0.7

Adjusted Signal

0.7

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

51.1K

Stars

Language

661.3K

Lines of Code

2.6K

Files

391

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 353 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.6/100 · LOW

Are imports declared and package/API names verified? 35 finding(s).

Agent Over-Engineering Ratio 2.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 293 finding(s).

PR Review Velocity Impact 3.4/100 · LOW

Which changes need focused human review? 391 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 13MEDIUM 3LOW 375

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 391 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers290 hits · 293 pts

Severity	File	Line	Snippet	Context
LOW	plugins/tasks/sunoapi/plugin.js	96	function validateAndNormalize(ctx) {	CODE
LOW	web/src/context/theme-customization-provider.tsx	89	export function ThemeCustomizationProvider(props: {	CODE
LOW	…rc/features/usage-logs/components/usage-logs-table.tsx	66	function getColumnVisibilityStorageKey(	CODE
LOW	…age-logs/components/compact-date-time-range-picker.tsx	50	export function CompactDateTimeRangePicker({	CODE
LOW	web/src/features/usage-logs/audit/lib/audit-details.ts	204	function describeAccessTokenScopes(	CODE
LOW	web/src/features/usage-logs/lib/task-artifacts.ts	163	export function parseTaskArtifactsResponse(	CODE
LOW	web/src/features/usage-logs/lib/format.ts	63	export function getParamOverrideActionLabel(	CODE
LOW	web/src/features/usage-logs/lib/format.ts	173	export function getReasoningEffortVariant(	CODE
LOW	web/src/features/usage-logs/lib/format.ts	206	export function getFirstResponseTimeColor(	CODE
LOW	…eatures/playground/components/chat/playground-chat.tsx	92	function handleToggleMessageSource(message: MessageType): void {	CODE
LOW	…ground/components/input/playground-parameter-panel.tsx	74	function PlaygroundParameterContent({	CODE
LOW	…atures/playground/hooks/use-playground-conversation.ts	37	export function usePlaygroundConversation({	CODE
LOW	web/src/features/playground/hooks/use-stream-request.ts	59	export function createStreamRequestController(	CODE
LOW	…ures/playground/lib/options/playground-option-utils.ts	60	export function getOptionLoadErrorMessage(	CODE
LOW	…/src/features/playground/lib/input/input-tool-utils.ts	49	export function getAttachmentActionNotice(action: string): InputToolNotice {	CODE
LOW	…b/src/features/playground/lib/message/message-utils.ts	63	export function updateCurrentVersionContent(	CODE
LOW	…b/src/features/playground/lib/message/message-utils.ts	92	export function createLoadingAssistantMessage(	CODE
LOW	…eatures/playground/lib/message/message-action-utils.ts	43	export function getMessageActionsVisibilityClass(	CODE
LOW	…eatures/playground/lib/message/message-update-utils.ts	27	export function updateAssistantMessageWithError(	CODE
LOW	…eatures/playground/lib/message/message-update-utils.ts	51	export function updateLastAssistantMessage(	CODE
LOW	…s/playground/lib/message/conversation-message-utils.ts	70	export function createRegeneratedMessages(	CODE
LOW	…s/playground/lib/message/conversation-message-utils.ts	164	export function getChatMessageRenderState(	CODE
LOW	…ures/playground/lib/message/message-streaming-utils.ts	165	export function isAssistantMessagePending(message: Message): boolean {	CODE
LOW	…ures/playground/lib/message/message-streaming-utils.ts	172	export function isPendingAssistantMessage(message?: Message): boolean {	CODE
LOW	…ures/playground/lib/message/message-streaming-utils.ts	187	export function applyChatCompletionChoice(	CODE
LOW	…ures/playground/lib/message/message-streaming-utils.ts	200	export function applyChatCompletionResponse(	CODE
LOW	…eatures/playground/lib/state/playground-state-utils.ts	31	export function getInitialPlaygroundConfig(): PlaygroundConfig {	CODE
LOW	…eatures/playground/lib/state/playground-state-utils.ts	35	export function getInitialParameterEnabled(): ParameterEnabled {	CODE
LOW	web/src/features/playground/lib/storage/storage.ts	171	function findLastRepeatedSectionRunStart(text: string): number {	CODE
LOW	web/src/features/playground/lib/storage/storage.ts	199	function collapseRepeatedSectionSnapshots(text: string): string {	CODE
LOW	web/src/features/playground/lib/storage/storage.ts	212	function normalizeStoredMessageForLoad(message: Message): Message {	CODE
LOW	web/src/features/playground/lib/storage/storage.ts	273	function trimMessagesByContentSize(messages: Message[]): Message[] {	CODE
LOW	…c/features/playground/lib/streaming/payload-builder.ts	30	export function buildChatCompletionPayload(	CODE
LOW	…/src/features/playground/lib/streaming/stream-utils.ts	67	export function parseStreamMessageUpdates(data: string): StreamMessageUpdate[] {	CODE
LOW	…res/playground/lib/parameters/playground-parameters.ts	95	export function normalizeParameterNumberValue(	CODE
LOW	…res/playground/lib/parameters/playground-parameters.ts	120	export function getParameterControlValueText(	CODE
LOW	web/src/features/security/lib/access-token-catalog.ts	31	export function accessTokenPermissionGroups(	CODE
LOW	…/src/features/auth/sign-up/components/sign-up-form.tsx	188	async function handleSendVerificationCode() {	CODE
LOW	web/src/features/auth/passkey/api.ts	50	export function finishPasskeyRegistration(	CODE
LOW	web/src/features/auth/passkey/api.ts	127	export function finishPasskeyVerification(	CODE
LOW	…es/auth/passkey/__tests__/domain-verification.test.tsx	106	function DomainVerificationHarness(props: {	CODE
LOW	web/src/features/auth/secure-verification/api.ts	113	export async function getLoginVerificationRequirements(	CODE
LOW	web/src/features/auth/lib/password-encryption.ts	38	export function clearPasswordEncryptionCache(): void {	CODE
LOW	web/src/features/auth/lib/oauth.ts	35	export function getAvailableOAuthProviders(	CODE
LOW	web/src/features/auth/lib/oauth-callback-mode.ts	22	export function rememberOAuthLoginRedirect(	CODE
LOW	web/src/features/auth/lib/oauth-callback-mode.ts	34	export function consumeOAuthLoginRedirect(state: string): string \| null {	CODE
LOW	web/src/features/auth/lib/oauth-bind-window.ts	56	export function parseTelegramBindCallback(	CODE
LOW	web/src/features/auth/lib/oauth-bind-window.ts	98	export function startOAuthBindResponseDeadline(	CODE
LOW	web/src/features/auth/lib/telegram-login.ts	40	export function pickTelegramAuthorization(	CODE
LOW	web/src/features/models/api.ts	325	export async function testDeploymentConnectionWithKey(	CODE
LOW	web/src/features/models/api.ts	406	export async function getDeploymentContainerDetails(	CODE
LOW	web/src/features/models/api.ts	625	export async function checkClusterNameAvailability(name: string): Promise<{	CODE
LOW	web/src/features/models/constants.ts	106	export function getDeploymentStatusOptions(t: TFunction) {	CODE
LOW	web/src/features/models/constants.ts	118	export function getDeploymentStatusConfig(t: TFunction): Record<	CODE
LOW	…components/dialogs/prefill-group-management-dialog.tsx	75	export function PrefillGroupManagementDialog({	CODE
LOW	…features/models/hooks/use-model-deployment-settings.ts	55	export function useModelDeploymentSettings() {	CODE
LOW	web/src/features/models/lib/model-form.ts	86	export function transformModelToFormDefaults(model: Model): ModelFormValues {	CODE
LOW	web/src/features/models/lib/model-form.ts	106	export function transformFormDataToModelPayload(	CODE
LOW	web/src/features/models/lib/deployments-utils.ts	19	export function normalizeDeploymentStatus(status: unknown) {	CODE
LOW	web/src/features/subscriptions/api.ts	93	export async function invalidateUserSubscription(	CODE
230 more matches not shown…

Magic Placeholder Names12 hits · 60 pts

Severity	File	Line	Snippet	Context
HIGH	…/src/features/pricing/components/model-details-api.tsx	122	` api_key="<YOUR_API_KEY>",`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	122	` api_key="<YOUR_API_KEY>",`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	189	` api_key="<YOUR_API_KEY>",`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	189	` api_key="<YOUR_API_KEY>",`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	259	`genai.configure(api_key="<YOUR_API_KEY>")`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	259	`genai.configure(api_key="<YOUR_API_KEY>")`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	309	`client = OpenAI(base_url="${ctx.baseUrl}/v1", api_key="<YOUR_API_KEY>")`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	309	`client = OpenAI(base_url="${ctx.baseUrl}/v1", api_key="<YOUR_API_KEY>")`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	375	`client = OpenAI(base_url="${ctx.baseUrl}/v1", api_key="<YOUR_API_KEY>")`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	375	`client = OpenAI(base_url="${ctx.baseUrl}/v1", api_key="<YOUR_API_KEY>")`,	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	543	{'<YOUR_API_KEY>'}	CODE
HIGH	…/src/features/pricing/components/model-details-api.tsx	543	{'<YOUR_API_KEY>'}	CODE

Over-Commented Block51 hits · 51 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.dev.yml	1	# Frontend Development - Backend built from local source	COMMENT
LOW	docker-compose.yml	1	# New-API Docker Compose Configuration	COMMENT
LOW	docker-compose.yml	41	# - RELAY_IDLE_CONN_TIMEOUT=90 # Relay HTTP 客户端空闲连接超时时间，单位秒，默认跟随 Go 标准库，设置为0表示不限制 (Relay HTTP client idle keep-ali	COMMENT
LOW	docker-compose.yml	81	environment:	COMMENT
LOW	docker-compose.yml	101	# networks:	COMMENT
LOW	plugins/tasks/alibaba/plugin.js	21	"wanx2.1-t2v-turbo": { kind: "size", resolutions: ["480P", "720P"], defaultResolution: "720P", durations: [5] },	COMMENT
LOW	web/src/features/system-settings/models/constants.ts	21	// ---------------------------------------------------------------------------	COMMENT
LOW	web/src/features/pricing/lib/mock-stats.ts	21	hashStringToSeed,	COMMENT
LOW	controller/topup_stripe.go	341	}	COMMENT
LOW	common/database.go	41	return logDatabaseType == databaseType	COMMENT
LOW	common/database.go	61	// front, so writers serialize through the busy timeout instead of dying on	COMMENT
LOW	relaykit/dto/channel_settings.go	21	SystemPrompt string `json:"system_prompt,omitempty"`	COMMENT
LOW	relaykit/dto/openai_request.go	1241	// ParseInput parses the Responses API `input` field into a normalized slice of MediaInput.	COMMENT
LOW	relaykit/relayconvert/convmeta/options.go	21	// surface, which accepts extra fields (reasoning config, cache_control on	COMMENT
LOW	relaykit/relayconvert/convmeta/options.go	41		COMMENT
LOW	relaykit/relayconvert/convmeta/options.go	61	// every request.	COMMENT
LOW	relaykit/relayconvert/convmeta/websearch.go	61	// instead.	COMMENT
LOW	relaykit/relayconvert/convmeta/meta.go	41	// instance must be returned for the lifetime of one streaming session; a	COMMENT
LOW	…ayconvert/internal/oai_chat/to_claude_messages_resp.go	121	var claudeResponses []*dto.ClaudeResponse	COMMENT
LOW	relaykit/relayconvert/kitutil/mask.go	81	for _, key := range slices.Sorted(maps.Keys(values)) {	COMMENT
LOW	model/task.go	121	TokenId int `json:"token_id,omitempty"` // 令牌 ID，用于令牌额度退款	COMMENT
LOW	service/error.go	41	// common.SysLog(fmt.Sprintf("error: %s", text))	COMMENT
LOW	service/tiered_settle.go	21	// expression". Sub-categories (cache, image, audio) are only subtracted	COMMENT
LOW	service/auth_session.go	361	// script-readable marker. The Refresh Cookie itself is HttpOnly and scoped to	COMMENT
LOW	service/channel_select.go	81	//	COMMENT
LOW	service/channel_select.go	101	// 示例流程（2个分组，每个有2个优先级，RetryTimes=3）：	COMMENT
LOW	setting/billing_setting/builtin_billing.go	21	// https://developers.openai.com/api/docs/pricing (Standard, 2026-10-22):	COMMENT
LOW	relay/channel/adapter.go	41		COMMENT
LOW	relay/channel/claude/dto.go	1	package claude	COMMENT
LOW	relay/channel/claude/dto.go	21	// Input any `json:"input,omitempty"`	COMMENT
LOW	relay/channel/claude/dto.go	41	//}	COMMENT
LOW	relay/channel/claude/dto.go	61	// Stream bool `json:"stream,omitempty"`	COMMENT
LOW	relay/channel/claude/dto.go	81	// Completion string `json:"completion"`	COMMENT
LOW	relay/channel/jimeng/sign.go	21	)	COMMENT
LOW	relay/channel/volcengine/adaptor.go	121	// for key, values := range formData {	COMMENT
LOW	relay/channel/volcengine/adaptor.go	141	// for fieldName, files := range c.Request.MultipartForm.File {	COMMENT
LOW	relay/channel/volcengine/adaptor.go	161	// defer file.Close()	COMMENT
LOW	relay/channel/volcengine/adaptor.go	181	// }	COMMENT
LOW	relay/channel/volcengine/adaptor.go	201	//	COMMENT
LOW	relay/channel/xai/dto.go	21	// Size string `json:"size,omitempty"`	COMMENT
LOW	relay/channel/zhipu_4v/dto.go	1	package zhipu_4v	COMMENT
LOW	relay/channel/zhipu_4v/dto.go	21	// Temperature float64 `json:"temperature,omitempty"`	COMMENT
LOW	relay/channel/task/jsplugin/submit_stream.go	21	// arrives, and frameLimit bounds each event.	COMMENT
LOW	relay/channel/tencent/dto.go	1	package tencent	COMMENT
LOW	relay/channel/tencent/dto.go	21	Messages []*TencentMessage `json:"Messages"`	COMMENT
LOW	relay/channel/ali/adaptor.go	141	// info.IsStream = true	COMMENT
LOW	relay/channel/ali/web_search.go	21	const (	COMMENT
LOW	relay/channel/ali/web_search.go	101	aliSearchAgentKey: int(count.Int()),	COMMENT
LOW	relay/common/relay_info.go	181	// ImageQuotaBeforeGroup is the frozen legacy estimate before request ratios.	COMMENT
LOW	relay/common/relay_info.go	201	VendorToolUsage func(raw []byte) map[string]int	COMMENT
LOW	relay/common/outbound_body.go	1	package common	COMMENT

Fake / Example Data23 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	web/src/features/profile/__tests__/settings.test.tsx	294	expect(threshold).toHaveAttribute('placeholder', '0.002')	CODE
LOW	…ponents/dialogs/__tests__/user-binding-dialog.test.tsx	109	email: 'user@example.com',	CODE
LOW	…res/keys/components/__tests__/api-key-listing.test.tsx	317	data: { success: true, data: { key: 'fake-key-for-test-only' } },	CODE
LOW	…res/keys/components/__tests__/api-key-listing.test.tsx	430	? { data: { success: true, data: { key: 'fake-key-for-test-only' } } }	CODE
LOW	…res/keys/components/__tests__/api-key-listing.test.tsx	440	expect(copy).toHaveBeenCalledWith('sk-fake-key-for-test-only')	CODE
LOW	…ls/components/__tests__/channel-configuration.test.tsx	235	'placeholder',	CODE
LOW	…ls/components/__tests__/channel-configuration.test.tsx	246	'placeholder',	CODE
LOW	…ls/components/__tests__/channel-configuration.test.tsx	256	'placeholder',	CODE
LOW	…ls/components/__tests__/channel-configuration.test.tsx	309	await waitFor(() => expect(address).toHaveAttribute('placeholder', url))	CODE
LOW	…ls/components/__tests__/channel-configuration.test.tsx	339	expect(address).toHaveAttribute('placeholder', 'Leave empty to use default')	CODE
LOW	web/src/components/json-code-editor.tsx	220	editor.textarea.removeAttribute('placeholder')	CODE
LOW	…s/json-code-editor/__tests__/json-code-editor.test.tsx	49	expect(textarea).toHaveAttribute('placeholder', '{"model":"gpt"}')	CODE
LOW	controller/token_test.go	668	user := &model.User{Username: "quota-owner", Password: "placeholder", Role: common.RoleCommonUser, Status: common.Use	CODE
LOW⚡	controller/token_test.go	768	user := &model.User{Username: "token-owner", Password: "placeholder", Role: common.RoleCommonUser, Status: common.UserS	CODE
LOW⚡	controller/token_test.go	770	other := &model.User{Username: "other-owner", Password: "placeholder", Role: common.RoleCommonUser, Status: common.User	CODE
LOW⚡	controller/token_test.go	772	session := &model.UserSession{SID: "token-audit-session", UserID: user.Id, Version: 1, UserAuthVersion: 1, Status: mode	CODE
LOW	controller/access_token_audit_test.go	58	user := &model.User{Username: "audit-owner", Password: "placeholder", Role: common.RoleAdminUser, Status: common.UserSt	CODE
LOW	controller/access_token_audit_test.go	218	other := &model.User{Username: "audit-other", Password: "placeholder", Role: common.RoleCommonUser, Status: common.User	CODE
LOW	controller/access_token_audit_test.go	431	other := &model.User{Username: "audit-other", Password: "placeholder", Role: common.RoleCommonUser, Status: common.User	CODE
LOW	controller/access_token_audit_test.go	650	session := &model.UserSession{SID: "audit-permissions-session", UserID: admin.Id, Version: 1, UserAuthVersion: 1, Statu	CODE
LOW	controller/access_token_audit_test.go	1074	require.NoError(t, db.Create(&releasedAuditUser{Username: "released-owner", Password: "placeholder", AccessToken:	CODE
LOW	controller/access_token_audit_test.go	1082	require.NoError(t, db.Create(&model.User{Username: "fresh-owner", Password: "placeholder", AffCode: "fresh-aff"}).	CODE
LOW	controller/access_token_audit_test.go	1101	require.Error(t, db.Create(&model.User{Username: "duplicate", Password: "placeholder", AffCode: "duplicate-aff", Ac	CODE

Structural Annotation Overuse7 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	…features/models/hooks/use-model-deployment-settings.ts	74	// Step 1: Fetch settings first (usually fast)	COMMENT
LOW	…features/models/hooks/use-model-deployment-settings.ts	90	// Step 2: Check connection (check cache first)	COMMENT
LOW	.agents/skills/i18n-translate/SKILL.md	66	### Step 1: Run sync and read report	COMMENT
LOW	.agents/skills/i18n-translate/SKILL.md	74	### Step 2: Find missing keys (used in code but not in locale files)	COMMENT
LOW	.agents/skills/i18n-translate/SKILL.md	137	### Step 3: Find untranslated entries (value equals English)	COMMENT
LOW	.agents/skills/i18n-translate/SKILL.md	197	### Step 4: Add translations	COMMENT
LOW	.agents/skills/i18n-translate/SKILL.md	258	### Step 5: Verify and clean up	COMMENT

Decorative Section Separators3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	relay/channel/adapter.go	42	// ── Billing ──────────────────────────────────────────────────────	COMMENT
MEDIUM	relay/channel/adapter.go	66	// ── Request / Response ───────────────────────────────────────────	COMMENT
MEDIUM	relay/channel/adapter.go	78	// ── Polling ──────────────────────────────────────────────────────	COMMENT

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	AGENTS.md	185	Issues: When opening a GitHub issue, first refuse out-of-scope requests listed in `.agents/github/ISSUE.md` (Coding	CODE

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…features/models/hooks/use-model-deployment-settings.ts	74	// Step 1: Fetch settings first (usually fast)	COMMENT
LOW	…features/models/hooks/use-model-deployment-settings.ts	90	// Step 2: Check connection (check cache first)	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.dev.yml	3	# Usage:	COMMENT

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	model/user.go	77	// User if you add sensitive fields, don't forget to clean them in setupLogin function.	COMMENT

QuantumNous/new-api

Open-Source Code Quality, Security and Technical Debt Review