0.8

Adjusted Signal

0.8

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

11.9K

Stars

PHP

Language

549.2K

Lines of Code

1.8K

Files

383

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 347 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 24 finding(s).

Agent Over-Engineering Ratio 2.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 303 finding(s).

PR Review Velocity Impact 3.8/100 · LOW

Which changes need focused human review? 383 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 0MEDIUM 16LOW 366

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 383 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers291 hits · 273 pts

Severity	File	Line	Snippet	Context
LOW	app/Core/Application.php	67	protected function registerBaseServiceProviders()	CODE
LOW	app/Core/UI/Template.php	615	public function displayInlineNotification(): string	CODE
LOW	app/Core/UI/Template.php	1009	public function patchDownloadUrlToFilenameOrAwsUrl(string $textHtml): string	CODE
LOW	app/Core/UI/ViewsServiceProvider.php	317	private function discoverPluginComposerFiles(): ?\Illuminate\Support\Collection	CODE
LOW	app/Core/Middleware/AuthCheck.php	280	protected function tooManyFailedAuthAttempts(IncomingRequest $request): bool	CODE
LOW	app/Core/Middleware/StartSession.php	493	protected function getSessionLifetimeInSeconds()	CODE
LOW	app/Core/Domains/BaseService.php	47	public function setPermissionServiceResolver(\Closure $resolver): void	CODE
LOW	app/Core/Auth/AuthenticationServiceProvider.php	81	protected function registerRequestRebindHandler()	CODE
LOW	app/Core/Auth/AuthenticationServiceProvider.php	95	protected function registerEventRebindHandler()	CODE
LOW	app/Core/Auth/Permissions/PermissionSeeder.php	39	public function syncDiscoveredPermissions(): array	CODE
LOW	app/Core/Auth/Permissions/PermissionSeeder.php	73	private function grantNewPermissionsToRoles(array $newPermissionKeys): void	CODE
LOW	app/Core/Auth/Permissions/PermissionServiceProvider.php	48	protected function forgetRolesBetweenQueuedJobs(): void	CODE
LOW	app/Core/Auth/Permissions/PermissionServiceProvider.php	107	protected function injectBaseServiceDependencies(): void	CODE
LOW	app/Core/Plugins/PluginCompatibility.php	98	private function lastLeantimeVersionForBrokenRelease(string $packageName, string $pluginVersion): ?string	CODE
LOW	app/Core/Exceptions/ExceptionHandler.php	415	protected function convertExceptionToResponse(Throwable $e)	CODE
LOW	app/Core/Exceptions/ExceptionHandler.php	445	protected function renderExceptionWithWhoops(Throwable $e)	CODE
LOW	app/Core/Exceptions/ExceptionHandler.php	476	protected function renderExceptionWithSymfony(Throwable $e, $debug)	CODE
LOW	app/Core/Exceptions/HandleExceptions.php	117	protected function shouldIgnoreDeprecationErrors()	CODE
LOW	app/Core/Exceptions/HandleExceptions.php	129	protected function ensureDeprecationLoggerIsConfigured()	CODE
LOW	app/Core/Exceptions/HandleExceptions.php	153	protected function ensureNullLogDriverIsConfigured()	CODE
LOW	app/Core/Controller/Frontcontroller.php	398	private function assertVerbSegmentMatchesRequestMethod(string $methodName): void	CODE
LOW	app/Core/Support/RoutingFormatter.php	131	protected function formatRecentHistoryAsPrompt(array $recentHistory): string	CODE
LOW	app/Core/Support/Build.php	205	public function getAndTap(string $key = '', ?callable $callback = null): mixed	CODE
LOW	app/Core/Shims/McpServiceProvider.php	49	private function flushStalePackageManifest(): void	CODE
LOW	app/Core/Db/DatabaseHelper.php	131	private function convertDateFormatToPostgres(string $mysqlFormat): string	CODE
LOW	app/Core/Events/EventDispatcher.php	215	private static function executeClassEventHandlers(LeantimeEvent $event): void	CODE
LOW	app/Core/Events/EventDispatcher.php	570	public static function loadEnabledPluginRegisterFiles(bool $failOnDatabaseError = false): void	CODE
LOW	app/Core/Modules/ProjectModules.php	117	public function withoutSwitchedOffProjects(string $moduleId, array $rows, string $projectKey = 'projectId'): array	CODE
LOW	app/Core/Modules/Contracts/StoresProjectModules.php	32	public function getModuleOverridesForProjects(array $projectIds): array;	CODE
LOW	app/Core/Console/Application.php	52	protected function getDefaultInputDefinition(): InputDefinition	CODE
LOW	app/Core/Console/CliServiceProvider.php	269	protected function registerCacheClearCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	281	protected function registerCacheForgetCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	293	protected function registerCacheTableCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	317	protected function registerChannelMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	329	protected function registerComponentMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	341	protected function registerConfigCacheCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	353	protected function registerConfigClearCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	365	protected function registerConsoleMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	377	protected function registerControllerMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	401	protected function registerExceptionMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	413	protected function registerFactoryMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	425	protected function registerEventClearCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	449	protected function registerListenerMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	473	protected function registerMiddlewareMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	497	protected function registerNotificationMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	509	protected function registerNotificationTableCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	521	protected function registerObserverMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	533	protected function registerPolicyMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	545	protected function registerProviderMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	557	protected function registerQueueForgetCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	567	protected function registerQueueListenCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	579	protected function registerQueueMonitorCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	591	protected function registerQueuePruneBatchesCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	603	protected function registerQueuePruneFailedJobsCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	615	protected function registerQueueRestartCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	639	protected function registerQueueFailedTableCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	651	protected function registerQueueTableCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	663	protected function registerQueueBatchesTableCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	675	protected function registerRequestMakeCommand()	CODE
LOW	app/Core/Console/CliServiceProvider.php	687	protected function registerResourceMakeCommand()	CODE
231 more matches not shown…

Decorative Section Separators12 hits · 36 pts

Severity	File	Line	Snippet	Context
MEDIUM	…WorkStructure/Repositories/WorkStructureRepository.php	32	// ─── Structures ──────────────────────────────────────────────────	COMMENT
MEDIUM	…WorkStructure/Repositories/WorkStructureRepository.php	114	// ─── Elements ────────────────────────────────────────────────────	COMMENT
MEDIUM	…WorkStructure/Repositories/WorkStructureRepository.php	168	// ─── Relationships ───────────────────────────────────────────────	COMMENT
MEDIUM	…WorkStructure/Repositories/WorkStructureRepository.php	203	// ─── Mappings ────────────────────────────────────────────────────	COMMENT
MEDIUM	…WorkStructure/Repositories/WorkStructureRepository.php	272	// ─── Hydrators ───────────────────────────────────────────────────	COMMENT
MEDIUM	app/Domain/Goalcanvas/Repositories/Goalcanvas.php	409	// ─── Goal↔milestone edges (tracked_by on zp_entity_relationship) ──────	COMMENT
MEDIUM	…in/Resources/Services/ResourceStructureServiceTest.php	308	// ─── Test doubles ────────────────────────────────────────────────	COMMENT
MEDIUM	…ts/Unit/app/Domain/Users/EditUserAuthorizationTest.php	40	// ─── Attribute presence on every write surface ────────────────────	COMMENT
MEDIUM	…ts/Unit/app/Domain/Users/EditUserAuthorizationTest.php	90	// ─── Default-grant hierarchy — who has users.edit ─────────────────	COMMENT
MEDIUM	…ts/Unit/app/Domain/Users/EditUserAuthorizationTest.php	123	// ─── Helpers ──────────────────────────────────────────────────────	COMMENT
MEDIUM	…p/Domain/Goalcanvas/Services/GoalcanvasServiceTest.php	870	// ─── Milestone rollup / mobile Progress (many-to-many) ────────────────	COMMENT
MEDIUM	…t/app/Domain/Reports/Services/CapacityAnalyzerTest.php	259	// ─── Program rollup: supply is capacity, not booked hours ────────	COMMENT

Over-Commented Block28 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	bootstrap/app.php	61	return $app;	COMMENT
LOW	app/Core/Auth/Permissions/DefaultRolePermissions.php	61	['scope' => 'project', 'keys' => ['comments.create']],	COMMENT
LOW	app/Core/Controller/Frontcontroller.php	281	$enabledPlugins = app()->make(\Leantime\Domain\Plugins\Services\Plugins::class)->getEnabledPlugins();	COMMENT
LOW	app/Core/Http/HttpKernel.php	161	}	COMMENT
LOW	app/Core/Events/EventDispatcher.php	441	// // Handle Laravel style events	COMMENT
LOW	app/Core/Events/EventDispatcher.php	461	// }	COMMENT
LOW	…/Views/Templates/components/forms/text-input.blade.php	1	@props([	COMMENT
LOW	app/Views/Templates/components/forms/select.blade.php	1	@props([	COMMENT
LOW	app/Domain/Tickets/Services/Tickets.php	2461	*/	COMMENT
LOW	app/Domain/Tickets/Services/Tickets.php	5241		COMMENT
LOW	app/Domain/Tickets/Services/Tickets.php	5841	// if (! empty($ticket['milestoneid']) && $ticket['milestoneid'] == $milestoneId)	COMMENT
LOW	app/Domain/Tickets/Services/Tickets.php	6241	// this day on the user's calendar", no time, no TZ. Running it	COMMENT
LOW	app/Domain/Calendar/Js/calendarController.js	481		COMMENT
LOW	app/Domain/Calendar/Js/calendarController.js	501	// enitityType: "ticket",	COMMENT
LOW	app/Domain/Auth/Services/Auth.php	641	{	COMMENT
LOW	app/Domain/Projects/Services/Projects.php	2741	return false;	COMMENT
LOW	app/Domain/Oidc/Controllers/Mobile.php	81	// so — unlike getToken, which lives in the plugin and is gated by absence —	COMMENT
LOW	app/Domain/Wiki/Templates/templates.blade.php	21		COMMENT
LOW	app/Domain/Status/Controllers/Index.php	101	'ssoProviders' => [],	COMMENT
LOW	…tes/partials/stakeholder/page-impact-journey.blade.php	141	// ── STARTED bookend text.	COMMENT
LOW	app/Domain/Reports/Services/CapacityAnalyzer.php	261	// made the two halves of the report disagree: the headline tile	COMMENT
LOW	public/assets/css/libs/jquery.alerts.css	81	#popup_container.alert-warning #popup_title { background-color: #FCB904; }	COMMENT
LOW	public/assets/css/libs/jquery.alerts.css	101	#popup_container.alert-inverse #popup_ok,	COMMENT
LOW	public/assets/js/libs/simpleGantt/snap.svg-min.js	1	// Snap.svg 0.4.0	COMMENT
LOW	.github/workflows/update-latest-tag.yml	21		COMMENT
LOW	helm/Chart.yaml	1	apiVersion: v2	COMMENT
LOW	helm/values.yaml	21		COMMENT
LOW	helm/values.yaml	61	# -- S3 region	COMMENT

Fake / Example Data23 hits · 25 pts

Severity	File	Line	Snippet	Context
LOW⚡	accessibility-mockup.html	785	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut lab	CODE
LOW⚡	accessibility-mockup.html	785	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut lab	CODE
LOW⚡	accessibility-mockup.html	794	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut lab	CODE
LOW⚡	accessibility-mockup.html	794	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut lab	CODE
LOW	app/Views/Templates/components/emojiinput.blade.php	5	'placeholder' => '',	CODE
LOW	app/Views/Templates/components/forms/tags.blade.php	25	'placeholder' => null,	CODE
LOW	tests/Unit/app/Core/Support/AvatarcreatorTest.php	67	$this->avatarCreator->setInitials('John Doe');	CODE
LOW	tests/Unit/app/Core/Support/AvatarcreatorTest.php	100	$result = $this->avatarCreator->getAvatar('John Doe');	CODE
LOW	tests/Unit/app/Core/Support/AvatarcreatorTest.php	112	$result = $this->avatarCreator->getAvatar('John Doe');	CODE
LOW	…nit/app/Domain/Tickets/Services/TicketsServiceTest.php	374	'get' => fn () => ['id' => 5, 'name' => 'Acme Inc'],	CODE
LOW	…nit/app/Domain/Tickets/Services/TicketsServiceTest.php	378	$this->assertEquals('Acme Inc', $service->getClientNameById(5));	CODE
LOW	…p/Domain/Tickets/Services/TicketHistoryServiceTest.php	98	$this->assertSame('Jane Doe', $entries[0]->userName);	CODE
LOW	…nit/app/Domain/Install/Services/InstallServiceTest.php	43	'email' => 'admin@example.com',	CODE
LOW	…nit/app/Domain/Install/Services/InstallServiceTest.php	76	'email' => 'admin@example.com',	CODE
LOW	…nit/app/Domain/Install/Services/InstallServiceTest.php	93	'email' => 'admin@example.com',	CODE
LOW	…nit/app/Domain/Install/Services/InstallServiceTest.php	110	'email' => 'admin@example.com',	CODE
LOW	…nit/app/Domain/Install/Services/InstallServiceTest.php	286	'email' => 'admin@example.com',	CODE
LOW	…nit/app/Domain/Install/Services/InstallServiceTest.php	302	'email' => 'admin@example.com',	CODE
LOW	…nit/app/Domain/Auth/Services/OnboardingServiceTest.php	57	'Jane Doe',	CODE
LOW	…nit/app/Domain/Auth/Services/OnboardingServiceTest.php	80	'Jane Doe',	CODE
LOW	…nit/app/Domain/Auth/Services/OnboardingServiceTest.php	129	'Jane Doe',	CODE
LOW	…sts/Unit/app/Domain/Users/Services/BackgroundsTest.php	181	'user' => ['name' => 'Jane Doe', 'links' => ['html' => 'https://unsplash.com/@jane']],	CODE
LOW	…sts/Unit/app/Domain/Users/Services/BackgroundsTest.php	212	'photographerName' => 'Jane Doe',	CODE

Structural Annotation Overuse12 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW⚡	app/Core/Support/String/AlphaNumeric.php	24	// Step 2: Replace multiple spaces with a single space	COMMENT
LOW⚡	app/Core/Support/String/AlphaNumeric.php	28	// Step 3: Trim leading and trailing spaces	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	24	// Step 1: Replace line breaks with space	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	27	// Step 2: Escape JSON special characters except newlines	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	34	// Step 3: Replace problematic characters with safe alternatives	COMMENT
LOW	app/Core/Support/String/SanitizeForLLM.php	52	// Step 4: Remove any remaining potentially problematic characters	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	75	// Step 5: Handle potential JSON serialization issues	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	81	// Step 6: Additional sanitization for special patterns	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	89	// Step 7: Remove consecutive spaces (which can occur after other replacements)	COMMENT
LOW	.claude/docs/google-calendar-plugin.md	281	### Step 1: Connect Controller	COMMENT
LOW	.claude/docs/google-calendar-plugin.md	307	### Step 2: Callback Controller	COMMENT
LOW	.claude/docs/google-calendar-plugin.md	367	### Step 3: GoogleAuth Service	COMMENT

Verbosity Indicators9 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW⚡	app/Core/Support/String/AlphaNumeric.php	24	// Step 2: Replace multiple spaces with a single space	COMMENT
LOW⚡	app/Core/Support/String/AlphaNumeric.php	28	// Step 3: Trim leading and trailing spaces	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	24	// Step 1: Replace line breaks with space	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	27	// Step 2: Escape JSON special characters except newlines	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	34	// Step 3: Replace problematic characters with safe alternatives	COMMENT
LOW	app/Core/Support/String/SanitizeForLLM.php	52	// Step 4: Remove any remaining potentially problematic characters	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	75	// Step 5: Handle potential JSON serialization issues	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	81	// Step 6: Additional sanitization for special patterns	COMMENT
LOW⚡	app/Core/Support/String/SanitizeForLLM.php	89	// Step 7: Remove consecutive spaces (which can occur after other replacements)	COMMENT

Hallucination Indicators1 hit · 10 pts

Severity	File	Line	Snippet	Context
CRITICAL	public/assets/js/app/core/tiptap/extensions/columns.js	31	nodes = [props.editor.schema.nodes.paragraph.create()];	CODE

Slop Phrases5 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	app/Language/en-GB.ini	4002	text.onboarding_default_project_details="Welcome to your first project in Leantime!<br />This is your space to organize	CODE
MEDIUM	app/Language/en-US.ini	4194	text.onboarding_default_project_details = "Welcome to your first project in Leantime!<br />This is your space to organiz	CODE
LOW⚡	public/assets/js/libs/uppy/uppy.js	7	Uppy plugins must have unique \`id\` options. See https://uppy.io/docs/plugins/#id.`;throw new Error(a)}return e.VERSION	CODE
LOW⚡	public/assets/js/libs/uppy/uppy.js	16	`,t={width:this.opts.width,height:this.opts.height};return u("button",{type:"button",className:e,style:t,onClick:()=	CODE
LOW⚡	public/assets/js/libs/uppy/uppy.js	18	See https://uppy.io/docs/aws-s3/#getUploadParameters-file for more on the expected format.`)}n(hS,"validateParameters");	CODE

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	app/Core/Middleware/RequestRateLimiter.php	130	// MCP endpoint gets its own (higher) budget: agentic LLM clients legitimately burst	COMMENT

AI Slop Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	package-lock.json	14062	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE

Leantime/leantime

Open-Source Code Quality, Security and Technical Debt Review