3.8

Adjusted Signal

3.8

Raw Pattern Score

100%

Time Factor

2026-08-13

Last Push

55.5K

Stars

TypeScript

Language

387.3K

Lines of Code

1.8K

Files

848

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 179 finding(s).

Hallucinated Dependency & Supply Chain Risk 6.7/100 · LOW

Are imports declared and package/API names verified? 457 finding(s).

Agent Over-Engineering Ratio 8.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 288 finding(s).

PR Review Velocity Impact 16.3/100 · LOW

Which changes need focused human review? 848 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 15MEDIUM 218LOW 613

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 848 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators212 hits · 645 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	59	// ─── Status helpers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	94	// ─── Styled table cells ──────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	117	// ─── Time formatters ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	158	// ─── Cron → human readable (best-effort, falls back to expression) ───────────	COMMENT
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	187	// ─── Main drawer ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	193	// ─── Drag-to-resize ──────────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	311	// ─── Row click → execution details or error modal ────────────────────────	COMMENT
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	352	// ─── Selection helpers ───────────────────────────────────────────────────	COMMENT
MEDIUM	…ckages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx	414	// ─── Header derived values ───────────────────────────────────────────────	COMMENT
MEDIUM	…ui/src/views/webhooklistener/WebhookListenerDrawer.jsx	30	// ─── Geometry ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ui/src/views/webhooklistener/WebhookListenerDrawer.jsx	38	// ─── Animations ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ui/src/views/webhooklistener/WebhookListenerDrawer.jsx	51	// ─── Status palette ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ui/src/views/webhooklistener/WebhookListenerDrawer.jsx	70	// ─── Small atoms ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ui/src/views/webhooklistener/WebhookListenerDrawer.jsx	170	// ─── Endpoint block ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ui/src/views/webhooklistener/WebhookListenerDrawer.jsx	303	// ─── Drawer ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	7	// ─── Infrastructure mocks ─────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	61	// ─── Imports (after mocks) ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	71	// ─── Helpers ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	97	// ─── Test fixture setup ───────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	134	// ─── executeScheduleJob: record-not-found branch ──────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	169	// ─── executeScheduleJob: record disabled branch ───────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	216	// ─── executeScheduleJob: expired / invalid-input branch ───────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	284	// ─── executeScheduleJob: nextRunAt guard ──────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	333	// ─── executeScheduleJob: successful execution ─────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	460	// ─── executeScheduleJob: scheduleInputMode variants ───────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	548	// ─── executeScheduleJob: ChatFlow not found ───────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	581	// ─── executeScheduleJob: ChatFlow wrong type ──────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.test.ts	603	// ─── executeScheduleJob: agentflow execution error ────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.ts	27	// ─── Types ─────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.ts	55	// ─── Public API ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.ts	78	// ── 1. Load & validate record ──────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.ts	103	// ── 2. End-date / input validation ─────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.ts	123	// ── 3. nextRunAt guard ─────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.ts	141	// ── 4. Execute ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleExecutor.ts	145	// ─── Internal ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.ts	98	// ─── Mode-agnostic job management ───────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	27	// ─── Mocks ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	62	// ─── Imports (after mocks) ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	75	// ─── Helpers ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	94	// ─── Global setup ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	118	// ─── getInstance ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	135	// ─── init (non-queue mode) ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	153	// ─── init (queue mode) ───────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	180	// ─── onScheduleChanged — delete ───────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	209	// ─── onScheduleChanged — upsert ───────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	265	// ─── shutdown ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	296	// ─── _syncAllJobs — non-queue mode ────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	352	// ─── _syncAllJobs — queue mode ────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	378	// ─── _upsertCronJob ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	431	// ── `L` (last day of month) compatibility with node-cron ───────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	514	// ─── _removeCronJob ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/schedule/ScheduleBeat.test.ts	533	// ─── _onCronFire ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/queue/ScheduleQueue.test.ts	7	// ─── Fixtures ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/queue/ScheduleQueue.test.ts	18	// ─── Mocks ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/queue/ScheduleQueue.test.ts	43	// ─── Imports (after mocks) ────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/queue/ScheduleQueue.test.ts	51	// ─── Factory helpers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/server/src/queue/ScheduleQueue.test.ts	88	// ─── constructor ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/server/src/queue/ScheduleQueue.test.ts	102	// ─── getQueueName ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/server/src/queue/ScheduleQueue.test.ts	110	// ─── getQueue ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/server/src/queue/ScheduleQueue.test.ts	119	// ─── processJob ───────────────────────────────────────────────────────────────	COMMENT
152 more matches not shown…

Fake / Example Data440 hits · 436 pts

Severity	File	Line	Snippet	Context
LOW	packages/ui/src/views/organization/index.jsx	65	placeholder: 'John Doe'	CODE
LOW	packages/ui/src/views/auth/register.jsx	74	placeholder: 'John Doe'	CODE
LOW	…rver/marketplaces/chatflows/HuggingFace LLM Chain.json	30	"placeholder": "What is a good name for a company that makes {product}?",	CODE
LOW	…rver/marketplaces/chatflows/HuggingFace LLM Chain.json	97	"placeholder": "gpt2",	CODE
LOW	…rver/marketplaces/chatflows/HuggingFace LLM Chain.json	105	"placeholder": "https://xyz.eu-west-1.aws.endpoints.huggingface.cloud/gpt2",	CODE
LOW	…rver/marketplaces/chatflows/HuggingFace LLM Chain.json	215	"placeholder": "Name Your Chain",	CODE
LOW	packages/server/marketplaces/chatflows/LLM Chain.json	30	"placeholder": "What is a good name for a company that makes {product}?",	CODE
LOW	packages/server/marketplaces/chatflows/LLM Chain.json	89	"placeholder": "Name Your Chain",	CODE
LOW	packages/server/marketplaces/chatflows/LLM Chain.json	349	"placeholder": "Type something here",	CODE
LOW	…es/server/marketplaces/chatflows/Input Moderation.json	29	"placeholder": "Name Your Chain",	CODE
LOW	…es/server/marketplaces/chatflows/Input Moderation.json	308	"placeholder": "What is a good name for a company that makes {product}?",	CODE
LOW	…es/server/marketplaces/chatflows/Input Moderation.json	366	"placeholder": "ignore previous instructions\ndo not follow the directions\nyou must ignore all	CODE
LOW	…es/server/marketplaces/chatflows/Input Moderation.json	618	"placeholder": "Type something here",	CODE
LOW	…es/server/marketplaces/chatflows/Input Moderation.json	671	"placeholder": "Type something here",	CODE
LOW	packages/server/marketplaces/chatflows/CSV Agent.json	201	"placeholder": "Type something here",	CODE
LOW	packages/server/marketplaces/chatflows/CSV Agent.json	262	"placeholder": "I want you to act as a document that I am having a conversation with. Your name	CODE
LOW	…erver/marketplaces/chatflows/Conversational Agent.json	441	"placeholder": "Type something here",	CODE
LOW	…kages/server/marketplaces/chatflows/Replicate LLM.json	30	"placeholder": "What is a good name for a company that makes {product}?",	CODE
LOW	…kages/server/marketplaces/chatflows/Replicate LLM.json	96	"placeholder": "a16z-infra/llama13b-v2-chat:df7690f1994d94e96ad9d568eac121aecf50684a0b0963b25a41	CODE
LOW	…kages/server/marketplaces/chatflows/Replicate LLM.json	208	"placeholder": "Name Your Chain",	CODE
LOW	…server/marketplaces/chatflows/Context Chat Engine.json	128	"placeholder": "[\"\|\", \"##\", \">\", \"-\"]",	CODE
LOW	…server/marketplaces/chatflows/Context Chat Engine.json	271	"placeholder": "my-first-namespace",	CODE
LOW	…server/marketplaces/chatflows/Context Chat Engine.json	288	"placeholder": "4",	CODE
LOW	…server/marketplaces/chatflows/Context Chat Engine.json	491	"placeholder": "I want you to act as a document that I am having a conversation with. Your name	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	42	"placeholder": "my-first-namespace",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	59	"placeholder": "4",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	88	"placeholder": "20",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	98	"placeholder": "0.5",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	317	"placeholder": "my-first-namespace",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	334	"placeholder": "4",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	363	"placeholder": "20",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	373	"placeholder": "0.5",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	641	"placeholder": "search_state_of_union",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	650	"placeholder": "Searches and returns documents regarding the state-of-the-union.",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	716	"placeholder": "search_state_of_union",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	725	"placeholder": "Searches and returns documents regarding the state-of-the-union.",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	1067	"placeholder": "Type something here",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	1120	"placeholder": "Type something here",	CODE
LOW	…ver/marketplaces/chatflows/Multiple Documents QnA.json	1173	"placeholder": "Type something here",	CODE
LOW	…laces/chatflows/Conversational Retrieval QA Chain.json	149	"placeholder": "[\"\|\", \"##\", \">\", \"-\"]",	CODE
LOW	…laces/chatflows/Conversational Retrieval QA Chain.json	389	"placeholder": "C:\\Users\\User\\Desktop",	CODE
LOW	…laces/chatflows/Conversational Retrieval QA Chain.json	397	"placeholder": "4",	CODE
LOW	…laces/chatflows/Conversational Retrieval QA Chain.json	556	"placeholder": "Type something here",	CODE
LOW	…/server/marketplaces/chatflows/List Output Parser.json	29	"placeholder": "Name Your Chain",	CODE
LOW	…/server/marketplaces/chatflows/List Output Parser.json	179	"placeholder": "What is a good name for a company that makes {product}?",	CODE
LOW	…/server/marketplaces/chatflows/List Output Parser.json	417	"placeholder": "Type something here",	CODE
LOW	…/server/marketplaces/chatflows/List Output Parser.json	470	"placeholder": "Type something here",	CODE
LOW	packages/server/marketplaces/chatflows/Local QnA.json	46	"placeholder": "[\"\|\", \"##\", \">\", \"-\"]",	CODE
LOW	packages/server/marketplaces/chatflows/Local QnA.json	288	"placeholder": "http://localhost:8080/v1",	CODE
LOW	packages/server/marketplaces/chatflows/Local QnA.json	295	"placeholder": "text-embedding-ada-002",	CODE
LOW	packages/server/marketplaces/chatflows/Local QnA.json	352	"placeholder": "llama2",	CODE
LOW	packages/server/marketplaces/chatflows/Local QnA.json	480	"placeholder": "AI assistant:",	CODE
LOW	packages/server/marketplaces/chatflows/Local QnA.json	566	"placeholder": "C:\\Users\\User\\Desktop",	CODE
LOW	packages/server/marketplaces/chatflows/Local QnA.json	574	"placeholder": "4",	CODE
LOW	packages/server/marketplaces/chatflows/Tool Agent.json	441	"placeholder": "Type something here",	CODE
LOW⚡	…ckages/server/marketplaces/chatflows/SQL DB Chain.json	226	"placeholder": "127.0.0.1:5432/chinook",	CODE
LOW⚡	…ckages/server/marketplaces/chatflows/SQL DB Chain.json	234	"placeholder": "table1, table2",	CODE
LOW⚡	…ckages/server/marketplaces/chatflows/SQL DB Chain.json	244	"placeholder": "table1, table2",	CODE
LOW⚡	…ckages/server/marketplaces/chatflows/SQL DB Chain.json	254	"placeholder": "3",	CODE
LOW⚡	…ckages/server/marketplaces/chatflows/SQL DB Chain.json	264	"placeholder": "10",	CODE
380 more matches not shown…

Structural Annotation Overuse43 hits · 88 pts

Severity	File	Line	Snippet	Context
LOW⚡	packages/ui/src/utils/xmlTagUtils.test.js	296	// Step 1: escape XML tags to entities	COMMENT
LOW⚡	packages/ui/src/utils/xmlTagUtils.test.js	304	// Step 4: verify editor would display proper angle brackets (no entities)	COMMENT
LOW⚡	packages/ui/src/utils/xmlTagUtils.test.js	309	// Step 5: getMarkdown() outputs text node content as-is (no escaping)	COMMENT
LOW⚡	packages/ui/src/utils/xmlTagUtils.test.js	311	// Step 6: unescape safety net	COMMENT
LOW⚡	packages/ui/src/ui-component/input/RichInput.jsx	171	// Step 1: Escape XML tags to entities so marked treats them as text	COMMENT
LOW⚡	packages/ui/src/ui-component/input/RichInput.jsx	173	// Step 2: Decode entities in the ProseMirror doc for proper display	COMMENT
LOW	packages/ui/src/views/tools/CustomMcpServerDialog.jsx	561	// Step 1: create	COMMENT
LOW	packages/ui/src/views/tools/CustomMcpServerDialog.jsx	573	// Step 2: authorize	COMMENT
LOW⚡	packages/ui/src/views/tools/CustomMcpServerDialog.jsx	624	// Step 1: update	COMMENT
LOW⚡	packages/ui/src/views/tools/CustomMcpServerDialog.jsx	633	// Step 2: authorize with the new config	COMMENT
LOW⚡	packages/ui/src/routes/RequireAuth.jsx	39	// Step 0: Wait for config to load	COMMENT
LOW⚡	packages/ui/src/routes/RequireAuth.jsx	44	// Step 1: Authentication Check	COMMENT
LOW⚡	packages/ui/src/routes/RequireAuth.jsx	50	// Step 2: Deployment Type Specific Logic	COMMENT
LOW⚡	packages/server/src/index.ts	232	// Step 1: Check if the req path contains /api/v1 regardless of case	COMMENT
LOW⚡	packages/server/src/index.ts	234	// Step 2: Check if the req path is casesensitive	COMMENT
LOW⚡	packages/server/src/index.ts	236	// Step 3: Check if the req path is in the whitelist	COMMENT
LOW	…ages/server/src/enterprise/services/account.service.ts	788	// Step 4: Deletion Process	COMMENT
LOW⚡	…ages/server/src/enterprise/services/account.service.ts	846	// Step 5: Anonymize User Record (GDPR Compliance)	COMMENT
LOW⚡	…ages/server/src/enterprise/services/account.service.ts	855	// Step 6: Cancel Stripe Subscription	COMMENT
LOW⚡	…ages/server/src/enterprise/services/account.service.ts	860	// Step 7: Delete Organization Folder from Storage	COMMENT
LOW	packages/server/src/utils/domainValidation.ts	61	// NOTE: This function extracts the chatflow ID from a prediction URL.	COMMENT
LOW⚡	packages/server/src/utils/buildAgentGraph.ts	1061	// Step 1: Convert the object into an array of [key, value] pairs and sort them by the value	COMMENT
LOW⚡	packages/server/src/utils/buildAgentGraph.ts	1064	// Step 2: Group keys by their depth values	COMMENT
LOW⚡	packages/server/src/utils/buildAgentGraph.ts	1073	// Step 3: Create the final sorted array with grouped keys	COMMENT
LOW⚡	packages/server/src/services/documentstore/index.ts	1280	// Step 1: Save configuration based on isStrictSave mode	COMMENT
LOW⚡	packages/server/src/services/documentstore/index.ts	1283	// Step 2: Mark as UPSERTING before starting the operation	COMMENT
LOW⚡	packages/server/src/services/documentstore/index.ts	1287	// Step 3: Perform the actual vector store upsert	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1745	// Step 1: Get existing loader	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1803	// Step 2: Replace with new values	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1841	// Step 3: Replace with files	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1915	// Step 4: Verification for must have components	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1928	// Step 5: Process & Upsert	COMMENT
LOW	…src/infrastructure/store/AgentflowContext.e2e.test.tsx	32	// Step 1: Add 3 nodes (simulating what addNode does via setNodes)	COMMENT
LOW⚡	…src/infrastructure/store/AgentflowContext.e2e.test.tsx	51	// Step 2: Connect Start → Agent → End	COMMENT
LOW⚡	…src/infrastructure/store/AgentflowContext.e2e.test.tsx	61	// Step 3: Edit agent node parameters	COMMENT
LOW⚡	…src/infrastructure/store/AgentflowContext.e2e.test.tsx	71	// Step 4: Verify flow data is complete for save	COMMENT
LOW⚡	…chatmodels/AWSBedrock/FlowiseAWSChatBedrockImported.ts	73	// Step 1: GetImportedModel for metadata (instructSupported, modelArchitecture)	COMMENT
LOW⚡	…chatmodels/AWSBedrock/FlowiseAWSChatBedrockImported.ts	83	// Step 2: Probe InvokeModel with an empty body to discover supported formats.	COMMENT
LOW	packages/components/nodes/agentflow/utils.test.ts	452	// Step 1: Build messages with base64 (as the node does)	COMMENT
LOW	packages/components/nodes/agentflow/utils.test.ts	467	// Step 2: After invoke, revert to file refs for storage	COMMENT
LOW⚡	packages/components/nodes/agentflow/utils.test.ts	520	// Step 1: addImageArtifactsToMessages inserts temp base64 message	COMMENT
LOW⚡	packages/components/nodes/agentflow/utils.test.ts	526	// Step 2: Filter temp messages (as Agent.ts does after invoke)	COMMENT
LOW⚡	packages/components/nodes/agentflow/utils.test.ts	530	// Step 3: Revert remaining base64 — none should remain since temp was removed	COMMENT

Verbosity Indicators42 hits · 86 pts

Severity	File	Line	Snippet	Context
LOW⚡	packages/ui/src/utils/xmlTagUtils.test.js	296	// Step 1: escape XML tags to entities	COMMENT
LOW⚡	packages/ui/src/utils/xmlTagUtils.test.js	304	// Step 4: verify editor would display proper angle brackets (no entities)	COMMENT
LOW⚡	packages/ui/src/utils/xmlTagUtils.test.js	309	// Step 5: getMarkdown() outputs text node content as-is (no escaping)	COMMENT
LOW⚡	packages/ui/src/utils/xmlTagUtils.test.js	311	// Step 6: unescape safety net	COMMENT
LOW⚡	packages/ui/src/ui-component/input/RichInput.jsx	171	// Step 1: Escape XML tags to entities so marked treats them as text	COMMENT
LOW⚡	packages/ui/src/ui-component/input/RichInput.jsx	173	// Step 2: Decode entities in the ProseMirror doc for proper display	COMMENT
LOW	packages/ui/src/views/tools/CustomMcpServerDialog.jsx	561	// Step 1: create	COMMENT
LOW	packages/ui/src/views/tools/CustomMcpServerDialog.jsx	573	// Step 2: authorize	COMMENT
LOW⚡	packages/ui/src/views/tools/CustomMcpServerDialog.jsx	624	// Step 1: update	COMMENT
LOW⚡	packages/ui/src/views/tools/CustomMcpServerDialog.jsx	633	// Step 2: authorize with the new config	COMMENT
LOW⚡	packages/ui/src/routes/RequireAuth.jsx	39	// Step 0: Wait for config to load	COMMENT
LOW⚡	packages/ui/src/routes/RequireAuth.jsx	44	// Step 1: Authentication Check	COMMENT
LOW⚡	packages/ui/src/routes/RequireAuth.jsx	50	// Step 2: Deployment Type Specific Logic	COMMENT
LOW⚡	packages/server/src/index.ts	232	// Step 1: Check if the req path contains /api/v1 regardless of case	COMMENT
LOW⚡	packages/server/src/index.ts	234	// Step 2: Check if the req path is casesensitive	COMMENT
LOW⚡	packages/server/src/index.ts	236	// Step 3: Check if the req path is in the whitelist	COMMENT
LOW	…ages/server/src/enterprise/services/account.service.ts	788	// Step 4: Deletion Process	COMMENT
LOW⚡	…ages/server/src/enterprise/services/account.service.ts	846	// Step 5: Anonymize User Record (GDPR Compliance)	COMMENT
LOW⚡	…ages/server/src/enterprise/services/account.service.ts	855	// Step 6: Cancel Stripe Subscription	COMMENT
LOW⚡	…ages/server/src/enterprise/services/account.service.ts	860	// Step 7: Delete Organization Folder from Storage	COMMENT
LOW⚡	packages/server/src/utils/buildAgentGraph.ts	1061	// Step 1: Convert the object into an array of [key, value] pairs and sort them by the value	COMMENT
LOW⚡	packages/server/src/utils/buildAgentGraph.ts	1064	// Step 2: Group keys by their depth values	COMMENT
LOW⚡	packages/server/src/utils/buildAgentGraph.ts	1073	// Step 3: Create the final sorted array with grouped keys	COMMENT
LOW⚡	packages/server/src/services/documentstore/index.ts	1280	// Step 1: Save configuration based on isStrictSave mode	COMMENT
LOW⚡	packages/server/src/services/documentstore/index.ts	1283	// Step 2: Mark as UPSERTING before starting the operation	COMMENT
LOW⚡	packages/server/src/services/documentstore/index.ts	1287	// Step 3: Perform the actual vector store upsert	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1745	// Step 1: Get existing loader	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1803	// Step 2: Replace with new values	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1841	// Step 3: Replace with files	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1915	// Step 4: Verification for must have components	COMMENT
LOW	packages/server/src/services/documentstore/index.ts	1928	// Step 5: Process & Upsert	COMMENT
LOW	…src/infrastructure/store/AgentflowContext.e2e.test.tsx	32	// Step 1: Add 3 nodes (simulating what addNode does via setNodes)	COMMENT
LOW⚡	…src/infrastructure/store/AgentflowContext.e2e.test.tsx	51	// Step 2: Connect Start → Agent → End	COMMENT
LOW⚡	…src/infrastructure/store/AgentflowContext.e2e.test.tsx	61	// Step 3: Edit agent node parameters	COMMENT
LOW⚡	…src/infrastructure/store/AgentflowContext.e2e.test.tsx	71	// Step 4: Verify flow data is complete for save	COMMENT
LOW⚡	…chatmodels/AWSBedrock/FlowiseAWSChatBedrockImported.ts	73	// Step 1: GetImportedModel for metadata (instructSupported, modelArchitecture)	COMMENT
LOW⚡	…chatmodels/AWSBedrock/FlowiseAWSChatBedrockImported.ts	83	// Step 2: Probe InvokeModel with an empty body to discover supported formats.	COMMENT
LOW	packages/components/nodes/agentflow/utils.test.ts	452	// Step 1: Build messages with base64 (as the node does)	COMMENT
LOW	packages/components/nodes/agentflow/utils.test.ts	467	// Step 2: After invoke, revert to file refs for storage	COMMENT
LOW⚡	packages/components/nodes/agentflow/utils.test.ts	520	// Step 1: addImageArtifactsToMessages inserts temp base64 message	COMMENT
LOW⚡	packages/components/nodes/agentflow/utils.test.ts	526	// Step 2: Filter temp messages (as Agent.ts does after invoke)	COMMENT
LOW⚡	packages/components/nodes/agentflow/utils.test.ts	530	// Step 3: Revert remaining base64 — none should remain since temp was removed	COMMENT

Hyper-Verbose Identifiers76 hits · 76 pts

Severity	File	Line	Snippet	Context
LOW	packages/ui/src/views/chatmessage/audio-recording.js	16	function handleDisplayingRecordingControlButtons() {	CODE
LOW	packages/ui/src/views/chatmessage/audio-recording.js	25	function handleHidingRecordingControlButtons() {	CODE
LOW	packages/ui/src/views/chatmessage/audio-recording.js	146	function handleElapsedRecordingTime() {	CODE
LOW	packages/ui/src/views/chatmessage/audio-recording.js	163	function displayElapsedTimeDuringAudioRecording(elapsedTime) {	CODE
LOW	packages/ui/src/views/chatmessage/audio-recording.js	176	function elapsedTimeReachedMaximumNumberOfHours(elapsedTime) {	CODE
LOW	…ges/server/src/enterprise/utils/tenantRequestGuards.ts	23	export function getActiveWorkspaceIdForRequest(req: Request): string {	CODE
LOW	…ges/server/src/enterprise/utils/tenantRequestGuards.ts	35	export function assertQueryOrganizationMatchesActiveOrg(user: LoggedInUser, organizationId: string \| undefined): void {	CODE
LOW	…ges/server/src/enterprise/utils/tenantRequestGuards.ts	46	export async function assertWorkspaceIdAccessibleToUser(	CODE
LOW	…ges/server/src/enterprise/utils/tenantRequestGuards.ts	68	export function assertStripeIdMatchesSession(requestedId: string, activeId: string \| undefined): void {	CODE
LOW	packages/server/src/enterprise/sso/SSOBase.test.ts	86	function mockHappyPathDependencies() {	CODE
LOW	packages/server/src/utils/fileValidation.ts	21	export function validateFileMimeTypeAndExtensionMatch(filename: string, mimetype: string): void {	CODE
LOW	packages/server/src/utils/fileValidation.ts	37	export function sanitizeAllowedUploadMimeTypesFromConfig(allowedTypesString: string): string {	CODE
LOW	packages/server/src/utils/domainValidation.ts	127	async function getUnauthorizedOriginError(chatflowId: string, workspaceId?: string): Promise<string> {	CODE
LOW	packages/server/src/utils/getChatMessage.ts	298	function filterMessagesWithFeedback(	CODE
LOW	packages/server/src/utils/buildAgentflow.ts	770	function hasReceivedRequiredInputs(waitingNode: IWaitingNode): boolean {	CODE
LOW	packages/server/src/utils/XSS.ts	33	export function getAllowedAuthCorsOrigins(): string[] {	CODE
LOW	packages/server/src/services/chatflows/index.ts	211	async function getAllChatflowsCountByOrganization(type: ChatflowType, organizationId: string): Promise<number> {	CODE
LOW	packages/server/src/services/assistants/index.ts	216	async function getAssistantsCountByOrganization(type: AssistantType, organizationId: string): Promise<number> {	CODE
LOW	packages/server/src/services/export-import/index.ts	187	async function replaceDuplicateIdsForChatFlow(queryRunner: QueryRunner, originalData: ExportData, chatflows: ChatFlow[])	CODE
LOW	packages/server/src/services/export-import/index.ts	208	async function replaceDuplicateIdsForAssistant(queryRunner: QueryRunner, originalData: ExportData, assistants: Assistant	CODE
LOW	packages/server/src/services/export-import/index.ts	229	async function replaceDuplicateIdsForChatMessage(	CODE
LOW	packages/server/src/services/export-import/index.ts	303	async function replaceExecutionIdForChatMessage(	CODE
LOW	packages/server/src/services/export-import/index.ts	359	async function replaceDuplicateIdsForChatMessageFeedback(	CODE
LOW	packages/server/src/services/export-import/index.ts	456	async function replaceDuplicateIdsForCustomTemplate(queryRunner: QueryRunner, originalData: ExportData, customTemplates:	CODE
LOW	packages/server/src/services/export-import/index.ts	477	async function replaceDuplicateIdsForDocumentStore(queryRunner: QueryRunner, originalData: ExportData, documentStores: D	CODE
LOW	packages/server/src/services/export-import/index.ts	498	async function replaceDuplicateIdsForDocumentStoreFileChunk(	CODE
LOW	packages/server/src/services/export-import/index.ts	527	async function replaceDuplicateIdsForTool(queryRunner: QueryRunner, originalData: ExportData, tools: Tool[]) {	CODE
LOW	packages/server/src/services/export-import/index.ts	548	async function replaceDuplicateIdsForVariable(queryRunner: QueryRunner, originalData: ExportData, variables: Variable[])	CODE
LOW	packages/server/src/services/export-import/index.ts	571	async function replaceDuplicateIdsForExecution(queryRunner: QueryRunner, originalData: ExportData, executions: Execution	CODE
LOW	packages/server/src/services/export-import/index.ts	592	function reduceSpaceForChatflowFlowData(chatflows: ChatFlow[]) {	CODE
LOW	packages/server/src/services/mcp-endpoint/index.test.ts	282	function makeAgentflowWithFormInputs(formInputTypes: any[]) {	CODE
LOW	packages/server/src/services/apikey/index.ts	94	async function getAllApiKeysByOrganization(organizationId: string): Promise<ApiKey[]> {	CODE
LOW	packages/server/src/services/chat-messages/index.ts	216	async function getMessagesFeedbackByChatflowIds(chatflowIds: string[]): Promise<ChatMessageFeedback[]> {	CODE
LOW	…tflow/examples/src/demos/FilteredComponentsExample.tsx	67	export function FilteredComponentsExample() {	CODE
LOW	packages/agentflow/src/core/utils/fieldVisibility.ts	130	function inputValuesWithDeclaredDefaults(params: InputParam[], inputValues: Record<string, unknown>): Record<string, unk	CODE
LOW	packages/agentflow/src/core/utils/fieldVisibility.ts	167	export function applyVisibleFieldDefaults(	CODE
LOW	packages/agentflow/src/core/utils/nodeFactory.ts	61	function initializeDefaultNodeData(nodeParams: Pick<InputParam, 'name' \| 'type' \| 'default' \| 'options'>[]): Record<stri	CODE
LOW	…kages/agentflow/src/core/utils/dynamicOutputAnchors.ts	22	export function buildDynamicOutputAnchors(nodeId: string, count: number, labelPrefix: string, includeElse: boolean = tru	CODE
LOW	…/agentflow/src/core/validation/constraintValidation.ts	31	export function checkHumanInputInIteration(newNodeName: string, parentNode: FlowNode \| null): ConstraintResult {	CODE
LOW	…/agentflow/src/core/validation/constraintValidation.ts	42	export function checkNodePlacementConstraints(	CODE
LOW	…ckages/agentflow/src/core/validation/flowValidation.ts	275	export function groupValidationErrorsByNodeId(errors: ValidationError[]): Map<string, string[]> {	CODE
LOW	…ckages/agentflow/src/core/validation/flowValidation.ts	292	export function applyValidationErrorsToNodes(nodes: FlowNode[], errors: ValidationError[]): FlowNode[] {	CODE
LOW	…/agentflow/src/features/node-editor/EditNodeDialog.tsx	30	function computeArrayItemParameters(params: InputParam[], inputs: Record<string, unknown>): Record<string, InputParam[][	CODE
LOW	…ages/agentflow/src/features/node-editor/AsyncInput.tsx	45	function useFlowAncestorNodeOptions(nodeId?: string): NodeOption[] {	CODE
LOW	…ages/agentflow/src/features/node-editor/AsyncInput.tsx	373	function AsyncMultiOptionsDropdown({ inputParam, value, disabled, onChange, nodeName, inputValues }: AsyncInputProps) {	CODE
LOW	…tflow/src/features/node-editor/EditNodeDialog.test.tsx	250	function createStartNodeInputParams(overrides?: { includeFormInputTypesArray?: boolean }): InputParam[] {	CODE
LOW	packages/agentflow/src/features/canvas/nodeIcons.tsx	51	export function getBuiltInAnthropicToolIcon(toolName: string) {	CODE
LOW	…src/features/canvas/components/NodeStatusIndicator.tsx	23	function NodeStatusIndicatorComponent({ status, error }: NodeStatusIndicatorProps) {	CODE
LOW	…src/features/canvas/components/NodeStatusIndicator.tsx	94	function NodeWarningIndicatorComponent({ message }: NodeWarningIndicatorProps) {	CODE
LOW	…w/src/features/canvas/components/NodeOutputHandles.tsx	37	function NodeOutputHandlesComponent({ outputAnchors, nodeColor, isHovered, nodeRef, nodeId }: NodeOutputHandlesProps) {	CODE
LOW	…ow/src/features/canvas/components/NodeModelConfigs.tsx	19	function NodeModelConfigsComponent({ inputs }: NodeModelConfigsProps) {	CODE
LOW	…/src/features/canvas/components/ValidationFeedback.tsx	60	function ValidationFeedbackComponent({ nodes, edges, availableNodes, setNodes }: ValidationFeedbackProps) {	CODE
LOW	…/src/features/canvas/components/NodeToolbarActions.tsx	23	function NodeToolbarActionsComponent({ nodeId, nodeName, isVisible, onInfoClick }: NodeToolbarActionsProps) {	CODE
LOW	…gentflow/src/features/generator/GenerateFlowDialog.tsx	46	function GenerateFlowDialogComponent({ open, onClose, onGenerated }: GenerateFlowDialogProps) {	CODE
LOW	packages/components/nodes/tools/MCP/core.ts	12	function getMCPToolDescriptionMaxLength(): number {	CODE
LOW	packages/components/nodes/tools/MCP/core.ts	38	export function sanitizeMCPToolDescription(description: string): string {	CODE
LOW	…ages/components/nodes/tools/MCP/CustomMCP/CustomMCP.ts	204	function substituteVariablesInObject(obj: any, sandbox: any): any {	CODE
LOW	…ages/components/nodes/tools/MCP/CustomMCP/CustomMCP.ts	223	function substituteVariablesInString(str: string, sandbox: any): string {	CODE
LOW	…ckages/components/nodes/chatmodels/AWSBedrock/utils.ts	116	export async function discoverInferenceProfiles(	CODE
LOW	…ckages/components/nodes/chatmodels/AWSBedrock/utils.ts	179	export async function getStopSeqUnsupportedModels(): Promise<Set<string>> {	CODE
16 more matches not shown…

Magic Placeholder Names10 hits · 50 pts

Severity	File	Line	Snippet	Context
HIGH	packages/server/marketplaces/tools/Get Stock Mover.json	7	"func": "const fetch = require('node-fetch');\nconst url = 'https://morning-star.p.rapidapi.com/market/v2/get-movers	CODE
HIGH	packages/server/marketplaces/tools/SendGrid Email.json	7	"func": "const fetch = require('node-fetch');\nconst url = 'https://api.sendgrid.com/v3/mail/send';\nconst api_key =	CODE
HIGH	packages/agentflow/README.md	67	<Agentflow apiBaseUrl='http://localhost:3000' token='your-api-key' />	CODE
HIGH	packages/agentflow/README.md	111	token='your-api-key'	CODE
HIGH	packages/agentflow/examples/README.md	46	VITE_API_TOKEN=your-api-key-here	CODE
HIGH	packages/observe/README.md	64	<ObserveProvider apiBaseUrl='http://localhost:3000' token='your-api-key'>	CODE
HIGH	packages/observe/README.md	84	<ObserveProvider apiBaseUrl='http://localhost:3000' token='your-api-key'>	CODE
HIGH	packages/observe/README.md	119	<ObserveProvider apiBaseUrl='http://localhost:3000' token='your-api-key'>	CODE
HIGH	…ckages/components/credentials/IBMWatsonx.credential.ts	54	placeholder: '<YOUR-APIKEY>',	CODE
HIGH	…ckages/components/credentials/IBMWatsonx.credential.ts	54	placeholder: '<YOUR-APIKEY>',	CODE

Cross-Language Confusion (JS/TS)5 hits · 28 pts

Severity	File	Line	Snippet	Context
HIGH	packages/ui/src/views/chatflows/APICodeDialog.jsx	327	print(response.json())	CODE
HIGH	packages/ui/src/views/docstore/DocStoreAPIDialog.jsx	70	print(response)	CODE
HIGH	packages/ui/src/views/docstore/DocStoreAPIDialog.jsx	74	print(output)	CODE
HIGH	packages/ui/src/views/docstore/DocStoreAPIDialog.jsx	176	print(output)	CODE
HIGH	packages/components/src/agents.ts	686	// Invalid tools won't be in the map, so we return False.	COMMENT

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	…onents/nodes/agents/OpenAIAssistant/OpenAIAssistant.ts	546	event.data.required_action.submit_tool_outputs.tool_calls.forEach((item) => {	CODE
CRITICAL	…onents/nodes/agents/OpenAIAssistant/OpenAIAssistant.ts	1067	event.data.required_action.submit_tool_outputs.tool_calls.forEach((item) => {	CODE

Over-Commented Block11 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW	artillery-load-test.yml	21	- loop:	COMMENT
LOW	packages/ui/src/serviceWorker.js	1	// This optional code is used to register a service worker.	COMMENT
LOW	packages/ui/src/ui-component/input/SuggestionList.jsx	41	// Our suggestion handler returns `MentionSuggestion`s (which we've	COMMENT
LOW	packages/server/cypress/support/commands.ts	1	/// <reference types="cypress" />	COMMENT
LOW	packages/server/cypress/support/commands.ts	21	// -- This is a dual command --	COMMENT
LOW	packages/server/cypress/support/e2e.ts	1	// ***********************************************************	COMMENT
LOW	…agentflow/src/infrastructure/api/loadMethodRegistry.ts	61	listVectorStores: (apis) => apis.storesApi.getVectorStores(),	COMMENT
LOW	…features/executions/components/NodeContentRenderer.tsx	101	const v = parsed.value	COMMENT
LOW	packages/components/jest.config.js	21	// multer-azure-blob-storage transitively pulls in azure-storage -> request@2.88.2 -> uuid/v4.	COMMENT
LOW	…ents/nodes/chatmodels/ChatPerplexity/ChatPerplexity.ts	121	// Currently disabled as output is stored as additional_kwargs	COMMENT
LOW	…ents/nodes/chatmodels/ChatPerplexity/ChatPerplexity.ts	141	// name: 'searchRecencyFilter',	COMMENT

Slop Phrases4 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	…erver/marketplaces/chatflows/Conversational Agent.json	349	"default": "Assistant is a large language model trained by OpenAI.\n\nAssistant is designed to b	CODE
MEDIUM	…erver/marketplaces/chatflows/Conversational Agent.json	398	"systemMessage": "Assistant is a large language model trained by OpenAI.\n\nAssistant is designed to	CODE
LOW	…ages/server/src/enterprise/services/account.service.ts	685	// all checks are done, now update the user password, don't forget to hash it and do not forget to clear the	COMMENT
MEDIUM	…odes/agents/ConversationalAgent/ConversationalAgent.ts	21	Assistant is designed to be able to assist with a wide range of tasks, from answering simple questions to providing in-d	CODE

Self-Referential Comments2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/ui/src/views/docstore/DocStoreAPIDialog.jsx	54	"createNewDocStore": False, # Create a new document store	CODE
MEDIUM	packages/ui/src/views/docstore/DocStoreAPIDialog.jsx	158	"createNewDocStore": False, # Create a new document store	CODE

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/components/nodes/agents/ToolAgent/ToolAgent.ts	216	// https://docs.anthropic.com/en/docs/build-with-claude/tool-use#chain-of-thought	COMMENT

FlowiseAI/Flowise

Open-Source Code Quality, Security and Technical Debt Review