1.3

Adjusted Signal

1.3

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

4.3K

Stars

HTML

Language

86.4K

Lines of Code

353

Files

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 40 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 2 finding(s).

Agent Over-Engineering Ratio 4.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 79 finding(s).

PR Review Velocity Impact 7.3/100 · LOW

Which changes need focused human review? 95 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 16LOW 78

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 95 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Excessive Try-Catch Wrapping53 hits · 65 pts

Severity	File	Line	Snippet	Context
LOW	build.py	22	except Exception as e:	CODE
LOW	events_update.py	89	except Exception as e:	CODE
LOW	events_update.py	154	except Exception as e:	CODE
LOW	events_update.py	298	except Exception as e:	CODE
LOW	events_update.py	308	except Exception as e:	CODE
MEDIUM	events_update.py	231	def _cn_ical_event(event):	CODE
LOW	admin/deployer.py	162	except Exception as e:	CODE
LOW	admin/deployer.py	193	except Exception as e:	CODE
MEDIUM	admin/deployer.py	154	def runner():	CODE
LOW	admin/app.py	165	except Exception as e:	CODE
LOW	admin/app.py	203	except Exception as e:	CODE
LOW	admin/app.py	263	except Exception as e:	CODE
LOW	admin/app.py	330	except Exception as e:	CODE
MEDIUM	admin/app.py	99	def events_list():	CODE
MEDIUM	admin/app.py	174	def inbox_list():	CODE
MEDIUM	admin/app.py	257	def tools_get():	CODE
MEDIUM	admin/app.py	293	def docs_file():	CODE
LOW	admin/ctftime.py	37	except Exception as e:	CODE
LOW	collector/app.py	69	except Exception as e:	CODE
LOW	collector/app.py	79	except Exception:	CODE
LOW	collector/app.py	99	except Exception:	CODE
MEDIUM	collector/app.py	46	def _send():	CODE
MEDIUM	collector/app.py	75	def _load():	CODE
MEDIUM	collector/app.py	95	def _json_body(self):	CODE
LOW	docs/hc-web/php_unser.md	1497	except Exception as e:	STRING
LOW	docs/hc-web/sql_injection.md	2380	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2400	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2404	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2423	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2438	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2458	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2462	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2480	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2495	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2515	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2519	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2538	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2553	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2573	except Exception:	CODE
LOW	docs/hc-web/sql_injection.md	2577	except Exception:	CODE
LOW	docs/hc-web/any_file_read.md	270	except Exception as e:	CODE
LOW	docs/hc-web/php_code_audit.md	761	except Exception as e:	STRING
LOW	docs/hc-web/py_unser.md	284	except Exception:	CODE
LOW	docs/hc-misc/file_stego.md	145	except Exception as e:	CODE
LOW	docs/hc-misc/file_stego.md	399	except Exception as e:	CODE
MEDIUM	docs/hc-misc/file_stego.md	400	print(f"Error processing line: {e}")	CODE
LOW	docs/hc-misc/file_stego.md	1398	except Exception as e:	CODE
LOW	docs/hc-misc/file_stego.md	1404	except Exception as e:	CODE
LOW	docs/hc-misc/file_stego.md	1462	except Exception as e:	CODE
MEDIUM	docs/hc-misc/file_stego.md	120	def decode_file(input_file, output_file):	CODE
MEDIUM	docs/hc-misc/file_stego.md	1395	def try_py7zr_extract(path, extract_to):	CODE
LOW	docs/hc-misc/stego.md	732	except Exception as e:	CODE
MEDIUM	docs/hc-misc/stego.md	711	def read_hex_from_file(file_path):	CODE

Hyper-Verbose Identifiers26 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	docs/hc-misc/Encode_extra.md	318	def generate_qrcode_from_binary(binary_str, img_size):	CODE
LOW	docs/javascripts/FullCalendar.js	599	function greatestDurationDenominator(dur) {	CODE
LOW	docs/javascripts/FullCalendar.js	1076	function buildNativeFormattingFunc(standardDateProps, extendedSettings, context) {	CODE
LOW	docs/javascripts/FullCalendar.js	1185	function computeMarkerDiffSeverity(d0, d1, ca) {	CODE
LOW	docs/javascripts/FullCalendar.js	1200	function computePartialFormattingOptions(options, biggestUnit) {	CODE
LOW	docs/javascripts/FullCalendar.js	1256	function createVerboseFormattingArg(start, end, context, betterDefaultSeparator) {	CODE
LOW	docs/javascripts/FullCalendar.js	2509	function hasCustomRenderingHandler(generatorName, options) {	CODE
LOW	docs/javascripts/FullCalendar.js	3753	function buildDateSpanApiWithContext(dateSpan, context) {	CODE
LOW	docs/javascripts/FullCalendar.js	3777	function applyMutationToEventStore(eventStore, eventConfigBase, mutation, context) {	CODE
LOW	docs/javascripts/FullCalendar.js	3813	function applyMutationToEventInstance(eventInstance, eventDef, // must first be modified by applyMutationToEventDef	CODE
LOW	docs/javascripts/FullCalendar.js	4577	function buildRangeApiWithTimeZone(range, dateEnv, omitTime) {	CODE
LOW	docs/javascripts/FullCalendar.js	4673	function computeCanVGrowWithinCell() {	CODE
LOW	docs/javascripts/FullCalendar.js	4751	function interactionSettingsToStore(settings) {	CODE
LOW	docs/javascripts/FullCalendar.js	5404	function computeIsRtlScrollbarOnLeft() {	CODE
LOW	docs/javascripts/FullCalendar.js	5442	function computeScrollbarWidthsForEl(el) {	CODE
LOW	docs/javascripts/FullCalendar.js	6053	function computeFallbackHeaderFormat(datesRepDistinctDays, dayCnt) {	CODE
LOW	docs/javascripts/FullCalendar.js	6552	function isDateSelectionPropsValid(state, context, dateSpanMeta, filterConfig) {	CODE
LOW	docs/javascripts/FullCalendar.js	6785	function getSectionHasLiquidHeight(props, sectionConfig) {	CODE
LOW	docs/javascripts/FullCalendar.js	8158	function reduceDynamicOptionOverrides(dynamicOptionOverrides, action) {	CODE
LOW	docs/javascripts/FullCalendar.js	8222	function reduceEventSourcesNewTimeZone(eventSources, dateProfile, context) {	CODE
LOW	docs/javascripts/FullCalendar.js	8226	function computeEventSourcesLoading(eventSources) {	CODE
LOW	docs/javascripts/FullCalendar.js	8878	class CalendarDataManager {	CODE
LOW	docs/javascripts/FullCalendar.js	9258	function buildDateProfileGenerator(props) {	CODE
LOW	docs/javascripts/FullCalendar.js	9310	function parseContextBusinessHours(calendarContext) {	CODE
LOW	docs/javascripts/FullCalendar.js	9686	function buildViewPropTransformers(theClasses) {	CODE
LOW	docs/javascripts/FullCalendar.js	10877	function buildDatePointApiWithContext(dateSpan, context) {	CODE

AI Slop Vocabulary3 hits · 7 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/javascripts/FullCalendar.js	12585	// Essentially, once you compute an element's height, never null-out.	COMMENT
MEDIUM	docs/javascripts/FullCalendar.js	93	var css_248z$4 = ":root{--fc-small-font-size:.85em;--fc-page-bg-color:#fff;--fc-neutral-bg-color:hsla(0,0%,82%,.3);-	CODE
MEDIUM	docs/javascripts/FullCalendar.js	1080	standardDateProps.timeZone = 'UTC'; // we leverage the only guaranteed timeZone for our UTC markers	CODE

Structural Annotation Overuse3 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW⚡	docs/hc-web/rce.md	2084	// Step 1: 触发 UAF（比如某类反序列化触发）	COMMENT
LOW⚡	docs/hc-web/rce.md	2087	// Step 2: 用我们控制的数据重叠释放的内存	COMMENT
LOW⚡	docs/hc-web/rce.md	2092	// Step 3: 设置伪函数结构并执行	COMMENT

Cross-Language Confusion1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	admin/app.py	341	result = repo_sync.push(CONFIG["proxy"])	CODE

Over-Commented Block5 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	admin/static/index.html	81	#login-card .logo svg { width: 20px; height: 20px; }	COMMENT
LOW	docs/hc-misc/file.md	221	#### stegsolve	COMMENT
LOW	docs/hc-skill/pwn/format-string.md	101	```python	COMMENT
LOW	docs/javascripts/FullCalendar.js	2841	// an object with optional start and end properties.	COMMENT
LOW	docs/hc-blockchain/Move/0x02.md	1	## 神奇的时钟	COMMENT

Deep Nesting3 hits · 3 pts

Severity	File	Line	Context
LOW	admin/app.py	336	CODE
LOW	admin/ctftime.py	61	CODE
LOW	admin/ctftime.py	116	CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	resource/SCRIPT/base64_steg/encode.py	1		CODE

ProbiusOfficial/Hello-CTF

Open-Source Code Quality, Security and Technical Debt Review