Repository Analysis

superradcompany/microsandbox

🧱 easy fast local-first microVM runtime and library

4.9 Likely human-written View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of superradcompany/microsandbox, a Rust project with 7,981 GitHub stars. SynthScan v2.0 examined 350,655 lines of code across 1001 source files, recording 1276 pattern matches distributed across 16 syntactic categories. The overall adjusted score of 4.9 places this repository in the Likely human-written band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

4.9
Adjusted Score
4.9
Raw Score
100%
Time Factor
2026-08-28
Last Push
8.0K
Stars
Rust
Language
350.7K
Lines of Code
1.0K
Files
1.3K
Pattern Hits
2026-08-29
Scan Date
0.04
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 12HIGH 29MEDIUM 141LOW 1094

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 1276 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Over-Commented Block691 hits · 674 pts
SeverityFileLineSnippetContext
LOWdeny.toml1# This template contains all of the possible sections and their default valuesCOMMENT
LOWdeny.toml21targets = [COMMENT
LOWdeny.toml41# The lint level for unmaintained cratesCOMMENT
LOWdeny.toml81]COMMENT
LOWdeny.toml141# This section is considered when running `cargo deny check bans`.COMMENT
LOWdeny.toml181 { name = "windows_x86_64_gnu" },COMMENT
LOWdeny.toml201# in the allow list is encounteredCOMMENT
LOWAGENTS.md161- Organize Rust files with these section headers, in this order when applicable:COMMENT
LOWAGENTS.md181// FunctionsCOMMENT
LOW.config/nextest.toml1# nextest configuration.COMMENT
LOWcrates/metrics/lib/layout.rs1//! Binary layout of the shared-memory metrics registry.COMMENT
LOWcrates/metrics/lib/layout.rs21//! | 0x08 version u32 layout version (3) |COMMENT
LOWcrates/metrics/lib/layout.rs41//! | 0x30 sampled_at_ms AI64 0 until first sample |COMMENT
LOWcrates/metrics/lib/layout.rs61//! | 0x130 _tail [u8; 208] |COMMENT
LOWcrates/metrics/lib/layout.rs81COMMENT
LOWcrates/metrics/lib/layout.rs101COMMENT
LOWcrates/metrics/lib/layout.rs121/// Header state: the creating process is still writing the header.COMMENT
LOWcrates/metrics/lib/layout.rs141// Constants: Sample flagsCOMMENT
LOWcrates/metrics/lib/layout.rs161//--------------------------------------------------------------------------------------------------COMMENT
LOWcrates/metrics/lib/layout.rs201 /// Catalog run id of the current owner. `0` while reserved.COMMENT
LOWcrates/metrics/lib/layout.rs241 /// Length of the bytes in `name_bytes` that are valid UTF-8 name data.COMMENT
LOWcrates/metrics/lib/registry.rs41//--------------------------------------------------------------------------------------------------COMMENT
LOWcrates/metrics/lib/registry.rs121/// Cloneable handle (`Arc`-backed). Dropping the last clone unmaps the regionCOMMENT
LOWcrates/metrics/lib/registry.rs381COMMENT
LOWcrates/metrics/lib/error.rs1//! Error type used by the metrics registry.COMMENT
LOWcrates/metrics/lib/lib.rs1//! Shared-memory live metrics registry for microsandbox.COMMENT
LOWcrates/metrics/lib/snapshot.rs1//! In-memory snapshot types produced by registry reads.COMMENT
LOWcrates/metrics/lib/snapshot.rs21/// Carries both identity (sandbox_id, run_id, pid, name) and the metricCOMMENT
LOWcrates/network/lib/network.rs141COMMENT
LOWcrates/network/lib/udp/relay.rs121 self.payload.len() + self.original_ip_packet.len()COMMENT
LOWcrates/network/lib/udp/relay.rs361//--------------------------------------------------------------------------------------------------COMMENT
LOWcrates/network/lib/udp/relay.rs381/// addressed the gateway.COMMENT
LOWcrates/network/lib/config/types.rs21///COMMENT
LOWcrates/network/lib/config/types.rs61 pub tls: TlsConfig,COMMENT
LOWcrates/network/lib/config/types.rs81 #[serde(default)]COMMENT
LOWcrates/network/lib/config/types.rs121COMMENT
LOWcrates/network/lib/config/builder.rs81/// ```COMMENT
LOWcrates/network/lib/config/builder.rs321 /// Whether to ship the host's trusted root CAs into the guest atCOMMENT
LOWcrates/network/lib/config/builder.rs561COMMENT
LOWcrates/network/lib/secrets/handle.rs1//! Live-swappable view of the active secrets configuration.COMMENT
LOWcrates/network/lib/secrets/handler.rs61const HTTP2_FLAG_PADDED: u8 = 0x8;COMMENT
LOWcrates/network/lib/secrets/handler.rs81 /// Original guest destination for this connection.COMMENT
LOWcrates/network/lib/secrets/handler.rs101 /// Current HTTP/1 request metadata while processing body continuations.COMMENT
LOWcrates/network/lib/secrets/handler.rs4261 // single HTTP request can arrive as (headers) then (body) inCOMMENT
LOWcrates/network/lib/secrets/handler.rs4361COMMENT
LOWcrates/network/lib/secrets/config.rs1//! Secret injection configuration types.COMMENT
LOWcrates/network/lib/tls/host_cas.rs1//! Collect the host's trusted root CAs as a PEM bundle.COMMENT
LOWcrates/network/lib/tls/host_cas.rs21use std::collections::HashSet;COMMENT
LOWcrates/network/lib/tls/sni.rs1//! TLS ClientHello SNI extraction.COMMENT
LOWcrates/network/lib/tls/state.rs21//--------------------------------------------------------------------------------------------------COMMENT
LOWcrates/network/lib/tls/state.rs41 /// Loaded per connection so live secret updates apply to future traffic.COMMENT
LOWcrates/network/lib/tls/state.rs121struct NoVerify;COMMENT
LOWcrates/network/lib/tcp/proxy.rs921 // Strip port suffix.COMMENT
LOWcrates/network/lib/tcp/connection.rs41/// Terminal connection status reported by an outbound proxy task.COMMENT
LOWcrates/network/lib/tcp/connection.rs61}COMMENT
LOWcrates/network/lib/tcp/connection.rs81COMMENT
LOWcrates/network/lib/tcp/connection.rs101 /// Proxy-side channel ends, held until the connection is ESTABLISHED.COMMENT
LOWcrates/network/lib/icmp/error.rs21COMMENT
LOWcrates/network/lib/icmp/relay.rs41COMMENT
LOWcrates/network/lib/netstack/device.rs1//! Slot-based [`smoltcp::phy::Device`] implementation.COMMENT
631 more matches not shown…
Decorative Section Separators134 hits · 375 pts
SeverityFileLineSnippetContext
MEDIUMcrates/network/lib/tcp/proxy.rs1499 // ── extract_http_host ──────────────────────────────────────────────────────COMMENT
MEDIUMcrates/network/lib/tcp/proxy.rs1549 // ── plain-HTTP secret substitution ────────────────────────────────────────COMMENT
MEDIUMcrates/network/lib/netstack/poll.rs332 // ── Phase 1: Drain all guest frames with pre-inspection ──────────COMMENT
MEDIUMcrates/network/lib/netstack/poll.rs487 // ── Phase 2: Ingress egress + maintenance ─────────────────────────COMMENT
MEDIUMcrates/network/lib/netstack/poll.rs504 // ── Phase 3: Service connections + relay data ────────────────────COMMENT
MEDIUMcrates/network/lib/netstack/poll.rs619 // ── Phase 4: Flush relay data + sleep ────────────────────────────COMMENT
MEDIUMcrates/network/lib/netstack/poll.rs1729 // ─────────────────────────────────────────────────────────────────────COMMENT
MEDIUMcrates/network/lib/netstack/poll.rs1742 // ─────────────────────────────────────────────────────────────────────COMMENT
MEDIUMcrates/image/lib/cache/store.rs233 // ── Layer EROFS paths (keyed by diff_id) ─────────────────────────COMMENT
MEDIUMcrates/image/lib/cache/store.rs262 // ── fsmeta EROFS paths (keyed by manifest digest) ─────────────────COMMENT
MEDIUMcrates/image/lib/cache/store.rs286 // ── VMDK descriptor paths (keyed by manifest digest) ────────────COMMENT
MEDIUMcrates/image/lib/cache/store.rs310 // ── Flat ext4 artifact paths (manifest ref → content blob) ───────COMMENT
MEDIUMcrates/image/lib/cache/store.rs441 // ── Staging/tmp paths (downloads, work dirs) ─────────────────────COMMENT
MEDIUMcrates/image/lib/cache/store.rs465 // ── Manifest metadata cache ──────────────────────────────────────COMMENT
MEDIUMcrates/image/lib/cache/store.rs583 // ── Blob cache paths ──────────────────────────────────────────────COMMENT
MEDIUMcrates/metrics-collector/lib/lib.rs28//! ┌─ run loop ─────────────────────────────────────────────┐COMMENT
MEDIUMcrates/metrics-collector/lib/lib.rs32//! └────┬───────────────────────────────────────┬───────────┘COMMENT
MEDIUMcrates/metrics-collector/lib/lib.rs38//! ┌─────────────┐ ┌─────────────┐ ┌─────────────┐COMMENT
MEDIUMcrates/metrics-collector/lib/lib.rs44//! └──────┬──────┘ └──────┬──────┘ └──────┬──────┘COMMENT
MEDIUM…s/migration/lib/m20260410_000001_erofs_image_schema.rs154 // ── Drop old tables (FK-safe order) ──────────────────────────────COMMENT
MEDIUM…s/migration/lib/m20260410_000001_erofs_image_schema.rs193 // ── Create new tables ────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/config.rs1646 // ── Block Root ────────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/config.rs1755 // ── File Mounts ────────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/config.rs1804 // ── Tmpfs ─────────────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/config.rs1829 // ── Disk Mounts ───────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/config.rs1951 // ── Network ───────────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/config.rs2046 // ── Rlimits ───────────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/config.rs2092 // ── Handoff Init ──────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/network.rs227 // ── ioctl helpers ──────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/network.rs323 // ── netlink helpers ────────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/network.rs531 // ── hostname + hosts + resolv.conf ──────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/network.rs593 // ── low-level helpers ──────────────────────────────────────────────COMMENT
MEDIUMcrates/agentd/lib/network.rs625 // ── netlink constants and helpers ──────────────────────────────────COMMENT
MEDIUMsdk/python/microsandbox/types.py12# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py14# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py19# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py21# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py413# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py415# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py531# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py533# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py555# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py557# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py568# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py570# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py617# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py619# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py642# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py644# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py675# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py677# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py838# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py840# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py980# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py982# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py1122# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py1124# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py1210# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py1212# --------------------------------------------------------------------------------------------------COMMENT
MEDIUMsdk/python/microsandbox/types.py1731# --------------------------------------------------------------------------------------------------COMMENT
74 more matches not shown…
Cross-Language Confusion29 hits · 185 pts
SeverityFileLineSnippetContext
HIGHsdk/python/integration/test_volumes.py69 "dd if=/dev/zero of=/scratch/small bs=1M count=1 status=none && echo small-ok",CODE
HIGHsdk/python/integration/test_network.py74 "nc -zv -w 5 1.1.1.1 443 >/dev/null 2>&1 || echo cloudflare-failed; "CODE
HIGHsdk/python/integration/test_network.py75 "nc -zv -w 5 8.8.8.8 443 >/dev/null 2>&1 || echo google-failed"CODE
HIGHsdk/python/integration/test_patches.py23 "test -d /opt/py-sdk && cat /opt/py-sdk/config.txt && cat /opt/py-sdk/link.txt"CODE
HIGHexamples/python/net-secrets/main.py28 "wget -q -O /dev/null --timeout=10 https://example.com && echo OK || echo FAIL"CODE
HIGHexamples/python/net-secrets/main.py28 "wget -q -O /dev/null --timeout=10 https://example.com && echo OK || echo FAIL"CODE
HIGHexamples/python/net-secrets/main.py36 "https://cloudflare.com 2>&1 && echo OK || echo BLOCKED"CODE
HIGHexamples/python/net-secrets/main.py36 "https://cloudflare.com 2>&1 && echo OK || echo BLOCKED"CODE
HIGHexamples/python/net-tls/main.py18 output = await sb.shell("ls /.msb/tls/ca.pem 2>&1 && echo FOUND || echo MISSING")CODE
HIGHexamples/python/net-tls/main.py18 output = await sb.shell("ls /.msb/tls/ca.pem 2>&1 && echo FOUND || echo MISSING")CODE
HIGHexamples/python/net-tls/main.py29 output = await sb.shell("wget -q -O /dev/null --timeout=5 http://example.com && echo OK || echo FAIL")CODE
HIGHexamples/python/net-tls/main.py29 output = await sb.shell("wget -q -O /dev/null --timeout=5 http://example.com && echo OK || echo FAIL")CODE
HIGHexamples/python/net-tls/main.py35 "wget -q -O /dev/null --timeout=10 https://example.com 2>&1 && echo OK || echo FAIL"CODE
HIGHexamples/python/net-tls/main.py35 "wget -q -O /dev/null --timeout=10 https://example.com 2>&1 && echo OK || echo FAIL"CODE
HIGHexamples/python/net-tls/main.py41 "wget --no-check-certificate -q -O /dev/null --timeout=10 https://example.com 2>&1 && echo OK || echo FAIL"CODE
HIGHexamples/python/net-tls/main.py41 "wget --no-check-certificate -q -O /dev/null --timeout=10 https://example.com 2>&1 && echo OK || echo FAIL"CODE
HIGHexamples/python/net-policy/main.py17 output = await sb.shell("wget -q -O /dev/null --timeout=5 http://example.com && echo OK || echo FAIL")CODE
HIGHexamples/python/net-policy/main.py17 output = await sb.shell("wget -q -O /dev/null --timeout=5 http://example.com && echo OK || echo FAIL")CODE
HIGHexamples/python/net-policy/main.py30 output = await sb.shell("wget -q -O /dev/null --timeout=5 http://example.com && echo OK || echo FAIL")CODE
HIGHexamples/python/net-policy/main.py30 output = await sb.shell("wget -q -O /dev/null --timeout=5 http://example.com && echo OK || echo FAIL")CODE
HIGHexamples/python/net-policy/main.py43 output = await sb.shell("wget -q -O /dev/null --timeout=3 http://example.com && echo OK || echo BLOCKED")CODE
HIGHexamples/python/net-policy/main.py43 output = await sb.shell("wget -q -O /dev/null --timeout=3 http://example.com && echo OK || echo BLOCKED")CODE
HIGHexamples/python/net-dns/main.py22 output = await sb.shell("nslookup example.com 2>&1 | grep -c Address || echo 0")CODE
HIGHexamples/python/net-dns/main.py26 output = await sb.shell("nslookup blocked.example.com 2>&1 && echo RESOLVED || echo BLOCKED")CODE
HIGHexamples/python/net-dns/main.py26 output = await sb.shell("nslookup blocked.example.com 2>&1 && echo RESOLVED || echo BLOCKED")CODE
HIGHexamples/python/net-dns/main.py30 output = await sb.shell("nslookup anything.evil.com 2>&1 && echo RESOLVED || echo BLOCKED")CODE
HIGHexamples/python/net-dns/main.py30 output = await sb.shell("nslookup anything.evil.com 2>&1 && echo RESOLVED || echo BLOCKED")CODE
HIGHexamples/python/net-dns/main.py34 output = await sb.shell("nslookup cloudflare.com 2>&1 | grep -c Address || echo 0")CODE
HIGHexamples/python/snapshot-fork/main.py16 await baseline.shell("echo 'shipped via snapshot' > /root/marker.txt && sync")CODE
Hyper-Verbose Identifiers156 hits · 175 pts
SeverityFileLineSnippetContext
LOWsdk/python/integration/test_create_kwargs.py19async def test_create_kwargs_affect_guest_defaults(sandbox_name):CODE
LOWsdk/python/integration/test_create_kwargs.py58async def test_create_kwargs_round_trip_through_config_json(sandbox_name):CODE
LOWsdk/python/integration/test_create_kwargs.py158async def test_create_kwargs_validate_bad_values(CODE
LOWsdk/python/integration/test_lifecycle.py25async def test_create_get_list_connect_stop_start_and_remove(sandbox_name):CODE
LOWsdk/python/integration/test_lifecycle.py126async def test_replace_rejects_duplicate_then_replaces(sandbox_name):CODE
LOWsdk/python/integration/conftest.py16def _isolate_xdist_worker_home() -> None:CODE
LOWsdk/python/integration/test_images.py9async def test_image_list_returns_cached_handles() -> None:CODE
LOWsdk/python/integration/test_images.py19async def test_image_get_missing_raises_typed_error() -> None:CODE
LOWsdk/python/integration/test_images.py24async def test_image_save_missing_raises_typed_error(tmp_path) -> None:CODE
LOWsdk/python/integration/test_images.py32async def test_image_save_and_load_round_trips_archive(sandbox_factory, tmp_path) -> None:CODE
LOWsdk/python/integration/test_images.py54async def test_image_management_round_trips_pulled_sandbox_image(sandbox_factory) -> None:CODE
LOWsdk/python/integration/test_metrics_logs.py39async def test_metrics_snapshot_stream_and_all_sandbox_metrics(sandbox_factory):CODE
LOWsdk/python/integration/test_metrics_logs.py61async def test_logs_snapshot_filters_and_stream_resume(sandbox_factory):CODE
LOWsdk/python/integration/test_volumes.py11async def test_volume_lifecycle_metadata_and_host_fs(volume_factory):CODE
LOWsdk/python/integration/test_volumes.py38async def test_disk_volume_metadata_uses_enums(volume_factory):CODE
LOWsdk/python/integration/test_volumes.py47async def test_named_volume_mount_into_sandbox(volume_factory, sandbox_factory):CODE
LOWsdk/python/integration/test_volumes.py62async def test_tmpfs_mount_enforces_size_limit(sandbox_factory):CODE
LOWsdk/python/integration/test_exec.py14async def test_exec_kwargs_and_options_dict(sandbox_factory):CODE
LOWsdk/python/integration/test_exec.py63async def test_shell_timeout_and_user_env_overrides(sandbox_factory):CODE
LOWsdk/python/integration/test_exec.py79async def test_exec_stream_iteration_collect_wait_and_signal(sandbox_factory):CODE
LOWsdk/python/integration/test_exec.py130async def test_exec_stream_tty_resize_while_receiving(sandbox_factory):CODE
LOWsdk/python/integration/test_exec.py160async def test_exec_stream_missing_binary_surfaces_failure(sandbox_factory):CODE
LOWsdk/python/integration/test_exec.py175async def test_stdin_modes_and_take_stdin_contract(sandbox_factory):CODE
LOWsdk/python/integration/test_exec.py201async def test_rlimits_reject_raw_dicts(sandbox_factory):CODE
LOWsdk/python/integration/test_fs.py11async def test_fs_file_directory_and_metadata_operations(sandbox_factory):CODE
LOWsdk/python/integration/test_fs.py47async def test_fs_streams_and_host_copy_roundtrip(sandbox_factory, tmp_path):CODE
LOWsdk/python/integration/test_network.py24async def test_network_policy_and_port_config_create(sandbox_factory):CODE
LOWsdk/python/integration/test_network.py50async def test_ip_destination_allows_specific_egress(label, destination, sandbox_factory):CODE
LOWsdk/python/integration/test_snapshots.py20async def test_snapshot_create_open_list_and_boot(sandbox_name):CODE
LOWsdk/python/integration/test_patches.py11async def test_rootfs_patches_are_applied(sandbox_factory):CODE
LOWsdk/python/integration/test_pull_progress.py14async def test_create_with_progress_emits_events_and_returns_sandbox(sandbox_name):CODE
LOWsdk/python/integration/test_pull_progress.py59async def test_create_with_progress_result_rejects_on_second_call(sandbox_name):CODE
LOWsdk/python/integration/test_pull_progress.py87async def test_create_with_progress_detached_returns_detached_sandbox(sandbox_name):CODE
LOWsdk/python/integration/test_pull_progress.py142async def test_create_with_progress_failure_surfaces_from_result(sandbox_name):CODE
LOWsdk/python/tests/test_image_source.py19def test_oci_accepts_root_disk_int() -> None:CODE
LOWsdk/python/tests/test_image_source.py29def test_oci_accepts_managed_root_disk() -> None:CODE
LOWsdk/python/tests/test_image_source.py36def test_oci_accepts_tmpfs_root_disk() -> None:CODE
LOWsdk/python/tests/test_image_source.py43def test_oci_accepts_disk_image_root_disk() -> None:CODE
LOWsdk/python/tests/test_image_source.py58def test_oci_accepts_flat_root_disk() -> None:CODE
LOWsdk/python/tests/test_image_source.py73def test_oci_accepts_deprecated_upper_size_mib_alias() -> None:CODE
LOWsdk/python/tests/test_image_source.py84def test_oci_rejects_root_disk_and_upper_size_mib_together() -> None:CODE
LOWsdk/python/tests/test_image_source.py89def test_oci_rejects_raw_root_disk_dict() -> None:CODE
LOWsdk/python/tests/test_image_source.py94def test_oci_rejects_bool_root_disk_size() -> None:CODE
LOWsdk/python/tests/test_image_source.py99def test_direct_image_source_rejects_bool_root_disk_size() -> None:CODE
LOWsdk/python/tests/test_image_source.py110def test_image_namespace_includes_cache_management() -> None:CODE
LOWsdk/python/tests/test_volume_fs_signature.py6def test_copy_and_rename_expose_usable_source_keywords() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py81def test_bind_owner_omitted_when_unset() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py87def test_owner_must_be_paired() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py93def test_owner_rejected_on_tmpfs() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py100def test_owner_rejects_invalid_python_values(value: object) -> None:CODE
LOWsdk/python/tests/test_mount_policies.py165def test_tmpfs_rejects_stat_virt_at_serialization() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py175def test_tmpfs_rejects_host_perms_at_serialization() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py184def test_disk_rejects_stat_virt_at_serialization() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py206def test_named_mode_uses_canonical_enum_name() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py216def test_stat_virtualization_str_values() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py222def test_host_permissions_str_values() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py227def test_security_profile_str_values() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py232def test_deployment_profile_str_values() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py25def test_bind_default_omits_policies() -> None:CODE
LOWsdk/python/tests/test_mount_policies.py33def test_bind_rejects_policy_strings() -> None:CODE
96 more matches not shown…
Unused Imports202 hits · 130 pts
SeverityFileLineSnippetContext
LOWsdk/python/integration/test_create_kwargs.py3CODE
LOWsdk/python/integration/test_lifecycle.py3CODE
LOWsdk/python/integration/conftest.py3CODE
LOWsdk/python/integration/test_images.py1CODE
LOWsdk/python/integration/test_metrics_logs.py3CODE
LOWsdk/python/integration/test_volumes.py3CODE
LOWsdk/python/integration/test_exec.py3CODE
LOWsdk/python/integration/test_fs.py3CODE
LOWsdk/python/integration/test_network.py3CODE
LOWsdk/python/integration/test_snapshots.py3CODE
LOWsdk/python/integration/test_patches.py3CODE
LOWsdk/python/integration/helpers.py3CODE
LOWsdk/python/integration/test_pull_progress.py3CODE
LOWsdk/python/tests/test_image_source.py3CODE
LOWsdk/python/tests/test_mount_policies.py7CODE
LOWsdk/python/tests/test_image_archive.py3CODE
LOWsdk/python/tests/test_patch_file.py3CODE
LOWsdk/python/tests/test_rate_limiters.py3CODE
LOWsdk/python/tests/test_vsock.py3CODE
LOWsdk/python/tests/test_types_enums.py8CODE
LOWsdk/python/tests/test_modify_stub.py3CODE
LOWsdk/python/tests/test_pull_session.py3CODE
LOWsdk/python/tests/test_registry_overrides.py3CODE
LOWsdk/python/tests/test_secret_passthrough.py3CODE
LOWsdk/python/tests/test_network_destinations.py3CODE
LOWsdk/python/tests/test_runtime_binary.py3CODE
LOWsdk/python/microsandbox/events.py3CODE
LOWsdk/python/microsandbox/events.py3CODE
LOWsdk/python/microsandbox/events.py4CODE
LOWsdk/python/microsandbox/events.py4CODE
LOWsdk/python/microsandbox/_cli.py8CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
LOWsdk/python/microsandbox/__init__.py5CODE
142 more matches not shown…
Hallucination Indicators12 hits · 120 pts
SeverityFileLineSnippetContext
CRITICALcrates/network/lib/config/builder.rs370 && (self.config.tls.intercept_ca.cert_path.is_some()CODE
CRITICALcrates/network/lib/config/builder.rs371 != self.config.tls.intercept_ca.key_path.is_some())CODE
CRITICALsdk/rust/lib/sandbox/mod.rs1028 self.config.spec.runtime.entrypoint.as_deref(),CODE
CRITICALsdk/rust/lib/sandbox/mod.rs1029 self.config.spec.runtime.cmd.as_deref(),CODE
CRITICALsdk/rust/lib/sandbox/builder.rs747 self.config.spec.network.ports.push(PublishedPortSpec {CODE
CRITICALsdk/rust/lib/sandbox/builder.rs786 self.config.spec.vsock.routes.push(VsockRouteSpec {CODE
CRITICALsdk/rust/lib/sandbox/builder.rs800 self.config.spec.vsock.routes.push(VsockRouteSpec {CODE
CRITICALsdk/rust/lib/sandbox/builder.rs810 self.config.spec.vsock.routes.push(route);CODE
CRITICALsdk/rust/lib/sandbox/builder.rs1149 let shell = self.config.spec.runtime.shell.as_deref();CODE
CRITICALsdk/rust/lib/sandbox/builder.rs1393 super::validate_hostname(self.config.spec.runtime.hostname.as_deref())?;CODE
CRITICALsdk/rust/lib/sandbox/builder.rs1462 self.config.spec.runtime.entrypoint.as_deref(),CODE
CRITICALsdk/rust/lib/sandbox/builder.rs1463 self.config.spec.runtime.cmd.as_deref(),CODE
Fake / Example Data19 hits · 20 pts
SeverityFileLineSnippetContext
LOWcrates/network/lib/policy/name.rs266 "user@example.com", // userinfo@hostCODE
LOWdocs/api-reference/openapi.json2750 "placeholder"CODE
LOWdocs/api-reference/openapi.json2779 "placeholder": {CODE
LOWdocs/api-reference/openapi.json4740 "placeholder",CODE
LOWdocs/api-reference/openapi.json4760 "placeholder": {CODE
LOWsdk/go/modify_test.go138 if apiKey["placeholder"] != "$API_KEY" {CODE
LOWsdk/go/modify_test.go139 t.Fatalf("placeholder = %v", apiKey["placeholder"])CODE
LOWsdk/go/native/src/lib.rs7091 {"name":"API_KEY","source":{"kind":"env","var":"HOST_API_KEY"},"placeholder":"$API_KEY","allowed_hosts":CODE
LOWsdk/python/tests/test_modify_stub.py52 assert keys == ["env", "value", "store", "placeholder", "allowed_hosts"]CODE
LOWsdk/python/microsandbox/types.py1169 d["placeholder"] = self.placeholderCODE
LOWsdk/python/src/sandbox_handle.rs177 /// `"env"` / `"value"` / `"store"`, plus optional `"placeholder"` andCOMMENT
LOWsdk/python/src/helpers.rs1570 let placeholder: Option<String> = extract_opt(secret, "placeholder")?;CODE
LOWsdk/python/src/sandbox.rs813 /// `"env"` / `"value"` / `"store"`, plus optional `"placeholder"` andCOMMENT
LOWsdk/python/src/sandbox.rs1268 "placeholder" => placeholder = Some(extract_secret_str(&name, "placeholder", obj)?),CODE
LOWsdk/python/src/sandbox.rs2284 assert_eq!(secrets[0]["placeholder"], "$API_KEY");CODE
LOWsdk/rust/lib/sandbox/modify.rs3632 .is_some_and(|reason| reason.contains("placeholder"))CODE
LOWpackages/microsandbox-types/rust/tests/config_patch.rs202 "placeholder": placeholderCODE
LOWpackages/microsandbox-types/rust/lib/domain.rs2299 .field("placeholder", &self.placeholder)CODE
LOWpackages/microsandbox-types/rust/lib/modify.rs407 .field("placeholder", &self.placeholder)CODE
Modern AI Meta-Vocabulary4 hits · 10 pts
SeverityFileLineSnippetContext
MEDIUMREADME.md421> ⏵ **[GSA TTS Agentic Coding Quickstart](https://github.com/GSA-TTS/agentic-coding-quickstart)**<br />CODE
MEDIUMREADME.md427> ⏵ **[Agentic Usability by PSPDFKit Labs](https://github.com/PSPDFKit-labs/agentic-usability)**<br />CODE
MEDIUMpackages/agent-client/rust/lib/stream.rs1//! Generic stream handle scaffold.COMMENT
MEDIUMpackages/agent-client/rust/lib/stream.rs53 /// This scaffold is intentionally not wired to a routing implementation yet.COMMENT
Deep Nesting10 hits · 8 pts
SeverityFileLineSnippetContext
LOWsdk/python/tests/test_modify_stub.py29CODE
LOWsdk/python/microsandbox/types.py710CODE
LOWsdk/python/microsandbox/types.py999CODE
LOWsdk/python/microsandbox/types.py1673CODE
LOWscripts/sync-docs-openapi.py154CODE
LOWscripts/sync-docs-openapi.py237CODE
LOWscripts/ci/publish-crates.py158CODE
LOWscripts/ci/publish-crates.py207CODE
LOWscripts/ci/validate_linux_glibc.py117CODE
LOWscripts/ci/validate_linux_glibc.py153CODE
Verbosity Indicators4 hits · 8 pts
SeverityFileLineSnippetContext
LOWcrates/image/lib/registry/client.rs384 // Step 1: Early cache check using persisted image metadata.COMMENT
LOWcrates/image/lib/registry/client.rs425 // Step 2: Resolve manifest.COMMENT
LOWcrates/image/lib/registry/client.rs444 // Step 3: Parse config.COMMENT
LOWcrates/image/lib/registry/client.rs447 // Step 4: Get layer descriptors.COMMENT
Structural Annotation Overuse4 hits · 8 pts
SeverityFileLineSnippetContext
LOWcrates/image/lib/registry/client.rs384 // Step 1: Early cache check using persisted image metadata.COMMENT
LOWcrates/image/lib/registry/client.rs425 // Step 2: Resolve manifest.COMMENT
LOWcrates/image/lib/registry/client.rs444 // Step 3: Parse config.COMMENT
LOWcrates/image/lib/registry/client.rs447 // Step 4: Get layer descriptors.COMMENT
Self-Referential Comments2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMexamples/python/volume-named/main.py9 # Create a named volume.COMMENT
MEDIUMexamples/python/fs-read-stream/main.py21 # Create a 10 MiB file with random data inside the sandbox.COMMENT
Excessive Try-Catch Wrapping5 hits · 5 pts
SeverityFileLineSnippetContext
LOWsdk/python/integration/conftest.py52 except Exception:CODE
LOWsdk/python/tests/test_secret_passthrough.py69 except Exception as exc:CODE
LOWexamples/python/lifecycle-convergence/main.py27 except Exception:CODE
LOWexamples/python/lifecycle-convergence/main.py201 except Exception:CODE
LOWexamples/python/net-ports/main.py34 except Exception as e:CODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMsdk/rust/Cargo.toml20# Exposes the archive walker to the fuzz harness (sdk/rust/fuzz). Never enabled in shipping builds.COMMENT
Modern Structural Boilerplate2 hits · 2 pts
SeverityFileLineSnippetContext
LOWsdk/python/microsandbox/events.py6__all__ = ["ExecEvent", "ExecEventType", "PullEvent", "PullEventType"]CODE
LOWsdk/python/microsandbox/__init__.py189__all__ = [CODE
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWscripts/bump-version.sh5# Usage:COMMENT