1.0

Adjusted Signal

1.0

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

6.5K

Stars

Go Template

Language

3.0M

Lines of Code

5.9K

Files

2.9K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 2132 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.4/100 · LOW

Are imports declared and package/API names verified? 720 finding(s).

Agent Over-Engineering Ratio 2.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 1452 finding(s).

PR Review Velocity Impact 4.9/100 · LOW

Which changes need focused human review? 2864 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 5HIGH 2MEDIUM 22LOW 2835

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2864 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers1440 hits · 1450 pts

Severity	File	Line	Snippet	Context
LOW	ui/app/controllers/CControllerPopupItemTest.php	895	protected function resolvePreprocessingStepMacros(array $steps) {	CODE
LOW	ui/app/controllers/CControllerPopupItemTest.php	1066	protected function resolveItemPropertyMacros(array $inputs) {	CODE
LOW	ui/app/controllers/CControllerCharts.php	507	public static function getMostSevereTagValueSubfilters(array $tags): array {	CODE
LOW	ui/app/controllers/CControllerHostTagsList.php	260	private static function getMergedOwnAndInheritedTags(array $tag_details, array $inherited_tag_details): array {	CODE
LOW	ui/app/controllers/CControllerCepRuleGeneral.php	129	protected static function getOperationValidationFields(): array {	CODE
LOW	ui/app/controllers/CControllerCepRuleGeneral.php	199	public static function getOperationFilterValidationFields(): array {	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleUpdateGeneral.php	34	abstract static function getValidationRulesApiUniq(): array;	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleUpdateGeneral.php	36	abstract static function getFieldsValidationRulesAdditional(): array;	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleUpdateGeneral.php	38	abstract static function getValidationRulesTypeField(): array;	CODE
LOW	…pp/controllers/CControllerPopupActionOperationEdit.php	297	private function popupConfigOperationTypes(int $eventsource, int $recovery): array {	CODE
LOW	ui/app/controllers/CControllerAuthenticationEdit.php	357	private function getLdapServerUserGroupCount(array $ldap_servers): array {	CODE
LOW	ui/app/controllers/CControllerAuthenticationEdit.php	385	private function getMfaMethodUserGroupCount(array $mfa_methods): array {	CODE
LOW	ui/app/controllers/CControllerDiscoveryEdit.php	209	private function normalizeDiscoveryCheckFields(array $db_dcheck): array {	CODE
LOW	ui/app/controllers/CControllerCepRuleEdit.php	203	protected static function getOperationPopupValidationRules(): array {	CODE
LOW	ui/app/controllers/CControllerCepRuleEdit.php	282	protected static function getConditionPopupValidationRules(): array {	CODE
LOW	ui/app/controllers/CControllerCepRuleEdit.php	365	public static function getOperationConditionValidationRules(): array {	CODE
LOW	ui/app/controllers/CControllerHostCreate.php	418	private function extendHostCloneEncryption(array $host, string $src_hostid): array {	CODE
LOW	ui/app/controllers/CControllerMiscConfigEdit.php	50	private function processXframeOptionConfig(array &$config): void {	CODE
LOW	ui/app/controllers/CControllerAuditLogList.php	289	private function sanitizeUsersForMultiselect(array $users): array {	CODE
LOW	ui/app/controllers/CControllerAuthenticationUpdate.php	641	private function processGeneralAuthenticationSettings(int $ldap_userdirectoryid, int $mfaid): bool {	CODE
LOW	…/app/controllers/CControllerUsergroupUpdateGeneral.php	32	protected static function processUserGroupInputData(array $user_group): array {	CODE
LOW	…/app/controllers/CControllerUsergroupUpdateGeneral.php	80	protected function validateProxiesNotInProxyGroup(): void {	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleUpdate.php	19	public static function getValidationRulesApiUniq(): array {	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleUpdate.php	26	public static function getFieldsValidationRulesAdditional(): array {	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleUpdate.php	34	public static function getValidationRulesTypeField(): array {	CODE
LOW	…/app/controllers/CControllerAvailabilityReportList.php	231	private function prepareDataForMultiselectFields(array $filter): array {	CODE
LOW	ui/app/controllers/CControllerApmMetricListData.php	304	private function prepareExponentialHistogramBuckets(int $scale, int $positive_offset, array $positive_bucket_counts,	CODE
LOW	ui/app/controllers/CControllerMaintenanceEdit.php	212	protected function applyProblemContextPreset(array $events, array &$data): void {	CODE
LOW	…ontrollers/CControllerTriggerExpressionConstructor.php	103	private function getTriggerExpressionConstructor(array $data, int $expression_type): array {	CODE
LOW⚡	…/app/controllers/CControllerLldRulePrototypeCreate.php	24	public static function getValidationRulesApiUniq(): array {	CODE
LOW⚡	…/app/controllers/CControllerLldRulePrototypeCreate.php	31	public static function getFieldsValidationRulesAdditional(): array {	CODE
LOW⚡	…/app/controllers/CControllerLldRulePrototypeCreate.php	38	public static function getValidationRulesTypeField(): array {	CODE
LOW	ui/app/controllers/CControllerPopupGeneric.php	1296	protected function transformRecordsForPatternSelector(array &$records) {	CODE
LOW	ui/app/controllers/CControllerUserroleEditGeneral.php	148	private function getDevicesActionSectionRules(int $user_type): array {	CODE
LOW	ui/app/controllers/CControllerActionLogList.php	242	private function prepareDataForMultiselect(array $data, string $type): array {	CODE
LOW⚡	…/app/controllers/CControllerLldRulePrototypeUpdate.php	19	public static function getValidationRulesApiUniq(): array {	CODE
LOW⚡	…/app/controllers/CControllerLldRulePrototypeUpdate.php	26	public static function getFieldsValidationRulesAdditional(): array {	CODE
LOW⚡	…/app/controllers/CControllerLldRulePrototypeUpdate.php	33	public static function getValidationRulesTypeField(): array {	CODE
LOW	ui/app/controllers/CControllerScriptUserInputCheck.php	66	private function validateManualinputFields(): bool {	CODE
LOW	ui/app/controllers/CControllerPopupTriggerExprCheck.php	75	private function getValidationRulesByFunction(string $name, int $type): ?array {	CODE
LOW	…/app/controllers/CControllerPopupAcknowledgeCreate.php	371	protected function groupEventsByActionsAllowed(array $events, array $editable_triggers): array {	CODE
LOW	ui/app/controllers/CControllerTemplateCreate.php	286	private function copyFromCloneSourceTemplate(string $src_templateid, array $dst_template): bool {	CODE
LOW	ui/app/controllers/CControllerLatest.php	765	public static function getTopPriorityTagValueSubfilters(array $tags): array {	CODE
LOW	ui/app/controllers/CControllerLatest.php	826	public static function isMandatoryFilterFieldSet(array $filter): bool {	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleCreate.php	19	public static function getValidationRulesApiUniq(): array {	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleCreate.php	26	public static function getFieldsValidationRulesAdditional(): array {	CODE
LOW⚡	ui/app/controllers/CControllerLldRuleCreate.php	30	public static function getValidationRulesTypeField(): array {	CODE
LOW	ui/app/partials/js/host.interface.selector.js.php	83	function noRequiredInterfacesFound() {	CODE
LOW	ui/js/multiselect.js	1453	function updateSearchFieldVisibility($obj) {	CODE
LOW	ui/js/menupopup.js	292	function getMenuPopupMapElementSubmap(options) {	CODE
LOW	ui/js/menupopup.js	356	function getMenuPopupMapElementGroup(options) {	CODE
LOW	ui/js/menupopup.js	412	function getMenuPopupMapElementTrigger(options) {	CODE
LOW	ui/js/menupopup.js	544	function getMenuPopupMapElementImage(options) {	CODE
LOW	ui/js/menupopup.js	1221	function getMenuPopupItemPrototype(options) {	CODE
LOW	ui/js/menupopup.js	2109	function menuPopupDocumentCloseHandler(event) {	CODE
LOW	ui/js/macrovalue.js	94	function inputDropdownValueChangeEventHandle() {	CODE
LOW	ui/js/init.js	203	function menuPopupPreloaderCloseHandler(event) {	CODE
LOW	ui/js/gtlc.js	361	function selectionHandlerDragStart(event) {	CODE
LOW	ui/js/gtlc.js	529	function checkDisableTimeSelectorUI() {	CODE
LOW	ui/js/vendors/jQuery/jquery.js	9047	function addToPrefiltersOrTransports( structure ) {	CODE
1380 more matches not shown…

Fake / Example Data715 hits · 801 pts

Severity	File	Line	Snippet	Context
LOW	ui/app/views/administration.authentication.edit.php	323	->setAttribute('placeholder', 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient')	CODE
LOW	ui/app/views/administration.authentication.edit.php	340	->setAttribute('placeholder', _('PEM-encoded IdP certificate'))	CODE
LOW	ui/app/views/administration.authentication.edit.php	370	->setAttribute('placeholder', _('PEM-encoded SP private key'))	CODE
LOW	ui/app/views/administration.authentication.edit.php	399	->setAttribute('placeholder', _('PEM-encoded SP certificate'))	CODE
LOW	ui/app/views/mediatype.edit.php	382	'placeholder' => _('script'),	CODE
LOW	ui/app/views/usergroup.tagfilter.edit.php	80	->setAttribute('placeholder', _('tag'))	CODE
LOW	ui/app/views/usergroup.tagfilter.edit.php	85	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	80	->setAttribute('placeholder', _('name'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	86	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	127	->setAttribute('placeholder', _('name'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	134	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	173	->setAttribute('placeholder', _('name'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	180	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	212	->setAttribute('placeholder', _('name'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	219	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/webscenario.step.edit.php	262	->setAttribute('placeholder', _('pattern'))	CODE
LOW	ui/app/views/action.edit.php	54	->setAttribute('placeholder', 'A or (B and C) ...');	CODE
LOW	ui/app/views/popup.ldap.edit.php	198	->setAttribute('placeholder', CLdap::DEFAULT_FILTER_GROUP)	CODE
LOW	ui/app/views/popup.ldap.edit.php	212	->setAttribute('placeholder', CLdap::DEFAULT_MEMBERSHIP_ATTRIBUTE)	CODE
LOW	ui/app/views/popup.ldap.edit.php	382	->setAttribute('placeholder', CLdap::DEFAULT_FILTER_USER)	CODE
LOW	ui/app/views/administration.miscconfig.edit.php	34	->setAttribute('placeholder', _('Example: https://localhost/zabbix/ui/'))	CODE
LOW	ui/app/views/administration.miscconfig.edit.php	125	->setAttribute('placeholder', _('Valid URI schemes'))	CODE
LOW	ui/app/views/administration.miscconfig.edit.php	160	->setAttribute('placeholder', _('X-Frame-Options HTTP header'))	CODE
LOW	ui/app/views/administration.miscconfig.edit.php	175	->setAttribute('placeholder', _('Iframe sandboxing exceptions'))	CODE
LOW	ui/app/views/popup.mediatypemapping.edit.php	72	->setAttribute('placeholder', ZBX_DEFAULT_INTERVAL)	CODE
LOW	ui/app/views/popup.operation.edit.php	358	->setAttribute('placeholder', _('tag'))	CODE
LOW	ui/app/views/popup.operation.edit.php	364	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/token.edit.php	56	'placeholder' => '',	CODE
LOW	ui/app/views/administration.script.edit.php	104	->setAttribute('placeholder', _('<sub-menu/sub-menu/...>'))	CODE
LOW	ui/app/views/administration.script.edit.php	259	'placeholder' => _('script'),	CODE
LOW	ui/app/views/administration.script.edit.php	391	->setAttribute('placeholder', _('comma-separated list'))	CODE
LOW	ui/app/views/administration.script.edit.php	400	->setAttribute('placeholder', _('regular expression'))	CODE
LOW	ui/app/views/administration.userrole.edit.php	220	->setAttribute('placeholder', _('tag'))	CODE
LOW	ui/app/views/administration.userrole.edit.php	223	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/administration.userrole.edit.php	266	->setAttribute('placeholder', _('tag'))	CODE
LOW	ui/app/views/administration.userrole.edit.php	269	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/popup.sla.excludeddowntime.edit.php	40	->setAttribute('placeholder', _('short description'))	CODE
LOW	ui/app/views/connector.edit.php	97	->setAttribute('placeholder', _('tag'))	CODE
LOW	ui/app/views/connector.edit.php	117	->setAttribute('placeholder', _('value'))	CODE
LOW	ui/app/views/connector.edit.php	280	->setAttribute('placeholder', _('[protocol://][user[:password]@]proxy.example.com[:port]'))	CODE
LOW	ui/app/views/popup.lldoverride.php	85	->setAttribute('placeholder', 'A or (B and C) ...')	CODE
LOW	ui/app/views/popup.lldoverride.php	117	->setAttribute('placeholder', '{#MACRO}')	CODE
LOW	ui/app/views/popup.lldoverride.php	134	->setAttribute('placeholder', _('regular expression'));	CODE
LOW	ui/app/views/correlation.edit.php	69	->setAttribute('placeholder', 'A or (B and C) ...')	CODE
LOW	ui/app/views/host.prototype.edit.php	215	->setAttribute('placeholder', '{#MACRO}')	CODE
LOW	ui/app/views/host.prototype.edit.php	486	->setAttribute('placeholder', '{$MACRO}')	CODE
LOW	ui/app/views/host.prototype.edit.php	500	->setAttribute('placeholder', _('description'))	CODE
LOW	ui/app/views/host.prototype.edit.php	528	->setAttribute('placeholder', '{$MACRO}')	CODE
LOW	ui/app/views/host.prototype.edit.php	565	->setAttribute('placeholder', _('description'))	CODE
LOW	ui/app/views/item.massupdate.php	119	->setAttribute('placeholder', _('name'))	CODE
LOW	ui/app/views/item.massupdate.php	124	->setAttribute('placeholder', _('value'))	CODE
LOW⚡	ui/app/views/item.massupdate.php	235	->setAttribute('placeholder', ZBX_ITEM_FLEXIBLE_DELAY_DEFAULT);	CODE
LOW⚡	ui/app/views/item.massupdate.php	238	->setAttribute('placeholder', ZBX_DEFAULT_INTERVAL);	CODE
LOW⚡	ui/app/views/item.massupdate.php	240	->setAttribute('placeholder', ZBX_ITEM_SCHEDULING_DEFAULT)	CODE
LOW⚡	ui/app/views/item.massupdate.php	247	->setAttribute('placeholder', ZBX_ITEM_FLEXIBLE_DELAY_DEFAULT)	CODE
LOW⚡	ui/app/views/item.massupdate.php	251	->setAttribute('placeholder', ZBX_DEFAULT_INTERVAL)	CODE
LOW⚡	ui/app/views/item.massupdate.php	255	->setAttribute('placeholder', ZBX_ITEM_SCHEDULING_DEFAULT);	CODE
LOW	ui/app/views/reports.actionlog.list.php	49	'placeholder' => '',	CODE
LOW	ui/app/views/reports.actionlog.list.php	66	'placeholder' => '',	CODE
LOW	ui/app/views/reports.actionlog.list.php	83	'placeholder' => '',	CODE
655 more matches not shown…

Over-Commented Block584 hits · 536 pts

Severity	File	Line	Snippet	Context
LOW	misc/snmptrap/zabbix_trap_receiver.pl	1	#!/usr/bin/env perl	COMMENT
LOW	misc/snmptrap/zabbix_trap_receiver.pl	21	# This is an embedded perl SNMP trapper receiver designed for sending data to the server.	COMMENT
LOW	misc/snmptrap/snmptrap.sh	1	#!/bin/bash	COMMENT
LOW	ui/robots.txt	1	# If Zabbix frontend is available on the internet, it is suggested to disallow	COMMENT
LOW	ui/robots.txt	21	# to the Zabbix frontend directory, since otherwise it may interfere with other	COMMENT
LOW	ui/app/views/js/monitoring.latest.view.js.php	21		COMMENT
LOW	ui/app/views/js/user.device.init.view.js.php	21		COMMENT
LOW	ui/app/views/js/monitoring.problem.view.js.php	21		COMMENT
LOW	ui/app/views/js/monitoring.host.view.js.php	21	?>	COMMENT
LOW	ui/app/views/js/popup.itemtestedit.view.js.php	21		COMMENT
LOW	ui/app/views/js/apm.metric.list.js.php	21	?>	COMMENT
LOW	ui/app/partials/js/lldrule.edit.prototype.tab.js.php	21		COMMENT
LOW	ui/app/partials/js/lldrule.edit.lldrule.tab.js.php	21		COMMENT
LOW	ui/js/component.z-color-picker.js	161	#color_field_name;	COMMENT
LOW	ui/js/class.widget-edit.sandbox.js	21	#dashboard;	COMMENT
LOW	ui/js/class.sortable.js	121	#scroll_pos = 0;	COMMENT
LOW	ui/js/component.z-sparkline.js	21		COMMENT
LOW	ui/js/vendors/jQuery/jquery.js	1021	* @param {Boolean} disabled true for :disabled; false for :enabled	COMMENT
LOW	ui/js/vendors/jQuery/jquery.js	1321	// Build QSA regex	COMMENT
LOW	ui/js/vendors/jQuery/jquery.js	4301	owner[ this.expando ] && owner[ this.expando ][ camelCase( key ) ];	COMMENT
LOW	ui/js/vendors/jQuery/jquery.js	5661	// Support: Chrome 86+	COMMENT
LOW	ui/js/vendors/jQuery/jquery.js	6801	// Use offsetWidth/offsetHeight for when box sizing is unreliable.	COMMENT
LOW	ui/js/vendors/jQuery/jquery.js	10561	// Subtract parent offsets and element margins	COMMENT
LOW	ui/js/vendors/jQuery/jquery.js	10821	return text == null ?	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	61	// @property lastId: Number	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	2441	}	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	3001	// sure what it means.	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	3021	// the highest of their `maxZoom` options will be used instead.	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	3041	// @section Animation Options	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	3061		COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	3521		COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	3581	// @section Methods for modifying map state	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	3981		COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	4101	var panes = this._panes = {};	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	4261	var onOff = remove$$1 ? off : on;	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	5721	// @method enabled(): Boolean	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	5981	// Simplify polyline with vertex reduction and Douglas-Peucker simplification.	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	7401		COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	7781	// @option fillColor: String = *	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	9041	// @aka ImageOverlay options	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	9301		COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	9701	// @option autoPan: Boolean = true	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	9721	// Set it to `true` if you want to prevent users from panning the popup	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	10181	var Tooltip = DivOverlay.extend({	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	10701		COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	10741	// The maximum zoom level up to which this layer will be displayed (inclusive).	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	11841	// @section	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	13221	// @property doubleClickZoom: Handler	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	13241	// devices. Enabled by default unless running on old Android devices.	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	13621	// @section Handlers	COMMENT
LOW	ui/js/vendors/Leaflet/leaflet.js	13841	/*	COMMENT
LOW	ui/js/vendors/D3/d3.js	13981	v.parent.A = apportion(v, w, v.parent.A \|\| siblings[0]);	COMMENT
LOW	ui/include/classes/core/CConfigFile.php	461	$DB[\'VAULT_APP_SECRET_ID\'] = \''.addcslashes($this->config['DB']['VAULT_APP_SECRET_ID'], "'\\").'\';	COMMENT
LOW	ui/include/classes/core/CConfigFile.php	481	// \'username\' - Database user (used for ClickHouse).	COMMENT
LOW	ui/include/classes/core/CConfigFile.php	501	// \'provider\' => \'clickhouse\',	COMMENT
LOW	ui/include/classes/core/CConfigFile.php	521	// Uncomment to override the default paths for the private key and certificates, if stored on the file system.	COMMENT
LOW	ui/include/classes/core/CConfigFile.php	541	$ZBX_SERVER_TLS[\'KEY_FILE\'] = \''.addcslashes($this->config['ZBX_SERVER_TLS']['KEY_FILE'], "'\\").'\';	COMMENT
LOW	ui/include/classes/core/CConfigFile.php	561	// \'ssl_ca_location\' - Certificate authority (CA) location. Only supported if \'ssl_verify_peer\' is set to true. Can	COMMENT
LOW	…hboardWidgets/testDashboardGeomapWidgetScreenshots.php	241	return [	COMMENT
LOW	…s/selenium/apiTokens/testPageApiTokensUserSettings.php	161	'Expired token for admin',	COMMENT
524 more matches not shown…

Slop Phrases93 hits · 110 pts

Severity	File	Line	Snippet	Context
LOW	misc/snmptrap/zabbix_trap_receiver.pl	41	# The date time format in strftime() format. Please make sure to have a corresponding	COMMENT
MEDIUM	ui/js/vendors/Leaflet/leaflet.js	7440	* In addition to [shared layer methods](#Layer) like `addTo()` and `remove()` and [popup methods](#Popup) like bindP	COMMENT
LOW	ui/include/classes/parsers/CItemKey.php	60	* don't forget to take look in there before changing anything.	COMMENT
MEDIUM	ui/include/classes/core/APP.php	27	* Feel free to modify and extend it to change the functionality of ZBase.	COMMENT
LOW	…bernetes_cluster_http/template_kubernetes_cluster.yaml	20	Don't forget to change macros {$KUBE.API.URL} and {$KUBE.API.TOKEN}.	CODE
LOW	…bernetes_cluster_http/template_kubernetes_cluster.yaml	5924	Don't forget to read the README.md for the correct setup of the template.	CODE
LOW	…p/kubernetes_state_http/template_kubernetes_state.yaml	17	Don't forget to read the README.md for the correct setup of the template.	CODE
LOW	…p/kubernetes_nodes_http/template_kubernetes_nodes.yaml	17	Don't forget to read the README.md for the correct setup of the template.	CODE
LOW	…ginx_agent_active/template_app_nginx_agent_active.yaml	53	If you use another location, then don't forget to change the `Nginx status page path` host wizard configuration	CODE
LOW	templates/app/etcd_http/template_app_etcd_http.yaml	41	- If you have specified a non-standard port for 'etcd', don't forget to change macros: '{$ETCD.SCHEME}' and '{$E	CODE
LOW	templates/app/etcd_http/template_app_etcd_http.yaml	75	- If you have specified a non-standard port for `etcd`, don't forget to change host wizard configuration fields:	CODE
LOW	…lasticsearch_http/template_app_elasticsearch_http.yaml	22	3. If you use an atypical location of ES API, don't forget to change the macros '{$ELASTICSEARCH.SCHEME}','{$ELA	CODE
LOW	…lasticsearch_http/template_app_elasticsearch_http.yaml	42	3. If you use an atypical location of ES API, don't forget to change the host wizard configuration fields `Elast	CODE
LOW	…pm_agent_active/template_app_php-fpm_agent_active.yaml	129	If you use another location of the status/ping pages, don't forget to change the `Status page path/Ping page pat	CODE
LOW	…pm_agent_active/template_app_php-fpm_agent_active.yaml	131	If you use another web server port or scheme for the location of the PHP-FPM status/ping pages, don't forget to	CODE
LOW	templates/app/iis_agent/template_app_iis_agent.yaml	32	- If you use a non-standard port for the IIS, don't forget to update the host wizard configuration fields `Servi	CODE
LOW	…plates/app/zabbix_proxy/template_app_zabbix_proxy.yaml	13	Specify the address of the remote Zabbix proxy by updating the {$ZABBIX.PROXY.ADDRESS} and {$ZABBIX.PROXY.PORT}	CODE
LOW	…plates/app/zabbix_proxy/template_app_zabbix_proxy.yaml	24	Specify the address of the remote Zabbix proxy as the values for the `Zabbix proxy Address` and `Zabbix proxy Po	CODE
LOW	…plates/app/zabbix_proxy/template_app_zabbix_proxy.yaml	4555	Specify the address of the remote Zabbix proxy by changing the {$ZABBIX.PROXY.ADDRESS} and {$ZABBIX.PROXY.PORT}	CODE
LOW	…plates/app/zabbix_proxy/template_app_zabbix_proxy.yaml	4566	Specify the address of the remote Zabbix proxy as the values for the `Zabbix proxy Address` and `Zabbix proxy Po	CODE
LOW	…plates/app/zabbix_proxy/template_app_zabbix_proxy.yaml	6992	Specify the address of the remote Zabbix proxy by changing the {$ZABBIX.PROXY.ADDRESS} and {$ZABBIX.PROXY.PORT}	CODE
LOW	…plates/app/zabbix_proxy/template_app_zabbix_proxy.yaml	7003	Specify the address of the remote Zabbix proxy as the values for the `Zabbix proxy Address` and `Zabbix proxy Po	CODE
LOW	…es/app/rabbitmq_agent/template_app_rabbitmq_agent.yaml	46	If you use another API endpoint, then don't forget to change `Address` host wizard configuration field.	CODE
LOW	…es/app/rabbitmq_agent/template_app_rabbitmq_agent.yaml	1141	If you use another API endpoint, then don't forget to change `Address` host wizard configuration field.	CODE
LOW	…pp/iis_agent_active/template_app_iis_agent_active.yaml	32	- If you use a non-standard port for the IIS, don't forget to update the host wizard configuration fields `Servi	CODE
LOW	…_http/consul_cluster/template_consul_cluster_http.yaml	16	Don't forget to change macros {$CONSUL.CLUSTER.URL}, {$CONSUL.TOKEN}.	CODE
LOW	…_http/consul_cluster/template_consul_cluster_http.yaml	37	Don't forget to change host wizard configuration field `Address`, `Token`.	CODE
LOW	…/app/consul_http/consul/template_consul_node_http.yaml	13	Don't forget to change macros {$CONSUL.NODE.API.URL}, {$CONSUL.TOKEN}.	CODE
LOW	…/app/consul_http/consul/template_consul_node_http.yaml	38	Don't forget to change host wizard configuration field `Address`, `Token`.	CODE
LOW	templates/app/nomad/template_app_nomad_http.yaml	16	Don't forget to change macro {$NOMAD.ENDPOINT.API.URL}, {$NOMAD.TOKEN} values.	CODE
LOW	templates/app/nomad/template_app_nomad_http.yaml	3027	* Don't forget to define the `Redundant server count` host wizard configuration field value, based on your clust	COMMENT
LOW	templates/app/nginx_agent/template_app_nginx_agent.yaml	53	If you use another location, then don't forget to change the `Nginx status page path` host wizard configuration	CODE
LOW	…ates/app/zabbix_server/template_app_zabbix_server.yaml	13	Specify the address of the remote Zabbix server by changing the {$ZABBIX.SERVER.ADDRESS} and {$ZABBIX.SERVER.POR	CODE
LOW	…ates/app/zabbix_server/template_app_zabbix_server.yaml	24	Specify the address of the remote Zabbix server as the values for the `Zabbix server Address` and `Zabbix server	CODE
LOW	…ates/app/zabbix_server/template_app_zabbix_server.yaml	14548	Specify the address of the remote Zabbix server by changing the {$ZABBIX.SERVER.ADDRESS} and {$ZABBIX.SERVER.POR	CODE
LOW	…ates/app/zabbix_server/template_app_zabbix_server.yaml	14559	Specify the address of the remote Zabbix server as the values for the `Zabbix server Address` and `Zabbix server	CODE
LOW	…ates/app/zabbix_server/template_app_zabbix_server.yaml	18529	Specify the address of the remote Zabbix server by changing the {$ZABBIX.SERVER.ADDRESS} and {$ZABBIX.SERVER.POR	CODE
LOW	…ates/app/zabbix_server/template_app_zabbix_server.yaml	18540	Specify the address of the remote Zabbix server as the values for the `Zabbix server Address` and `Zabbix server	CODE
LOW	…pp/envoy_proxy_http/template_app_envoy_proxy_http.yaml	14	Don't forget to change macros {$ENVOY.URL}, {$ENVOY.METRICS.PATH}.	CODE
LOW	…pp/envoy_proxy_http/template_app_envoy_proxy_http.yaml	34	Don't forget to change host wizard configuration fields `Instance URL`, `Metrics scrape path`.	CODE
LOW	…plates/app/php-fpm_http/template_app_php-fpm_http.yaml	123	If you use another location of the status/ping pages, don't forget to change the `Status page path/Ping page pat	CODE
LOW	…plates/app/php-fpm_http/template_app_php-fpm_http.yaml	125	If you use another web server port or scheme for the location of the PHP-FPM status/ping pages, don't forget to	CODE
LOW	templates/app/jenkins/template_app_jenkins.yaml	13	Don't forget to change macros {$JENKINS.URL}, {$JENKINS.USER}, {$JENKINS.API.TOKEN}, {$JENKINS.API.KEY}.	CODE
LOW	…ates/app/php-fpm_agent/template_app_php-fpm_agent.yaml	129	If you use another location of the status/ping pages, don't forget to change the `Status page path/Ping page pat	CODE
LOW	…ates/app/php-fpm_agent/template_app_php-fpm_agent.yaml	131	If you use another web server port or scheme for the location of the PHP-FPM status/ping pages, don't forget to	CODE
LOW	…/app/nginx_plus_http/template_app_nginx_plus_http.yaml	13	Don't forget to change macros {$NGINX.API.ENDPOINT}.	CODE
LOW	templates/cloud/gcp/template_cloud_gcp_http.yaml	912	Don't forget to read the README.md for the correct setup of the template.	CODE
LOW	templates/cloud/gcp/template_cloud_gcp_http.yaml	935	4. If you want to monitor Cloud SQL services - don't forget to activate the Cloud SQL Admin API.	CODE
LOW	templates/cloud/gcp/template_cloud_gcp_http.yaml	13623	Don't forget to read the README.md for the correct setup of the template.	CODE
LOW	…plates/db/percona_agent/template_db_percona_agent.yaml	15	2. Copy the 'template_db_percona.conf' file with user parameters into folder with Zabbix agent configuration (/e	CODE
LOW	…plates/db/percona_agent/template_db_percona_agent.yaml	39	2. Copy the `template_db_percona.conf` file with user parameters into folder with Zabbix agent configuration (/e	CODE
LOW	…b/tidb_http/tidb_pd_http/template_db_tidb_pd_http.yaml	13	Don't forget to change the macros {$PD.URL}, {$PD.PORT}.	CODE
LOW	…b/tidb_http/tidb_pd_http/template_db_tidb_pd_http.yaml	36	Don't forget to change the host wizard configuration fields `Address`, `Port`.	CODE
LOW	…db_http/tidb_tikv_http/template_db_tidb_tikv_http.yaml	13	Don't forget to change the macros {$TIKV.URL}, {$TIKV.PORT}.	CODE
LOW	…db_http/tidb_tikv_http/template_db_tidb_tikv_http.yaml	34	Don't forget to change the host wizard configuration fields `Address`, `Port`.	CODE
LOW	…db_http/tidb_tidb_http/template_db_tidb_tidb_http.yaml	13	Don't forget to change the macros {$TIDB.URL}, {$TIDB.PORT}.	CODE
LOW	…db_http/tidb_tidb_http/template_db_tidb_tidb_http.yaml	36	Don't forget to change the host wizard configuration fields `Address`, `Port`.	CODE
LOW	…plates/db/influxdb_http/template_db_influxdb_http.yaml	27	Don't forget to change the host wizard configuration fields `InfluxDB instance URL`, `InfluxDB API token`.	CODE
LOW	…adb_agent_active/template_db_mariadb_agent_active.yaml	15	2. Copy the 'template_db_mariadb.conf' file with user parameters into folder with Zabbix agent configuration (/e	CODE
LOW	…adb_agent_active/template_db_mariadb_agent_active.yaml	43	2. Copy the `template_db_mariadb.conf` file with user parameters into folder with Zabbix agent configuration (/e	CODE
33 more matches not shown…

Hallucination Indicators5 hits · 50 pts

Severity	File	Line	Snippet	Context
CRITICAL	ui/js/vendors/jQuery/jquery.js	8092	jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( _i, name ) {	CODE
CRITICAL	ui/js/vector/canvas/class.svgtextarea.js	109	this.canvas.wrapper.text.element.appendChild(this.canvas.wrapper.node);	CODE
CRITICAL	ui/include/views/js/monitoring.sysmaps.js.php	1086	ZABBIX.apps.map.object.linkForm.addNewTriggers(data.values);	CODE
CRITICAL	…o/paloalto_pa440/template_net_paloalto_pa440_http.yaml	2213	result = interfaces.response.result.hw.entry.map(function (interface) {	CODE
CRITICAL	…o/paloalto_pa440/template_net_paloalto_pa440_http.yaml	2465	result = interfaces.response.result.ifnet.entry.map(function (interface) {	CODE

Decorative Section Separators10 hits · 30 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	492	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	494	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	673	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	675	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	868	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	870	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	985	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	987	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	1111	# ===========================================================================	COMMENT
MEDIUM	tests/libs/zbxhttppoller/http_process_variables.yaml	1113	# ===========================================================================	COMMENT

AI Slop Vocabulary9 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	ui/js/vendors/jQuery/jquery.js	10830	// understands anonymous AMD modules. A named AMD is safest and most robust	COMMENT
MEDIUM	ui/js/vendors/Leaflet/leaflet.js	11617	// If `true` and user is on a retina display, it will request four tiles of half the specified size and a bigger zoom	COMMENT
MEDIUM⚡	…hpe_synergy_http/template_server_hpe_synergy_http.yaml	2205	expression: 'last(/HPE Synergy by HTTP/hpe.synergy.enclosure["{#NAME}",state])=3 and last(/HPE Synergy by	CODE
MEDIUM⚡	…hpe_synergy_http/template_server_hpe_synergy_http.yaml	2214	expression: 'last(/HPE Synergy by HTTP/hpe.synergy.enclosure["{#NAME}",state])=9 and last(/HPE Synergy by	CODE
MEDIUM⚡	…hpe_synergy_http/template_server_hpe_synergy_http.yaml	2223	expression: 'last(/HPE Synergy by HTTP/hpe.synergy.enclosure["{#NAME}",state])=6 and last(/HPE Synergy by	CODE
MEDIUM	…hpe_synergy_http/template_server_hpe_synergy_http.yaml	3805	expression: 'last(/HPE Synergy by HTTP/hpe.synergy.hypervisor_manager["{#NAME}",state])=3 and length(last(	CODE
MEDIUM	…hpe_synergy_http/template_server_hpe_synergy_http.yaml	5647	expression: 'last(/HPE Synergy by HTTP/hpe.synergy.server_hardware["{#LOCATION}",maintenance_state])=0 and	CODE
MEDIUM	…hpe_synergy_http/template_server_hpe_synergy_http.yaml	5656	expression: 'last(/HPE Synergy by HTTP/hpe.synergy.server_hardware["{#LOCATION}",state])=4 and length(last	CODE
MEDIUM	src/go/plugins/oracle/dbconn/conn.go	304	// strings.Fields is robust against multiple spaces and leading/trailing whitespace.	COMMENT

Empty Error Handlers2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	ui/tests/integration/data/telnet_server_mock.py	59	except OSError:	CODE
HIGH	ui/tests/integration/data/telnet_server_mock.py	64	except OSError:	CODE

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	src/go/plugins/net/dns/dns_get_test.go	509	// TODO: Add test cases.	COMMENT
LOW	src/go/plugins/net/dns/dns_get_test.go	535	// TODO: Add test cases.	COMMENT

Self-Referential Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	create/bin/gen_top_passwords.php	51	"# This file is meant to strengthen password validation for internal users. Passwords included in the list are consider	CODE

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	src/zabbix_agent/logfiles/logfiles.c	82	/* since the purpose of this function is to be used in split_filename(), we allow part1 to be */	COMMENT

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	ui/js/vendors/jQuery/jquery.js	4405	function getData( data ) {	CODE

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	ui/tests/integration/data/reporting_mock.py	41		CODE

zabbix/zabbix

Open-Source Code Quality, Security and Technical Debt Review