0.1

Adjusted Signal

0.1

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

38.2K

Stars

TypeScript

Language

1.4M

Lines of Code

1.6K

Files

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 36 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 27 finding(s).

Agent Over-Engineering Ratio 0.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 22 finding(s).

PR Review Velocity Impact 0.6/100 · LOW

Which changes need focused human review? 78 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 11MEDIUM 17LOW 50

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 78 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Cross-Language Confusion (JS/TS)10 hits · 55 pts

Severity	File	Line	Snippet	Context
HIGH	packages/server/src/setup/server-validate.ts	94	elif sudo -n true 2>/dev/null; then	CODE
HIGH⚡	packages/server/src/setup/server-setup.ts	472	elif ${isSwarmWorker}; then	CODE
HIGH	packages/server/src/setup/server-setup.ts	721	elif [ "$status" -eq 2 ]; then	CODE
HIGH	packages/server/src/setup/server-setup.ts	726	elif ${isSwarmWorker}; then	CODE
HIGH	packages/server/src/utils/builders/railpack.ts	93	elif sudo -n true 2>/dev/null; then	CODE
HIGH	packages/server/src/utils/volume-backups/restore.ts	83	elif echo "$labels" \| grep -q "com.docker.compose.project="; then	CODE
HIGH	packages/server/src/services/settings.ts	260	elif docker inspect "$RESOURCE_NAME" >/dev/null 2>&1; then	CODE
HIGH	packages/server/src/services/settings.ts	540	elif docker service inspect dokploy-traefik >/dev/null 2>&1; then	CODE
HIGH	packages/server/src/services/settings.ts	548	elif docker container inspect dokploy-traefik >/dev/null 2>&1; then	CODE
HIGH	apps/dokploy/lib/avatar-utils.ts	6	* @return True if the avatar is a solid color, false otherwise.	COMMENT

Decorative Section Separators15 hits · 50 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/upgrade-integration-test.yml	34	# ──────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	37	# ── 1. Build the matrix ─────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	105	# ── 2. Run one upgrade test per pair ────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	117	# ── Environment setup ──────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	127	# ── Install Dokploy directly at VERSION A ──────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	167	# ── Bootstrap admin user ───────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	192	# ── Create test resources ──────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	288	# ── Pre-upgrade health check ───────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	334	# ── Upgrade ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	367	# ── Post-upgrade health check ──────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	409	# ── Diagnostics on failure ─────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/upgrade-integration-test.yml	424	# ── Job summary ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	apps/dokploy/server/wss/terminal.ts	20	# ----------------------------------------	COMMENT
MEDIUM⚡	apps/dokploy/server/wss/terminal.ts	30	# ----------------------------------------	COMMENT
MEDIUM⚡	apps/dokploy/server/wss/terminal.ts	32	# ----------------------------------------	COMMENT

Redundant / Tautological Comments11 hits · 21 pts

Severity	File	Line	Snippet	Context
LOW⚡	packages/server/src/setup/server-setup.ts	150	# Check if the OS is manjaro, if so, change it to arch	COMMENT
LOW⚡	packages/server/src/setup/server-setup.ts	155	# Check if the OS is Asahi Linux, if so, change it to fedora	COMMENT
LOW⚡	packages/server/src/setup/server-setup.ts	160	# Check if the OS is popOS, if so, change it to ubuntu	COMMENT
LOW⚡	packages/server/src/setup/server-setup.ts	165	# Check if the OS is linuxmint, if so, change it to ubuntu	COMMENT
LOW⚡	packages/server/src/setup/server-setup.ts	170	#Check if the OS is zorin, if so, change it to ubuntu	COMMENT
LOW	packages/server/src/setup/server-setup.ts	395	# Check if the /etc/dokploy directory exists	COMMENT
LOW	packages/server/src/setup/server-setup.ts	410	# Check if the node is already part of a Docker Swarm	COMMENT
LOW⚡	packages/server/src/setup/server-setup.ts	469	# Check if the dokploy-network already exists	COMMENT
LOW	packages/server/src/setup/server-setup.ts	758	# Check if dokpyloy-traefik exists	COMMENT
LOW	packages/server/src/utils/databases/mongo.ts	53	# Check if replica set is already initialized	COMMENT
LOW	packages/server/src/utils/volume-backups/restore.ts	50	# Check if volume exists	COMMENT

Over-Commented Block16 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	packages/server/auth-schema.ts	1	// import {	COMMENT
LOW	packages/server/auth-schema.ts	21		COMMENT
LOW	packages/server/auth-schema.ts	41	// .notNull()	COMMENT
LOW	packages/server/auth-schema.ts	61	// });	COMMENT
LOW	packages/server/auth-schema.ts	81	// lastRequest: timestamp("last_request"),	COMMENT
LOW	packages/server/auth-schema.ts	101	// slug: text("slug").unique(),	COMMENT
LOW	packages/server/auth-schema.ts	121	// id: text("id").primaryKey(),	COMMENT
LOW	packages/server/src/types/with.ts	41		COMMENT
LOW	packages/server/src/utils/providers/git.ts	101		COMMENT
LOW	packages/server/src/db/schema/project.ts	61	// name: true,	COMMENT
LOW	packages/server/src/db/schema/user.ts	121	export const apiAssignPermissions = createSchema	COMMENT
LOW	apps/dokploy/__test__/drop/drop.test.ts	361	// const zip = new AdmZip("./__test__/drop/zips/folder-with-file.zip");	COMMENT
LOW	apps/dokploy/__test__/drop/drop.test.ts	381	// const files = await fs.readdir(outputPath, { withFileTypes: true });	COMMENT
LOW	apps/dokploy/__test__/drop/drop.test.ts	401	// expect(files.some((f) => f.name === "folder3")).toBe(true);	COMMENT
LOW	apps/dokploy/components/layouts/side.tsx	241	// {	COMMENT
LOW	apps/dokploy/components/layouts/side.tsx	261	// title: "SSH Key",	COMMENT

Fake / Example Data16 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	packages/server/src/services/ai.ts	340	2. Use realistic example values (e.g., "admin@example.com" for emails, "mypassword123" for passwords)	CODE
LOW	…loy/__test__/mounts/update-file-mount-conflict.test.ts	44	user: { id: "user-1", email: "user@example.com", role: "owner" },	CODE
LOW	apps/dokploy/__test__/compose/provider-status.test.ts	38	user: { id: "user-1", email: "user@example.com", role: "owner" },	CODE
LOW	…s/dokploy/__test__/permissions/cross-org-scope.test.ts	27	user: { id: "user-1", email: "test@test.com" },	CODE
LOW	…kploy/__test__/permissions/resolve-permissions.test.ts	25	user: { id: "user-1", email: "test@test.com" },	CODE
LOW	…/dokploy/__test__/permissions/check-permission.test.ts	25	user: { id: "user-1", email: "test@test.com" },	CODE
LOW	…s/dokploy/__test__/permissions/server-terminal.test.ts	23	user: { id: "user-1", email: "test@test.com" },	CODE
LOW	…ps/dokploy/__test__/permissions/service-access.test.ts	26	user: { id: "user-1", email: "test@test.com" },	CODE
LOW	apps/dokploy/__test__/api/update-server.test.ts	89	user: { id: "user-1", email: "user@example.com", role: "owner" },	CODE
LOW	…s/dokploy/__test__/application/provider-status.test.ts	33	user: { id: "user-1", email: "user@example.com", role: "owner" },	CODE
LOW	…test__/backups/backup-destination-organization.test.ts	73	user: { id: "user-1", email: "user@example.com", role: "owner" },	CODE
LOW	…backups/volume-backup-destination-organization.test.ts	64	user: { id: "user-1", email: "user@example.com", role: "owner" },	CODE
LOW	…/dokploy/__test__/traefik/update-traefik-cloud.test.ts	38	user: { id: "user-1", email: "admin@example.com", role: "owner" },	CODE
LOW	…dokploy/__test__/traefik/update-traefik-router.test.ts	38	user: { id: "user-1", email: "admin@example.com", role: "admin" },	CODE
LOW	…st__/traefik/traefik-files-server-organization.test.ts	46	user: { id: "user-1", email: "user@example.com", role: "member" },	CODE
LOW	…ts/dashboard/impersonation/delete-account-by-email.tsx	104	placeholder="user@example.com"	CODE

Self-Referential Comments2 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	packages/server/src/setup/server-setup.ts	475	# Create the dokploy-network if it doesn't exist	COMMENT
MEDIUM	packages/server/src/setup/server-setup.ts	769	# Create the dokploy-traefik container	COMMENT

Hyper-Verbose Identifiers7 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW	packages/server/src/utils/tracking/hubspot.ts	46	export function formatContactDataForHubSpot(	CODE
LOW	packages/server/src/utils/tracking/hubspot.ts	133	export async function deleteHubSpotContactByEmail(	CODE
LOW	…er/src/services/logs-and-metrics/providers/registry.ts	27	export function getTelemetryProviderAdapter(	CODE
LOW	apps/dokploy/components/ui/chart.tsx	328	function getPayloadConfigFromPayload(	CODE
LOW	apps/dokploy/lib/utils.ts	31	export function getFallbackAvatarInitials(	CODE
LOW	apps/dokploy/pages/api/stripe/webhook.ts	23	function getSubscriptionServersQuantity(	CODE
LOW	apps/api/src/service.ts	142	function buildDeploymentRowsFromRuns(	CODE

Magic Placeholder Names1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…components/dashboard/project/environment-variables.tsx	180	API_KEY=your-api-key-here	CODE

Dokploy/dokploy

Open-Source Code Quality, Security and Technical Debt Review