1.0

Adjusted Signal

1.0

Raw Pattern Score

100%

Time Factor

2026-10-29

Last Push

28.4K

Stars

TypeScript

Language

677.8K

Lines of Code

4.4K

Files

561

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 385 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.6/100 · LOW

Are imports declared and package/API names verified? 158 finding(s).

Agent Over-Engineering Ratio 2.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 326 finding(s).

PR Review Velocity Impact 5.0/100 · LOW

Which changes need focused human review? 561 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 9HIGH 0MEDIUM 26LOW 526

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 561 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers308 hits · 322 pts

Severity	File	Line	Snippet	Context
LOW⚡	packages/string-templates/src/index.ts	196	function processStringSyncInternal(	CODE
LOW⚡	packages/string-templates/src/index.ts	201	function processStringSyncInternal(	CODE
LOW⚡	packages/string-templates/src/index.ts	206	function processStringSyncInternal(	CODE
LOW	packages/string-templates/src/index.ts	499	export function processStringWithLogsSync(	CODE
LOW	packages/pro/src/sdk/features/features.ts	62	export async function isMicrofrontendFeatureEnabled(license?: License) {	CODE
LOW	packages/pro/src/sdk/features/features.ts	85	export async function isTriggerAutomationRunEnabled() {	CODE
LOW⚡	packages/pro/src/sdk/features/features.ts	129	export async function isExpandedPublicApiEnabled() {	CODE
LOW⚡	packages/pro/src/sdk/features/features.ts	133	export async function isWorkspaceImportExportEnabled() {	CODE
LOW⚡	packages/pro/src/sdk/features/features.ts	137	export async function isWorkspaceImportExportPublicApiEnabled() {	CODE
LOW	packages/pro/src/sdk/features/features.ts	185	export async function isViewReadonlyColumnsEnabled() {	CODE
LOW	packages/pro/src/sdk/groups/groups.ts	140	export async function enrichUserRolesFromGroups(user: User) {	CODE
LOW	packages/pro/src/sdk/groups/groups.ts	237	async function saveGroupWithDefaultUpdates(group: UserGroup) {	CODE
LOW	packages/pro/src/sdk/groups/groups.ts	497	export async function adjustGroupCreatorsQuotas() {	CODE
LOW	…ages/pro/src/sdk/licensing/licenses/offline/offline.ts	24	export async function activateOfflineLicenseToken(offlineLicenseToken: string) {	CODE
LOW	…ages/pro/src/sdk/licensing/licenses/offline/offline.ts	30	export async function deleteOfflineLicenseToken() {	CODE
LOW	…ages/pro/src/sdk/licensing/licenses/offline/offline.ts	102	export async function verifyOfflineLicenseToken(	CODE
LOW	packages/pro/src/sdk/backups/processing.ts	128	async function rollbackPromotedWorkspaceFiles(	CODE
LOW	packages/pro/src/sdk/backups/processing.ts	207	async function cleanupPromotedWorkspaceFiles(	CODE
LOW	packages/pro/src/sdk/backups/backup.ts	27	async function storeWorkspaceBackupMetadata(	CODE
LOW	packages/pro/src/sdk/backups/backup.ts	94	async function deleteWorkspaceBackupMetadata(backup: WorkspaceBackup) {	CODE
LOW	packages/pro/src/sdk/backups/backup.ts	128	async function cleanupExpiredWorkspaceBackups() {	CODE
LOW	packages/pro/src/ai/structuredOutputs/tableData.ts	6	export function tableDataStructuredOutput(tables: TableSchemaFromAI[]) {	CODE
LOW	packages/pro/src/ai/structuredOutputs/mappers/tables.ts	6	export function aiTableResponseToTableSchema(	CODE
LOW	packages/pro/src/ai/prompts/index.ts	67	export function generateOperationInstructionsPrompt({	CODE
LOW	packages/pro/src/ai/prompts/index.ts	310	export function composeAutomationAgentSystemPrompt(	CODE
LOW	packages/pro/src/ai/prompts/index.ts	362	export function composeAutomationAgentToolGuidelines(	CODE
LOW	packages/pro/src/ai/prompts/index.ts	390	function getAgentPromptUserContext(user: ContextUser) {	CODE
LOW	packages/pro/src/ai/prompts/index.ts	471	export function agentHistoryTitleSystemPrompt() {	CODE
LOW	packages/pro/src/db/automations.ts	179	export async function updateAppMetadataWithErrors(	CODE
LOW	packages/pro/src/db/automations.ts	191	export async function updateAppMetadataWithStops(	CODE
LOW	packages/pro/src/db/automations.ts	203	async function updateAppMetadataWithLogIds({	CODE
LOW	packages/pro/src/db/backups.ts	77	async function getWorkspaceBackupsByTrigger(	CODE
LOW	packages/pro/src/db/backups.ts	97	export function generateWorkspaceBackupID(	CODE
LOW	packages/pro/src/db/backups.ts	148	export async function fetchExpiredWorkspaceBackups(	CODE
LOW	packages/pro/src/db/backups.ts	186	export async function storeWorkspaceBackupMetadata(	CODE
LOW⚡	packages/pro/src/db/backups.ts	212	export async function updateWorkspaceBackupMetadata(	CODE
LOW⚡	packages/pro/src/db/backups.ts	222	export async function deleteWorkspaceBackupMetadata(backup: WorkspaceBackup) {	CODE
LOW⚡	packages/pro/src/db/backups.ts	227	export async function getWorkspaceBackupMetadata(backupId: string) {	CODE
LOW	packages/pro/src/db/utils/views.ts	13	export async function createLogByAutomationView() {	CODE
LOW	packages/pro/src/db/utils/views.ts	30	export async function createWorkspaceBackupTriggerView() {	CODE
LOW	packages/pro/src/db/utils/views.ts	43	export async function createWorkspaceBackupExpiryView() {	CODE
LOW	packages/pro/src/db/views/staticViews.ts	8	export async function createAuditLogDesignDocSQL() {	CODE
LOW	packages/pro/src/db/views/groups.ts	12	export async function createGroupUserLookupView() {	CODE
LOW	packages/backend-core/tests/core/utilities/jestUtils.ts	6	export function expectFunctionWasCalledTimesWith(	CODE
LOW	…kages/backend-core/src/middleware/passport/sso/oidc.ts	202	function resolveAllowUnverifiedEmailLinking(	CODE
LOW	packages/backend-core/src/context/mainContext.ts	98	export function getTenantIDFromWorkspaceID(workspaceId: string) {	CODE
LOW	packages/backend-core/src/context/mainContext.ts	317	export function getPlatformActionSessionMetadata({	CODE
LOW	packages/backend-core/src/context/mainContext.ts	352	export function getOrThrowWorkspaceId(): string {	CODE
LOW	packages/backend-core/src/cache/workspaceMetadata.ts	81	export async function invalidateWorkspaceMetadata(	CODE
LOW	packages/backend-core/src/security/permissions.ts	155	export function isPermissionLevelHigherThanRead(level: PermissionLevel) {	CODE
LOW	packages/backend-core/src/security/roles.ts	448	export function checkForRoleResourceArray(	CODE
LOW	packages/backend-core/src/redis/init.ts	86	export async function getOpenapiImportSpecsClient() {	CODE
LOW	packages/backend-core/src/redis/utils.ts	64	export function getRedisConnectionDetails() {	CODE
LOW	packages/backend-core/src/docIds/ids.ts	66	export function getGlobalIDFromUserMetadataID(id: string) {	CODE
LOW	packages/backend-core/src/docIds/params.ts	100	export function getUsersByWorkspaceParams(	CODE
LOW	packages/backend-core/src/features/features.ts	272	export async function isEnabledWithoutOverrides(flag: FeatureFlag) {	CODE
LOW	packages/backend-core/src/utils/utils.ts	144	function parseWorkspaceIdFromUrlPath(url?: string) {	CODE
LOW	packages/backend-core/src/utils/outboundFetch.ts	96	function shouldStripSensitiveHeadersForRedirect(	CODE
LOW	packages/backend-core/src/objectStore/utils.ts	88	export async function processObjectStoreAttachment(	CODE
LOW	packages/backend-core/src/objectStore/utils.ts	111	export async function processAutomationAttachment(	CODE
248 more matches not shown…

Fake / Example Data149 hits · 132 pts

Severity	File	Line	Snippet	Context
LOW	packages/string-templates/src/manifest.json	822	"example": "{{lorem 11}} -> Lorem ipsum",	CODE
LOW	packages/string-templates/src/manifest.json	823	"description": "<p>Takes a number and returns that many charaters of Lorem Ipsum</p>\n",	CODE
LOW	packages/pro/src/middleware/tests/licensing.spec.ts	26	email: "fake-email@budibase.com",	CODE
LOW	packages/pro/src/mappers/users.spec.ts	10	email: "user@example.com",	CODE
LOW	packages/pro/src/mappers/users.spec.ts	22	userName: "user@example.com",	CODE
LOW	packages/pro/src/mappers/users.spec.ts	23	emails: [{ value: "user@example.com", type: "work", primary: true }],	CODE
LOW	packages/pro/src/mappers/users.spec.ts	37	userName: "user@example.com",	CODE
LOW	packages/pro/src/mappers/users.spec.ts	38	emails: [{ value: "user@example.com", type: "work", primary: true }],	CODE
LOW	…mActions/tests/platformActionsPersistProcessor.spec.ts	338	triggeredBy: { type: "user", id: "us_1", label: "John Doe" },	CODE
LOW	…mActions/tests/platformActionsPersistProcessor.spec.ts	489	triggeredBy: { type: "user", id: "us_1", label: "John Doe" },	CODE
LOW	…mActions/tests/platformActionsPersistProcessor.spec.ts	513	expect(JSON.stringify(rows[0].doc)).not.toContain("John Doe")	CODE
LOW	…/processors/platformActions/tests/sessionIndex.spec.ts	530	label: "John Doe",	CODE
LOW	…/processors/platformActions/tests/sessionIndex.spec.ts	570	triggeredByLabel: "John Doe",	CODE
LOW	…/processors/platformActions/tests/sessionIndex.spec.ts	605	triggeredByLabel: "John Doe",	CODE
LOW⚡	…erver/src/jsRunner/bundles/index-helpers.ivm.bundle.js	1	"use strict";var helpers=(()=>{var Sn=Object.create;var qe=Object.defineProperty;var qn=Object.getOwnPropertyDescriptor;	CODE
LOW⚡	…erver/src/jsRunner/bundles/index-helpers.ivm.bundle.js	1	"use strict";var helpers=(()=>{var Sn=Object.create;var qe=Object.defineProperty;var qn=Object.getOwnPropertyDescriptor;	CODE
LOW⚡	…erver/src/jsRunner/bundles/index-helpers.ivm.bundle.js	5	Nullam malesuada erat ut turpis. Suspendisse urna nibh, viverra non, semper suscipit, posuere a, pede. Donec nec justo	CODE
LOW⚡	…erver/src/jsRunner/bundles/index-helpers.ivm.bundle.js	5	Nullam malesuada erat ut turpis. Suspendisse urna nibh, viverra non, semper suscipit, posuere a, pede. Donec nec justo	CODE
LOW	…rver/src/sdk/workspace/embedSSO/tests/embedSSO.spec.ts	67	email: "user@example.com",	CODE
LOW	…rver/src/sdk/workspace/embedSSO/tests/embedSSO.spec.ts	84	expect(getGlobalUserByEmail).toHaveBeenCalledWith("user@example.com")	CODE
LOW	…rver/src/sdk/workspace/embedSSO/tests/embedSSO.spec.ts	98	email: "user@example.com",	CODE
LOW	…rver/src/sdk/workspace/embedSSO/tests/embedSSO.spec.ts	102	{ userdata: { email: "user@example.com" } },	CODE
LOW	…rver/src/sdk/workspace/embedSSO/tests/embedSSO.spec.ts	121	{ userdata: { email: "user@example.com" } },	CODE
LOW	…rver/src/sdk/workspace/embedSSO/tests/embedSSO.spec.ts	158	{ userdata: { email: "user@example.com" } },	CODE
LOW	…ver/src/sdk/workspace/platformActions/metadata.spec.ts	13	).toEqual({ type: "user", id: "user-1", label: "Jane Doe" })	CODE
LOW	…ver/src/sdk/workspace/platformActions/metadata.spec.ts	73	it.each(["John Doe", " John Doe "])(	CODE
LOW	packages/server/src/sdk/users/tests/utils.spec.ts	338	expect(found?.fullName).toEqual("Jane Doe")	CODE
LOW	…s/server/src/ai/tools/budibase/tests/rowSchema.spec.ts	167	schema.safeParse({ Email: "user@example.com", Notes: "Lunch" }).success	CODE
LOW	…ollers/webhook/conversationAttachmentProcessor.spec.ts	144	displayName: "John Doe",	CODE
LOW	…ollers/webhook/conversationAttachmentProcessor.spec.ts	239	email: "user@example.com",	CODE
LOW	…ollers/webhook/conversationAttachmentProcessor.spec.ts	269	email: "user@example.com",	CODE
LOW	…/server/src/api/controllers/public/tests/users.spec.ts	110	email: "admin@example.com",	CODE
LOW	…erver/src/automations/tests/sanitizeTestResult.spec.ts	18	email: "user@example.com",	CODE
LOW	…erver/src/automations/tests/sanitizeTestResult.spec.ts	33	email: "user@example.com",	CODE
LOW	…erver/src/automations/tests/sanitizeTestResult.spec.ts	48	email: "user@example.com",	CODE
LOW⚡	…erver/src/automations/tests/sanitizeTestResult.spec.ts	64	email: "user@example.com",	CODE
LOW⚡	…erver/src/automations/tests/sanitizeTestResult.spec.ts	72	email: "user@example.com",	CODE
LOW⚡	…erver/src/automations/tests/sanitizeTestResult.spec.ts	80	email: "user@example.com",	CODE
LOW	…/server/src/automations/tests/triggers/webhook.spec.ts	148	triggeredBy: { type: "user", label: "John Doe" },	CODE
LOW	…/server/src/automations/tests/triggers/webhook.spec.ts	175	triggeredBy: { type: "user", label: "John Doe" },	CODE
LOW	…er/src/automations/tests/steps/extractFileData.spec.ts	57	name: "John Doe",	CODE
LOW	…er/src/automations/tests/steps/extractFileData.spec.ts	102	name: "John Doe",	CODE
LOW	…rver/src/automations/tests/steps/sendSmtpEmail.spec.ts	30	from: "admin@example.com",	CODE
LOW	…rver/src/automations/tests/steps/sendSmtpEmail.spec.ts	56	generateResponse("user1@example.com", "admin@example.com")	CODE
LOW	…rver/src/automations/tests/steps/sendSmtpEmail.spec.ts	67	from: "admin@example.com",	CODE
LOW	…rver/src/automations/tests/steps/sendSmtpEmail.spec.ts	91	from: "admin@example.com",	CODE
LOW	…rver/src/automations/tests/steps/sendSmtpEmail.spec.ts	113	generateResponse("user1@example.com", "admin@example.com")	CODE
LOW	…rver/src/automations/tests/steps/sendSmtpEmail.spec.ts	128	from: "admin@example.com",	CODE
LOW	…rver/src/automations/tests/steps/sendSmtpEmail.spec.ts	164	generateResponse("user1@example.com", "admin@example.com")	CODE
LOW	…s/server/src/automations/tests/email/getClient.spec.ts	70	username: "user@example.com",	CODE
LOW	…s/server/src/automations/tests/email/getClient.spec.ts	81	user: "user@example.com",	CODE
LOW	…s/server/src/automations/tests/email/getClient.spec.ts	99	username: "user@example.com",	CODE
LOW	…s/server/src/automations/tests/email/getClient.spec.ts	113	user: "user@example.com",	CODE
LOW	…s/server/src/automations/tests/email/getClient.spec.ts	128	username: "user@example.com",	CODE
LOW	…s/server/src/automations/tests/email/getClient.spec.ts	140	user: "user@example.com",	CODE
LOW	…s/server/src/automations/tests/email/getClient.spec.ts	158	username: "user@example.com",	CODE
LOW	packages/bbui/src/Form/Core/Dropzone.svelte	206	<div class="placeholder">	CODE
LOW	packages/bbui/src/Table/Table.svelte	575	class="placeholder"	CODE
LOW	packages/bbui/src/Table/Table.svelte	580	<slot name="placeholder" />	CODE
LOW	packages/bbui/src/PhosphorIconPicker/icons.ts	1094	"placeholder",	CODE
89 more matches not shown…

Hallucination Indicators9 hits · 90 pts

Severity	File	Line	Snippet	Context
CRITICAL	packages/server/src/jsRunner/tests/largeJSExample.txt	957	let match = this.rules.inline.emStrong.lDelim.exec(src)	CODE
CRITICAL	packages/server/src/jsRunner/tests/largeJSExample.txt	1834	(match = this.tokenizer.rules.inline.reflinkSearch.exec(maskedSrc)) !=	CODE
CRITICAL	packages/server/src/jsRunner/tests/largeJSExample.txt	1854	(match = this.tokenizer.rules.inline.blockSkip.exec(maskedSrc)) != null	CODE
CRITICAL	packages/server/src/jsRunner/tests/largeJSExample.txt	1866	(match = this.tokenizer.rules.inline.escapedEmSt.exec(maskedSrc)) != null	CODE
CRITICAL	…r/src/api/controllers/query/import/tests/index.spec.ts	838	cacheMocks.openapiImportSpecsClient.store.mock.calls.filter(([key]) =>	CODE
CRITICAL	…r/src/api/controllers/query/import/tests/index.spec.ts	842	cacheMocks.openapiImportSpecsClient.store.mock.calls.filter(([key]) =>	CODE
CRITICAL	…r/src/api/controllers/query/import/tests/index.spec.ts	869	cacheMocks.openapiImportSpecsClient.store.mock.calls.filter(([key]) =>	CODE
CRITICAL	…ges/builder/src/stores/builder/tests/websocket.spec.ts	39	const connect = mocks.socket.on.mock.calls.find(	CODE
CRITICAL	…ges/builder/src/stores/builder/tests/websocket.spec.ts	68	const connect = mocks.socket.on.mock.calls.find(	CODE

Decorative Section Separators18 hits · 58 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ges/backend-core/src/utils/tests/outboundFetch.spec.ts	31	// ─── URL validation ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…ges/backend-core/src/utils/tests/outboundFetch.spec.ts	88	// ─── Redirect handling ────────────────────────────────────────────────────	COMMENT
MEDIUM	…ges/backend-core/src/utils/tests/outboundFetch.spec.ts	311	// ─── Method mutation on redirect ──────────────────────────────────────────	COMMENT
MEDIUM	…ges/backend-core/src/utils/tests/outboundFetch.spec.ts	425	// ─── Header stripping on cross-origin redirect ────────────────────────────	COMMENT
MEDIUM	…ges/backend-core/src/utils/tests/outboundFetch.spec.ts	538	// ─── Pinned lookup ────────────────────────────────────────────────────────	COMMENT
MEDIUM	…rver/src/api/controllers/plugin/tests/security.spec.ts	39	// ─── urlUpload URL validation ──────────────────────────────────────────────	COMMENT
MEDIUM	…rver/src/api/controllers/plugin/tests/security.spec.ts	102	// ─── githubUpload URL validation ───────────────────────────────────────────	COMMENT
MEDIUM	…rver/src/api/controllers/plugin/tests/security.spec.ts	124	// ─── npmUpload URL validation ──────────────────────────────────────────────	COMMENT
MEDIUM	…er/src/components/integration/APIEndpointViewer.svelte	155	// ── DATASOURCE / MODE ────────────────────────────────────────────────────	COMMENT
MEDIUM	…er/src/components/integration/APIEndpointViewer.svelte	208	// ── QUERY INITIALISATION ─────────────────────────────────────────────────	COMMENT
MEDIUM	…er/src/components/integration/APIEndpointViewer.svelte	242	// ── CUSTOM MODE URL ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…er/src/components/integration/APIEndpointViewer.svelte	253	// ── TEMPLATE MODE URL ─────────────────────────────────────────────────────	COMMENT
MEDIUM	…er/src/components/integration/APIEndpointViewer.svelte	270	// ── QUERY DATA & BINDINGS ─────────────────────────────────────────────────	COMMENT
MEDIUM	…er/src/components/integration/APIEndpointViewer.svelte	325	// ── BUILT QUERY & DIRTY STATE ─────────────────────────────────────────────	COMMENT
MEDIUM	…er/src/components/integration/APIEndpointViewer.svelte	417	// ── SAVE / RUN STATE ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	hosting/couchdb/runner.sh	54	# =============================================================================	COMMENT
MEDIUM⚡	hosting/couchdb/runner.sh	56	# =============================================================================	COMMENT
MEDIUM⚡	hosting/couchdb/runner.sh	60	# =============================================================================	COMMENT

Over-Commented Block57 hits · 47 pts

Severity	File	Line	Snippet	Context
LOW	charts/budibase/values.yaml	61	bucket: ""	COMMENT
LOW	charts/budibase/values.yaml	81	# (e.g. to a fresh timestamp on each deploy) triggers a rolling restart of the	COMMENT
LOW	charts/budibase/values.yaml	101	# @ignore (only currently used to determine whether to fetch licenses offline or not, should	COMMENT
LOW	charts/budibase/values.yaml	121	httpMigrations: "0"	COMMENT
LOW	charts/budibase/values.yaml	181	proxy:	COMMENT
LOW	charts/budibase/values.yaml	201	# e.g. `kubectl -n kube-system get svc kube-dns -o jsonpath='{.spec.clusterIP}'`.	COMMENT
LOW	charts/budibase/values.yaml	221	pdb: {}	COMMENT
LOW	charts/budibase/values.yaml	241	timeoutSeconds: 1	COMMENT
LOW	charts/budibase/values.yaml	281	# - name: my-sidecar	COMMENT
LOW	charts/budibase/values.yaml	301	# if you deploy a mutable tag (e.g. "latest" or a shared "develop" tag).	COMMENT
LOW	charts/budibase/values.yaml	321	# -- Seconds to wait after pod is Ready before adding to endpoints.	COMMENT
LOW	charts/budibase/values.yaml	341	# secretName : my-secret	COMMENT
LOW	charts/budibase/values.yaml	361	# change this, but if you want to you can find more information here:	COMMENT
LOW	charts/budibase/values.yaml	401	# -- Additional containers to be added to the apps pod.	COMMENT
LOW	charts/budibase/values.yaml	421	# immutable, so IfNotPresent avoids a registry round-trip on every pod start.	COMMENT
LOW	charts/budibase/values.yaml	441	# -- Pod readiness gates for the automation worker pods. Useful for ALB	COMMENT
LOW	charts/budibase/values.yaml	461	# here:	COMMENT
LOW	charts/budibase/values.yaml	521	# - name: my-sidecar	COMMENT
LOW	charts/budibase/values.yaml	541	# if you deploy a mutable tag (e.g. "latest" or a shared "develop" tag).	COMMENT
LOW	charts/budibase/values.yaml	561	terminationGracePeriodSeconds: 70	COMMENT
LOW	charts/budibase/values.yaml	581	# - name: MY_SECRET_KEY	COMMENT
LOW	charts/budibase/values.yaml	601	# -- Readiness probe configuration for worker pods. You shouldn't need to	COMMENT
LOW	charts/budibase/values.yaml	641	targetCPUUtilizationPercentage: 80	COMMENT
LOW	charts/budibase/values.yaml	661	# available to you by looking at the official CouchDB Helm chart:	COMMENT
LOW	charts/budibase/values.yaml	681	redis:	COMMENT
LOW	charts/budibase/values.yaml	701	# -- If defined, storageClassName: <storageClass> If set to "-",	COMMENT
LOW	charts/budibase/values.yaml	721	extraVolumes: []	COMMENT
LOW	charts/budibase/values.yaml	741	readinessGates: []	COMMENT
LOW	charts/budibase/values.yaml	761	# -- Extra environment variables for the litellm container.	COMMENT
LOW	charts/budibase/values.yaml	801	# -- Whether to expose the litellm service to a Tailscale tailnet via annotation.	COMMENT
LOW	charts/budibase/values.yaml	821	# -- AWS_REGION if using S3	COMMENT
LOW	charts/budibase/values.yaml	861	# - name: my-volume	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	1	# -- the initial number of nodes in the CouchDB cluster.	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	21	repository: curlimages/curl	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	41	# adminPassword: this_is_not_secure	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	121	# matchExpressions:	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	161	# - name: sqs	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	181	hosts:	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	201	# limits:	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	221	name: couchdb	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	281	# Configure arbitrary sidecar containers for CouchDB pods created by the	COMMENT
LOW	packages/string-templates/src/helpers/javascript.ts	81	// Transform snippets into an object for faster access, and cache previously	COMMENT
LOW	packages/backend-core/src/db/lucene.ts	21	* Optionally takes a base lucene query object.	COMMENT
LOW	packages/backend-core/src/sql/sql.ts	321	// that here.	COMMENT
LOW	packages/server/scripts/dev/import-couch-dump.js	1	#!/usr/bin/env node	COMMENT
LOW	packages/server/scripts/dev/import-couch-dump.js	21	// deriving db names from --dir (e.g. "acme" turns	COMMENT
LOW	packages/server/src/jsRunner/bundles/snippets.ts	1	// @ts-ignore	COMMENT
LOW	packages/server/src/integrations/oracle.ts	261	for (const table of Object.values(tables)) {	COMMENT
LOW	…es/server/src/integrations/tests/utils/googlesheets.ts	1041	//	COMMENT
LOW	packages/server/src/sdk/workspace/views/utils.ts	21		COMMENT
LOW	packages/server/src/sdk/workspace/views/index.ts	481	)	COMMENT
LOW	…kages/worker/src/api/routes/global/tests/email.spec.ts	341		COMMENT
LOW	.github/workflows/cla.yml	21	# the below token should have repo scope and must be manually added by you in the repository's secret	COMMENT
LOW	hosting/couchdb/runner.sh	41	sed -i "s#DATA_DIR#${DATA_DIR}#g" /opt/clouseau/clouseau.ini	COMMENT
LOW	hosting/couchdb/docker-entrypoint.sh	1	#!/bin/bash	COMMENT
LOW	hosting/couchdb/docker-entrypoint.sh	21	# first arg is the bare word `couchdb`	COMMENT
LOW	hosting/couchdb/docker-entrypoint.sh	41	# (e.g. a config file owned by root with o+r is actually fine), and we don't	COMMENT

Slop Phrases6 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	charts/budibase/values.yaml	908	# by default, but you can add more ports here if you need to.	COMMENT
MEDIUM⚡	charts/budibase/values.yaml	915	# by default, but you can add more ports here if you need to.	COMMENT
LOW⚡	charts/budibase/values.yaml	903	# If you change this, make sure to also update the DATA_DIR environment variable above.	COMMENT
MEDIUM	charts/budibase/charts/couchdb/values.yaml	110	## problems you can try setting podManagementPolicy to the StatefulSet default	COMMENT
MEDIUM	…ort/sources/tests/openapi2/data/petstore/petstore.json	4	"description": "This is a sample server Petstore server. You can find out more about Swagger at [http://swagger.io]	CODE
MEDIUM	…ort/sources/tests/openapi2/data/petstore/petstore.yaml	3	description: "This is a sample server Petstore server. You can find out more about Swagger at [http://swagger.io](htt	CODE

Redundant / Tautological Comments9 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	charts/budibase/values.yaml	220	# Set minAvailable to override the global podDisruptionBudget.minAvailable for this service.	COMMENT
LOW	charts/budibase/values.yaml	332	# Set minAvailable to override the global podDisruptionBudget.minAvailable for this service.	COMMENT
LOW	charts/budibase/values.yaml	447	# Set minAvailable to override the global podDisruptionBudget.minAvailable for this service.	COMMENT
LOW	charts/budibase/values.yaml	573	# Set minAvailable to override the global podDisruptionBudget.minAvailable for this service.	COMMENT
LOW	charts/budibase/values.yaml	744	# Set minAvailable to override the global podDisruptionBudget.minAvailable for this service.	COMMENT
LOW	charts/budibase/charts/couchdb/values.yaml	12	# Set it to true to automatically enable the cluster after installation.	COMMENT
LOW	scripts/helm-pre-commit.sh	8	# Check if any chart files are staged	COMMENT
LOW	scripts/killTestcontainers.sh	6	# Check if there are any containers to stop	COMMENT
LOW	hosting/digitalocean/scripts/99-img_check.sh	90	# Check if there are log archives or log files that have not been recently cleared.	COMMENT

AI Slop Vocabulary2 hits · 5 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/cli/src/hosting/makeFiles.ts	81	"# This section contains all secrets pertaining to the system",	CODE
MEDIUM	…ents/backend/Datasources/CreateEditRelationship.svelte	291	// Essentially this means the fieldName is what we are linking to in the other table, and the	COMMENT

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	artifacthub-repo.yml	2	# This file is used to verify ownership of the budibase Helm chart repo	COMMENT

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	packages/server/src/api/controllers/row/index.ts	385	// this is the possible table name which we need to check if it needs to be converted	COMMENT
LOW	packages/builder/src/stores/builder/components.ts	1124	// In the case of a query, we need to check if _id actually changed	COMMENT

Budibase/budibase

Open-Source Code Quality, Security and Technical Debt Review