1.0

Adjusted Signal

1.0

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

67.8K

Stars

JavaScript

Language

304.9K

Lines of Code

1.3K

Files

220

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 195 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.5/100 · LOW

Are imports declared and package/API names verified? 9 finding(s).

Agent Over-Engineering Ratio 3.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 162 finding(s).

PR Review Velocity Impact 4.5/100 · LOW

Which changes need focused human review? 220 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 1MEDIUM 20LOW 197

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 220 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers146 hits · 146 pts

Severity	File	Line	Snippet	Context
LOW	frontend/src/EmbeddingProgressContext.jsx	27	export function useWorkspaceEmbeddingProgress(	CODE
LOW	frontend/src/EmbeddingProgressContext.jsx	64	export function EmbeddingProgressProvider({ children }) {	CODE
LOW	frontend/src/utils/session.js	5	export default async function validateSessionTokenForUser() {	CODE
LOW	frontend/src/utils/chat/reasoningEffort.js	37	export function getSessionReasoningEffort(workspaceSlug, threadSlug = null) {	CODE
LOW	frontend/src/utils/chat/reasoningEffort.js	47	export function setSessionReasoningEffort(workspaceSlug, threadSlug, effort) {	CODE
LOW	frontend/src/utils/chat/markdown.js	100	function normalizeThoughtIndentation(text = "") {	CODE
LOW	frontend/src/components/Sidebar/index.jsx	210	function WorkspaceAndThreadTooltips() {	CODE
LOW	frontend/src/components/Sidebar/SearchBox/index.jsx	190	function ShortWidthNewWorkspaceButton({ user, showNewWsModal }) {	CODE
LOW	…ents/EmbeddingSelection/GenericOpenAiOptions/index.jsx	5	export default function GenericOpenAiEmbeddingOptions({ settings }) {	CODE
LOW	…ponents/EmbeddingSelection/OpenRouterOptions/index.jsx	29	function OpenRouterEmbeddingModelSelection({ settings }) {	CODE
LOW	…/components/EmbeddingSelection/OllamaOptions/index.jsx	199	function OllamaEmbeddingModelSelection({ settings, basePath = null }) {	CODE
LOW	frontend/src/components/contexts/TTSProvider.jsx	69	export function emitAssistantMessageCompleteEvent(chatId) {	CODE
LOW	frontend/src/components/contexts/TTSProvider.jsx	83	export function useWatchForAutoPlayAssistantTTSResponse() {	CODE
LOW	frontend/src/components/CanViewChatHistory/index.jsx	26	export function CanViewChatHistoryProvider({ children }) {	CODE
LOW	…ManageWorkspace/Documents/WorkspaceDirectory/index.jsx	451	function WorkspaceDocumentTooltips() {	CODE
LOW	…pace/Documents/UploadFile/FileUploadProgress/index.jsx	8	function FileUploadProgressComponent({	CODE
LOW	…components/SpeechToText/GenericOpenAiOptions/index.jsx	1	export default function GenericOpenAiSpeechToTextOptions({ settings }) {	CODE
LOW	…/src/components/SpeechToText/DeepgramOptions/index.jsx	4	export default function DeepgramSpeechToTextOptions({ settings }) {	CODE
LOW	…/src/components/SpeechToText/DeepgramOptions/index.jsx	34	function DeepgramSttModelSelection({ apiKey, settings }) {	CODE
LOW	…/src/components/SpeechToText/LemonadeOptions/index.jsx	9	export default function LemonadeSpeechToTextOptions({ settings }) {	CODE
LOW	…/src/components/SpeechToText/LemonadeOptions/index.jsx	131	function LemonadeSTTModelSelection({ settings, basePath = null }) {	CODE
LOW	…nd/src/components/SpeechToText/OpenAiOptions/index.jsx	4	export default function OpenAiSpeechToTextOptions({ settings }) {	CODE
LOW	…ImageGenerationSelection/ImageModelSelection/index.jsx	158	function groupModelsByOrganization(models = []) {	CODE
LOW	…c/components/LLMSelection/FireworksAiOptions/index.jsx	38	function FireworksAiModelSelection({ apiKey, settings }) {	CODE
LOW	…components/LLMSelection/GenericOpenAiOptions/index.jsx	95	function GenericOpenAiModelSelection({	CODE
LOW	…criptionSelection/NativeTranscriptionOptions/index.jsx	5	export default function NativeTranscriptionOptions({ settings }) {	CODE
LOW	…/TranscriptionSelection/GenericOpenAiOptions/index.jsx	1	export default function GenericOpenAiWhisperOptions({ settings }) {	CODE
LOW	frontend/src/components/lib/ModelTable/loading.jsx	4	export default function ModelTableLoadingSkeleton() {	CODE
LOW	…components/TextToSpeech/OpenAiGenericOptions/index.jsx	3	export default function OpenAiGenericTextToSpeechOptions({ settings }) {	CODE
LOW	…nd/src/components/TextToSpeech/OpenAiOptions/index.jsx	7	export default function OpenAiTextToSpeechOptions({ settings }) {	CODE
LOW	frontend/src/components/WorkspaceChat/index.jsx	199	export function setEventDelegatorForCodeSnippets() {	CODE
LOW	…tainer/MemoriesSidebar/PersonalizationToggle/index.jsx	26	async function handleAutoExtractionToggle(checked) {	CODE
LOW	…ceChat/ChatContainer/ChatHistory/PromptReply/index.jsx	79	function RenderAssistantChatContent({ message }) {	CODE
LOW	…hatContainer/ChatHistory/ToolApprovalRequest/index.jsx	163	function ToolApprovalResponseOption({	CODE
LOW	…hatContainer/ChatHistory/ToolApprovalRequest/index.jsx	207	function ToolApprovalResponseMessage({ approved }) {	CODE
LOW	…tory/HistoricalMessage/Actions/RenderMetrics/index.jsx	78	function handleShowingMetricsEvent(e) {	CODE
LOW	…toricalMessage/HistoricalClarifyingQuestions/index.jsx	9	export default function HistoricalClarifyingQuestions({ surveys = [] }) {	CODE
LOW	…ainer/ChatHistory/CompletedReplyAnnouncement/index.jsx	15	export default function CompletedReplyAnnouncement({ history }) {	CODE
LOW	…ainer/ChatHistory/CompletedReplyAnnouncement/index.jsx	34	function useCompletedReplyAnnouncement(history) {	CODE
LOW	…aceChat/ChatContainer/PromptInput/LLMSelector/utils.js	4	export function autoScrollToSelectedLLMProvider(	CODE
LOW	…romptInput/ToolsMenu/Tabs/AgentSkills/skillRegistry.js	55	export function getSubSkillPreferenceKeys() {	CODE
LOW	…romptInput/ToolsMenu/Tabs/AgentSkills/skillRegistry.js	90	export function isSkillMultiUserSupported(skillKey) {	CODE
LOW	…mponents/VectorDBSelection/WeaviateDBOptions/index.jsx	70	function SelfHostedAdvancedSettings({ settings }) {	CODE
LOW	frontend/src/hooks/useOnboardingComplete.js	6	export default function useRedirectToHomeOnOnboardingComplete() {	CODE
LOW	frontend/src/hooks/useWebPushNotifications.js	24	export async function subscribeToPushNotifications(askToEnable = true) {	CODE
LOW	frontend/src/hooks/useChatContainerQuickScroll.js	8	export default function useChatContainerQuickScroll() {	CODE
LOW	frontend/src/hooks/useScrollActiveItemIntoView.js	11	export default function useScrollActiveItemIntoView({	CODE
LOW	frontend/src/hooks/useProviderEndpointAutoDiscovery.js	4	export default function useProviderEndpointAutoDiscovery({	CODE
LOW	…rc/pages/GeneralSettings/EmbeddingPreference/index.jsx	151	export default function GeneralEmbeddingPreference() {	CODE
LOW	…neralSettings/CommunityHub/Trending/HubItems/index.jsx	15	function useCommunityHubExploreItems() {	CODE
LOW	…ages/GeneralSettings/CommunityHub/ImportItem/index.jsx	70	export default function CommunityHubImportItemFlow() {	CODE
LOW	…eneralSettings/CommunityHub/ImportItem/Steps/index.jsx	47	export function CommunityHubImportItemLayout({ setStep, children }) {	CODE
LOW	…/GeneralSettings/CommunityHub/Authentication/index.jsx	12	function useCommunityHubAuthentication() {	CODE
LOW	…/GeneralSettings/CommunityHub/Authentication/index.jsx	97	export default function CommunityHubAuthentication() {	CODE
LOW	…ages/GeneralSettings/TranscriptionPreference/index.jsx	43	export default function TranscriptionModelPreference() {	CODE
LOW	…serExtensionApiKey/BrowserExtensionApiKeyRow/index.jsx	8	export default function BrowserExtensionApiKeyRow({	CODE
LOW	…tensionApiKey/NewBrowserExtensionApiKeyModal/index.jsx	12	export default function NewBrowserExtensionApiKeyModal({	CODE
LOW	…/src/pages/GeneralSettings/ScheduledJobs/utils/cron.js	407	export function buildCronFromBuilderState(state) {	CODE
LOW	…es/GeneralSettings/ImageGenerationPreference/index.jsx	82	export default function ImageGenerationPreference() {	CODE
LOW	…eralSettings/EmbeddingTextSplitterPreference/index.jsx	19	export default function EmbeddingTextSplitterPreference() {	CODE
86 more matches not shown…

Decorative Section Separators16 hits · 48 pts

Severity	File	Line	Snippet	Context
MEDIUM	server/utils/router/index.js	59	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	61	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	101	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	103	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	191	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	193	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	236	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	238	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	294	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	296	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	416	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	418	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	518	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/utils/router/index.js	520	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/jobs/helpers/memory-extraction-utils.js	112	// ── Phase 1: Observer ────────────────────────────────────────────────	COMMENT
MEDIUM	server/jobs/helpers/memory-extraction-utils.js	218	// ── Phase 2: Reflector ───────────────────────────────────────────────	COMMENT

Structural Annotation Overuse14 hits · 28 pts

Severity	File	Line	Snippet	Context
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	10	## Step 1: Allocate and assign Elastic IP Address to your deployed EC2 instance	COMMENT
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	14	## Step 2: Configure DNS A record to resolve to the previously assigned EC2 instance via EIP	COMMENT
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	19	## Step 3: Install and enable nginx	COMMENT
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	24	## Step 4: Install certbot	COMMENT
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	32	## Step 5: Configure temporary Inbound Traffic Rule for Security Group to certbot DNS verification	COMMENT
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	35	## Step 6: Comment out default http NGINX proxy configuration	COMMENT
LOW	…ployments/aws/cloudformation/aws_https_instructions.md	60	## Step 7: Create simple http proxy configuration for AnythingLLM	COMMENT
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	96	## Step 8: Test nginx http proxy config and restart nginx service	COMMENT
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	102	## Step 9: Generate/install cert	COMMENT
LOW⚡	…ployments/aws/cloudformation/aws_https_instructions.md	112	## Step 10: Test Cert installation	COMMENT
LOW	server/utils/AiProviders/modelRouter/index.js	55	// Step 1: Calculated rules (always re-evaluated, they're instant)	COMMENT
LOW	server/utils/AiProviders/modelRouter/index.js	67	// Step 2: LLM rules (cached to avoid expensive re-classification)	COMMENT
LOW	server/utils/AiProviders/modelRouter/index.js	82	// Step 3: No rule matched — check sticky route	COMMENT
LOW	server/utils/AiProviders/modelRouter/index.js	93	// Step 4: Sticky expired — use fallback	COMMENT

Over-Commented Block21 hits · 21 pts

Severity	File	Line	Snippet	Context
LOW	frontend/src/locales/resources.js	1	// Looking for a language to translate AnythingLLM to?	COMMENT
LOW	frontend/src/models/agentFlows.js	81	// headers: {	COMMENT
LOW	…ployments/aws/cloudformation/aws_https_instructions.md	41	# listen 80;	COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	41		COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	61	# selector:	COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	81	name: ""	COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	101	# in order to have the right permissions on mounted volumes	COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	121	UID: "1000"	COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	161	# List of rules and filters applied.	COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	221	port: 8888	COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	241	nodeSelector: {}	COMMENT
LOW	cloud-deployments/helm/charts/anythingllm/values.yaml	261	# name: open-ai-api-key-secret	COMMENT
LOW	server/endpoints/agentFlows.js	101	);	COMMENT
LOW	server/endpoints/agentFlows.js	121	// results: {	COMMENT
LOW	server/utils/database/index.js	1	const { getGitVersion } = require("../../endpoints/utils");	COMMENT
LOW	server/utils/agents/aibitat/utils/dedupe.js	1	// Some models may attempt to call an expensive or annoying function many times and in that case we will want	COMMENT
LOW	server/utils/AiProviders/groq/index.js	121	);	COMMENT
LOW	server/utils/telegramBot/index.js	61	"504",	COMMENT
LOW	.devcontainer/devcontainer.json	1	// For format details, see https://aka.ms/devcontainer.json. For config options, see the	COMMENT
LOW	.github/workflows/build-and-push-image-semver.yaml	81	# multiple attestations to multi-platform images. The second attachment	COMMENT
LOW	.github/workflows/build-and-push-image.yaml	101	# VEX attestations are currently broken with docker scout when attaching	COMMENT

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	…__/utils/agents/aibitat/plugins/generate-image.test.js	89	const [, card] = aibitat.socket.send.mock.calls.find(	CODE
CRITICAL	…ils/AiProviders/embeddedLemonade/agentProvider.test.js	116	agent._client.chat.completions.create.mockImplementation(async () => ({	CODE

AI Slop Vocabulary2 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	frontend/public/embed/anythingllm-chat-widget.min.js	37	*/function M(t){for(var e="https://reactjs.org/docs/error-decoder.html?invariant="+t,n=1;n<arguments.length;n++)e+="&ar	COMMENT
MEDIUM⚡	frontend/public/embed/anythingllm-chat-widget.min.js	37	*/function M(t){for(var e="https://reactjs.org/docs/error-decoder.html?invariant="+t,n=1;n<arguments.length;n++)e+="&ar	COMMENT

Verbosity Indicators6 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	server/utils/middleware/simpleSSOEnabled.js	20	// If the multi-user mode response local is not set, we need to check if it's enabled.	COMMENT
LOW	server/utils/AiProviders/modelRouter/index.js	55	// Step 1: Calculated rules (always re-evaluated, they're instant)	COMMENT
LOW	server/utils/AiProviders/modelRouter/index.js	67	// Step 2: LLM rules (cached to avoid expensive re-classification)	COMMENT
LOW	server/utils/AiProviders/modelRouter/index.js	82	// Step 3: No rule matched — check sticky route	COMMENT
LOW	server/utils/AiProviders/modelRouter/index.js	93	// Step 4: Sticky expired — use fallback	COMMENT
LOW	server/utils/helpers/admin/index.js	4	// When a user is updating or creating a user in multi-user, we need to check if they	COMMENT

Fake / Example Data6 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW⚡	frontend/public/embed/anythingllm-chat-widget.min.js	37	*/function M(t){for(var e="https://reactjs.org/docs/error-decoder.html?invariant="+t,n=1;n<arguments.length;n++)e+="&ar	COMMENT
LOW	collector/__tests__/processLink/options.test.js	55	WhisperGenericOpenAiApiKey: "dummy-key",	CODE
LOW	server/utils/agents/imported-manifest.schema.json	68	"placeholder": {	CODE
LOW	server/__tests__/utils/agents/toolReranker.test.js	125	const injectedContext = "lorem ipsum dolor sit amet ".repeat(4000);	CODE
LOW	server/__tests__/utils/agents/toolReranker.test.js	125	const injectedContext = "lorem ipsum dolor sit amet ".repeat(4000);	CODE
LOW	server/__tests__/utils/TextSplitter/index.test.js	61	docAuthor: "John Doe",	CODE

Redundant / Tautological Comments4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	docker/docker-entrypoint.sh	3	# Check if STORAGE_DIR is set	COMMENT
LOW	cloud-deployments/openshift/docker-entrypoint.sh	13	# Check if STORAGE_DIR is set	COMMENT
LOW	.github/workflows/build-and-push-image-semver.yaml	25	# Check if the secret for USERNAME is set (don't even check for the password)	COMMENT
LOW	.github/workflows/build-and-push-image.yaml	44	# Check if the secret for USERNAME is set (don't even check for the password)	COMMENT

Magic Placeholder Names1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…ponents/VectorDBSelection/ChromaCloudOptions/index.jsx	13	placeholder="ck-your-api-key-here"	CODE

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	frontend/src/utils/chat/agent.js	157	// If we get this message we know the provider supports agentic streaming	COMMENT

Slop Phrases1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	server/endpoints/api/openai/index.js	22	#swagger.description = 'Get all available "models" which are workspaces you can use for chatting.'	COMMENT

Mintplex-Labs/anything-llm

Open-Source Code Quality, Security and Technical Debt Review