4.4

Adjusted Signal

4.4

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

8.2K

Stars

C++

Language

176.0K

Lines of Code

1.0K

Files

514

Pattern Hits

2026-10-31

Scan Date

0.06

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 13.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 434 finding(s).

Hallucinated Dependency & Supply Chain Risk 3.1/100 · LOW

Are imports declared and package/API names verified? 31 finding(s).

Agent Over-Engineering Ratio 4.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 58 finding(s).

PR Review Velocity Impact 22.7/100 · LOW

Which changes need focused human review? 514 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 62MEDIUM 41LOW 411

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 514 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block371 hits · 349 pts

Severity	File	Line	Snippet	Context
LOW	CMakeLists.txt	1	# When changing the minimum version here, also adapt	COMMENT
LOW	CMakeLists.txt	321		COMMENT
LOW	tools/gen-zam/Gen-ZAM.h	1	// See the file "COPYING" in the main distribution directory for copyright.	COMMENT
LOW	tools/gen-zam/Gen-ZAM.h	101		COMMENT
LOW	tools/gen-zam/Gen-ZAM.h	161	// OP_LOAD_GLOBAL_VV_A).	COMMENT
LOW	tools/gen-zam/Gen-ZAM.h	181		COMMENT
LOW	tools/gen-zam/Gen-ZAM.h	261		COMMENT
LOW	tools/gen-zam/Gen-ZAM.h	401	// Helper function that parses "class" specifications.	COMMENT
LOW	tools/gen-zam/Gen-ZAM.h	421		COMMENT
LOW	tools/gen-zam/Gen-ZAM.h	601		COMMENT
LOW	tools/binpac/src/pac_context.h	1	// See the file "COPYING" in the main distribution directory for copyright.	COMMENT
LOW	tools/binpac/src/pac_expr.h	41	ExprType expr_type() const { return expr_type_; }	COMMENT
LOW	tools/binpac/src/pac_id.h	1	// See the file "COPYING" in the main distribution directory for copyright.	COMMENT
LOW	tools/binpac/src/pac_decl-inl.h	1	// See the file "COPYING" in the main distribution directory for copyright.	COMMENT
LOW	tools/systemd-generator/src/zeek-cluster-config.h	1	// See the file "COPYING" in the main distribution directory for copyright.	COMMENT
LOW	tools/bifcl/include/bif_arg.h	1	// See the file "COPYING" in the main distribution directory for copyright.	COMMENT
LOW	tools/zeek-cut/zeek-cut.c	1	// See the file "COPYING" in the main distribution directory for copyright.	COMMENT
LOW	ci/find-current-version.sh	1	#!/bin/bash	COMMENT
LOW	ci/tsan_suppressions.txt	1	# This is a list of suppressions for ThreadSanitizer. Anything listed here will be	COMMENT
LOW	ci/tsan_suppressions.txt	41	race:zeek::threading::InputMessage<zeek::threading::MsgThread>::Object	COMMENT
LOW	ci/tsan_suppressions.txt	61	called_from_lib:libzmq.so	COMMENT
LOW	ci/tsan_suppressions.txt	81	# The T3 thread above is/was a ZMQ IO thread.	COMMENT
LOW	ci/container-images-tag-and-push.sh	1	#!/bin/bash	COMMENT
LOW	testing/btest/misc/udp.sh	1	# @TEST-DOC: Check that the Zeek::PacketSourceUDP plugin is available on FreeBSD and Linux	COMMENT
LOW	testing/btest/misc/build-info.sh	1	# @TEST-DOC: Verify -V and --build-info work	COMMENT
LOW	testing/btest/Traces/irc-zip-bomb.pcap.py	101	# IMPORTANT: the IRC analyzer adds ContentLine_Analyzer ahead of ZIP_Analyzer	COMMENT
LOW	…st/Traces/ldap/ntlm-invalid-target-info-offset.pcap.py	41		COMMENT
LOW	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	221	# padding → 2 bytes	COMMENT
LOW	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	261	# RFC 2822 message — what Zeek parses via MIME_Entity	COMMENT
LOW	testing/btest/Traces/krb/error-preauth-padata.pcap.py	1	from scapy.all import IP, UDP, Ether, Raw, wrpcap	COMMENT
LOW	testing/btest/Traces/dns/max-compression-depth.pcap.py	21		COMMENT
LOW	…temd-generator/test-zeek-systemd-generator-defaults.sh	1	# @TEST-DOC: Use a minimal to check the defaults used.	COMMENT
LOW	…ing/btest/tools/systemd-generator/test-only-workers.sh	1	# @TEST-DOC: Test just workers in a zeek.conf file.	COMMENT
LOW	…ting/btest/tools/systemd-generator/test-all-options.sh	1	# @TEST-DOC: Use all of the options available.	COMMENT
LOW	testing/btest/tools/systemd-generator/test-minimal.sh	1	# @TEST-DOC: Test the most minimal zeek.conf file.	COMMENT
LOW	…rator/test-zeek-cluster-layout-generator-open-error.sh	1	# @TEST-DOC: Check that an errno string is included in the error message if -o is used and the file can't be opened. Tri	COMMENT
LOW	…ing/btest/tools/systemd-generator/test-cluster-ipv6.sh	1	# @TEST-DOC: Test IPv6 cluster	COMMENT
LOW	…/btest/tools/systemd-generator/test-no-zeek-section.sh	1	# @TEST-DOC: Accept just an [interface] section as valid, no need for a [zeek] section	COMMENT
LOW	…st/tools/systemd-generator/test-cluster-node-prefix.sh	1	# @TEST-DOC: Test an explicit cluster_node_prefix	COMMENT
LOW	…ing/btest/tools/systemd-generator/test-only-manager.sh	1	# @TEST-DOC: Test a zeek.conf with only a manager and a cluster-layout.zeek file	COMMENT
LOW	…ools/systemd-generator/test-multi-interface-cpulist.sh	1	# @TEST-DOC: Focused regression test for when the global host worker index was used instead of the local interface secti	COMMENT
LOW	…tools/systemd-generator/test-interface-substitution.sh	1	# @TEST-DOC: Test interpolation of the interface key.	COMMENT
LOW	…sting/btest/tools/systemd-generator/test-no-workers.sh	1	# @TEST-DOC: Test a zeek.conf with no workers and a cluster-layout.zeek file	COMMENT
LOW	…tools/systemd-generator/test-zeek-systemd-generator.sh	1	# @TEST-DOC: Smoke test the zeek-systemd-generator	COMMENT
LOW	testing/btest/tools/systemd-generator/test-ext-path.sh	1	# @TEST-DOC: Test ext_path setting	COMMENT
LOW	testing/btest/tools/systemd-generator/test-cpulist.sh	1	# @TEST-DOC: Test a few CPU lists.	COMMENT
LOW	testing/btest/tools/systemd-generator/test-cpulist.sh	21	# @TEST-EXEC: mkdir dir3	COMMENT
LOW	…enerator/test-zeek-systemd-generator-default-config.sh	1	# @TEST-DOC: Run zeek-systemd-generator with the default configuration that's in tools/systemd-generator/etc/zeek.conf	COMMENT
LOW	testing/btest/tools/systemd-generator/test-archiver.sh	1	# @TEST-DOC: Test the generated zeek-archiver unit.	COMMENT
LOW	…est/tools/systemd-generator/test-minimal-no-manager.sh	1	# @TEST-DOC: Test the most minimal zeek.conf file.	COMMENT
LOW	…tools/systemd-generator/test-multi-interface-errors.sh	1	# @TEST-DOC: Test some invalid configurations.	COMMENT
LOW	…rator/test-zeek-cluster-layout-generator-multi-host.sh	1	# @TEST-DOC: The zeek-cluster-layout-generator pointed at a directory via -C containing three <hostname>.zeek.conf files	COMMENT
LOW	…sting/btest/tools/systemd-generator/test-worker-env.sh	1	# @TEST-DOC: Test that worker_env supports templating and accumulation.	COMMENT
LOW	…/btest/tools/systemd-generator/test-minimal-cluster.sh	1	# @TEST-DOC: Test the most minimal zeek.conf file.	COMMENT
LOW	…ystemd-generator/test-zeek-cluster-layout-generator.sh	1	# @TEST-DOC: Smoke test the zeek-cluster-layout-generator tool.	COMMENT
LOW	…ystemd-generator/test-zeek-cluster-layout-generator.sh	21	#	COMMENT
LOW	…est/tools/systemd-generator/test-empty-zeek-section.sh	1	# @TEST-DOC: Accept an empty [zeek] section as valid. Manager, logger, proxies and default to unset/zero, disabled.	COMMENT
LOW	…zeek-cluster-layout-generator-multi-host-no-address.sh	1	# @TEST-DOC: The zeek-cluster-layout-generator pointed at a directory via -C containing three <hostname>.zeek.conf that	COMMENT
LOW	…sting/btest/tools/systemd-generator/test-no-loggers.sh	1	# @TEST-DOC: Test a zeek.conf without loggers so that the manager will be doing the logging.	COMMENT
LOW	…/btest/tools/systemd-generator/test-multi-interface.sh	1	# @TEST-DOC: Test multiple interface	COMMENT
311 more matches not shown…

Cross-Language Confusion13 hits · 94 pts

Severity	File	Line	Snippet	Context
HIGH	…st/Traces/snmp/snmp-oid-subidentifier-too-long.pcap.py	27	varbind = tlv(0x30, oid + null)	CODE
HIGH⚡	…g/btest/Traces/dce-rpc/bind-ack-no-inband-null.pcap.py	160	# Flow 1: sec_addr = b'ABC' (no null) -> old strips to "AB", new keeps "ABC"	COMMENT
HIGH⚡	…g/btest/Traces/dce-rpc/bind-ack-no-inband-null.pcap.py	163	# Flow 2: sec_addr = b'ABC\x00' (null) -> both old and new produce "ABC"	COMMENT
HIGH⚡	…g/btest/Traces/dce-rpc/bind-ack-no-inband-null.pcap.py	166	# Flow 3: sec_addr = b'X' (no null) -> old strips to "", new keeps "X"	COMMENT
HIGH	…ng/btest/Traces/tls/dtls-sequence-number-jumps.pcap.py	51	compression_field = b"\x01\x00" # length 1, method 0 (null)	CODE
HIGH	…es/tls/dtls-overlapping-inconsistent-fragments.pcap.py	64	compression_field = b"\x01\x00" # length 1, method 0 (null)	CODE
HIGH	src/generate-jit-export-def.py	27	"""Return (defined, undefined, data_syms) sets of external symbols.	STRING
HIGH	src/generate-jit-export-def.py	73	return defined, undefined, data_syms	CODE
HIGH⚡	src/generate-jit-export-def.py	264	defined, undefined, data_syms = _parse_symbols(dumpbin, lib)	CODE
HIGH⚡	src/generate-jit-export-def.py	266	f" {lib}: {len(defined)} defined, {len(undefined)} undefined",	CODE
HIGH⚡	src/generate-jit-export-def.py	270	all_undefs.update(undefined)	CODE
HIGH⚡	src/generate-jit-export-def.py	280	defined, undefined, data_syms = _parse_symbols(dumpbin, lib)	CODE
HIGH⚡	src/generate-jit-export-def.py	287	all_undefs.update(undefined)	CODE

Synthetic Comment Markers32 hits · 85 pts

Severity	File	Line	Snippet	Context
HIGH	testing/btest/Traces/unknown-ip-short-payload.pcap.py	9	Generated by Claude Opus 4.6 (Anthropic)	STRING
HIGH	…test/Traces/portmapper-many-unanswered-calls.pcapng.py	5	Generated by ChatGPT 5.5.	STRING
HIGH	…g/btest/Traces/mqtt-subscribe-pending-topics.pcapng.py	9	Generated by Claude Opus 4.6.	STRING
HIGH	testing/btest/Traces/ftp/ftp-many-port-expected.pcap.py	5	Generated by GPT-5.5, adapted to gzip compress by default.	STRING
HIGH	…t/Traces/redis/array-element-object-exhaustion.pcap.py	8	Generated by Claude Opus 4.8, inspired by a similar script provided by Trail of Bits	STRING
HIGH	…btest/Traces/netbios/netbios-split-session-msg.pcap.py	13	Generated by GPT-5 (OpenAI).	STRING
HIGH	…t/Traces/netbios/netbios-truncated-session-msg.pcap.py	16	Generated by Claude Opus 4.8 (Anthropic). Based on a GPT-5.6 sol generated	STRING
HIGH	…st/Traces/tunnels/ayiya-reassembled-geneve-uaf.pcap.py	10	Generated by Claude Sonnet 5.6 based on geneve-reassembled-geneve-uaf.pcap.py	STRING
HIGH	…st/Traces/tunnels/gtpv1-reassembled-geneve-uaf.pcap.py	10	Generated by Claude Sonnet 5.6 based on geneve-reassembled-geneve-uaf.pcap.py	STRING
HIGH	…g/btest/Traces/dce-rpc/bind-ack-no-inband-null.pcap.py	3	This was entirely generated by Claude code.	STRING
HIGH	testing/btest/Traces/ldap/pending-searches-n.pcap.py	10	Generated by ChatGPT-5.5 (Codex).	STRING
HIGH	…ting/btest/Traces/ldap/asn1-aggregate-elements.pcap.py	8	Generated by GPT-5 Codex (OpenAI).	STRING
HIGH	testing/btest/Traces/ssh/kex-quadratic-1000.pcap.py	7	Generated by GPT 5.5 (CODEX) and updated to use different lengths for the	STRING
HIGH	testing/btest/Traces/tcp/reassembly-overlap.pcap.py	9	Originally generated by gpt-5.6-sol, rewritten with Scapy by Claude Opus 4.6 (Anthropic)	STRING
HIGH	…ting/btest/Traces/http/content-length-overflow.pcap.py	12	Generated by Claude Sonnet 4.6 (Anthropic).	STRING
HIGH	testing/btest/Traces/http/connect-prefix-match.pcap.py	14	Generated by Claude Opus 4.8 (Anthropic).	STRING
HIGH	testing/btest/Traces/http/query-method.pcap.py	9	Generated by Claude Opus 4.6 (Anthropic).	STRING
HIGH	…sting/btest/Traces/http/invalid-content-ranges.pcap.py	8	Generated by Claude Sonnet 4.6 (Anthropic).	STRING
HIGH	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	3	# This script is entirely AI generated. It uses a user's AI generated script in order to create a	COMMENT
HIGH	testing/btest/Traces/icmp/icmp6-mldv1.pcap.py	5	Generated by Claude Sonnet 4.6 (Anthropic)	STRING
HIGH	…sting/btest/Traces/icmp/icmp6-nd-short-options.pcap.py	13	Generated by Claude Opus 4.6 (Anthropic)	STRING
HIGH	testing/btest/Traces/icmp/icmp6-mldv2.pcap.py	6	Generated by Claude Sonnet 4.6 (Anthropic)	STRING
HIGH	testing/btest/Traces/icmp/icmp6-mld-query.pcap.py	7	Generated by Claude Sonnet 4.6 (Anthropic)	STRING
HIGH	…Traces/dhcp/dhcp-unique-xid-join-data-growth.pcapng.py	2	Generated by GPT 5.5 to provoke a growing DHCP::join_data table.	STRING
HIGH	…tline/nvt-line-limit-crlf-heap-buffer-overflow.pcap.py	10	Originally generated by GPT-5.6 (OpenAI) via Trail of Bits, modified by Claude	STRING
HIGH	testing/btest/Traces/sip/invalid-content-length.pcap.py	7	Generated by Claude Opus 4.6 (Anthropic).	STRING
HIGH	testing/btest/Traces/krb/error-preauth-padata.pcap.py	6	Generated by Claude Opus 4.6 (Anthropic).	STRING
HIGH	testing/btest/Traces/krb/etype-array-limit.pcap.py	8	Generated by OpenAI Codex GPT-6 sol using Scapy.	STRING
HIGH	testing/btest/Traces/dns/svcb-alpn-malformed.pcap.py	6	Generated by Claude Opus 4.6 (Anthropic).	STRING
HIGH	testing/btest/Traces/dns/conn-count-too-large.pcap.py	6	Generated by Claude Sonnet 4.6 (Anthropic).	STRING
HIGH	testing/btest/Traces/dns/svcb-port-malformed.pcap.py	6	Generated by Claude Opus 4.6 (Anthropic).	STRING
HIGH	testing/btest/Traces/dns/max-compression-depth.pcap.py	16	Generated by Claude Sonnet 4.6 (Anthropic).	STRING

Decorative Section Separators28 hits · 73 pts

Severity	File	Line	Snippet	Context
MEDIUM	ci/tsan_suppressions.txt	10	# =====================================================================	COMMENT
MEDIUM	testing/btest/Traces/rdp/rdp-zero-length-x509.pcap.py	32	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	testing/btest/Traces/rdp/rdp-zero-length-x509.pcap.py	34	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	testing/btest/Traces/rdp/rdp-zero-length-x509.pcap.py	61	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	testing/btest/Traces/rdp/rdp-zero-length-x509.pcap.py	63	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	testing/btest/Traces/rdp/rdp-zero-length-x509.pcap.py	176	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	testing/btest/Traces/rdp/rdp-zero-length-x509.pcap.py	178	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	31	# ── tunables ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	44	# ── read the RFC2822 payload ─────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	57	# ── build the SMTP conversation ──────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	79	# ── packet construction ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	166	# ── write PCAP ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	205	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	207	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	243	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	245	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	293	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	295	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	337	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	339	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	359	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	361	# ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	374	# ── Code path explanation ─────────────────────────────────────────────	COMMENT
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	420	# ── Impact calculation ────────────────────────────────────────────────	STRING
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	470	# ── Generate the payload ─────────────────────────────────────────────	STRING
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	507	# ── Save to file ─────────────────────────────────────────────────────	STRING
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	522	# ── Summary ──────────────────────────────────────────────────────────	STRING
MEDIUM	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	549	# ── Final assertion ───────────────────────────────────────────────────	STRING

Cross-File Repetition14 hits · 70 pts

Severity	File	Snippet	Context
HIGH	…t/Traces/redis/array-element-object-exhaustion.pcap.py	build one ethernet/ipv4/tcp packet; scapy fills in the checksums.	STRING
HIGH	…/btest/Traces/rdp/client-connect-initial-limit.pcap.py	build one ethernet/ipv4/tcp packet; scapy fills in the checksums.	STRING
HIGH	…st/Traces/rdp/client-channel-memory-exhaustion.pcap.py	build one ethernet/ipv4/tcp packet; scapy fills in the checksums.	STRING
HIGH	…btest/Traces/dns/udp-txt-character-strings-cap.pcap.py	build one ethernet/ipv4/udp dns packet for the given exchange/direction.	STRING
HIGH	…ng/btest/Traces/dns/udp-nsec3-type-bitmaps-cap.pcap.py	build one ethernet/ipv4/udp dns packet for the given exchange/direction.	STRING
HIGH	…btest/Traces/dns/udp-spf-character-strings-cap.pcap.py	build one ethernet/ipv4/udp dns packet for the given exchange/direction.	STRING
HIGH	…ing/btest/Traces/dns/udp-nsec-type-bitmaps-cap.pcap.py	build one ethernet/ipv4/udp dns packet for the given exchange/direction.	STRING
HIGH	…btest/Traces/dns/udp-txt-character-strings-cap.pcap.py	an spf reply whose single record repeats character_string count times. scapy's character-string field cannot emit a run	STRING
HIGH	…btest/Traces/dns/tcp-txt-character-strings-cap.pcap.py	an spf reply whose single record repeats character_string count times. scapy's character-string field cannot emit a run	STRING
HIGH	…btest/Traces/dns/udp-spf-character-strings-cap.pcap.py	an spf reply whose single record repeats character_string count times. scapy's character-string field cannot emit a run	STRING
HIGH	…btest/Traces/dns/tcp-spf-character-strings-cap.pcap.py	an spf reply whose single record repeats character_string count times. scapy's character-string field cannot emit a run	STRING
HIGH	…st/Traces/dnp3/dnp3-flowbuffer-overflow-assert.pcap.py	return the 2-byte little-endian dnp3 crc for a block of bytes.	STRING
HIGH	…s/dnp3/dnp3-request-object-count-amplification.pcap.py	return the 2-byte little-endian dnp3 crc for a block of bytes.	STRING
HIGH	…/dnp3/dnp3-response-object-count-amplification.pcap.py	return the 2-byte little-endian dnp3 crc for a block of bytes.	STRING

Self-Referential Comments9 hits · 32 pts

Severity	File	Line	Snippet	Context
MEDIUM	testing/btest/Traces/icmp/icmp6-mldv2.pcap.py	122	# Create the packet	COMMENT
MEDIUM⚡	testing/btest/Traces/icmp/icmp6-mldv2.pcap.py	173	# Create the packet (using unique source address)	COMMENT
MEDIUM⚡	testing/btest/Traces/icmp/icmp6-mldv2.pcap.py	176	# Create a second packet with zero multicast address records	COMMENT
MEDIUM⚡	testing/btest/Traces/icmp/icmp6-mldv2.pcap.py	181	# Create a third packet with malformed record: claims 3 sources but only has 2	COMMENT
MEDIUM	testing/btest/Traces/icmp/icmp6-mldv2.pcap.py	193	# Create a fourth packet with one source and auxiliary data	COMMENT
MEDIUM	testing/btest/Traces/icmp/icmp6-mldv2.pcap.py	205	# Create a fifth packet with malformed aux data: claims aux data length > 0 but no actual data	COMMENT
MEDIUM	doc/redirects.yml	1	# This file defines all the HTTP redirects required for the Readthedocs projects	COMMENT
MEDIUM	doc/conf.py	4	# This file is execfile()d with the current directory set to its containing dir.	COMMENT
MEDIUM	doc/ext/zeek.py	100	# Create a reference	COMMENT

Unused Imports18 hits · 18 pts

Severity	File	Line	Context
LOW	testing/btest/Traces/udp-contents-truncated-oob.pcap.py	16	CODE
LOW	…resql/postgresql-error-field-memory-exhaustion.pcap.py	22	CODE
LOW	…Traces/ftp/ftp-request-event-memory-exhaustion.pcap.py	12	CODE
LOW	…test/Traces/websocket/fragmented-message-state.pcap.py	12	CODE
LOW	…rent-tracker-eventless-table-memory-exhaustion.pcap.py	13	CODE
LOW	…t/Traces/redis/array-element-object-exhaustion.pcap.py	12	CODE
LOW	testing/btest/Traces/ldap/pending-searches-n.pcap.py	13	CODE
LOW	…st/Traces/ldap/ntlm-invalid-target-info-offset.pcap.py	8	CODE
LOW	testing/btest/Traces/ldap/pending-adds-n.pcap.py	13	CODE
LOW	…t/Traces/dhcp/dhcp_bad_cookie_option_retention.pcap.py	17	CODE
LOW	…tline/nvt-line-limit-crlf-heap-buffer-overflow.pcap.py	14	CODE
LOW	…btest/Traces/dns/udp-txt-character-strings-cap.pcap.py	20	CODE
LOW	…ng/btest/Traces/dns/udp-nsec3-type-bitmaps-cap.pcap.py	23	CODE
LOW	…btest/Traces/dns/udp-spf-character-strings-cap.pcap.py	21	CODE
LOW	…btest/Traces/dns/tcp-spf-character-strings-cap.pcap.py	19	CODE
LOW	…ing/btest/Traces/dns/udp-nsec-type-bitmaps-cap.pcap.py	22	CODE
LOW	…btest/Traces/dns/tcp-txt-character-strings-cap.pcap.py	18	CODE
LOW	…st/Traces/dnp3/dnp3-flowbuffer-overflow-assert.pcap.py	24	CODE

Empty Error Handlers3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	ci/collect-repo-info.py	33	except OSError:	CODE
HIGH	ci/collect-repo-info.py	105	except FileNotFoundError:	CODE
HIGH	testing/btest/Files/ws/wstest.py	273	except OSError:	CODE

AI Slop Vocabulary5 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	.agents/skills/scapy-pcap/assets/template-udp.pcap.py	40	# directly. For a single-packet trace, just return one; drop pkt() entirely	COMMENT
MEDIUM	src/Dict.h	299	// The non-robust case is easy. Just advance the current position forward until you	COMMENT
MEDIUM	src/Dict.h	1573	// Pending number of iterators on the Dict, including both robust and non-robust.	COMMENT
MEDIUM	src/script_opt/Expr.h	171	// to leverage.	COMMENT
MEDIUM	src/script_opt/ZAM/ZInst.h	69	// The following is to support robust operation in the face of potential	COMMENT

Hyper-Verbose Identifiers9 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	…sting/btest/Traces/dce-rpc/large-fragments-smb.pcap.py	243	def server_get_info_request_stub():	CODE
LOW	…sting/btest/Traces/dce-rpc/large-fragments-smb.pcap.py	247	def server_get_info_response_stub():	CODE
LOW	testing/btest/Traces/rdp/rdp-zero-length-x509.pcap.py	90	def build_server_security_data():	CODE
LOW	…krb/krb-tcp-request-argument-memory-exhaustion.pcap.py	86	def make_invalid_index_as_req():	CODE
LOW	…krb/krb-tcp-request-argument-memory-exhaustion.pcap.py	92	def make_duplicate_index_as_req():	CODE
LOW	testing/btest/Files/ws/wstest.py	243	def monkey_patch_close_socket():	CODE
LOW	testing/scripts/httpd.py	6	class MyRequestHandler(BaseHTTPServer.BaseHTTPRequestHandler):	CODE
LOW	doc/ext/zeek.py	55	def object_description_transform(app, domain, objtype, contentnode):	CODE
LOW	src/generate-jit-export-def.py	76	def extract_defined_externals(dumpbin, lib_path):	CODE

Redundant / Tautological Comments3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	src/generate-jit-export-def.py	53	# Check if this is a function ("notype ()") or data ("notype" only).	COMMENT
LOW	src/generate-jit-export-def.py	94	# Check if any path component matches a target dir pattern.	COMMENT
LOW	src/generate-jit-export-def.py	142	# Check if the symbol belongs to a whitelisted namespace.	COMMENT

Deep Nesting4 hits · 4 pts

Severity	File	Line	Context
LOW	ci/collect-repo-info.py	162	CODE
LOW	doc/ext/zeek.py	520	CODE
LOW	doc/ext/zeek.py	567	CODE
LOW	src/generate-jit-export-def.py	86	CODE

Modern Structural Boilerplate2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	ci/collect-repo-info.py	22	logger = logging.getLogger(__name__)	CODE
LOW	doc/ext/zeek.py	27	logger = logging.getLogger(__name__)	CODE

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	ci/benchmark.sh	57	# If we got a bad status back from the host, we want to make sure to mask the host	COMMENT

Excessive Try-Catch Wrapping2 hits · 0 pts

Severity	File	Line	Snippet	Context
LOW	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	487	except Exception:	STRING
LOW	…sting/btest/Traces/smtp/mime-header-size-limit.pcap.py	500	except Exception:	STRING

zeek/zeek

Open-Source Code Quality, Security and Technical Debt Review