0.8

Adjusted Signal

0.8

Raw Pattern Score

100%

Time Factor

2026-10-19

Last Push

3.7K

Stars

TypeScript

Language

89.5K

Lines of Code

711

Files

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 48 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.1/100 · LOW

Are imports declared and package/API names verified? 4 finding(s).

Agent Over-Engineering Ratio 1.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 35 finding(s).

PR Review Velocity Impact 4.0/100 · LOW

Which changes need focused human review? 52 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 4MEDIUM 1LOW 47

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 52 distinct pattern matches across 4 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers35 hits · 34 pts

Severity	File	Line	Snippet	Context
LOW	src/onebot11/transform/message/incoming.ts	8	export async function transformIncomingSegments(ctx: Context, message: RawMessage)	CODE
LOW	src/onebot11/transform/message/outgoing.ts	22	export async function transformOutgoingSegments(	CODE
LOW	src/ntqqapi/dispatcher.ts	156	async function handleGroupMemberDecrease(ctx: Context, msg: InferProtoModel<typeof Msg.Message>) {	CODE
LOW	src/ntqqapi/dispatcher.ts	186	async function handleGroupMemberIncrease(ctx: Context, msg: InferProtoModel<typeof Msg.Message>) {	CODE
LOW	src/milky/transform/event.ts	11	export async function transformPrivateMessageCreated(	CODE
LOW	src/milky/transform/event.ts	32	export async function transformGroupMessageCreated(	CODE
LOW	src/milky/transform/event.ts	54	export async function transformTempMessageCreated(	CODE
LOW	src/milky/transform/event.ts	72	export async function transformTempMessageRecall(	CODE
LOW	src/milky/transform/event.ts	91	export async function transformFriendMessageRecall(	CODE
LOW	src/milky/transform/event.ts	110	export async function transformGroupMessageRecall(	CODE
LOW	src/milky/transform/event.ts	132	export async function transformFriendRequestEvent(	CODE
LOW	src/milky/transform/event.ts	149	export async function transformGroupJoinRequestEvent(	CODE
LOW	src/milky/transform/event.ts	167	export async function transformGroupInvitedJoinRequestEvent(	CODE
LOW	src/milky/transform/event.ts	184	export async function transformGroupInvitationEvent(	CODE
LOW	src/milky/transform/event.ts	200	export async function transformGroupMemberIncreaseEvent(	CODE
LOW	src/milky/transform/event.ts	217	export async function transformGroupMemberDecreaseEvent(	CODE
LOW	src/milky/transform/event.ts	233	export async function transformFriendNudgeEvent(	CODE
LOW	src/milky/transform/event.ts	271	export async function transformGroupNameChangeEvent(	CODE
LOW	src/milky/transform/event.ts	304	export async function transformGroupWholeMuteEvent(	CODE
LOW	src/milky/transform/event.ts	320	export async function transformGroupAdminChangeEvent(	CODE
LOW	src/milky/transform/event.ts	337	export async function transformPeerPinChangeEvent(	CODE
LOW	src/milky/transform/event.ts	353	export async function transformGroupMessageReactionEvent(	CODE
LOW	src/milky/transform/event.ts	372	export async function transformGroupEssenceMessageChangeEvent(	CODE
LOW	src/milky/transform/event.ts	403	export async function transformGroupDisbandEvent(	CODE
LOW	src/milky/transform/event.ts	418	export async function transformPrivateMessageEvent(	CODE
LOW	src/milky/transform/event.ts	446	export async function transformGroupMessageEvent(	CODE
LOW	src/milky/transform/message/incoming.ts	8	export async function transformIncomingPrivateMessage(	CODE
LOW	src/milky/transform/message/incoming.ts	24	export async function transformIncomingGroupMessage(	CODE
LOW	src/milky/transform/message/incoming.ts	42	export async function transformIncomingTempMessage(	CODE
LOW	src/milky/transform/message/incoming.ts	58	export async function transformIncomingSegments(ctx: Context, message: RawMessage): Promise<IncomingSegment[]> {	CODE
LOW	src/milky/transform/message/incoming.ts	244	export async function transformIncomingForwardedMessage(ctx: Context, message: RawMessage): Promise<IncomingForwardedMes	CODE
LOW	src/webui/FE/utils/messageDb.ts	142	export async function updateCachedMessageEmojiReaction(	CODE
LOW	src/webui/FE/utils/messageDb.ts	201	export async function markCachedMessageAsRecalled(	CODE
LOW	…ebui/FE/components/WebQQ/contact/NotificationPanel.tsx	21	function getGroupNotifyDescription(item: GroupNotifyItem): string {	CODE
LOW	src/main/qqProtocol/direct-lib/ssoReserved.ts	164	export function buildReservedFieldForVariant(	CODE

Magic Placeholder Names4 hits · 20 pts

Severity	File	Line	Snippet	Context
HIGH	test/onebot11-api-test/README.md	33	"apiKey": "your-api-key-1",	CODE
HIGH	test/onebot11-api-test/README.md	39	"apiKey": "your-api-key-2",	CODE
HIGH	test/onebot11-api-test/config/test.config.example.json	5	"apiKey": "your-api-key-1",	CODE
HIGH	test/onebot11-api-test/config/test.config.example.json	11	"apiKey": "your-api-key-2",	CODE

Over-Commented Block12 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	…ilky-api-test/tests/group/group-member-actions.test.ts	101	// 破坏性，跳过：	COMMENT
LOW	test/onebot11-api-test/tests/user/friend-poke.test.ts	61	// 需在 QQ 客户端 2 分钟内手动取消，留 skip + 文档。	COMMENT
LOW	.github/workflows/codeql.yml	1	# For most projects, this workflow file will not need changing; you simply need	COMMENT
LOW	.github/workflows/codeql.yml	61	- name: Initialize CodeQL	COMMENT
LOW	src/ntqqapi/api/msg.ts	101	const tBuildDone = Date.now()	COMMENT
LOW	src/ntqqapi/helper/highway.ts	221	}	COMMENT
LOW	src/common/types.ts	41	connect: (WsConnectConfig \| WsReverseConnectConfig \| HttpConnectConfig \| HttpPostConnectConfig)[]	COMMENT
LOW	src/common/types.ts	61	// enableWsReverse?: boolean	COMMENT
LOW	src/main/qqProtocol/direct-lib/signTokenAcquire.ts	1	// DEPRECATED: 12B sign-token 获取已整体下沉到 SignProxy 的 acquireSignToken (native 一把跑完	COMMENT
LOW	src/main/qqProtocol/direct-lib/telemetry.ts	181	export function build9067202(): Buffer {	COMMENT
LOW	src/main/qqProtocol/direct-lib/cmd.ts	1	// 出站 SSO cmd 常量注册表 + per-platform 签名白名单 (单一真源)。	COMMENT
LOW	src/main/qqProtocol/direct-lib/cmd.ts	841	]	COMMENT

Slop Phrases1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/codeql.yml	54	# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how	COMMENT

LLOneBot/LuckyLilliaBot

Open-Source Code Quality, Security and Technical Debt Review