2.3

Adjusted Signal

2.3

Raw Pattern Score

100%

Time Factor

2026-10-23

Last Push

43.3K

Stars

JavaScript

Language

90.4K

Lines of Code

647

Files

119

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 102 finding(s).

Hallucinated Dependency & Supply Chain Risk 5.5/100 · LOW

Are imports declared and package/API names verified? 14 finding(s).

Agent Over-Engineering Ratio 0.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 13 finding(s).

PR Review Velocity Impact 11.2/100 · LOW

Which changes need focused human review? 119 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 5HIGH 10MEDIUM 0LOW 104

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 119 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block87 hits · 78 pts

Severity	File	Line	Snippet	Context
LOW	test/docker-parallel.sh	1	#!/usr/bin/env bash	COMMENT
LOW	test/e2e/file-descriptor.sh	21	# $pm2 start echo.js -i 3	COMMENT
LOW	test/e2e/cli/cli-actions-1.sh	141	# OUT=`$pm2 logs --nostream --lines 100 PM2 \| wc -l`	COMMENT
LOW	test/e2e/cli/cli-actions-1.sh	161	# spec "Should start web interface"	COMMENT
LOW	test/e2e/cli/cli-actions-1.sh	181		COMMENT
LOW	test/e2e/cli/app-configuration.sh	61	# sleep 2	COMMENT
LOW	test/e2e/cli/startOrX.sh	21		COMMENT
LOW	test/e2e/binaries/pm2-runtime.sh	41	spec "Should application have two watch arguments"	COMMENT
LOW	test/e2e/modules/module.sh	101	# $pm2 set example-module:var2 true	COMMENT
LOW	…ples/test-all-keymetrics-features/process-transpose.js	1		COMMENT
LOW	lib/Utility.js	161	// ['logs', 'pids'].forEach(function(n){	COMMENT
LOW	lib/completion.js	41	if(!env.words \|\| !env.point \|\| !env.line) return script(name, completer, function(err, content) {	COMMENT
LOW	lib/tools/fmt.js	1	// --------------------------------------------------------------------------------------------------------------------	COMMENT
LOW	lib/tools/which.js	41	}	COMMENT
LOW	lib/tools/json5.js	1	// json5.js	COMMENT
LOW	lib/templates/init-scripts/pm2-init-amazon.sh	1	#!/bin/bash	COMMENT
LOW	modules/pm2-axon/test/test.pubsub.missed-messages.js	1	//	COMMENT
LOW	modules/pm2-axon/test/test.pubsub.missed-messages.js	21	// case 0:	COMMENT
LOW	modules/pm2-axon/test/test.socket.reconnect.js	1		COMMENT
LOW	modules/pm2-axon/test/test.socket.reconnect.js	21	// pull.on('message', function(msg){	COMMENT
LOW	modules/pm2-axon/test/test.socket.reconnect.js	41	// push.close();	COMMENT
LOW	modules/blessed/lib/tput.js	1	/**	COMMENT
LOW	modules/blessed/lib/tput.js	441	};	COMMENT
LOW	modules/blessed/lib/tput.js	461	// Offset: 2342	COMMENT
LOW	modules/blessed/lib/tput.js	481	// How lastStrTableOffset works:	COMMENT
LOW	modules/blessed/lib/tput.js	1041	// %? expr %t thenpart %e elsepart %;	COMMENT
LOW	modules/blessed/lib/tput.js	1201		COMMENT
LOW	modules/blessed/lib/tput.js	1221	// }	COMMENT
LOW	modules/blessed/lib/tput.js	1881	break;	COMMENT
LOW	modules/blessed/lib/tput.js	1901	// out += '\\r';	COMMENT
LOW	modules/blessed/lib/tput.js	1921	// out += '\\^';	COMMENT
LOW	modules/blessed/lib/tput.js	1941	// out += '\\';	COMMENT
LOW	modules/blessed/lib/tput.js	2061	// and it does not switch to the DEC SCLD character set. What the hell?	COMMENT
LOW	modules/blessed/lib/gpmclient.js	61	// unsigned short vc;	COMMENT
LOW	modules/blessed/lib/events.js	141	// will always be compatible with node, not to mention	COMMENT
LOW	modules/blessed/lib/events.js	161	// do {	COMMENT
LOW	modules/blessed/lib/keys.js	1	/**	COMMENT
LOW	modules/blessed/lib/unicode.js	1	/**	COMMENT
LOW	modules/blessed/lib/unicode.js	21	// conditions:	COMMENT
LOW	modules/blessed/lib/unicode.js	41	// of this software and associated documentation files (the "Software"), to deal	COMMENT
LOW	modules/blessed/lib/unicode.js	61	// https://github.com/mathiasbynens/String.prototype.codePointAt	COMMENT
LOW	modules/blessed/lib/unicode.js	81		COMMENT
LOW	modules/blessed/lib/unicode.js	141		COMMENT
LOW	modules/blessed/lib/unicode.js	561	return (first - 0xD800) * 0x400 + second - 0xDC00 + 0x10000;	COMMENT
LOW	modules/blessed/lib/program.js	541	// Relevant files:	COMMENT
LOW	modules/blessed/lib/program.js	601	// buf = new Buffer(s, 'utf8');	COMMENT
LOW	modules/blessed/lib/program.js	1161	return;	COMMENT
LOW	modules/blessed/lib/program.js	1301	}	COMMENT
LOW	modules/blessed/lib/program.js	1421	}	COMMENT
LOW	modules/blessed/lib/program.js	1481	out.error = out.text;	COMMENT
LOW	modules/blessed/lib/program.js	1501	// Pe = 7 -> right button up.	COMMENT
LOW	modules/blessed/lib/program.js	2181	return this.charset('ascii');	COMMENT
LOW	modules/blessed/lib/program.js	2461	// Ps = 2 7 -> Positive (not inverse).	COMMENT
LOW	modules/blessed/lib/program.js	2481		COMMENT
LOW	modules/blessed/lib/program.js	2841	// Ps = 6 -> Report Cursor Position (CPR) [row;column] as CSI	COMMENT
LOW	modules/blessed/lib/program.js	3001	// -> CSI ? 1 ; 2 c (``VT100 with Advanced Video Option'')	COMMENT
LOW	modules/blessed/lib/program.js	3021	// this to VT100.	COMMENT
LOW	modules/blessed/lib/program.js	3081	// if (this.tput) return this.put.hvp(row, col);	COMMENT
LOW	modules/blessed/lib/program.js	3101	// Ps = 8 -> Auto-repeat Keys (DECARM).	COMMENT
LOW	modules/blessed/lib/program.js	3121	// abled by the titeInhibit resource).	COMMENT
27 more matches not shown…

Cross-Language Confusion (JS/TS)9 hits · 52 pts

Severity	File	Line	Snippet	Context
HIGH⚡	modules/blessed/lib/tput.js	823	print(cap[0]);	CODE
HIGH⚡	modules/blessed/lib/tput.js	833	print(ch);	CODE
HIGH⚡	modules/blessed/lib/tput.js	839	print(String.fromCharCode(parseInt(ch, 8)));	CODE
HIGH	modules/blessed/lib/tput.js	897	print(ch);	CODE
HIGH	modules/blessed/lib/tput.js	910	print('%');	CODE
HIGH	modules/blessed/lib/tput.js	1175	print(code);	CODE
HIGH	modules/blessed/lib/tput.js	1194	print(part);	CODE
HIGH	modules/blessed/lib/tput.js	1206	print(part);	CODE
HIGH	modules/blessed/lib/tput.js	1234	print(part);	CODE

Hallucination Indicators5 hits · 50 pts

Severity	File	Line	Snippet	Context
CRITICAL	test/programmatic/fclone.mocha.js	107	output.c.should.not.have.property('a');	CODE
CRITICAL	test/programmatic/god.mocha.js	137	proc.pm2_env.status.should.be.equal('stopped');	CODE
CRITICAL	test/programmatic/god.mocha.js	146	proc.pm2_env.status.should.be.equal('online');	CODE
CRITICAL	test/programmatic/send_data_process.mocha.js	62	packet.raw.data.success.should.eql(true);	CODE
CRITICAL	test/programmatic/send_data_process.mocha.js	83	packet.raw.data.success.should.eql(true);	CODE

Hyper-Verbose Identifiers10 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	examples/sourcemap-auto-resolve/API.js	668	function restartExistingProcessName(cb) {	CODE
LOW	examples/sourcemap-auto-resolve/API.js	710	function restartExistingProcessPath(cb) {	CODE
LOW	lib/ProcessContainer.js	251	function getUncaughtExceptionListener(listener) {	CODE
LOW	lib/API.js	755	function restartExistingProcessName(cb) {	CODE
LOW	lib/API.js	819	function restartExistingProcessPathOrStartNew(cb) {	CODE
LOW	lib/ProcessContainerBun.js	293	function getUncaughtExceptionListener(listener) {	CODE
LOW	lib/API/pm2-plus/helpers.js	10	function processesAreAlreadyMonitored(CLI, cb) {	CODE
LOW	lib/API/UX/pm2-ls.js	53	function listModulesAndAppsManaged(list, commander) {	CODE
LOW	lib/API/UX/pm2-ls.js	417	function listHighResourcesProcesses(sys_infos) {	CODE
LOW	modules/pm2-io-agent/src/utils/EDS.js	8	function ExponentiallyDecayingSample (options) {	CODE

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	examples/run-php-python-ruby-bash/leak-mem.py	45	except Exception:	CODE

Example Usage Blocks2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	test/windows.sh	6	# Usage:	COMMENT
LOW	test/docker-parallel.sh	6	# Usage:	COMMENT

Excessive Try-Catch Wrapping2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	examples/run-php-python-ruby-bash/leak-mem.py	17	except Exception:	CODE
LOW	examples/run-php-python-ruby-bash/leak-mem.py	45	except Exception:	CODE

Deep Nesting2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	examples/run-php-python-ruby-bash/leak-mem.py	33		CODE
LOW	examples/run-php-python-ruby-bash/leak-mem.py	56		CODE

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	test/docker-parallel.sh	165	# Check if test is excluded	COMMENT

Unitech/pm2

Open-Source Code Quality, Security and Technical Debt Review