0.5

Adjusted Signal

0.5

Raw Pattern Score

100%

Time Factor

2026-10-29

Last Push

10.8K

Stars

Language

311.8K

Lines of Code

1.1K

Files

144

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 136 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 0.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 8 finding(s).

PR Review Velocity Impact 2.5/100 · LOW

Which changes need focused human review? 144 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 8LOW 136

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 144 distinct pattern matches across 2 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block136 hits · 136 pts

Severity	File	Line	Snippet	Context
LOW	.goreleaser.yaml	1	# Make sure to check the documentation at https://goreleaser.com	COMMENT
LOW	.mdformat.toml	1	# .mdformat.toml — mdformat configuration file	COMMENT
LOW	.mdformat.toml	21	# N — reflow to at most N characters per line (integer ≥ 2)	COMMENT
LOW	.mdformat.toml	41	# "keep" — preserve each file's existing line ending type	COMMENT
LOW	.mdformat.toml	61	#	COMMENT
LOW	.mdformat.toml	81	# "gfm" — mdformat-gfm 1.0.0 (GFM: strikethrough, task lists, autolinks)	COMMENT
LOW	.mdformat.toml	101	# matches the invocation which omits --codeformatters.	COMMENT
LOW	.mdformat.toml	121	# Plugin options are nested under [plugin.<plugin-id>] sub-tables and passed	COMMENT
LOW	bin/_tools/changelogabsref/main.go	1	// Command changelogabsref rewrites the changelog section of a GoReleaser	COMMENT
LOW	plugin/federation/matchedkey.go	21		COMMENT
LOW	plugin/federation/entity.go	21	//	COMMENT
LOW	plugin/federation/entity.go	41	// this type because the entity-resolver strategies are mutually exclusive per	COMMENT
LOW	plugin/federation/federation.go	41	// true if @requires is used in the schema	COMMENT
LOW	plugin/federation/federation.go	61	// This can be overriding by @entityResolver(multi: Boolean) directive.	COMMENT
LOW	plugin/federation/federation.go	321	//	COMMENT
LOW	plugin/federation/federation.go	841	RequiresStrategy: requiresStrategy,	COMMENT
LOW	plugin/federation/federation.go	1161		COMMENT
LOW	plugin/federation/representation.go	201	requiresPath pathKind = "@requires"	COMMENT
LOW	…n/testdata/entityresolverpreloaded/entity.resolvers.go	21	// product's @requires field (Category) is populated on the representation, so	COMMENT
LOW	internal/code/util.go	21	var modsRegex = regexp.MustCompile(`^(\\|\[\])`)	COMMENT
LOW	docs/content/config.md	61	# Optional: turn on to not generate template comments above resolvers	COMMENT
LOW	docs/content/config.md	81	# Optional: turn on to omit Is<Name>() methods to interface and unions	COMMENT
LOW	docs/content/config.md	101		COMMENT
LOW	docs/content/config.md	121	# Optional: set to use -gcflags="-N -l" during validation to disable compiler	COMMENT
LOW	docs/content/config.md	141	# graphql.UnmarshalNamedInputFromContext still resolves every input by name.	COMMENT
LOW	docs/content/config.md	161	# subscription_context_field: false	COMMENT
LOW	codegen/config/config.go	721		COMMENT
LOW	codegen/config/config.go	761	}	COMMENT
LOW	codegen/config/config.go	981	// If the directive implementation is statically defined, don't provide a hook for it	COMMENT
LOW	codegen/config/resolver.go	21	OmitTemplateComment bool `yaml:"omit_template_comment,omitempty"`	COMMENT
LOW	graphql/slice.go	1	package graphql	COMMENT
LOW	graphql/handler.go	61	// HandlerExtension adds functionality to the http handler. See the list of possible hook points	COMMENT
LOW	graphql/context_operation.go	101	continue Next	COMMENT
LOW	graphql/context_operation.go	121	// query, avoiding the extra round-trip entirely without fetching data the client never asked for.	COMMENT
LOW	graphql/executable_schema.go	21	) (int, bool)	COMMENT
LOW	graphql/executable_schema.go	201	// id	COMMENT
LOW	graphql/event.go	1	package graphql	COMMENT
LOW	graphql/resolve_concurrently_test.go	261	var b bytes.Buffer	COMMENT
LOW	graphql/execution_context_state.go	21	// Deferred counts the @defer labels this request has produced. The	COMMENT
LOW	graphql/duration.go	1	package graphql	COMMENT
LOW	graphql/duration.go	41	// T - T is the time designator that precedes the time components	COMMENT
LOW	graphql/invalid_null.go	21	// NullSourceUnknown is used when there is no field context to inspect.	COMMENT
LOW	graphql/invalid_null.go	161	// this path already errored — that error is the cause, and the spec asks for	COMMENT
LOW	graphql/batch.go	81	groups[typeName] = &BatchParentGroup{Parents: parents, IndexMap: indexMap}	COMMENT
LOW	graphql/executable_schema_mock.go	21	//	COMMENT
LOW	graphql/batch_federation.go	1	package graphql	COMMENT
LOW	graphql/batch_federation.go	21	// FieldContext ancestry (each WithFieldContext links Parent to the previous context):	COMMENT
LOW	graphql/input_deprecated.go	41	// functions.	COMMENT
LOW	graphql/context_field.go	21	Object string	COMMENT
LOW	graphql/context_field.go	41	// Note that, the returned child FieldContext represents the context as it was	COMMENT
LOW	graphql/context_field.go	121	Field: field,	COMMENT
LOW	graphql/context_field.go	141	// declared as nullable (String) can behave like a non-null field (String!)	COMMENT
LOW	graphql/resolve_concurrently.go	1	package graphql	COMMENT
LOW	graphql/fieldset.go	41	// shared FieldSet.Invalids, so one label's invalid field cannot null	COMMENT
LOW	graphql/handler/server.go	41	//	COMMENT
LOW	graphql/handler/transport/json_decode_fuzz_test.go	21	//	COMMENT
LOW	graphql/handler/transport/websocket_resolver_error.go	21	// AddSubscriptionError is used to let websocket return an error message after subscription resolver	COMMENT
LOW	graphql/handler/transport/websocket_resolver_error.go	41	// }	COMMENT
LOW	graphql/handler/transport/http_multipart_mixed.go	41	func (t MultipartMixed) Do(w http.ResponseWriter, r *http.Request, exec graphql.GraphExecutor) {	COMMENT
LOW	graphql/handler/transport/http_multipart_mixed.go	121	}	COMMENT
76 more matches not shown…

Decorative Section Separators8 hits · 28 pts

Severity	File	Line	Snippet	Context
MEDIUM	.mdformat.toml	17	# ── Paragraph wrapping ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	.mdformat.toml	28	# ── Ordered list numbering ────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	.mdformat.toml	37	# ── Line endings ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	.mdformat.toml	44	# ── HTML equivalence validation ───────────────────────────────────────────────	COMMENT
MEDIUM	.mdformat.toml	56	# ── File exclusions (Python 3.13+) ────────────────────────────────────────────	COMMENT
MEDIUM	.mdformat.toml	72	# ── Extension plugins ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	.mdformat.toml	98	# ── Code formatter plugins ────────────────────────────────────────────────────	COMMENT
MEDIUM	.mdformat.toml	119	# ── Plugin-specific configuration ─────────────────────────────────────────────	COMMENT

99designs/gqlgen

Open-Source Code Quality, Security and Technical Debt Review