5.5

Adjusted Signal

5.5

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

9.6K

Stars

TypeScript

Language

153.7K

Lines of Code

484

Files

722

Pattern Hits

2026-10-31

Scan Date

0.04

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 15.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 485 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.6/100 · LOW

Are imports declared and package/API names verified? 50 finding(s).

Agent Over-Engineering Ratio 12.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 371 finding(s).

PR Review Velocity Impact 25.0/100 · MEDIUM

Which changes need focused human review? 722 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 3HIGH 15MEDIUM 30LOW 674

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 722 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block216 hits · 212 pts

Severity	File	Line	Snippet	Context
LOW	samples/governance-agent/requirements.txt	501	# reportlab	COMMENT
LOW	samples/governance-agent/requirements.txt	761	# via google-adk	COMMENT
LOW	samples/governance-agent/requirements.txt	781	google-auth==2.57.0 \	COMMENT
LOW	samples/governance-agent/requirements.txt	981	# google-cloud-datacatalog-lineage	COMMENT
LOW	samples/governance-agent/requirements.txt	1021	# via huggingface-hub	COMMENT
LOW	samples/governance-agent/requirements.txt	1041	# safehttpx	COMMENT
LOW	samples/governance-agent/requirements.txt	1901	--hash=sha256:e9db7e292e0ab79dd108d7f1a94fe31601ce1ee3f7b79e0692043423020b0593	COMMENT
LOW	samples/governance-agent/requirements.txt	1921	--hash=sha256:29253a9207ce32b64c3ac6600edc75368f98473906e8fd1043bd6b5b1de2c14a \	COMMENT
LOW	samples/governance-agent/requirements.txt	2261	--hash=sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0 \	COMMENT
LOW	samples/governance-agent/requirements.txt	2701	--hash=sha256:269b7eb9d3c202ca84b4bc9618cb04ebb43d3d4d1e567e4c768607232c05f945 \	COMMENT
LOW	samples/governance-agent/requirements.txt	2721	# openai	COMMENT
LOW	samples/governance-agent/requirements.txt	2741	# via	COMMENT
LOW	…/policy-as-code-agent/policy_as_code_agent/__init__.py	1	# Copyright 2025 Google LLC	COMMENT
LOW	okf/samples/crypto_bitcoin/seeds.txt	1	# Seed URLs for the Bitcoin public BigQuery dataset	COMMENT
LOW	okf/samples/ga4_merch_store/seeds.txt	1	# Seed URLs for the GA4 Google Merchandise Store anchor dataset	COMMENT
LOW	okf/samples/stackoverflow/seeds.txt	1	# Seed URLs for the Stack Overflow public BigQuery dataset	COMMENT
LOW	okf/src/reference_agent/viewer/static/viz.css	161	#detail-backlinks { margin-top: 18px; }	COMMENT
LOW	toolbox/mdcode/README.md	141	# Initialize a new catalog snapshot for multiple bigquery datasets	COMMENT
LOW	…/skill/catalog/EntryGroups/commerce_demo/commerce.yaml	1	# What the business is, and what one agent is allowed to do to it.	COMMENT
LOW	…/skill/catalog/EntryGroups/commerce_demo/commerce.yaml	21	# that gate it in `guards` -- which is the only thing that gives a constraint	COMMENT
LOW	…/skill/catalog/EntryGroups/commerce_demo/commerce.yaml	41	# in the schema.	COMMENT
LOW	…tryGroups/commerce_demo/commerce.profiles/spanner.yaml	1	# Where the commerce model lives, and how its one action is carried out.	COMMENT
LOW	…tryGroups/commerce_demo/commerce.profiles/alloydb.yaml	1	# The same commerce model, in AlloyDB.	COMMENT
LOW	…tryGroups/commerce_demo/commerce.profiles/alloydb.yaml	21	#	COMMENT
LOW	toolbox/mdcode/tests/libts/mocks.ts	241	// Reachable sources for the dry-run probe (validateBigQueryDataSources). Use	COMMENT
LOW	toolbox/mdcode/tests/libts/gcp/location_responses.ts	1	// Trimmed copies of what the services returned on 2026-10-27 in	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/spanner.e2e.test.ts	1	// End-to-end tests for the Spanner destination: real-shaped fixtures run the	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/transpile.test.ts	1	// Hermetic tests for the transpile pass (src/libts/semantic/transpile.ts).	COMMENT
LOW	…ox/mdcode/tests/libts/semantic/kc_custom_types.test.ts	1	// The custom aspect templates are APPEND-ONLY, and nothing else enforces it.	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/bigquery.test.ts	1	// Behavior specification for the BigQuery property-graph generator	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/bigquery.test.ts	801	expect(ddl).not.toContain('MEASURE(COUNT(*))');	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/skills.test.ts	1	// Behavior specification for generating an Agent Skill from a model.	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/skills.test.ts	661	// -- Golden corpus: the whole generated skill, reviewable as files. --	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/skills.test.ts	761	//	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/skills.test.ts	781	{	COMMENT
LOW	…lbox/mdcode/tests/libts/semantic/transpile.e2e.test.ts	1	// End-to-end golden test for the transpile pass: file -> IR -> transpile ->	COMMENT
LOW	…lbox/mdcode/tests/libts/semantic/osi_converter.test.ts	1	// Behavior specification for the OSI converter's serialize direction	COMMENT
LOW	…lbox/mdcode/tests/libts/semantic/osi_converter.test.ts	621	// The round-trip tests above prove IR-level stability but never pin the exact	COMMENT
LOW	…ode/tests/libts/semantic/knowledge_catalog.e2e.test.ts	1	// End-to-end tests for the Knowledge Catalog destination: real-shaped fixtures	COMMENT
LOW	…olbox/mdcode/tests/libts/semantic/bigquery.e2e.test.ts	1	// End-to-end tests for the BigQuery destination: real-shaped fixtures run the	COMMENT
LOW	…olbox/mdcode/tests/libts/semantic/bigquery.e2e.test.ts	421	//	COMMENT
LOW	…/mdcode/tests/libts/semantic/knowledge_catalog.test.ts	1	// Behavior specification for the Knowledge Catalog emitter	COMMENT
LOW	…olbox/mdcode/tests/libts/semantic/kc_converter.test.ts	1	// Behavior specification for the KC converter's read direction	COMMENT
LOW	…olbox/mdcode/tests/libts/semantic/kc_converter.test.ts	1141	// that wrote one (a default push omits it, leaving nothing to check).	COMMENT
LOW	…olbox/mdcode/tests/libts/semantic/kc_converter.test.ts	1201	}	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/spanner.test.ts	1	// Behavior specification for the Spanner property-graph generator	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/pull_kc.test.ts	1	// Tests for the semantic-model Knowledge Catalog pull leg	COMMENT
LOW	…box/mdcode/tests/libts/semantic/action_affects.test.ts	1	// Behavior specification for an action's `affects`: the concepts a call	COMMENT
LOW	toolbox/mdcode/tests/libts/semantic/push_plan.test.ts	1	// Tests the semantic-model push/pull/profiles planning and CLI guards	COMMENT
LOW	…lbox/mdcode/tests/libts/semantic/owl_converter.test.ts	1	// Behavior specification for the OWL -> OSI converter	COMMENT
LOW	toolbox/mdcode/tests/tool/store_agreement.test.ts	1	// Push and the commands that read a model's store agree on a model's	COMMENT
LOW	toolbox/mdcode/tests/tool/store_agreement.test.ts	21	// model whose deployment breaks the rules of its engine, or whose model file	COMMENT
LOW	toolbox/mdcode/src/libts/gcp/spanner.ts	121	const parent = `projects/${project}/instances/${instance}/databases/${	COMMENT
LOW	toolbox/mdcode/src/libts/gcp/spanner.ts	141	// (with Spanner's own "Did you mean ...?"), a bad assignment type and a	COMMENT
LOW	toolbox/mdcode/src/libts/gcp/bigquery.ts	101	// referenced tables. With `dryRun` the statement is validated -- name	COMMENT
LOW	toolbox/mdcode/src/libts/semantic/sql_parser.ts	1	// The SQL engine kcmd reads and translates expressions with: the	COMMENT
LOW	toolbox/mdcode/src/libts/semantic/binding.ts	1	// Which physical table an entity is bound to.	COMMENT
LOW	toolbox/mdcode/src/libts/semantic/binding.ts	21	// chosen here, because the dialect is a property of the store the statement is	COMMENT
LOW	toolbox/mdcode/src/libts/semantic/source_entries.ts	1	// Checks that Knowledge Catalog has an entry for every table a push reads	COMMENT
LOW	toolbox/mdcode/src/libts/semantic/yaml_options.ts	1	import * as yaml from 'yaml';	COMMENT
156 more matches not shown…

Hyper-Verbose Identifiers183 hits · 186 pts

Severity	File	Line	Snippet	Context
LOW	samples/governance-agent/tests/test_noise_reduction.py	6	def test_filtering_refinement():	CODE
LOW	…es/governance-agent/tests/test_fallback_propagation.py	29	def test_prioritized_propagation_document_wins(self, mock_doc_plugin_cls):	CODE
LOW	…es/governance-agent/tests/test_fallback_propagation.py	87	def test_prioritized_propagation_lineage_fallback(	CODE
LOW	…es/governance-agent/tests/test_fallback_propagation.py	139	def test_prioritized_propagation_llm_fallback(self, mock_doc_plugin_cls):	CODE
LOW	samples/governance-agent/tests/test_selective_ui.py	28	def test_apply_propagation_selective(self, mock_set_token, mock_get_plugin):	CODE
LOW	samples/governance-agent/tests/test_selective_ui.py	64	def test_apply_glossary_selective(	CODE
LOW	samples/governance-agent/tests/test_selective_ui.py	99	def test_apply_propagation_no_selection(self):	CODE
LOW⚡	…ples/governance-agent/tests/test_project_resolution.py	24	def test_env_var_takes_precedence(monkeypatch):	CODE
LOW⚡	…ples/governance-agent/tests/test_project_resolution.py	31	def test_falls_back_to_adc_project(monkeypatch):	CODE
LOW⚡	…ples/governance-agent/tests/test_project_resolution.py	38	def test_returns_none_when_adc_has_no_project(monkeypatch, adc_project):	CODE
LOW⚡	…ples/governance-agent/tests/test_project_resolution.py	44	def test_returns_none_when_adc_is_unavailable(monkeypatch):	CODE
LOW⚡	…ples/governance-agent/tests/test_project_resolution.py	50	def test_cli_errors_without_a_project(monkeypatch, capsys):	CODE
LOW	…ples/governance-agent/tests/test_project_resolution.py	63	def test_cli_passes_project_to_plugins(	CODE
LOW	samples/governance-agent/tests/test_dq_propagation.py	19	def test_fetch_dq_summary_auto_dq(self, mock_client_class, mock_creds):	CODE
LOW	samples/governance-agent/tests/test_dq_propagation.py	55	def test_aggregation_conservative_min(self):	CODE
LOW	samples/governance-agent/tests/test_dq_propagation.py	63	def test_detect_remediation_distinct(self, mock_sql):	CODE
LOW	samples/governance-agent/tests/test_sql_enrichment.py	19	def test_sql_logic_extraction(self):	CODE
LOW	samples/governance-agent/tests/test_sql_enrichment.py	46	def test_description_enrichment_with_sql(self):	STRING
LOW	samples/governance-agent/tests/test_sql_enrichment.py	59	def test_plugin_preview_with_sql(self):	STRING
LOW	samples/governance-agent/tests/test_auth_bypass.py	39	def test_get_credentials_blocks_adc_fallback_when_token_is_none(self, mock_adc):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	47	def test_get_credentials_blocks_adc_when_token_is_empty_or_invalid_dict(self, mock_adc):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	58	def test_get_token_from_session_rejects_empty_session(self, mock_adc):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	69	def test_get_token_from_session_rejects_expired_token_without_refresh(self, mock_adc):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	87	def test_full_taint_chain_scan_dataset_blocks_unauthenticated_caller(	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	107	def test_lineage_plugin_blocks_adc_when_oauth_token_none(	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	121	def test_apply_policy_tag_recommendations_blocks_unauthenticated_caller(	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	149	def test_get_credentials_accepts_valid_dict_and_str_tokens(self, mock_adc):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	186	def test_fresh_thread_without_token_cannot_use_adc(self, mock_adc):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	202	def test_bypass_oauth_still_allows_adc(self, mock_adc):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	292	def test_missing_oauth_config_no_longer_implies_adc_mode(self):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	298	def test_check_auth_status_shows_app_only_for_session_or_bypass(self):	CODE
LOW⚡	samples/governance-agent/tests/test_auth_bypass.py	312	def test_server_refuses_to_start_without_oauth_or_explicit_bypass(self):	CODE
LOW⚡	samples/governance-agent/tests/test_auth_bypass.py	319	def test_server_enables_process_wide_enforcement(self):	CODE
LOW⚡	samples/governance-agent/tests/test_auth_bypass.py	325	def test_api_and_upload_endpoints_require_session_but_login_page_works(self):	CODE
LOW⚡	samples/governance-agent/tests/test_auth_bypass.py	372	def test_live_request_session_is_gradio_obj_not_dict(self):	CODE
LOW⚡	samples/governance-agent/tests/test_auth_bypass.py	379	def test_live_request_state_token(self):	CODE
LOW⚡	samples/governance-agent/tests/test_auth_bypass.py	383	def test_pickled_request_uses_preserved_state(self):	CODE
LOW	samples/governance-agent/tests/test_auth_bypass.py	395	def test_requests_without_token_are_rejected(self, mock_adc):	CODE
LOW	…mples/governance-agent/tests/test_policy_tag_plugin.py	28	def test_scan_for_policy_tags(self):	CODE
LOW	…mples/governance-agent/tests/test_policy_tag_plugin.py	54	def test_preview_policy_tag_propagation_straight_pull(self):	CODE
LOW	…mples/governance-agent/tests/test_policy_tag_plugin.py	118	def test_preview_policy_tag_propagation_transformed(self):	CODE
LOW	…mples/governance-agent/tests/test_policy_tag_plugin.py	202	def test_apply_policy_tags_with_readers(self):	CODE
LOW	…mples/governance-agent/tests/test_policy_tag_plugin.py	235	def test_get_policy_tag_readers(self):	CODE
LOW	…mples/governance-agent/tests/test_policy_tag_plugin.py	246	def test_preview_policy_tag_propagation_skips_existing(self):	CODE
LOW	…mples/governance-agent/tests/test_policy_tag_plugin.py	289	def test_get_policy_tag_reader_count(self):	CODE
LOW	…mples/governance-agent/tests/test_policy_tag_plugin.py	303	def test_get_policy_tag_data_policy_count(self):	CODE
LOW	…nance-agent/tests/test_glossary_propagation_lineage.py	42	def test_strict_lineage_propagation_threshold(self):	CODE
LOW	…nance-agent/tests/test_glossary_propagation_lineage.py	96	def test_direct_link_propagation(self):	CODE
LOW	samples/governance-agent/tests/test_glossary_logic.py	53	def test_recommendation_ranking():	CODE
LOW	samples/governance-agent/tests/test_lineage_logic.py	15	def test_get_column_lineage_heuristic(self, mock_auth, mock_post):	CODE
LOW	…s/governance-agent/tests/test_native_glossary_links.py	25	def test_apply_terms_creates_links(self, mock_creds, mock_client_cls):	CODE
LOW	…s/governance-agent/tests/test_native_glossary_links.py	63	def test_resolve_term_entry_name_fallback(	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	235	def update_doc_selection_badge(docs_state, selected_labels, context_mode, current_fallback_val=False):	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	285	def handle_refresh_lineage_cache(request: gr.Request = None):	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	940	def apply_propagation_improved(	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	995	def get_glossary_recommendations(	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1072	def apply_glossary_selections(	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1134	def get_policy_tag_recommendations(	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1175	def apply_policy_tag_recommendations(	STRING
LOW	…etadata_propagation/agent/plugins/similarity_engine.py	171	def calculate_lexical_similarity(	CODE
123 more matches not shown…

Excessive Try-Catch Wrapping152 hits · 143 pts

Severity	File	Line	Snippet	Context
MEDIUM	…s/governance-agent/metadata_propagation/steward_cli.py	48	print(f"Error: Could not import Plugins. {e}")	CODE
MEDIUM	…s/governance-agent/metadata_propagation/steward_cli.py	440	print("Error: Invalid --datastore-id format.")	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	92	except Exception:	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	193	except Exception:	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	456	except Exception as e:	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	2170	except Exception as e:	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	931	except Exception as e:	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	976	except Exception as e:	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1067	except Exception as e:	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1115	except Exception as e:	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1170	except Exception as e:	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1216	except Exception as e:	STRING
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1320	except Exception as e:	STRING
MEDIUM	…ce-agent/metadata_propagation/agent/skill_discovery.py	8	print(f"Error: Skills directory '{skills_dir}' not found.")	CODE
LOW	…-agent/metadata_propagation/agent/plugins/dq_plugin.py	60	except Exception as e:	STRING
LOW	…-agent/metadata_propagation/agent/plugins/dq_plugin.py	102	except Exception as e:	STRING
LOW	…-agent/metadata_propagation/agent/plugins/dq_plugin.py	137	except Exception as e:	STRING
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	56	except Exception as e:	CODE
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	175	except Exception as e:	CODE
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	196	except Exception:	CODE
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	275	except Exception as e:	CODE
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	279	except Exception as e:	CODE
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	419	except Exception as e:	CODE
LOW	…t/metadata_propagation/agent/plugins/lineage_plugin.py	115	except Exception as e:	CODE
LOW	…t/metadata_propagation/agent/plugins/lineage_plugin.py	162	except Exception as e:	CODE
LOW	…t/metadata_propagation/agent/plugins/lineage_plugin.py	209	except Exception as e:	CODE
LOW	…t/metadata_propagation/agent/plugins/lineage_plugin.py	379	except Exception as e:	CODE
LOW	…ce-agent/metadata_propagation/agent/plugins/context.py	123	except Exception as e:	CODE
LOW	…ce-agent/metadata_propagation/agent/plugins/context.py	146	except Exception as e:	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	364	except Exception:	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	369	except Exception as e:	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	402	except Exception as e:	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	470	except Exception as e:	STRING
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	525	except Exception as e:	STRING
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	575	except Exception as e:	STRING
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	623	except Exception as e:	STRING
LOW	…/metadata_propagation/agent/plugins/vertex_embedder.py	45	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/vertex_embedder.py	77	except Exception as e:	CODE
LOW⚡	…/metadata_propagation/agent/plugins/glossary_plugin.py	1030	except Exception as e:	CODE
LOW⚡	…/metadata_propagation/agent/plugins/glossary_plugin.py	1039	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	83	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	105	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	128	except Exception:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	157	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	179	except Exception:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	187	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	205	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	238	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	314	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	335	except Exception:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	444	except Exception as ex:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	630	except Exception:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	659	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	828	except Exception:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	840	except Exception:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	851	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	931	except Exception as e:	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	1092	except Exception as e:	CODE
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	121	except Exception as e:	CODE
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	147	except Exception as e:	CODE
92 more matches not shown…

Empty Error Handlers14 hits · 70 pts

Severity	File	Line	Snippet	Context
HIGH	…governance-agent/metadata_propagation/ui/gradio_app.py	92	except Exception:	CODE
HIGH	…governance-agent/metadata_propagation/ui/gradio_app.py	193	except Exception:	CODE
HIGH	…governance-agent/metadata_propagation/ui/gradio_app.py	357	except (AttributeError, AssertionError, KeyError):	CODE
HIGH	…adata_propagation/agent/plugins/document_rag_engine.py	196	except Exception:	CODE
HIGH	…/metadata_propagation/agent/plugins/glossary_plugin.py	335	except Exception:	CODE
HIGH	…/metadata_propagation/agent/plugins/glossary_plugin.py	828	except Exception:	CODE
HIGH	…/metadata_propagation/agent/plugins/glossary_plugin.py	840	except Exception:	CODE
HIGH	…/metadata_propagation/agent/plugins/glossary_plugin.py	179	except Exception:	CODE
HIGH	…/metadata_propagation/agent/plugins/glossary_plugin.py	630	except Exception:	CODE
HIGH	…ta_propagation/dataplex_integration/export_metadata.py	211	except Exception:	CODE
HIGH	…es/policy-as-code-agent/policy_as_code_agent/memory.py	318	except Exception:	CODE
HIGH	…es/policy-as-code-agent/policy_as_code_agent/memory.py	293	except Exception:	CODE
HIGH	…y-as-code-agent/policy_as_code_agent/utils/dataplex.py	16	except (ImportError, google.auth.exceptions.DefaultCredentialsError):	CODE
HIGH	…les/enrichment/src/enrichment/documentation/sources.py	63	except Exception as e:	CODE

Deep Nesting47 hits · 43 pts

Severity	File	Line	Context
LOW	…s/governance-agent/metadata_propagation/steward_cli.py	52	CODE
LOW	…s/governance-agent/metadata_propagation/steward_cli.py	114	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	144	CODE
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	1235	CODE
LOW	…ce-agent/metadata_propagation/agent/skill_discovery.py	5	CODE
LOW	…-agent/metadata_propagation/agent/plugins/dq_plugin.py	141	CODE
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	167	CODE
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	283	CODE
LOW	…t/metadata_propagation/agent/plugins/lineage_plugin.py	123	CODE
LOW	…t/metadata_propagation/agent/plugins/lineage_plugin.py	342	CODE
LOW	…ce-agent/metadata_propagation/agent/plugins/context.py	65	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	50	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	126	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	203	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	253	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	303	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	64	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	341	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	487	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	941	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	567	CODE
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	152	CODE
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	406	CODE
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	471	CODE
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	511	CODE
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	201	CODE
LOW	…ropagation/dataplex_integration/lineage_propagation.py	81	CODE
LOW	…ropagation/dataplex_integration/lineage_propagation.py	354	CODE
LOW	…ropagation/dataplex_integration/lineage_propagation.py	431	CODE
LOW	…ropagation/dataplex_integration/lineage_propagation.py	592	CODE
LOW	…propagation/dataplex_integration/propagate_metadata.py	116	CODE
LOW	…propagation/dataplex_integration/propagate_metadata.py	162	CODE
LOW	…propagation/dataplex_integration/propagate_metadata.py	290	CODE
LOW	…olicy-as-code-agent/policy_as_code_agent/simulation.py	160	CODE
LOW	…es/policy-as-code-agent/policy_as_code_agent/memory.py	642	CODE
LOW	…les/policy-as-code-agent/policy_as_code_agent/agent.py	135	CODE
LOW	…les/policy-as-code-agent/policy_as_code_agent/agent.py	366	CODE
LOW	…les/policy-as-code-agent/policy_as_code_agent/agent.py	440	CODE
LOW	…les/policy-as-code-agent/policy_as_code_agent/agent.py	539	CODE
LOW	…les/policy-as-code-agent/policy_as_code_agent/agent.py	638	CODE
LOW	…policy-as-code-agent/policy_as_code_agent/utils/llm.py	40	CODE
LOW	…policy-as-code-agent/policy_as_code_agent/utils/llm.py	58	CODE
LOW	…policy-as-code-agent/policy_as_code_agent/utils/llm.py	77	CODE
LOW	samples/enrichment/src/tools/fileskb/main.py	62	CODE
LOW	…mples/enrichment/src/enrichment/documentation/agent.py	45	CODE
LOW	okf/src/reference_agent/runner.py	82	CODE
LOW	okf/src/reference_agent/bundle/index.py	49	CODE

Unused Imports38 hits · 38 pts

Severity	File	Line	Context
LOW	…es/governance-agent/tests/test_fallback_propagation.py	3	CODE
LOW	…es/governance-agent/tests/test_fallback_propagation.py	6	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	305	CODE
LOW	samples/discovery/tools.py	4	CODE
LOW	samples/enrichment/src/enrichment/enrich.py	8	CODE
LOW	…mples/enrichment/src/enrichment/documentation/agent.py	10	CODE
LOW	samples/enrichment/src/enrichment/metadata/snapshot.py	6	CODE
LOW	okf/tests/test_viewer.py	1	CODE
LOW	okf/tests/test_web_tools.py	1	CODE
LOW	okf/tests/test_web_fetcher.py	1	CODE
LOW	okf/tests/test_index.py	1	CODE
LOW	okf/tests/test_bigquery_source.py	1	CODE
LOW	okf/tests/test_document.py	1	CODE
LOW	okf/tests/test_bundle_tools.py	1	CODE
LOW	okf/bundles/acme_retail/attesters/sql_equality.py	20	CODE
LOW	okf/src/reference_agent/runner.py	1	CODE
LOW	okf/src/reference_agent/cli.py	1	CODE
LOW	okf/src/reference_agent/agent.py	1	CODE
LOW	okf/src/reference_agent/tools/web_tools.py	1	CODE
LOW	okf/src/reference_agent/tools/bundle_tools.py	1	CODE
LOW	okf/src/reference_agent/tools/context.py	1	CODE
LOW	okf/src/reference_agent/tools/source_tools.py	1	CODE
LOW	okf/src/reference_agent/web/fetcher.py	1	CODE
LOW	okf/src/reference_agent/bundle/index.py	1	CODE
LOW	okf/src/reference_agent/bundle/paths.py	1	CODE
LOW	okf/src/reference_agent/bundle/__init__.py	1	CODE
LOW	okf/src/reference_agent/bundle/__init__.py	1	CODE
LOW	okf/src/reference_agent/bundle/__init__.py	2	CODE
LOW	okf/src/reference_agent/bundle/__init__.py	3	CODE
LOW	okf/src/reference_agent/bundle/__init__.py	3	CODE
LOW	okf/src/reference_agent/bundle/synthesizer.py	1	CODE
LOW	okf/src/reference_agent/bundle/document.py	1	CODE
LOW	okf/src/reference_agent/viewer/__init__.py	1	CODE
LOW	okf/src/reference_agent/viewer/generator.py	1	CODE
LOW	okf/src/reference_agent/sources/bigquery.py	1	CODE
LOW	okf/src/reference_agent/sources/__init__.py	1	CODE
LOW	okf/src/reference_agent/sources/__init__.py	1	CODE
LOW	okf/src/reference_agent/sources/base.py	1	CODE

Modern AI Meta-Vocabulary10 hits · 30 pts

Severity	File	Line	Snippet	Context
MEDIUM	samples/governance-agent/README.md	89	# Preview and apply description propagation using Document Context (RAG)	COMMENT
MEDIUM	…s/governance-agent/metadata_propagation/steward_cli.py	348	# Clear RAG Cache command	COMMENT
MEDIUM	…t/metadata_propagation/agent/plugins/lineage_plugin.py	265	# Pre-embed column queries in batch for RAG mode to avoid N sequential size 1 embedding calls	COMMENT
MEDIUM	…/metadata_propagation/agent/plugins/vertex_embedder.py	30	# Use thread-local storage to avoid concurrent mutation of SSL context in multi-threaded RAG mode	COMMENT
MEDIUM	…/metadata_propagation/agent/plugins/glossary_plugin.py	555	# Pre-embed column queries in batch for RAG mode to avoid N sequential size 1 embedding calls	COMMENT
MEDIUM	…etadata_propagation/agent/plugins/policy_tag_plugin.py	190	# Pre-embed column queries in batch for RAG mode to avoid N sequential size 1 embedding calls	COMMENT
MEDIUM	toolbox/mdcode/src/libts/semantic/osi_converter.ts	9	// TODO(#278): fold the OSI READ direction in and drop the scaffold. Once	COMMENT
MEDIUM	toolbox/mdcode/src/libts/semantic/osi_converter.ts	9	// TODO(#278): fold the OSI READ direction in and drop the scaffold. Once	COMMENT
MEDIUM	toolbox/mdcode/src/libts/semantic/kc_converter.ts	11	// TODO(#278): fold the KC WRITE direction in and drop the scaffold. Once	COMMENT
MEDIUM	toolbox/mdcode/src/libts/semantic/kc_converter.ts	11	// TODO(#278): fold the KC WRITE direction in and drop the scaffold. Once	COMMENT

Hallucination Indicators3 hits · 30 pts

Severity	File	Line	Snippet	Context
CRITICAL	toolbox/mdcode/tests/tool/two_phase/tables.test.ts	98	check: r => expect(r.fake.query.mock.calls.map(c => c[2] ?? null))	CODE
CRITICAL	toolbox/mdcode/tests/tool/two_phase/tables.test.ts	108	check: r => expect(r.fake.query.mock.calls.map(c => c[2] ?? null))	CODE
CRITICAL	toolbox/mdcode/tests/tool/two_phase/harness.ts	356	expect(r.fake.query.mock.calls.filter(c => c[3] !== true)).toEqual([]);	CODE

Modern Structural Boilerplate20 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	…governance-agent/metadata_propagation/ui/gradio_app.py	62	logger = logging.getLogger(__name__)	CODE
LOW	…-agent/metadata_propagation/agent/plugins/dq_plugin.py	10	logger = logging.getLogger(__name__)	CODE
LOW	…adata_propagation/agent/plugins/document_rag_engine.py	13	logger = logging.getLogger(__name__)	CODE
LOW	…etadata_propagation/agent/plugins/similarity_engine.py	7	logger = logging.getLogger(__name__)	CODE
LOW	…t/metadata_propagation/agent/plugins/lineage_plugin.py	25	logger = logging.getLogger(__name__)	CODE
LOW	…ce-agent/metadata_propagation/agent/plugins/context.py	9	logger = logging.getLogger(__name__)	CODE
LOW	…ta_propagation/agent/plugins/doc_description_plugin.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…/metadata_propagation/agent/plugins/vertex_embedder.py	9	logger = logging.getLogger(__name__)	CODE
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	29	logger = logging.getLogger(__name__)	CODE
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	23	logger = logging.getLogger(__name__)	CODE
LOW	…ropagation/dataplex_integration/lineage_propagation.py	14	logger = logging.getLogger(__name__)	CODE
LOW	…ropagation/dataplex_integration/glossary_management.py	6	logger = logging.getLogger(__name__)	CODE
LOW	…ata_propagation/dataplex_integration/dq_propagation.py	13	logger = logging.getLogger(__name__)	CODE
LOW⚡	…propagation/dataplex_integration/propagate_metadata.py	19	logger = logging.getLogger(__name__)	CODE
LOW	…_propagation/data_generation/generate_glossary_data.py	12	logger = logging.getLogger(__name__)	CODE
LOW	okf/tests/test_bundle_tools.py	23	def _set_ctx(tmp_path: Path) -> None:	CODE
LOW	okf/src/reference_agent/tools/context.py	32	def set_context(source: Source, bundle_root: Path, model: str = "") -> None:	CODE
LOW	okf/src/reference_agent/bundle/__init__.py	5	__all__ = [	CODE
LOW	okf/src/reference_agent/viewer/__init__.py	3	__all__ = ["generate_visualization"]	CODE
LOW	okf/src/reference_agent/sources/__init__.py	3	__all__ = ["ConceptRef", "Source"]	CODE

AI Slop Vocabulary7 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	…es/policy-as-code-agent/policy_as_code_agent/memory.py	871	# Query only by timestamp to utilize the default single-field index.	COMMENT
MEDIUM	…policy-as-code-agent/policy_as_code_agent/utils/llm.py	85	# To make the schema more comprehensive, we merge schemas of all items	COMMENT
MEDIUM	okf/bundles/ga4/viz.html	229	window.BUNDLE = {"nodes": [{"data": {"id": "datasets/ga4_obfuscated_sample_ecommerce", "label": "GA4 Obfuscated Sample E	CODE
MEDIUM	okf/bundles/ga4/viz.html	229	window.BUNDLE = {"nodes": [{"data": {"id": "datasets/ga4_obfuscated_sample_ecommerce", "label": "GA4 Obfuscated Sample E	CODE
MEDIUM	okf/bundles/stackoverflow/viz.html	229	window.BUNDLE = {"nodes": [{"data": {"id": "datasets/stackoverflow", "label": "Stack Overflow Public Dataset", "type": "	CODE
MEDIUM	toolbox/mdcode/src/libts/semantic/kc_converter.ts	763	// `/aspectTypes/<type>` suffix (robust to whichever system-type	COMMENT
MEDIUM	…lbox/mdcode/src/libts/semantic/converters/owl/parse.ts	554	// robust to a document that also types a handful of foreign-namespace terms	COMMENT

Structural Annotation Overuse9 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	samples/governance-agent/OAUTH_SETUP_GUIDE.md	19	### Step 1: Configure the OAuth Consent Screen	COMMENT
LOW	samples/governance-agent/OAUTH_SETUP_GUIDE.md	35	### Step 2: Create OAuth 2.0 Client ID	COMMENT
LOW	samples/governance-agent/OAUTH_SETUP_GUIDE.md	47	### Step 3: Configure Environment Variables	COMMENT
LOW	samples/discovery/SKILL.md	42	## Step 1: Understand the query	COMMENT
LOW	samples/discovery/SKILL.md	49	## Step 2: Semantic Decomposition & Generating Variations	COMMENT
LOW	samples/discovery/SKILL.md	60	## Step 3: Call Knowledge Catalog Search Tools (Batching)	COMMENT
LOW	samples/discovery/SKILL.md	68	## Step 3: Call Knowledge Catalog Search	COMMENT
LOW	samples/discovery/SKILL.md	79	## Step 4: Merge Search Results	COMMENT
LOW	samples/discovery/SKILL.md	84	## Step 5: Identify the best Results	COMMENT

Fake / Example Data9 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	samples/governance-agent/tests/test_selective_ui.py	23	"google_token": {"access_token": "fake-token"}	CODE
LOW⚡	samples/enrichment/sample/docs/lipsum.md	1	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq	CODE
LOW⚡	samples/enrichment/sample/docs/lipsum.md	1	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq	CODE
LOW⚡	samples/enrichment/sample/docs/lipsum.md	3	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq	CODE
LOW⚡	samples/enrichment/sample/docs/lipsum.md	3	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliq	CODE
LOW⚡	samples/enrichment/sample/docs/lipsum.md	5	Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint oc	CODE
LOW⚡	samples/enrichment/sample/docs/lipsum.md	5	Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint oc	CODE
LOW	okf/bundles/stackoverflow/viz.html	229	window.BUNDLE = {"nodes": [{"data": {"id": "datasets/stackoverflow", "label": "Stack Overflow Public Dataset", "type": "	CODE
LOW	toolbox/mdcode/demo/kb/setup.ts	36	content: '# Placeholder Content\n\nLorem ipsum dolor met',	CODE

Self-Referential Comments4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/metadata_propagation/agent/plugins/glossary_plugin.py	998	# Create the EntryLink	COMMENT
MEDIUM	samples/policy-as-code-agent/tests/unit/test_llm.py	10	# Create a list where the second item is "larger" (more fields) than the first	COMMENT
MEDIUM	…de-agent/tests/integration/test_conversational_flow.py	52	# Create a mapping of original tool names to mock functions	COMMENT
MEDIUM	…/skill/catalog/EntryGroups/commerce_demo/commerce.yaml	16	# This file is the same bytes under both, which is the claim the pair exists to	COMMENT

Redundant / Tautological Comments6 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	95	# Check if cache has not been warmed in this session yet	COMMENT
LOW	…/metadata_propagation/agent/plugins/glossary_plugin.py	264	# Check if we have a valid cached embedding with a matching hash	COMMENT
LOW	…etadata_propagation/agent/plugins/policy_tag_plugin.py	262	# Check if the target field already has this tag	COMMENT
LOW	…propagation/data_generation/attach_test_policy_tags.py	29	# Check if already exists (simplified check by list)	COMMENT
LOW	…es/policy-as-code-agent/policy_as_code_agent/memory.py	699	# Check if any violated resource string contains the search term	COMMENT
LOW	…policy-as-code-agent/policy_as_code_agent/utils/llm.py	43	# Check if the content is JSONL or JSON	COMMENT

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…/tests/libts/semantic/deploy_knowledge_catalog.test.ts	3604	// The listing spells the project as requested, so it gives no number.	COMMENT

Decorative Section Separators1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	…governance-agent/metadata_propagation/ui/gradio_app.py	36	# ---------------------------	COMMENT

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…mples/enrichment/src/enrichment/documentation/agent.py	45	async def run_task(runner: InMemoryRunner, prompt: str):	CODE

AI Structural Patterns1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	okf/src/reference_agent/runner.py	161		CODE

GoogleCloudPlatform/knowledge-catalog

Open-Source Code Quality, Security and Technical Debt Review