2.9

Adjusted Signal

2.9

Raw Pattern Score

100%

Time Factor

2026-10-19

Last Push

8.2K

Stars

Language

572.0K

Lines of Code

2.3K

Files

952

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 652 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.0/100 · LOW

Are imports declared and package/API names verified? 124 finding(s).

Agent Over-Engineering Ratio 4.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 177 finding(s).

PR Review Velocity Impact 10.9/100 · LOW

Which changes need focused human review? 952 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 180LOW 771

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 952 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators176 hits · 552 pts

Severity	File	Line	Snippet	Context
MEDIUM	grpc/grpc.go	58	// ── Health ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	grpc/grpc.go	64	// ── Base ─────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	grpc/grpc.go	82	// ── API ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	grpc/grpc.go	88	// ── MCP ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	grpc/grpc.go	106	// ── LLM ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	grpc/grpc.go	116	// ── Agent ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	grpc/grpc.go	122	// ── Sandbox ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	grpc/grpc.go	147	// ── Server lifecycle ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	grpc/auth/guard_test.go	175	// ── TaiTunnel auth tests ──────────────────────────────────────────────────	COMMENT
MEDIUM	grpc/run/stream_test.go	20	// ── Layer 1: Basic RPC validation (no LLM, no real agent) ─────────────────	COMMENT
MEDIUM	grpc/run/stream_test.go	166	// ── Layer 2: DryRun mode (needs agent resolver, no LLM) ──────────────────	COMMENT
MEDIUM	grpc/run/stream_test.go	298	// ── Layer 2b: A2A DryRun (agent-caller resolves, no LLM) ─────────────────	COMMENT
MEDIUM	grpc/run/stream_test.go	420	// ── Layer 3 (optional): Real LLM integration ─────────────────────────────	COMMENT
MEDIUM	grpc/run/stream_test.go	526	// ── Helpers ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	agent/sandbox/v2/images.yml	24	# ── Claude Code variants ─────────────────────────────────────	COMMENT
MEDIUM	agent/sandbox/v2/images.yml	82	# ── OpenCode variants ────────────────────────────────────────	COMMENT
MEDIUM	agent/sandbox/v2/images.yml	140	# ── Desktop-only (no agent CLI) ─────────────────────────────	COMMENT
MEDIUM	openapi/setting/ocr_presets.yml	4	# ── Tao Service ──────────────────────────────────	COMMENT
MEDIUM	openapi/setting/ocr_presets.yml	17	# ── Open-Source / Self-hosted ─────────────────────	COMMENT
MEDIUM	openapi/setting/ocr_presets.yml	46	# ── Cloud APIs ────────────────────────────────────	COMMENT
MEDIUM	unit-test/agent/app/openapi/scopes/alias.yml	4	# ================================================	COMMENT
MEDIUM	unit-test/agent/app/openapi/scopes/alias.yml	6	# ================================================	COMMENT
MEDIUM⚡	unit-test/agent/app/openapi/scopes/alias.yml	25	# ================================================	COMMENT
MEDIUM⚡	unit-test/agent/app/openapi/scopes/alias.yml	27	# ================================================	COMMENT
MEDIUM⚡	unit-test/agent/app/openapi/scopes/alias.yml	29	# ================================================	COMMENT
MEDIUM⚡	unit-test/agent/app/openapi/scopes/alias.yml	31	# ================================================	COMMENT
MEDIUM⚡	unit-test/agent/app/openapi/scopes/alias.yml	103	# ================================================	COMMENT
MEDIUM⚡	unit-test/agent/app/openapi/scopes/alias.yml	105	# ================================================	COMMENT
MEDIUM	unit-test/agent/app/openapi/scopes/alias.yml	183	# ================================================	COMMENT
MEDIUM	unit-test/agent/app/openapi/scopes/alias.yml	185	# ================================================	COMMENT
MEDIUM	unit-test/agent/app/openapi/scopes/alias.yml	271	# ================================================	COMMENT
MEDIUM	unit-test/agent/app/openapi/scopes/alias.yml	273	# ================================================	COMMENT
MEDIUM	unit-test/agent/scripts/_common.sh	85	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	unit-test/agent/scripts/_common.sh	91	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	unit-test/agent/scripts/_common.sh	125	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	unit-test/agent/scripts/_common.sh	135	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	llmprovider/presets.yml	1	# ─── OpenCode Go (OpenAI) ──────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	207	# ─── OpenCode Go (Anthropic) ──────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	292	# ─── OpenRouter ─────────────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	497	# ─── 超算互联网 Token Plan (OpenAI) ─────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	631	# ─── 超算互联网 Token Plan (Anthropic) ──────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	765	# ─── 超算互联网 (OpenAI) ────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	910	# ─── 蚂蚁数科 DTMaaS Token Plan (OpenAI) ────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	1011	# ─── Anthropic ──────────────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	1100	# ─── OpenAI ─────────────────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	1568	# ─── DeepSeek (Anthropic) ───────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	1637	# ─── TypeSafe AI (Decision) ─────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	1650	# ─── Kimi / Moonshot (International) ────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	1723	# ─── Kimi / 月之暗面 (CN) ───────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	1796	# ─── Google DeepMind (AI Studio) ────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	1968	# ─── xAI (Grok) ────────────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	2076	# ─── MiniMax (International) ────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	2146	# ─── MiniMax (国内) ─────────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	2195	# ─── 小米 MiMo ─────────────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	2281	# ─── 阶跃星辰 StepFun ──────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	2343	# ─── 硅基流动 SiliconFlow ──────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	2586	# ─── 火山方舟 Volcengine ARK ───────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	2726	# ─── 腾讯混元 MaaS ─────────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	2817	# ─── NVIDIA Build ───────────────────────────────────────	COMMENT
MEDIUM	llmprovider/presets.yml	3053	# ─── Ollama (Local) ─────────────────────────────────────	COMMENT
116 more matches not shown…

Structural Annotation Overuse194 hits · 350 pts

Severity	File	Line	Snippet	Context
LOW	seed/seed_reset_test.go	29	// Step 1: Clear and import data (initial import)	COMMENT
LOW⚡	seed/seed_reset_test.go	45	// Step 2: Clear all data (simulate Reset scenario)	COMMENT
LOW⚡	seed/seed_reset_test.go	55	// Step 3: Import again with duplicate="update" (this is the critical test)	COMMENT
LOW	seed/seed_reset_test.go	102	// Step 1: Clear and initial import	COMMENT
LOW	seed/seed_reset_test.go	115	// Step 2: Delete one specific role (simulate partial data loss)	COMMENT
LOW	seed/seed_reset_test.go	135	// Step 3: Re-import with duplicate="update"	COMMENT
LOW⚡	test/utils.go	20	// // Step 1: Prepare test environment	COMMENT
LOW⚡	test/utils.go	24	// // Step 2: Your actual test code here...	COMMENT
LOW	rss/parse.go	47	// Step 1: check if it is valid XML at all	COMMENT
LOW⚡	rss/parse.go	67	// Step 2: detect format	COMMENT
LOW⚡	rss/parse.go	73	// Step 3: attempt a full parse to verify structural integrity	COMMENT
LOW	sitemap/fetch.go	38	// Step 1: Discover sitemap files	COMMENT
LOW	sitemap/fetch.go	54	// Step 2: Use estimated URL counts to skip files before offset	COMMENT
LOW⚡	sitemap/discover.go	29	// Step 1: GET robots.txt	COMMENT
LOW⚡	sitemap/discover.go	34	// Step 2: fallback to well-known path	COMMENT
LOW	agent/inbox/inbox.go	28	// Step 1: Count tasks	COMMENT
LOW	agent/inbox/inbox.go	72	// Step 2: Batch fetch latest mail per task	COMMENT
LOW	agent/robot/executor/standard/tasks.go	432	// Step 1: Try exact match first	COMMENT
LOW	agent/robot/executor/standard/tasks.go	448	// Step 2: Suffix match — LLM may omit namespace prefix	COMMENT
LOW	agent/task/move.go	41	// Step 1: Decrement positions in old column for items after the moved task	COMMENT
LOW⚡	agent/task/move.go	53	// Step 2: Increment positions in new column for items at or after target position	COMMENT
LOW⚡	agent/task/move.go	63	// Step 3: Update target task	COMMENT
LOW⚡	agent/store/xun/message.go	208	// Step 1: query only id column with ORDER BY (lightweight sort).	COMMENT
LOW⚡	agent/store/xun/message.go	209	// Step 2: fetch specified columns by primary key lookup (no sort needed).	COMMENT
LOW⚡	agent/store/xun/message.go	218	// Step 1: query only IDs (sort on 8-byte integers, not full rows with large props)	COMMENT
LOW	agent/store/xun/message.go	247	// Step 2: fetch full rows by PK lookup with specified columns (no filesort)	COMMENT
LOW	openapi/oauth/core_test.go	732	// Step 1: Authorization	COMMENT
LOW⚡	openapi/oauth/core_test.go	747	// Step 2: Token exchange	COMMENT
LOW⚡	openapi/oauth/core_test.go	754	// Step 3: Refresh token (token already stored with proper scope information)	COMMENT
LOW⚡	openapi/oauth/core_test.go	762	// Step 4: Revoke token	COMMENT
LOW⚡	openapi/oauth/token_test.go	664	// Step 1: Generate access token	COMMENT
LOW⚡	openapi/oauth/token_test.go	670	// Step 2: Store token data with expiresIn parameter	COMMENT
LOW⚡	openapi/oauth/token_test.go	676	// Step 3: Introspect token	COMMENT
LOW⚡	openapi/oauth/token_test.go	683	// Step 4: Validate token audience	COMMENT
LOW⚡	openapi/oauth/token_test.go	689	// Step 5: Validate token binding	COMMENT
LOW⚡	openapi/oauth/token_test.go	699	// Step 6: Token exchange	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	44	// Step 1: Calls test.Prepare(t, config.Conf) to initialize the base Yao test environment	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	48	// Step 2: Creates test provider with configured options	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	63	// Step 1: Initialize base test environment with all Yao dependencies	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	66	// Step 2: Initialize test provider	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	77	// Step 1: Clean up test data from database	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	78	// Step 2: Reset global variables	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	79	// Step 3: Call test.Clean() to clean up the base test environment	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	83	// Step 1: Clean up test data	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	86	// Step 2: Reset global variables	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	89	// Step 3: Clean up base test environment	COMMENT
LOW⚡	openapi/oauth/providers/user/oauth_account_test.go	36	// Step 1: Create a test user first (OAuth accounts need a user_id)	COMMENT
LOW⚡	openapi/oauth/providers/user/oauth_account_test.go	42	// Step 2: Create test OAuth account data dynamically	COMMENT
LOW	openapi/oauth/providers/user/invitation_test.go	471	// Step 1: Create multiple codes	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	493	// Step 2: Use first code	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	497	// Step 3: Verify first code is used	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	510	// Step 4: Delete second code (unused)	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	514	// Step 5: Delete first code (used)	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	518	// Step 6: Verify both codes are deleted	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	34	// Step 1: Generate MFA Secret	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	49	// Step 2: Enable MFA	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	61	// Step 3: Verify MFA Code	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	74	// Step 4: Get MFA Config	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	97	// Step 5: Generate Recovery Codes	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	123	// Step 6: Test Recovery Code Verification	COMMENT
134 more matches not shown…

Verbosity Indicators181 hits · 332 pts

Severity	File	Line	Snippet	Context
LOW	seed/seed_reset_test.go	29	// Step 1: Clear and import data (initial import)	COMMENT
LOW⚡	seed/seed_reset_test.go	45	// Step 2: Clear all data (simulate Reset scenario)	COMMENT
LOW⚡	seed/seed_reset_test.go	55	// Step 3: Import again with duplicate="update" (this is the critical test)	COMMENT
LOW	seed/seed_reset_test.go	102	// Step 1: Clear and initial import	COMMENT
LOW	seed/seed_reset_test.go	115	// Step 2: Delete one specific role (simulate partial data loss)	COMMENT
LOW	seed/seed_reset_test.go	135	// Step 3: Re-import with duplicate="update"	COMMENT
LOW⚡	test/utils.go	20	// // Step 1: Prepare test environment	COMMENT
LOW⚡	test/utils.go	24	// // Step 2: Your actual test code here...	COMMENT
LOW	rss/parse.go	47	// Step 1: check if it is valid XML at all	COMMENT
LOW⚡	rss/parse.go	67	// Step 2: detect format	COMMENT
LOW⚡	rss/parse.go	73	// Step 3: attempt a full parse to verify structural integrity	COMMENT
LOW	sitemap/fetch.go	38	// Step 1: Discover sitemap files	COMMENT
LOW	sitemap/fetch.go	54	// Step 2: Use estimated URL counts to skip files before offset	COMMENT
LOW⚡	sitemap/discover.go	29	// Step 1: GET robots.txt	COMMENT
LOW⚡	sitemap/discover.go	34	// Step 2: fallback to well-known path	COMMENT
LOW	agent/inbox/inbox.go	28	// Step 1: Count tasks	COMMENT
LOW	agent/inbox/inbox.go	72	// Step 2: Batch fetch latest mail per task	COMMENT
LOW	agent/robot/executor/standard/tasks.go	432	// Step 1: Try exact match first	COMMENT
LOW	agent/robot/executor/standard/tasks.go	448	// Step 2: Suffix match — LLM may omit namespace prefix	COMMENT
LOW	agent/task/move.go	41	// Step 1: Decrement positions in old column for items after the moved task	COMMENT
LOW⚡	agent/task/move.go	53	// Step 2: Increment positions in new column for items at or after target position	COMMENT
LOW⚡	agent/task/move.go	63	// Step 3: Update target task	COMMENT
LOW⚡	agent/store/xun/message.go	208	// Step 1: query only id column with ORDER BY (lightweight sort).	COMMENT
LOW⚡	agent/store/xun/message.go	209	// Step 2: fetch specified columns by primary key lookup (no sort needed).	COMMENT
LOW⚡	agent/store/xun/message.go	218	// Step 1: query only IDs (sort on 8-byte integers, not full rows with large props)	COMMENT
LOW	agent/store/xun/message.go	247	// Step 2: fetch full rows by PK lookup with specified columns (no filesort)	COMMENT
LOW	openapi/oauth/core_test.go	732	// Step 1: Authorization	COMMENT
LOW⚡	openapi/oauth/core_test.go	747	// Step 2: Token exchange	COMMENT
LOW⚡	openapi/oauth/core_test.go	754	// Step 3: Refresh token (token already stored with proper scope information)	COMMENT
LOW⚡	openapi/oauth/core_test.go	762	// Step 4: Revoke token	COMMENT
LOW⚡	openapi/oauth/token_test.go	664	// Step 1: Generate access token	COMMENT
LOW⚡	openapi/oauth/token_test.go	670	// Step 2: Store token data with expiresIn parameter	COMMENT
LOW⚡	openapi/oauth/token_test.go	676	// Step 3: Introspect token	COMMENT
LOW⚡	openapi/oauth/token_test.go	683	// Step 4: Validate token audience	COMMENT
LOW⚡	openapi/oauth/token_test.go	689	// Step 5: Validate token binding	COMMENT
LOW⚡	openapi/oauth/token_test.go	699	// Step 6: Token exchange	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	44	// Step 1: Calls test.Prepare(t, config.Conf) to initialize the base Yao test environment	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	48	// Step 2: Creates test provider with configured options	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	63	// Step 1: Initialize base test environment with all Yao dependencies	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	66	// Step 2: Initialize test provider	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	77	// Step 1: Clean up test data from database	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	78	// Step 2: Reset global variables	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	79	// Step 3: Call test.Clean() to clean up the base test environment	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	83	// Step 1: Clean up test data	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	86	// Step 2: Reset global variables	COMMENT
LOW⚡	openapi/oauth/providers/user/user_test.go	89	// Step 3: Clean up base test environment	COMMENT
LOW⚡	openapi/oauth/providers/user/oauth_account_test.go	36	// Step 1: Create a test user first (OAuth accounts need a user_id)	COMMENT
LOW⚡	openapi/oauth/providers/user/oauth_account_test.go	42	// Step 2: Create test OAuth account data dynamically	COMMENT
LOW	openapi/oauth/providers/user/invitation_test.go	471	// Step 1: Create multiple codes	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	493	// Step 2: Use first code	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	497	// Step 3: Verify first code is used	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	510	// Step 4: Delete second code (unused)	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	514	// Step 5: Delete first code (used)	COMMENT
LOW⚡	openapi/oauth/providers/user/invitation_test.go	518	// Step 6: Verify both codes are deleted	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	34	// Step 1: Generate MFA Secret	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	49	// Step 2: Enable MFA	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	61	// Step 3: Verify MFA Code	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	74	// Step 4: Get MFA Config	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	97	// Step 5: Generate Recovery Codes	COMMENT
LOW	openapi/oauth/providers/user/user_mfa_test.go	123	// Step 6: Test Recovery Code Verification	COMMENT
121 more matches not shown…

Over-Commented Block214 hits · 205 pts

Severity	File	Line	Snippet	Context
LOW	cmd/websocket.go	1	package cmd	COMMENT
LOW	cmd/websocket.go	21	// if len(args) < 1 {	COMMENT
LOW	cmd/websocket.go	41	// if argsLen > 2 {	COMMENT
LOW	cmd/get/get_test.go	1	package get	COMMENT
LOW	cmd/get/get_test.go	21		COMMENT
LOW	sui/storages/azure/azure.go	21	// New create a new azure sui	COMMENT
LOW	sui/storages/local/block_test.go	1	package local	COMMENT
LOW	sui/storages/local/block_test.go	21	// assert.Equal(t, "ColumnsTwo", blocks[0].(*Block).ID)	COMMENT
LOW	sui/storages/local/block_test.go	41	// tmpl, err := tests.Demo.GetTemplate("tech-blue")	COMMENT
LOW	sui/storages/local/block_test.go	61		COMMENT
LOW	sui/storages/local/block_test.go	81	// defer clean()	COMMENT
LOW	sui/storages/local/block_test.go	101	// if err != nil {	COMMENT
LOW	sui/storages/local/component_test.go	1	package local	COMMENT
LOW	sui/storages/local/component_test.go	21	// assert.Equal(t, "/Box/Box.html", components[0].(*Component).Codes.HTML.File)	COMMENT
LOW	sui/storages/local/component_test.go	41	// tmpl, err := tests.Demo.GetTemplate("tech-blue")	COMMENT
LOW	sui/storages/local/component_test.go	61		COMMENT
LOW	sui/core/parser.go	61		COMMENT
LOW	sui/core/parser.go	901	// style := sel.AttrOr("style", "")	COMMENT
LOW	sui/api/api.go	41	// "process": "sui.Setting",	COMMENT
LOW	sui/api/api.go	61	// "path": "/:id/locale/:template_id",	COMMENT
LOW	sui/api/api.go	81	// "path": "/:id/block/export/:template_id",	COMMENT
LOW	sui/api/api.go	101	// "body": "?:content",	COMMENT
LOW	sui/api/api.go	121	// {	COMMENT
LOW	sui/api/api.go	141	// "method": "POST",	COMMENT
LOW	sui/api/api.go	161	// "in": ["$param.id", "$param.template_id", "$param.route", ":payload"],	COMMENT
LOW	sui/api/api.go	181	// "in": ["$param.id", "$param.template_id", "$param.route", ":query"],	COMMENT
LOW	sui/api/api.go	201	// },	COMMENT
LOW	sui/api/api.go	221	// "path": "/:id/asset/:template_id/@pages/*path",	COMMENT
LOW	sui/api/api.go	241	// {	COMMENT
LOW	tools/websearch/websearch_test.go	21	}	COMMENT
LOW	tools/decision/decide.go	21	//go:embed decide_schema.json	COMMENT
LOW	monitor/README.md	101		COMMENT
LOW	llm/doc.go	1	// Package llm manages LLM provider and model configuration, replacing	COMMENT
LOW	llm/doc.go	21	//	COMMENT
LOW	test/utils.go	1	// Package test provides comprehensive testing utilities for the Yao application framework.	COMMENT
LOW	test/utils.go	21	// test.Prepare(t, config.Conf)	COMMENT
LOW	test/utils.go	41	// test.Start(t, map[string]gin.HandlerFunc{	COMMENT
LOW	test/utils.go	61	// 2. Parses app.yao/app.json configuration with environment variable substitution	COMMENT
LOW	test/utils.go	81	// 3. Starts server on random available port	COMMENT
LOW	test/utils.go	101	// })	COMMENT
LOW	test/utils.go	121	//	COMMENT
LOW	test/utils.go	141	//	COMMENT
LOW	test/utils.go	401	// reader, err := data.ReadApp()	COMMENT
LOW	test/utils.go	701	//	COMMENT
LOW	test/utils.go	721	// - *.jsonc (JSON with comments)	COMMENT
LOW	test/utils.go	821	}	COMMENT
LOW	config/config_test.go	21	// xiangPath := os.Getenv("XIANG_PATH")	COMMENT
LOW	attachment/process.go	661	}	COMMENT
LOW	rss/discover.go	41	// Discover extracts feed URLs from the given text content.	COMMENT
LOW	rss/process.go	21	//	COMMENT
LOW	rss/process.go	41	}	COMMENT
LOW	rss/process.go	81	// Usage:	COMMENT
LOW	rss/process.go	141	//	COMMENT
LOW	excel/write_test.go	161	// Optional: Save the file for manual inspection	COMMENT
LOW	sitemap/process.go	21	// processParse handles the sitemap.Parse process.	COMMENT
LOW	sitemap/process.go	41	if err != nil {	COMMENT
LOW	sitemap/process.go	81	//	COMMENT
LOW	sitemap/process.go	101	//	COMMENT
LOW	sitemap/process.go	201	// Writes a batch of URLs to the open sitemap writer.	COMMENT
LOW	utils/jsonschema/jsonschema.go	21	//	COMMENT
154 more matches not shown…

Fake / Example Data124 hits · 118 pts

Severity	File	Line	Snippet	Context
LOW	grpc/IMPL.md	250	"user": "admin@example.com",	CODE
LOW	attachment/manager_test.go	143	strings.Repeat("Lorem ipsum dolor sit amet, consectetur adipiscing elit. ", 100)	CODE
LOW	attachment/manager_test.go	143	strings.Repeat("Lorem ipsum dolor sit amet, consectetur adipiscing elit. ", 100)	CODE
LOW	workspace/git_test.go	30	Author: &object.Signature{Name: "Test", Email: "test@test.com", When: time.Now()},	CODE
LOW	workspace/git_test.go	243	result, err := m.GitCommit(ctx, ws.ID, ".", "test commit", "Test", "test@test.com", false)	CODE
LOW	rss/parse_test.go	33	assert.Equal(t, "Jane Doe", feed.Podcast.Author)	CODE
LOW	rss/build_test.go	53	Author: "Jane Doe",	CODE
LOW	rss/build_test.go	58	Owner: &Owner{Name: "Jane Doe", Email: "jane@example.com"},	CODE
LOW	rss/rss_test.go	138	assert.Equal(t, "Jane Doe", p.Author)	CODE
LOW	rss/rss_test.go	145	assert.Equal(t, "Jane Doe", p.Owner.Name)	CODE
LOW	utils/jsonschema/jsonschema_test.go	186	"name": "John Doe",	CODE
LOW	utils/jsonschema/jsonschema_test.go	531	"name": "John Doe",	CODE
LOW	agent/README.md	25	"placeholder": {	CODE
LOW	agent/assistant/assistant.go	172	"placeholder": ast.Placeholder,	CODE
LOW	agent/assistant/load_supplement_integration_test.go	233	assert.Equal(t, ast.Placeholder, m["placeholder"])	CODE
LOW	agent/assistant/load.go	460	if v, ok := data["placeholder"]; ok {	CODE
LOW	agent/docs/i18n.md	65	"placeholder": {	CODE
LOW	agent/docs/i18n.md	157	"placeholder": {	CODE
LOW	agent/docs/configuration.md	82	"placeholder": {	CODE
LOW	agent/docs/configuration.md	231	"placeholder": {	CODE
LOW	agent/robot/types/robot_test.go	555	Target: "user@example.com",	CODE
LOW⚡	agent/robot/types/robot_test.go	707	Target: "user@example.com",	CODE
LOW⚡	agent/robot/types/robot_test.go	709	Recipients: []string{"user@example.com", "manager@example.com"},	CODE
LOW⚡	agent/robot/types/robot_test.go	716	assert.Equal(t, "user@example.com", result.Target)	CODE
LOW	agent/robot/executor/standard/goals_integration_test.go	101	"recipients": []interface{}{"user@example.com", "team@example.com"},	CODE
LOW	agent/robot/executor/standard/goals_integration_test.go	111	assert.Equal(t, []string{"user@example.com", "team@example.com"}, result.Recipients)	CODE
LOW	agent/robot/executor/standard/goals_integration_test.go	122	data := map[string]interface{}{"recipients": []interface{}{"user@example.com"}}	CODE
LOW	agent/robot/executor/standard/goals_integration_test.go	127	data := map[string]interface{}{"type": "sms", "recipients": []interface{}{"user@example.com"}}	CODE
LOW	agent/robot/executor/standard/input_unit_test.go	297	Recipients: []string{"user@example.com"},	CODE
LOW	agent/robot/executor/standard/input_unit_test.go	306	assert.Contains(t, result, "user@example.com")	CODE
LOW	agent/store/types/fields.go	18	"placeholder": true,	CODE
LOW	agent/store/types/fields.go	95	"placeholder",	CODE
LOW	agent/store/types/prompt_test.go	406	ctx: map[string]string{"USER": "user@example.com"},	CODE
LOW	agent/store/types/convert.go	428	if placeholder, ok := data["placeholder"]; ok && placeholder != nil {	CODE
LOW	agent/store/types/fields_test.go	128	"placeholder",	CODE
LOW	agent/store/types/fields_test.go	178	"placeholder",	CODE
LOW	agent/store/types/fields_test.go	232	"placeholder",	CODE
LOW	agent/store/types/convert_test.go	460	"placeholder": map[string]interface{}{	CODE
LOW	agent/store/types/convert_test.go	645	"placeholder": nil,	CODE
LOW	agent/store/xun/assistant.go	175	"placeholder": assistant.Placeholder,	CODE
LOW	agent/store/xun/assistant.go	242	jsonFields := []string{"options", "tags", "modes", "prompts", "prompt_presets", "connector_options", "db", "mcp", "work	CODE
LOW	agent/store/xun/assistant.go	461	jsonFields := []string{"tags", "options", "prompts", "prompt_presets", "connector_options", "workflow", "sandbox", "mcp	CODE
LOW	agent/store/xun/assistant.go	534	jsonFields := []string{"tags", "modes", "options", "prompts", "prompt_presets", "connector_options", "workflow", "sandb	CODE
LOW	agent/store/xun/assistant.go	661	if placeholder, has := data["placeholder"]; has && placeholder != nil {	CODE
LOW	openapi/README.md	102	"username": "user@example.com",	CODE
LOW	openapi/README.md	406	"username": "user@example.com",	CODE
LOW	openapi/README.md	422	"email": "user@example.com",	CODE
LOW	openapi/README.md	423	"name": "John Doe"	CODE
LOW	openapi/README.md	671	"username": "user@example.com",	CODE
LOW	openapi/oauth/oauth_test.go	132	Email: "admin@example.com",	CODE
LOW	openapi/oauth/oauth_test.go	153	Name: "John Doe",	CODE
LOW	openapi/oauth/providers/user/member_test.go	127	"invitation_token": "fake-token",	CODE
LOW	openapi/oauth/providers/user/member_test.go	357	"admin@example.com",	CODE
LOW	openapi/oauth/providers/user/member_test.go	1352	"admin@example.com",	CODE
LOW	openapi/oauth/providers/user/member_test.go	1514	"admin@example.com",	CODE
LOW	openapi/oauth/providers/user/member_test.go	1613	"admin@example.com",	CODE
LOW	openapi/chat/chat.go	77	response.RespondWithSuccess(c, response.StatusOK, gin.H{"message": "placeholder"})	CODE
LOW	openapi/tests/oauth/authorized_test.go	27	c.Set("__oauth_email", "user@example.com")	CODE
LOW	openapi/tests/oauth/authorized_test.go	36	assert.Equal(t, "user@example.com", info.OAuthEmail)	CODE
LOW	openapi/tests/agent/assistant_update_test.go	662	"placeholder": map[string]interface{}{	CODE
64 more matches not shown…

TODO Padding55 hits · 107 pts

Severity	File	Line	Snippet	Context
LOW⚡	agent/store/redis/redis.go	19	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	25	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	31	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	37	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	43	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	53	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	59	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	65	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	71	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	77	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	87	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	93	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	99	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	105	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	111	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	117	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	127	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	133	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	139	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	145	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	151	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	157	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	163	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	173	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	179	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	185	// TODO: implement	COMMENT
LOW⚡	agent/store/redis/redis.go	191	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	19	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	25	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	31	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	37	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	43	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	53	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	59	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	65	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	71	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	77	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	87	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	93	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	99	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	105	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	111	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	117	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	127	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	133	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	139	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	145	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	151	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	157	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	163	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	173	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	179	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	185	// TODO: implement	COMMENT
LOW⚡	agent/store/mongo/mongo.go	191	// TODO: implement	COMMENT
LOW	job/execution.go	144	Sequence: 0, // TODO: implement sequence tracking	CODE

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	agent/sandbox/v2/images.yml	3	# This file is embedded into the Yao binary at compile time.	COMMENT
MEDIUM	unit-test/agent/scripts/_common.sh	4	# This file provides:	COMMENT

Modern AI Meta-Vocabulary2 hits · 5 pts

Severity	File	Line	Snippet	Context
MEDIUM	agent/robot/TECHNICAL.md	27	├── manager/ # Manager package (orchestration)	CODE
MEDIUM	unit-test/agent/scripts/_common.sh	149	# Skip test-orchestration-only variables	COMMENT

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	agent/search/handlers/web/tavily.go	54	IncludeAnswer bool `json:"include_answer,omitempty"` // Include AI-generated answer	CODE

Example Usage Blocks2 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	attachment/types.go	18	// Example usage:	COMMENT
LOW⚡	unit-test/agent/app/openapi/scopes/alias.yml	110	# Usage:	COMMENT

Hyper-Verbose Identifiers1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…test/agent/app/assistants/tests/hook-next/src/index.ts	100	function scenarioConditionalDelegate(completion: any): any {	CODE

YaoApp/yao

Open-Source Code Quality, Security and Technical Debt Review