1.9

Adjusted Signal

1.9

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

29.9K

Stars

TypeScript

Language

397.7K

Lines of Code

2.8K

Files

545

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 485 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.5/100 · LOW

Are imports declared and package/API names verified? 19 finding(s).

Agent Over-Engineering Ratio 6.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 420 finding(s).

PR Review Velocity Impact 8.9/100 · LOW

Which changes need focused human review? 545 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 14MEDIUM 56LOW 473

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 545 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers379 hits · 386 pts

Severity	File	Line	Snippet	Context
LOW	packages/desktop-electron/certificates.ts	16	export function trustSelfSignedCertificate(certificatePath: string) {	CODE
LOW	packages/loot-core/src/platform/server/fs/index.ts	280	async function populateDefaultFilesystem() {	CODE
LOW	packages/loot-core/src/server/forecast/app.test.ts	26	async function createForecastWithPostedMonthlySchedule({	CODE
LOW	packages/loot-core/src/server/forecast/app.test.ts	76	async function createForecastWithPostedDailySchedule({	CODE
LOW	…ages/loot-core/src/server/forecast/forecast-filters.ts	131	function equalComparableFilterValues(actual: unknown, expected: unknown) {	CODE
LOW	…ages/loot-core/src/server/forecast/forecast-filters.ts	317	export async function enrichForecastFilterObjects(	CODE
LOW	packages/loot-core/src/server/forecast/app.ts	35	function createUnassignedForecastAccount(): AccountWithComputedBalance {	CODE
LOW	packages/loot-core/src/server/forecast/app.ts	45	function createUnassignedRuleAccountStub(): DbAccountForRules {	CODE
LOW	…t-core/src/server/forecast/forecast-tracking-budget.ts	35	export function projectTrackingBudgetForecast({	CODE
LOW	…s/loot-core/src/server/forecast/forecast-projection.ts	75	export function createEmptyForecastResult(	CODE
LOW	…s/loot-core/src/server/forecast/forecast-projection.ts	148	function groupTransactionsByAccount(transactions: TransactionEntity[]) {	CODE
LOW	…s/loot-core/src/server/forecast/forecast-projection.ts	163	function summarizePostedTransactions(	CODE
LOW	…s/loot-core/src/server/forecast/forecast-projection.ts	189	function buildAccountForecastDataPoints(	CODE
LOW	…ges/loot-core/src/server/forecast/forecast-accounts.ts	64	export async function resolveAccountIdsFromConditions(	CODE
LOW	…ges/loot-core/src/server/forecast/forecast-accounts.ts	91	export function getAccountRestrictionMode(	CODE
LOW	…es/loot-core/src/server/forecast/forecast-schedules.ts	122	export async function getPostedScheduleTransactions(schedules: ScheduleData[]) {	CODE
LOW	…es/loot-core/src/server/forecast/forecast-schedules.ts	140	async function getTransferPayeesByAccountIds(accountIds: string[]) {	CODE
LOW	…es/loot-core/src/server/forecast/forecast-schedules.ts	200	export async function buildFutureScheduleOccurrences(	CODE
LOW	packages/loot-core/src/server/importers/ynab5.ts	99	function getYnabTwiceMonthlyPatterns(dateFirst: string): RecurPattern[] {	CODE
LOW	packages/loot-core/src/server/importers/ynab5.ts	334	async function createCategoryGroupWithUniqueName(params: {	CODE
LOW	packages/loot-core/src/server/importers/ynab5.ts	359	async function createCategoryWithUniqueName(params: {	CODE
LOW	packages/loot-core/src/server/importers/ynab5.ts	872	export async function importScheduledTransactions(	CODE
LOW	packages/loot-core/src/server/importers/ynab5.ts	897	async function createScheduleWithUniqueName(params: {	CODE
LOW	packages/loot-core/src/server/schedules/app.ts	93	function areScheduleConditionsEqual(	CODE
LOW	packages/loot-core/src/server/schedules/app.ts	327	async function allowAutoPostingToRunAgainToday(postsTransaction: boolean) {	CODE
LOW	packages/loot-core/src/server/schedules/app.ts	590	async function postTransactionForSchedule({	CODE
LOW	packages/loot-core/src/server/schedules/app.ts	625	export async function getCompletedScheduleRuleIds(): Promise<string[]> {	CODE
LOW	packages/loot-core/src/server/schedules/app.ts	635	async function hasTransactionForSchedule(	CODE
LOW	packages/loot-core/src/server/schedules/app.ts	651	async function advanceRecurringScheduleFromNextDate(	CODE
LOW	packages/loot-core/src/server/dashboard/app.ts	25	function isExportedCustomReportWidget(	CODE
LOW	packages/loot-core/src/server/transactions/app.ts	36	async function handleBatchUpdateTransactions({	CODE
LOW	…loot-core/src/server/transactions/transaction-rules.ts	119	export function serializeConditionsOrActions(arr) {	CODE
LOW	…loot-core/src/server/transactions/transaction-rules.ts	304	export async function getAllRuleIdsFromSchedules(	CODE
LOW	…loot-core/src/server/transactions/transaction-rules.ts	1072	export async function getRunningBalanceBeforeTransaction(	CODE
LOW	…loot-core/src/server/transactions/transaction-rules.ts	1114	export async function prefetchBalanceOfForTransaction(	CODE
LOW	…loot-core/src/server/transactions/transaction-rules.ts	1158	export async function prepareTransactionForRules(	CODE
LOW	…loot-core/src/server/transactions/transaction-rules.ts	1239	async function refreshCategoryGroupIfChanged(	CODE
LOW	…loot-core/src/server/transactions/transaction-rules.ts	1258	export async function finalizeTransactionForRules(	CODE
LOW	packages/loot-core/src/server/transactions/merge.ts	95	async function mapAndValidateTransactions(	CODE
LOW	packages/loot-core/src/server/transactions/merge.ts	110	export async function mergeTransactionsNoTransfer(	CODE
LOW	…core/src/server/transactions/transaction-rules.test.ts	1573	function countRunningBalanceQueries() {	CODE
LOW	packages/loot-core/src/server/accounts/app.ts	872	async function stopGoCardlessWebTokenPolling() {	CODE
LOW	packages/loot-core/src/server/accounts/app.ts	1137	async function enableBankingCompleteAuth({	CODE
LOW	packages/loot-core/src/server/accounts/app.ts	1202	async function stopEnableBankingPollAuth({ state }: { state: string }) {	CODE
LOW	packages/loot-core/src/server/accounts/app.ts	1397	function getBankSyncStatusFromError(	CODE
LOW	packages/loot-core/src/server/accounts/sync.test.ts	994	function mockSimpleFinTransactions(response) {	CODE
LOW	packages/loot-core/src/server/accounts/sync.ts	75	async function getAccountOldestTransaction(id): Promise<TransactionEntity> {	CODE
LOW	packages/loot-core/src/server/accounts/sync.ts	130	async function downloadGoCardlessTransactions(	CODE
LOW	packages/loot-core/src/server/accounts/sync.ts	189	async function downloadSimpleFinTransactions(	CODE
LOW	packages/loot-core/src/server/accounts/sync.ts	280	async function downloadPluggyAiTransactions(	CODE
LOW	packages/loot-core/src/server/accounts/sync.ts	321	async function downloadAkahuTransactions(	CODE
LOW	packages/loot-core/src/server/accounts/sync.ts	360	async function downloadEnableBankingTransactions(	CODE
LOW	packages/loot-core/src/server/accounts/sync.ts	514	async function normalizeBankSyncTransactions(transactions, acctId) {	CODE
LOW	packages/loot-core/src/server/accounts/sync.ts	813	export function compareFuzzyMatchCandidates(	CODE
LOW	…ges/loot-core/src/server/rules/customFunctions.test.ts	12	function createFormulaQueryContext(): Required<FormulaQueryContext> {	CODE
LOW	packages/loot-core/src/server/rules/balanceOfFormula.ts	4	export function collectFormulasFromActions(	CODE
LOW	packages/loot-core/src/server/rules/balanceOfFormula.ts	18	export function decodeBalanceOfQuotedLiteral(inner: string): string {	CODE
LOW	packages/loot-core/src/server/rules/balanceOfFormula.ts	43	export function resolveAccountIdForBalanceOf(	CODE
LOW	…kages/loot-core/src/server/rules/handlebars-helpers.ts	14	export function registerHandlebarsHelpers() {	CODE
LOW	packages/loot-core/src/server/sync/utils.ts	19	export function resetDeferredMessagesNotification() {	CODE
319 more matches not shown…

Decorative Section Separators41 hits · 123 pts

Severity	File	Line	Snippet	Context
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	7	// ── Types ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	17	// ── Test helpers ────────────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	88	// ── Tests ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	103	// ── Initialization ──────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	218	// ── Load budget ─────────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	330	// ── Close budget ────────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	421	// ── Tab disconnection & failover ────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	480	// ── Heartbeat ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	632	// ── Worker message routing ──────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	731	// ── Budget-replacing operations ─────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	1107	// ── Delete budget ───────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	1161	// ── Track restore ───────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	1272	// ── Multiple budgets ────────────────────────────────────────────────	COMMENT
MEDIUM	…src/platform/client/browser-server/coordinator.test.ts	1314	// ── Eviction ────────────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	9	// ── Types ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	35	// ── Factory ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	40	// ── State ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	51	// ── Console forwarding ─────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	95	// ── Helpers ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	258	// ── Heartbeat ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	271	// ── Port removal & leader failover ────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	285	// ── Leader election ───────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	425	// ── Budget lifecycle helpers ──────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	544	// ── Connection handler ────────────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	558	// ── Tab lifecycle ──────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	587	// ── Initialization ─────────────────────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	611	// ── Leader tab forwarding Worker messages back ─────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	674	// ── Leader tab registering a budget restore ────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	689	// ── Request interception & routing ─────────────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	872	// ── Default: track and forward to leader ───────────────────	COMMENT
MEDIUM	…core/src/platform/client/browser-server/coordinator.ts	914	// ── Public API ────────────────────────────────────────────────────────	COMMENT
MEDIUM	…-actual/lib/rules/__tests__/enforce-boundaries.test.js	18	// ── Imports that are fine ───────────────────────────────────	COMMENT
MEDIUM	…-actual/lib/rules/__tests__/enforce-boundaries.test.js	56	// ── Backtracked imports ─────────────────────────────────────	COMMENT
MEDIUM	…-actual/lib/rules/__tests__/enforce-boundaries.test.js	124	// ── tsconfig compilerOptions.paths ──────────────────────────	COMMENT
MEDIUM	…-actual/lib/rules/__tests__/enforce-boundaries.test.js	136	// ── Vite resolve.alias ──────────────────────────────────────	COMMENT
MEDIUM	…-actual/lib/rules/__tests__/enforce-boundaries.test.js	148	// ── String-keyed config properties ─────────────────────────	COMMENT
MEDIUM	…-actual/lib/rules/__tests__/enforce-boundaries.test.js	160	// ── Multiple violations in one file ─────────────────────────	COMMENT
MEDIUM	packages/desktop-client/src/style/customThemes.ts	218	// ─── @font-face validation ──────────────────────────────────────────────────	COMMENT
MEDIUM	packages/desktop-client/src/style/customThemes.ts	345	// ─── :root block validation ─────────────────────────────────────────────────	COMMENT
MEDIUM	packages/desktop-client/src/style/customThemes.ts	422	// ─── Main validation entry point ────────────────────────────────────────────	COMMENT
MEDIUM	packages/desktop-client/src/style/customThemes.ts	487	// ─── Font embedding (install-time) ─────────────────────────────────────────	COMMENT

Over-Commented Block58 hits · 58 pts

Severity	File	Line	Snippet	Context
LOW	.cursor/hooks/before-mcp-github.sh	1	#!/bin/sh	COMMENT
LOW	.codex/config.toml	1	# Codex project hooks for actualbudget/actual.	COMMENT
LOW	.codex/config.toml	21	# this whole file (hooks included), silently.	COMMENT
LOW	scripts/agent-hooks/github-comment-style.sh	1	#!/bin/sh	COMMENT
LOW	scripts/agent-hooks/no-issue-create.sh	1	#!/bin/sh	COMMENT
LOW	scripts/agent-hooks/pr-template-blank.sh	1	#!/bin/sh	COMMENT
LOW	scripts/agent-hooks/git-guard.sh	1	#!/bin/sh	COMMENT
LOW	packages/crdt/src/crdt/merkle.ts	101	// found. For the former case, we have to that because pruning is	COMMENT
LOW	packages/loot-core/src/platform/server/fs/index.ts	321	const Module = _getModule();	COMMENT
LOW	…s/loot-core/src/server/spreadsheet/spreadsheet.test.ts	41	date: '2017-01-15',	COMMENT
LOW	…s/loot-core/src/server/spreadsheet/spreadsheet.test.ts	61	// spreadsheet.endTransaction();	COMMENT
LOW	…s/loot-core/src/server/spreadsheet/spreadsheet.test.ts	81	// 'g!foo1',	COMMENT
LOW	packages/loot-core/src/server/schedules/app.ts	121	});	COMMENT
LOW	packages/loot-core/src/server/accounts/sync.test.ts	461	// if a rule sets the payee to an old payee, that it still	COMMENT
LOW	packages/loot-core/src/server/db/mappings.ts	1	// @ts-strict-ignore	COMMENT
LOW	packages/loot-core/src/server/sync/index.ts	421	}	COMMENT
LOW	packages/loot-core/src/server/aql/schema/index.ts	1	// @ts-strict-ignore	COMMENT
LOW	packages/loot-core/src/server/aql/schema/index.ts	21	// requirements change, especially regarding split transactions.	COMMENT
LOW	…/loot-core/src/server/budget/schedule-template.test.ts	201	expect(outflow[2]).toBe(15000); // March: 10000 schedule + 5000 unlinked	COMMENT
LOW	…/loot-core/src/server/budget/schedule-template.test.ts	1201		COMMENT
LOW	…/loot-core/src/server/budget/schedule-template.test.ts	1301	// covers month 30 and is the minimal such whole-cent amount.	COMMENT
LOW	…kages/loot-core/src/server/budget/schedule-template.ts	661	// contribution, and the last month of the catch-up (see below).	COMMENT
LOW	…kages/loot-core/src/server/budget/schedule-template.ts	761	// A tracking budget doesn't carry a category's leftover into the next	COMMENT
LOW	packages/loot-core/src/shared/schedules.ts	421		COMMENT
LOW	packages/loot-core/src/shared/months.ts	21	// default. We could try to only work with UTC, but there's not an	COMMENT
LOW	packages/loot-core/src/shared/months.ts	41	//	COMMENT
LOW	packages/ci-actions/bin/check-migrations.ts	1	// overview: identify the migrations in packages/loot-core/migrations/* on	COMMENT
LOW	packages/ci-actions/bin/generate-news-feed.ts	1	// Generates `packages/desktop-client/src/data/news.json` — the feed the Actual	COMMENT
LOW	packages/desktop-client/playwright.config.ts	21	trace: 'on-first-retry',	COMMENT
LOW	packages/desktop-client/src/browser-preload.js	21	reviewId: import.meta.env.REACT_APP_REVIEW_ID,	COMMENT
LOW	…t/src/components/autocomplete/CategoryAutocomplete.tsx	281	// finishes executing. This is caused by content observation code	COMMENT
LOW	…nt/src/components/autocomplete/AccountAutocomplete.tsx	261	// accidentally clicking content that changed as a result of code	COMMENT
LOW	…op-client/src/components/autocomplete/Autocomplete.tsx	161	// in WebKit on touch-enabled devices, taps on this element end	COMMENT
LOW	…op-client/src/components/autocomplete/Autocomplete.tsx	361	// I AM NOT PROUD OF THIS OK??	COMMENT
LOW	…ient/src/components/autocomplete/PayeeAutocomplete.tsx	741	);	COMMENT
LOW	…src/components/transactions/TransactionsTable.test.tsx	1801	},	COMMENT
LOW	…client/src/components/transactions/TransactionList.tsx	41	import { TransactionTable } from './TransactionsTable';	COMMENT
LOW	…ktop-client/src/components/transactions/table/utils.ts	121	// An "empty" value from the perspective of rules: rules are only allowed to	COMMENT
LOW	…top-client/src/components/mobile/budget/BudgetPage.tsx	301	// {	COMMENT
LOW	…/reports/spreadsheets/age-of-money-spreadsheet.test.ts	461	// Jan 20: Transfer -$500 to investment account (off-budget)	COMMENT
LOW	…/reports/spreadsheets/age-of-money-spreadsheet.test.ts	521		COMMENT
LOW	…/reports/spreadsheets/age-of-money-spreadsheet.test.ts	581	// The $1000 that went to investment on Jan 10 consumed from the	COMMENT
LOW	…ts/reports/reports/monte-carlo/monteCarloSimulation.ts	2101	const incomeTowardsSpending = Math.min(spendableIncome, totalPlanned);	COMMENT
LOW	…rts/reports/monte-carlo/monteCarloHistoricalReturns.ts	1	// Historical annual nominal returns for US asset classes, used by the	COMMENT
LOW	packages/desktop-client/src/hooks/useDragDrop.tsx	21	import { theme } from '@actual-app/components/theme';	COMMENT
LOW	packages/desktop-client/src/hooks/useDragDrop.tsx	41	// \| preview ref (useDrag) \| renderDragPreview option \|	COMMENT
LOW	packages/desktop-client/src/hooks/useDragDrop.tsx	61	// Desktop Budget (currently uses react-dnd, should migrate to GridList):	COMMENT
LOW	packages/desktop-client/src/hooks/useSelected.tsx	161	}),	COMMENT
LOW	packages/desktop-client/src/users/usersSlice.ts	21		COMMENT
LOW	packages/sync-server/docker-compose.yml	1	services:	COMMENT
LOW	.github/workflows/publish-ios.yml	1	name: Publish iOS	COMMENT
LOW	.github/workflows/fork-pr-welcome.yml	1	name: Fork PR Welcome	COMMENT
LOW	.github/workflows/size-compare.yml	1	name: Compare Sizes	COMMENT
LOW	.github/workflows/publish-mac-app-store.yml	1	name: Publish Mac App Store	COMMENT
LOW	.github/workflows/issues-feature-implemented.yml	1	name: Handle completed feature requests	COMMENT
LOW	.github/workflows/migration-warnings-comment.yml	1	name: Migration warnings comment	COMMENT
LOW	.github/workflows/docs-spelling.yml	1	name: Check Spelling (Docs)	COMMENT
LOW	.github/actions/docs-spelling/typos.toml	1	# Configuration for `crate-ci/typos`, used by the "Check Spelling (Docs)"	COMMENT

Synthetic Comment Markers9 hits · 48 pts

Severity	File	Line	Snippet	Context
HIGH	packages/docs/docs/releases.md	685	- [#7817](https://github.com/actualbudget/actual/pull/7817) Add a GitHub Actions workflow that labels `[AI]`-prefixed pu	CODE
HIGH	packages/docs/docs/releases.md	685	- [#7817](https://github.com/actualbudget/actual/pull/7817) Add a GitHub Actions workflow that labels `[AI]`-prefixed pu	CODE
HIGH	packages/docs/docs/releases.md	986	- [#7107](https://github.com/actualbudget/actual/pull/7107) Skip AI-generated release notes for PRs originating from `re	CODE
HIGH	packages/docs/docs/releases.md	986	- [#7107](https://github.com/actualbudget/actual/pull/7107) Skip AI-generated release notes for PRs originating from `re	CODE
HIGH	packages/docs/blog/2026-04-06-release-26-4-0.md	110	- [#7107](https://github.com/actualbudget/actual/pull/7107) Skip AI-generated release notes for PRs originating from `re	CODE
HIGH	packages/docs/blog/2026-04-06-release-26-4-0.md	110	- [#7107](https://github.com/actualbudget/actual/pull/7107) Skip AI-generated release notes for PRs originating from `re	CODE
HIGH	packages/docs/blog/2026-06-01-release-26-6-0.md	161	- [#7817](https://github.com/actualbudget/actual/pull/7817) Add a GitHub Actions workflow that labels `[AI]`-prefixed pu	CODE
HIGH	packages/docs/blog/2026-06-01-release-26-6-0.md	161	- [#7817](https://github.com/actualbudget/actual/pull/7817) Add a GitHub Actions workflow that labels `[AI]`-prefixed pu	CODE
HIGH⚡	packages/desktop-client/src/data/news.json	98	"body": "Actual has started receiving what can only be described as _AI slop_ — pull requests and issues generated	CODE

Modern AI Meta-Vocabulary12 hits · 28 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/docs/docs/releases.md	208	- [#8684](https://github.com/actualbudget/actual/pull/8684) Remove the agentic stop-hook (turn-end typecheck + test) fro	CODE
MEDIUM	packages/docs/docs/releases.md	208	- [#8684](https://github.com/actualbudget/actual/pull/8684) Remove the agentic stop-hook (turn-end typecheck + test) fro	CODE
MEDIUM	packages/docs/docs/releases.md	1671	- [#5964](https://github.com/actualbudget/actual/pull/5964) Refactor test execution to use `lage` task runner for improv	CODE
MEDIUM	packages/docs/blog/2025-11-03-release-25-11-0.md	121	- [#5964](https://github.com/actualbudget/actual/pull/5964) Refactor test execution to use `lage` task runner for improv	CODE
MEDIUM	packages/docs/blog/2026-09-01-release-26-9-0.md	115	- [#8684](https://github.com/actualbudget/actual/pull/8684) Remove the agentic stop-hook (turn-end typecheck + test) fro	CODE
MEDIUM	packages/docs/blog/2026-09-01-release-26-9-0.md	115	- [#8684](https://github.com/actualbudget/actual/pull/8684) Remove the agentic stop-hook (turn-end typecheck + test) fro	CODE
MEDIUM	…ports/reports/monte-carlo/monteCarloSimulation.test.ts	883	// A crash pushes the withdrawal rate above the guardrails trigger, so	COMMENT
MEDIUM	…ports/reports/monte-carlo/monteCarloSimulation.test.ts	1162	// guardrails measures drift against the planned phase path, so the	COMMENT
MEDIUM	…ports/reports/monte-carlo/monteCarloSimulation.test.ts	1427	// A small pot under guardrails: repeated cuts would take the rule's	COMMENT
MEDIUM	…ports/reports/monte-carlo/monteCarloSimulation.test.ts	3198	// guardrails cut the pot-funded 1,000 by 10% a year (900, 810, 729)	COMMENT
MEDIUM	packages/desktop-client/src/data/news.json	22	"details": "#### Features\n\n- [#8771](https://github.com/actualbudget/actual/pull/8771) Add the Palenight theme t	CODE
MEDIUM	packages/desktop-client/src/data/news.json	22	"details": "#### Features\n\n- [#8771](https://github.com/actualbudget/actual/pull/8771) Add the Palenight theme t	CODE

AI Response Leakage5 hits · 25 pts

Severity	File	Line	Snippet	Context
HIGH	packages/docs/docs/releases.md	4752	- [#1311](https://github.com/actualbudget/actual/pull/1311) The cashflow report filters out transfers which makes the en	CODE
HIGH	packages/docs/docs/releases.md	4752	- [#1311](https://github.com/actualbudget/actual/pull/1311) The cashflow report filters out transfers which makes the en	CODE
HIGH	packages/docs/blog/2024-03-25-automate-twist.md	21	Priorities allow you to decide which goals are funded first. Check out our last [blog post](./2023-12-15-automate.md#how	CODE
HIGH	packages/docs/blog/2023-08-02-release-23.8.0.md	57	- [#1311](https://github.com/actualbudget/actual/pull/1311) The cashflow report filters out transfers which makes the en	CODE
HIGH	packages/docs/blog/2023-08-02-release-23.8.0.md	57	- [#1311](https://github.com/actualbudget/actual/pull/1311) The cashflow report filters out transfers which makes the en	CODE

Structural Annotation Overuse13 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW⚡	packages/docs/docs/advanced/restart.md	15	### Step 1: Delete All Transactions	COMMENT
LOW⚡	packages/docs/docs/advanced/restart.md	23	### Step 2: Set Starting Balances	COMMENT
LOW⚡	packages/docs/docs/advanced/restart.md	27	### Step 3: Adjust Previous Months' Category Balances	COMMENT
LOW⚡	packages/docs/docs/advanced/restart.md	36	### Step 1: Address Uncategorized Transactions	COMMENT
LOW⚡	packages/docs/docs/advanced/restart.md	42	### Step 2: Reconcile Your Accounts	COMMENT
LOW⚡	packages/docs/docs/advanced/restart.md	46	### Step 3: Adjust Previous Months' Category Balances	COMMENT
LOW	packages/docs/docs/migration/nynab.md	46	#### Step 1: Get Your Plan ID	COMMENT
LOW	packages/docs/docs/migration/nynab.md	59	#### Step 2: Download Your Plan	COMMENT
LOW	packages/docs/docs/migration/nynab.md	82	#### Step 1: Download the Tool	COMMENT
LOW	packages/docs/docs/migration/nynab.md	95	#### Step 2: Run the Tool	COMMENT
LOW	packages/docs/docs/migration/nynab.md	126	#### Step 3: Follow the Prompts	COMMENT
LOW	packages/docs/docs/migration/nynab.md	143	#### Step 1: Get Your Plan ID	COMMENT
LOW	packages/docs/docs/migration/nynab.md	163	#### Step 2: Download Your Plan	COMMENT

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	.github/actions/handle-feature-requests.js	65	return res.data.repository.pullRequest.closingIssuesReferences.nodes.filter(	CODE
CRITICAL	.github/actions/handle-feature-requests.js	130	const comments = commentRes.data.repository.issue.comments.nodes.filter(	CODE

Fake / Example Data17 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	…e/src/server/transactions/export/export-to-csv.test.ts	52	const { row } = await payeeCell('Acme Corp');	CODE
LOW	…e/src/server/transactions/export/export-to-csv.test.ts	53	expect(row.Payee).toBe('Acme Corp');	CODE
LOW	packages/component-library/src/Paragraph.stories.tsx	117	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore mag	CODE
LOW	packages/component-library/src/Paragraph.stories.tsx	117	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore mag	CODE
LOW	packages/component-library/src/Label.stories.tsx	40	<Input placeholder="user@example.com" style={{ width: 250 }} />	CODE
LOW	packages/component-library/src/InlineField.stories.tsx	41	children: <Input style={{ flex: 1 }} placeholder="user@example.com" />,	CODE
LOW	…int-plugin-actual/lib/rules/no-untranslated-strings.js	119	'placeholder',	CODE
LOW	packages/desktop-client/e2e/bank-sync.mobile.test.ts	43	'placeholder',	CODE
LOW	packages/desktop-client/e2e/rules.mobile.test.ts	48	'placeholder',	CODE
LOW	packages/desktop-client/e2e/schedules.mobile.test.ts	50	'placeholder',	CODE
LOW	packages/desktop-client/e2e/payees.mobile.test.ts	45	'placeholder',	CODE
LOW	…ss/banks/util/extract-payeeName-from-remittanceInfo.ts	17	* const payeeName = extractPayeeNameFromRemittanceInfo(remittanceInfo, patterns); // --> 'John Doe'	COMMENT
LOW	…er/src/app-gocardless/banks/tests/ing_ingddeff.spec.ts	14	ownerName: 'Jane Doe',	CODE
LOW	…er/src/app-gocardless/banks/tests/ing_ingddeff.spec.ts	21	owner_name: 'Jane Doe',	CODE
LOW	…gocardless/banks/tests/sandboxfinance_sfin0000.spec.ts	14	ownerName: 'Jane Doe',	CODE
LOW	…gocardless/banks/tests/sandboxfinance_sfin0000.spec.ts	23	owner_name: 'Jane Doe',	CODE
LOW	…kages/sync-server/src/app-pluggyai/pluggyai-service.js	121	const sandboxAccount = account.owner === 'John Doe';	CODE

AI Slop Vocabulary3 hits · 7 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/loot-core/src/server/budget/envelope.ts	37	// This makes the app more robust by "fixing up" null budget values.	COMMENT
MEDIUM	packages/loot-core/src/server/budget/tracking.ts	14	// This makes the app more robust by "fixing up" null budget values.	COMMENT
LOW	packages/desktop-client/src/data/news.json	66	"body": "The sidenav is one of the most-used parts of Actual Budget. It's how you jump between your budget, report	CODE

Slop Phrases3 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	packages/desktop-client/src/data/news.json	90	"body": "Hello Actual Budgeters!\nAnother year has gone by with many fixes and upgrades to Actual.\nLet's look bac	CODE
LOW⚡	packages/desktop-client/src/data/news.json	98	"body": "Actual has started receiving what can only be described as _AI slop_ — pull requests and issues generated	CODE
LOW	.github/workflows/issues-close-feature-requests.yml	35	Don't forget to upvote the top comment with 👍!	CODE

Overly Generic Function Names3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	packages/loot-core/src/server/accounts/app.ts	808	async function getData(	CODE
LOW	…client/src/components/accounts/BalanceHistoryGraph.tsx	135	function processData(	CODE
LOW	packages/desktop-client/src/components/rules/Value.tsx	59	function getData() {	CODE

actualbudget/actual

Open-Source Code Quality, Security and Technical Debt Review