randytarampi/slamscan

View on GitHub

Showing 121 of 121 total issues

Similar blocks of code found in 2 locations. Consider refactoring.
Open

gulp.task("test.unit", () => {
    const mocha = require("gulp-mocha");
    const mochaConfig = require("./mocha.config");

    return gulp.src("test/unit/**/*.js", {read: false})
Severity: Minor
Found in gulpfile.js and 1 other location - About 50 mins to fix
gulpfile.js on lines 40..46

Duplicated Code

Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

Tuning

This issue has a mass of 51.

We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

Refactorings

Further Reading

Similar blocks of code found in 2 locations. Consider refactoring.
Open

gulp.task("test.integration", () => {
    const mocha = require("gulp-mocha");
    const mochaConfig = require("./mocha.config");

    return gulp.src("test/integration/**/*.js", {read: false})
Severity: Minor
Found in gulpfile.js and 1 other location - About 50 mins to fix
gulpfile.js on lines 32..38

Duplicated Code

Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

Tuning

This issue has a mass of 51.

We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

Refactorings

Further Reading

Similar blocks of code found in 2 locations. Consider refactoring.
Open

export const getTagsForFileInBucket = (bucket, key) => new Aws.S3({signatureVersion: "v4"})
    .getObjectTagging({
        Bucket: bucket,
        Key: decodeURIComponent(key)
    })
Severity: Minor
Found in src/lib/util/getTagsForFileInBucket.js and 1 other location - About 45 mins to fix
src/lib/util/downloadFileFromBucket.js on lines 4..10

Duplicated Code

Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

Tuning

This issue has a mass of 50.

We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

Refactorings

Further Reading

Similar blocks of code found in 2 locations. Consider refactoring.
Open

export const downloadFileFromBucket = (bucket, key, filePath) => new Promise((resolve, reject) => new Aws.S3({signatureVersion: "v4"})
    .getObject({
        Bucket: bucket,
        Key: decodeURIComponent(key)
    })
Severity: Minor
Found in src/lib/util/downloadFileFromBucket.js and 1 other location - About 45 mins to fix
src/lib/util/getTagsForFileInBucket.js on lines 3..9

Duplicated Code

Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

Tuning

This issue has a mass of 50.

We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

Refactorings

Further Reading

Double quote to prevent globbing and word splitting.
Open

    -v ${DIR}/..:/opt/app \
Severity: Minor
Found in bin/build.sh by shellcheck

Double quote to prevent globbing and word splitting.

Problematic code:

echo $1
for i in $*; do :; done # this done and the next one also applies to expanding arrays.
for i in $@; do :; done

Correct code:

echo "$1"
for i in "$@"; do :; done # or, 'for i; do'

Rationale

The first code looks like "print the first argument". It's actually "Split the first argument by IFS (spaces, tabs and line feeds). Expand each of them as if it was a glob. Join all the resulting strings and filenames with spaces. Print the result."

The second one looks like "iterate through all arguments". It's actually "join all the arguments by the first character of IFS (space), split them by IFS and expand each of them as globs, and iterate on the resulting list". The third one skips the joining part.

Quoting variables prevents word splitting and glob expansion, and prevents the script from breaking when input contains spaces, line feeds, glob characters and such.

Strictly speaking, only expansions themselves need to be quoted, but for stylistic reasons, entire arguments with multiple variable and literal parts are often quoted as one:

$HOME/$dir/dist/bin/$file        # Unquoted (bad)
"$HOME"/"$dir"/dist/bin/"$file"  # Minimal quoting (good)
"$HOME/$dir/dist/bin/$file"      # Canonical quoting (good)

When quoting composite arguments, make sure to exclude globs and brace expansions, which lose their special meaning in double quotes: "$HOME/$dir/src/*.c" will not expand, but "$HOME/$dir/src"/*.c will.

Note that $( ) starts a new context, and variables in it have to be quoted independently:

echo "This $variable is quoted $(but this $variable is not)"
echo "This $variable is quoted $(and now this "$variable" is too)"

Exceptions

Sometimes you want to split on spaces, like when building a command line:

options="-j 5 -B"
make $options file

Just quoting this doesn't work. Instead, you should have used an array (bash, ksh, zsh):

options=(-j 5 -B) # ksh: set -A options -- -j 5 -B
make "${options[@]}" file

or a function (POSIX):

make_with_flags() { make -j 5 -B "$@"; }
make_with_flags file

To split on spaces but not perform glob expansion, Posix has a set -f to disable globbing. You can disable word splitting by setting IFS=''.

Similarly, you might want an optional argument:

debug=""
[[ $1 == "--trace-commands" ]] && debug="-x"
bash $debug script

Quoting this doesn't work, since in the default case, "$debug" would expand to one empty argument while $debug would expand into zero arguments. In this case, you can use an array with zero or one elements as outlined above, or you can use an unquoted expansion with an alternate value:

debug=""
[[ $1 == "--trace-commands" ]] && debug="yes"
bash ${debug:+"-x"} script

This is better than an unquoted value because the alternative value can be properly quoted, e.g. wget ${output:+ -o "$output"}.


As always, this warning can be [[ignore]]d on a case-by-case basis.

this is especially relevant when BASH many not be available for the array work around. For example, use in eval or in command options where script has total control of the variables...

FLAGS="-av -e 'ssh -x' --delete --delete-excluded"
...
# shellcheck disable=SC2086
eval rsync $FLAGS ~/dir remote_host:dir

Notice

Original content from the ShellCheck https://github.com/koalaman/shellcheck/wiki.

TODO found
Open

      // TODO this code is duplicated in a few places, need a common way to filter out workspace patterns from lockfile
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

// TODO: make this into a proper hashtable
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

  var singleByteCharCount = 0,  //TODO Do we really need this?
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

            // TODO `and is required by {PARENT}`,
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

  // TODO:  This set of data comes from the character frequency-
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

No licenses found for each-props. Either the library reports the licenses in an unsupported format, or the library is unlicensed.
Open

each-props@^1.3.0:
Severity: Minor
Found in yarn.lock by git-legal

No licenses found for ejs. Either the library reports the licenses in an unsupported format, or the library is unlicensed.
Open

ejs@^2.6.2:
Severity: Minor
Found in yarn.lock by git-legal

TODO found
Open

// TODO: this uid check is kinda whack
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

    //TODO: compression flag
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

  // TODO - it's unclear _which_ of these Node will actually use as its name
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

  // TODO
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

        // TODO: rework to inline fn with no type cast?
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

  // TODO: use content-type or other module
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

TODO found
Open

    // TODO - This is a bit of a hack to take care of a case
Severity: Minor
Found in .yarn/releases/yarn-1.22.5.cjs by fixme

No licenses found for arg. Either the library reports the licenses in an unsupported format, or the library is unlicensed.
Open

arg@^4.1.0:
Severity: Minor
Found in yarn.lock by git-legal
Severity
Category
Status
Source
Language