Home / Nasiko-Labs / nasiko
AI Slop Code RIsk Monitor

Nasiko-Labs/nasiko

The Open Runtime for AI Agents

9.1 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for Nasiko-Labs/nasiko, a Rust project with 9,503 GitHub stars. SynthScan examined 455,376 lines of code across 1687 source files, recording 1897 pattern matches distributed across 16 syntactic categories. The legacy adjusted pattern signal is 9.1 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

9.1
Adjusted Signal
9.1
Raw Pattern Score
100%
Time Factor
2026-10-07
Last Push
9.5K
Stars
Rust
Language
455.4K
Lines of Code
1.7K
Files
1.9K
Pattern Hits
2026-10-12
Scan Date
0.04
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 8.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 779 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 22 finding(s).

Agent Over-Engineering Ratio 30.9/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 1128 finding(s).

PR Review Velocity Impact 37.0/100 · MEDIUM

Which changes need focused human review? 1897 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 68MEDIUM 986LOW 843

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1897 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators968 hits · 2926 pts
SeverityFileLineSnippetContext
MEDIUM⚡Cargo.toml60# ─── Testing ────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml63# ─── Async runtime & web ────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml69# ─── OpenAPI docs ───────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml73# ─── Serialization ──────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml77# ─── Text / patterns ────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml80# ─── Database & state ───────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml85# ─── Auth ───────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml89# ─── HTTP client ────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml93# ─── LLM orchestration ──────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml101# ─── CLI ────────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml120# ─── Observability ──────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml124# ─── AWS ────────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml128# ─── Crypto ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml136# ─── Temp filesystem ────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml139# ─── Archive ────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml143# ─── Versioning ─────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml146# ─── Concurrency ───────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml150# ─── Async traits ───────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml153# ─── Streaming ──────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml157# ─── Common utilities ───────────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml165# ─── Embedding / registry ──────────────────────────────────────────────────COMMENT
MEDIUM⚡Cargo.toml172# ─── Benchmarking ───────────────────────────────────────────────────────────COMMENT
MEDIUMCargo.toml4 # ─── OSS crates ─────────────────────────────────────────────────────────COMMENT
MEDIUMCargo.toml36# ─── Internal OSS crates ────────────────────────────────────────────────────COMMENT
MEDIUMui/common/surface/poc.html260 // ─── Settings panel (login + internal token) ───────────────────────COMMENT
MEDIUMui/common/surface/poc.html415 // ─── Chat transcript UI ─────────────────────────────────────────────COMMENT
MEDIUMui/common/src/test/liveTypes.test.ts53// ── The spec path: OpenAPI 3.1 schemas are JSON Schema 2020-12, which zod 4 reads (`z.fromJSONSchema`) ────────────COMMENT
MEDIUMui/common/src/test/liveTypes.test.ts97// ── The zod path: the UI's wire types, for routes the spec doesn't cover (and the spec gaps) ───────────────────────COMMENT
MEDIUMui/common/src/features/settings/logic.ts7// ─── workspace settings (oss/server/src/settings.rs) ────────────────────────COMMENT
MEDIUMui/common/src/features/settings/logic.ts72// ─── secrets (oss/server/src/secrets/routes.rs validate_secret_name) ────────COMMENT
MEDIUMui/common/src/features/chat/waiting.test.tsx34// ─── matchPending (test 5) ────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/chat/waiting.test.tsx148// ─── The poller (test 7, E6) ──────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/chat/waiting.test.tsx239// ─── The Waiting view (test 14) ───────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/chat/api.ts241// ─── Routed attribution fallback (v1b §5.8) ───────────────────────────────────COMMENT
MEDIUMui/common/src/features/chat/pending.ts84// ─── The EN10 index: request id → chat, per user, in memory ─────────────────COMMENT
MEDIUMui/common/src/features/chat/signals.test.ts19// ─── The registry: direct ends (test 8) ───────────────────────────────────────COMMENT
MEDIUMui/common/src/features/chat/signals.test.ts347// ─── The signals store (test 6) ───────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/deploy/uploads.ts71// ── beforeunload while any upload runs (R1) ──────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/deploy/uploads.ts226// ── Registry imports (plans/feat-deploy.md §4.3; eng review R4) ─────────────────────────────────COMMENT
MEDIUMui/common/src/features/deploy/uploads.ts318// ── GitHub clones started here (review D1, server gap D-12) ───────────────────────────────────COMMENT
MEDIUMui/common/src/features/deploy/api.ts369// ── GitHub (plans/feat-deploy.md §4.2) ─────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/deploy/types.ts55// ── GitHub (`github.rs`; not in the OpenAPI spec, D-1) ────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/optimization/lead.ts122// ─── trend (C6) ────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/optimization/lead.ts167// ─── chart rows (R5A) ──────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/optimization/lead.ts222// ─── bar interval (C5) ─────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/workflows/logic.ts186// ─── The step editor's model ────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/agents/api.ts105// ─── lists ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/agents/api.ts231// ─── one agent ──────────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/agents/api.ts587// ─── watch (truth checks) ───────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/agents/api.ts689// ─── mutations ──────────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/agents/types.ts76// ─── response schemas (lib/api/client.ts `Checked`): the fields the UI reads, extras allowed ────────────────────COMMENT
MEDIUMui/common/src/features/sessions/api.ts199// ─── status checks ──────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/sessions/api.ts329// ─── log tail ───────────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/onboarding/api.ts41// ─── "Skip guide" for this session ──────────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/onboarding/api.ts97// ─── The open guide ─────────────────────────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/tokenops/types.ts205// ─── response schemas (lib/api/client.ts `Checked`): the fields the UI reads, extras allowed ────────────────────COMMENT
MEDIUMui/common/src/features/router/routing.ts17// ─── models, tiers and pins ─────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/router/routing.ts64// ─── keys and fallbacks ─────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/router/routing.ts100// ─── the catalog ────────────────────────────────────────────────────────────COMMENT
MEDIUMui/common/src/features/router/routing.ts142// ─── rows, counts and "Affects N" ───────────────────────────────────────────COMMENT
908 more matches not shown…
Over-Commented Block708 hits · 683 pts
SeverityFileLineSnippetContext
LOWdocker-compose.infra.yml1# Nasiko Platform — InfrastructureCOMMENT
LOWui/common/surface/poc.html321 }COMMENT
LOWui/common/surface/poc.html541 // Detect >1 `root =` line within THIS turn's own streamed textCOMMENT
LOWui/common/src/features/router/RouterPage.tsx101 useRowsFollowConfigs(configs.data)COMMENT
LOWui/common/src/features/router/RouterPage.tsx121 // const resetsAt = budgetResetsAt(budgetStatus.data?.data, statusAt)COMMENT
LOWui/common/src/features/router/RouterPage.tsx201 // const name = sentenceName(b, agentLabel)COMMENT
LOWbench/src/main.rs1//! Load generator for the control-plane benchmark.COMMENT
LOWcompress/examples/report.rs1//! Prints the fixture corpus as a before/after table, at every level.COMMENT
LOWcompress/src/lib.rs1//! Structural, lossy-to-the-model compression of LLM payloads.COMMENT
LOWcompress/src/lib.rs21//! This crate never reads the environment. [`Policy`] is built by the caller;COMMENT
LOWcompress/src/marker.rs1//! Elision breadcrumbs.COMMENT
LOWagent-proxy/tests/resolution.rs1// Tests for URL parsing logic in nasiko-agent-proxy.COMMENT
LOWtypes/tests/stream_disposition.rs181/// built from. A payload one calls a pause and the other calls nothing is the bug that has nowCOMMENT
LOWtypes/src/a2a.rs141 state: TaskState::AuthRequired,COMMENT
LOWtypes/src/a2a.rs341// ─── SSE stream event classification ────────────────────────────────────────COMMENT
LOWtypes/src/a2a.rs361 ArtifactText(String),COMMENT
LOWtypes/src/a2a.rs441 //COMMENT
LOWtypes/src/a2a.rs581COMMENT
LOWtypes/src/a2a.rs621/// because the task is genuinely done, or stop because a human is now needed.COMMENT
LOWtypes/src/a2a.rs861 obj.insert("metadata".to_string(), metadata);COMMENT
LOWtypes/src/maf.rs1//! Wire-format constants for MAF (Multi-Agent Flow) execution status — shared betweenCOMMENT
LOWsavings/src/lib.rs1//! The token-savings ledger: what each optimization layer removed, and what that was worth.COMMENT
LOWsavings/src/lib.rs21//! orchestrator-side layers have no provider response in scope and are calibrated at read time.COMMENT
LOWsavings/src/lib.rs41 /// saving belongs to the tier rather than to the selection algorithm.COMMENT
LOWsavings/src/lib.rs141 pub bytes_after: Option<i64>,COMMENT
LOWconfig/src/lib.rs41 pub bind: String,COMMENT
LOWconfig/src/lib.rs61 /// same arrangement as `agent_runtime`, whose `kubernetes` value only oneCOMMENT
LOWconfig/src/lib.rs121 /// (the URLs above always carry a default, so their presence alone can'tCOMMENT
LOWconfig/src/lib.rs141 pub flow_max_depth: i32,COMMENT
LOWconfig/src/lib.rs161 /// Claim-lease floor shared by *both* resume dispatchers — `nasiko_hitl::dispatcher`'sCOMMENT
LOWconfig/src/lib.rs181 /// personal emails, which may only ever *join* a workspace, never createCOMMENT
LOWconfig/src/lib.rs201 /// Minimum samples **per arm** before a measured factor replaces the seeded one. Below thisCOMMENT
LOWconfig/src/lib.rs221 /// Token budget for a user on the PACMS "high" tier.COMMENT
LOWconfig/src/lib.rs241 /// Wall-clock budget for a single agent HTTP hop — the A2A proxy, theCOMMENT
LOWconfig/src/lib.rs281COMMENT
LOWconfig/src/lib.rs301 /// Max traces to fetch from Tempo per concurrent batch.COMMENT
LOWconfig/src/lib.rs321 /// confirmed live: Notion's DCR endpoint rejects it with "Redirect URICOMMENT
LOWconfig/src/lib.rs341 pub mcp_upload_max_bytes: u64,COMMENT
LOWconfig/src/lib.rs361 /// `mcp_upload_max_replicas` above, just for regular agents instead ofCOMMENT
LOWconfig/src/lib.rs381 /// override is added. Raised from the runtime crate's original 512MiCOMMENT
LOWconfig/src/lib.rs401 /// SEED_TOOLKITS, default empty. Requires COMPOSIO_API_KEY to be set.COMMENT
LOWconfig/src/lib.rs421 /// instead of re-deriving who is calling. MCP_IDENTITY_SIGNING_KEY; fallsCOMMENT
LOWconfig/src/lib.rs441/// prefix — never a bare reuse of the session-JWT key, mirroringCOMMENT
LOWconfig/src/lib.rs721 /// require this shape; previously an invalid key (e.g. 32 raw alphanumericCOMMENT
LOWauth/src/assertion.rs1//! BFF → workspace delegation assertions (central-dashboard mode).COMMENT
LOWauth/src/lib.rs81///COMMENT
LOWauth/src/lib.rs141COMMENT
LOWauth/src/lib.rs181 /// about EE-only org-hierarchy columns (`team_id`/`department_id`) thatCOMMENT
LOWauth/src/lib.rs201 }COMMENT
LOWauth/src/lib.rs221 Disabled,COMMENT
LOWauth/src/lib.rs241 /// hashing) — must surface as 500, never as a token/credential rejection.COMMENT
LOWauth/src/lib.rs301 Self::MissingDigit => "password must contain a digit".into(),COMMENT
LOWsecrets/src/lib.rs1//! AES-256-GCM encryption for platform secrets, with per-scope key derivation.COMMENT
LOWsecrets/src/lib.rs21//! from the master key + entity UUID, both already available at call sites.COMMENT
LOWsecrets/src/lib.rs121COMMENT
LOWsecrets/src/lib.rs141 pub fn try_for_system() -> Result<Self, SecretsError> {COMMENT
LOWhitl/tests/dispatcher.rs401/// resolve the coding row's calls as acting for the VICTIM, not its real owner.COMMENT
LOWhitl/src/types.rs81// auto-retried. `Skipped` = resume deliberately never attempted for this row (a mirroredCOMMENT
LOWhitl/src/notifier.rs1//! The one concrete [`crate::dispatcher::ResumeNotifier`] this milestoneCOMMENT
LOWhitl/src/notifier.rs121 /// itself needs no DB write at all. `context_id` is otherwise already a resolvedCOMMENT
648 more matches not shown…
Cross-File Repetition52 hits · 260 pts
SeverityFileLineSnippetContext
HIGHagents/test-agent/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/langgraph/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/crewai/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/langchain/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/claude-sdk/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/translator/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/common/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/doc-reader/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/assistant-agent/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/google-adk/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/summarizer/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/simulated-agent/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/openai/src/telemetry.py0nasiko agent otel telemetry bootstrap. import and call `init_telemetry()` at agent startup to auto-instrument: - http caSTRING
HIGHagents/test-agent/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/langgraph/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/crewai/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/langchain/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/claude-sdk/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/translator/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/common/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/doc-reader/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/assistant-agent/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/google-adk/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/summarizer/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/simulated-agent/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/openai/src/telemetry.py0initialize opentelemetry tracing + propagation. safe to call multiple times.STRING
HIGHagents/test-agent/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/langgraph/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/crewai/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/langchain/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/claude-sdk/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/translator/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/common/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/doc-reader/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/assistant-agent/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/google-adk/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/summarizer/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/simulated-agent/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/openai/src/telemetry.py0best-effort auto-instrumentation for common libraries.STRING
HIGHagents/test-agent/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/langgraph/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/crewai/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/langchain/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/claude-sdk/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/translator/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/common/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/doc-reader/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/assistant-agent/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/google-adk/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/summarizer/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/simulated-agent/telemetry.py0try to instrument a library; skip silently if not installed.STRING
HIGHagents/openai/src/telemetry.py0try to instrument a library; skip silently if not installed.STRING
Empty Error Handlers16 hits · 80 pts
SeverityFileLineSnippetContext
HIGHagents/test-agent/src/telemetry.py97except (ImportError, Exception):CODE
HIGHagents/langgraph/src/telemetry.py112except (ImportError, Exception):CODE
HIGHagents/langgraph/src/telemetry.py144except Exception:CODE
HIGHagents/crewai/src/telemetry.py97except (ImportError, Exception):CODE
HIGHagents/langchain/src/telemetry.py99except (ImportError, Exception):CODE
HIGHagents/claude-sdk/src/telemetry.py97except (ImportError, Exception):CODE
HIGHagents/translator/src/telemetry.py112except (ImportError, Exception):CODE
HIGHagents/translator/src/telemetry.py144except Exception:CODE
HIGHagents/common/telemetry.py97except (ImportError, Exception):CODE
HIGHagents/doc-reader/telemetry.py102except (ImportError, Exception):CODE
HIGHagents/doc-reader/telemetry.py132except Exception:CODE
HIGHagents/assistant-agent/telemetry.py97except (ImportError, Exception):CODE
HIGHagents/google-adk/src/telemetry.py97except (ImportError, Exception):CODE
HIGHagents/summarizer/src/telemetry.py97except (ImportError, Exception):CODE
HIGHagents/simulated-agent/telemetry.py97except (ImportError, Exception):CODE
HIGHagents/openai/src/telemetry.py97except (ImportError, Exception):CODE
Modern AI Meta-Vocabulary12 hits · 36 pts
SeverityFileLineSnippetContext
MEDIUM⚡Cargo.toml93# ─── LLM orchestration ──────────────────────────────────────────────────────COMMENT
MEDIUMREADME.md617nasiko new openai my-agent && cd my-agent # scaffold from a templateCODE
MEDIUMdocs/AGENT_STORAGE.md83## Vector Store / RAGCOMMENT
MEDIUMcli/src/skill.rs422/// from a scaffold-owned file (e.g. `telemetry.py`, hard-imported byCOMMENT
MEDIUMcli/src/skill.rs445/// `id`s aren't consistently one or the other (the scaffold's own built-inCOMMENT
MEDIUMcli/src/commands/import.rs38/// (`commands::scaffold::pull_artifact`). A reference that already names a hostCOMMENT
MEDIUMcli/src/commands/build.rs94/// paths are checked — sources like `src/` always exist in a scaffold, andCOMMENT
MEDIUMcli/src/commands/skill.rs114 // otherwise a scaffold-owned file with a non-core name (e.g.COMMENT
MEDIUMcli/src/commands/dev.rs411 // what the scaffold's README and .env.example set up.COMMENT
MEDIUMcli/src/commands/scaffold.rs88/// Non-interactive: scaffold from a named template or registry artifact.COMMENT
MEDIUMcli/src/commands/scaffold.rs331/// say) out of the scaffold. `None` resolves the newest published version.COMMENT
MEDIUMreact-agent/Cargo.toml7# LLM orchestrationCOMMENT
Modern Structural Boilerplate32 hits · 32 pts
SeverityFileLineSnippetContext
LOWagents/test-agent/src/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/langgraph/src/telemetry.py16logger = logging.getLogger(__name__)CODE
LOWagents/langgraph/src/agent_executor.py18logger = logging.getLogger(__name__)CODE
LOWagents/langgraph/src/__main__.py31logger = logging.getLogger(__name__)CODE
LOWagents/crewai/src/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/crewai/src/agent.py28logger = logging.getLogger(__name__)CODE
LOWagents/crewai/src/__main__.py40logger = logging.getLogger(__name__)CODE
LOWagents/langchain/src/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/langchain/src/agent_executor.py12logger = logging.getLogger(__name__)CODE
LOWagents/langchain/src/__main__.py31logger = logging.getLogger(__name__)CODE
LOWagents/claude-sdk/src/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/claude-sdk/src/agent_executor.py12logger = logging.getLogger(__name__)CODE
LOWagents/claude-sdk/src/__main__.py31logger = logging.getLogger(__name__)CODE
LOWagents/translator/src/telemetry.py16logger = logging.getLogger(__name__)CODE
LOWagents/translator/src/agent_executor.py22logger = logging.getLogger(__name__)CODE
LOWagents/translator/src/__main__.py30logger = logging.getLogger(__name__)CODE
LOWagents/translator/src/toolset.py12logger = logging.getLogger(__name__)CODE
LOWagents/common/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/doc-reader/telemetry.py16logger = logging.getLogger(__name__)CODE
LOWagents/doc-reader/main.py33logger = logging.getLogger(__name__)CODE
LOWagents/assistant-agent/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/assistant-agent/main.py13logger = logging.getLogger(__name__)CODE
LOWagents/google-adk/src/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/google-adk/src/agent_executor.py12logger = logging.getLogger(__name__)CODE
LOWagents/google-adk/src/__main__.py32logger = logging.getLogger(__name__)CODE
LOWagents/summarizer/src/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/summarizer/src/agent_executor.py17logger = logging.getLogger(__name__)CODE
LOWagents/summarizer/src/__main__.py29logger = logging.getLogger(__name__)CODE
LOWagents/simulated-agent/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/openai/src/telemetry.py15logger = logging.getLogger(__name__)CODE
LOWagents/openai/src/agent_executor.py18logger = logging.getLogger(__name__)CODE
LOWagents/openai/src/__main__.py34logger = logging.getLogger(__name__)CODE
Hyper-Verbose Identifiers31 hits · 31 pts
SeverityFileLineSnippetContext
LOWui/common/src/test/intersection.ts38export function installIntersectionObserver() {CODE
LOW…mon/src/features/tokenops/TokenopsPage.window.test.tsx21function restoreClockAndVisibility() {CODE
LOWui/common/src/components/charts/indicator-fade.ts28export function indicatorFadeGradientStops(CODE
LOWui/common/src/components/charts/motion-utils.ts19export function springOptionsFromTransition(CODE
LOWui/common/src/components/charts/series-path-utils.ts28export function interpolateSeriesPathPoints(CODE
LOWui/common/src/components/charts/series-path-utils.ts81export function seriesPathTransitionSignature({CODE
LOW…/src/components/charts/generate-chart-skeleton-data.ts14export function generateChartSkeletonData(CODE
LOW…/src/components/charts/generate-chart-skeleton-data.ts32export function generateChartSkeletonFromTarget(CODE
LOW…/src/components/charts/use-chart-phase-orchestrator.ts22export function useChartPhaseOrchestrator({CODE
LOWui/common/src/components/charts/series-bar-layout.ts46export function computeSeriesBarRevealClipPadding(input: {CODE
LOWui/common/src/components/charts/projection-config.ts37export function extractProjectionLineConfigs(children: ReactNode): ProjectionLineConfig[] {CODE
LOWui/common/src/components/charts/projection-config.ts102export function mergeProjectionXDomainMax(CODE
LOW…ommon/src/components/charts/reference-area-geometry.ts116export function resolveReferenceDataRange(CODE
LOWui/common/src/components/charts/loading-sweep.tsx76function generateEasedGradientStops(steps = 17, minOpacity = 0.05, maxOpacity = 0.9) {CODE
LOWui/common/src/components/charts/series-marker-extent.ts3export function getSeriesMarkerVisualExtent(CODE
LOWui/common/src/components/charts/projection-utils.ts186export function computeProjectionAnchorTangentSlope(CODE
LOWui/common/src/components/charts/projection-utils.ts221export function buildHorizontalTangentBezierPath(CODE
LOW…mon/src/components/charts/series-dash-tail-overlay.tsx21function SeriesDashTailOverlayImpl({CODE
LOWui/common/src/components/charts/line-loading-timing.ts18export function resolveLineLoadingPulseMode(phase: ChartPhase): LineLoadingPulseMode | null {CODE
LOWui/common/src/components/charts/chart-defs.ts3export function getChartChildComponentName(child: ReactElement): string {CODE
LOWui/common/src/components/charts/composed-chart.tsx137function computeComposedYScaleDomainMax(CODE
LOW…/common/src/components/charts/reference-area-config.ts28export function extractReferenceAreaConfigs(children: ReactNode): ReferenceAreaConfig[] {CODE
LOWui/common/src/components/charts/fade-edges.ts44export function viewportFadeGradientAttrs(innerWidth: number) {CODE
LOW…ponents/charts/reference-area-registration-context.tsx14export function useReferenceAreaRegistration(): ReferenceAreaRegistrationContextValue | null {CODE
LOWui/common/src/components/charts/series-markers.tsx243function SeriesMarkersActiveHighlight({CODE
LOWui/common/src/components/charts/x-axis.tsx220function smallestGapEdgePreference(indices: number[]): number {CODE
LOWui/common/src/components/charts/x-axis.tsx312function selectEvenlySpacedIndices(CODE
LOWui/common/src/components/charts/x-axis.tsx480function appendProjectionTailTicks(CODE
LOWui/common/src/components/charts/y-domain-utils.ts42export function isReferenceAreaVisiblePhase(phase: ChartPhase): boolean {CODE
LOWui/common/src/components/charts/y-domain-utils.ts46export function resolveAnimatedYDestinationDomains(CODE
LOWagents/doc-reader/main.py36def extract_files_from_message(message) -> list[dict]:CODE
Excessive Try-Catch Wrapping28 hits · 30 pts
SeverityFileLineSnippetContext
LOWagents/langgraph/src/telemetry.py144 except Exception:CODE
LOWagents/langgraph/src/telemetry.py150 except Exception:CODE
LOWagents/langgraph/src/agent_executor.py78 except Exception as e:CODE
LOWagents/langgraph/src/test_client.py68 except Exception as e_extended:CODE
LOWagents/langgraph/src/test_client.py79 except Exception as e:CODE
LOWagents/crewai/src/agent_executor.py39 except Exception as e:CODE
MEDIUMagents/crewai/src/agent_executor.py40 print("Error invoking agent: %s", e)CODE
LOWagents/crewai/src/agent.py80 except Exception:CODE
LOWagents/crewai/src/agent.py89 except Exception:CODE
LOWagents/crewai/src/agent.py103 except Exception as e:CODE
LOWagents/crewai/src/agent.py127 except Exception as e:CODE
LOWagents/crewai/src/agent.py200 except Exception:CODE
MEDIUMagents/crewai/src/agent.py192def extract_artifact_file_id(self, query):CODE
LOWagents/crewai/src/__main__.py115 except Exception as e:CODE
LOWagents/langchain/src/agent_executor.py47 except Exception as e:CODE
LOWagents/claude-sdk/src/agent_executor.py47 except Exception as e:CODE
LOWagents/translator/src/telemetry.py144 except Exception:CODE
LOWagents/translator/src/telemetry.py150 except Exception:CODE
LOWagents/translator/src/agent_executor.py209 except Exception as exc:CODE
LOWagents/translator/src/toolset.py58 except Exception:CODE
LOWagents/doc-reader/telemetry.py132 except Exception:CODE
LOWagents/doc-reader/telemetry.py138 except Exception:CODE
LOWagents/doc-reader/main.py116 except Exception as e:CODE
LOWagents/doc-reader/main.py144 except Exception:CODE
LOWagents/assistant-agent/main.py94 except Exception as e:CODE
LOWagents/assistant-agent/main.py212 except Exception as e:CODE
LOWagents/google-adk/src/agent_executor.py47 except Exception as e:CODE
LOWagents/openai/src/agent_executor.py57 except Exception as e:CODE
Fake / Example Data20 hits · 22 pts
SeverityFileLineSnippetContext
LOWui/docs/chat.md229`nasiko upload oss/agents/simulated-agent`, then its page's **Try it** or `/chat?agent=<its uuid>`. You see "Starting chCODE
LOW…src/test/__live__/ee/harnesses/harnesses.users-me.json28 "email": "admin@example.com",CODE
LOWui/common/src/test/__live__/ee/agents/agents.users.json68 "email": "admin@example.com",CODE
LOW…rc/test/__live__/oss/harnesses/harnesses.users-me.json28 "email": "admin@example.com",CODE
LOW…/common/src/test/__live__/oss/agents/agents.users.json32 "email": "admin@example.com",CODE
LOW…/src/test/__live__/oss/agents/agents.search-users.json31 "email": "admin@example.com",CODE
LOWui/common/src/test/__live__/oss/mcp/mcp.grants.json30 "email": "admin@example.com",CODE
LOWui/common/src/features/settings/SettingsPage.tsx213 placeholder={'placeholder' in c ? c.placeholder : undefined}CODE
LOWagents/langgraph/src/test_client.py57 auth_headers_dict = {"Authorization": "Bearer dummy-token-for-extended-card"}CODE
LOWagents/langchain/src/agent.py32 ("placeholder", "{agent_scratchpad}"),CODE
LOWagents/simulated-agent/main.py56 "lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod "CODE
LOWagents/simulated-agent/main.py56 "lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod "CODE
LOWserver/tests/github_routes.rs272 VALUES ($1, 'github', 'gh_12345', 'testuser', '{\"access_token\": \"fake_token\"}'::jsonb)"CODE
LOW⚡server/tests/coding_agent_telemetry.rs465 let metadata = event("placeholder", "turn-1", CapturePolicy::MetadataOnly);CODE
LOW⚡server/tests/coding_agent_telemetry.rs466 let missing = event("placeholder", "turn-2", CapturePolicy::Content);CODE
LOW⚡server/tests/coding_agent_telemetry.rs472 let mut titled = event("placeholder", "turn-3", CapturePolicy::Content);CODE
LOWbench-support/src/config.rs50 std::env::set_var("OPENAI_API_KEY", "bench-dummy-key");CODE
LOWbench-support/src/config.rs122 openai_api_key: Some("bench-dummy-key".into()),CODE
LOWgithub/tests/integration.rs559 .clone_to_archive("dummy-token", bad, "main")CODE
LOWgithub/tests/integration.rs588 .clone_to_archive("dummy-token", "owner/repo", bad)CODE
Verbosity Indicators10 hits · 18 pts
SeverityFileLineSnippetContext
LOWagents/repo-watch-agent/src/slack.rs61/// Step 2: POST the file's raw bytes to the pre-signed `upload_url`. No auth token here — theCOMMENT
LOWserver/src/auth/login.rs676 // Step 1: verify signature + expiryCOMMENT
LOWserver/src/auth/login.rs695 // Step 2: check revocation — same logic as require_auth so validate is consistent.COMMENT
LOWcli/src/commands/observe.rs687 // Step 1: fetch dashboard data to use as input.COMMENT
LOWcli/src/commands/observe.rs707 // Step 2: post to insights.COMMENT
LOW⚡gateway/src/auth.rs43 // Step 1: strip trust headers — no client may forge identityCOMMENT
LOW⚡gateway/src/auth.rs48 // Step 2: extract tokenCOMMENT
LOW⚡gateway/src/auth.rs53 // Step 3: validate signature + expiryCOMMENT
LOW⚡gateway/src/auth.rs59 // Step 4: revocation check — O(1) indexed lookup on token_hashCOMMENT
LOWgateway/src/auth.rs85 // Step 5: inject verified identityCOMMENT
Structural Annotation Overuse10 hits · 18 pts
SeverityFileLineSnippetContext
LOWagents/repo-watch-agent/src/slack.rs61/// Step 2: POST the file's raw bytes to the pre-signed `upload_url`. No auth token here — theCOMMENT
LOWserver/src/auth/login.rs676 // Step 1: verify signature + expiryCOMMENT
LOWserver/src/auth/login.rs695 // Step 2: check revocation — same logic as require_auth so validate is consistent.COMMENT
LOWcli/src/commands/observe.rs687 // Step 1: fetch dashboard data to use as input.COMMENT
LOWcli/src/commands/observe.rs707 // Step 2: post to insights.COMMENT
LOW⚡gateway/src/auth.rs43 // Step 1: strip trust headers — no client may forge identityCOMMENT
LOW⚡gateway/src/auth.rs48 // Step 2: extract tokenCOMMENT
LOW⚡gateway/src/auth.rs53 // Step 3: validate signature + expiryCOMMENT
LOW⚡gateway/src/auth.rs59 // Step 4: revocation check — O(1) indexed lookup on token_hashCOMMENT
LOWgateway/src/auth.rs85 // Step 5: inject verified identityCOMMENT
AI Slop Vocabulary4 hits · 11 pts
SeverityFileLineSnippetContext
MEDIUMui/package-lock.json13089 "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",CODE
MEDIUMui/common/src/features/router/errors.ts23// R-L1..R-L10: these match the server's text; error codes would make them robust.COMMENT
MEDIUMserver/src/catalog/import.rs491/// Meant to be quick and direct, not production-grade robust: unlike itsCOMMENT
MEDIUMbench-support/Cargo.toml19# For `S3Storage` — the bench harness builds the same object store the OSSCOMMENT
Deep Nesting2 hits · 2 pts
SeverityFileLineSnippetContext
LOWagents/langgraph/src/agent_executor.py25CODE
LOWagents/crewai/src/agent.py50CODE
Unused Imports2 hits · 2 pts
SeverityFileLineSnippetContext
LOWagents/google-adk/src/agent.py1CODE
LOWagents/summarizer/src/agent_executor.py3CODE
Overly Generic Function Names1 hit · 1 pts
SeverityFileLineSnippetContext
LOWui/common/public/mockServiceWorker.js124async function handleRequest(event, requestId, requestInterceptedAt) {CODE
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWagents/crewai/src/agent.py215CODE