2.3

Adjusted Signal

2.3

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

8.7K

Stars

PHP

Language

51.1K

Lines of Code

192

Files

101

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 9.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 88 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.0/100 · LOW

Are imports declared and package/API names verified? 13 finding(s).

Agent Over-Engineering Ratio 8.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 86 finding(s).

PR Review Velocity Impact 10.3/100 · LOW

Which changes need focused human review? 101 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 2MEDIUM 0LOW 99

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 101 distinct pattern matches across 4 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers86 hits · 94 pts

Severity	File	Line	Snippet	Context
LOW	js/zlib-1.3.2.js	1	async function Module(moduleArg={}){var moduleRtn;var Module=moduleArg;var ENVIRONMENT_IS_WEB=!!globalThis.window;var EN	CODE
LOW	js/privatebin.js	3052	function printDragAndDropFileNames(fileNames) {	CODE
LOW	js/privatebin.js	5710	function handleCopyLinkButtonClick() {	CODE
LOW	js/test/emailTemplateTest.js	27	function buildEmailDomWithShortUrl() {	CODE
LOW	tst/ModelTest.php	275	public function testCommentDuplicateOtherParent()	CODE
LOW	tst/ModelTest.php	308	public function testCommentNonexistentParent()	CODE
LOW	tst/ModelTest.php	417	public function testInvalidCommentDeletedPaste()	CODE
LOW	tst/ModelTest.php	499	public function testCommentWithDisabledVizhash()	CODE
LOW⚡	tst/FilterTest.php	8	public function testFilterMakesTimesHumanlyReadable()	CODE
LOW⚡	tst/FilterTest.php	16	public function testFilterFailTimesHumanlyReadable()	CODE
LOW⚡	tst/FilterTest.php	23	public function testFilterMakesSizesHumanlyReadable()	CODE
LOW	tst/MigrateTest.php	85	public function testDamagedSourcePasteIsPreserved()	CODE
LOW	tst/TemplateSwitcherTest.php	30	public function testSetAvailableTemplates()	CODE
LOW	tst/TemplateSwitcherTest.php	62	public function testGetAvailableTemplates()	CODE
LOW	tst/JsonApiTest.php	366	public function testShortenViaShlinkFailureHttp($baseUri)	CODE
LOW	tst/JsonApiTest.php	392	public function testShortenViaShlinkSuccessButMissingShortUrl($baseUri)	CODE
LOW	tst/JsonApiTest.php	437	public function testShortenViaYourlsFailure()	CODE
LOW	tst/JsonApiTest.php	454	public function testShortenViaShlinkFailure()	CODE
LOW	tst/AdministrationOptionsTest.php	17	public function testRejectsAmbiguousArguments($arguments)	CODE
LOW	tst/ControllerTest.php	80	public function testViewLanguageSelection()	CODE
LOW	tst/ControllerTest.php	100	public function testViewForceLanguageDefault()	CODE
LOW	tst/ControllerTest.php	121	public function testViewForceRegionalLanguageDefault()	CODE
LOW	tst/ControllerTest.php	222	public function testCreateInvalidTimelimit()	CODE
LOW	tst/ControllerTest.php	395	public function testCreateValidExpireWithDiscussion()	CODE
LOW	tst/ControllerTest.php	483	public function testCreateInvalidOpenDiscussion()	CODE
LOW	tst/ControllerTest.php	634	public function testCreateCommentDiscussionDisabled()	CODE
LOW	tst/ControllerTest.php	661	public function testCreateCommentInvalidPaste()	CODE
LOW	tst/ControllerTest.php	685	public function testCreateDuplicateComment()	CODE
LOW	tst/ControllerTest.php	928	public function testDeleteInvalidBurnAfterReading()	CODE
LOW	tst/RequestTest.php	208	public function testPostInvalidRoutingParameters($parameters)	CODE
LOW	tst/RequestTest.php	221	public function provideInvalidRoutingParameters()	CODE
LOW	tst/RequestTest.php	247	public function testReadWithXhtmlNegotiation()	CODE
LOW	tst/RequestTest.php	261	public function testApiReadWithNegotiation()	CODE
LOW	tst/RequestTest.php	275	public function testReadWithFailedNegotiation()	CODE
LOW	tst/Bootstrap.php	350	public static function updateSubresourceIntegrity(): void	CODE
LOW	tst/ViewTest.php	81	public function testTemplateRendersCorrectly()	CODE
LOW	tst/AdministrationEmptyDirsTest.php	33	public function testEmptyDirsSupportsStoragePathsWithSpaces()	CODE
LOW⚡	tst/ConfigurationTest.php	43	public function testHandleFreshConfigFile()	CODE
LOW⚡	tst/ConfigurationTest.php	50	public function testHandleMissingConfigFile()	CODE
LOW⚡	tst/ConfigurationTest.php	59	public function testHandleBlankConfigFile()	CODE
LOW⚡	tst/ConfigurationTest.php	67	public function testHandleMinimalConfigFile()	CODE
LOW	tst/MigrateWriteFailureTest.php	43	public function testSourceIsPreservedWhenDestinationWriteFails()	CODE
LOW	tst/MigrateWriteFailureTest.php	58	public function testSourceIsPreservedWhenDestinationCommentWriteFails()	CODE
LOW	tst/MigrateForceOverwriteTest.php	42	public function testForceReplacesPasteAndDiscussion()	CODE
LOW⚡	tst/I18nTest.php	53	public function testCookieLanguageDeDetection()	CODE
LOW⚡	tst/I18nTest.php	63	public function testBrowserLanguageDeDetection()	CODE
LOW⚡	tst/I18nTest.php	73	public function testBrowserLanguageFrDetection()	CODE
LOW⚡	tst/I18nTest.php	83	public function testEqualQualityPreservesBrowserOrder()	CODE
LOW⚡	tst/I18nTest.php	91	public function testBulgarianMonthExpirationTranslation()	CODE
LOW	tst/I18nTest.php	106	public function testBrowserLanguageLtDetection()	CODE
LOW⚡	tst/I18nTest.php	120	public function testBrowserLanguageNoDetection()	CODE
LOW⚡	tst/I18nTest.php	130	public function testBrowserLanguageOcDetection()	CODE
LOW⚡	tst/I18nTest.php	140	public function testBrowserLanguageZhDetection()	CODE
LOW⚡	tst/I18nTest.php	150	public function testBrowserLanguageZhHantDetection()	CODE
LOW	tst/I18nTest.php	171	public function testBrowserLanguagePlDetection()	CODE
LOW	tst/I18nTest.php	186	public function testBrowserLanguageRuDetection()	CODE
LOW	tst/I18nTest.php	197	public function testBrowserLanguageSlDetection()	CODE
LOW	tst/I18nTest.php	212	public function testBrowserLanguageCsDetection()	CODE
LOW	tst/I18nTest.php	223	public function testInvalidBrowserLanguageQualityIsIgnored()	CODE
LOW	tst/I18nTest.php	229	public function testBrowserLanguageAnyDetection()	CODE
26 more matches not shown…

Fake / Example Data11 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW	js/privatebin.js	2812	placeholder = document.getElementById('placeholder');	CODE
LOW	js/test/PasteViewer.js	11	'<div id="placeholder" class="hidden">+++ no document text +++</div>' +	CODE
LOW	js/test/PasteViewer.js	48	document.getElementById('placeholder').classList.contains('hidden') &&	CODE
LOW	js/test/PasteViewer.js	69	!document.getElementById('placeholder').classList.contains('hidden') &&	CODE
LOW	js/test/PasteViewer.js	89	document.getElementById('placeholder').classList.contains('hidden') &&	CODE
LOW	js/test/PasteViewer.js	145	'<div id="placeholder" class="hidden">+++ no document text ' +	CODE
LOW	js/test/CopyToClipboard.js	23	'<div id="placeholder" class="hidden">+++ no document text ' +	CODE
LOW	js/test/CopyToClipboard.js	65	'<div id="placeholder">+++ no document text ' +	CODE
LOW	js/test/Controller.js	30	<div id="placeholder" class="hidden"></div>	CODE
LOW	js/test/Editor.js	24	'<div id="placeholder" class="hidden">+++ no document text +++</div>' +	CODE
LOW	tpl/bootstrap5.php	480	<div id="placeholder" class="col-md-12 hidden"><?php echo I18n::_('+++ no document text +++'); ?></div>	CODE

Magic Placeholder Names2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	cfg/conf.sample.php	283	; apikey = "your_api_key"	CODE
HIGH	cfg/conf.sample.php	294	; apikey = "your_api_key"	CODE

Over-Commented Block2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	robots.txt	1	# "A robots.txt a day keeps the robots away."	COMMENT
LOW	.github/workflows/codacy-analysis.yml	41	with:	COMMENT

PrivateBin/PrivateBin

Open-Source Code Quality, Security and Technical Debt Review