2.5

Adjusted Signal

2.5

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

4.4K

Stars

Python

Language

123.0K

Lines of Code

292

Files

181

Pattern Hits

2026-10-31

Scan Date

0.07

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 155 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 10 finding(s).

Agent Over-Engineering Ratio 4.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 45 finding(s).

PR Review Velocity Impact 11.9/100 · LOW

Which changes need focused human review? 181 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 20MEDIUM 16LOW 145

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 181 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block49 hits · 49 pts

Severity	File	Line	Snippet	Context
LOW	wiki/Basic-Items.md	101	ms\|microsoft\|openoffice\|	COMMENT
LOW	wiki/Users-Gmail-Labels.md	21	See: https://docs.python.org/3/library/re.html	COMMENT
LOW	wiki/legacy/l-GAM-Discussion-Group.md	1	# [GAM Discussion Group](https://groups.google.com/forum/#!forum/google-apps-manager)	COMMENT
LOW	.github/stale.yml	41	# Comment to post when closing a stale Issue or Pull Request.	COMMENT
LOW	.github/workflows/codeql-analysis.yml	1	# For most projects, this workflow file will not need changing; you simply need	COMMENT
LOW	src/GamUpdate.txt	6581		COMMENT
LOW	src/GamCommands.txt	101	<EventColorName> ::=	COMMENT
LOW	src/tools/mkGamRef.py	1	#!/usr/bin/env python3	COMMENT
LOW	src/tools/mkGamRef.py	21	# commands and RHS of parameter productions are links pointing to the	COMMENT
LOW	src/tools/mkGamRef.py	181	# Input Token Start gam <BNF>	COMMENT
LOW	src/tools/hooks/hook-httplib2.py	1	# ------------------------------------------------------------------	COMMENT
LOW	src/tools/hooks/hook-googleapiclient.model.py	1	# ------------------------------------------------------------------	COMMENT
LOW	src/gam/__main__.py	1	#!/usr/bin/env python3	COMMENT
LOW	src/gam/gamlib/glgapi.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glapi.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glapi.py	661	'scope': 'https://www.googleapis.com/auth/classroom.rosters'},	COMMENT
LOW	src/gam/gamlib/glglobals.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glglobals.py	21	# The following GM_XXX constants are arbitrary but must be unique	COMMENT
LOW	src/gam/gamlib/glskus.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glclargs.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glaction.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/gluprop.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/gluprop.py	21	# notes	COMMENT
LOW	src/gam/gamlib/gluprop.py	41	# getChoice([CUSTOM_TYPE_CUSTOM[PTKW_CL_TYPE_KEYWORD]], defaultChoice=None)	COMMENT
LOW	src/gam/gamlib/gluprop.py	61	# getKeywordAttribute(CUSTOM_TYPE_DIFFERENT_KEYWORD, attrdict)	COMMENT
LOW	src/gam/gamlib/yubikey.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/__init__.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glmsgs.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glentity.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glcfg.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glcfg.py	201	# CI API Group members max page size when view=FULL	COMMENT
LOW	src/gam/gamlib/glverlibs.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glindent.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/gamlib/glgdata.py	1	# -- coding: utf-8 --	COMMENT
LOW	src/gam/atom/auth.py	1	#!/usr/bin/env python	COMMENT
LOW	src/gam/atom/http_core.py	1	#!/usr/bin/env python	COMMENT
LOW	src/gam/atom/core.py	1	#!/usr/bin/env python	COMMENT
LOW	src/gam/atom/core.py	121	"""	COMMENT
LOW	src/gam/gdata/service.py	1	#!/usr/bin/python	COMMENT
LOW	src/gam/gdata/urlfetch.py	1	#!/usr/bin/python	COMMENT
LOW	src/gam/gdata/__init__.py	1	#!/usr/bin/python	COMMENT
LOW	src/gam/gdata/apps/service.py	1	#!/usr/bin/python	COMMENT
LOW	src/gam/gdata/apps/__init__.py	1	#!/usr/bin/python	COMMENT
LOW	src/gam/gdata/apps/contacts/service.py	1	#!/usr/bin/env python	COMMENT
LOW	src/gam/gdata/apps/contacts/__init__.py	1	#!/usr/bin/env python	COMMENT
LOW	src/gam/gdata/apps/audit/service.py	1	#!/usr/bin/env python	COMMENT
LOW	src/gam/gdata/alt/app_engine.py	1	#!/usr/bin/python	COMMENT
LOW	src/gam/gdata/alt/__init__.py	1	#!/usr/bin/python	COMMENT
LOW	src/gam/gdata/alt/appengine.py	1	#!/usr/bin/python	COMMENT

Docstring Block Structure9 hits · 45 pts

Severity	File	Line	Snippet	Context
HIGH	src/gam/atom/service.py	514	Convert a dictionary of URL arguments into a URL parameter string. This function is deprcated, use atom.url.Url ins	STRING
HIGH	src/gam/atom/service.py	541	Converts a uri string and a collection of parameters into a URI. This function is deprcated, use atom.url.Url inste	STRING
HIGH	src/gam/gdata/service.py	363	Fetches and sets the OAuth request token and returns it. Args: scopes: string or list of string base URL(s) o	STRING
HIGH	src/gam/gdata/service.py	441	Generates URL at which user will login to authorize the request token. Args: request_token: gdata.auth.OA	STRING
HIGH	src/gam/gdata/service.py	496	Upgrades the authorized request token to an access token and returns it Args: authorized_request_token: g	STRING
HIGH	src/gam/gdata/service.py	874	Upgrades a single use AuthSub token to a session token. Args: token: A gdata.auth.AuthSubToken or gdata.auth.	STRING
HIGH	src/gam/gdata/__init__.py	622	Logic for populating members of a BatchEntry and adding to the feed. If the entry is not a BatchEntry, it is conve	STRING
HIGH	src/gam/gdata/__init__.py	718	Adds a delete request to the batch request feed. This method takes either the url_string which is the atom id of th	STRING
HIGH	src/gam/gdata/alt/app_engine.py	62	Saves the serialized auth token in the datastore. The token is also stored in memcache to speed up retrieval on a cac	STRING

Deep Nesting33 hits · 33 pts

Severity	File	Line	Context
LOW	src/tools/mkGamRef.py	105	CODE
LOW	src/gam/gamlib/glapi.py	861	CODE
LOW	src/gam/gamlib/yubikey.py	93	CODE
LOW	src/gam/gamlib/yubikey.py	117	CODE
LOW	src/gam/gamlib/yubikey.py	175	CODE
LOW	src/gam/atom/service.py	351	CODE
LOW	src/gam/atom/service.py	674	CODE
LOW	src/gam/atom/service.py	699	CODE
LOW	src/gam/atom/service.py	134	CODE
LOW	src/gam/atom/service.py	329	CODE
LOW	src/gam/atom/http_core.py	503	CODE
LOW	src/gam/atom/http_core.py	326	CODE
LOW	src/gam/atom/__init__.py	204	CODE
LOW	src/gam/atom/__init__.py	294	CODE
LOW	src/gam/atom/__init__.py	1381	CODE
LOW	src/gam/atom/core.py	94	CODE
LOW	src/gam/atom/core.py	180	CODE
LOW	src/gam/atom/core.py	225	CODE
LOW	src/gam/atom/core.py	262	CODE
LOW	src/gam/atom/core.py	294	CODE
LOW	src/gam/atom/mock_http_core.py	169	CODE
LOW	src/gam/atom/url.py	19	CODE
LOW	src/gam/atom/http.py	277	CODE
LOW	src/gam/atom/http.py	337	CODE
LOW	src/gam/gdata/service.py	436	CODE
LOW	src/gam/gdata/service.py	492	CODE
LOW	src/gam/gdata/service.py	723	CODE
LOW	src/gam/gdata/service.py	1006	CODE
LOW	src/gam/gdata/service.py	1235	CODE
LOW	src/gam/gdata/service.py	1393	CODE
LOW	src/gam/gdata/urlfetch.py	125	CODE
LOW	src/gam/gdata/urlfetch.py	62	CODE
LOW	src/gam/gdata/alt/appengine.py	90	CODE

Self-Referential Comments12 hits · 33 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	src/tools/hooks/hook-httplib2.py	4	# This file is distributed under the terms of the GNU General Public	COMMENT
MEDIUM⚡	src/tools/hooks/hook-googleapiclient.model.py	4	# This file is distributed under the terms of the GNU General Public	COMMENT
MEDIUM	src/gam/atom/auth.py	18	# This module is used for version 2 of the Google Data APIs.	COMMENT
MEDIUM	src/gam/atom/service.py	531	# Create a list of tuples containing the escaped version of the	COMMENT
MEDIUM	src/gam/atom/service.py	675	"""This method is deprecated, use atom.http._send_data_part"""	STRING
MEDIUM	src/gam/atom/http_core.py	18	# This module is used for version 2 of the Google Data APIs.	COMMENT
MEDIUM	src/gam/atom/token_store.py	7	"""This module provides a TokenStore class which is designed to manage	STRING
MEDIUM	src/gam/atom/core.py	18	# This module is used for version 2 of the Google Data APIs.	COMMENT
MEDIUM	src/gam/atom/mock_http_core.py	9	# This module is used for version 2 of the Google Data APIs.	COMMENT
MEDIUM	src/gam/atom/http_interface.py	7	"""This module provides a common interface for all HTTP requests.	STRING
MEDIUM	src/gam/atom/data.py	9	# This module is used for version 2 of the Google Data APIs.	COMMENT
MEDIUM	src/gam/gdata/service.py	1184	# Create a closure which will convert an XML string to the class of	COMMENT

Cross-File Repetition6 hits · 30 pts

Severity	File	Snippet	Context
HIGH	src/gam/atom/__init__.py	an "interface" providing methods to find link elements gdata entry elements often contain multiple links which differ in	STRING
HIGH	src/gam/atom/data.py	an "interface" providing methods to find link elements gdata entry elements often contain multiple links which differ in	STRING
HIGH	src/gam/gdata/__init__.py	an "interface" providing methods to find link elements gdata entry elements often contain multiple links which differ in	STRING
HIGH	src/gam/atom/http.py	performs an http call to the server, supports get, post, put, and delete. usage example, perform and http get on http://	STRING
HIGH	src/gam/gdata/urlfetch.py	performs an http call to the server, supports get, post, put, and delete. usage example, perform and http get on http://	STRING
HIGH	src/gam/gdata/alt/appengine.py	performs an http call to the server, supports get, post, put, and delete. usage example, perform and http get on http://	STRING

AI Structural Patterns27 hits · 27 pts

Severity	File	Line	Context
LOW	src/gam/atom/mock_service.py	122	CODE
LOW	src/gam/atom/__init__.py	563	CODE
LOW	src/gam/atom/__init__.py	1112	CODE
LOW	src/gam/atom/__init__.py	1140	CODE
LOW	src/gam/atom/__init__.py	1203	CODE
LOW	src/gam/atom/__init__.py	1265	CODE
LOW	src/gam/gdata/service.py	186	CODE
LOW	src/gam/gdata/service.py	939	CODE
LOW	src/gam/gdata/__init__.py	401	CODE
LOW	src/gam/gdata/__init__.py	541	CODE
LOW	src/gam/gdata/__init__.py	602	CODE
LOW	src/gam/gdata/__init__.py	811	CODE
LOW	src/gam/gdata/apps/__init__.py	89	CODE
LOW	src/gam/gdata/apps/__init__.py	186	CODE
LOW	src/gam/gdata/apps/__init__.py	218	CODE
LOW	src/gam/gdata/apps/__init__.py	256	CODE
LOW	src/gam/gdata/apps/__init__.py	291	CODE
LOW	src/gam/gdata/apps/__init__.py	326	CODE
LOW	src/gam/gdata/apps/__init__.py	358	CODE
LOW	src/gam/gdata/apps/__init__.py	390	CODE
LOW	src/gam/gdata/apps/__init__.py	422	CODE
LOW	src/gam/gdata/apps/__init__.py	477	CODE
LOW	src/gam/gdata/apps/__init__.py	507	CODE
LOW	src/gam/gdata/apps/contacts/__init__.py	392	CODE
LOW	src/gam/gdata/apps/contacts/__init__.py	533	CODE
LOW	src/gam/gdata/apps/contacts/__init__.py	633	CODE
LOW	src/gam/gdata/apps/contacts/__init__.py	735	CODE

Structural Annotation Overuse17 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	wiki/WhatIsDPoP.md	90	#### Step 1: Create the Secure Enclave Key	COMMENT
LOW	wiki/WhatIsDPoP.md	104	#### Step 2: Verify the Key Exists	COMMENT
LOW	wiki/WhatIsDPoP.md	112	#### Step 3: Configure GAM	COMMENT
LOW	wiki/WhatIsDPoP.md	133	#### Step 1: Generate a TPM-Backed Key	COMMENT
LOW	wiki/WhatIsDPoP.md	157	#### Step 2: Verify the Key	COMMENT
LOW	wiki/WhatIsDPoP.md	165	#### Step 3: Configure GAM	COMMENT
LOW	wiki/WhatIsDPoP.md	189	#### Step 1: Install System Packages	COMMENT
LOW	wiki/WhatIsDPoP.md	201	#### Step 2: Create and Persist a Signing Key	COMMENT
LOW	wiki/WhatIsDPoP.md	225	#### Step 3: Verify the Key	COMMENT
LOW	wiki/WhatIsDPoP.md	233	#### Step 4: Configure GAM	COMMENT
LOW	wiki/WhatIsDPoP.md	264	#### Step 1: Generate a Key on the YubiKey	COMMENT
LOW	wiki/WhatIsDPoP.md	282	#### Step 2: Verify	COMMENT
LOW	wiki/WhatIsDPoP.md	288	#### Step 3: Configure GAM	COMMENT
LOW	wiki/WhatIsDPoP.md	322	#### Step 1: Generate a PEM Key	COMMENT
LOW	wiki/WhatIsDPoP.md	329	#### Step 2: Configure GAM	COMMENT
LOW	wiki/WhatIsDPoP.md	343	### Step 1: Test Your Configuration	COMMENT
LOW	wiki/WhatIsDPoP.md	388	### Step 2: Create DPoP-Bound OAuth Credentials	COMMENT

Empty Error Handlers5 hits · 25 pts

Severity	File	Line	Snippet	Context
HIGH	src/gam/__main__.py	36	except (IOError, ValueError):	CODE
HIGH	src/gam/atom/http_core.py	34	except ImportError:	CODE
HIGH	src/gam/atom/http_core.py	486	except ValueError: # header_line missing from connection._buffer	CODE
HIGH	src/gam/atom/http.py	41	except ImportError:	CODE
HIGH	src/gam/atom/http.py	145	except ValueError: # header_line missing from connection._buffer	CODE

Decorative Section Separators4 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	src/tools/hooks/hook-httplib2.py	1	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/tools/hooks/hook-httplib2.py	11	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/tools/hooks/hook-googleapiclient.model.py	1	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	src/tools/hooks/hook-googleapiclient.model.py	11	# ------------------------------------------------------------------	COMMENT

Unused Imports7 hits · 7 pts

Severity	File	Line	Context
LOW	src/tools/hooks/hook-googleapiclient.model.py	14	CODE
LOW	src/gam/__main__.py	27	CODE
LOW	src/gam/gdata/apps/service.py	20	CODE
LOW	src/gam/gdata/apps/service.py	20	CODE
LOW	src/gam/gdata/apps/service.py	20	CODE
LOW	src/gam/gdata/apps/service.py	22	CODE
LOW	src/gam/gdata/apps/service.py	25	CODE

Redundant / Tautological Comments4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	src/gam/gamlib/glcfg.py	50	# Check if API calls rate exceeds limit	COMMENT
LOW	src/gam/atom/service.py	686	# Read the file and send it a chunk at a time.	COMMENT
LOW	src/gam/atom/http_core.py	509	# Read the file and send it a chunk at a time.	COMMENT
LOW	src/gam/atom/http.py	343	# Read the file and send it a chunk at a time.	COMMENT

Fake / Example Data3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	wiki/Resources.md	386	* Enter a single-line address as `address "123 Main Street"`	COMMENT
LOW	wiki/legacy/l-ResellerCommands.md	25	gam create resoldcustomer acme.com alternateemail acmecorp@gmail.com phone 123-456-7890 address1 "10 Main St." contact "	CODE
LOW	src/GamUpdate.txt	16665	The `<RegularExpression>` can be used to match a specific address "foo@bar.com", a pattern ".test." or the special val	CODE

Hyper-Verbose Identifiers2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	src/gam/atom/core.py	371	def __get_extension_attributes(self):	CODE
LOW	src/gam/atom/core.py	374	def __set_extension_attributes(self, attributes):	CODE

AI Slop Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.github/workflows/build.yml	390	# Apple wants some kind of "package" submitted so just add gam to a .zip	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	src/gam/gamlib/glaction.py	140	# Usage:	COMMENT

Excessive Try-Catch Wrapping1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	src/gam/gdata/service.py	993	except Exception as e:	CODE

GAM-team/GAM

Open-Source Code Quality, Security and Technical Debt Review