1.6

Adjusted Signal

1.6

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

47.9K

Stars

Language

2.6M

Lines of Code

2.9K

Files

3.2K

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 2735 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 30 finding(s).

Agent Over-Engineering Ratio 2.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 567 finding(s).

PR Review Velocity Impact 7.6/100 · LOW

Which changes need focused human review? 3155 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 45MEDIUM 368LOW 2742

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 3155 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block2382 hits · 2370 pts

Severity	File	Line	Snippet	Context
LOW	install.sh	1	#!/usr/bin/env bash	COMMENT
LOW	install.sh	341	fi	COMMENT
LOW	test-infrastructure/ladder.sh	1	#!/usr/bin/env bash	COMMENT
LOW	test-infrastructure/run.sh	1	#!/usr/bin/env bash	COMMENT
LOW	test-infrastructure/run.sh	21	# (stale hits impossible), so warm reruns skip unchanged compilation.	COMMENT
LOW	test-infrastructure/run.sh	41	# brew install colima docker docker-compose docker-buildx	COMMENT
LOW	test-infrastructure/run.sh	61	# Container names are already unique per `compose run --rm`, but the BUILD	COMMENT
LOW	test-infrastructure/run.sh	221	$COMPOSE run --rm test-tsan	COMMENT
LOW	test-infrastructure/docker-compose.yml	1	# Local test environment — mirrors GitHub Actions CI for ALL platforms.	COMMENT
LOW	test-infrastructure/docker-compose.yml	321	volumes:	COMMENT
LOW	test-infrastructure/vm/vm-smoke.sh	1	#!/usr/bin/env bash	COMMENT
LOW	test-infrastructure/vm/vm-run-tests.sh	1	#!/usr/bin/env bash	COMMENT
LOW	test-infrastructure/vm/vm-run-tests.sh	41	that died without its summary must never read as green) · else the leg's code.	COMMENT
LOW	test-infrastructure/vm/vm-run-tests.sh	261	# chain loses it: on 2026-09-18 a leg that printed "7925 passed, 0 failed" and	COMMENT
LOW	test-infrastructure/vm/provision-windows.sh	1	#!/usr/bin/env bash	COMMENT
LOW	test-infrastructure/vm/win.sh	1	#!/usr/bin/env bash	COMMENT
LOW	test-infrastructure/vm/win.sh	181	# `git clone --local` points origin at the base PATH, so a later	COMMENT
LOW	test-infrastructure/vm/win.sh	301	# The canonical build entry, exactly as CI runs it: a CLEAN scripts/build.sh	COMMENT
LOW	test-infrastructure/vm/win.sh	321	[ -z "${CBM_VM_EXPECT_HEAD:-}" ] \|\| vm_assert_head "$CBM_VM_EXPECT_HEAD"	COMMENT
LOW	test-infrastructure/vm/win.sh	381	# x86_64 (CI's exact arch) with UBSan, runs under Windows-on-ARM emulation.	COMMENT
LOW	graph-ui/llm/fetch-model.sh	1	#!/bin/sh	COMMENT
LOW	graph-ui/llm/fetch-model.sh	21	# llama.cpp). Dieses Skript setzt LLAMA_CACHE auf das Cache-Verzeichnis dieses	COMMENT
LOW	graph-ui/llm/start.sh	1	#!/bin/sh	COMMENT
LOW	graph-ui/llm/start.sh	21	# Der Grund fuer die Umstellung steht im Nachtrag W10 von docs/adr/0001: das	COMMENT
LOW	graph-ui/llm/start.sh	41	# llm/start.sh --print-command [..] zeigt die Befehlszeile und startet nichts	COMMENT
LOW	graph-ui/llm/start.sh	81		COMMENT
LOW	graph-ui/src/App.tsx	901		COMMENT
LOW	graph-ui/src/pseudocode/pseudocode-strings.ts	141	// Nutzerfrage vom 2026-08-29 zum Screenshot mit orderService.ts: "ist der	COMMENT
LOW	tools/tree-sitter-pascal/grammar.js	81	rule	COMMENT
LOW	tools/tree-sitter-pascal/grammar.js	101	// begin	COMMENT
LOW	tools/tree-sitter-pascal/grammar.js	421	// TODO: Ideally, the kSpecialize should be part of exprTpl,	COMMENT
LOW	tools/tree-sitter-pascal/grammar.js	461		COMMENT
LOW	tools/tree-sitter-pascal/grammar.js	481	// <	COMMENT
LOW	tools/tree-sitter-pascal/grammar.js	581	typerefPtr: $ => op.prefix(1,$.kHat, $._typeref),	COMMENT
LOW	tools/tree-sitter-pascal/src/tree_sitter/parser.h	1	#ifndef TREE_SITTER_PARSER_H_	COMMENT
LOW	tools/tree-sitter-pascal/src/tree_sitter/array.h	1	#ifndef TREE_SITTER_ARRAY_H_	COMMENT
LOW	tools/tree-sitter-pascal/src/tree_sitter/array.h	41	(assert((uint32_t)(_index) < (self)->size), &(self)->contents[_index])	COMMENT
LOW	tools/tree-sitter-pascal/src/tree_sitter/array.h	101		COMMENT
LOW	tools/tree-sitter-pascal/src/tree_sitter/array.h	121	/// callback to determine the order.	COMMENT
LOW	tools/tree-sitter-pascal/src/tree_sitter/array.h	281	#ifdef _MSC_VER	COMMENT
LOW	tools/tree-sitter-pascal/src/tree_sitter/alloc.h	21	#define ts_malloc ts_current_malloc	COMMENT
LOW	tools/tree-sitter-pascal/src/tree_sitter/alloc.h	41	#ifndef ts_realloc	COMMENT
LOW	tools/tree-sitter-arkts/src/_common_scanner.h	281	// immediately follows a newline.	COMMENT
LOW	tools/tree-sitter-arkts/src/tree_sitter/parser.h	1	#ifndef TREE_SITTER_PARSER_H_	COMMENT
LOW	tools/tree-sitter-arkts/src/tree_sitter/array.h	1	#ifndef TREE_SITTER_ARRAY_H_	COMMENT
LOW	tools/tree-sitter-arkts/src/tree_sitter/array.h	41	(assert((uint32_t)(_index) < (self)->size), &(self)->contents[_index])	COMMENT
LOW	tools/tree-sitter-arkts/src/tree_sitter/array.h	101		COMMENT
LOW	tools/tree-sitter-arkts/src/tree_sitter/array.h	121	/// callback to determine the order.	COMMENT
LOW	tools/tree-sitter-arkts/src/tree_sitter/array.h	281	#ifdef _MSC_VER	COMMENT
LOW	tools/tree-sitter-arkts/src/tree_sitter/alloc.h	21	#define ts_malloc ts_current_malloc	COMMENT
LOW	tools/tree-sitter-arkts/src/tree_sitter/alloc.h	41	#ifndef ts_realloc	COMMENT
LOW	tools/tree-sitter-chialisp/grammar.js	1	/// <reference types="tree-sitter-cli/dsl" />	COMMENT
LOW	tools/tree-sitter-chialisp/src/parser.c	1	/* Automatically @generated by tree-sitter v0.25.10 */	COMMENT
LOW	tools/tree-sitter-chialisp/src/tree_sitter/parser.h	1	#ifndef TREE_SITTER_PARSER_H_	COMMENT
LOW	tools/tree-sitter-chialisp/src/tree_sitter/array.h	1	#ifndef TREE_SITTER_ARRAY_H_	COMMENT
LOW	tools/tree-sitter-chialisp/src/tree_sitter/array.h	41	(assert((uint32_t)(_index) < (self)->size), &(self)->contents[_index])	COMMENT
LOW	tools/tree-sitter-chialisp/src/tree_sitter/array.h	101		COMMENT
LOW	tools/tree-sitter-chialisp/src/tree_sitter/array.h	121	/// callback to determine the order.	COMMENT
LOW	tools/tree-sitter-chialisp/src/tree_sitter/array.h	281	#ifdef _MSC_VER	COMMENT
LOW	tools/tree-sitter-chialisp/src/tree_sitter/alloc.h	21	#define ts_malloc ts_current_malloc	COMMENT
2322 more matches not shown…

Decorative Section Separators293 hits · 887 pts

Severity	File	Line	Snippet	Context
MEDIUM	test-infrastructure/run.sh	60	# ── Per-run isolation (concurrent agents / multiple worktrees) ───────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	10	# ── Linux test (ASan + UBSan + LeakSanitizer) ──────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	48	# ── ThreadSanitizer (data-race gate) ───────────────────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	124	# ── Linux production build (-O2 -Werror) ───────────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	145	# ── Windows cross-compile + test (llvm-mingw + Wine) ────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	171	# ── Smoke test (build + run smoke-test.sh) ──────────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	198	# ── Soak (both CI legs) ────────────────────────────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	216	# ── Windows smoke (cross-compile + Wine) ──────────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	232	# ── Linux portable (Alpine musl static) ────────────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	269	# ── Artifact-flow smoke (package → extract → wrapper) ──────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	286	# ── glibc floor (ubuntu-22.04, glibc 2.35) ─────────────────	COMMENT
MEDIUM	test-infrastructure/docker-compose.yml	312	# ── Lint ────────────────────────────────────────────────────	COMMENT
MEDIUM	test-infrastructure/vm/win.sh	95	# ── Per-run checkout (the VM's last shared-state hazard) ─────────────────────	COMMENT
MEDIUM	graph-ui/llm/start.sh	84	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	graph-ui/llm/start.sh	105	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	graph-ui/llm/start.sh	129	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	graph-ui/llm/start.sh	135	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	…/verification/pr-2068/repair-map-callsite-failure.json	27	"text": "CODEATLAS\nv0.0.1\ndirty\nExplore\nGalaxy\nArchitecture\nAgents\nSystem\nDaemon\nChat\nSearch\n⌘ / Ctrl K	CODE
MEDIUM	…/verification/pr-2068/repair-map-callsite-failure.json	27	"text": "CODEATLAS\nv0.0.1\ndirty\nExplore\nGalaxy\nArchitecture\nAgents\nSystem\nDaemon\nChat\nSearch\n⌘ / Ctrl K	CODE
MEDIUM	tests/test_setup_scripts_contract.sh	40	# ── Static contract: scripts/setup.sh ──────────────────────────────────────	COMMENT
MEDIUM	tests/test_setup_scripts_contract.sh	56	# ── Static contract: scripts/setup-windows.ps1 ─────────────────────────────	COMMENT
MEDIUM	tests/test_setup_scripts_contract.sh	99	# ── Functional leg: setup.sh against a loopback fixture release ────────────	COMMENT
MEDIUM	tests/test_lane_gate_contract.sh	35	# ── ci-ok ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_lane_gate_contract.sh	124	# ── shard-completeness ───────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_c_lsp.c	16544	/* ── #1527: no per-file eval budget; cost fixed at the root ────────────── */	COMMENT
MEDIUM	tests/test_extraction_inheritance.c	360	/* ── extends + implements two (regression for #279) ─────────── */	COMMENT
MEDIUM	tests/test_mcpb_registry_entries_contract.sh	65	# ── happy path ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_mcpb_registry_entries_contract.sh	98	# ── idempotency: a registry-job re-run must not grow the manifest ───────────	COMMENT
MEDIUM	tests/test_mcpb_registry_entries_contract.sh	106	# ── fail-closed: zero bundles, malformed hash ───────────────────────────────	COMMENT
MEDIUM	tests/test_complexity.c	1256	/* ── Lexer work in error recovery (#2176) ──────────────────────────────	COMMENT
MEDIUM	tests/test_cli.c	4253	/* ── #221 regression: PATH longer than the old 4 KB copy ───────────────── */	COMMENT
MEDIUM	tests/test_cli.c	4354	/* ── #221 regression: the Windows fallback shim locations ───────────────── */	COMMENT
MEDIUM	tests/test_ui.c	620	/* ── Dead-code classification (distilled from PR #789) ────────── */	COMMENT
MEDIUM	tests/test_git_context.c	91	/* ── Inherited repository-local git environment (#2003) ────────────	COMMENT
MEDIUM	tests/test_git_context.c	215	/* ── canonical_root: indexed from a subdirectory (issue #659) ─────	COMMENT
MEDIUM	tests/test_parallel.c	5093	/* ── PHP vendor-imported types never bind by name (#1186) ─────────── */	COMMENT
MEDIUM	tests/test_discover.c	1298	/* ── .cbmignore negation vs built-in skip dirs (issue #500) ────── */	COMMENT
MEDIUM	tests/test_discover.c	1339	/* ── JVM packages named like build output (issue #2661) ─────────── */	COMMENT
MEDIUM	tests/test_discover.c	1406	/* ── Laravel compiled Blade view cache (issue #1735) ─────────────── */	COMMENT
MEDIUM	tests/test_discover.c	1611	/* ── .git/info/exclude tests (issue #489) ─────────────────────── */	COMMENT
MEDIUM	tests/test_discover.c	1942	/* ── Nested .gitignore tests (issue #178) ──────────────────────── */	COMMENT
MEDIUM	tests/test_discover.c	2063	/* ── Nested .gitignore BELOW another .gitignore (issue #1973) ─────── */	COMMENT
MEDIUM	tests/test_discover.c	2187	/* ── Shebang fallback for extensionless scripts (issue #1199) ────── */	COMMENT
MEDIUM	tests/test_helpers.h	229	/* ── Inherited git repository environment (#2003) ─────────────── */	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	93	# ── 1. AddressSanitizer abort: the incident ──────────────────────────────────	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	176	# ── 2. UBSan diagnostic in a suite that otherwise passes ─────────────────────	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	238	# ── 5. Silent death: no report, no FAIL, no completion summary ───────────────	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	278	# ── 7. ThreadSanitizer and MemorySanitizer open with WARNING, not ERROR ──────	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	342	# ── 9. Signal and timeout lines a suite's own output may carry ───────────────	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	354	# ── 10. Which logs a red run keeps for upload ────────────────────────────────	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	401	# ── 11. The scheduler's result line for a suite that died mid-run ────────────	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	459	# ── 12. One implementation: the harness uses these functions, not a copy ─────	COMMENT
MEDIUM	tests/test_daemon_application.c	7275	/* ── #2144: async index_repository + status polling ─────────────────────────	COMMENT
MEDIUM	tests/test_daemon_application.c	7764	/* ── #2134 x #2144: the unnamed status poll resolves the start's key ────────	COMMENT
MEDIUM	tests/test_yaml.c	626	/* ── Edge cases: quoted strings with # ─────────────────────────── */	COMMENT
MEDIUM	tests/test_ts_lsp.c	4689	/* ── Hash-table registry stress (task #2) ──────────────────────────────────── */	COMMENT
MEDIUM	tests/test_ts_lsp.c	4900	/* ── Conditional types (task #8) ───────────────────────────────────────────── */	COMMENT
MEDIUM	tests/test_ts_lsp.c	4956	/* ── infer X (task #9) ─────────────────────────────────────────────────────── */	COMMENT
MEDIUM	tests/test_ts_lsp.c	4991	/* ── Async iterables (task #11) ────────────────────────────────────────────── */	COMMENT
MEDIUM	tests/test_path_alias.c	340	/* ── Loader honors discovery exclusions (#792) ─────────────────── */	COMMENT
233 more matches not shown…

Empty Error Handlers41 hits · 205 pts

Severity	File	Line	Snippet	Context
HIGH	graph-ui/agents/hooks/atlas-trace.py	250	except Exception:	CODE
HIGH	graph-ui/agents/hooks/atlas-trace.py	207	except Exception:	CODE
HIGH	tests/test_daemon_smoke.py	427	except OSError:	CODE
HIGH	tests/test_daemon_smoke.py	1803	except OSError:	CODE
HIGH	tests/test_daemon_smoke.py	2306	except OSError:	CODE
HIGH	tests/test_daemon_smoke.py	2324	except OSError:	CODE
HIGH	tests/test_daemon_smoke.py	2343	except OSError:	CODE
HIGH	tests/test_daemon_open_readiness.py	64	except (OSError, subprocess.TimeoutExpired):	CODE
HIGH	tests/test_daemon_open_readiness.py	74	except (OSError, subprocess.TimeoutExpired):	CODE
HIGH	tests/test_daemon_open_readiness.py	127	except OSError:	CODE
HIGH	tests/test_daemon_open_readiness.py	124	except (OSError, socket.timeout):	CODE
HIGH	tests/test_coverage_children.py	93	except ProcessLookupError:	CODE
HIGH	tests/test_coverage_children.py	142	except subprocess.TimeoutExpired:	CODE
HIGH	tests/test_coverage_flush.py	86	except OSError:	CODE
HIGH	tests/test_coverage_flush.py	91	except subprocess.TimeoutExpired:	CODE
HIGH	tests/test_coverage_flush.py	132	except subprocess.TimeoutExpired:	CODE
HIGH	tests/windows/test_daemon_stability.py	568	except FileNotFoundError:	CODE
HIGH	tests/windows/test_non_ascii_path.py	403	except Exception:	CODE
HIGH	tests/windows/test_non_ascii_path.py	422	except Exception:	CODE
HIGH	tests/windows/test_non_ascii_cache_dump.py	105	except (ValueError, AttributeError):	CODE
HIGH	tests/windows/mcp_stdio.py	55	except Exception:	CODE
HIGH	tests/windows/mcp_stdio.py	115	except Exception:	CODE
HIGH	tests/windows/mcp_stdio.py	142	except Exception:	CODE
HIGH	tests/windows/mcp_stdio.py	149	except Exception:	CODE
HIGH	tests/windows/test_hook_augment.py	166	except subprocess.TimeoutExpired:	CODE
HIGH	tests/windows/test_ui_drive_listing.py	50	except Exception:	CODE
HIGH	tests/windows/test_ui_drive_listing.py	176	except Exception:	CODE
HIGH	tests/windows/test_ui_drive_listing.py	184	except Exception:	CODE
HIGH	scripts/audit-license-provenance.py	107	except Exception:	CODE
HIGH	scripts/test_mcp_rapid_init.py	76	except _json.JSONDecodeError:	CODE
HIGH	scripts/memlab-drive.py	112	except Exception:	CODE
HIGH	scripts/run-test-wave.py	304	except subprocess.TimeoutExpired:	CODE
HIGH	scripts/test-impact/coverage_live_v2.py	356	except ProcessLookupError:	CODE
HIGH	scripts/test-impact/coverage_live_v2.py	644	except (OSError, ValueError, MemoryError):	CODE
HIGH	pkg/pypi/src/codebase_memory_mcp/_cli.py	196	except OSError:	CODE
HIGH	pkg/pypi/src/codebase_memory_mcp/_cli.py	719	except OSError:	CODE
HIGH	pkg/pypi/src/codebase_memory_mcp/_cli.py	647	except Exception:	CODE
HIGH	pkg/pypi/src/codebase_memory_mcp/_cli.py	1105	except FileNotFoundError:	CODE
HIGH	pkg/pypi/src/codebase_memory_mcp/_cli.py	462	except Exception:	CODE
HIGH	pkg/pypi/src/codebase_memory_mcp/_cli.py	1414	except OSError:	CODE
HIGH	pkg/pypi/src/codebase_memory_mcp/_cli.py	884	except OSError:	CODE

AI Slop Vocabulary62 hits · 195 pts

Severity	File	Line	Snippet	Context
MEDIUM	test-infrastructure/vm/vm-smoke.sh	2	# vm-smoke.sh — the ONE Windows smoke harness. Every venue calls this script:	COMMENT
MEDIUM	test-infrastructure/vm/vm-run-tests.sh	9	# test signal. CI gives the harness a per-user root under the profile with an	COMMENT
MEDIUM	test-infrastructure/vm/win.sh	405	# A UB trap crashes the runner with SIGILL (exit 132); the harness reports	COMMENT
MEDIUM	test-infrastructure/vm/win.sh	426	# harness + prod-binary guards) — exactly what CI's windows test legs run —	COMMENT
MEDIUM	tests/test_soak_daemon_recovery_contract.sh	2	# Static contract for the daemon crash/restart assertions in the soak harness.	COMMENT
MEDIUM	tests/test_harness_selection.sh	2	# PR CI's test selection in the parallel harness (scripts/run-tests-parallel.sh,	COMMENT
MEDIUM	tests/test_harness_selection.sh	25	# the selection file the harness writes under its log directory.	COMMENT
MEDIUM	tests/test_harness_selection.sh	51	# harness <case> <selection lines> [optional suites] -> RC, OUT	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	18	# parallel harness sources) with fabricated suite logs written the way	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	197	# ── 3. Plain assertion failure: byte-for-byte what the harness printed before ─	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	198	# Recorded from the harness at 96c3f41c (grep -B2 -A8 "FAIL" \| head -120, then	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	459	# ── 12. One implementation: the harness uses these functions, not a copy ─────	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	471	# ── 13. As the harness uses them: sourced, its shell options, an EXIT trap ───	COMMENT
MEDIUM	tests/test_failure_report_contract.sh	472	# The trap must never change the status the harness ends with: a trap that	COMMENT
MEDIUM	tests/test_soak_runtime_isolation_contract.sh	4	# Runtime-isolation contract for the soak harness (#1696, follow-up to #1691).	COMMENT
MEDIUM	tests/test_soak_runtime_isolation_contract.sh	12	# harness with an environment-probe fixture and require that no product	COMMENT
MEDIUM	tests/test_harness_test_only.sh	187	# an error: the parallel harness gives every per-suite process the whole list ──	COMMENT
MEDIUM	tests/test_smoke_runtime_isolation_contract.sh	4	# Runtime-isolation contract for the smoke harness (#1696, follow-up to #1691).	COMMENT
MEDIUM	tests/test_smoke_runtime_isolation_contract.sh	11	# live daemon. Drive the harness with an environment-probe fixture and require	COMMENT
MEDIUM	tests/test_smoke_runtime_isolation_contract.sh	83	# to the private root when the harness dies before that trap exists — the	COMMENT
MEDIUM	tests/test_smoke_runtime_isolation_contract.sh	86	# the shared /tmp parent for orphaned roots, which races every other harness	COMMENT
MEDIUM	tests/test_security_fuzz_harness.sh	44	# One python3 process answers the requests; the harness needs python3 for its	COMMENT
MEDIUM	tests/test_security_fuzz_harness.sh	46	# where the shell runs emulated, and the harness's 10-second hang limit then	COMMENT
MEDIUM	tests/test_parallel_harness_contract.sh	65	# int("") -- a scheduler-side race surfacing as a harness flake. Asserted	COMMENT
MEDIUM	tests/test_windows_bundle_contract.sh	888	# ── 10. PR smoke delegates to the maintained native harness ──────────────────	COMMENT
MEDIUM	tests/test_watcher_disabled.sh	26	# bounded poll on an asserted state (the soak harness's wait_for_daemon_stop	COMMENT
MEDIUM	tests/test_select_lanes.sh	9	# workflow, the test harness, Makefile.cbm and vendored code select FULL;	COMMENT
MEDIUM	tests/test_memlab_runtime_isolation_contract.sh	4	# Runtime-isolation contract for the memlab harness (#1696, follow-up to #1691).	COMMENT
MEDIUM	tests/repro/issue832_rss.py	119	# The decisive, robust signal at laptop-fixture scale is the RESIDENT-LEVEL	COMMENT
MEDIUM	internal/cbm/extract_defs.c	8829	// iterate top-level children for parameter_list as a robust fallback.	COMMENT
MEDIUM⚡	scripts/suite-failure-report.sh	3	# to keep. The ONE implementation behind the parallel harness's end-of-run	COMMENT
MEDIUM⚡	scripts/suite-failure-report.sh	5	# venue that reaches the harness through scripts/test.sh prints the same thing:	COMMENT
MEDIUM⚡	scripts/suite-failure-report.sh	9	# these functions with fabricated suite logs. Inline in the harness they could	COMMENT
MEDIUM	scripts/suite-failure-report.sh	181	# the harness printed before; section 2 appears only when it has content.	COMMENT
MEDIUM	scripts/smoke-invariants.sh	4	# A comprehensive, fast, portable smoke battery for the codebase-memory-mcp	COMMENT
MEDIUM	scripts/smoke-invariants.sh	850	# Strip JSON escaping so the assertions are robust to the text-result wrapping.	COMMENT
MEDIUM	scripts/smoke-invariants.sh	920	# Strip JSON escaping so the assertions are robust to the text-result wrapping.	COMMENT
MEDIUM	scripts/smoke-wrappers.sh	134	# HOME (the smoke harness could not delete its profile afterwards).	COMMENT
MEDIUM	scripts/memlab.sh	178	# A harness that hides why it failed is worse than no harness.	COMMENT
MEDIUM	scripts/run-test-wave.py	83	# not the tree. Timed with --kill-grace (1s in the harness contract), a slow	COMMENT
MEDIUM	scripts/run-test-wave.py	287	# this call. Refusing outright made the harness itself lose a race:	COMMENT
MEDIUM	scripts/run-tests-parallel.sh	44	# drives this harness before the real run and must not touch its logs). Keep	COMMENT
MEDIUM	scripts/soak-test.sh	88	# cache path in the child environment while this Bash harness retains the host	COMMENT
MEDIUM	scripts/soak-test.sh	202	# harness keeps SOAK_PROJECT in its host/MSYS form for file and Git operations,	COMMENT
MEDIUM	scripts/repro.sh	48	# so LeakSanitizer would flag benign harness leaks on every red store-level test	COMMENT
MEDIUM⚡	scripts/test.sh	271	# Step 0: fast build/security harness regressions run before the compiler-heavy	COMMENT
MEDIUM	scripts/test.sh	434	# tests is a property of the harness every later result depends on.	COMMENT
MEDIUM	scripts/test.sh	437	# Step 2c: PR CI's test selection (smart CI) through the parallel harness — the	COMMENT
MEDIUM	scripts/ci/msan-lane.sh	12	# which shares scripts/msan.sh with this path — one harness, both venues.	COMMENT
MEDIUM	scripts/ci/select-lanes.sh	14	# 3000 files), this script, any workflow, the test harness, Makefile.cbm	COMMENT
MEDIUM⚡	.github/workflows/_test.yml	259	# The harness writes the manifest BEFORE any suite runs, so a	COMMENT
MEDIUM⚡	.github/workflows/_test.yml	260	# missing file here means the job died before the harness started	COMMENT
MEDIUM⚡	.github/workflows/_test.yml	267	# behind it, so a failure can be read instead of re-run. The harness	COMMENT
MEDIUM	.github/workflows/_test.yml	610	# why the harness cannot run under a shared or ACL-inherited temp.	COMMENT
MEDIUM	.github/workflows/_test.yml	672	# The harness writes the manifest BEFORE any suite runs, so a	COMMENT
MEDIUM	.github/workflows/_test.yml	673	# missing file here means the job died before the harness started	COMMENT
MEDIUM	.github/workflows/pr.yml	3	# job below runs only when selected (unknown paths, workflows, the harness,	COMMENT
MEDIUM	.github/workflows/_smoke.yml	117	# ONE harness for every venue. This is the same wrapper local CI and PR CI	COMMENT
MEDIUM	.github/workflows/_smoke.yml	231	# ONE harness for every venue: the same script win.sh smoke-install and	COMMENT
MEDIUM	.github/workflows/fast-repro.yml	3	# 5-platform ASan board. The full bug-repro.yml board remains the comprehensive	COMMENT
2 more matches not shown…

Hyper-Verbose Identifiers177 hits · 169 pts

Severity	File	Line	Snippet	Context
LOW	graph-ui/agents/hooks/test_atlas_trace.py	35	def assert_private_tool_input_is_omitted(self, tool, field, value, private_marker):	CODE
LOW⚡	graph-ui/agents/hooks/test_atlas_trace.py	81	def test_command_private_values_never_enter_event_payloads(self):	CODE
LOW⚡	graph-ui/agents/hooks/test_atlas_trace.py	86	def test_search_patterns_never_enter_event_payloads(self):	CODE
LOW⚡	graph-ui/agents/hooks/test_atlas_trace.py	90	def test_description_private_values_never_enter_event_payloads(self):	CODE
LOW⚡	graph-ui/agents/hooks/test_atlas_trace.py	95	def test_concurrent_hooks_allocate_unique_sequences_and_keep_pending_after_failure(self):	CODE
LOW	graph-ui/agents/hooks/test_atlas_trace.py	108	def test_external_destinations_and_credentials_are_never_contacted(self):	CODE
LOW	graph-ui/agents/hooks/test_atlas_trace.py	120	def test_explicit_setup_preserves_settings_is_idempotent_and_escapes_names(self):	CODE
LOW	graph-ui/agents/hooks/test_atlas_trace.py	145	def test_setup_refuses_symlinks_malformed_settings_and_external_daemons_before_writes(self):	CODE
LOW	graph-ui/agents/hooks/test_atlas_trace.py	166	def test_setup_refuses_a_second_execution_with_a_different_matcher_or_timeout(self):	CODE
LOW	graph-ui/agents/hooks/test_atlas_trace.py	188	def test_post_edit_range_is_unknown_instead_of_an_unmodified_duplicate_occurrence(self):	CODE
LOW	graph-ui/agents/hooks/test_atlas_trace.py	196	def test_acknowledged_duplicate_retry_removes_only_acknowledged_rows(self):	CODE
LOW	graph-ui/src/chat/chat-strings.ts	35	export function chatBuiltUnavailableMessage(reason: 'off' \| 'not-running' \| 'policy'): string {	CODE
LOW⚡	graph-ui/src/galaxy/graph-neighborhood-cache.ts	134	export function graphNeighborhoodTransportKey(transport = globalThis.fetch) {	CODE
LOW⚡	graph-ui/src/galaxy/graph-neighborhood-cache.ts	144	export function peekGraphNeighborhoodCache(project: string, transport = globalThis.fetch) { return pools.get(transport)?	CODE
LOW⚡	graph-ui/src/galaxy/graph-neighborhood-cache.ts	145	export function clearGraphNeighborhoodCaches() { pools = new WeakMap(); }	CODE
LOW	graph-ui/src/galaxy/coverage-shadow.ts	73	export function resolveCoverageShadowNode(shadow: CoverageShadow \| null \| undefined, node: GraphNode \| null): CoverageSh	CODE
LOW	graph-ui/src/galaxy/fullscreen-isolation.ts	10	export function isolateFullscreenBackground(galaxy: HTMLElement): () => void {	CODE
LOW	graph-ui/src/galaxy/fullscreen-isolation.ts	46	export function fullscreenIsolationRequired(fullscreen: boolean, escapeTaken: boolean): boolean {	CODE
LOW	graph-ui/src/browser-ai/runtime-fault.ts	12	export function isFatalBrowserRuntimeError(error: unknown): error is BrowserRuntimeFatalError {	CODE
LOW	graph-ui/src/browser-ai/explanation-response.test.ts	90	+ 'def test_jsonb_agg_distinct_false(self):\ndef test_jsonb_agg_integerfield_order_by(self):\ndef test_jsonb_agg	CODE
LOW	graph-ui/src/browser-ai/chat-history-cache.ts	44	export function browserChatHistoryProjectKey(serverOrigin: string, project: string): string {	CODE
LOW	graph-ui/src/browser-ai/chat-history-cache.ts	126	export function createIndexedDbBrowserChatHistoryStorage(): BrowserChatHistoryStorage {	CODE
LOW	graph-ui/src/browser-ai/chat-history-cache.ts	184	export function createBrowserChatHistoryCache(options: BrowserChatHistoryCacheOptions = {}) {	CODE
LOW⚡	graph-ui/src/browser-ai/code-facts.test.ts	36	const long = 'def execute_from_command_line(\n argv=None,\n):\n """\n Run a ManagementUtility.\n\n M	CODE
LOW⚡	graph-ui/src/browser-ai/code-facts.test.ts	39	lines: ['def execute_from_command_line(argv=None):', ' """', ' Run a ManagementUtility.'] });	CODE
LOW	graph-ui/src/browser-ai/explanation-response.ts	14	export function formatExplanationEvidence(packet: PreparedExplanationContext): string {	CODE
LOW	graph-ui/src/browser-ai/explanation-context.ts	285	export function prepareExplanationContext(reader?: BrowserChatReaderContext,	CODE
LOW	graph-ui/src/architecture/system-architecture-model.ts	209	export function systemBehaviorOverviewGraph(data: SystemProjection, base: SystemSceneModel, paths: readonly SystemPath[]	CODE
LOW	graph-ui/src/architecture/repository-source.ts	55	export function resolveRepositorySelection(selected: GraphNode \| undefined, snapshot?: GraphData): GraphNode \| undefined	CODE
LOW	graph-ui/src/architecture/repository-guide.test.ts	35	expect(sourceQuote('src/a.ts', 'export function veryImportantRepositoryModule() {}')).toBeUndefined();	CODE
LOW	tests/test_profile_map_v2.py	128	def test_real_parser_preserves_full_identity_and_zero_records(self):	CODE
LOW	tests/test_profile_map_v2.py	169	def test_exact_wire_full_identity_zero_ids_and_input_order(self):	CODE
LOW	tests/test_profile_map_v2.py	198	def test_expected_rows_primary_setup_outcomes_and_all_reason_codes(self):	CODE
LOW	tests/test_profile_map_v2.py	235	def test_stream_unions_child_does_not_replace_primary_and_reason_order(self):	CODE
LOW	tests/test_profile_map_v2.py	268	def test_each_aggregate_cap_at_boundary_and_one_below(self):	CODE
LOW	tests/test_profile_map_v2.py	283	def test_malformed_attempt_discard_and_zero_remaining_allowance(self):	CODE
LOW	tests/test_profile_map_v2.py	309	def test_whole_call_preflight_and_parser_limit_is_not_malformed(self):	CODE
LOW	tests/test_profile_map_v2.py	331	def test_callback_provenance_invalid_results_and_entry_order(self):	CODE
LOW	tests/test_profile_map_v2.py	380	def test_bounded_cancellation_immutable_results_and_independent_calls(self):	CODE
LOW	tests/test_profile_map_v2.py	415	def test_strict_schema_membership_roles_names_and_exact_types(self):	CODE
LOW	tests/test_profile_map_v2.py	426	def test_enumeration_failure_and_observation_incompatibility_are_fatal(self):	CODE
LOW	tests/test_profile_text_parser.py	30	def test_native_dense_and_sparse_captures(self):	CODE
LOW	tests/test_profile_text_parser.py	49	def test_full_identity_order_and_all_counters(self):	CODE
LOW	tests/test_profile_text_parser.py	60	def test_exact_grammar_and_unsigned_decimals(self):	CODE
LOW	tests/test_profile_text_parser.py	80	def test_all_proper_prefixes_and_suffix_rejection(self):	CODE
LOW	tests/test_profile_text_parser.py	91	def test_duplicate_identity_and_hash_distinction(self):	CODE
LOW	tests/test_profile_text_parser.py	98	def test_inclusive_resource_limits_and_claimed_counts(self):	CODE
LOW	tests/test_profile_text_parser.py	113	def test_argument_types_and_limit_validation(self):	CODE
LOW	tests/test_profile_text_parser.py	132	def test_cancellation_and_exception_propagation_are_owner_local(self):	CODE
LOW	tests/test_profile_text_parser.py	154	def test_cancellation_sweep_including_sort_and_final_publication(self):	CODE
LOW	tests/test_profile_text_parser.py	172	def test_held_owner_survives_concurrent_cancellation(self):	CODE
LOW	tests/test_profile_text_parser.py	194	def test_result_immutability_and_independent_owners(self):	CODE
LOW	tests/test_daemon_smoke.py	157	def worker_tree_identity_matches(	CODE
LOW	tests/test_daemon_smoke.py	184	def worker_group_contains_descendant(worker_pgid, descendant_pid):	CODE
LOW	tests/test_daemon_smoke.py	257	def daemon_lifecycle_sequence(path):	CODE
LOW	tests/test_daemon_smoke.py	291	def probe_future_generation_rendezvous(	CODE
LOW	tests/test_daemon_smoke.py	525	def assert_indexed_tool_response(response, label):	CODE
LOW	tests/test_daemon_smoke.py	534	def run_successful_activation(	CODE
LOW	tests/test_daemon_smoke.py	658	def create_local_update_release(release_dir, candidate):	CODE
LOW	tests/test_daemon_smoke.py	683	def assert_no_activation_artifacts(directory, label):	CODE
117 more matches not shown…

Deep Nesting75 hits · 71 pts

Severity	File	Line	Context
LOW	tests/test_profile_map_v2.py	331	CODE
LOW	tests/test_profile_map_v2.py	426	CODE
LOW	tests/test_daemon_smoke.py	692	CODE
LOW	tests/test_coverage_terminal.py	141	CODE
LOW	tests/test_coverage_terminal.py	205	CODE
LOW	tests/test_coverage_children.py	57	CODE
LOW	tests/test_coverage_children.py	114	CODE
LOW	tests/test_coverage_children.py	273	CODE
LOW	tests/test_coverage_children.py	361	CODE
LOW	tests/test_coverage_children.py	389	CODE
LOW	tests/test_coverage_live_v2.py	96	CODE
LOW	tests/test_coverage_flush.py	55	CODE
LOW	tests/coverage_live_v2_support.py	74	CODE
LOW	tests/coverage_live_v2_support.py	97	CODE
LOW	tests/test_coverage_parent_failure.py	127	CODE
LOW	tests/windows/test_daemon_stability.py	481	CODE
LOW	tests/windows/test_daemon_stability.py	523	CODE
LOW	tests/windows/test_non_ascii_path.py	329	CODE
LOW	tests/windows/test_non_ascii_path.py	360	CODE
LOW	tests/windows/test_non_ascii_path.py	428	CODE
LOW	tests/windows/test_non_ascii_cache_dump.py	67	CODE
LOW	tests/windows/test_ui_drive_listing.py	95	CODE
LOW	scripts/sanitizer-coverage-map.py	104	CODE
LOW	scripts/sanitizer-coverage-map.py	249	CODE
LOW	scripts/gen-py-stdlib.py	112	CODE
LOW	scripts/gen-py-stdlib.py	133	CODE
LOW	scripts/gen-py-stdlib.py	154	CODE
LOW	scripts/gen-py-stdlib.py	201	CODE
LOW	scripts/gen-py-stdlib.py	252	CODE
LOW	scripts/gen-py-stdlib.py	166	CODE
LOW	scripts/memwaste-padding.py	44	CODE
LOW	scripts/memwaste-padding.py	94	CODE
LOW	scripts/gen-ui-licenses.py	43	CODE
LOW	scripts/memlab-drive.py	45	CODE
LOW	scripts/memlab-report.py	26	CODE
LOW	scripts/extract_nomic_vectors.py	111	CODE
LOW	scripts/security-network-source-audit.py	52	CODE
LOW	scripts/security-network-source-audit.py	116	CODE
LOW	scripts/security-network-source-audit.py	149	CODE
LOW	scripts/security-network-source-audit.py	264	CODE
LOW	scripts/memwaste-report.py	77	CODE
LOW	scripts/memwaste-report.py	136	CODE
LOW	scripts/memwaste-report.py	168	CODE
LOW	scripts/memwaste-report.py	229	CODE
LOW	scripts/lint-mem-gate.py	53	CODE
LOW	scripts/lint-mem-gate.py	88	CODE
LOW	scripts/lint-mem-gate.py	147	CODE
LOW	scripts/run-test-wave.py	281	CODE
LOW	scripts/run-test-wave.py	488	CODE
LOW	scripts/license-gate-check-npm.py	34	CODE
LOW	scripts/lint-memory-core.py	79	CODE
LOW	scripts/lint-memory-core.py	117	CODE
LOW	scripts/memwaste-scaling.py	63	CODE
LOW	scripts/memwaste-scaling.py	138	CODE
LOW	scripts/test-impact/coverage_live_v2.py	366	CODE
LOW	scripts/test-impact/coverage_live_v2.py	488	CODE
LOW	scripts/test-impact/coverage_live_v2.py	291	CODE
LOW	scripts/test-impact/predict.py	44	CODE
LOW	scripts/test-impact/predict.py	95	CODE
LOW	scripts/ci/stage-release-candidates.py	250	CODE
15 more matches not shown…

Excessive Try-Catch Wrapping55 hits · 62 pts

Severity	File	Line	Snippet	Context
LOW	graph-ui/agents/hooks/atlas-trace.py	195	except Exception as error:	STRING
LOW	graph-ui/agents/hooks/atlas-trace.py	207	except Exception:	STRING
LOW	graph-ui/agents/hooks/atlas-trace.py	212	except Exception:	STRING
LOW	graph-ui/agents/hooks/atlas-trace.py	250	except Exception:	STRING
LOW	tests/coverage_live_v2_support.py	113	except Exception as exc:	CODE
MEDIUM	tests/coverage_live_v2_support.py	97	def drain(source, destination):	CODE
LOW	tests/repro/issue832_rss.py	88	except Exception:	CODE
LOW	tests/windows/test_daemon_stability.py	149	except Exception:	CODE
MEDIUM	tests/windows/test_daemon_stability.py	146	def _reader():	CODE
LOW	tests/windows/test_non_ascii_path.py	403	except Exception:	CODE
LOW	tests/windows/test_non_ascii_path.py	422	except Exception:	CODE
LOW	tests/windows/mcp_stdio.py	55	except Exception:	CODE
LOW	tests/windows/mcp_stdio.py	72	except Exception as ex:	CODE
LOW	tests/windows/mcp_stdio.py	115	except Exception:	CODE
LOW⚡	tests/windows/mcp_stdio.py	142	except Exception:	CODE
LOW⚡	tests/windows/mcp_stdio.py	146	except Exception:	CODE
LOW⚡	tests/windows/mcp_stdio.py	149	except Exception:	CODE
MEDIUM	tests/windows/mcp_stdio.py	51	def _drain_stderr(self):	CODE
MEDIUM	tests/windows/mcp_stdio.py	69	def reader():	CODE
LOW	tests/windows/test_ui_drive_listing.py	50	except Exception:	STRING
LOW	tests/windows/test_ui_drive_listing.py	132	except Exception as ex:	CODE
LOW	tests/windows/test_ui_drive_listing.py	162	except Exception as ex:	CODE
LOW⚡	tests/windows/test_ui_drive_listing.py	176	except Exception:	CODE
LOW⚡	tests/windows/test_ui_drive_listing.py	181	except Exception:	CODE
LOW⚡	tests/windows/test_ui_drive_listing.py	184	except Exception:	CODE
LOW	scripts/benchmark-search-graph.sh	38	except Exception:	CODE
LOW	scripts/gen-py-stdlib.py	143	except Exception:	CODE
LOW	scripts/audit-license-provenance.py	92	except Exception:	CODE
LOW	scripts/audit-license-provenance.py	107	except Exception:	CODE
LOW	scripts/memlab-drive.py	112	except Exception:	CODE
LOW⚡	scripts/smoke-invariants.sh	192	except Exception:	CODE
LOW	scripts/smoke-invariants.sh	179	except Exception:	CODE
LOW	scripts/smoke-invariants.sh	560	except Exception:	CODE
LOW	scripts/smoke-test.sh	473	except Exception:	CODE
LOW	scripts/smoke-test.sh	482	except Exception:	CODE
LOW	scripts/smoke-test.sh	541	except Exception:	CODE
LOW	scripts/smoke-test.sh	587	except Exception:	CODE
MEDIUM	pkg/pypi/tests/test_cli.py	258	def publish(label, staged_paths, replace_file=None):	CODE
LOW	pkg/pypi/tests/test_cli.py	266	except Exception as exc: # surfaced on the test thread below	CODE
MEDIUM	pkg/pypi/src/codebase_memory_mcp/_cli.py	193	def _remove_quietly(path) -> None:	CODE
MEDIUM	pkg/pypi/src/codebase_memory_mcp/_cli.py	466	def _version() -> str:	CODE
LOW⚡	pkg/pypi/src/codebase_memory_mcp/_cli.py	456	except Exception as exc:	CODE
LOW⚡	pkg/pypi/src/codebase_memory_mcp/_cli.py	462	except Exception:	CODE
LOW⚡	pkg/pypi/src/codebase_memory_mcp/_cli.py	470	except Exception:	CODE
LOW⚡	pkg/pypi/src/codebase_memory_mcp/_cli.py	623	except Exception:	CODE
LOW⚡	pkg/pypi/src/codebase_memory_mcp/_cli.py	628	except Exception:	CODE
LOW⚡	pkg/pypi/src/codebase_memory_mcp/_cli.py	637	except Exception:	CODE
LOW⚡	pkg/pypi/src/codebase_memory_mcp/_cli.py	647	except Exception:	CODE
LOW⚡	pkg/pypi/src/codebase_memory_mcp/_cli.py	926	except Exception:	CODE
LOW	pkg/pypi/src/codebase_memory_mcp/_cli.py	907	except Exception:	CODE
LOW	pkg/pypi/src/codebase_memory_mcp/_cli.py	1258	except Exception as publication_error:	CODE
LOW	pkg/pypi/src/codebase_memory_mcp/_cli.py	1265	except Exception as recovery_error:	CODE
LOW	pkg/pypi/src/codebase_memory_mcp/_cli.py	1278	except Exception as exc:	CODE
LOW	pkg/pypi/src/codebase_memory_mcp/_cli.py	1284	except Exception:	CODE
LOW	pkg/pypi/src/codebase_memory_mcp/_cli.py	1510	except Exception as exc: # surfaced on the launcher thread	CODE

Unused Imports22 hits · 22 pts

Severity	File	Line	Context
LOW	tests/test_daemon_open_readiness.py	27	CODE
LOW	tests/coverage_live_v2_admin.py	4	CODE
LOW	scripts/sanitizer-coverage-map.py	36	CODE
LOW	scripts/gen-py-stdlib.py	25	CODE
LOW	scripts/gen-py-stdlib.py	30	CODE
LOW	scripts/memwaste-padding.py	24	CODE
LOW	scripts/memwaste-ratchet.py	21	CODE
LOW	scripts/extract_nomic_vectors.py	24	CODE
LOW	scripts/security-network-source-audit.py	11	CODE
LOW	scripts/memwaste-report.py	23	CODE
LOW	scripts/test_mcp_interactive.py	9	CODE
LOW	scripts/run-test-wave.py	11	CODE
LOW	scripts/smoke-fixture-server.py	4	CODE
LOW	scripts/lint-memory-core.py	47	CODE
LOW	scripts/memwaste-scaling.py	30	CODE
LOW	scripts/test-impact/profile_text_parser.py	24	CODE
LOW	scripts/test-impact/coverage-merge.py	24	CODE
LOW	scripts/ci/stage-release-candidates.py	4	CODE
LOW	scripts/ci/select-release-candidates.py	4	CODE
LOW	scripts/ci/verify-release-selection.py	4	CODE
LOW	scripts/ci/generate-sbom.py	14	CODE
LOW	pkg/pypi/src/codebase_memory_mcp/__init__.py	15	CODE

Example Usage Blocks14 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	install.sh	6	# Usage:	COMMENT
LOW	test-infrastructure/run.sh	25	# Usage:	COMMENT
LOW	test-infrastructure/vm/provision-windows.sh	19	# Usage:	COMMENT
LOW	test-infrastructure/vm/win.sh	8	# Usage:	COMMENT
LOW	tests/test_cpp_index_hang.sh	26	# Usage:	COMMENT
LOW	tests/scale_contract.sh	15	# Usage:	COMMENT
LOW	scripts/benchmark-search-graph.sh	5	# Usage:	COMMENT
LOW	scripts/fuzz.sh	4	# Usage:	COMMENT
LOW	scripts/lint.sh	4	# Usage:	COMMENT
LOW	scripts/smoke-invariants.sh	15	# Usage:	COMMENT
LOW	scripts/memwaste.sh	9	# Usage:	COMMENT
LOW	scripts/build.sh	4	# Usage:	COMMENT
LOW	scripts/soak-test.sh	9	# Usage:	COMMENT
LOW	scripts/ci/extract-release-archives.sh	5	# Usage:	COMMENT

Synthetic Comment Markers2 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	graph-ui/src/pseudocode/pseudocode-strings.ts	142	// Pseudocode AI generated oder mechanisch, und ist er hilfreich?" Die Herkunft	COMMENT
HIGH	internal/cbm/vendored/grammars/markdown/scanner.c	1321	// Close the inner most block after the next line break as requested. See	COMMENT

Verbosity Indicators7 hits · 13 pts

Severity	File	Line	Snippet	Context
LOW	scripts/build.sh	185	# Step 1: Clean C build artifacts only (not node_modules — npm ci handles that).	COMMENT
LOW	scripts/build.sh	196	# Step 2: Build (Makefile applies $ARCHFLAGS for the target arch on macOS)	COMMENT
LOW⚡	scripts/test.sh	271	# Step 0: fast build/security harness regressions run before the compiler-heavy	COMMENT
LOW	scripts/test.sh	419	# Step 1: Clean (scoped to this leg's build directory)	COMMENT
LOW⚡	scripts/test.sh	477	# Step 4: C++ large-TU index-hang regression guard (#410). Runs the PROD binary	COMMENT
LOW⚡	scripts/test.sh	486	# Step 5: Parent-death watchdog regression (#406/#407). Builds the prod stdio	COMMENT
LOW	scripts/test.sh	556	# Step 6: security-strings URL allow-list regression. The MSYS2 CLANG64 toolchain	COMMENT

Structural Annotation Overuse7 hits · 13 pts

Severity	File	Line	Snippet	Context
LOW	scripts/build.sh	185	# Step 1: Clean C build artifacts only (not node_modules — npm ci handles that).	COMMENT
LOW	scripts/build.sh	196	# Step 2: Build (Makefile applies $ARCHFLAGS for the target arch on macOS)	COMMENT
LOW⚡	scripts/test.sh	271	# Step 0: fast build/security harness regressions run before the compiler-heavy	COMMENT
LOW	scripts/test.sh	419	# Step 1: Clean (scoped to this leg's build directory)	COMMENT
LOW⚡	scripts/test.sh	477	# Step 4: C++ large-TU index-hang regression guard (#410). Runs the PROD binary	COMMENT
LOW⚡	scripts/test.sh	486	# Step 5: Parent-death watchdog regression (#406/#407). Builds the prod stdio	COMMENT
LOW	scripts/test.sh	556	# Step 6: security-strings URL allow-list regression. The MSYS2 CLANG64 toolchain	COMMENT

Self-Referential Comments3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/test_build_dir_safety.sh	36	# Create a real directory link: a native symlink, or an NTFS junction on	COMMENT
MEDIUM	scripts/security-network.sh	39	# Create a minimal test project	COMMENT
MEDIUM	scripts/smoke-test.sh	300	# Create a small multi-language project (Python + Go + JS)	COMMENT

Cross-Language Confusion2 hits · 8 pts

Severity	File	Line	Snippet	Context
HIGH	tests/windows/test_non_ascii_path.py	51	" c.push(add(1, 2));\n"	CODE
HIGH	scripts/extract_nomic_vectors.py	573	print(f" 3. arch -arm64 make -j12 -f Makefile.cbm clean-c && arch -arm64 make -j12 -f Makefile.cbm")	STRING

Modern AI Meta-Vocabulary3 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	README.md	65	- Equip your coding agents: `install` sets up supported client configuration, durable guidance, skills, Scout/Verify	CODE
MEDIUM	README.md	146	Hook augmentation is context-only and fail-open: it does not replace or block the requested tool call. Features vary by	CODE
MEDIUM	docs/llms.txt	41	- Agent integrations: https://github.com/DeusData/codebase-memory-mcp#multi-agent-support	CODE

Fake / Example Data6 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	graph-ui/verification/w4/coverage.json	738	"placeholder": "",	CODE
LOW	graph-ui/verification/w4/coverage.json	749	"placeholder": "ignored-note.ts has no content here: it is excluded by design (gitignore), so the index holds no	CODE
LOW	graph-ui/verification/w8b/ux.json	5804	"placeholder": "@create what does it do?",	CODE
LOW	graph-ui/src/galaxy/overlay-opacity.test.ts	56	'placeholder': '.atlas-galaxy-placeholder',	CODE
LOW	internal/cbm/vendored/grammars/scss/parser.c	310	[sym_placeholder] = "placeholder",	CODE
LOW	vendored/nomic/code_tokens.h	27973	"placeholder",	CODE

Overly Generic Function Names1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW⚡	graph-ui/src/browser-ai/code-facts.test.ts	49	const file = { text: `"""\nPostgreSQL aggregates.\n"""\n\n${JSONB_AGG}\n\n${ARRAY_AGG}\ndef helper():\n pass\	CODE

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	scripts/security-install.sh	28	# Set HOME to tmpdir so install writes there instead of real home	COMMENT

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	vendored/mimalloc/src/options.c	637	// TODO: implement ourselves to reduce dependencies on the C runtime	COMMENT

Modern Structural Boilerplate1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	pkg/pypi/src/codebase_memory_mcp/__init__.py	17	__all__ = ["main", "__version__"]	CODE

DeusData/codebase-memory-mcp

Open-Source Code Quality, Security and Technical Debt Review