1.1

Adjusted Signal

1.1

Raw Pattern Score

100%

Time Factor

2026-10-23

Last Push

5.4K

Stars

TypeScript

Language

124.7K

Lines of Code

1.4K

Files

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 52 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.8/100 · LOW

Are imports declared and package/API names verified? 18 finding(s).

Agent Over-Engineering Ratio 2.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 32 finding(s).

PR Review Velocity Impact 5.0/100 · LOW

Which changes need focused human review? 88 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 20LOW 68

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 88 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators18 hits · 58 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/altair-api/docker-compose.yml	44	# ── OpenTelemetry (local dev) ──────────────────────────────────────	COMMENT
MEDIUM	…r-api/src/team-memberships/team-memberships.service.ts	36	// ── Role helpers ────────────────────────────────────────────────────	COMMENT
MEDIUM	…r-api/src/team-memberships/team-memberships.service.ts	335	// ── Team Invitations ──────────────────────────────────────────────────	COMMENT
MEDIUM	…pi/src/team-memberships/team-memberships.controller.ts	78	// ── Team Invitations ──────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/altair-api/src/common/env.ts	32	// ── Auth (required) ────────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/altair-api/src/common/env.ts	37	// ── OAuth (required) ───────────────────────────────────────────────	COMMENT
MEDIUM⚡	packages/altair-api/src/common/env.ts	43	// ── AI / LLM ──────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/altair-api/src/common/env.ts	70	// ── Email (Resend) ────────────────────────────────────────────────	COMMENT
MEDIUM	packages/altair-api/src/common/env.ts	88	// ── Rate limiting ─────────────────────────────────────────────────	COMMENT
MEDIUM	packages/altair-api/src/common/env.ts	92	// ── Stripe (required) ─────────────────────────────────────────────	COMMENT
MEDIUM	packages/altair-api/src/common/env.ts	108	// ── OpenTelemetry ──────────────────────────────────────────────────	COMMENT
MEDIUM	packages/altair-api/src/telemetry/telemetry.ts	17	// ── Instrument caches ────────────────────────────────────────────────	COMMENT
MEDIUM	packages/altair-api/src/telemetry/telemetry.ts	55	// ── Public API ───────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/altair-api/src/telemetry/instrumentation.ts	36	// ── Parse headers string into a Record ──────────────────────────────	COMMENT
MEDIUM	packages/altair-api/src/telemetry/instrumentation.ts	49	// ── Build per-signal URLs from the base endpoint ────────────────────	COMMENT
MEDIUM	packages/altair-api/src/telemetry/instrumentation.ts	63	// ── Log provider ────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/altair-api/src/logging/logtape-logger.service.ts	31	// ── public LoggerService API ────────────────────────────────────────	COMMENT
MEDIUM	…kages/altair-api/src/logging/logtape-logger.service.ts	63	// ── argument parsing ────────────────────────────────────────────────	COMMENT

Over-Commented Block33 hits · 33 pts

Severity	File	Line	Snippet	Context
LOW	compose.yaml	21	# start the database before your application. The `db-data` volume persists the	COMMENT
LOW	compose.yaml	41	# healthcheck:	COMMENT
LOW	bin/package_electron_app.sh	1	#!/bin/bash	COMMENT
LOW	test-server/tsconfig.json	21	// "importHelpers": true, /* Import emit helpers from 'tslib'. */	COMMENT
LOW	test-server/tsconfig.json	41	/* Module Resolution Options */	COMMENT
LOW	examples/express-v4/tsconfig.json	1	{	COMMENT
LOW	examples/express-v4/tsconfig.json	21	// "jsxImportSource": "", /* Specify module specifier used to import the JSX factory func	COMMENT
LOW	examples/express-v4/tsconfig.json	41	// "customConditions": [], /* Conditions to set in addition to the resolver-specific defau	COMMENT
LOW	examples/express-v4/tsconfig.json	61	// "importHelpers": true, /* Allow importing helper functions from tslib once per project	COMMENT
LOW	examples/express-v4/tsconfig.json	81	// "preserveSymlinks": true, /* Disable resolving symlinks to their realpath. This correlate	COMMENT
LOW	packages/altair-electron/scripts/smoke-test.sh	1	#!/usr/bin/env bash	COMMENT
LOW	packages/altair-electron/src/main/updates.ts	61	return;	COMMENT
LOW	packages/altair-fastify-plugin/tsconfig.json	41	"noUnusedLocals": true /* Report errors on unused locals. */,	COMMENT
LOW	packages/altair-app/src/polyfills.ts	21	/ IE9, IE10 and IE11 requires all of the following polyfills. /	COMMENT
LOW	…src/app/modules/altair/modules/shared/shared.module.ts	81	// enableHtml: true,	COMMENT
LOW	…app/src/app/modules/altair/store/async-storage-sync.ts	361	// const schema = parseValue(curStateItem.value);	COMMENT
LOW	packages/altair-app/src/scss/components/_url-box.scss	61	// top: 0;	COMMENT
LOW	packages/altair-app/src/scss/components/_url-box.scss	141	display: flex;	COMMENT
LOW	packages/login-redirect/tsconfig.json	1	{	COMMENT
LOW	packages/login-redirect/tsconfig.json	21	// "jsxFragmentFactory": "", /* Specify the JSX Fragment reference used for fragments when t	COMMENT
LOW	packages/login-redirect/tsconfig.json	41		COMMENT
LOW	packages/login-redirect/tsconfig.json	61	// "inlineSourceMap": true, /* Include sourcemap files inside the emitted JavaScript. */	COMMENT
LOW	packages/login-redirect/tsconfig.json	81	// "noImplicitAny": true, /* Enable error reporting for expressions and declarations with	COMMENT
LOW	packages/altair-electron-settings/tsconfig.json	21	// "jsxImportSource": "", /* Specify module specifier used to import the JSX factory func	COMMENT
LOW	packages/altair-electron-settings/tsconfig.json	41	// "customConditions": [], /* Conditions to set in addition to the resolver-specific defau	COMMENT
LOW	packages/altair-electron-settings/tsconfig.json	61	// "importHelpers": true, /* Allow importing helper functions from tslib once per project	COMMENT
LOW	packages/altair-electron-settings/tsconfig.json	81	// "preserveSymlinks": true, /* Disable resolving symlinks to their realpath. This correlate	COMMENT
LOW	packages/altair-api/dev/jaeger-config.yaml	1	# Jaeger v2 all-in-one configuration for local development.	COMMENT
LOW	…altair-docs/.vitepress/plugins/github-metadata.data.ts	41	},	COMMENT
LOW	…kages/altair-docs/.vitepress/theme/components/Home.vue	301	.home .features-wrapper {	COMMENT
LOW	.github/workflows/experimental-release.yml	41	with:	COMMENT
LOW	.github/workflows/codeql-analysis.yml	1	# For most projects, this workflow file will not need changing; you simply need	COMMENT
LOW	.github/workflows/codeql-analysis.yml	61	# Prefix the list here with "+" to use these queries and those in the config file.	COMMENT

Fake / Example Data18 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	packages/altair-crx/src/helpers/request.test.ts	179	content: '{"data": {"user": {"id": 1, "name": "John Doe"}}}',	CODE
LOW	packages/altair-crx/src/helpers/request.test.ts	223	responseContent: '{"data": {"user": {"id": 1, "name": "John Doe"}}}',	CODE
LOW	packages/altair-crx/src/helpers/request.test.ts	250	content: '{"data": {"user": {"id": 1, "name": "John Doe"}}}',	CODE
LOW	packages/altair-crx/src/helpers/request.test.ts	293	responseContent: '{"data": {"user": {"id": 1, "name": "John Doe"}}}',	CODE
LOW	packages/altair-crx/src/helpers/request.test.ts	299	content: '{"data": {"user": {"id": 1, "name": "John Doe"}}}',	CODE
LOW	packages/altair-crx/src/helpers/request.test.ts	355	responseContent: '{"data": {"user": {"id": 1, "name": "John Doe"}}}',	CODE
LOW	packages/altair-crx/src/helpers/request.test.ts	361	content: '{"data": {"user": {"id": 1, "name": "John Doe"}}}',	CODE
LOW	packages/altair-crx/src/helpers/request.test.ts	420	responseContent: '{"data": {"user": {"id": 1, "name": "John Doe"}}}',	CODE
LOW⚡	…/altair-app/src/app/modules/altair/utils/index.spec.ts	47	const longText = `Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been	CODE
LOW⚡	…/altair-app/src/app/modules/altair/utils/index.spec.ts	50	'Lorem Ipsum is simply dummy text of the printing and typesetting indus...'	CODE
LOW⚡	…/altair-app/src/app/modules/altair/utils/index.spec.ts	54	const longText = `Lorem Ipsum is simply dummy text.`;	CODE
LOW⚡	…/altair-app/src/app/modules/altair/utils/index.spec.ts	59	const longText = `Lorem Ipsum is simply dummy text.`;	CODE
LOW⚡	…/altair-app/src/app/modules/altair/utils/index.spec.ts	61	expect(result).toBe('Lorem Ipsum is simply dummy text.');	CODE
LOW	…y-collection-item/query-collection-item.component.html	22	<!-- <div class="query-collections__item-description">Lorem ipsum dolor sit amet consectetur adipisicing elit. C	CODE
LOW	…y-collection-item/query-collection-item.component.html	22	<!-- <div class="query-collections__item-description">Lorem ipsum dolor sit amet consectetur adipisicing elit. C	CODE
LOW	…ltair/services/environment/environment.service.spec.ts	235	name: 'John Doe',	CODE
LOW	packages/altair-core/src/script/context.spec.ts	30	name: 'John Doe',	CODE
LOW	packages/altair-core/src/script/context.spec.ts	58	expect(context.helpers.getEnvironment('user.name')).toBe('John Doe');	CODE

Hyper-Verbose Identifiers14 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	packages/altair-electron/src/main/utils/index.ts	63	export function findCustomProtocolUrlInArgv(argv: string[]) {	CODE
LOW⚡	packages/altair-electron/src/main/utils/startup.ts	4	function disableHardwareAcceleration(app: App) {	CODE
LOW⚡	packages/altair-electron/src/main/utils/startup.ts	10	export function getDisableHardwareAcceleration() {	CODE
LOW⚡	packages/altair-electron/src/main/utils/startup.ts	13	export function setDisableHardwareAcceleration(value: boolean) {	CODE
LOW	packages/altair-core/src/test-helpers.ts	3	export class MswMockRequestHandler extends RequestHandler {	CODE
LOW	packages/altair-core/src/theme/theme.ts	855	export function transformOldThemeConfigToNewThemeConfig(	CODE
LOW	…kages/altair-core/src/request/handlers/action-cable.ts	9	export class ActionCableRequestHandler implements GraphQLRequestHandler {	CODE
LOW	packages/altair-core/src/request/handlers/http.ts	21	export class HttpRequestHandler implements GraphQLRequestHandler {	CODE
LOW	packages/altair-core/src/request/handlers/ws.ts	10	export class WebsocketRequestHandler implements GraphQLRequestHandler {	CODE
LOW	packages/altair-core/src/request/handlers/sse.ts	10	export class SSERequestHandler implements GraphQLRequestHandler {	CODE
LOW	packages/altair-core/src/request/handlers/app-sync.ts	13	export class AppSyncRequestHandler implements GraphQLRequestHandler {	CODE
LOW	packages/altair-core/src/request/handlers/graphql-ws.ts	10	export class GraphQLWsRequestHandler implements GraphQLRequestHandler {	CODE
LOW	…s/altair-docs/.vitepress/plugins/sidebar-generation.ts	54	function transliteratePinyinSiderbar(	CODE
LOW	…ckages/altair-docs/.vitepress/theme/composables/nav.ts	24	function closeScreenOnTabletWindow() {	CODE

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	bin/package_electron_app.sh	7	# Create a new electron-builds directory	COMMENT

Slop Phrases2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…src/app/modules/altair/modules/shared/shared.module.ts	97	// DON'T FORGET TO EXPORT MODULE	COMMENT
LOW	…pp/modules/altair/services/gql/oldBuildClientSchema.ts	75	* This function expects a complete introspection result. Don't forget to check	COMMENT

Modern AI Meta-Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/altair-docs/docs/plugins/writing-plugin.md	24	To get started quickly with writing a plugin, you can use the [Altair AI plugin](https://github.com/altair-graphql/altai	CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	packages/altair-electron/scripts/smoke-test.sh	10	# Usage:	COMMENT

altair-graphql/altair

Open-Source Code Quality, Security and Technical Debt Review