Home / apache / pouchdb
AI Slop Code RIsk Monitor

apache/pouchdb

:kangaroo: - PouchDB is a pocket-sized database.

5.9 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for apache/pouchdb, a JavaScript project with 17,616 GitHub stars. SynthScan examined 120,164 lines of code across 396 source files, recording 106 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 5.9 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

5.9
Adjusted Signal
5.9
Raw Pattern Score
100%
Time Factor
2026-10-02
Last Push
17.6K
Stars
JavaScript
Language
120.2K
Lines of Code
396
Files
106
Pattern Hits
2026-10-12
Scan Date
0.16
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 2.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 42 finding(s).

Hallucinated Dependency & Supply Chain Risk 23.7/100 · LOW

Are imports declared and package/API names verified? 64 finding(s).

Agent Over-Engineering Ratio 0.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 12 finding(s).

PR Review Velocity Impact 25.1/100 · MEDIUM

Which changes need focused human review? 106 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 64HIGH 1MEDIUM 4LOW 37

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 106 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators64 hits · 650 pts
SeverityFileLineSnippetContext
CRITICALtests/integration/test.get.js216 doc._revisions.ids.length.should.equal(3, 'correct revisions length');CODE
CRITICALtests/integration/test.get.js240 doc._revisions.ids.length.should.equal(4, 'correct revisions length');CODE
CRITICALtests/integration/test.get.js616 doc._revisions.ids.length.should.equal(2, 'got two revs');CODE
CRITICALtests/integration/test.replication.js1237 res.rows.should.have.length.above(0, 'first');CODE
CRITICALtests/integration/test.replication.js1242 res.rows.should.have.length.above(0, 'second');CODE
CRITICAL⚡tests/integration/test.attachments.js3308 doc._attachments.one.revpos.should.equal(1);CODE
CRITICAL⚡tests/integration/test.attachments.js3312 doc._attachments.two.revpos.should.equal(2);CODE
CRITICAL⚡tests/integration/test.attachments.js3313 doc._attachments.one.revpos.should.equal(1);CODE
CRITICAL⚡tests/integration/test.attachments.js3316 doc._attachments.one.revpos.should.equal(3);CODE
CRITICAL⚡tests/integration/test.attachments.js3317 doc._attachments.two.revpos.should.equal(2);CODE
CRITICAL⚡tests/integration/test.attachments.js3341 doc._attachments.one.revpos.should.equal(1);CODE
CRITICAL⚡tests/integration/test.attachments.js3349 doc._attachments.two.revpos.should.equal(2);CODE
CRITICAL⚡tests/integration/test.attachments.js3350 doc._attachments.one.revpos.should.equal(1);CODE
CRITICAL⚡tests/integration/test.attachments.js3355 doc._attachments.one.revpos.should.equal(3);CODE
CRITICAL⚡tests/integration/test.attachments.js3356 doc._attachments.two.revpos.should.equal(2);CODE
CRITICALtests/integration/test.attachments.js267 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js302 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js339 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js381 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js450 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js527 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js623 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js668 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js746 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js839 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js936 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js996 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js1109 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js1170 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js1289 att.data.should.not.be.a('string');CODE
CRITICALtests/integration/test.attachments.js2575 doc._attachments.mytext.data.should.equal('TXl0ZXh0');CODE
CRITICALtests/integration/test.attachments.js2738 res._attachments.should.not.include.keys('mytext1');CODE
CRITICALtests/integration/test.attachments.js3372 doc._attachments.one.revpos.should.equal(1);CODE
CRITICALtests/integration/test.revs_diff.js37 results.somestuff.missing.should.have.length(1);CODE
CRITICALtests/integration/test.revs_diff.js64 results.somestuff.missing.should.have.length(1);CODE
CRITICALtests/integration/test.revs_diff.js77 results.foo.missing.should.deep.equal(revs, 'listed all revs');CODE
CRITICALtests/integration/test.revs_diff.js154 results.constructor.missing.should.have.length(1);CODE
CRITICALtests/integration/test.viewadapter.js90 viewRequest.result.objectStoreNames.length.should.equal(0);CODE
CRITICALtests/integration/test.viewadapter.js100 docRequest.result.objectStoreNames.length.should.equal(7);CODE
CRITICALtests/integration/test.viewadapter.js139 viewRequest.result.objectStoreNames.length.should.equal(7);CODE
CRITICALtests/integration/test.viewadapter.js148 docRequest.result.objectStoreNames.length.should.equal(7);CODE
CRITICALtests/integration/test.sync.js41 result.pull.errors.should.have.length(0);CODE
CRITICALtests/integration/test.sync.js201 result.pull.errors.should.have.length(0);CODE
CRITICALtests/integration/test.sync.js221 result.pull.errors.should.have.length(0);CODE
CRITICALtests/integration/test.sync.js241 result.pull.errors.should.have.length(0);CODE
CRITICALtests/integration/test.sync.js265 result.pull.errors.should.have.length(0);CODE
CRITICALtests/integration/test.sync.js285 result.pull.errors.should.have.length(0);CODE
CRITICALtests/integration/test.sync.js578 result.pull.errors.should.have.length(0);CODE
CRITICALtests/integration/test.changes.js187 results.results.length.should.be.at.least(2);CODE
CRITICALtests/integration/test.changes.js1411 ch.doc._conflicts.length.should.equal(1);CODE
CRITICALtests/integration/test.all_docs.js288 result.doc._conflicts.should.be.instanceof(Array);CODE
CRITICALtests/integration/test.all_docs.js289 result.doc._conflicts.should.have.length(2);CODE
CRITICALtests/integration/test.all_docs.js303 row.doc._conflicts.should.be.instanceof(Array);CODE
CRITICALtests/integration/test.all_docs.js304 row.doc._conflicts.should.have.length(2);CODE
CRITICALtests/integration/test.bulk_docs.js1035 doc._revisions.ids.length.should.equal(expected);CODE
CRITICALtests/integration/test.bulk_docs.js1072 doc._revisions.ids.length.should.equal(LIMIT);CODE
CRITICALtests/integration/test.basics.js1116 fullDocs[0].ok._revisions.ids.should.have.length(num);CODE
CRITICALtests/find/test-suite-1/test.array.js43 explainResp.index.name.should.deep.equal('_all_docs');CODE
CRITICALtests/find/test-suite-1/test.array.js59 explainResp.index.name.should.deep.equal('name-index');CODE
CRITICALtests/mapreduce/test.persisted.js312 res.rows.length.should.be.within(0, 2);CODE
4 more matches not shown…
Over-Commented Block24 hits · 24 pts
SeverityFileLineSnippetContext
LOWbin/test-webpack.sh1#!/usr/bin/env -S bash -eCOMMENT
LOWtests/integration/leveldown.migration.js101 it('should work', function () {COMMENT
LOWtests/integration/leveldown.migration.js121 //var docsB = [{COMMENT
LOWtests/integration/test.issue2674.js41// 5. On client B I synchronized its local db with remote db (in the same wayCOMMENT
LOWtests/integration/test.compaction.js521 // We're testing some functionality specific to the implementationCOMMENT
LOWtests/integration/deps/pouchdb-3.2.0-postfixed.js1// PouchDBVersion320 3.2.0COMMENT
LOWtests/integration/deps/pouchdb-7.3.1-postfixed.js1// PouchDBVersion731 7.3.1COMMENT
LOWtests/integration/deps/pouchdb-2.0.0-postfixed.js4921},{"./adapters/http":2,"./adapters/idb":3,"./adapters/leveldb":20,"./adapters/websql":4,"./deps/ajax":6,"./deps/errors":COMMENT
LOWtests/integration/deps/pouchdb-2.0.0-postfixed.js6241//COMMENT
LOWtests/integration/deps/pouchdb-2.2.0-postfixed.js4741// for a better overview of what this is doing, read:COMMENT
LOWtests/integration/deps/pouchdb-2.2.0-postfixed.js6521 } else {COMMENT
LOWtests/integration/deps/pouchdb-8.0.1-postfixed.js1// PouchDBVersion801 8.0.1COMMENT
LOWtests/integration/deps/pouchdb-3.0.6-postfixed.js5701},{"./adapters/http":2,"./adapters/idb":3,"./adapters/leveldb":26,"./adapters/websql":5,"./deps/ajax":8,"./deps/errors":COMMENT
LOWtests/integration/deps/pouchdb-3.0.6-postfixed.js7601 return fun.call(this, args);COMMENT
LOWtests/fuzzy/test.fuzzy.js1'use strict';COMMENT
LOWtests/find/test-suite-1/test.skip.js261COMMENT
LOWtests/find/test-suite-1/test.skip.js281// // should have one document less because skip: 1COMMENT
LOWdocs/static/js/pouchdb.min.js1// PouchDB 9.0.0COMMENT
LOWdocs/src/less/bootstrap/forms.less101// input[type="datetime"]COMMENT
LOWdocs/src/less/bootstrap/forms.less321COMMENT
LOWdocs/src/less/bootstrap/responsive-utilities.less1//COMMENT
LOWdocs/src/less/bootstrap/normalize.less321COMMENT
LOWdocs/src/less/bootstrap/mixins.less1//COMMENT
LOWdocs/src/less/bootstrap/mixins.less881 .form-control-feedback {COMMENT
Hyper-Verbose Identifiers12 hits · 14 pts
SeverityFileLineSnippetContext
LOWbin/build-pouchdb.js126function buildPluginsForBrowserify() {CODE
LOWtests/misc/sync-gateway-config-server.js7function createSyncGatewayConfigServer() {CODE
LOWtests/integration/test.replication.js575 function ensureCheckpointIsMissing(db, replicationId) {CODE
LOWtests/integration/browser.migration.js18 function usingDefaultPreferredAdapters() {CODE
LOWtests/integration/worker.js23function postAttachmentThenAllDocs(name) {CODE
LOWtests/integration/test.viewadapter.js42 function getDbNamesFromLevelDBFolder(name) {CODE
LOWtests/integration/deps/pouchdb-2.0.0-postfixed.js2635 function countUndeletedNonlocalDocs(e) {CODE
LOWtests/find/test-issues/test.issue7810.js44 function assertWithAndWithoutLengthOf(results, docLen) {CODE
LOW⚡tests/memleak/test.memleak.js73 function SomewhatDummyPouchAdapter(opts,callback) {CODE
LOW⚡tests/memleak/test.memleak.js76 api._close = function SomewhatDummyPouchAdapterClose(callback) {CODE
LOW⚡tests/memleak/test.memleak.js83 api._info = function SomewhatDummyPouchAdapterInfo(callback) {CODE
LOWtests/memleak/test.memleak.js98 SomewhatDummyPouchAdapter.valid = function SomwehatDummyPouchAdapterValid() { return true; };CODE
Self-Referential Comments3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMbin/release.sh18# Create a temporary build directoryCOMMENT
MEDIUMdocs/src/less/bootstrap/variables.less257//## Define the breakpoints at which your layout will change, adapting to different screen sizes.COMMENT
MEDIUMdocs/src/less/bootstrap/variables.less306//## Define the maximum width of `.container` for different screen sizes.COMMENT
Synthetic Comment Markers1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHCONTRIBUTING.md177Thus, it is expressly forbidden to contribute material generated by AI, LLMs,CODE
Slop Phrases1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMdocs/_includes/api/replication.html82As with [changes()](#changes), you can also omit `live`, in which case you can use `replicate()` in the callback/promiseCODE
Overly Generic Function Names1 hit · 0 pts
SeverityFileLineSnippetContext
LOWtests/integration/test.attachments.js3255 function getData(cb) {CODE