sahat/hackathon-starter

Pattern Findings

34 matches across 3 categories. Click a row to expand file-level details.

Fake / Example Data23 hits · 25 pts

Severity	File	Line	Snippet
LOW	test/user.test.js	215	body: { email: 'user@example.com', password: '' },
LOW	test/user.test.js	238	req.body.email = 'user@example.com';
LOW	test/user.test.js	250	req.body.email = 'user@example.com';
LOW	test/user.test.js	281	req.body.email = 'user@example.com';
LOW	test/user.test.js	294	req.body.email = 'user@example.com';
LOW	test/user.test.js	307	req.body.email = 'user@example.com';
LOW	test/user.test.js	319	req.body.email = 'user@example.com';
LOW	test/passport.test.js	142	const fakeUser = new User({ email: 'user@example.com', password: 'hashedpass' });
LOW	test/passport.test.js	145	invokeLocal('user@example.com', 'wrongpass', (err, user, info) => {
LOW	test/passport.test.js	154	const fakeUser = new User({ email: 'user@example.com', password: 'correcthash' });
LOW	test/passport.test.js	157	invokeLocal('user@example.com', 'correctpass', (err, user) => {
LOW	test/passport.test.js	173	const fakeUser = new User({ email: 'user@example.com', password: 'hash' });
LOW	test/passport.test.js	177	invokeLocal('user@example.com', 'pass', (err) => {
LOW	test/passport.test.js	779	name: 'John Doe',
LOW	test/passport.test.js	832	name: 'John Doe',
LOW	test/passport.test.js	861	name: 'John Doe',
LOW	test/passport.test.js	878	name: 'John Doe',
LOW	test/passport.test.js	918	name: 'John Doe',
LOW	test/passport.test.js	1171	email: 'user@example.com',
LOW	test/passport.test.js	1196	email: 'user@example.com',
LOW	test/passport.test.js	1221	email: 'user@example.com',
LOW	controllers/api.js	1053	recipientName = 'John Doe';
LOW	controllers/api.js	1057	address_line1: '123 Main Street',

Hyper-Verbose Identifiers10 hits · 12 pts

Severity	File	Line	Snippet
LOW	test/tools/server-axios-fixtures.js	33	function installServerAxiosFixtures({ mode = process.env.API_MODE } = {}) {
LOW	test/e2e-nokey/github-api.e2e.test.js	19	async function gotoGithubWithRateLimitRetry(sharedPage, request) {
LOW	models/User.js	86	userSchema.virtual('isPasswordResetExpired').get(function checkPasswordResetExpiration() {
LOW	models/User.js	90	userSchema.virtual('isEmailVerificationExpired').get(function checkEmailVerificationExpiration() {
LOW	models/User.js	94	userSchema.virtual('isLoginExpired').get(function checkLoginTokenExpiration() {
LOW	models/User.js	159	userSchema.pre('save', function updateGravatarOnEmailChange() {
LOW	controllers/ai.js	58	function initializeEmbeddingCaches(mongoUri) {
LOW	controllers/ai.js	152	async function createCollectionForVectorSearch(db, collectionName, indexes) {
LOW	controllers/user.js	166	async function sendPasswordlessLoginLinkIfUserExists(user, req) {
LOW	controllers/user.js	202	async function sendPasswordlessSignupLink(user, req) {

Slop Phrases1 hit · 3 pts

Severity	File	Line	Snippet
MEDIUM	app.js	38	* This is a basic rate limiting configuration. You may want to adjust the settings

Score History

Severity Breakdown

Pattern Findings