-key' },
HIGH	docs/06-api-specification.md	14	X-API-Key: your-api-key-here
HIGH	docs/06-api-specification.md	17	GET /api/sessions?apiKey=your-api-key-here
HIGH	docs/06-api-specification.md	24	X-API-Key: your-api-key
HIGH	docs/06-api-specification.md	1389	wss://your-domain.com/ws?apiKey=your-api-key # browser fallback
HIGH	docs/06-api-specification.md	1394	X-API-Key: your-api-key
HIGH	docs/06-api-specification.md	1399	const ws = new WebSocket('wss://your-domain.com/ws?apiKey=your-api-key');
HIGH	docs/06-api-specification.md	1523	const ws = new WebSocket('ws://localhost:2785/ws?apiKey=your-api-key');
HIGH	docs/06-api-specification.md	1596	-H "X-API-Key: your-api-key" \
HIGH	docs/06-api-specification.md	1603	-H "X-API-Key: your-api-key" \
HIGH	docs/06-api-specification.md	1613	-H "X-API-Key: your-api-key" \
HIGH	docs/06-api-specification.md	1630	'X-API-Key': 'your-api-key',
HIGH	docs/06-api-specification.md	1687	client = OpenWA('http://localhost:2785/api', 'your-api-key')
HIGH	docs/06-api-specification.md	1695	const ws = new WebSocket('ws://localhost:2785/ws?apiKey=your-api-key');
HIGH	docs/07-api-collection.md	19	X-API-Key: your-api-key-here
HIGH	docs/07-api-collection.md	1143	"value": "your-api-key",
HIGH	docs/07-api-collection.md	1306	API_KEY="your-api-key"
HIGH	sdk/README.md	20	apiKey: 'your-api-key',
HIGH	sdk/README.md	41	api_key="your-api-key",
HIGH	sdk/python/openwa/__init__.py	12	api_key="your-api-key",
HIGH	sdk/javascript/src/index.ts	12	* apiKey: 'your-api-key',

Fake / Example Data10 hits · 11 pts

Severity	File	Line	Snippet
LOW	docs/06-api-specification.md	670	"name": "John Doe",
LOW	docs/06-api-specification.md	877	"name": "John Doe",
LOW	docs/06-api-specification.md	1286	"name": "John Doe",
LOW	docs/07-api-collection.md	156	"profileName": "John Doe",
LOW	docs/07-api-collection.md	229	"profileName": "John Doe",
LOW	docs/07-api-collection.md	432	"name": "John Doe",
LOW	docs/07-api-collection.md	595	"name": "John Doe",
LOW	src/modules/message/message.service.spec.ts	241	contactName: 'John Doe',
LOW	src/modules/message/message.service.spec.ts	248	expect.objectContaining({ name: 'John Doe', number: '+628123456789' }),
LOW	src/modules/session/dto/session-response.dto.ts	17	@ApiPropertyOptional({ example: 'John Doe' })

Over-Commented Block3 hits · 3 pts

Severity	File	Line	Snippet
LOW	docs/10-devops-infrastructure.md	401	# APPLICATION
LOW	docs/10-devops-infrastructure.md	421
LOW	docs/10-devops-infrastructure.md	441	# STORAGE_S3_ACCESS_KEY_ID=minioadmin

Unused Imports2 hits · 2 pts

Severity	File	Line	Snippet
LOW	sdk/python/openwa/__init__.py	22
LOW	sdk/python/openwa/__init__.py	24

Score History

Severity Breakdown

Pattern Findings