Repository Analysis

square/okhttp

Square’s meticulous HTTP client for the JVM, Android, and GraalVM.

0.5 Likely human-written View on GitHub
0.5
Adjusted Score
0.5
Raw Score
100%
Time Factor
2026-05-29
Last Push
46,972
Stars
Kotlin
Language
155,368
Lines of Code
696
Files
27
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 2HIGH 7MEDIUM 0LOW 18

Pattern Findings

27 matches across 3 categories. Click a row to expand file-level details.

Cross-File Repetition7 hits · 35 pts
SeverityFileLineSnippet
HIGH…t/java/okhttp3/tls/internal/der/DerCertificatesTest.kt0|-----begin certificate----- |$certificatebase64 |-----end certificate----- |
HIGH…t/java/okhttp3/tls/internal/der/DerCertificatesTest.kt0|-----begin certificate----- |$certificatebase64 |-----end certificate----- |
HIGH…t/java/okhttp3/tls/internal/der/DerCertificatesTest.kt0|-----begin certificate----- |$certificatebase64 |-----end certificate----- |
HIGH…est/java/okhttp3/logging/HttpLoggingInterceptorTest.kt0<-- 200 ok $redactedurlpattern \(\d+ms, \d+-byte body\)
HIGH…est/java/okhttp3/logging/HttpLoggingInterceptorTest.kt0<-- 200 ok $redactedurlpattern \(\d+ms, \d+-byte body\)
HIGH…est/java/okhttp3/logging/HttpLoggingInterceptorTest.kt0<-- 200 ok $redactedurlpattern \(\d+ms, \d+-byte body\)
HIGH…est/java/okhttp3/logging/HttpLoggingInterceptorTest.kt0<-- 200 ok $redactedurlpattern \(\d+ms, \d+-byte body\)
Hallucination Indicators2 hits · 20 pts
SeverityFileLineSnippet
CRITICALdocs/features/https.md57 at com.android.org.conscrypt.NativeCrypto.SSL_do_handshake(Native Method)
CRITICALokhttp/src/jvmTest/kotlin/okhttp3/InterceptorTest.kt709 org.junit.jupiter.api.Assertions.assertTrue(
Over-Commented Block18 hits · 18 pts
SeverityFileLineSnippet
LOW…e/src/main/java/okhttp3/recipes/kt/WiresharkExample.kt141 override fun publish(record: LogRecord) {
LOW…p-tls/src/test/java/okhttp3/tls/HeldCertificateTest.kt261 assertThat(root.certificate.sigAlgName).isEqualTo("SHA256WITHECDSA", ignoreCase = true)
LOW…p-tls/src/test/java/okhttp3/tls/HeldCertificateTest.kt321 listOf(GeneralName.iPAddress, "1.1.1.1"),
LOWokhttp/src/jvmTest/kotlin/okhttp3/CallHandshakeTest.kt121 platform.assumeNotBouncyCastle()
LOWokhttp/src/jvmTest/kotlin/okhttp3/CallHandshakeTest.kt161 // TLS_AES_128_GCM_SHA256
LOW…st/kotlin/okhttp3/internal/tls/HostnameVerifierTest.kt441 assertThat(verifier.verify("\u82b1\u5b50.foo.com", session)).isFalse()
LOW…st/kotlin/okhttp3/internal/tls/HostnameVerifierTest.kt541 // $ cat ./cert.cnf
LOW…st/kotlin/okhttp3/internal/tls/HostnameVerifierTest.kt761 }
LOW…ttp/src/commonJvmAndroid/kotlin/okhttp3/CipherSuite.kt261 @JvmField val TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 = init("TLS_DHE_DSS_WITH_AES_256_GCM_SHA384", 0x00a3)
LOW…ttp/src/commonJvmAndroid/kotlin/okhttp3/CipherSuite.kt281 // @JvmField val TLS_DHE_PSK_WITH_NULL_SHA256 = init("TLS_DHE_PSK_WITH_NULL_SHA256", 0x00b4)
LOW…ttp/src/commonJvmAndroid/kotlin/okhttp3/CipherSuite.kt401 // @JvmField val TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 = init("TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384", 0xc038)
LOW…ttp/src/commonJvmAndroid/kotlin/okhttp3/CipherSuite.kt421 // @JvmField val TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256 = init("TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256", 0xc04c)
LOW…ttp/src/commonJvmAndroid/kotlin/okhttp3/CipherSuite.kt441 // @JvmField val TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 = init("TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256", 0xc060)
LOW…ttp/src/commonJvmAndroid/kotlin/okhttp3/CipherSuite.kt461 // @JvmField val TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 = init("TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256", 0
LOW…ttp/src/commonJvmAndroid/kotlin/okhttp3/CipherSuite.kt481 // @JvmField val TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 = init("TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256", 0
LOW…ttp/src/commonJvmAndroid/kotlin/okhttp3/CipherSuite.kt501 // @JvmField val TLS_RSA_WITH_AES_128_CCM = init("TLS_RSA_WITH_AES_128_CCM", 0xc09c)
LOW…tlin/okhttp3/internal/connection/RealConnectionPool.kt181 /**
LOW…n/resources/okhttp3/internal/idna/IdnaMappingTable.txt1# IdnaMappingTable.txt