3.2

Adjusted Signal

3.2

Raw Pattern Score

100%

Time Factor

2026-10-29

Last Push

10.8K

Stars

C++

Language

296.4K

Lines of Code

1.1K

Files

989

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 14.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 971 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 7 finding(s).

Agent Over-Engineering Ratio 0.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 16 finding(s).

PR Review Velocity Impact 16.0/100 · LOW

Which changes need focused human review? 989 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 6MEDIUM 7LOW 976

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 989 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block939 hits · 870 pts

Severity	File	Line	Snippet	Context
LOW	.gitvote.yml	1	# GitVote configuration file	COMMENT
LOW	.gitvote.yml	21	#	COMMENT
LOW	.gitvote.yml	41	# permissions, and organization owners.	COMMENT
LOW	.gitvote.yml	61	teams: []	COMMENT
LOW	.gitvote.yml	81	# hard limit of one status check per day still applies, so if the command	COMMENT
LOW	.gitvote.yml	101	# By default, votes remain open for the configured duration. Sometimes,	COMMENT
LOW	tools/fuzz/component.cpp	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	test/validator/ValidatorRegressionTest.cpp	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	test/validator/ValidatorRegressionTest.cpp	201	auto ValidationResult = ValidEngine->validate(**Result);	COMMENT
LOW	test/validator/ValidatorRegressionTest.cpp	261		COMMENT
LOW	test/validator/ValidatorRegressionTest.cpp	361	// (type $t1 (sub final $t0 (func)))	COMMENT
LOW	test/validator/ValidatorRegressionTest.cpp	461	EXPECT_FALSE(ValidationResult);	COMMENT
LOW	test/validator/ValidatorRegressionTest.cpp	581	// (type (func))	COMMENT
LOW	test/host/mock/mockTest.cpp	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	test/host/wasi/wasi.cpp	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	test/host/socket/wasi_socket.cpp	1	// SPDX-License-Identifier: Apache-2.0	COMMENT
LOW	test/expected/catch.hpp	21	# pragma clang system_header	COMMENT
LOW	test/expected/catch.hpp	41	// Wparentheses have to be suppressed globally.	COMMENT
LOW	test/expected/catch.hpp	61	# if !defined(CATCH_CONFIG_ENABLE_CHRONO_STRINGMAKER)	COMMENT
LOW	test/expected/catch.hpp	81	# define CATCH_PLATFORM_WINDOWS	COMMENT
LOW	test/expected/catch.hpp	101		COMMENT
LOW	test/expected/catch.hpp	121	// can be combined, en-mass, with the _NO_ forms later.	COMMENT
LOW	test/expected/catch.hpp	161	# define CATCH_INTERNAL_SUPPRESS_ZERO_VARIADIC_WARNINGS \	COMMENT
LOW	test/expected/catch.hpp	181	#ifdef __OS400__	COMMENT
LOW	test/expected/catch.hpp	201	#if defined(__ORBIS__)	COMMENT
LOW	test/expected/catch.hpp	221		COMMENT
LOW	test/expected/catch.hpp	241	// MSVC traditional preprocessor needs some workaround for __VA_ARGS__	COMMENT
LOW	test/expected/catch.hpp	261	#endif	COMMENT
LOW	test/expected/catch.hpp	281	// but user still might want to turn it off	COMMENT
LOW	test/expected/catch.hpp	301	// Various stdlib support checks that require __has_include	COMMENT
LOW	test/expected/catch.hpp	321	// work around clang bug with libstdc++ https://bugs.llvm.org/show_bug.cgi?id=31852	COMMENT
LOW	test/expected/catch.hpp	341	// This is set by default, because we assume that unix compilers are posix-signal-compatible by default.	COMMENT
LOW	test/expected/catch.hpp	361		COMMENT
LOW	test/expected/catch.hpp	381		COMMENT
LOW	test/expected/catch.hpp	401		COMMENT
LOW	test/expected/catch.hpp	421	#endif	COMMENT
LOW	test/expected/catch.hpp	441	#endif	COMMENT
LOW	test/expected/catch.hpp	681	#define INTERNAL_CATCH_EXPAND_VARGS(...) __VA_ARGS__	COMMENT
LOW	test/expected/catch.hpp	701		COMMENT
LOW	test/expected/catch.hpp	721	#define INTERNAL_CATCH_STRINGIZE(...) INTERNAL_CATCH_STRINGIZE2(__VA_ARGS__)	COMMENT
LOW	test/expected/catch.hpp	741	#define INTERNAL_CATCH_MAKE_TYPE_LIST2(...) INTERNAL_CATCH_EXPAND_VARGS(decltype(get_wrapper<INTERNAL_CATCH_REMOVE_PAREN	COMMENT
LOW	test/expected/catch.hpp	881	#define INTERNAL_CATCH_NTTP_REG_GEN(TestFunc, ...) INTERNAL_CATCH_VA_NARGS_IMPL( "dummy", __VA_ARGS__, INTERNAL_CATCH_NT	COMMENT
LOW	test/expected/catch.hpp	1001	#ifndef CATCH_CONFIG_TRADITIONAL_MSVC_PREPROCESSOR	COMMENT
LOW	test/expected/catch.hpp	1381	ResultDisposition::Flags resultDisposition;	COMMENT
LOW	test/expected/catch.hpp	1501	return nil;	COMMENT
LOW	test/expected/catch.hpp	1841	}	COMMENT
LOW	test/expected/catch.hpp	2641	#define CATCH_INTERNAL_STRINGIFY(...) #__VA_ARGS__	COMMENT
LOW	test/expected/catch.hpp	5001	// start catch_interfaces_reporter.h	COMMENT
LOW	test/expected/catch.hpp	6361		COMMENT
LOW	test/expected/catch.hpp	7381	template <typename T>	COMMENT
LOW	test/expected/catch.hpp	7861		COMMENT
LOW	test/expected/catch.hpp	7881	#else // Fall back to the generic way.	COMMENT
LOW	test/expected/catch.hpp	7901		COMMENT
LOW	test/expected/catch.hpp	7921	#include <windows.h>	COMMENT
LOW	test/expected/catch.hpp	8341	// start catch_clara.h	COMMENT
LOW	test/expected/catch.hpp	8361	// file LICENSE_1_0.txt or copy at http://www.boost.org/LICENSE_1_0.txt)	COMMENT
LOW	test/expected/catch.hpp	8381	#endif	COMMENT
LOW	test/expected/catch.hpp	8721	}	COMMENT
LOW	test/expected/catch.hpp	9601	// Convenience wrapper for option parser that specifies the help option	COMMENT
LOW	test/expected/catch.hpp	10281	namespace Catch {	COMMENT
879 more matches not shown…

Empty Error Handlers4 hits · 20 pts

Severity	File	Line	Snippet	Context
HIGH	utils/install.py	460	except:	CODE
HIGH	utils/install.py	545	except:	CODE
HIGH	utils/install.py	923	except ValueError:	CODE
HIGH	utils/install.py	645	except:	CODE

Decorative Section Separators3 hits · 14 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	.github/scripts/run-riscv64-quick-tests.sh	40	# =============================================================	COMMENT
MEDIUM⚡	.github/scripts/run-riscv64-quick-tests.sh	42	# =============================================================	COMMENT
MEDIUM⚡	.github/scripts/run-riscv64-quick-tests.sh	52	# =============================================================	COMMENT

TODO Padding8 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	test/host/wasi/wasi.cpp	3675	// TODO: implement	COMMENT
LOW	test/host/wasi/wasi.cpp	3703	// TODO: implement	COMMENT
LOW	test/host/wasi/wasi.cpp	3731	// TODO: implement	COMMENT
LOW	plugins/wasi_nn/wasinnfunc.cpp	92	// TODO: implement RPC for Load	COMMENT
LOW	plugins/wasi_nn/wasinnfunc.cpp	707	// TODO: implement RPC for unload	COMMENT
LOW	plugins/wasi_nn/wasinnfunc.cpp	726	// TODO: implement RPC for finalize_execution_context	COMMENT
LOW	lib/api/wasm_c.cpp	1163	// TODO: implement this	COMMENT
LOW	lib/api/wasm_c.cpp	1193	// TODO: implement this	COMMENT

Cross-Language Confusion (JS/TS)2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	examples/js/repl.js	1240	print(result);	CODE
HIGH	examples/js/hello.js	2	print("Hello",...args)	CODE

Deep Nesting9 hits · 8 pts

Severity	File	Line	Context
LOW	utils/install.py	150	CODE
LOW	utils/install.py	556	CODE
LOW	utils/install.py	621	CODE
LOW	utils/install.py	753	CODE
LOW	utils/install.py	930	CODE
LOW	utils/install.py	1133	CODE
LOW	utils/install.py	1341	CODE
LOW	utils/install.py	1183	CODE
LOW	utils/ohos/configuration/build_thirdparty.py	19	CODE

Redundant / Tautological Comments6 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW	utils/install.py	1429	# Check if the old structure exists (pre-0.15.0 with versioned directory)	COMMENT
LOW	utils/install.py	1467	# Check if wasmedge binary works	COMMENT
LOW	utils/install.py	687	if "12" in output: # Check if CUDA 12.x is installed	STRING
LOW	…ithub/workflows/reusable-build-extensions-on-macos.yml	39	# Set value to `matrix.target` if `input.release` is `true`, or	COMMENT
LOW	…ithub/workflows/reusable-build-extensions-on-linux.yml	47	# Set value to `matrix.target` if `input.release` is `true`, or	COMMENT
LOW	.github/workflows/docker.yml	74	outputs: # Set outputs to true if not pull_request	CODE

Modern AI Meta-Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	Changelog.md	144	* Split `lib/llvm/compiler.cpp` into the focused compilation units (#5101), and moved the lazy JIT orchestration into	COMMENT
MEDIUM	.CurrentChangelog.md	144	* Split `lib/llvm/compiler.cpp` into the focused compilation units (#5101), and moved the lazy JIT orchestration into	COMMENT

Unused Imports5 hits · 5 pts

Severity	File	Line	Context
LOW	utils/install.py	4	CODE
LOW	utils/install.py	4	CODE
LOW	utils/install.py	4	CODE
LOW	utils/install.py	4	CODE
LOW	utils/install.py	4	CODE

Excessive Try-Catch Wrapping4 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	utils/install.py	84	def url_exists(url):	CODE
LOW	utils/install.py	95	except Exception:	CODE
LOW	utils/install.py	868	except Exception as e:	STRING
LOW	utils/install.py	893	except Exception as e:	STRING

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/test-installers.yml	586	# Test install.py with comprehensive features	COMMENT

Hyper-Verbose Identifiers5 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	utils/install.py	1168	def get_remote_version_availability(repo, version):	CODE
LOW	utils/install.py	741	def get_tf_deps_release_package(version, compat):	STRING
LOW	utils/install.py	753	def install_tensorflow_extension(	STRING
LOW	utils/install.py	913	def get_darwin_release_package_variants(compat):	STRING
LOW	utils/install.py	1155	def get_latest_github_release(repo):	STRING

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.github/scripts/run-riscv64-quick-tests.sh	9	# Usage:	COMMENT

WasmEdge/WasmEdge

Open-Source Code Quality, Security and Technical Debt Review