3.5

Adjusted Signal

3.5

Raw Pattern Score

100%

Time Factor

—

Last Push

—

Stars

—

Language

1.2M

Lines of Code

4.8K

Files

4.0K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 15.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 3931 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 18 finding(s).

Agent Over-Engineering Ratio 0.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 30 finding(s).

PR Review Velocity Impact 16.3/100 · LOW

Which changes need focused human review? 3979 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 7HIGH 1MEDIUM 75LOW 3896

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 3979 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block3877 hits · 3731 pts

Severity	File	Line	Snippet	Context
LOW	.goreleaser.yml	761	# - "--label=org.opencontainers.image.created={{.Date}}"	COMMENT
LOW	AGENTS.md	41	go test ./... ./progstatus/... ./vt/...	COMMENT
LOW	vt/conform_pending_c1_test.go	1	//go:build !ghostty	COMMENT
LOW	vt/emulator.go	21	// Printf logs a message formatted as fmt.Printf does.	COMMENT
LOW	vt/emulator.go	41	// paletteClaimed is whether either layer has claimed any of the sixteen,	COMMENT
LOW	vt/emulator.go	81	// Terminal modes. Written only by the PTY reader goroutine (via setMode,	COMMENT
LOW	vt/emulator.go	101	cachedAutoWrap atomic.Bool	COMMENT
LOW	vt/emulator.go	121	cachedKittyFlags atomic.Int32	COMMENT
LOW	vt/emulator.go	141	// into. See boxRGB.	COMMENT
LOW	vt/emulator.go	201	kittyPassthroughFunc func(cmd *KittyCommand, rawData []byte)	COMMENT
LOW	vt/emulator.go	381	}	COMMENT
LOW	vt/emulator.go	741	//	COMMENT
LOW	vt/emulator.go	821	return	COMMENT
LOW	vt/emulator.go	861	// Applications can hide the cursor using ANSI escape sequences (DECTCEM mode).	COMMENT
LOW	vt/emulator.go	1081	// client is rebuilding from the daemon has emitted its DECSCUSR long ago, so	COMMENT
LOW	vt/emulator.go	1161	// Refresh the atomic mouse-mode caches that HasMouseMode and	COMMENT
LOW	vt/emulator.go	1181	}	COMMENT
LOW	vt/emulator.go	1201	// closing escape as three separate writes, so a slow reader strands the update	COMMENT
LOW	vt/emulator.go	1541	return len(p), nil	COMMENT
LOW	vt/cellsize.go	1	package vt	COMMENT
LOW	vt/terminal.go	1	package vt	COMMENT
LOW	vt/terminal.go	21	// release. Use it, and do not implement it: a type outside this package that	COMMENT
LOW	vt/terminal.go	41	// WriteResponse queues data to come out of Read, for a response made outside	COMMENT
LOW	vt/terminal.go	81	// CursorPen returns the style and hyperlink the next printed character	COMMENT
LOW	vt/terminal.go	101	RestoreCursorPendingWrap(pending bool)	COMMENT
LOW	vt/terminal.go	121	// any character set maps it. It is empty when nothing has been printed	COMMENT
LOW	vt/terminal.go	141	Titles() Titles	COMMENT
LOW	vt/terminal.go	161	// state: the start of an escape sequence or of a UTF-8 character that	COMMENT
LOW	vt/terminal.go	181		COMMENT
LOW	vt/terminal.go	201	// side effects of a mode change.	COMMENT
LOW	vt/terminal.go	221	// FocusReportingEnabled reports whether focus reporting (mode 1004) is on.	COMMENT
LOW	vt/terminal.go	241	// screen is cleared too: its flags do not travel.	COMMENT
LOW	vt/terminal.go	261	ScrollbackGeneration() uint64	COMMENT
LOW	vt/terminal.go	281	ScrollbackText(from, end int, fn func(index, width int, cells []TextCell) bool)	COMMENT
LOW	vt/terminal.go	301	// told instead of the cell centre.	COMMENT
LOW	vt/terminal.go	321	// RestoreKittyKeyboardState puts back the stack KittyKeyboardStack	COMMENT
LOW	vt/terminal.go	341	// RestoreModifyOtherKeys puts back the level ModifyOtherKeys returned.	COMMENT
LOW	vt/terminal.go	361	// the notice. SetThemeColors does not, so a host can preview a theme	COMMENT
LOW	vt/terminal.go	381	// keys alone, so the payload is not decoded. See ParseKittyHeader.	COMMENT
LOW	vt/terminal.go	401	SetKittyPlaceholderMode(m KittyPlaceholderMode)	COMMENT
LOW	vt/conform_slrm_test.go	1	package vt_test	COMMENT
LOW	vt/csi_sgr.go	121	return c, n - 1, true	COMMENT
LOW	vt/ghostty_scrollback.go	1	//go:build ghostty	COMMENT
LOW	vt/mode_map_race_test.go	1	package vt_test	COMMENT
LOW	vt/mode_map_race_test.go	41	})	COMMENT
LOW	vt/ghostty_terminal.go	101	gl, gr int	COMMENT
LOW	vt/scroll_rotate_test.go	301	if got := strings.TrimRight(b.String(), " "); got != want {	COMMENT
LOW	vt/scroll_rotate_test.go	381	}	COMMENT
LOW	vt/sixel_report.go	41		COMMENT
LOW	vt/blankfill_bench_test.go	1	package vt	COMMENT
LOW	vt/blankfill_bench_test.go	21	// fill-loop the store per cell that rotateWholeScreenUp actually does	COMMENT
LOW	vt/c1_utf8_test.go	1	package vt	COMMENT
LOW	vt/kitty_keyboard.go	181		COMMENT
LOW	vt/grid.go	1	package vt	COMMENT
LOW	vt/grid.go	21	// The second is that uv.RenderBuffer tracks which cells changed, for a	COMMENT
LOW	vt/grid.go	41	// A scroll blanks the rows it brings in and packs the rows it pushes into	COMMENT
LOW	vt/grid.go	61	// write to the row drops its tail: the shell has repainted it. A row that	COMMENT
LOW	vt/grid.go	81		COMMENT
LOW	vt/grid.go	501	}	COMMENT
LOW	vt/conform_unicode_test.go	161	})	COMMENT
3817 more matches not shown…

AI Slop Vocabulary37 hits · 107 pts

Severity	File	Line	Snippet	Context
MEDIUM	cmd/tuios/main.go	1160	# Try another harness's rules against a pane nothing has claimed yet	COMMENT
MEDIUM	internal/app/tape_body.go	32	// command (robust to hostile or future input).	COMMENT
MEDIUM	internal/terminal/window_input_gap_test.go	146	// of them is the load-robust half of this assertion: without pacing the	COMMENT
MEDIUM	internal/harness/herdrconv/main.go	175	out.WriteString("# Apache-2.0; see internal/harness/manifests/LICENSE-herdr).\n")	CODE
MEDIUM	internal/harness/herdrconv/main.go	176	out.WriteString("# Generated by go run ./internal/harness/herdrconv; review before shipping.\n\n")	CODE
MEDIUM	internal/harness/manifests/qwen.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/devin.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/kiro.toml	6	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/copilot.toml	5	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/kimi.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/kilo.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/cursor-agent.toml	5	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/letta.toml	5	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/letta.toml	20	# a launch is a harness here until the process-level check can say otherwise.	COMMENT
MEDIUM	internal/harness/manifests/qoder.toml	5	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/codex.toml	7	# so its hooks carry the pane's TUIOS_PANE_ID and the same harness pid. With	COMMENT
MEDIUM	internal/harness/manifests/amp.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/maki.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/droid.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/cline.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/antigravity.toml	5	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/grok.toml	5	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/harness/manifests/hermes.toml	4	# go run ./internal/harness/herdrconv	COMMENT
MEDIUM	internal/tape/header.go	54	// It never executes anything and is robust to hostile input: an unrecognized or	COMMENT
MEDIUM	internal/session/agent_state.go	360	// pane's TUIOS_PANE_ID and the same harness pid (#852). For such a harness,	COMMENT
MEDIUM	internal/session/verb_protocol_agents.go	365	{Name: "parts", Type: "[]object", Description: "The message as ordered parts, at most 64 and 8 MiB in all: {kind: te	CODE
MEDIUM	scripts/check.sh	269	# own harness. vet and the build still cover it.	COMMENT
MEDIUM	.github/workflows/ghostty-vt.yml	2	# job keeps that build compiling and its differential harness honest: the	COMMENT
MEDIUM	.github/workflows/e2e-tui.yml	4	# No terminal is needed: the harness allocates the pty itself, so this runs on a	COMMENT
MEDIUM	.github/workflows/e2e-tui.yml	311	# instrument only the harness.	COMMENT
MEDIUM	.github/workflows/e2e-tui.yml	365	# The harness tears down its own process groups, but a hard job failure	COMMENT
MEDIUM	e2e/control_plane_test.go	457	// TestUnknownVerbDoesNotKillConnection proves the dispatch loop is robust: a	COMMENT
MEDIUM	e2e/tui/agent_subagent_list_test.go	40	'late '*) x=${line#late }; harness=$PPID; ( (while kill -0 "$harness" 2>/dev/null; do sleep 0.1; done; hook "$x") & ) ;	CODE
MEDIUM	e2e/tui/testselect/collect.sh	8	# harness ran too, such as internal/session and internal/config. Code that	COMMENT
MEDIUM	e2e/tui/testselect/collect.sh	9	# runs in every process (package init, the start of main, and the harness's	COMMENT
MEDIUM	e2e/tui/testselect/collect.sh	38	# before it judges a change to a package the harness imports by the map.	COMMENT
MEDIUM	e2e/tui/testselect/mapfile.go	47	# cover harness the test process was measured too, not only tuios	COMMENT

Hallucination Indicators7 hits · 90 pts

Severity	File	Line	Snippet	Context
CRITICAL	internal/app/inbox_approvals_ext.go	148	return "by " + m.Inbox.approvals.armed.at.Add(inboxRiskPressWindow).Format("15:04:05")	CODE
CRITICAL	internal/app/inbox_reply_test.go	242	got := m.Inbox.reply.editor.comp.Text()	CODE
CRITICAL⚡	internal/app/inbox_reply_test.go	268	if n, _ := m.Inbox.reply.editor.comp.Images(); n != 0 {	CODE
CRITICAL⚡	internal/app/inbox_reply_test.go	272	if n, _ := m.Inbox.reply.editor.comp.Images(); n != 1 {	CODE
CRITICAL⚡	internal/app/inbox_reply_test.go	273	t.Fatalf("ctrl+v attached %d images, want 1: %q", n, m.Inbox.reply.editor.comp.Notice())	CODE
CRITICAL⚡	internal/app/inbox_reply_test.go	275	if got := m.Inbox.reply.editor.comp.Text(); got != "[Image #1 · png]" {	CODE
CRITICAL	internal/app/inbox_approvals_ext_test.go	230	if until := m.Inbox.approvals.armed.at.Add(inboxRiskPressWindow).Format("15:04:05"); !strings.Contains(m.Inbox.Peek.Not	CODE

Decorative Section Separators26 hits · 89 pts

Severity	File	Line	Snippet	Context
MEDIUM	plot/bar.go	439	GaugeLine GaugeStyle = iota // a heavy line: ━━━━━━━━━━	CODE
MEDIUM	internal/app/sidebar_spaces.go	29	// payments ─────────────	COMMENT
MEDIUM	internal/app/testdata/unicode/emoji-data.txt	20	# ================================================	COMMENT
MEDIUM	internal/app/testdata/unicode/emoji-data.txt	445	# ================================================	COMMENT
MEDIUM	internal/app/testdata/unicode/emoji-data.txt	748	# ================================================	COMMENT
MEDIUM	internal/app/testdata/unicode/emoji-data.txt	756	# ================================================	COMMENT
MEDIUM	internal/app/testdata/unicode/emoji-data.txt	813	# ================================================	COMMENT
MEDIUM	internal/app/testdata/unicode/emoji-data.txt	830	# ================================================	COMMENT
MEDIUM	internal/harness/manifests/claude-code.toml	119	# ────────────────────────────────	COMMENT
MEDIUM	internal/harness/manifests/claude-code.toml	154	# ─────────────────────────────── My session ─	COMMENT
MEDIUM	internal/harness/manifests/claude-code.toml	258	# ────────────────────────────────────────────	COMMENT
MEDIUM	internal/harness/manifests/claude-code.toml	260	# ────────────────────────────────────────────	COMMENT
MEDIUM	internal/harness/manifests/pi.toml	38	# ── ⠹ Working ──────────────────────────	COMMENT
MEDIUM	internal/harness/manifests/cline.toml	72	# ───────────────────────────────	COMMENT
MEDIUM	internal/harness/manifests/cline.toml	74	# ───────────────────────────────	COMMENT
MEDIUM	internal/harness/manifests/antigravity.toml	89	# ─────────────── esc to cancel	COMMENT
MEDIUM	internal/harness/manifests/gemini-cli.toml	16	# ╭──────────────────────────────────────────────╮	COMMENT
MEDIUM	internal/harness/manifests/gemini-cli.toml	18	# ╰──────────────────────────────────────────────╯	COMMENT
MEDIUM⚡	sketch/text/shapes.go	11	// rect ┌───────┐ rounded ╭───────╮ stadium, circle	COMMENT
MEDIUM⚡	sketch/text/shapes.go	12	// │ Label │ │ Label │ ╭─────────╮	COMMENT
MEDIUM⚡	sketch/text/shapes.go	13	// └───────┘ ╰───────╯ ( Label )	COMMENT
MEDIUM⚡	sketch/text/shapes.go	14	// ╰─────────╯	COMMENT
MEDIUM⚡	sketch/text/shapes.go	15	// subroutine ┌┬───────┬┐ cylinder ╭───────╮ double circle	COMMENT
MEDIUM⚡	sketch/text/shapes.go	16	// ││ Label ││ ├───────┤ ╭─────────╮	COMMENT
MEDIUM⚡	sketch/text/shapes.go	17	// └┴───────┴┘ │ Label │ (( Label ))	COMMENT
MEDIUM⚡	sketch/text/shapes.go	18	// ╰───────╯ ╰─────────╯	COMMENT

Self-Referential Comments10 hits · 38 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	cmd/tuios/main.go	328	Example: ` # Create a new session with auto-generated name	CODE
MEDIUM⚡	cmd/tuios/main.go	331	# Create a named session	COMMENT
MEDIUM⚡	cmd/tuios/main.go	334	# Create a headless session without attaching	COMMENT
MEDIUM⚡	cmd/tuios/main.go	337	# Create a session whose windows start in ~/dev/api	COMMENT
MEDIUM⚡	cmd/tuios/main.go	340	# Create a session in the space payments	COMMENT
MEDIUM⚡	cmd/tuios/main.go	343	# Create a session on the machine named build and attach to it	COMMENT
MEDIUM⚡	cmd/tuios/main.go	346	# Create a named session on that machine without attaching	COMMENT
MEDIUM	cmd/tuios/main.go	848	Example: ` # Create a new window	CODE
MEDIUM	cmd/tuios/main.go	851	# Create a window and get its ID (for scripting)	COMMENT
MEDIUM	internal/config/presets/tmux.toml	5	# This file is a delta over the tuios defaults, in the config's own syntax. An	COMMENT

Fake / Example Data10 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	vt/backend_bench_test.go	53	fmt.Fprintf(&b, "\x1b[%d;1H\x1b[38;5;250mline %3d %s", y, y, strings.Repeat("lorem ipsum dolor ", 4))	CODE
LOW	vt/resize_bench_test.go	36	fmt.Fprintf(&b, "\x1b[3%dm%06d\x1b[m %s\r\n", i%7+1, i, strings.Repeat("lorem ipsum dolor sit amet ", 11)[:293])	CODE
LOW	vt/resize_bench_test.go	36	fmt.Fprintf(&b, "\x1b[3%dm%06d\x1b[m %s\r\n", i%7+1, i, strings.Repeat("lorem ipsum dolor sit amet ", 11)[:293])	CODE
LOW	internal/app/sixel_passthrough.go	56	return "placeholder"	CODE
LOW	internal/federation/sshalias.go	150	_, problems := NewTable([]Host{{Name: name, Addr: "placeholder"}})	CODE
LOW	tml/catalog.go	603	{Name: "placeholder", Type: TString, Bind: true, Doc: "Text shown while the field is empty."},	CODE
LOW	tml/catalog.go	635	{Name: "placeholder", Type: TString, Bind: true, Multiline: true, Doc: "Text shown while the field is empty."},	CODE
LOW	tml/tml.schema.json	4553	"placeholder": {	CODE
LOW	tml/tml.schema.json	10132	"placeholder": {	CODE
LOW	loom/widgets.go	589	w := &fieldWidget{kind: n.Type, label: s.str(n, "label", vars), placeholder: s.str(n, "placeholder", vars),	CODE

Redundant / Tautological Comments4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	install-web.sh	223	# Check if OS/arch is supported	COMMENT
LOW	install-web.sh	304	# Check if directory is in PATH	COMMENT
LOW	install.sh	225	# Check if OS/arch is supported	COMMENT
LOW	install.sh	312	# Check if directory is in PATH	COMMENT

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	internal/integration/assets/hermes/__init__.py	45	except Exception:	CODE

Excessive Try-Catch Wrapping3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	internal/integration/assets/hermes/__init__.py	45	except Exception:	CODE
LOW	e2e/tui/display_follow_test.go	150	except Exception as e:	CODE
MEDIUM	e2e/tui/display_follow_test.go	144	def ask(path):	CODE

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/design/live-handoff.md	498	### 4.4 Idle and event-driven budgets	COMMENT

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	internal/app/subagents.go	413	// Step 3: the parents with running subagents, in the order they get	COMMENT

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	internal/app/subagents.go	413	// Step 3: the parents with running subagents, in the order they get	COMMENT

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	internal/integration/assets/hermes/__init__.py	13		CODE

Gaurav-Gosain/tuios

Open-Source Code Quality, Security and Technical Debt Review