0.7

Adjusted Signal

0.7

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

5.0K

Stars

Language

99.8K

Lines of Code

382

Files

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 41 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.3/100 · LOW

Are imports declared and package/API names verified? 27 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 3.4/100 · LOW

Which changes need focused human review? 68 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 0LOW 68

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 68 distinct pattern matches across 3 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block37 hits · 37 pts

Severity	File	Line	Snippet	Context
LOW	src/ui/mcp/route.go	21	// DeviceMiddleware); a per-call device_id tool argument overrides it (see	COMMENT
LOW	src/ui/rest/chatwoot_webhook_auth.go	81	// chatwootUnsignedWarning logs the explicit open-webhook opt-in once.	COMMENT
LOW	src/ui/rest/chatwoot_webhook_auth.go	181	}	COMMENT
LOW	src/ui/rest/chatwoot_webhook_auth.go	241	return true, nil	COMMENT
LOW	src/ui/rest/chatwoot.go	181	// 2. Contact custom attribute gowa_device_id (explicit operator override).	COMMENT
LOW	src/ui/rest/chatwoot_webhook_replay.go	61	// failure is handled. While a reservation is held, an identical request is not	COMMENT
LOW	src/domains/chatstorage/interfaces.go	61	// GetLatestChatwootMessageLinkByConversation resolves a conversation to its	COMMENT
LOW	src/domains/chatstorage/interfaces.go	101	ClaimExpiredScheduledSend(now, leaseUntil time.Time, leaseToken string) (*ScheduledSend, error)	COMMENT
LOW	src/config/settings.go	101	ChatwootAccountID = 0	COMMENT
LOW	src/config/settings.go	121	// the media file (e.g., URL expired). When true, inserts a localized	COMMENT
LOW	src/config/settings.go	141	// previous open behavior and must be set explicitly.	COMMENT
LOW	src/infrastructure/chatwoot/sync.go	781	syncServicesMu sync.RWMutex	COMMENT
LOW	src/infrastructure/chatwoot/sync.go	881	}	COMMENT
LOW	src/infrastructure/chatwoot/client.go	201	}()	COMMENT
LOW	src/infrastructure/chatwoot/client.go	281	resp, err := t.RoundTripper.RoundTrip(req)	COMMENT
LOW	src/infrastructure/chatwoot/client.go	741	// land in. sourceID is the WhatsApp chat JID, forwarded to CreateConversation	COMMENT
LOW	src/infrastructure/chatwoot/client.go	981	}	COMMENT
LOW	src/infrastructure/chatwoot/url_validation.go	81	// media and preview fetches: loopback, private, link-local (including	COMMENT
LOW	src/infrastructure/chatwoot/pgimport/writer.go	21	// remaining messages that will all fail.	COMMENT
LOW	src/infrastructure/chatwoot/pgimport/writer.go	301	// and then re-imported from WhatsApp reuses the same row instead of	COMMENT
LOW	src/infrastructure/chatwoot/pgimport/conn.go	1	// Package pgimport implements the direct-Postgres history importer for	COMMENT
LOW	src/infrastructure/chatwoot/pgimport/conn.go	61	// postgresql://postgres:secret@chatwoot-db:5432/chatwoot_production?sslmode=disable	COMMENT
LOW	src/infrastructure/whatsapp/history_sync.go	421	// arrives empty for many of them, and for some it carries the account owner's	COMMENT
LOW	src/infrastructure/whatsapp/own_sender.go	1	package whatsapp	COMMENT
LOW	src/infrastructure/whatsapp/event_message.go	181	}	COMMENT
LOW	src/infrastructure/whatsapp/event_message.go	521	// media on every card: reusing those fields would have each card's	COMMENT
LOW	src/infrastructure/whatsapp/database.go	241	// checks. A non-empty first value is preserved, including disable, require,	COMMENT
LOW	src/infrastructure/whatsapp/reachout_error.go	1	package whatsapp	COMMENT
LOW	src/infrastructure/whatsapp/webhook_forward.go	41	// 1:1 JID from the WhatsApp contact store. It is a seam so tests can stub	COMMENT
LOW	src/usecase/message.go	421		COMMENT
LOW	src/usecase/schedule.go	441	if err := s.processJob(ctx, job); err != nil {	COMMENT
LOW	src/pkg/utils/chatwoot.go	61	// IsNewsletterJID reports whether jid belongs to a WhatsApp channel	COMMENT
LOW	src/pkg/utils/chatwoot.go	81	// The transforms use paired, non-greedy delimiters, so a lone unmatched	COMMENT
LOW	src/pkg/utils/chatwoot.go	101	// <https://x.example/> -> https://x.example/	COMMENT
LOW	src/pkg/utils/chatwoot.go	121	// lazy ("??") so the pair closes at the first run that can close it.	COMMENT
LOW	src/pkg/utils/image_bounds.go	21	MaxImageEdge = 32768	COMMENT
LOW	src/pkg/utils/business_message.go	381	lines = append(lines, value)	COMMENT

Fake / Example Data27 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	docs/webhook-payload.md	251	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	270	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	291	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1246	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1263	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1284	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1305	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1326	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1343	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1364	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1385	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1402	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1423	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1446	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1561	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1583	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1645	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1667	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1694	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1715	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1735	"from_name": "John Doe",	CODE
LOW	docs/webhook-payload.md	1755	"from_name": "John Doe",	CODE
LOW	docs/openapi.yaml	1183	example: 'John Doe'	CODE
LOW	docs/openapi.yaml	5669	example: 'John Doe'	CODE
LOW	docs/openapi.yaml	5791	example: 'John Doe'	CODE
LOW	docs/openapi.yaml	6337	example: "John Doe"	CODE
LOW	docs/openapi.yaml	6475	example: 'John Doe'	CODE

Structural Annotation Overuse4 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	docs/chatwoot.md	135	### Step 1: Create an API Channel Inbox	COMMENT
LOW⚡	docs/chatwoot.md	147	### Step 2: Get Your API Token	COMMENT
LOW⚡	docs/chatwoot.md	153	### Step 3: Find Your Account ID	COMMENT
LOW⚡	docs/chatwoot.md	160	### Step 4: Configure the API Channel Webhook	COMMENT

aldinokemal/go-whatsapp-web-multidevice

Open-Source Code Quality, Security and Technical Debt Review