2.2

Adjusted Signal

2.2

Raw Pattern Score

100%

Time Factor

2026-07-29

Last Push

25.6K

Stars

Java

Language

280.1K

Lines of Code

3.2K

Files

114

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 60 finding(s).

Hallucinated Dependency & Supply Chain Risk 9.2/100 · LOW

Are imports declared and package/API names verified? 54 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 10.2/100 · LOW

Which changes need focused human review? 114 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 54HIGH 0MEDIUM 0LOW 60

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 114 distinct pattern matches across 4 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators54 hits · 540 pts

Severity	File	Line	Snippet	Context
CRITICAL	src/test/java/com/alibaba/json/test/TestASM.java	105	MyClassLoader loader = new MyClassLoader(com.alibaba.fastjson.serializer.ObjectSerializer.class.getClassLoader()	CODE
CRITICAL	…json/test/benchmark/jdk10/StringBenchmark_jackson.java	31	methodMap.put("org.openjdk.jmh.annotations.org.openjdk.jmh.annotations.StringBenchmark.prepare(aaa,bbb,com.faste	CODE
CRITICAL	…alibaba/json/test/benchmark/jdk10/StringBenchmark.java	25	methodMap.put("org.openjdk.jmh.annotations.org.openjdk.jmh.annotations.StringBenchmark.prepare(aaa,bbb,com.aliba	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/Base64Test2.java	16	String str = com.alibaba.json.test.Base64.encodeToString(bytes, true);	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/Base64Test2.java	22	String str = com.alibaba.json.test.Base64.encodeToString(bytes, false);	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/Base64Test2.java	35	String str = "\0" + com.alibaba.json.test.Base64.encodeToString(bytes, false) + "\0";	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/util/Base64Test.java	11	String base64Str = com.alibaba.json.test.Base64.encodeToString(bytes, false);	CODE
CRITICAL	…libaba/json/bvt/writeClassName/WriteClassNameTest.java	12	com.alibaba.fastjson.parser.ParserConfig.getGlobalInstance().addAccept(this.getClass().getName() + ".");	CODE
CRITICAL	…/bvt/writeClassName/WriteClassNameTest_Collection.java	15	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.writeClassName.WriteClassNameTes	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/bug/Issue_748.java	14	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Issue_748.");	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/bug/Issue859.java	21	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Bug_for_zhaoyao.");	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/bug/Issue859.java	27	String text = org.apache.commons.io.IOUtils.toString(gzipInputStream);	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/bug/Issue585.java	25	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Issue585.");	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/bug/TestJSONMap.java	13	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.TestJSONMap.");	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/bug/Issue146.java	10	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Issue146.");	CODE
CRITICAL	…/java/com/alibaba/json/bvt/bug/Bug_for_SpitFire_6.java	14	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Bug_for_SpitFire_6.");	CODE
CRITICAL	…t/java/com/alibaba/json/bvt/bug/Bug_for_lenolix_9.java	16	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Bug_for_lenolix_9.");	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/bug/Issue408.java	20	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Issue408.");	CODE
CRITICAL	src/test/java/com/alibaba/json/bvt/bug/Issue74.java	16	String text = org.apache.commons.io.IOUtils.toString(is);	CODE
CRITICAL	…t/java/com/alibaba/json/bvt/bug/Bug_for_lenolix_8.java	22	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Bug_for_lenolix_8.");	CODE
CRITICAL	…c/test/java/com/alibaba/json/bvt/bug/SerDeserTest.java	32	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvtVO.");	CODE
CRITICAL	…est/java/com/alibaba/json/bvt/bug/Bug_for_zhaoyao.java	13	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Bug_for_zhaoyao.");	CODE
CRITICAL	…t/java/com/alibaba/json/bvt/bug/Bug_for_wuyexiong.java	60	String text = org.apache.commons.io.IOUtils.toString(is);	CODE
CRITICAL	…t/java/com/alibaba/json/bvt/bug/Bug_for_wuyexiong.java	61	org.apache.commons.io.IOUtils.closeQuietly(is);	CODE
CRITICAL	…est/java/com/alibaba/json/bvt/bug/Bug_for_stv_liu.java	13	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.bug.Bug_for_stv_liu.");	CODE
CRITICAL	…alibaba/json/bvt/parser/deser/MapDeserializerTest.java	12	com.alibaba.fastjson.parser.ParserConfig.global.addAccept("com.alibaba.json.bvt.parser.deser.MapDeserializerTest	CODE
CRITICAL	…a/com/alibaba/fastjson/serializer/SerializeConfig.java	584	} else if (org.w3c.dom.Node.class.isAssignableFrom(clazz)) {	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	196	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldInfo.declaringClass)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	605	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(elementClass)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	629	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(elementClass))); // fieldType	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	647	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(elementClass))); // fieldType	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	665	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc((Class<?>) elementType)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	708	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldClass)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	725	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldClass))); // fieldType	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	737	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldClass))); // fieldType	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	1101	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc((Class<?>) fieldInfo.fieldClass)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	1426	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(elementClass)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	1453	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(elementClass))); // fieldType	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	1470	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(elementClass))); // fieldType	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	1491	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc((Class<?>) elementType)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	1613	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldClass)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	1683	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(String.class)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	2082	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(itemType)));	CODE
CRITICAL	…/alibaba/fastjson/serializer/ASMSerializerFactory.java	2104	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldInfo.fieldClass)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	335	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldClass)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	383	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldClass)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	446	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(itemClass)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	1022	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldClass))); // cast	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	1373	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(itemType)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	1449	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(itemType)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	1609	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(itemType)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	1726	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldInfo.fieldClass)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	1747	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldInfo.fieldClass)));	CODE
CRITICAL	…stjson/parser/deserializer/ASMDeserializerFactory.java	1773	mw.visitLdcInsn(com.alibaba.fastjson.asm.Type.getType(desc(fieldInfo.fieldClass)));	CODE

Over-Commented Block40 hits · 40 pts

Severity	File	Line	Snippet	Context
LOW	…a/com/alibaba/json/demo/hibernate/LazyLoadingTest.java	41	System.out.println("--- JSON ---");	COMMENT
LOW	…a/com/alibaba/json/demo/hibernate/LazyLoadingTest.java	61	}	COMMENT
LOW	…/alibaba/json/demo/hibernate/ForceLazyLoadingTest.java	41	// /*	COMMENT
LOW	src/test/java/com/alibaba/json/test/A1.java	21	String json = JSON.toJSONString(obj, SerializerFeature.BrowserCompatible);	COMMENT
LOW	src/test/java/com/alibaba/json/test/TestASM.java	21	// ClassWriter cw = new ClassWriter(0);	COMMENT
LOW	src/test/java/com/alibaba/json/test/FNVHashTest.java	21	// Map<Long, char[]> map = new HashMap<Long, char[]>(COUNT);	COMMENT
LOW	src/test/java/com/alibaba/json/test/FNVHashTest.java	41	// Long hash = bkdr_hash(chars);	COMMENT
LOW	…ava/com/alibaba/json/test/benchmark/BenchmarkMain.java	21	//	COMMENT
LOW	…ava/com/alibaba/json/test/benchmark/BenchmarkMain.java	41	// executor.getCaseList().add(new IntArray1000Decode());	COMMENT
LOW	…m/alibaba/json/test/benchmark/basic/LongBenchmark.java	21	public static void main(String[] args) throws Exception {	COMMENT
LOW	…m/alibaba/json/test/benchmark/basic/DateBenchmark.java	21	// model.v1 = new Random().nextDouble();	COMMENT
LOW	…alibaba/json/test/benchmark/basic/DoubleBenchmark.java	21		COMMENT
LOW	…m/alibaba/json/test/benchmark/basic/UUIDBenchmark.java	21	// Model model = new Model();	COMMENT
LOW	src/test/java/com/alibaba/json/bvt/SqlDateTest1.java	41	// java.sql.Date ds = new java.sql.Date(d.getTime());	COMMENT
LOW	…st/java/com/alibaba/json/bvt/issue_2100/Issue2156.java	21	// assertEquals("\"2018-07-15\"", str);	COMMENT
LOW	…r/SerializeWriterTest_BrowserSecure_6_name_script.java	21	}	COMMENT
LOW	…r/SerializeWriterTest_BrowserSecure_6_name_script.java	41	// for (int i = 0; i < 500; i++) {	COMMENT
LOW	…va/com/alibaba/json/bvt/path/JSONPath_10_contains.java	61	//// String json = FileUtils.readFileToString(file);	COMMENT
LOW	…c/test/java/com/alibaba/json/bvt/path/JSONPath_11.java	41	//// String json = FileUtils.readFileToString(file);	COMMENT
LOW	src/test/java/com/alibaba/json/bvt/path/JSONPath_6.java	21	}	COMMENT
LOW	…st/java/com/alibaba/json/bvt/issue_1300/Issue1371.java	41	//	COMMENT
LOW	…st/java/com/alibaba/json/bvt/issue_1300/Issue1371.java	61	// String oldStyleJson = "{1:\"abc\", 2:\"cde\"}";	COMMENT
LOW	…t/java/com/alibaba/json/bvt/bug/Bug_for_Exception.java	21	// assertEquals(RuntimeException.class, throwable.getClass());	COMMENT
LOW	…t/java/com/alibaba/json/bvt/bug/Bug_for_issue_318.java	41	pa.setManagers(managers);	COMMENT
LOW	…alibaba/json/bvt/parser/error/ParseErrorTest_date.java	41	// Assert.assertNotNull(error);	COMMENT
LOW	…st/java/com/alibaba/json/bvt/issue_2700/Issue2743.java	21	// 场景：验证数字数组	COMMENT
LOW	…st/java/com/alibaba/json/bvt/issue_2700/Issue2743.java	41	// assertArrayEquals(strs, strs[0].split(strArrayRegex));	COMMENT
LOW	…st/java/com/alibaba/json/bvt/issue_1200/Issue1225.java	21	// assertEquals("2", JSON.parseObject("{\"data\":[\"1\",\"2\",\"3\"]}",	COMMENT
LOW	src/main/java/com/alibaba/fastjson/JSONPath.java	2581	array = (JSONArray) context.object;	COMMENT
LOW	src/main/java/com/alibaba/fastjson/JSONPath.java	2601	// lexer.nextToken();	COMMENT
LOW	src/main/java/com/alibaba/fastjson/JSONPath.java	2621	// }	COMMENT
LOW	…a/com/alibaba/fastjson/serializer/SerializeWriter.java	201		COMMENT
LOW	…c/main/java/com/alibaba/fastjson/asm/MethodWriter.java	121	}	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	1	// Copyright 2018 Ulf Adams	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	1	// Copyright 2018 Ulf Adams	COMMENT
LOW	…main/java/com/alibaba/fastjson/parser/JSONScanner.java	1301	// if (type.isAssignableFrom(HashSet.class)) {	COMMENT
LOW	…in/java/com/alibaba/fastjson/parser/JSONLexerBase.java	1681	// list = new HashSet<String>();	COMMENT
LOW	…in/java/com/alibaba/fastjson/parser/JSONLexerBase.java	2741	chLocal = charAt(bp + (offset++));	COMMENT
LOW	…stjson/parser/deserializer/ASMDeserializerFactory.java	981	, "(L" + JSONLexerBase + ";[C" + desc(ObjectDeserializer.class) + ")Ljava/lang/Enum;");	COMMENT
LOW	…stjson/parser/deserializer/ASMDeserializerFactory.java	1001	// mw.visitVarInsn(ASTORE, context.var(fieldInfo.name + "_asm_enumName"));	COMMENT

Verbosity Indicators10 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	120	// Step 1: Decode the floating point number, and unify normalized and subnormal cases.	COMMENT
LOW⚡	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	186	// Step 2: Determine the interval of legal decimal representations.	COMMENT
LOW⚡	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	193	// Step 3: Convert to a decimal power base using 128-bit arithmetic.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	288	// Step 4: Find the shortest decimal representation in the interval of legal representations.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	349	// Step 5: Print the decimal representation.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	81	// Step 1: Decode the floating point number, and unify normalized and subnormal cases.	COMMENT
LOW⚡	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	149	// Step 2: Determine the interval of legal decimal representations.	COMMENT
LOW⚡	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	157	// Step 3: Convert to a decimal power base using 128-bit arithmetic.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	392	// Step 4: Find the shortest decimal representation in the interval of legal representations.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	500	// Step 5: Print the decimal representation.	COMMENT

Structural Annotation Overuse10 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	120	// Step 1: Decode the floating point number, and unify normalized and subnormal cases.	COMMENT
LOW⚡	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	186	// Step 2: Determine the interval of legal decimal representations.	COMMENT
LOW⚡	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	193	// Step 3: Convert to a decimal power base using 128-bit arithmetic.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	288	// Step 4: Find the shortest decimal representation in the interval of legal representations.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuFloat.java	349	// Step 5: Print the decimal representation.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	81	// Step 1: Decode the floating point number, and unify normalized and subnormal cases.	COMMENT
LOW⚡	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	149	// Step 2: Determine the interval of legal decimal representations.	COMMENT
LOW⚡	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	157	// Step 3: Convert to a decimal power base using 128-bit arithmetic.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	392	// Step 4: Find the shortest decimal representation in the interval of legal representations.	COMMENT
LOW	src/main/java/com/alibaba/fastjson/util/RyuDouble.java	500	// Step 5: Print the decimal representation.	COMMENT

alibaba/fastjson

Open-Source Code Quality, Security and Technical Debt Review