1.3

Adjusted Signal

1.3

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

38.6K

Stars

TypeScript

Language

1.2M

Lines of Code

5.1K

Files

1.1K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 664 finding(s).

Hallucinated Dependency & Supply Chain Risk 3.0/100 · LOW

Are imports declared and package/API names verified? 377 finding(s).

Agent Over-Engineering Ratio 2.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 565 finding(s).

PR Review Velocity Impact 6.2/100 · LOW

Which changes need focused human review? 1075 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 35HIGH 0MEDIUM 48LOW 992

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1075 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers531 hits · 542 pts

Severity	File	Line	Snippet	Context
LOW	scripts/update-flake-electron.ts	81	export function readWantedElectronVersion(packageJson: string): string {	CODE
LOW	scripts/update-flake-electron.ts	94	export function readPinnedElectronVersion(flake: string): string {	CODE
LOW	scripts/update-electron-locales.ts	133	export function readEndOfCentralDirectory(tail: Uint8Array): { offset: number; size: number; } {	CODE
LOW	scripts/update-electron-locales.ts	150	export function readCentralDirectoryNames(centralDirectory: Uint8Array): string[] {	CODE
LOW⚡	packages/codemirror/src/extensions/custom_tab.ts	54	function handleSingleLineSelection(state: EditorState, dispatch: (transaction: Transaction) => void) {	CODE
LOW	packages/pdfjs-viewer/src/annotations.ts	106	export function setupAnnotationLiveUpdates() {	CODE
LOW	packages/pdfjs-viewer/src/annotations.ts	132	async function extractAndSendAnnotations() {	CODE
LOW	packages/pdfjs-viewer/src/attachments.ts	40	async function extractAndSendAttachments() {	CODE
LOW	packages/pdfjs-viewer/src/editing.ts	31	export function setAnnotationEditorUIManager(uiManager: AnnotationEditorUIManagerLike \| null) {	CODE
LOW	packages/pdfjs-viewer/src/editing.ts	35	export function getAnnotationEditorUIManager(): AnnotationEditorUIManagerLike \| null {	CODE
LOW	packages/pdfjs-viewer/src/editing.ts	50	export function isAnnotationEditingActive(uiManager: AnnotationEditorUIManagerLike \| null = getAnnotationEditorUIManager	CODE
LOW	packages/pdfjs-viewer/src/editing.ts	62	export function commitPendingAnnotationEdits(isPointerDown: boolean, uiManager: AnnotationEditorUIManagerLike \| null = g	CODE
LOW	packages/pdfjs-viewer/src/editing.ts	96	export function suppressViewerUnloadPrompt(target: EventTarget = window) {	CODE
LOW	packages/pdfjs-viewer/src/toc.ts	127	export function setupActiveHeadingTracking() {	CODE
LOW	packages/pdfjs-viewer/src/bootstrap.ts	94	export function configurePdfViewerOptions() {	CODE
LOW	packages/commons/src/lib/markdown_renderer.ts	13	function stripTaskMarkerFromTokens(tokens: Token[] \| undefined, stripPattern: RegExp): void {	CODE
LOW	packages/commons/src/lib/markdown_renderer.ts	220	function getNormalizedMimeFromMarkdownLanguage(language: string \| undefined): string {	CODE
LOW	packages/commons/src/lib/markdown_renderer.ts	265	function stripDuplicateTitleHeading(	CODE
LOW	packages/commons/src/lib/marked_extensions.ts	63	export function createTransclusionExtension(options: TransclusionOptions = {}): TokenizerAndRendererExtension {	CODE
LOW	packages/commons/src/lib/marked_extensions.ts	195	export function createLiteralTildeExtension(): TokenizerAndRendererExtension {	CODE
LOW	packages/commons/src/lib/attachment_roles.ts	136	export function isDeduplicatedAttachmentRole(role: string \| undefined \| null): boolean {	CODE
LOW	packages/commons/src/lib/favicon_contrast.ts	80	export function summarizeFaviconVisibility(pixels: Uint8ClampedArray): FaviconVisibility {	CODE
LOW	packages/commons/src/lib/mime_type.ts	48	export function normalizeMimeTypeForCKEditor(mimeType: string) {	CODE
LOW	packages/commons/src/lib/mime_type.ts	288	export function getMimeTypeFromMarkdownName(mdLanguageCode: string) {	CODE
LOW	packages/commons/src/lib/mime_type.ts	315	export function getMarkdownNameFromCKEditorLanguage(ckEditorLanguage: string) {	CODE
LOW	packages/commons/src/lib/mime_type.ts	340	export function getMimeTypeFromCKEditorLanguage(ckEditorLanguage: string) {	CODE
LOW	packages/commons/src/lib/test-utils.ts	131	export function findMalformedPluralGroups(	CODE
LOW	packages/commons/src/lib/board_columns.ts	40	export function boardGroupByFromColumnsKey(key: string): string \| undefined {	CODE
LOW	packages/commons/src/lib/filesystem_name.ts	43	export function tidyFilesystemFriendlyName(value: string): string {	CODE
LOW	packages/commons/src/lib/transcript.ts	81	export function getTranscriptionResources(modelId: string \| null \| undefined, identifySpeakers: boolean) {	CODE
LOW	…ommons/src/lib/promoted_attribute_definition_parser.ts	137	export function extractAttributeDefinitionTypeAndName(	CODE
LOW	…ges/commons/src/lib/spreadsheet/render_to_html.spec.ts	1811	function workbookWithFloatingDrawings(	CODE
LOW	packages/commons/src/lib/spreadsheet/render_to_csv.ts	71	export async function renderSpreadsheetToCsvZip(jsonContent: string): Promise<Uint8Array> {	CODE
LOW	packages/trilium-core/src/test/request_provider.ts	29	export function installGlobalFetchAsApiTransport(): void {	CODE
LOW	packages/trilium-core/src/becca/becca_loader.ts	250	function backfillVirtualTargetRelations() {	CODE
LOW	packages/trilium-core/src/routes/api/login.ts	36	function logoutFromProtectedSession() {	CODE
LOW	packages/trilium-core/src/routes/api/notes.ts	418	function eraseUnusedAttachmentsNow() {	CODE
LOW	packages/trilium-core/src/routes/api/recent_changes.ts	120	function getRecentlyChangedNoteIds(req: Request<{ ancestorNoteId: string }, { limit?: string }>) {	CODE
LOW	packages/trilium-core/src/routes/api/revisions.ts	121	function updateRevisionDescription(req: Request<{ revisionId: string }>) {	CODE
LOW	packages/trilium-core/src/routes/api/revisions.ts	162	function parseEraseExcessRevisionsOptions(body: unknown): EraseExcessRevisionsOptions \| string {	CODE
LOW	packages/trilium-core/src/routes/api/attributes.ts	11	function getEffectiveNoteAttributes(req: Request<{ noteId: string }>) {	CODE
LOW	packages/trilium-core/src/routes/api/special_notes.ts	110	function createOrUpdateScriptLauncherFromApi(req: Request) {	CODE
LOW	packages/trilium-core/src/routes/api/note_map.ts	263	function updateDescendantCountMapForSearch(noteIdToDescendantCountMap: Record<string, number>, relationships: { parentNo	CODE
LOW	packages/trilium-core/src/routes/api/files.ts	129	async function getAttachmentOfficePreview(req: Request<{ attachmentId: string }>) {	CODE
LOW	packages/trilium-core/src/routes/api/tree.ts	9	function getNotesAndBranchesAndAttributes(_noteIds: string[] \| Set<string>) {	CODE
LOW	packages/trilium-core/src/services/handlers.spec.ts	274	function buildTargetAndSource(relationName: string, sourceId: string) {	CODE
LOW	packages/trilium-core/src/services/blob.ts	154	function encryptTextRepresentation(textRepresentation: string, isProtected: boolean): string {	CODE
LOW	packages/trilium-core/src/services/blob.ts	182	function decryptTextRepresentation(textRepresentation: string \| null \| undefined, isProtected: boolean): string {	CODE
LOW	packages/trilium-core/src/services/content_hash.ts	30	function getEntityChangesFingerprint() {	CODE
LOW	packages/trilium-core/src/services/script.ts	147	function getScriptBundleForFrontend(note: BNote, script?: string, params?: ScriptParams) {	CODE
LOW	packages/trilium-core/src/services/erase.ts	192	function eraseUnusedAttachmentsNow() {	CODE
LOW	packages/trilium-core/src/services/erase.ts	196	function eraseScheduledAttachments(eraseUnusedAttachmentsAfterSeconds: number \| null = null) {	CODE
LOW	packages/trilium-core/src/services/scheduler.ts	95	function checkProtectedSessionExpiration() {	CODE
LOW	packages/trilium-core/src/services/setup_auth.ts	72	export function isSetupSecondFactorRequired(): boolean {	CODE
LOW	packages/trilium-core/src/services/keyboard_actions.ts	9	function getDefaultKeyboardActions() {	CODE
LOW	packages/trilium-core/src/services/i18n.ts	67	export async function reconcileLanguageAfterDbInit() {	CODE
LOW	…/trilium-core/src/services/hidden_subtree_templates.ts	4	export default function buildHiddenSubtreeTemplates() {	CODE
LOW	packages/trilium-core/src/services/image_compression.ts	96	export function resolveCompressionRequest(options: ImageCompressionOptions = {}): ImageCompressionRequest {	CODE
LOW	packages/trilium-core/src/services/image_compression.ts	207	export function automaticCompressionRequest(): ImageCompressionRequest {	CODE
LOW	packages/trilium-core/src/services/virtual_notes.ts	109	export function registerVirtualNoteProvider(provider: VirtualNoteProvider) {	CODE
471 more matches not shown…

Fake / Example Data342 hits · 352 pts

Severity	File	Line	Snippet	Context
LOW	…keditor5-plugin-development/references/architecture.md	135	schema.register( 'placeholder', { inheritAllFrom: '$inlineObject', allowAttributes: [ 'name' ] } );	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	28	Model: `<placeholder name="time">` inside text. View/data: `<span class="placeholder">{time}</span>`.	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	38	this.editor.commands.add( 'placeholder', new PlaceholderCommand( this.editor ) );	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	42	viewToModelPositionOutsideModelElement( this.editor.model, v => v.hasClass( 'placeholder' ) ) );	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	46	this.editor.model.schema.register( 'placeholder', {	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	54	view: { name: 'span', classes: [ 'placeholder' ] },	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	56	writer.createElement( 'placeholder', { name: viewElement.getChild( 0 ).data.slice( 1, -1 ) } )	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	59	model: 'placeholder',	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	63	model: 'placeholder',	CODE
LOW⚡	…lls/ckeditor5-plugin-development/references/widgets.md	67	const span = writer.createContainerElement( 'span', { class: 'placeholder' } );	CODE
LOW	…lls/ckeditor5-plugin-development/references/widgets.md	82	const ph = writer.createElement( 'placeholder', { ...Object.fromEntries( selection.getAttributes() ), name: value } )	CODE
LOW	…lls/ckeditor5-plugin-development/references/widgets.md	88	this.isEnabled = this.editor.model.schema.checkChild( sel.focus.parent, 'placeholder' );	CODE
LOW	…ls/ckeditor5-plugin-development/references/commands.md	54	Other typical enablement checks: `schema.checkChild( selection.focus.parent, 'placeholder' )`	CODE
LOW	…5-plugin-development/references/ui-and-localization.md	27	placeholder: bind.to( 'placeholder' ),	CODE
LOW	…/ckeditor5-plugin-development/references/conversion.md	89	model: 'placeholder',	CODE
LOW	…/ckeditor5-plugin-development/references/conversion.md	91	const span = writer.createContainerElement( 'span', { class: 'placeholder' } );	CODE
LOW	…/ckeditor5-plugin-development/references/conversion.md	179	viewToModelPositionOutsideModelElement( editor.model, v => v.hasClass( 'placeholder' ) ) );	CODE
LOW⚡	.claude/skills/ckeditor5-testing/references/patterns.md	77	expect( model.schema.isRegistered( 'placeholder' ) ).toBe( true );	CODE
LOW⚡	.claude/skills/ckeditor5-testing/references/patterns.md	78	expect( model.schema.isInline( 'placeholder' ) ).toBe( true );	CODE
LOW⚡	.claude/skills/ckeditor5-testing/references/patterns.md	79	expect( model.schema.checkChild( [ '$root', '$block' ], 'placeholder' ) ).toBe( true );	CODE
LOW	… Basics/Preact/Built-in components/Widget showcase.jsx	17	const lorem = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam accumsan eu odio non gravida. Pellen	CODE
LOW	… Basics/Preact/Built-in components/Widget showcase.jsx	17	const lorem = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam accumsan eu odio non gravida. Pellen	CODE
LOW	packages/pdfjs-viewer/src/annotations.spec.ts	58	const withAuthor = { ...SAMPLE_HIGHLIGHT, titleObj: { str: "John Doe", dir: "ltr" } };	CODE
LOW	packages/pdfjs-viewer/src/annotations.spec.ts	59	expect(processAnnotation(withAuthor, 1)!.author).toBe("John Doe");	CODE
LOW⚡	packages/turndown-plugin-gfm/test/gfm.spec.ts	15	expect(turndown.turndown("<strike>Lorem ipsum</strike>")).toBe("~~Lorem ipsum~~");	CODE
LOW⚡	packages/turndown-plugin-gfm/test/gfm.spec.ts	19	expect(turndown.turndown("<s>Lorem ipsum</s>")).toBe("~~Lorem ipsum~~");	CODE
LOW⚡	packages/turndown-plugin-gfm/test/gfm.spec.ts	23	expect(turndown.turndown("<del>Lorem ipsum</del>")).toBe("~~Lorem ipsum~~");	CODE
LOW	packages/trilium-core/src/becca/similarity.spec.ts	44	<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Integer eget purus et eros faucibus dignissi	CODE
LOW	packages/trilium-core/src/becca/similarity.spec.ts	44	<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Integer eget purus et eros faucibus dignissi	CODE
LOW	packages/trilium-core/src/becca/similarity.spec.ts	322	"#broken": "placeholder"	CODE
LOW	packages/trilium-core/src/becca/similarity.spec.ts	336	brokenAttr.value = "placeholder";	CODE
LOW⚡	…ges/trilium-core/src/services/utils/strip_tags.spec.ts	7	expect(stripTags(`<a href="">lorem <strong>ipsum</strong></a>`)).toBe("lorem ipsum");	CODE
LOW⚡	…ges/trilium-core/src/services/utils/strip_tags.spec.ts	9	expect(stripTags("<!-- lorem -- ipsum -- --> dolor sit amet")).toBe(" dolor sit amet");	CODE
LOW⚡	…ges/trilium-core/src/services/utils/strip_tags.spec.ts	10	expect(stripTags("<!-- <strong>lorem ipsum</strong> --> dolor sit")).toBe(" dolor sit");	CODE
LOW⚡	…ges/trilium-core/src/services/utils/strip_tags.spec.ts	16	expect(stripTags(`<article attr="foo 'bar'">lorem</article> ipsum`)).toBe("lorem ipsum");	CODE
LOW⚡	…ges/trilium-core/src/services/utils/strip_tags.spec.ts	24	expect(stripTags("lorem ipsum < a> < div>")).toBe("lorem ipsum < a> < div>");	CODE
LOW	…ges/trilium-core/src/services/utils/strip_tags.spec.ts	43	expect(stripTags("<div<>>lorem ipsum</div>", [ "div" ])).toBe("<div>lorem ipsum</div>");	CODE
LOW	…ges/trilium-core/src/services/utils/strip_tags.spec.ts	44	expect(stripTags(`<a href="<script>">lorem ipsum</a>`, [ "a" ])).toBe(`<a href="script">lorem ipsum</a>`);	CODE
LOW	…r5/src/plugins/multicolumn/multicolumn_editing.spec.ts	89	describe("placeholder", () => {	CODE
LOW	…keditor5/src/plugins/ai_assistant/ai_assistant_form.ts	468	input.bind("placeholder").to(this, "phase", (phase) => (phase === "streaming"	CODE
LOW	apps/web-clipper/entrypoints/popup/popup.spec.tsx	32	labels: { pageAuthor: "Jane Doe", publishedDate: "2024-05-01", modifiedDate: "2024-06-12" }	CODE
LOW	apps/web-clipper/entrypoints/popup/popup.spec.tsx	514	expect(description()?.getAttribute("placeholder")).toBe("Add a description");	CODE
LOW	apps/web-clipper/entrypoints/popup/popup.spec.tsx	595	expect(author()?.value).toBe("Jane Doe");	CODE
LOW	apps/web-clipper/entrypoints/popup/popup.spec.tsx	597	expect(author()?.getAttribute("placeholder")).toBe("Add an author");	CODE
LOW	apps/web-clipper/entrypoints/popup/popup.spec.tsx	736	expect(note()?.getAttribute("placeholder")).toBe("Add a note about this page");	CODE
LOW	…ps/web-clipper/entrypoints/readable-page/index.spec.ts	48	pageAuthor: "Jane Doe",	CODE
LOW	…rver/src/services/ocr/processors/pdf_processor.spec.ts	75	return `${marker} `.padEnd(300, "lorem ipsum dolor sit amet ");	CODE
LOW	…rver/src/services/ocr/processors/pdf_processor.spec.ts	75	return `${marker} `.padEnd(300, "lorem ipsum dolor sit amet ");	CODE
LOW	…m Demo/Scripting examples/Render note with JSX/JSX.jsx	13	const lorem = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam accumsan eu odio non gravida. Pellen	CODE
LOW	…m Demo/Scripting examples/Render note with JSX/JSX.jsx	13	const lorem = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam accumsan eu odio non gravida. Pellen	CODE
LOW	apps/client/src/translations/ug/translation.json	203	"placeholder": "ھەر بىر قۇرغا بىر HTML بەلگىسىدىن كىرگۈزۈڭ",	CODE
LOW	apps/client/src/translations/ug/translation.json	469	"placeholder": "بەلگە ۋە مۇناسىۋەتلەرنى بۇ يەرگە كىرگۈزۈڭ"	CODE
LOW	apps/client/src/translations/ug/translation.json	808	"placeholder": "خاتىرىنى نامى بويىچە ئىزدەش",	CODE
LOW	apps/client/src/translations/ug/translation.json	846	"placeholder": "خاتىرىنى نامى بويىچە ئىزدەش",	CODE
LOW	apps/client/src/translations/ug/translation.json	852	"placeholder": "پۈتۈن تېكىستلىق ئاچقۇچلۇق سۆزلەر، #بەلگە = قىممەت...",	CODE
LOW	apps/client/src/translations/ug/translation.json	884	"placeholder": "كود خاتىرىسىنىڭ مەزمۇنىنى بۇ يەرگە يېزىڭ..."	CODE
LOW	apps/client/src/translations/ug/translation.json	887	"placeholder": "خاتىرىڭىزنىڭ مەزمۇنىنى بۇ يەرگە يېزىڭ...",	CODE
LOW	apps/client/src/translations/pl/translation.json	422	"placeholder": "Wprowadź tagi HTML, jeden w wierszu",	CODE
LOW	apps/client/src/translations/pl/translation.json	507	"placeholder": "wyszukaj notatkę po nazwie",	CODE
LOW	apps/client/src/translations/pl/translation.json	774	"placeholder": "Wpisz tutaj etykiety i relacje"	CODE
282 more matches not shown…

Hallucination Indicators35 hits · 350 pts

Severity	File	Line	Snippet	Context
CRITICAL	packages/ckeditor5/src/hosted_balloon.ts	45	const shownAt = editor.editing.view.document.selection.getFirstRange();	CODE
CRITICAL	…ges/ckeditor5/src/plugins/mobile_toolbar_items.spec.ts	311	const button = editor.ui.view.toolbar.items.get(0) as unknown as {	CODE
CRITICAL	…ges/ckeditor5/src/plugins/mobile_toolbar_items.spec.ts	324	expect((editor.ui.view.toolbar.items.get(0) as ButtonView).isEnabled).toBe(false);	CODE
CRITICAL	…ges/ckeditor5/src/plugins/mobile_toolbar_items.spec.ts	609	const item = editor.ui.view.toolbar.items.get(index);	CODE
CRITICAL	packages/ckeditor5/src/plugins/color_menu.spec.ts	166	const item = editor.ui.view.toolbar.items.get(0);	CODE
CRITICAL	packages/ckeditor5/src/plugins/indent_block_shortcut.ts	30	let el: ModelPosition \| ModelElement \| ModelDocumentFragment \| null = this.editor.model.document.selection.getFi	CODE
CRITICAL	…/ckeditor5/src/plugins/table_toolbar_dropdowns.spec.ts	164	const dropdown = editor.ui.view.toolbar.items.get(0) as DropdownView;	CODE
CRITICAL	…/ckeditor5/src/plugins/table_toolbar_dropdowns.spec.ts	194	return editor.ui.view.toolbar.items.get(TOOLBAR.indexOf(name)) as DropdownView;	CODE
CRITICAL	…/ckeditor5/src/plugins/text_formatting_toolbar.spec.ts	191	const item = editor.ui.view.toolbar.items.get(index);	CODE
CRITICAL	packages/ckeditor5/src/plugins/list_item_alignment.ts	80	for (const change of this.editor.model.document.differ.getChanges()) {	CODE
CRITICAL	packages/ckeditor5/src/plugins/table_scroll.ts	177	const domFigure = this.editor.editing.view.domConverter.mapViewToDom(viewFigure);	CODE
CRITICAL	…ditor5/src/plugins/format_painter/format_painter_ui.ts	141	for (const root of this.editor.editing.view.domRoots.values()) {	CODE
CRITICAL	…keditor5/src/plugins/link_embed/link_embed_commands.ts	183	const href = this.editor.model.document.selection.getAttribute('linkHref');	CODE
CRITICAL	…ditor5/src/plugins/link_embed/link_embed_autodetect.ts	191	const position = this.editor.model.document.selection.getFirstPosition();	CODE
CRITICAL	…tor5/src/plugins/sort_selection/sort_selection.spec.ts	302	const dropdown = editor.ui.view.toolbar.items.get(0) as DropdownView;	CODE
CRITICAL	…s/ckeditor5/src/plugins/content_embed/content_embed.ts	799	for ( const change of this.editor.model.document.differ.getChanges() ) {	CODE
CRITICAL	…itor5/src/plugins/ai_assistant/ai_assistant_ui.spec.ts	724	const item = menuEditor.ui.view.toolbar.items.get(0);	CODE
CRITICAL	…s/ckeditor5/src/plugins/collapsible/edge_cases.spec.ts	25	const viewPosition = editor.editing.view.document.selection.getFirstPosition();	CODE
CRITICAL	…editor5/src/plugins/collapsible/collapsible_editing.ts	452	const dom = view ? this.editor.editing.view.domConverter.viewToDom(view) : null;	CODE
CRITICAL	…editor5/src/plugins/collapsible/collapsible_editing.ts	496	const view = this.editor.editing.view.domConverter.mapDomToView(detailsDom);	CODE
CRITICAL	…editor5/src/plugins/collapsible/collapsible_editing.ts	1397	const caretSummary = this.editor.model.document.selection.getFirstPosition()?.findAncestor("summary") ?? null;	CODE
CRITICAL	…editor5/src/plugins/collapsible/collapsible_editing.ts	1503	const changes = this.editor.model.document.differ.getChanges();	CODE
CRITICAL	…editor5/src/plugins/collapsible/collapsible_editing.ts	1535	const changes = this.editor.model.document.differ.getChanges();	CODE
CRITICAL	…editor5/src/plugins/collapsible/collapsible_editing.ts	1583	const changes = this.editor.model.document.differ.getChanges();	CODE
CRITICAL	…ckeditor5/src/plugins/collapsible/block_drag_handle.ts	137	const view = this.opts.editor.editing.view.domConverter.mapDomToView(el);	CODE
CRITICAL	…ckeditor5/src/plugins/collapsible/block_drag_handle.ts	138	let model = view ? this.opts.editor.editing.mapper.toModelElement(view as any) : null;	CODE
CRITICAL	…ckeditor5/src/plugins/collapsible/block_drag_handle.ts	160	const view = this.opts.editor.editing.view.domConverter.mapDomToView(child);	CODE
CRITICAL	…ckeditor5/src/plugins/collapsible/block_drag_handle.ts	161	const model = view ? this.opts.editor.editing.mapper.toModelElement(view as any) : null;	CODE
CRITICAL	…ckeditor5/src/plugins/collapsible/block_drag_handle.ts	173	const view = this.opts.editor.editing.mapper.toViewElement(model);	CODE
CRITICAL	…ckeditor5/src/plugins/collapsible/block_drag_handle.ts	174	const dom = view ? this.opts.editor.editing.view.domConverter.viewToDom(view) : null;	CODE
CRITICAL	…es/ckeditor5/src/plugins/mention/trilium_mention_ui.ts	360	range = this.editor.model.document.selection.getFirstRange() ?? range;	CODE
CRITICAL	…ckeditor5/src/plugins/containers/container_keyboard.ts	73	const position = this.editor.model.document.selection.getFirstPosition();	CODE
CRITICAL	…s/todo_list_multistate/todo_list_multistate_editing.ts	474	const position = this.editor.model.document.selection.getFirstPosition();	CODE
CRITICAL	…s/todo_list_multistate/todo_list_multistate_editing.ts	703	const position = this.editor.model.document.selection.getFirstPosition();	CODE
CRITICAL	apps/desktop/src/services/transcription/capture.spec.ts	106	expect(processor.port.postMessage.mock.calls.at(-1)?.[0]).toBe("flushed");	CODE

Over-Commented Block103 hits · 103 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.yml	1	# Running `docker-compose up` will create/use the "trilium-data" directory next to this file	COMMENT
LOW	scripts/build-utils.ts	81	// integration-test-only code paths in apps/server. These	COMMENT
LOW	scripts/build-utils.ts	121	// renderer, so it must be omitted for preload-style bundles.	COMMENT
LOW	scripts/build-portable-better-sqlite3.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/build-portable-better-sqlite3.sh	21	# decides which distributions we support:	COMMENT
LOW	scripts/translation/create-po-file.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…s/codemirror/src/extensions/trilium_log_highlighter.ts	41	// After `<ts> `: an optional `Slow ` marker (the server prepends it when the request took >= 10ms),	COMMENT
LOW	packages/codemirror/src/type_completion/preact_types.ts	1	// Real Preact type declarations injected into the JSX script-note vfs so the	COMMENT
LOW	packages/codemirror/src/type_completion/glob_types.ts	1	// Global `glob` type declarations injected into the FRONTEND (and JSX) script-note	COMMENT
LOW	packages/codemirror/src/type_completion/index.ts	81	const COMPILER_OPTIONS = {	COMMENT
LOW	…rndown-plugin-gfm/src/lib/serialize-structural-html.ts	1	// Serializes an element into indented, multi-line HTML so raw-HTML blocks that	COMMENT
LOW	packages/commons/src/lib/shared_constants.ts	21	'logseq', 'mid', 'obsidian', 'bookends', 'highlights'	COMMENT
LOW	packages/commons/src/lib/shared_constants.ts	41	p => !SHELL_OPEN_EXTERNAL_BLOCKLIST.has(p)	COMMENT
LOW	packages/commons/src/lib/shared_constants.ts	61	// embedded `data:` URI Trilium writes to the clipboard when note content is copied out. External	COMMENT
LOW	packages/trilium-core/src/routes/index.ts	181	asyncRoute(GET, "/api/spreadsheet/:noteId/xlsx", [checkApiAuthOrElectron], spreadsheetRoute.exportXlsx);	COMMENT
LOW	packages/trilium-core/src/routes/index.ts	201	// this is how the app asks the next start to be the wizard, and how it takes the request back.	COMMENT
LOW	packages/trilium-core/src/routes/api/link_embed.ts	581	const favicon = await resolveFavicon(document, url);	COMMENT
LOW	packages/trilium-core/src/routes/api/sync.ts	221	// rows fetched from entity_changes always carry an id	COMMENT
LOW	packages/trilium-core/src/services/space_usage.ts	501	kind INTEGER NOT NULL DEFAULT ${BLOB_UNREFERENCED}	COMMENT
LOW	packages/trilium-core/src/services/scheduler.ts	41		COMMENT
LOW	…ckages/trilium-core/src/services/consistency_checks.ts	921	// When sync is configured but hasn't fully completed yet (e.g. the app	COMMENT
LOW	packages/trilium-core/src/services/sync.ts	301		COMMENT
LOW	packages/trilium-core/src/services/sync.ts	341	optionService.setOption("syncIncomplete", "true");	COMMENT
LOW	…re/src/services/encryption/password_encryption.spec.ts	1	import { describe, expect, it, vi } from "vitest";	COMMENT
LOW	…es/trilium-core/src/services/encryption/crypto.spec.ts	1	import { afterEach, beforeAll, describe, expect, it, vi } from "vitest";	COMMENT
LOW	…ilium-core/src/services/search/services/search.spec.ts	1401	// .child(note("Canada")	COMMENT
LOW	…ages/trilium-core/src/services/import/markdown.spec.ts	61	const result = markdownService.renderToHtml(trimIndentation`\	COMMENT
LOW	…ages/trilium-core/src/services/import/markdown.spec.ts	81	`, "Notes")).toBe(`<h2>Main Section</h2><h3>Subsection A</h3><h4>Detail</h4><h3>Subsection B</h3>`);	COMMENT
LOW	packages/trilium-core/src/services/import/zip.ts	861	topLevelPath = (topLevelItems.size > 1 ? "" : topLevelItems.values().next().value ?? "");	COMMENT
LOW	packages/trilium-core/src/services/import/dispatch.ts	41	// An image note is created empty and filled in when the compression it was handed to answers,	COMMENT
LOW	…es/trilium-core/src/services/import/notion/importer.ts	41	// The user exported from Notion as "Markdown & CSV", but this importer only understands the HTML	COMMENT
LOW	packages/splitjs/src/split.js	101		COMMENT
LOW	packages/splitjs/src/split.js	201	clientSize = 'clientHeight'	COMMENT
LOW	packages/splitjs/src/split.js	261		COMMENT
LOW	packages/splitjs/src/split.js	321	adjust.call(this, offset)	COMMENT
LOW	packages/splitjs/src/split.js	561	}	COMMENT
LOW	…ges/ckeditor5/src/plugins/syntax_highlighting/index.ts	181	// XXX There's actually a plaintext language that could be used	COMMENT
LOW	…ges/ckeditor5/src/plugins/syntax_highlighting/index.ts	201	// Do a two pass algorithm:	COMMENT
LOW	…editor5/src/plugins/collapsible/collapsible_editing.ts	241	conversionApi.writer.removeAttribute(OPEN_ATTRIBUTE, viewElement);	COMMENT
LOW	…editor5/src/plugins/collapsible/collapsible_editing.ts	801	if (!selection.isCollapsed) return;	COMMENT
LOW	…s/todo_list_multistate/todo_list_multistate_editing.ts	81	const stateByName = this._stateByName;	COMMENT
LOW	.github/dependabot.yml	1	# Renovate owns version updates for this repository (see renovate.json). Dependabot is	COMMENT
LOW	.github/dependabot.yml	21	# This silences security PRs for pdfjs-dist too. That is the intended trade-off,	COMMENT
LOW	.github/workflows/update-pdfjs-viewer.yml	1	name: Update PDF.js viewer	COMMENT
LOW	.github/workflows/codeql.yml	1	# For most projects, this workflow file will not need changing; you simply need	COMMENT
LOW	.github/workflows/update-nix-flake.yml	1	name: Update Nix flake	COMMENT
LOW	.github/workflows/deploy-previews.yml	1	# Publishes the previews built by the three deploy workflows.	COMMENT
LOW	.github/workflows/sync-readme.yml	1	name: Sync README	COMMENT
LOW	apps/standalone/src/local-server-worker.ts	281	throw opfsAccessError(e instanceof Error ? e.message : String(e));	COMMENT
LOW	apps/standalone/src/local-server-worker.ts	401	// so it always defaults to "en" on a fresh worker boot. Now that	COMMENT
LOW	apps/standalone/src/test_setup.ts	21	// SQLite WASM compatibility shims	COMMENT
LOW	apps/desktop/spec/setup.ts	1	// Reuse the server's full core initialization for desktop spec files that	COMMENT
LOW	apps/desktop/scripts/build-appimage.sh	1	#!/usr/bin/env bash	COMMENT
LOW	apps/desktop/src/main.ts	161	if (targetWindow) {	COMMENT
LOW	apps/desktop/src/main.ts	221	// (see #10572) without having to pass --disable-gpu on the command line. Like the	COMMENT
LOW	apps/desktop/src/protocol.ts	481		COMMENT
LOW	apps/desktop/src/main.spec.ts	521		COMMENT
LOW	apps/server/docker_healthcheck.sh	1	#!/bin/sh	COMMENT
LOW	apps/server/docker/authelia/config/configuration.yml	101	scopes:	COMMENT
LOW	apps/server/spec/db/config.ini	21	# path to certificate (run "bash bin/generate-cert.sh" to generate self-signed certificate). Relevant only if https=true	COMMENT
43 more matches not shown…

Decorative Section Separators34 hits · 102 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/translation/create-po-file.sh	3	# --------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	scripts/translation/create-po-file.sh	18	# --------------------------------------------------------------------------------------------------	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-xopp.ts	13	// ── Color mapping ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-xopp.ts	48	// ── Excalidraw element helpers ───────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-xopp.ts	90	// ── xml2js element accessors ─────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-xopp.ts	110	// ── Converters ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-xopp.ts	231	// ── Main conversion ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-xopp.ts	287	// ── Entry point (manually run) ───────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-rnote.ts	13	// ── Types (rnote v0.9+ / v0.13 JSON format) ────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-rnote.ts	101	// ── Raw RGBA → PNG encoding ─────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-rnote.ts	167	// ── Color conversion ────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-rnote.ts	180	// ── Excalidraw element helpers ──────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-rnote.ts	222	// ── Bezier flattening ───────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-rnote.ts	260	// ── Converters ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-rnote.ts	432	// ── Main conversion ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/scripts/auto-import-rnote.ts	468	// ── Entry point ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/dev.ts	14	// ── Environment — must be set before any server module is imported ──────────	COMMENT
MEDIUM	apps/script-deployer/src/dev.ts	30	// ── Constants ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.spec.ts	17	// ── Mocks — only SQL and entity_changes, becca is real ───────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.spec.ts	39	// ── parseScriptMeta ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.spec.ts	118	// ── transpile ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.spec.ts	146	// ── deployScript ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.ts	9	// ── Public constants ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.ts	22	// ── Front-matter parsing ─────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.ts	75	// ── Transpilation ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.ts	98	// ── Note ID helpers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/script-deployer/src/deploy.ts	113	// ── Deployment ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/src/services/search/services/search_profiling.spec.ts	22	// ── helpers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/src/services/search/services/search_profiling.spec.ts	76	// ── dataset builder ──────────────────────────────────────────────────	COMMENT
MEDIUM	…/src/services/search/services/search_profiling.spec.ts	180	// ── profiling tests ──────────────────────────────────────────────────	COMMENT
MEDIUM	…/src/services/search/services/search_benchmark.spec.ts	20	// ── helpers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/src/services/search/services/search_benchmark.spec.ts	69	// ── dataset builder ──────────────────────────────────────────────────	COMMENT
MEDIUM	…/src/services/search/services/search_benchmark.spec.ts	180	// ── benchmark runner ─────────────────────────────────────────────────	COMMENT
MEDIUM	…/src/services/search/services/search_benchmark.spec.ts	279	// ── tests ────────────────────────────────────────────────────────────	COMMENT

Modern AI Meta-Vocabulary7 hits · 19 pts

Severity	File	Line	Snippet	Context
MEDIUM	…lls/ckeditor5-testing/references/running-and-config.md	175	## Root orchestration	COMMENT
MEDIUM	.claude/skills/writing-documentation/SKILL.md	23	node $D new Collections "Timeline" --icon bx-time-five --after Dashboard # scaffold page + meta entry	CODE
MEDIUM	…r Guide/User Guide/Scripting/Script API/Backend API.md	24	<td><p><a href="#type-Attribute"><code>Attribute</code></a> \| <a href="#type-BBranch"><code>BBranch</code></	CODE
MEDIUM	packages/trilium-core/src/services/llm/chat.ts	99	// Chunk-native provider (e.g. Claude Agent): it owns its own agentic loop	COMMENT
MEDIUM	packages/trilium-core/src/services/llm/stream.ts	213	// aggregates token usage across every step of the agentic loop — `usage` only	COMMENT
MEDIUM	…trilium-core/src/services/llm/providers/google.spec.ts	217	// Function tools present → agentic loop options set on the thinking path.	COMMENT
MEDIUM	…trilium-core/src/services/llm/providers/openai.spec.ts	86	// Tools present → agentic loop options are set.	COMMENT

Slop Phrases7 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	packages/codemirror/vite.config.ts	22	// Don't forget to update your package.json as well.	COMMENT
LOW	packages/highlightjs/vite.config.ts	22	// Don't forget to update your package.json as well.	COMMENT
LOW	packages/ckeditor5/vite.config.ts	22	// Don't forget to update your package.json as well.	COMMENT
MEDIUM	.github/workflows/codeql.yml	56	# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how	COMMENT
MEDIUM	.vscode/i18n-ally-custom-framework.yml	11	# To help with this, you can use https://www.freeformatter.com/json-escape.html	COMMENT
MEDIUM	.vscode/i18n-ally-custom-framework.yml	23	# To help with this, you can use https://www.freeformatter.com/json-escape.html	COMMENT
LOW	apps/client/src/translations/en/translation.json	691	"share_credentials": "Require credentials to access this shared note. Value is expected to be in format 'username:pa	CODE

Structural Annotation Overuse7 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW	…ipting/Frontend Basics/Custom Widgets/Widget Basics.md	4	### Step 1: The Basic Widget Structure	COMMENT
LOW	…ipting/Frontend Basics/Custom Widgets/Widget Basics.md	30	### Step 2: Adding an UI Element	COMMENT
LOW	…ipting/Frontend Basics/Custom Widgets/Widget Basics.md	52	### Step 3: Styling the Widget	COMMENT
LOW	…ipting/Frontend Basics/Custom Widgets/Widget Basics.md	86	### Step 4: Adding User Interaction	COMMENT
LOW	packages/codemirror/src/extensions/custom_tab.ts	24	// Step 1: Handle non-empty selections → replace with tab	COMMENT
LOW⚡	packages/codemirror/src/extensions/custom_tab.ts	46	// Step 2: Handle empty selections	COMMENT
LOW	apps/client/src/widgets/type_widgets/options/totp.tsx	221	// Step 1: check the code against the secret. Persists nothing — on success we only advance to the	COMMENT

AI Slop Vocabulary3 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/ckeditor5/src/i18n.spec.ts	159	// What makes the mechanism seamless: with no host attached the editor still renders correct	COMMENT
MEDIUM	…/content_embed/content_embed_box_size_dropdown.spec.ts	225	// wrapper listener before our handler sees it. We leverage that listeners	COMMENT
MEDIUM	…nt/src/widgets/type_widgets/text/ReadOnlyText.spec.tsx	388	+ `<p><a class="reference-link" href="#root/${harness.note.noteId}?block=b1">x</a></p>`;	CODE

Verbosity Indicators4 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW	packages/codemirror/src/extensions/custom_tab.ts	24	// Step 1: Handle non-empty selections → replace with tab	COMMENT
LOW⚡	packages/codemirror/src/extensions/custom_tab.ts	46	// Step 2: Handle empty selections	COMMENT
LOW	apps/client/src/services/note_tooltip.ts	143	// we need to check if we're still hovering over the element	COMMENT
LOW	apps/client/src/widgets/type_widgets/options/totp.tsx	221	// Step 1: check the code against the secret. Persists nothing — on success we only advance to the	COMMENT

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	apps/desktop/scripts/build-appimage.sh	50	# Create the AppRun entry point	COMMENT

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…/server/src/services/llm/providers/acp_mcp_endpoint.ts	154	async function handleRequest(	CODE

TriliumNext/Trilium

Open-Source Code Quality, Security and Technical Debt Review