3.0

Adjusted Signal

3.0

Raw Pattern Score

100%

Time Factor

2026-10-20

Last Push

14.9K

Stars

JavaScript

Language

1.1M

Lines of Code

5.9K

Files

2.4K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 748 finding(s).

Hallucinated Dependency & Supply Chain Risk 10.5/100 · LOW

Are imports declared and package/API names verified? 1606 finding(s).

Agent Over-Engineering Ratio 2.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 572 finding(s).

PR Review Velocity Impact 12.5/100 · LOW

Which changes need focused human review? 2363 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 30HIGH 35MEDIUM 19LOW 2279

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2363 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Fake / Example Data1540 hits · 1791 pts

Severity	File	Line	Snippet	Context
LOW	validator/testdata/feature_tests/video-json-ld.html	11	<title>Lorem Ipsum</title>	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	147	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt.	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	147	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt.	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	152	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt.	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	152	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt.	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	250	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	250	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	256	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	256	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	262	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	262	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	273	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	273	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	274	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	274	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	275	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	275	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	308	Lorem ipsum dolor sit amet.	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	308	Lorem ipsum dolor sit amet.	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	317	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	317	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	321	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW⚡	validator/testdata/feature_tests/everything.html	321	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW	validator/testdata/feature_tests/everything.html	233	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW	validator/testdata/feature_tests/everything.html	233	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id	CODE
LOW	validator/testdata/feature_tests/everything.html	333	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW	validator/testdata/feature_tests/everything.html	333	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW	validator/testdata/feature_tests/everything.html	358	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW	validator/testdata/feature_tests/everything.html	358	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW	validator/testdata/feature_tests/everything.html	390	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW	validator/testdata/feature_tests/everything.html	390	Lorem ipsum dolor sit amet, has nisl nihil convenire et, vim at aeque inermis reprehendunt. Propriae tincidunt id ne	CODE
LOW	validator/testdata/feature_tests/review-microdata.html	11	<title>Lorem Ipsum</title>	CODE
LOW	validator/testdata/feature_tests/recipe-json-ld.html	11	<title>Lorem Ipsum</title>	CODE
LOW	validator/testdata/feature_tests/old-boilerplate.html	16	"Neque porro quisquam est qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit..."	CODE
LOW	validator/testdata/feature_tests/old-boilerplate.html	16	"Neque porro quisquam est qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit..."	CODE
LOW	validator/testdata/feature_tests/recipe-microdata.html	11	<title>Lorem Ipsum</title>	CODE
LOW	validator/testdata/feature_tests/article.html	5	<title>Lorem Ipsum \| PublisherName</title>	CODE
LOW	validator/testdata/feature_tests/article.html	316	<h1 itemprop="headline">Lorem Ipsum</h1>	CODE
LOW⚡	validator/testdata/feature_tests/article.html	331	itemprop="author"><b>Lorem Ipsum</b>	CODE
LOW⚡	validator/testdata/feature_tests/article.html	340	Lorem ipsum dolor sit amet, consectetur adipiscing elit.	CODE
LOW⚡	validator/testdata/feature_tests/article.html	340	Lorem ipsum dolor sit amet, consectetur adipiscing elit.	CODE
LOW	validator/testdata/feature_tests/video-microdata.html	11	<title>Lorem Ipsum</title>	CODE
LOW	validator/testdata/feature_tests/review-json-ld.html	11	<title>Lorem Ipsum</title>	CODE
LOW	validator/testdata/feature_tests/article-microdata.html	11	<title>Lorem Ipsum</title>	CODE
LOW	validator/testdata/feature_tests/article-microdata.html	48	<h1 itemprop="headline">Lorem Ipsum</h1>	CODE
LOW⚡	validator/testdata/feature_tests/article-microdata.html	65	<amp-img src="http://cdn.ampproject.org/leader.jpg" alt="Lorem Ipsum?" height="2000" width="800"></amp-img>	CODE
LOW⚡	validator/testdata/feature_tests/article-microdata.html	70	<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Integer nec	CODE
LOW⚡	validator/testdata/feature_tests/article-microdata.html	70	<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Integer nec	CODE
LOW	validator/testdata/feature_tests/article-json-ld.html	11	<title>Lorem Ipsum</title>	CODE
LOW	validator/testdata/feature_tests/article-json-ld.html	60	"headline": "Lorem Ipsum",	CODE
LOW⚡	validator/testdata/feature_tests/article-json-ld.html	91	<h1>Lorem Ipsum</h1>	CODE
LOW⚡	validator/testdata/feature_tests/article-json-ld.html	92	<amp-img src="http://cdn.ampproject.org/leader.jpg" alt="Lorem Ipsum?" height="2000" width="800"></amp-img>	CODE
LOW⚡	validator/testdata/feature_tests/article-json-ld.html	93	<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Integer nec	CODE
LOW⚡	validator/testdata/feature_tests/article-json-ld.html	93	<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Integer nec	CODE
LOW	test/unit/test-resource.js	434	element.setAttribute('placeholder', '');	CODE
LOW	test/unit/test-custom-element.js	835	placeholder.setAttribute('placeholder', '');	CODE
LOW⚡	test/unit/test-custom-element.js	2010	element.appendChild(createWithAttr('placeholder'));	CODE
LOW⚡	test/unit/test-custom-element.js	2011	const placeholder2 = element.appendChild(createWithAttr('placeholder'));	CODE
LOW⚡	test/unit/test-custom-element.js	2016	const placeholder1 = element.appendChild(createWithAttr('placeholder'));	CODE
LOW⚡	test/unit/test-custom-element.js	2018	input.setAttribute('placeholder', '');	CODE
1480 more matches not shown…

Hyper-Verbose Identifiers563 hits · 574 pts

Severity	File	Line	Snippet	Context
LOW	ads/vendors/nativo.js	97	function getLastPositionCoordinates(positions) {	CODE
LOW	ads/vendors/vmfive.js	26	function parallelDownloadScriptsAndExecuteInOrder(win) {	CODE
LOW	ads/inabox/full-overlay-frame-helper.js	12	export function centerFrameUnderVsyncMutate(	CODE
LOW	ads/inabox/full-overlay-frame-helper.js	49	export function expandFrameUnderVsyncMutate(iframe) {	CODE
LOW	ads/inabox/full-overlay-frame-helper.js	72	export function collapseFrameUnderVsyncMutate(iframe) {	CODE
LOW	ads/inabox/frame-overlay-helper.js	102	export function stubExpandFrameForTesting(implFn) {	CODE
LOW	ads/inabox/frame-overlay-helper.js	109	export function resetExpandFrameForTesting() {	CODE
LOW	ads/inabox/frame-overlay-helper.js	126	export function stubCollapseFrameForTesting(implFn) {	CODE
LOW	ads/inabox/frame-overlay-helper.js	133	export function resetCollapseFrameForTesting() {	CODE
LOW	ads/google/utils.js	193	export function getMatchedContentResponsiveHeightAndUpdatePubParams(	CODE
LOW	ads/google/ima/ima-video.js	483	export function removeHoverEventFromElement(element, callback) {	CODE
LOW	ads/google/ima/ima-video.js	1502	export function getShowControlsThrottledForTesting() {	CODE
LOW⚡	ads/google/ima/ima-video.js	1520	export function setAdDisplayContainerForTesting(adc) {	CODE
LOW⚡	ads/google/ima/ima-video.js	1530	export function setVideoWidthAndHeightForTesting(width, height) {	CODE
LOW⚡	ads/google/ima/ima-video.js	1540	export function setVideoPlayerMutedForTesting(shouldMute) {	CODE
LOW⚡	ads/google/ima/ima-video.js	1549	export function setAllAdsCompletedForTesting(newValue) {	CODE
LOW⚡	ads/google/ima/ima-video.js	1558	export function setAdRequestFailedForTesting(newValue) {	CODE
LOW	ads/google/ima/ima-video.js	1585	export function setMuteAdsManagerOnLoadedForTesting(shouldMute) {	CODE
LOW	ads/google/ima/ima-video.js	1604	export function setAdsManagerDimensionsOnLoadForTesting(width, height) {	CODE
LOW	ads/google/ima/ima-video.js	1614	export function setContentCompleteForTesting(newContentComplete) {	CODE
LOW	ads/google/ima/ima-video.js	1641	export function setHideControlsTimeoutForTesting(newTimeout) {	CODE
LOW	ads/google/a4a/cookie-utils.js	27	export function maybeSetCookieFromAdResponse(win, fetchResponse) {	CODE
LOW	ads/google/a4a/cookie-utils.js	64	export function handleCookieOptOutPostMessage(win, event) {	CODE
LOW	ads/google/a4a/traffic-experiments.js	167	export function addAmpExperimentIdToElement(experimentId, element) {	CODE
LOW	ads/google/a4a/utils.js	640	export function getCsiAmpAnalyticsVariables(analyticsTrigger, a4a, qqid) {	CODE
LOW	ads/google/a4a/utils.js	668	export function extractAmpAnalyticsConfig(a4a, responseHeaders) {	CODE
LOW	ads/google/a4a/utils.js	721	function generateActiveViewRequest(config, urls) {	CODE
LOW	ads/google/a4a/utils.js	745	function generateBeginToRenderRequest(config, urls) {	CODE
LOW	ads/google/a4a/utils.js	794	export function addCsiSignalsToAmpAnalyticsConfig(	CODE
LOW	ads/google/a4a/utils.js	858	export function getEnclosingContainerTypes(adElement) {	CODE
LOW	ads/google/a4a/utils.js	880	export function maybeAppendErrorParameter(adUrl, parameterValue) {	CODE
LOW	ads/google/a4a/utils.js	904	export function getBinaryTypeNumericalCode(type) {	CODE
LOW	ads/google/a4a/utils.js	936	export function setNameframeExperimentConfigs(headers, nameframeConfig) {	CODE
LOW	ads/google/a4a/utils.js	963	function getBrowserCapabilitiesBitmap(win) {	CODE
LOW	ads/google/a4a/utils.js	990	export function getAmpRuntimeTypeParameter(win) {	CODE
LOW	ads/google/a4a/utils.js	1036	function getUserAgentClientHintParameters(win) {	CODE
LOW	ads/google/a4a/shared/content-recommendation.js	309	function validateAndParsePubControlParams(params) {	CODE
LOW	ads/google/a4a/shared/content-recommendation.js	309	function validateAndParsePubControlParams(params) {	CODE
LOW	ads/google/a4a/shared/content-recommendation.js	470	function getLargerAdOneColumnSidebysideSize(	CODE
LOW	ads/google/a4a/shared/content-recommendation.js	493	function convertToPubControlLayoutType(layout) {	CODE
LOW	3p/yotpo.js	74	function getReviewsCarouselContainer(global, data) {	CODE
LOW	3p/yotpo.js	140	function getProductGalleryContainer(global, data) {	CODE
LOW	3p/yotpo.js	165	function getVisualUgcGalleryContainer(global) {	CODE
LOW	3p/yotpo.js	182	function getEmbeddedWidgetContainer(global, data) {	CODE
LOW	3p/yotpo.js	221	function getPhotosCarouselContainer(global, data) {	CODE
LOW	3p/yotpo.js	241	function getPromotedProductsContainer(global, data) {	CODE
LOW	3p/messaging.js	11	export function nonSensitiveDataPostMessage(type, opt_object) {	CODE
LOW	3p/integration-lib.js	257	export function validateAllowedEmbeddingOrigins(window, allowedHostnames) {	CODE
LOW	3p/environment.js	262	export function installEmbedStateListener() {	CODE
LOW	3p/recaptcha.js	126	function initializeIframeMessagingClient(win, grecaptcha, dataObject) {	CODE
LOW	3p/recaptcha.js	189	export function doesOriginDomainMatchIframeSrc(win, data) {	CODE
LOW	validator/js/gulpjs/test/validate.js	158	function createFileWithValidatorFailure(name) {	CODE
LOW	validator/js/webui/webui.js	18	function removeParamFromLocationHashParams(param) {	CODE
LOW	validator/js/chromeextension/worker.js	180	function handleValidatorNotPresent(tabId) {	CODE
LOW	validator/cpp/engine/wasm/validator.js	60	function stringifyValidationErrorFields(error) {	CODE
LOW	validator/cpp/engine/wasm/validator.js	75	function digitizeValidationErrorFields(error) {	CODE
LOW	test/unit/test-runtime.js	138	function extensionRegistrationTest() {	CODE
LOW	test/unit/test-video-iframe-integration.js	14	function expectCalledWithAmpVideoIntegration(spy) {	CODE
LOW	test/unit/test-xhr.js	627	function getDefaultResponseOptions() {	CODE
LOW	test/unit/test-xhr.js	633	function getDefaultResponsePromise() {	CODE
503 more matches not shown…

Hallucination Indicators30 hits · 330 pts

Severity	File	Line	Snippet	Context
CRITICAL	test/unit/test-friendly-iframe-embed.js	130	embed.win.document.documentElement.classList.contains('i-amphtml-fie')	CODE
CRITICAL	extensions/amp-story/1.0/amp-story.js	1904	this.win.document.documentElement.classList.add(	CODE
CRITICAL	extensions/amp-story/1.0/test/test-amp-story.js	2195	env.win.document.body.parentElement.setAttribute('lang', 'es');	CODE
CRITICAL	extensions/amp-story/1.0/test/test-amp-story.js	2221	env.win.document.body.parentElement.setAttribute('lang', 'es-419');	CODE
CRITICAL	extensions/amp-story/1.0/test/test-amp-story.js	2232	env.win.document.body.parentElement.setAttribute('lang', 'es-419');	CODE
CRITICAL	extensions/amp-story/1.0/test/test-amp-story.js	2244	env.win.document.body.parentElement.setAttribute('lang', 'es-419');	CODE
CRITICAL	…tensions/amp-web-push/0.1/amp-web-push-helper-frame.js	365	this.window_.navigator.serviceWorker.controller.addEventListener(	CODE
CRITICAL	extensions/amp-web-push/0.1/web-push-service.js	907	this.ampdoc.win.location.href.indexOf('?') !== -1;	CODE
CRITICAL	extensions/amp-a4a/0.1/test/test-template-renderer.js	113	expect(iframe.contentWindow.document.body.innerHTML.trim()).to.equal(	CODE
CRITICAL	…nsions/amp-analytics/0.1/test/test-iframe-transport.js	226	env.ampdoc.win.document.body.appendChild(frame);	CODE
CRITICAL	…system/release-tagger/test/label-pull-requests.test.js	25	t.context.octokitRest.rest.issues.getLabel.resolves({	CODE
CRITICAL	…system/release-tagger/test/label-pull-requests.test.js	45	t.context.octokitRest.rest.repos.compareCommits.resolves({	CODE
CRITICAL	…system/release-tagger/test/label-pull-requests.test.js	123	t.context.octokitRest.rest.issues.getLabel.resolves({	CODE
CRITICAL	…system/release-tagger/test/label-pull-requests.test.js	143	t.context.octokitRest.rest.repos.compareCommits.resolves({	CODE
CRITICAL	build-system/release-tagger/test/make-release.test.js	41	t.context.octokitRest.rest.repos.createRelease.resolves({data: {}});	CODE
CRITICAL	build-system/release-tagger/test/make-release.test.js	42	t.context.octokitRest.rest.repos.compareCommits.resolves({	CODE
CRITICAL	build-system/release-tagger/test/make-release.test.js	158	t.context.octokitRest.rest.repos.createRelease.calledWith({	CODE
CRITICAL	build-system/release-tagger/test/make-release.test.js	198	t.context.octokitRest.rest.repos.createRelease.resolves({data: {}});	CODE
CRITICAL	build-system/release-tagger/test/make-release.test.js	199	t.context.octokitRest.rest.repos.compareCommits.resolves({	CODE
CRITICAL	build-system/release-tagger/test/make-release.test.js	245	t.context.octokitRest.rest.repos.createRelease.calledWith({	CODE
CRITICAL⚡	build-system/release-tagger/test/update-release.test.js	22	t.context.octokitRest.rest.repos.getReleaseByTag.resolves({data: {id: 1}});	CODE
CRITICAL⚡	build-system/release-tagger/test/update-release.test.js	23	t.context.octokitRest.rest.repos.updateRelease.resolves({data: {id: 1}});	CODE
CRITICAL⚡	build-system/release-tagger/test/update-release.test.js	32	t.context.octokitRest.rest.repos.updateRelease.calledWith({	CODE
CRITICAL⚡	build-system/release-tagger/test/update-release.test.js	43	t.context.octokitRest.rest.repos.getReleaseByTag.resolves({	CODE
CRITICAL⚡	build-system/release-tagger/test/update-release.test.js	49	t.context.octokitRest.rest.repos.updateRelease.resolves({data: {id: 1}});	CODE
CRITICAL⚡	build-system/release-tagger/test/update-release.test.js	57	t.context.octokitRest.rest.repos.updateRelease.calledOnceWith({	CODE
CRITICAL	src/friendly-iframe-embed.js	516	this.win.document.documentElement.classList.add('i-amphtml-fie');	CODE
CRITICAL	src/service/resources-impl.js	264	this.win.document.fonts.ready.then(remeasure);	CODE
CRITICAL	src/service/viewport/viewport-binding-natural.js	131	this.win.document.documentElement.classList.add(	CODE
CRITICAL	src/service/viewport/viewport-binding-natural.js	139	this.win.document.documentElement.classList.remove(	CODE

Magic Placeholder Names33 hits · 236 pts

Severity	File	Line	Snippet	Context
HIGH	…ogle-read-aloud-player/amp-google-read-aloud-player.md	120	data-api-key="<YOUR_API_KEY>"	CODE
HIGH	…ogle-read-aloud-player/amp-google-read-aloud-player.md	120	data-api-key="<YOUR_API_KEY>"	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	86	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-168915890-1" data-voice="e	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	90	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-168915890-1"	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	96	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-168915890-1,UA-168915890-2	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	100	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-1-168915890"	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	105	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-1-1" data-voice="en.some-v	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	109	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-168915890-1" data-voice="e	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	113	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-168915890-1" data-voice="e	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	121	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="123" data-voice="en.some-voic	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	125	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="168915890-1" data-voice="en.s	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	129	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="ua-1" data-voice="en.some-voi	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	133	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-1-1.2" data-voice="en.some	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	137	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="" data-voice="en.some-voice">	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	141	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-1-1 XYZ" data-voice="en.so	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	145	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-voice="en.some-voice">	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	149	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-168915890-1">	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	153	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-url="index.html" data-voice="en.some-voice"	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	157	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-url="http://www.example.com/index.html" dat	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	161	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-168915890-1" data-voice="e	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	165	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-voice="en.some-voice" data-intro="file.mp3"	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	169	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-voice="en.some-voice" data-outro="file.mp3"	CODE
HIGH⚡	…r/0.1/test/validator-amp-google-read-aloud-player.html	173	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-voice="en.some-voice" data-ad-tag-url="inde	CODE
HIGH	…d-player/0.1/test/test-amp-google-read-aloud-player.js	12	const API_KEY = 'YOUR_API_KEY';	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	90	<amp-google-read-aloud-player height="66" data-api-key="YOUR_API_KEY" data-tracking-ids="UA-000000-2"	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	99	<amp-google-read-aloud-player layout="fixed" height="66" width="500" data-api-key="YOUR_API_KEY"	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	106	<amp-google-read-aloud-player layout="fixed-height" height="66" data-api-key="YOUR_API_KEY"	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	114	data-api-key="YOUR_API_KEY" data-tracking-ids="UA-000000-2"	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	130	<amp-google-read-aloud-player layout="fixed-height" height="66" data-api-key="YOUR_API_KEY"	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	137	<amp-google-read-aloud-player layout="fixed-height" height="66" data-api-key="YOUR_API_KEY"	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	144	<amp-google-read-aloud-player layout="fixed-height" height="66" data-api-key="YOUR_API_KEY"	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	151	<amp-google-read-aloud-player layout="fixed-height" height="66" data-api-key="YOUR_API_KEY"	CODE
HIGH⚡	…ead-aloud-player/amp-google-read-aloud-player.amp.html	159	<amp-google-read-aloud-player layout="fixed-height" height="66" data-api-key="YOUR_API_KEY"	CODE

Over-Commented Block157 hits · 157 pts

Severity	File	Line	Snippet	Context
LOW	.lando.yml	1	# This is a configuration file for a Lando-based local dev environment for amphtml.	COMMENT
LOW	validator/validator.pb.go	21		COMMENT
LOW	validator/validator.pb.go	361	return nil	COMMENT
LOW	validator/validator.pb.go	1501	unknownFields protoimpl.UnknownFields	COMMENT
LOW	validator/validator.pb.go	1541	ValueOneofSet *AttrSpec_ValueSet `protobuf:"varint,26,opt,name=value_oneof_set,json=valueOneofSet,enum=amp.validator.A	COMMENT
LOW	validator/validator.pb.go	2341		COMMENT
LOW	validator/validator.pb.go	2461	// Specifies which AMP Layouts are supported by a given element.	COMMENT
LOW	validator/validator.pb.go	2581	}	COMMENT
LOW	validator/validator.pb.go	2681	return *x.MandatoryMinNumChildTags	COMMENT
LOW	validator/validator.pb.go	2701	// they are first matched against these reference points, and only	COMMENT
LOW	validator/validator.pb.go	2781	state protoimpl.MessageState	COMMENT
LOW	validator/validator.pb.go	2961	// this TagSpec. If a Type Identifier is in `enabled_by` then this	COMMENT
LOW	validator/validator.pb.go	2981	// do with this tag spec, provide a `descriptive_name` value, which if present	COMMENT
LOW	validator/validator.pb.go	3001	MandatoryAlternatives *string `protobuf:"bytes,4,opt,name=mandatory_alternatives,json=mandatoryAlternatives" json:"mand	COMMENT
LOW	validator/validator.pb.go	3021	// spec_names (e.g. tag.name = "!DOCTYPE" or tag.spec_name = "html doctype").	COMMENT
LOW	validator/validator.pb.go	3041	// e.g. the name of a tag.	COMMENT
LOW	validator/validator.pb.go	3061	// of this tag in the document.	COMMENT
LOW	validator/validator.pb.go	3481	// validating parsed documents;: with that Type Identifier. An DocCssSpec can	COMMENT
LOW	validator/validator.pb.go	3501	// `max_bytes`. This is used for handling signed exchange transformations	COMMENT
LOW	validator/validator.pb.go	4281	//	COMMENT
LOW	validator/js/engine/htmlparser-interface.js	81	// amp-ad-0.1.mjs	COMMENT
LOW	validator/cpp/htmlparser/doctype.h	1	#ifndef CPP_HTMLPARSER_DOCTYPE_H_	COMMENT
LOW	validator/cpp/htmlparser/parser.h	21	// Parsing state flags (section 12.2.4.5).	COMMENT
LOW	validator/cpp/htmlparser/parser.h	41	// Count number of terms in a text node delimited by ascii whitespace and	COMMENT
LOW	validator/cpp/htmlparser/parser.h	141	void InBodyEndTagOther(Atom tag_atom, std::string_view tag_name);	COMMENT
LOW	validator/cpp/htmlparser/parser.h	201	// is in matchTags, provided there is no higher element in the scope's stop	COMMENT
LOW	validator/cpp/htmlparser/fileutil.h	1	#ifndef CPP_HTMLPARSER_FILEUTIL_H_	COMMENT
LOW	validator/cpp/htmlparser/fileutil.h	81	// - Rows are sorted in some form and client provides a comparator. Example:	COMMENT
LOW	validator/cpp/htmlparser/renderer.h	1	// Renderer renders the parse tree rooted at node to the given buffer.	COMMENT
LOW	validator/cpp/htmlparser/node.h	1	#ifndef CPP_HTMLPARSER_NODE_H_	COMMENT
LOW	validator/cpp/htmlparser/node.h	221	// test consistency of the nodes built manually, or by the Parser.	COMMENT
LOW	validator/cpp/htmlparser/tokenizer.h	1	#ifndef CPP_HTMLPARSER_TOKENIZER_H_	COMMENT
LOW	validator/cpp/htmlparser/tokenizer.h	41	// can contain a <foreignObject> that is foreign-to-SVG but not foreign-to-	COMMENT
LOW	validator/cpp/htmlparser/tokenizer.h	61	// <title> inside an <svg> does not. Another example is that a <textarea>	COMMENT
LOW	validator/cpp/htmlparser/tokenizer.h	81	// `<!-- xml version="1.0"` (without closing), then the first Next call would	COMMENT
LOW	validator/cpp/htmlparser/tokenizer.h	141	// been consumed, where 'a' means anything in [A-Za-z].	COMMENT
LOW	validator/cpp/htmlparser/tokenizer.h	161		COMMENT
LOW	validator/cpp/htmlparser/tokenizer.h	241	// Tells if the token is manufactured.	COMMENT
LOW	validator/cpp/htmlparser/logging.h	1	// Defines various logging macros. This is temporary and will be replaced by a	COMMENT
LOW	validator/cpp/htmlparser/strings.h	1	#ifndef CPP_HTMLPARSER_STRINGS_H_	COMMENT
LOW	validator/cpp/htmlparser/strings.h	61	// byte is in the range 0x41-0x5A or 0x61-0x7A (A-Z or a-z).	COMMENT
LOW	validator/cpp/htmlparser/strings.h	81	static int8_t CodePointByteSequenceCount(uint8_t c);	COMMENT
LOW	validator/cpp/htmlparser/strings.h	121	//	COMMENT
LOW	validator/cpp/htmlparser/strings.h	201	// Case insensitive equals.	COMMENT
LOW	validator/cpp/htmlparser/strings.h	221	// "ABCDEFGHIJKLMNOPQRSTUVWXYZ")	COMMENT
LOW	validator/cpp/htmlparser/glog_polyfill.h	21	};	COMMENT
LOW	validator/cpp/htmlparser/casetable.h	1	// AUTO GENERATED; DO NOT EDIT.	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	1	// An average HTML DOM tree consists of hundreds or thousands of nodes and	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	21	// the block size is upgraded to 4096 for 4k page_size or 8192 for 8k page_size.	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	41	// The allocator maintains linked list of blocks of memory buffers for	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	61	// It's called misaligned otherwise. For example, an 8-byte floating-point data	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	81	// int64_t b; // 8 byte (now at 8 byte alignment). 0x0008	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	101	// \| 10 \| waste \| 120 \| Obj22 \| 164 \| waste \|	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	121	// object size. So the remaining bytes in the block are skipped and new block	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	141	// is the master owner of all the objects. Client treats all objects as const	COMMENT
LOW	validator/cpp/htmlparser/allocator.h	161	// This can also be achieved by modulo operator N % A == 0.	COMMENT
LOW	validator/cpp/htmlparser/url.h	1	// Uniform resouce locator parsing related static functions.	COMMENT
LOW	validator/cpp/htmlparser/entity.h	1	// AUTO GENERATED; DO NOT EDIT.	COMMENT
LOW	validator/cpp/htmlparser/document.h	1	#ifndef CPP_HTMLPARSER_DOCUMENT_H_	COMMENT
LOW	validator/cpp/htmlparser/document.h	21	struct DocumentMetadata {	COMMENT
97 more matches not shown…

AI Slop Vocabulary9 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	3p/integration.js	117	import {empower} from '#ads/vendors/empower';	CODE
MEDIUM	3p/vendors/empower.js	7	import {empower} from '#ads/vendors/empower';	CODE
MEDIUM	validator/js/nodejs/index_test.js	220	// relatively robust. We don't want it to churn if the validator	COMMENT
MEDIUM	validator/cpp/htmlparser/atom.h	1394	0xcce08, // seamless	CODE
MEDIUM	…-network-adzerk-impl/0.1/amp-ad-network-adzerk-impl.js	65	// Does not utilize crypto signature based AMP creative validation.	COMMENT
MEDIUM	extensions/amp-form/0.1/amp-form.js	1357	// Do not interfere with form fields that utilize variable substitutions.	COMMENT
MEDIUM	extensions/amp-analytics/0.1/iframe-transport.js	137	// utilize the same analytics vendor, so perhaps two creatives might	COMMENT
MEDIUM	third_party/resize-observer-polyfill/ResizeObserver.js	251	// be possible to utilize the getBoundingClientRect if only it's data wasn't	COMMENT
MEDIUM	…rty/resize-observer-polyfill/ResizeObserver.install.js	250	// be possible to utilize the getBoundingClientRect if only it's data wasn't	COMMENT

Decorative Section Separators8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	validator/cpp/htmlparser/data/CaseFolding.txt	31	# ================================================================================	COMMENT
MEDIUM	validator/cpp/htmlparser/data/CaseFolding.txt	33	# ================================================================================	COMMENT
MEDIUM	validator/cpp/htmlparser/data/CaseFolding.txt	55	# =================================================================	COMMENT
MEDIUM	validator/cpp/htmlparser/data/CaseFolding.txt	62	# =================================================================	COMMENT
MEDIUM	validator/cpp/htmlparser/data/ipaddressgrammar.txt	10	# =================	COMMENT
MEDIUM	validator/cpp/htmlparser/data/ipaddressgrammar.txt	12	# =================	COMMENT
MEDIUM	validator/cpp/htmlparser/data/ipaddressgrammar.txt	126	# =================	COMMENT
MEDIUM	validator/cpp/htmlparser/data/ipaddressgrammar.txt	128	# =================	COMMENT

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	validator/build.py	34	except (subprocess.CalledProcessError, OSError):	CODE

Cross-Language Confusion1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	validator/validator_gen_js.py	437	out.Line('this.combinedDenyListedCdataRegex = null;')	CODE

Self-Referential Comments2 hits · 5 pts

Severity	File	Line	Snippet	Context
MEDIUM	validator/validator_gen_js.py	867	# Create a mapping from attr spec ids to AttrSpec instances, deduping the	COMMENT
MEDIUM	examples/article-with-docked-video.html	346	<!-- ## Define the content under the slot -->	CODE

Slop Phrases3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	extensions/amp-list/1.0/component.jss.js	3	// Make sure to replace "#" with "%23" in these strings!	COMMENT
LOW	.github/workflows/codeql.yml	27	# TODO: add `cpp` for Validator; don't forget to add a build step	COMMENT
LOW	.github/workflows/codeql.yml	27	# TODO: add `cpp` for Validator; don't forget to add a build step	COMMENT

Deep Nesting4 hits · 4 pts

Severity	File	Line	Context
LOW	validator/validator_gen_js.py	374	CODE
LOW	validator/validator_gen_js.py	555	CODE
LOW	validator/validator_gen_js.py	690	CODE
LOW	validator/js/webui/build.py	89	CODE

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	ads/google/a4a/test/test-utils.js	82	//TODO: Add tests for other utils functions.	COMMENT
LOW	extensions/amp-consent/0.1/amp-consent.js	616	// TODO: Handle errors	COMMENT

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	extensions/amp-vimeo/0.1/amp-vimeo.js	237	// We need to check if already muted to prevent an initial mute() call	COMMENT
LOW	examples/amp-ad/sticky.js	4	// Step 1: Once knowing the ad size is 300x250, hide the frame and request to have ad shown	COMMENT

Overly Generic Function Names3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…s/amp-consent/0.1/test/test-tcf-api-command-manager.js	470	function getData(command, callId, opt_parameter) {	CODE
LOW	build-system/tasks/e2e/driver/query-xpath.js	90	function getData(node) {	CODE
LOW	src/utils/event-helper.js	63	export function getData(event) {	CODE

Unused Imports2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	validator/build.py	5		CODE
LOW	validator/js/webui/build.py	10		CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	validator/cpp/htmlparser/iterators.h	16	// Example usage:	COMMENT

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	examples/amp-ad/sticky.js	4	// Step 1: Once knowing the ad size is 300x250, hide the frame and request to have ad shown	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.circleci/check_config.sh	20	# Check if the PR branch contains the most recent revision the CircleCI config.	COMMENT

ampproject/amphtml

Open-Source Code Quality, Security and Technical Debt Review