A scalable, distributed, collaborative, document-graph database, for the realtime web
This report summarizes scanner evidence for surrealdb/surrealdb, a Rust project with 33,113 GitHub stars. SynthScan examined 572,712 lines of code across 1915 source files, recording 1973 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 4.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1749 finding(s).
Are imports declared and package/API names verified? 64 finding(s).
Are wrappers, guards, and repeated structures necessary? 163 finding(s).
Which changes need focused human review? 1973 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1973 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 361 | COMMENT | |
| LOW | Cargo.toml | 381 | bool_assert_comparison = "allow" | COMMENT |
| LOW | Cargo.toml | 401 | # https://rust-lang.github.io/rust-clippy/master/#disallowed_methods | COMMENT |
| LOW | Cargo.toml | 421 | implicit_clone = "warn" | COMMENT |
| LOW | Cargo.toml | 441 | # https://rust-lang.github.io/rust-clippy/master/#mutex_atomic | COMMENT |
| LOW | Cargo.toml | 461 | redundant_clone = "warn" | COMMENT |
| LOW | Cargo.toml | 481 | # SurrealDB relies on async functions in the AST parser and executor to avoid stack overflows. | COMMENT |
| LOW | deny.toml | 1 | # See all available configuration options at: | COMMENT |
| LOW | deny.toml | 21 | # The lint level for when a crate version requirement is set to `*`. | COMMENT |
| LOW | deny.toml | 41 | allow-registry = ["https://github.com/rust-lang/crates.io-index"] | COMMENT |
| LOW | deny.toml | 61 | # - for RUSTSEC-2024-0436, paste is now unmaintained and archived, but we only use paste in tests | COMMENT |
| LOW | Makefile.ci.toml | 21 | # Adjacent-pair upgrade chain for language upgrade tests. Each consecutive | COMMENT |
| LOW | Makefile.ci.toml | 641 | COMMENT | |
| LOW | language-tests/src/cmd/bench/run.rs | 61 | } | COMMENT |
| LOW | language-tests/src/cmd/bench/run.rs | 901 | } | COMMENT |
| LOW | language-tests/src/cmd/bench/run.rs | 961 | } | COMMENT |
| LOW | language-tests/src/cmd/bench/stats/univariate/sample.rs | 1 | use std::{mem, ops}; | COMMENT |
| LOW | language-tests/src/cmd/bench/stats/univariate/sample.rs | 161 | /// Returns the variance of the sample | COMMENT |
| LOW | …tests/src/cmd/bench/stats/univariate/outliers/tukey.rs | 1 | //! Tukey's method | COMMENT |
| LOW | …tests/src/cmd/bench/stats/univariate/outliers/tukey.rs | 21 | //! | COMMENT |
| LOW | …e-tests/src/cmd/bench/stats/univariate/outliers/mod.rs | 1 | //! Classification of outliers | COMMENT |
| LOW | language-tests/src/cmd/upgrade/mod.rs | 21 | /// only when the requirement itself has no prerelease. | COMMENT |
| LOW | language-tests/src/cmd/run/provisioner.rs | 61 | // Enable a temporary directory so TEMPFILES queries route to the | COMMENT |
| LOW | language-tests/src/cmd/run/provisioner.rs | 141 | ds.bootstrap().await?; | COMMENT |
| LOW | language-tests/src/cmd/run/provisioner.rs | 161 | /// the `delr` key cap and the tombstone build-up of wiping on every test. | COMMENT |
| LOW | language-tests/src/tests/schema/mod.rs | 81 | #[serde(rename_all = "kebab-case")] | COMMENT |
| LOW | language-tests/src/tests/schema/mod.rs | 121 | pub timeout: BoolOr<TestDuration>, | COMMENT |
| LOW | language-tests/src/tests/schema/mod.rs | 381 | { | COMMENT |
| LOW | language-tests/src/tests/schema/mod.rs | 881 | #[serde(rename_all = "kebab-case")] | COMMENT |
| LOW | language-tests/src/tests/schema/mod.rs | 901 | /// single file. The key is a short variant name (shown in the run label and | COMMENT |
| LOW | language-tests/src/tests/schema/mod.rs | 921 | #[serde(default = "default_duration::<100000>")] | COMMENT |
| LOW | surrealdb/token/src/lib.rs | 1 | //! SurrealQL token lexer definitions | COMMENT |
| LOW | surrealdb/token/src/base.rs | 21 | pub enum BaseTokenKind { | COMMENT |
| LOW | surrealdb/token/src/base.rs | 161 | #[regex(r#"r'([^'\\]|\\.)*'"#)] | COMMENT |
| LOW | surrealdb/token/src/base.rs | 181 | #[regex(r"(?&bracket_ident)")] | COMMENT |
| LOW | surrealdb/token/src/base.rs | 201 | Decimal, | COMMENT |
| LOW | surrealdb/token/src/base.rs | 301 | #[regex(r"(?i)CREATE")] | COMMENT |
| LOW | surrealdb/token/src/base.rs | 321 | #[regex(r"(?i)DIMENSION")] | COMMENT |
| LOW | surrealdb/token/src/base.rs | 361 | KwExpunge, | COMMENT |
| LOW | surrealdb/token/src/base.rs | 461 | #[regex(r"(?i)ML")] | COMMENT |
| LOW | surrealdb/token/src/base.rs | 541 | KwRefresh, | COMMENT |
| LOW | surrealdb/token/src/base.rs | 601 | #[regex(r"(?i)TABLE")] | COMMENT |
| LOW | surrealdb/token/src/datetime.rs | 1 | use logos::Logos; | COMMENT |
| LOW | surrealdb/token/src/record_id_key.rs | 21 | OpenBracket, | COMMENT |
| LOW | surrealdb/token/src/js_function.rs | 21 | TemplateOpen, | COMMENT |
| LOW | surrealdb/types/tests/error_types.rs | 921 | // Round-trip | COMMENT |
| LOW | surrealdb/types/tests/error_types.rs | 1081 | fn test_error_wire_not_allowed_auth_not_allowed_iam() { | COMMENT |
| LOW | surrealdb/types/tests/error_types.rs | 1621 | // "message": "Already connected", | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 21 | mod kind; | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 41 | /// - `#[surreal(crate = "path")]` - Specify a custom path to the types crate (e.g., | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 61 | /// | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 81 | /// #[derive(SurrealValue)] | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 101 | /// | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 121 | /// types. For example, if type `A` contains `B` and `B` contains `A`, each | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 161 | /// - Escape hatches: `(expr)` for arbitrary Rust expressions | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 181 | /// }); | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 201 | /// write_sql!(f, fmt, "format string", arg1, arg2, ...) | COMMENT |
| LOW | surrealdb/types/derive/src/lib.rs | 221 | /// let fmt = SqlFormat::SingleLine; | COMMENT |
| LOW | surrealdb/types/derive/src/kind.rs | 281 | /// - Literals: `true`, `false`, `42`, `"hello"` | COMMENT |
| LOW | surrealdb/types/src/error.rs | 41 | // ----------------------------------------------------------------------------- | COMMENT |
| 1599 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | deny.toml | 4 | # -------------------------------------------------- | COMMENT |
| MEDIUM⚡ | deny.toml | 6 | # -------------------------------------------------- | COMMENT |
| MEDIUM⚡ | deny.toml | 14 | # -------------------------------------------------- | COMMENT |
| MEDIUM⚡ | deny.toml | 16 | # -------------------------------------------------- | COMMENT |
| MEDIUM | deny.toml | 30 | # -------------------------------------------------- | COMMENT |
| MEDIUM | deny.toml | 32 | # -------------------------------------------------- | COMMENT |
| MEDIUM | deny.toml | 43 | # -------------------------------------------------- | COMMENT |
| MEDIUM | deny.toml | 45 | # -------------------------------------------------- | COMMENT |
| MEDIUM | deny.toml | 82 | # -------------------------------------------------- | COMMENT |
| MEDIUM | deny.toml | 84 | # -------------------------------------------------- | COMMENT |
| MEDIUM | Makefile.ci.toml | 33 | # -------------------------------------------------- | COMMENT |
| MEDIUM | Makefile.ci.toml | 35 | # -------------------------------------------------- | COMMENT |
| MEDIUM⚡ | Makefile.ci.toml | 817 | # -------------------------------------------------- | STRING |
| MEDIUM⚡ | Makefile.ci.toml | 819 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 267 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 269 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 415 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 417 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 519 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 521 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 575 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 577 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 642 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 644 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 696 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 698 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 725 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 727 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 753 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 755 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 932 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 934 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 1009 | # -------------------------------------------------- | STRING |
| MEDIUM | Makefile.ci.toml | 1011 | # -------------------------------------------------- | STRING |
| MEDIUM | .rustfmt.toml | 9 | # ----------------------------------- | COMMENT |
| MEDIUM | .rustfmt.toml | 11 | # ----------------------------------- | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 5 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 7 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 111 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 113 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 221 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 223 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 317 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 319 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 449 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 453 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 548 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 552 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 658 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/types/tests/surreal_value/collections.rs | 661 | // ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | surrealdb/core/src/catalog/record.rs | 306 | // ───────── | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/key/graph/mod.rs | 9 | //! ┌─────────────────────┬─ ─ ─ ─ ─ ─ ─ ─ ─ ┐ | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/key/graph/mod.rs | 11 | //! ┌────┴─────┐ etl ┌────────────┐ etr ┌──────────┐ | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/key/graph/mod.rs | 12 | //! │ left │───────▶│ rid (edge) │───────▶│ right │ | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/key/graph/mod.rs | 13 | //! └──────────┘ in └────────────┘ out └────┬─────┘ | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/key/graph/mod.rs | 15 | //! └ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─┴───────────────────┘ | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/exec/index.rs | 14 | //! ┌─────────────────────────────────────────────────────────────────┐ | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/exec/index.rs | 16 | //! ├─────────────────────────────────────────────────────────────────┤ | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/exec/index.rs | 19 | //! └─────────────────────────────────────────────────────────────────┘ | COMMENT |
| MEDIUM⚡ | surrealdb/core/src/exec/index.rs | 22 | //! ┌─────────────────────────────────────────────────────────────────┐ | COMMENT |
| 82 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | language-tests/src/cmd/graphql.rs | 50 | let Some(variables) = case.config.parsed.graphql.variables.as_ref() else { | CODE |
| CRITICAL | language-tests/src/cmd/graphql.rs | 72 | if let Some(operation) = case.config.parsed.graphql.operation.as_ref() { | CODE |
| CRITICAL | language-tests/src/cmd/bench/run.rs | 338 | let datasets = run.case.test.config.parsed.bench.datasets.clone(); | CODE |
| CRITICAL | language-tests/src/cmd/bench/run.rs | 842 | operation: run.case.test.config.parsed.graphql.operation.clone(), | CODE |
| CRITICAL⚡ | language-tests/src/cmd/upgrade/mod.rs | 180 | .with_filter(|x| no_results || x.test.config.parsed.test.results.is_some()) | CODE |
| CRITICAL⚡ | language-tests/src/cmd/upgrade/mod.rs | 189 | if let Some(ver_req) = x.test.config.parsed.test.version.as_ref() | CODE |
| CRITICAL⚡ | language-tests/src/cmd/upgrade/mod.rs | 195 | if let Some(ver_req) = x.test.config.parsed.test.importing_version.as_ref() | CODE |
| CRITICAL | language-tests/src/cmd/run/mod.rs | 109 | set_builder.with_filter(|x| x.test.config.parsed.test.results.is_none()) | CODE |
| CRITICAL | language-tests/src/tests/report/update.rs | 21 | let mut doc = self.case.test.config.toml.clone().unwrap_or_default(); | CODE |
| CRITICAL | language-tests/src/tests/report/update.rs | 33 | if let Some(slice) = self.case.test.config.range.clone() { | CODE |
| CRITICAL | surrealdb/src/lib.rs | 186 | self.surreal.inner.waiter.0.send(Some(WaitFor::Connection)).ok(); | CODE |
| CRITICAL | surrealdb/src/method/use_db.rs | 53 | self.client.inner.waiter.0.send(Some(WaitFor::Database)).ok(); | CODE |
| CRITICAL | surrealml/core/src/execution/compute.rs | 100 | let mut buffer = Vec::with_capacity(self.surml_file.header.keys.store.len()); | CODE |
| CRITICAL | surrealml/core/src/execution/compute.rs | 211 | if self.surml_file.header.output.normaliser.is_none() { | CODE |
| CRITICAL | surrealml/core/src/execution/compute.rs | 216 | let output_normaliser = match self.surml_file.header.output.normaliser.as_ref() { | CODE |
| CRITICAL | .github/workflows/community-pr-label.yml | 52 | const author = context.payload.pull_request.user.login.toLowerCase(); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | Makefile.ci.toml | 810 | # Generate coverage report, excluding the harness code | STRING |
| MEDIUM | surrealdb/core/src/kvs/rocksdb/tests.rs | 604 | // divisible by 64), but pairing them keeps the test robust | COMMENT |
| MEDIUM | surrealdb/core/src/iam/jwks.rs | 209 | // default, we could allow users to leverage this. This will most likely | COMMENT |
| MEDIUM | surrealdb/core/src/iam/verify.rs | 76 | // Now that the audience claim is validated by default, we could allow users to leverage this. | COMMENT |
| MEDIUM | surrealdb/core/src/graphql/cache.rs | 211 | // today, but pinning it here keeps the fingerprint robust against future | COMMENT |
| MEDIUM | …realdb/core/src/exec/pre_decode_filter/wire_literal.rs | 174 | // `full_wire.len() - utf8.len()` is robust against future | COMMENT |
| MEDIUM | surrealdb/core/src/doc/alter.rs | 175 | // Rebuild the record id from the coerced value using the robust | COMMENT |
| MEDIUM | surrealdb/mcp/src/tools/mod.rs | 394 | /// formatted SQL so the test stays robust against display tweaks. | COMMENT |
| MEDIUM | surrealdb/parser/src/parse/special.rs | 783 | // The last is the least robust and relies on the fact the `()` `{}` and `[]` are also part | COMMENT |
| MEDIUM | surrealdb/ast/examples/working_with_ast.rs | 47 | // Essentially creating a linked list of nodes. | COMMENT |
| MEDIUM | surrealdb/src/opt/auth.rs | 209 | /// seamless long-term sessions while maintaining security. | COMMENT |
| MEDIUM | surrealdb/src/opt/auth.rs | 282 | /// tokens when the current access token expires. This enables seamless user | COMMENT |
| MEDIUM⚡ | scripts/bench/measure.sh | 4 | # and print a machine-readable summary of the harness's statistics (time, median, | COMMENT |
| MEDIUM⚡ | scripts/bench/measure.sh | 21 | # The comparison block is produced by the harness itself | COMMENT |
| MEDIUM | scripts/bench/measure.sh | 71 | # Pull the verdict + the time/median/change lines straight from the harness output. | COMMENT |
| MEDIUM | scripts/bench/measure.sh | 85 | # since the harness prints Rust Duration debug formatting, e.g. "1.2ms"/"850µs"). | COMMENT |
| MEDIUM | scripts/bench/profile.sh | 6 | # How: the bench harness prints `__BENCH_MEASURE_START__` on stderr (when | COMMENT |
| MEDIUM | scripts/bench/profile.sh | 83 | # BENCH_MARKERS makes the harness emit the measured-region sentinels on stderr. | COMMENT |
| MEDIUM | .github/workflows/release.yml | 4 | # For comprehensive documentation, see doc/RELEASING.md | COMMENT |
| MEDIUM | .github/workflows/language-bench-quick.yml | 10 | # job runs read-only against that store: the harness `fetch_latest`es the `main` | COMMENT |
| MEDIUM | .github/workflows/language-bench-quick.yml | 108 | # Read-only against the shared store (NO --save): the harness fetches the | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 545 | # Both workspaces are cached: `language-tests` for the test harness, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | surrealdb/core/tests/function.rs | 1082 | "Lehem ipsum dolor sit amet, dicta latine an eam." | CODE |
| LOW | surrealdb/core/tests/function.rs | 1185 | "Lorem ipsum dolor sit amet, dicta latine an eam." | CODE |
| LOW | surrealdb/core/tests/function.rs | 1185 | "Lorem ipsum dolor sit amet, dicta latine an eam." | CODE |
| LOW | surrealdb/core/tests/function.rs | 1271 | "Lehem ipsum dolor sit amet, dicta latine an eam." | CODE |
| LOW⚡ | surrealdb/core/benches/statements.rs | 56 | "CREATE person SET name = 'Test', age = 30, email = 'test@example.com', scores = [90, 80, 70], address = {{ street: '1 | CODE |
| LOW⚡ | surrealdb/core/benches/statements.rs | 65 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit.".repeat(10_000) | CODE |
| LOW⚡ | surrealdb/core/benches/statements.rs | 65 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit.".repeat(10_000) | CODE |
| LOW | surrealdb/core/src/idx/ft/fulltext.rs | 1292 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus | CODE |
| LOW | surrealdb/core/src/idx/ft/fulltext.rs | 1292 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque elementum dignissim ultricies. Fusce rhoncus | CODE |
| LOW | surrealdb/core/src/expr/statements/insert.rs | 275 | // INSERT INTO person (id, name) VALUES (1, 'John Doe') | COMMENT |
| LOW | surrealdb/core/src/expr/statements/insert.rs | 278 | // v: { name: 'John Doe' } | COMMENT |
| LOW | surrealdb/core/src/iam/signup.rs | 64 | /// ("email".to_string(), "user@example.com".into()), | COMMENT |
| LOW | surrealdb/core/src/iam/signup.rs | 145 | /// ("email".to_string(), "user@example.com".into()), | COMMENT |
| LOW | surrealdb/core/src/iam/signin.rs | 223 | /// ("email".to_string(), "user@example.com".into()), | COMMENT |
| LOW | surrealdb/core/src/graphql/auth.rs | 35 | /// authentication variables (e.g., `{ email: "user@example.com", pass: "secret" }`). | COMMENT |
| LOW | surrealdb/tests/api_integration/basic.rs | 370 | SET name = 'John Doe' | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 381 | assert_eq!(name, "John Doe"); | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 389 | let _ = db.query("CREATE user:john SET name = 'John Doe'").await.unwrap().check().unwrap(); | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 394 | assert_eq!(name, "John Doe"); | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 417 | .bind(("name", "John Doe".to_string())) | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 423 | assert_eq!(record.name, "John Doe"); | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 432 | assert_eq!(record.name, "John Doe"); | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 436 | name: "John Doe".to_owned(), | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 443 | assert_eq!(record.name, "John Doe"); | CODE |
| LOW | surrealdb/tests/api_integration/basic.rs | 522 | name: "John Doe".to_owned(), | CODE |
| LOW | surrealdb/tests/api_integration/basic.rs | 529 | name: "John Doe".to_owned(), | CODE |
| LOW | surrealdb/tests/api_integration/basic.rs | 543 | name: "John Doe".to_owned(), | CODE |
| LOW | surrealdb/tests/api_integration/basic.rs | 551 | name: "Jane Doe".to_owned(), | CODE |
| LOW | surrealdb/tests/api_integration/basic.rs | 581 | name: "John Doe".to_owned(), | CODE |
| LOW | surrealdb/tests/api_integration/basic.rs | 591 | name: "John Doe".to_owned(), | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 1112 | name: "Jane Doe".to_owned(), | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 1116 | assert_eq!(user.unwrap().name, "Jane Doe"); | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 1120 | name: "John Doe".to_owned(), | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 1124 | assert_eq!(user.unwrap().name, "John Doe"); | CODE |
| LOW⚡ | surrealdb/tests/api_integration/basic.rs | 1126 | assert_eq!(user.unwrap().name, "John Doe"); | CODE |
| LOW | surrealdb/src/method/query.rs | 231 | /// .bind(("name", "John Doe")) | COMMENT |
| LOW | surrealdb/src/method/query.rs | 252 | /// name: "John Doe", | COMMENT |
| LOW | surrealdb/src/method/query.rs | 854 | title: "Lorem Ipsum".to_owned(), | CODE |
| LOW | surrealdb/src/method/query.rs | 882 | title: "Lorem Ipsum".to_owned(), | CODE |
| LOW | surrealdb/src/method/query.rs | 883 | body: "Lorem Ipsum Lorem Ipsum".to_owned(), | CODE |
| LOW | surrealdb/src/method/query.rs | 918 | title: "Lorem Ipsum".to_owned(), | CODE |
| LOW | surrealdb/src/method/query.rs | 919 | body: "Lorem Ipsum Lorem Ipsum".to_owned(), | CODE |
| LOW | surrealdb/src/method/tests/mod.rs | 88 | DB.query("CREATE user:john SET name = $name").bind(("name", "John Doe")).await.unwrap(); | CODE |
| LOW | surrealdb/src/method/tests/mod.rs | 93 | name: "John Doe".to_owned(), | CODE |
| LOW | tests/graphql_integration.rs | 2311 | CREATE author:a1 SET name = "Jane Doe"; | CODE |
| LOW | tests/graphql_integration.rs | 2348 | assert_eq!(author["name"], "Jane Doe"); | CODE |
| LOW | tests/graphql_integration.rs | 2387 | assert_eq!(wrote_in[0]["in"]["name"], "Jane Doe"); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | surrealdb/core/tests/index.rs | 494 | // Step 1: Create a shared datastore and set up 3 namespaces × 3 databases = 9 isolated | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 506 | // Step 2: Start a background index compaction loop that continuously triggers compaction | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 511 | // Step 3: For each session (namespace/database pair), define multiple indexes of different | COMMENT |
| LOW | surrealdb/core/tests/index.rs | 543 | // Step 4: For each of the 9 sessions, spawn 6 concurrent write tasks (3 for `user` records | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 590 | // Step 5: Let the concurrent writes and index compaction run together for 10 seconds, | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 595 | // Step 6: Await all write tasks and the compaction loop, propagating any errors. | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 601 | // Step 7: Verify that the background compaction loop exited cleanly. This stress test | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 85 | // Step 1: Populate the cache with an empty index list | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 89 | // Step 2: Add an index via put_tb_index | COMMENT |
| LOW | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 101 | // Step 3: Query all indexes again — this must see the new index | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 168 | // Step 1: Populate the cache with an empty field list | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 172 | // Step 2: Add a field via put_tb_field | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 180 | // Step 3: Query all fields again — this must see the new field | COMMENT |
| LOW | surrealdb/core/src/catalog/compat/README.md | 69 | ### Step 1: Run the generator | COMMENT |
| LOW | surrealdb/core/src/catalog/compat/README.md | 77 | ### Step 2: Copy the output | COMMENT |
| LOW | surrealdb/core/src/catalog/compat/README.md | 91 | ### Step 3: Update the hash check | COMMENT |
| LOW | surrealdb/core/src/catalog/compat/README.md | 102 | ### Step 4: Verify tests pass | COMMENT |
| LOW | surrealdb/core/src/catalog/compat/README.md | 114 | ### Step 1: Update the fixtures used in the generator (if needed) | COMMENT |
| LOW⚡ | surrealdb/core/src/catalog/compat/README.md | 128 | ### Step 2: Generate and save the bytes | COMMENT |
| LOW⚡ | surrealdb/core/src/catalog/compat/README.md | 136 | ### Step 3: Add the module | COMMENT |
| LOW⚡ | surrealdb/core/src/catalog/compat/README.md | 143 | ### Step 4: Add tests | COMMENT |
| LOW⚡ | surrealdb/core/src/catalog/compat/README.md | 152 | ### Step 5: Add hash protection | COMMENT |
| LOW | surrealdb/core/src/val/record_id.rs | 237 | // NOTE: This method dictates how coversion between values and record id keys | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | surrealdb/core/tests/index.rs | 494 | // Step 1: Create a shared datastore and set up 3 namespaces × 3 databases = 9 isolated | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 506 | // Step 2: Start a background index compaction loop that continuously triggers compaction | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 511 | // Step 3: For each session (namespace/database pair), define multiple indexes of different | COMMENT |
| LOW | surrealdb/core/tests/index.rs | 543 | // Step 4: For each of the 9 sessions, spawn 6 concurrent write tasks (3 for `user` records | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 590 | // Step 5: Let the concurrent writes and index compaction run together for 10 seconds, | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 595 | // Step 6: Await all write tasks and the compaction loop, propagating any errors. | COMMENT |
| LOW⚡ | surrealdb/core/tests/index.rs | 601 | // Step 7: Verify that the background compaction loop exited cleanly. This stress test | COMMENT |
| LOW | surrealdb/core/src/idx/trees/hnsw/index.rs | 729 | // If there is a filter, we need to check if the record is truthy | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 85 | // Step 1: Populate the cache with an empty index list | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 89 | // Step 2: Add an index via put_tb_index | COMMENT |
| LOW | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 101 | // Step 3: Query all indexes again — this must see the new index | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 168 | // Step 1: Populate the cache with an empty field list | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 172 | // Step 2: Add a field via put_tb_field | COMMENT |
| LOW⚡ | surrealdb/core/src/kvs/tests/tx_cache_test.rs | 180 | // Step 3: Query all fields again — this must see the new field | COMMENT |
| LOW | surrealdb/core/src/syn/parser/stmt/mod.rs | 306 | // ANALYZE is not a reserved keyword, so we need to check if it's an identifier | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | surrealml/tests/scripts/build_assets.py | 0 | checks to see if a directory exists and deletes it if it does. :param dir_path: the path to the directory. | STRING |
| HIGH | surrealml/tests/scripts/local_build.py | 0 | checks to see if a directory exists and deletes it if it does. :param dir_path: the path to the directory. | STRING |
| HIGH | surrealml/tests/model_builder/utils.py | 0 | checks to see if a directory exists and deletes it if it does. :param dir_path: the path to the directory. | STRING |
| HIGH | surrealml/tests/scripts/build_assets.py | 0 | checks to see if a file exists and deletes it if it does. :param file_path: the path to the file. | STRING |
| HIGH | surrealml/tests/scripts/local_build.py | 0 | checks to see if a file exists and deletes it if it does. :param file_path: the path to the file. | STRING |
| HIGH | surrealml/tests/model_builder/utils.py | 0 | checks to see if a file exists and deletes it if it does. :param file_path: the path to the file. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/crud-bench.yml | 388 | # Create a fallback report if analysis failed | COMMENT |
| MEDIUM | .github/workflows/bench.yml | 77 | # # Create a summary of the comparison | COMMENT |
| MEDIUM | .github/workflows/bench.yml | 201 | # Create a summary of the comparison | COMMENT |
| MEDIUM | .github/scripts/bump-nightly-version.sh | 73 | # Create a branch for the PR | COMMENT |
| MEDIUM | .github/scripts/bump-release-version.sh | 94 | # Create a branch for the PR | COMMENT |
| MEDIUM | .github/actions/publish-crate/action.yml | 53 | # Create a temporary branch in case the git ref is not a branch | COMMENT |
| MEDIUM | .github/actions/publish-crate/action.yml | 71 | # Create a temporary branch in case the git ref is not a branch | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | surrealml/tests/unit_tests/test_surml_file.py | 25 | print(f"Error: surmlcache : {e.strerror}") | CODE |
| MEDIUM | surrealml/tests/unit_tests/engine/test_torch.py | 24 | print(f"Error: surmlcache : {e.strerror}") | CODE |
| MEDIUM | surrealml/tests/unit_tests/engine/test_sklearn.py | 25 | print(f"Error: surmlcache : {e.strerror}") | CODE |
| LOW | .github/scripts/quiet_system.py | 34 | except Exception as e: | CODE |
| LOW | .github/scripts/quiet_system.py | 53 | except Exception as e: | CODE |
| LOW | .github/scripts/quiet_system.py | 76 | except Exception as e: | CODE |
| MEDIUM | .github/scripts/analyze_benchmark.py | 20 | print("Error: Python 3.9 or higher is required for secure path validation", file=sys.stderr) | CODE |
| LOW | .github/scripts/analyze_benchmark.py | 114 | except Exception: | CODE |
| LOW | .github/scripts/analyze_benchmark.py | 135 | except Exception as e: | CODE |
| LOW | .github/scripts/analyze_benchmark.py | 569 | except Exception as e: | CODE |
| MEDIUM | .github/scripts/analyze_benchmark.py | 570 | print(f"Error during analysis: {e}", file=sys.stderr) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docker/DOCKER.md | 135 | The same behavior can be acomplished without Docker Compose by providing the `-u` or `--user` argument to [`docker run`] | CODE |
| MEDIUM | surrealdb/server/src/cli/module/init_cmd.rs | 157 | // Rust scaffold | COMMENT |
| MEDIUM | .github/workflows/release.yml | 141 | # This orchestration job runs against a different branch than the code it | COMMENT |
| MEDIUM | .github/workflows/release.yml | 636 | # This orchestration job runs against a different branch than the code it | COMMENT |
| MEDIUM | surrealism/runtime/src/config.rs | 10 | /// which scaffold to generate) and `build` (to choose which toolchain to | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | surrealml/tests/model_builder/utils.py | 19 | # Check if the package is installed | COMMENT |
| LOW | .github/workflows/ci.yml | 674 | # Check if any job failed (skipped is ok for conditional jobs) | COMMENT |
| LOW | .github/scripts/bump-nightly-version.sh | 102 | # Check if PR already exists | COMMENT |
| LOW | .github/scripts/bump-release-version.sh | 123 | # Check if PR already exists | COMMENT |
| LOW | .github/scripts/analyze_benchmark.py | 472 | # Check if this key_type has any operations | COMMENT |
| LOW | .github/actions/publish-crate/action.yml | 78 | # Check if the failure was because everything is already published | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | surrealdb/types/src/sql.rs | 21 | /// Example usage: | COMMENT |
| LOW⚡ | scripts/bench/measure.sh | 11 | # Usage: | COMMENT |
| LOW | scripts/bench/profile.sh | 15 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/scripts/analyze_benchmark.py | 114 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/scripts/quiet_system.py | 80 | CODE | |
| LOW | .github/scripts/analyze_benchmark.py | 92 | CODE | |
| LOW | .github/scripts/analyze_benchmark.py | 143 | CODE | |
| LOW | .github/scripts/analyze_benchmark.py | 304 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | surrealdb/parser/src/parse/stmt/define.rs | 755 | // Don't forget to update the expectation strings inside the macro if you ever | COMMENT |
| LOW | surrealdb/parser/src/parse/stmt/alter.rs | 1354 | // Don't forget to update the expectation strings inside the macro if | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | surrealml/tests/scripts/local_build.py | 36 | def find_and_move_rust_surrealml_file(start_path: os.path, destination_path: os.path, new_name: str) -> None: | CODE |
| LOW | surrealml/tests/scripts/ci_local_build.py | 11 | def find_and_move_rust_surrealml_file(start_path: os.path, destination_path: os.path, new_name: str) -> None: | CODE |
| LOW | .github/scripts/analyze_benchmark.py | 62 | def _validate_and_resolve_input_path(file_path: Path, base_dir: Path) -> Optional[Path]: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | surrealml/tests/unit_tests/test_rust_adapter.py | 3 | CODE |