2.2

Adjusted Signal

2.2

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

4.1K

Stars

TypeScript

Language

367.3K

Lines of Code

1.9K

Files

779

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 574 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.2/100 · LOW

Are imports declared and package/API names verified? 201 finding(s).

Agent Over-Engineering Ratio 2.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 186 finding(s).

PR Review Velocity Impact 10.4/100 · LOW

Which changes need focused human review? 779 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 1MEDIUM 9LOW 768

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 779 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Structural Annotation Overuse200 hits · 227 pts

Severity	File	Line	Snippet	Context
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	272	// Step 1: Create new email account	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	276	// Step 2: Fill form fields	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	281	// Step 3: Submit form	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	285	// Step 4: Handle OTP verification	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	291	// Step 5: Verify success	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	304	// Step 1: Enter invalid email	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	309	// Step 2: Verify error appears	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	316	// Step 3: Verify error content	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	320	// Step 4: Verify authentication state	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	332	// Step 1: Setup email account	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	336	// Step 2: Initial attempt with wrong OTP	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	346	// Step 3: Handle error	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	351	// Step 4: Retry with correct OTP	COMMENT
LOW⚡	…/NativeAuthSample/context/TEST_IMPLEMENTATION_GUIDE.md	357	// Step 5: Verify success	COMMENT
LOW⚡	lib/msal-angular/src/msal.interceptor.ts	490	// Step 1: Escape all regex metacharacters so literals (including . and ?) match literally.	COMMENT
LOW⚡	lib/msal-angular/src/msal.interceptor.ts	493	// Step 2: Replace escaped wildcards with component-aware regex equivalents.	COMMENT
LOW⚡	lib/msal-angular/src/msal.interceptor.ts	501	// Step 3: Anchor for full-string matching.	COMMENT
LOW	lib/msal-node/docs/key-vault-managed-identity.md	104	#### Step 1: Deploy your files	COMMENT
LOW	lib/msal-node/docs/key-vault-managed-identity.md	114	### Step 2: Update your app's Redirect URI	COMMENT
LOW⚡	…st/custom_auth/integration_tests/ResetPassword.spec.ts	514	// Step 8: Mock /register/v1.0/challenge - challenge auth method	COMMENT
LOW⚡	…st/custom_auth/integration_tests/ResetPassword.spec.ts	530	// Step 9: Mock /register/v1.0/continue - submit challenge	COMMENT
LOW⚡	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1832	// Step 9: Mock /oauth2/token - successful MFA completion	COMMENT
LOW⚡	…st/custom_auth/integration_tests/ResetPassword.spec.ts	2030	// Step 9: Mock /oauth2/token - successful MFA completion	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	63	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	74	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	90	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	102	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	114	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll once and still in progress	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	125	// Step 6: Mock /resetpassword/v1.0/poll_completion - poll twice and still in progress	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	136	// Step 7: Mock /resetpassword/v1.0/poll_completion - poll three times and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	148	// Step 8: Mock /oauth/v2.0/token - acquire tokens	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	413	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	424	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	440	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	452	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	464	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	476	// Step 6: Mock /oauth/v2.0/token - returns registration_required error	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	495	// Step 7: Mock /register/v1.0/introspect - get available auth methods	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	541	// Step 10: Mock /oauth/v2.0/token - successful token acquisition	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	620	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	631	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	647	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	659	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	671	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	683	// Step 6: Mock /oauth/v2.0/token - returns registration_required error	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	702	// Step 7: Mock /register/v1.0/introspect - get available auth methods	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	721	// Step 8: Mock /register/v1.0/challenge - challenge auth method	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	737	// Step 9: Mock /register/v1.0/continue - submit challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	748	// Step 10: Mock /oauth/v2.0/token - successful token acquisition	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1710	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1721	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1737	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1749	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1761	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1774	// Step 6: Mock /oauth/v2.0/token - returns registration_required error	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1789	// Step 7: Mock /oauth2/introspect - return available methods	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1815	// Step 8: Mock /oauth2/challenge - MFA challenge request	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1908	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1919	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1935	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
140 more matches not shown…

Hyper-Verbose Identifiers182 hits · 193 pts

Severity	File	Line	Snippet	Context
LOW	shared-configs/rollup-msal/logger-minify-plugin.js	218	function normalizeTemplateVariables(str) {	CODE
LOW	shared-configs/rollup-msal/logger-minify-plugin.js	264	function extractTemplateExpressions(templateText) {	CODE
LOW	…lugin-custom-msal/rules/no-dynamic-telemetry-fields.js	223	function isPerformanceEventVariable(name) {	CODE
LOW	shared-configs/jest-config/BroadcastChannelTracker.js	17	function createBroadcastChannelTracker(getBroadcastChannel) {	CODE
LOW	shared-configs/jest-config/BroadcastChannelTracker.js	46	function forceCleanupBroadcastChannels() {	CODE
LOW	shared-test-utils/src/CredentialGenerators.ts	12	export function buildAccountFromIdTokenClaims(	CODE
LOW	shared-test-utils/src/CredentialGenerators.ts	27	export function buildAccountInfoFromIdTokenClaims(	CODE
LOW	docs/errors.md	596	async function myInteractionInProgressHandler() {	CODE
LOW	samples/msal-node-samples/Managed-Identity/FIC/index.ts	41	async function getAccessTokenFromManagedIdentity(): Promise<string> {	CODE
LOW	samples/msal-node-samples/Managed-Identity/FIC/index.ts	76	async function getAccessTokenForKeyVault(	CODE
LOW	…ples/client-credentials-distributed-cache/src/index.ts	100	function initializePerformanceObserver(): void {	CODE
LOW	…node-samples/on-behalf-of-distributed-cache/src/app.ts	74	function initializePerformanceObserver(): void {	CODE
LOW	samples/msal-node-samples/client-credentials/index.js	32	function getClientCredentialsToken(cca, clientCredentialRequestScopes, ro) {	CODE
LOW	…al-node-samples/auth-code-distributed-cache/src/app.ts	193	function initializePerformanceObserver(): void {	CODE
LOW	samples/e2eTestUtils/src/ElectronPlaywrightTestUtils.ts	134	export async function retrieveAuthCodeUrlFromBrowserContext(	CODE
LOW	samples/e2eTestUtils/src/KmsiTestUtils.ts	67	export async function getIdTokenClaimsFromCache(	CODE
LOW	samples/e2eTestUtils/src/KmsiTestUtils.ts	158	export function assertSigninStateContains(	CODE
LOW	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	56	function verifyPlatformBrokerPrerequisites(): void {	CODE
LOW	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	82	export function createPlatformBrokerProfile(): PlatformBrokerProfile {	CODE
LOW	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	94	export async function launchPlatformBrokerBrowser(	CODE
LOW⚡	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	127	export function removePlatformBrokerProfile(	CODE
LOW⚡	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	137	export async function verifyPlatformBrokerTokenStore(	CODE
LOW⚡	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	146	async function getPlatformBrokerAuthData(	CODE
LOW	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	163	function requirePlatformBrokerAccount(	CODE
LOW	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	180	export async function verifyPlatformBrokerResponse(	CODE
LOW	samples/e2eTestUtils/src/PlatformBrokerTestUtils.ts	192	export async function verifyPlatformBrokerAccount(	CODE
LOW	samples/e2eTestUtils/src/TestUtils.ts	365	export async function enterCredentialsADFSWithConsent(	CODE
LOW	samples/msal-browser-samples/ExpressSample/server.js	133	async function updateVersionDescriptions() {	CODE
LOW	…sal-browser-samples/ExpressSample/test/test-helpers.ts	14	export async function switchToVersionAndVerifyCacheWasUsed(	CODE
LOW	…sal-browser-samples/ExpressSample/test/test-helpers.ts	62	export async function forceRefreshAndVerifyTokenCountsDoNotChange(	CODE
LOW	…s/msal-browser-samples/ExpressSample/test/dpop.spec.ts	85	async function waitForPlaygroundControls(	CODE
LOW	…s/msal-browser-samples/ExpressSample/test/dpop.spec.ts	163	async function applyPlaygroundConfiguration(	CODE
LOW	…s/msal-browser-samples/ExpressSample/test/dpop.spec.ts	177	async function loadAndConfigurePlayground(	CODE
LOW	…s/msal-browser-samples/ExpressSample/test/dpop.spec.ts	252	async function assertDpopAccessTokenCached(	CODE
LOW	…s/msal-browser-samples/ExpressSample/public/js/auth.js	18	function processAuthenticationResult(response) {	CODE
LOW	…/msal-browser-samples/ExpressSample/public/js/utils.js	33	export function validateEnvironmentVariables() {	CODE
LOW	…/msal-browser-samples/ExpressSample/public/js/utils.js	58	function showEnvironmentVariableAlert(missingVars, emptyVars) {	CODE
LOW	…/msal-browser-samples/ExpressSample/public/js/utils.js	103	function addEnvironmentAlertStyles() {	CODE
LOW	…amples/LegacyPollingSample/test/legacy-polling.spec.ts	19	async function expectLoginPopupSucceeded(page: Page): Promise<void> {	CODE
LOW	…NestedAuthAppSample/hostApp/src/nestedAppAuthBridge.js	169	export function installHostNestedAppAuthBridge(hostPca, nestedOrigin) {	CODE
LOW	…owser-samples/NestedAuthAppSample/test/naaTestUtils.ts	159	export function accessTokenForScopesExists(	CODE
LOW	…stedAuthAppSample/nestedApp/src/nestedAppAuthBridge.js	24	export function installNestedAppAuthBridge() {	CODE
LOW	…msal-browser-samples/VanillaJSTestApp2.0/app/pop/ui.js	40	function showPopTokenWithKidAcquired(encodedJwt) {	CODE
LOW	…-sample/src/pages/ProfileUseMsalAuthenticationHook.jsx	49	export function ProfileUseMsalAuthenticationHook() {	CODE
LOW	…-sample/src/pages/ProfileUseMsalAuthenticationHook.jsx	49	export function ProfileUseMsalAuthenticationHook() {	CODE
LOW	…-sample/src/pages/ProfileUseMsalAuthenticationHook.jsx	49	export function ProfileUseMsalAuthenticationHook() {	CODE
LOW	…-sample/src/pages/ProfileUseMsalAuthenticationHook.jsx	49	export function ProfileUseMsalAuthenticationHook() {	CODE
LOW	…amples/angular-standalone-sample/src/app/app.config.ts	66	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	…gular-samples/angular-b2c-sample/src/app/app.module.ts	67	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	…r-samples/angular-modules-sample/src/app/app.module.ts	65	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	lib/msal-angular/docs/redirects.md	95	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	lib/msal-angular/docs/multi-tenant.md	61	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	lib/msal-angular/docs/msal-interceptor.md	218	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	lib/msal-angular/docs/configuration.md	116	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	lib/msal-angular/docs/configuration.md	375	export function MSALInterceptorConfigFactory(config: ConfigService): MsalInterceptorConfiguration {	CODE
LOW	lib/msal-angular/docs/configuration.md	558	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	lib/msal-angular/docs/v4-v5-upgrade-guide.md	26	export function MSALInterceptorConfigFactory(): MsalInterceptorConfiguration {	CODE
LOW	lib/msal-angular/src/msal.interceptor.spec.ts	1195	function initializeAndSpyOnWarning(strict?: boolean): jasmine.Spy {	CODE
LOW	lib/msal-angular/src/msal.interceptor.spec.ts	1251	function MSALStrictInterceptorFactory(	CODE
LOW⚡	lib/msal-common/apiReview/msal-common.api.md	1382	export function createClientConfigurationError(errorCode: string, correlationId: string): ClientConfigurationError;	CODE
122 more matches not shown…

Verbosity Indicators184 hits · 192 pts

Severity	File	Line	Snippet	Context
LOW⚡	lib/msal-angular/src/msal.interceptor.ts	490	// Step 1: Escape all regex metacharacters so literals (including . and ?) match literally.	COMMENT
LOW⚡	lib/msal-angular/src/msal.interceptor.ts	493	// Step 2: Replace escaped wildcards with component-aware regex equivalents.	COMMENT
LOW⚡	lib/msal-angular/src/msal.interceptor.ts	501	// Step 3: Anchor for full-string matching.	COMMENT
LOW⚡	…st/custom_auth/integration_tests/ResetPassword.spec.ts	514	// Step 8: Mock /register/v1.0/challenge - challenge auth method	COMMENT
LOW⚡	…st/custom_auth/integration_tests/ResetPassword.spec.ts	530	// Step 9: Mock /register/v1.0/continue - submit challenge	COMMENT
LOW⚡	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1832	// Step 9: Mock /oauth2/token - successful MFA completion	COMMENT
LOW⚡	…st/custom_auth/integration_tests/ResetPassword.spec.ts	2030	// Step 9: Mock /oauth2/token - successful MFA completion	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	63	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	74	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	90	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	102	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	114	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll once and still in progress	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	125	// Step 6: Mock /resetpassword/v1.0/poll_completion - poll twice and still in progress	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	136	// Step 7: Mock /resetpassword/v1.0/poll_completion - poll three times and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	148	// Step 8: Mock /oauth/v2.0/token - acquire tokens	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	413	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	424	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	440	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	452	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	464	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	476	// Step 6: Mock /oauth/v2.0/token - returns registration_required error	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	495	// Step 7: Mock /register/v1.0/introspect - get available auth methods	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	541	// Step 10: Mock /oauth/v2.0/token - successful token acquisition	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	620	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	631	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	647	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	659	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	671	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	683	// Step 6: Mock /oauth/v2.0/token - returns registration_required error	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	702	// Step 7: Mock /register/v1.0/introspect - get available auth methods	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	721	// Step 8: Mock /register/v1.0/challenge - challenge auth method	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	737	// Step 9: Mock /register/v1.0/continue - submit challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	748	// Step 10: Mock /oauth/v2.0/token - successful token acquisition	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1710	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1721	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1737	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1749	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1761	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1774	// Step 6: Mock /oauth/v2.0/token - returns registration_required error	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1789	// Step 7: Mock /oauth2/introspect - return available methods	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1815	// Step 8: Mock /oauth2/challenge - MFA challenge request	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1908	// Step 1: Mock /resetpassword/v1.0/start - successful start	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1919	// Step 2: Mock /resetpassword/v1.0/challenge - successful challenge	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1935	// Step 3: Mock /resetpassword/v1.0/continue - submit code successfully	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1947	// Step 4: Mock /resetpassword/v1.0/submit - successful submit password	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1959	// Step 5: Mock /resetpassword/v1.0/poll_completion - poll and succeeded	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1972	// Step 6: Mock /oauth/v2.0/token - returns registration_required error	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	1987	// Step 7: Mock /oauth2/introspect - return available methods	COMMENT
LOW	…st/custom_auth/integration_tests/ResetPassword.spec.ts	2013	// Step 8: Mock /oauth2/challenge - MFA challenge request	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	531	// Step 6: Mock /register/v1.0/continue - verification successful	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	541	// Step 7: Mock /oauth2/token - successful completion after JIT registration	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	678	// Step 6: Mock /register/v1.0/continue - verification successful	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	688	// Step 7: Mock /oauth2/token - successful completion after JIT registration	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	832	// Step 6: Mock /register/v1.0/continue - verification successful	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	842	// Step 7: Mock /oauth2/token - successful completion after JIT registration	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	979	// Step 6: Mock /register/v1.0/continue - fast-pass registration	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	989	// Step 7: Mock /oauth2/token - successful completion after fast-pass JIT registration	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	1359	// Step 6: Mock /oauth2/token - successful MFA completion	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	1498	// Step 6: Mock /oauth2/token - successful MFA completion	COMMENT
LOW⚡	…wser/test/custom_auth/integration_tests/SignIn.spec.ts	1638	// Step 6: Mock /oauth2/token - successful MFA completion	COMMENT
124 more matches not shown…

Fake / Example Data199 hits · 150 pts

Severity	File	Line	Snippet	Context
LOW	…-browser-samples/ExpressSample/public/js/playground.js	97	// loginHint: "user@example.com",	COMMENT
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2385	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2419	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2500	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2535	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2575	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2601	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2675	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2710	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2787	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2822	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2894	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	2929	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	3021	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	3051	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	3107	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	3132	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	3172	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/CacheManager.spec.ts	3186	username: "John Doe",	CODE
LOW	lib/msal-common/test/cache/cacheStore.json	3	"username": "John Doe",	CODE
LOW	lib/msal-common/test/cache/entities/cacheConstants.ts	99	username: "John Doe",	CODE
LOW	lib/msal-common/test/test_kit/StringConstants.ts	264	'{"sub":"1234567890","name":"John Doe","iat":1516239022,"cnf":{"kid":"NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9X	CODE
LOW	lib/msal-common/test/test_kit/StringConstants.ts	755	username: "John Doe",	CODE
LOW	lib/msal-common/test/test_kit/StringConstants.ts	763	username: "Jane Doe",	CODE
LOW	lib/msal-node/cache.json	4	"username": "John Doe",	CODE
LOW	lib/msal-node/test/cache/cacheConstants.ts	91	name: "John Doe",	CODE
LOW	lib/msal-node/test/cache/Storage.spec.ts	126	username: "Jane Doe",	CODE
LOW	lib/msal-node/test/cache/Storage.spec.ts	163	username: "Jane Doe",	CODE
LOW	lib/msal-node/test/cache/Storage.spec.ts	174	name: "Jane Doe",	CODE
LOW	…al-node/test/cache/cache-test-files/default-cache.json	4	"username": "John Doe",	CODE
LOW	…ache/cache-test-files/cache-unrecognized-entities.json	12	"username": "John Doe",	CODE
LOW	lib/msal-node/test/cache/serializer/Account.json	4	"username": "John Doe",	CODE
LOW	…b/msal-node/test/cache/serializer/Deserializer.spec.ts	33	name: "John Doe",	CODE
LOW	lib/msal-node/test/test_kit/StringConstants.ts	224	'{"sub":"1234567890","name":"John Doe","iat":1516239022,"cnf":{"kid":"NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9X	CODE
LOW	…sal-node/test/client/ClientCredentialClientFmi.spec.ts	373	secret: "fake-token",	CODE
LOW	…sal-node/test/client/ClientCredentialClientFmi.spec.ts	557	secret: "fake-token",	CODE
LOW	…twork_client/custom_auth_api/RegisterApiClient.spec.ts	63	login_hint: "user@example.com",	CODE
LOW	…twork_client/custom_auth_api/RegisterApiClient.spec.ts	119	challenge_target: "user@example.com",	CODE
LOW	…twork_client/custom_auth_api/RegisterApiClient.spec.ts	133	challenge_target: "user@example.com",	CODE
LOW	…twork_client/custom_auth_api/RegisterApiClient.spec.ts	154	challenge_target: "user@example.com",	CODE
LOW	…twork_client/custom_auth_api/RegisterApiClient.spec.ts	167	challenge_target: "user@example.com",	CODE
LOW	…tom_auth/core/interaction_client/mfa/MfaClient.spec.ts	140	challenge_target_label: "user@example.com",	CODE
LOW	…tom_auth/core/interaction_client/mfa/MfaClient.spec.ts	161	"user@example.com"	CODE
LOW⚡	…tom_auth/core/interaction_client/jit/JitClient.spec.ts	111	login_hint: "user@example.com",	CODE
LOW⚡	…tom_auth/core/interaction_client/jit/JitClient.spec.ts	118	verificationContact: "user@example.com",	CODE
LOW⚡	…tom_auth/core/interaction_client/jit/JitClient.spec.ts	128	challenge_target: "user@example.com",	CODE
LOW	…tom_auth/core/interaction_client/jit/JitClient.spec.ts	180	challenge_target: "user@example.com",	CODE
LOW	…tom_auth/core/interaction_client/jit/JitClient.spec.ts	197	expect(result.challengeTargetLabel).toBe("user@example.com");	CODE
LOW	…tom_auth/core/interaction_client/jit/JitClient.spec.ts	208	challenge_target: "user@example.com",	CODE
LOW	…/interaction_client/jit/result/JitActionResult.spec.ts	25	login_hint: "user@example.com",	CODE
LOW	…/interaction_client/jit/result/JitActionResult.spec.ts	37	challengeTargetLabel: "user@example.com",	CODE
LOW	…/interaction_client/jit/result/JitActionResult.spec.ts	45	expect(result.challengeTargetLabel).toBe("user@example.com");	CODE
LOW	…/custom_auth/core/auth_flow/mfa/state/MfaState.spec.ts	40	login_hint: "user@example.com",	CODE
LOW	…/custom_auth/core/auth_flow/mfa/state/MfaState.spec.ts	110	challengeTargetLabel: "user@example.com",	CODE
LOW	…/custom_auth/core/auth_flow/mfa/state/MfaState.spec.ts	128	expect(verificationState.getSentTo()).toBe("user@example.com");	CODE
LOW	…/custom_auth/core/auth_flow/mfa/state/MfaState.spec.ts	219	challengeTargetLabel: "user@example.com",	CODE
LOW	…/custom_auth/core/auth_flow/mfa/state/MfaState.spec.ts	242	expect(state.getSentTo()).toBe("user@example.com");	CODE
LOW	…uth_flow/jit/state/AuthMethodRegistrationState.spec.ts	32	login_hint: "user@example.com",	CODE
LOW	…uth_flow/jit/state/AuthMethodRegistrationState.spec.ts	76	verificationContact: "user@example.com",	CODE
LOW	…uth_flow/jit/state/AuthMethodRegistrationState.spec.ts	96	verificationContact: "user@example.com",	CODE
139 more matches not shown…

Decorative Section Separators4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	.pipelines/nightly-build.yml	47	# ══════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	.pipelines/nightly-build.yml	54	# ══════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	.pipelines/nightly-build.yml	109	# ══════════════════════════════════════════════════════════════════════════	COMMENT
MEDIUM	.pipelines/nightly-build.yml	115	# ══════════════════════════════════════════════════════════════════════════	COMMENT

Hallucination Indicators1 hit · 10 pts

Severity	File	Line	Snippet	Context
CRITICAL	…l-browser-samples/OfficeAddin/src/commands/commands.js	25	Office.context.mailbox.item.notificationMessages.replaceAsync("action", message);	CODE

Slop Phrases3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	…mples/msal-node-samples/auth-code-cli-app/src/index.js	15	// You can open a browser window with any library or method you wish to use - the 'open' npm package is used here fo	COMMENT
MEDIUM	…s/on-behalf-of-distributed-cache/src/TokenValidator.ts	17	* Provides basic validation for JWT access tokens. This is for demonstration purposes only.	COMMENT
MEDIUM	…l-node-samples/auth-code-cli-brokered-app/src/index.js	15	// You can open a browser window with any library or method you wish to use - the 'open' npm package is used here fo	COMMENT

Cross-Language Confusion (JS/TS)1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	lib/msal-common/test/protocol/Authorize.spec.ts	791	it("Ignores sid if prompt!=None", async () => {	CODE

AI Slop Vocabulary2 hits · 5 pts

Severity	File	Line	Snippet	Context
MEDIUM	lib/msal-common/src/utils/Constants.ts	103	ACTIVE_ACCOUNT_FILTERS: "active-account-filters", // new cache entry for active_account for a more robust version fo	CODE
MEDIUM	…rc/interaction_client/PlatformAuthInteractionClient.ts	385	// leverage silent flow for cached tokens retrieval	COMMENT

Over-Commented Block3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	samples/msal-react-samples/nextjs-sample/next-env.d.ts	1	/// <reference types="next" />	COMMENT
LOW	…es/msal-react-samples/nextjs-sample/pages/_document.js	21	</body>	COMMENT
LOW	…es/msal-react-samples/nextjs-sample/pages/_document.js	41	// 1. document.getInitialProps	COMMENT

AzureAD/microsoft-authentication-library-for-js

Open-Source Code Quality, Security and Technical Debt Review