2.9

Adjusted Signal

2.9

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

15.4K

Stars

Java

Language

1.3M

Lines of Code

5.9K

Files

888

Pattern Hits

2026-10-31

Scan Date

0.05

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 563 finding(s).

Hallucinated Dependency & Supply Chain Risk 11.2/100 · LOW

Are imports declared and package/API names verified? 311 finding(s).

Agent Over-Engineering Ratio 0.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 92 finding(s).

PR Review Velocity Impact 12.4/100 · LOW

Which changes need focused human review? 888 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 281HIGH 12MEDIUM 12LOW 583

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 888 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators281 hits · 3102 pts

Severity	File	Line	Snippet	Context
CRITICAL	…g/apache/pulsar/websocket/proxy/ProxyRoleAuthTest.java	392	org.apache.pulsar.common.policies.data.ClusterData.builder()	CODE
CRITICAL	…g/apache/pulsar/websocket/proxy/ProxyRoleAuthTest.java	406	org.apache.pulsar.common.policies.data.TenantInfoImpl.builder()	CODE
CRITICAL	…ction/pendingack/impl/MetadataPendingAckStoreTest.java	206	new org.apache.pulsar.broker.transaction.metadata.TxnEvent(	CODE
CRITICAL	…ction/pendingack/impl/MetadataPendingAckStoreTest.java	233	new org.apache.pulsar.broker.transaction.metadata.TxnEvent(	CODE
CRITICAL	…ction/pendingack/impl/MetadataPendingAckStoreTest.java	285	return new org.apache.pulsar.metadata.api.ScanConsumer() {	CODE
CRITICAL	…saction/buffer/impl/MetadataTransactionBufferTest.java	266	new org.apache.pulsar.broker.transaction.metadata.SegmentWatermark(5, 0),	CODE
CRITICAL	…saction/buffer/impl/MetadataTransactionBufferTest.java	291	new org.apache.pulsar.broker.transaction.metadata.SegmentWatermark(5, 0),	CODE
CRITICAL	…saction/buffer/impl/MetadataTransactionBufferTest.java	473	new org.apache.pulsar.broker.transaction.metadata.SegmentWatermark(5, 0),	CODE
CRITICAL	…saction/buffer/impl/MetadataTransactionBufferTest.java	548	new org.apache.pulsar.broker.transaction.metadata.SegmentWatermark(5, 0),	CODE
CRITICAL	…saction/buffer/impl/MetadataTransactionBufferTest.java	583	new org.apache.pulsar.metadata.api.ScanConsumer() {	CODE
CRITICAL	…lsar/broker/loadbalance/SimpleLoadManagerImplTest.java	297	new org.apache.pulsar.policies.data.loadbalancer.LoadReport();	CODE
CRITICAL	…lsar/broker/loadbalance/SimpleLoadManagerImplTest.java	374	new org.apache.pulsar.policies.data.loadbalancer.LoadReport();	CODE
CRITICAL	…lsar/broker/loadbalance/SimpleLoadManagerImplTest.java	427	new org.apache.pulsar.policies.data.loadbalancer.LoadReport();	CODE
CRITICAL	…lsar/broker/loadbalance/SimpleLoadManagerImplTest.java	431	new org.apache.pulsar.policies.data.loadbalancer.LoadReport();	CODE
CRITICAL	…xtensions/AntiAffinityNamespaceGroupExtensionTest.java	99	org.apache.commons.lang3.reflect.FieldUtils.readDeclaredField(antiAffinityGroupPolicyHelper,	CODE
CRITICAL	…sar/broker/resourcegroup/ResourceGroupServiceTest.java	92	new org.apache.pulsar.common.policies.data.ResourceGroup();	CODE
CRITICAL	…sar/broker/resourcegroup/ResourceGroupServiceTest.java	152	new org.apache.pulsar.common.policies.data.ResourceGroup();	CODE
CRITICAL	…sar/broker/resourcegroup/ResourceGroupServiceTest.java	166	new org.apache.pulsar.common.policies.data.ResourceGroup();	CODE
CRITICAL	…sar/broker/resourcegroup/ResourceGroupServiceTest.java	281	service.resourceGroupCreate(rg, new org.apache.pulsar.common.policies.data.ResourceGroup());	CODE
CRITICAL	…sar/broker/resourcegroup/ResourceGroupServiceTest.java	350	rgs.resourceGroupCreate(rgName, new org.apache.pulsar.common.policies.data.ResourceGroup());	CODE
CRITICAL	…sar/broker/resourcegroup/ResourceGroupServiceTest.java	430	rgs.resourceGroupCreate(rg, new org.apache.pulsar.common.policies.data.ResourceGroup());	CODE
CRITICAL	…sar/broker/resourcegroup/ResourceGroupServiceTest.java	471	rgs.resourceGroupCreate(rg, new org.apache.pulsar.common.policies.data.ResourceGroup());	CODE
CRITICAL	…sar/broker/resourcegroup/ResourceGroupServiceTest.java	507	rgs.resourceGroupCreate(rg, new org.apache.pulsar.common.policies.data.ResourceGroup());	CODE
CRITICAL	…r/resourcegroup/ResourceGroupUsageAggregationTest.java	252	new org.apache.pulsar.common.policies.data.ResourceGroup();	CODE
CRITICAL	…broker/resourcegroup/ResourceGroupRateLimiterTest.java	44	new org.apache.pulsar.common.policies.data.ResourceGroup();	CODE
CRITICAL	…ker/resourcegroup/RGUsageMTAggrWaitForAllMsgsTest.java	783	new org.apache.pulsar.common.policies.data.ResourceGroup();	CODE
CRITICAL	…/org/apache/pulsar/broker/admin/TopicPoliciesTest.java	4756	org.apache.pulsar.common.util.ObjectMapperFactory.getThreadLocal().writeValueAsBytes(policies),	CODE
CRITICAL	…e/pulsar/broker/admin/FunctionsConnectorsListTest.java	119	org.apache.pulsar.broker.admin.v2.Functions resource = new org.apache.pulsar.broker.admin.v2.Functions();	CODE
CRITICAL	…che/pulsar/broker/intercept/BrokerInterceptorTest.java	286	jakarta.ws.rs.core.Response.noContent().build().getStatus());	CODE
CRITICAL	…va/org/apache/pulsar/broker/service/ServerCnxTest.java	1664	registration.complete(new org.apache.pulsar.broker.service.scalable.ConsumerAssignment(	CODE
CRITICAL	…va/org/apache/pulsar/broker/service/ServerCnxTest.java	1727	new org.apache.pulsar.broker.service.scalable.ConsumerAssignment(	CODE
CRITICAL⚡	…roker/service/OpenTelemetryTracingIntegrationTest.java	150	io.opentelemetry.api.common.AttributeKey.stringKey("messaging.system")), "pulsar");	CODE
CRITICAL⚡	…roker/service/OpenTelemetryTracingIntegrationTest.java	159	io.opentelemetry.api.common.AttributeKey.stringKey("messaging.system")), "pulsar");	CODE
CRITICAL⚡	…roker/service/OpenTelemetryTracingIntegrationTest.java	161	io.opentelemetry.api.common.AttributeKey.stringKey("messaging.pulsar.acknowledgment.type")),	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	200	io.opentelemetry.api.common.AttributeKey.stringKey("messaging.destination.name")))	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	314	io.opentelemetry.api.common.AttributeKey.stringKey("messaging.pulsar.acknowledgment.type")),	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	362	io.opentelemetry.api.common.AttributeKey.stringKey(	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	416	io.opentelemetry.api.common.AttributeKey.stringKey(	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	476	io.opentelemetry.api.common.AttributeKey.stringKey("messaging.destination.name")))	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	575	io.opentelemetry.api.common.AttributeKey.stringKey(	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	680	io.opentelemetry.api.common.AttributeKey.stringKey(	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	734	io.opentelemetry.api.common.AttributeKey.stringKey(	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	806	io.opentelemetry.api.common.AttributeKey.stringKey(	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	870	io.opentelemetry.api.common.AttributeKey.stringKey("messaging.system")));	CODE
CRITICAL	…roker/service/OpenTelemetryTracingIntegrationTest.java	872	io.opentelemetry.api.common.AttributeKey.stringKey("messaging.system")), "pulsar");	CODE
CRITICAL	…schema/ProtobufNativeSchemaCompatibilityCheckTest.java	33	getSchemaData(org.apache.pulsar.client.api.schema.proto.Test.TestMessage.getDescriptor());	CODE
CRITICAL	…schema/ProtobufNativeSchemaCompatibilityCheckTest.java	36	getSchemaData(org.apache.pulsar.client.api.schema.proto.Test.SubMessage.getDescriptor());	CODE
CRITICAL	…ulsar/broker/service/scalable/AutoScaleConfigTest.java	62	org.apache.pulsar.common.policies.data.AutoScalePolicyOverride.builder()	CODE
CRITICAL	…ulsar/broker/service/scalable/AutoScaleConfigTest.java	67	org.apache.pulsar.common.policies.data.AutoScalePolicyOverride.builder()	CODE
CRITICAL	…ulsar/broker/service/scalable/AutoScaleConfigTest.java	97	org.apache.pulsar.common.policies.data.AutoScalePolicyOverride.builder()	CODE
CRITICAL	…/broker/service/scalable/ScalableTopicServiceTest.java	615	new org.apache.pulsar.common.scalable.SegmentLoadStats(1, 1, 1, 1)).get();	CODE
CRITICAL⚡	…oker/service/scalable/ScalableTopicControllerTest.java	1069	org.apache.pulsar.common.scalable.SegmentInfo seg0 = new org.apache.pulsar.common.scalable.SegmentInfo(	CODE
CRITICAL⚡	…oker/service/scalable/ScalableTopicControllerTest.java	1071	org.apache.pulsar.common.scalable.HashRange.of(0x0000, 0x3FFF),	CODE
CRITICAL⚡	…oker/service/scalable/ScalableTopicControllerTest.java	1076	org.apache.pulsar.common.scalable.SegmentInfo seg1 = new org.apache.pulsar.common.scalable.SegmentInfo(	CODE
CRITICAL⚡	…oker/service/scalable/ScalableTopicControllerTest.java	1078	org.apache.pulsar.common.scalable.HashRange.of(0x4000, 0x7FFF),	CODE
CRITICAL⚡	…oker/service/scalable/ScalableTopicControllerTest.java	1082	org.apache.pulsar.common.scalable.SegmentInfo seg2 = new org.apache.pulsar.common.scalable.SegmentInfo(	CODE
CRITICAL⚡	…oker/service/scalable/ScalableTopicControllerTest.java	1084	org.apache.pulsar.common.scalable.HashRange.of(0x8000, 0xFFFF),	CODE
CRITICAL	…oker/service/scalable/ScalableTopicControllerTest.java	1149	new org.apache.pulsar.client.admin.PulsarAdminException.NotFoundException(	CODE
CRITICAL	…oker/service/scalable/ScalableTopicControllerTest.java	1166	new org.apache.pulsar.client.admin.PulsarAdminException(	CODE
CRITICAL	…oker/service/scalable/ScalableTopicControllerTest.java	1186	new org.apache.pulsar.client.admin.PulsarAdminException(	CODE
221 more matches not shown…

Over-Commented Block406 hits · 405 pts

Severity	File	Line	Snippet	Context
LOW	.asf.yaml	1	#	COMMENT
LOW	codecov.yml	1	#	COMMENT
LOW	docker/get-version.sh	1	#!/usr/bin/env bash	COMMENT
LOW	docker/publish.sh	1	#!/usr/bin/env bash	COMMENT
LOW	docker/build.sh	1	#!/usr/bin/env bash	COMMENT
LOW	docker/pulsar/scripts/apply-config-from-env.py	1	#!/usr/bin/env python3	COMMENT
LOW	docker/pulsar/scripts/gen-yml-from-env.py	1	#!/usr/bin/env python3	COMMENT
LOW	docker/pulsar/scripts/update-ini-from-env.py	1	#!/usr/bin/env python3	COMMENT
LOW	docker/pulsar/scripts/generate-zookeeper-config.sh	1	#!/usr/bin/env bash	COMMENT
LOW	docker/pulsar/scripts/update-rocksdb-conf-from-env.py	1	#!/usr/bin/env python3	COMMENT
LOW	…er/pulsar/scripts/apply-config-from-env-with-prefix.py	1	#!/usr/bin/env bash	COMMENT
LOW	…er/pulsar/scripts/apply-config-from-env-with-prefix.py	21	############################################################	COMMENT
LOW	docker/pulsar/scripts/watch-znode.py	1	#!/usr/bin/env python3	COMMENT
LOW	docker/pulsar/scripts/pulsar-zookeeper-ruok.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…ar/build-scripts/remove-unnecessary-native-binaries.sh	1	#!/usr/bin/env sh	COMMENT
LOW	…saction/buffer/impl/MetadataTransactionBufferTest.java	241	// visible — orphans are eliminated by the publish-path ordering reversal (op-record	COMMENT
LOW	…saction/buffer/impl/MetadataTransactionBufferTest.java	481	assertThat(tb.getOngoingTxnCount()).isOne();	COMMENT
LOW	…ance/extensions/ExtensibleLoadManagerImplBaseTest.java	201	protected void initializeState() throws Exception {	COMMENT
LOW	…dbalance/extensions/ExtensibleLoadManagerImplTest.java	1601	Awaitility.await().atMost(30, TimeUnit.SECONDS).untilAsserted(() -> {	COMMENT
LOW	…/service/SystemTopicBasedTopicPoliciesServiceTest.java	561	// The reader.close() above drives readMorePoliciesAsync() into cleanPoliciesCacheInitMap(), which logs	COMMENT
LOW	…/service/SystemTopicBasedTopicPoliciesServiceTest.java	901	}	COMMENT
LOW	…pulsar/broker/service/PersistentMessageFinderTest.java	861	for (int i = 0; i < totalEntries; i++) {	COMMENT
LOW	…apache/pulsar/broker/service/OneWayReplicatorTest.java	2021	throw new RuntimeException("mock error");	COMMENT
LOW	…ce/extensions/channel/ServiceUnitStateChannelImpl.java	1141	}	COMMENT
LOW	…org/apache/pulsar/broker/namespace/OwnershipCache.java	121	// Normal ownership releases remove the registration before releasing the lock.	COMMENT
LOW	…va/org/apache/pulsar/broker/namespace/OwnedBundle.java	161		COMMENT
LOW	…va/org/apache/pulsar/broker/service/BrokerService.java	2021	String tlsFactoryClassName, String tlsFactoryConfig) {	COMMENT
LOW	…va/org/apache/pulsar/broker/service/BrokerService.java	4821	// racing a controller-driven delete (post-prune retention GC, force-delete, or the	COMMENT
LOW	…nt/PersistentStickyKeyDispatcherMultipleConsumers.java	501	acquirePermitsForDeliveredMessages(topic, cursor, totalEntries, totalMessagesSent, totalBytesSent);	COMMENT
LOW	…nt/PersistentStickyKeyDispatcherMultipleConsumers.java	721	}	COMMENT
LOW	…/pulsar/broker/service/persistent/PersistentTopic.java	1541	return;	COMMENT
LOW	…r/broker/service/scalable/ScalableTopicController.java	1061	// Parent-drain ordering matters only for STREAM consumers (Exclusive per-segment	COMMENT
LOW	…lsar/broker/service/scalable/ScalableTopicService.java	281	new IllegalArgumentException("numInitialSegments must be >= 1"));	COMMENT
LOW	…stats/prometheus/metrics/PrometheusTextFormatUtil.java	61	// quantile="0.75"} NaN	COMMENT
LOW	pulsar-function-go/golangci.yml	1	#	COMMENT
LOW	pulsar-function-go/pb/Request.pb.go	1	//	COMMENT
LOW	pulsar-function-go/pb/Function.pb.go	1	//	COMMENT
LOW	pulsar-function-go/pb/InstanceCommunication_grpc.pb.go	1	//	COMMENT
LOW	pulsar-function-go/pb/doc.go	1	//	COMMENT
LOW	pulsar-function-go/pb/doc.go	21	// uses for the client/broker wire protocol.	COMMENT
LOW	pulsar-function-go/pb/generate.sh	1	#!/usr/bin/env bash	COMMENT
LOW	pulsar-function-go/pb/generate.sh	21	# Bash script to automate the generation of the api package using Docker.	COMMENT
LOW	pulsar-function-go/pb/generate.sh	101	// distributed with this work for additional information	COMMENT
LOW	pulsar-function-go/pb/generate.sh	161	cat <<EOF >"${outDir}/doc.go"	COMMENT
LOW	pulsar-function-go/pb/generate.sh	181	// Package ${pkg} provides the protocol buffer messages that Pulsar	COMMENT
LOW	pulsar-function-go/pb/InstanceCommunication.pb.go	1	//	COMMENT
LOW	pulsar-function-go/pb/InstanceCommunication.pb.go	61	//	COMMENT
LOW	pulsar-function-go/pf/function_test.go	1	//	COMMENT
LOW	pulsar-function-go/pf/producerConfig.go	1	//	COMMENT
LOW	pulsar-function-go/pf/producerConfig.go	41	// pulsar.BatcherBuilderType. Anything other than "KEY_BASED" maps to the default batcher, matching	COMMENT
LOW	pulsar-function-go/pf/producerConfig.go	61	// BatchingSpec.BatchingMaxPublishDelayMs BatchingMaxPublishDelay	COMMENT
LOW	pulsar-function-go/pf/instanceConf.go	1	//	COMMENT
LOW	pulsar-function-go/pf/topicName.go	1	//	COMMENT
LOW	pulsar-function-go/pf/instance.go	1	//	COMMENT
LOW	pulsar-function-go/pf/nackDelay_test.go	1	//	COMMENT
LOW	pulsar-function-go/pf/util_test.go	1	//	COMMENT
LOW	pulsar-function-go/pf/topicName_test.go	1	//	COMMENT
LOW	pulsar-function-go/pf/mockMessage_test.go	1	//	COMMENT
LOW	pulsar-function-go/pf/util.go	1	//	COMMENT
LOW	pulsar-function-go/pf/producerConfig_test.go	1	//	COMMENT
346 more matches not shown…

Hyper-Verbose Identifiers73 hits · 77 pts

Severity	File	Line	Snippet	Context
LOW	…pache/pulsar/socks5/handler/CommandRequestHandler.java	40	public class CommandRequestHandler extends SimpleChannelInboundHandler<DefaultSocks5CommandRequest> {	CODE
LOW	…/pulsar/socks5/handler/PasswordAuthRequestHandler.java	32	public class PasswordAuthRequestHandler extends SimpleChannelInboundHandler<DefaultSocks5PasswordAuthRequest> {	CODE
LOW	…pache/pulsar/socks5/handler/InitialRequestHandler.java	31	public class InitialRequestHandler extends SimpleChannelInboundHandler<DefaultSocks5InitialRequest> {	CODE
LOW	tests/performance/serve-reports.py	43	class ReportRequestHandler(http.server.SimpleHTTPRequestHandler):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	158	def test_defaults_when_no_producer_spec(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	166	def test_defaults_when_producer_spec_has_no_batching_spec(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	175	def test_batching_can_be_disabled(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	183	def test_full_batching_spec_is_translated(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	213	def test_pending_message_limits_are_translated(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	221	def test_pending_message_limits_omitted_when_unset(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	228	def test_producer_spec_batch_builder_is_honoured(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	234	def test_batching_spec_batch_builder_overrides_producer_spec(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	244	def test_unknown_batch_builder_falls_back_to_default(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	250	def test_none_function_details_yields_defaults(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	272	def test_defaults_are_unchanged_without_a_producer_spec(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	282	def test_batching_disabled_reaches_the_producer(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	289	def test_batching_settings_reach_the_producer(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	335	def test_defaults_are_unchanged_without_a_producer_spec(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	341	def test_batching_disabled_reaches_the_producer(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	347	def test_batching_settings_reach_the_producer(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	357	def test_batch_builder_reaches_the_producer(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	380	def test_positive_delay_is_forwarded(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	384	def test_unset_delay_is_omitted(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	390	def test_explicit_zero_is_omitted(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	393	def test_result_is_splattable_into_subscribe_kwargs(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	440	def test_policy_reaches_the_topics_to_serde_path(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	448	def test_policy_reaches_the_input_specs_path(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	457	def test_policy_reaches_the_regex_path(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	464	def test_policy_reaches_subscribe_for_a_non_shared_consumer_type(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	536	def test_no_retry_details_means_no_policy(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	540	def test_policy_built_from_retry_details(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	549	def test_empty_dead_letter_topic_defers_to_client_default(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	566	def test_zero_retries_fails_fast(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	576	def test_negative_retries_fails_fast(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	581	def test_policy_is_not_gated_on_subscription_type(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	641	def test_action_is_omitted_without_a_crypto_spec(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	648	def test_unset_action_in_a_present_crypto_spec_keeps_the_client_default(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	655	def test_discard_is_forwarded(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	661	def test_consume_is_forwarded(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	667	def test_producer_only_send_falls_back_to_fail(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	675	def test_result_is_splattable_into_subscribe_kwargs(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	684	def test_action_reaches_subscribe_on_the_input_specs_paths(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	720	def test_unset_crypto_spec_yields_no_reader_and_no_error(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	730	def test_partial_default_reader_config_still_logs_an_error(self):	CODE
LOW⚡	…tions/instance/src/test/python/test_python_instance.py	739	def test_custom_reader_class_without_config_is_built_with_no_arguments(self):	CODE
LOW	…tions/instance/src/test/python/test_python_instance.py	84	def test_context_ack_partitionedtopic(self):	CODE
LOW	…tions/instance/src/test/python/test_python_instance.py	140	def test_do_not_forward_properties(self):	CODE
LOW	…tions/instance/src/test/python/test_python_instance.py	200	def test_non_positive_values_fall_back_to_client_defaults(self):	CODE
LOW	…tions/instance/src/test/python/test_python_instance.py	305	def test_key_based_batch_builder_still_reaches_the_producer(self):	CODE
LOW	…tions/instance/src/test/python/test_python_instance.py	501	def test_keyword_is_passed_as_none_without_retry_details(self):	CODE
LOW	…tions/instance/src/test/python/test_python_instance.py	626	def _instance_and_consumer_conf(self, failure_action=None, with_crypto_spec=False):	CODE
LOW	…tions/instance/src/test/python/test_python_instance.py	701	def test_action_is_not_passed_to_subscribe_without_a_crypto_spec(self):	CODE
LOW	…tions/instance/src/test/python/test_secretsprovider.py	35	def test_cleartext_secretsprovider(self):	CODE
LOW	…tions/instance/src/test/python/test_secretsprovider.py	44	def test_environment_secretsprovider(self):	CODE
LOW	…tions/instance/src/main/python/python_instance_main.py	59	def generate_arguments_parser():	CODE
LOW⚡	pulsar-functions/instance/src/main/python/util.py	93	def batching_type_from_batch_builder(batch_builder):	CODE
LOW⚡	pulsar-functions/instance/src/main/python/util.py	102	def producer_config_from_spec(producer_spec):	CODE
LOW	pulsar-functions/instance/src/main/python/util.py	148	def producer_config_from_function_details(function_details):	CODE
LOW	…r-functions/instance/src/main/python/function_stats.py	111	def get_total_processed_successfully(self):	CODE
LOW	…r-functions/instance/src/main/python/function_stats.py	117	def get_total_user_exceptions(self):	CODE
13 more matches not shown…

Structural Annotation Overuse29 hits · 48 pts

Severity	File	Line	Snippet	Context
LOW⚡	…apache/pulsar/broker/service/OneWayReplicatorTest.java	1743	// Step 1: Inject an error to make the replicator is not able to work.	STRING
LOW⚡	…apache/pulsar/broker/service/OneWayReplicatorTest.java	1747	// Step 2: Send one message, since the replicator does not work anymore, this message will not be replicated.	STRING
LOW⚡	…apache/pulsar/broker/service/OneWayReplicatorTest.java	1757	// Step 3: Unload topic, the replicator will be re-created.	STRING
LOW⚡	…sar/broker/service/schema/BookkeeperSchemaStorage.java	413	// Step 1: Store the schema data into a new BookKeeper ledger	COMMENT
LOW⚡	…sar/broker/service/schema/BookkeeperSchemaStorage.java	423	// Step 2: Create the schema locator z-node pointing to the ledger	COMMENT
LOW⚡	…sar/broker/service/schema/BookkeeperSchemaStorage.java	431	// Step 3: Handle failure by cleaning up the orphan ledger	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1268	// Step 3: Terminate the parent segment topic so producers get TopicTerminated	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1271	// Step 4: Atomic metadata update (only after topics + cursors are ready + parent terminated)	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1391	// Step 1: Read the scalable topic's subscriptions from metadata (single source of	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1397	// Step 2: Terminate both parent segment topics	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1401	// Step 3: Atomic metadata update (only after topic + cursors are ready + parents terminated)	COMMENT
LOW	…r/broker/service/scalable/ScalableTopicController.java	1257	// Step 1: Read the scalable topic's subscriptions from metadata (the single source	COMMENT
LOW	…r/broker/service/scalable/ScalableTopicController.java	1285	// Step 5: Notify subscriptions of layout change (triggers consumer reassignment)	COMMENT
LOW	…broker/authentication/ProxySaslAuthenticationTest.java	229	// Step 1: Create Admin Client	COMMENT
LOW	…broker/authentication/ProxySaslAuthenticationTest.java	271	// Step 3: Pass correct client params	COMMENT
LOW	…ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java	88	// Step 1: Create Admin Client	COMMENT
LOW	…ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java	102	// Step 2: Run Pulsar Proxy without forwarding authData - expect Exception	COMMENT
LOW	…ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java	137	// Step 3: Create proxy with forwardAuthData enabled	COMMENT
LOW	…che/pulsar/proxy/server/ProxyRolesEnforcementTest.java	186	// Step 1: Create Admin Client	COMMENT
LOW⚡	…che/pulsar/proxy/server/ProxyRolesEnforcementTest.java	202	// Step 2: Try to use proxy Client as a normal Client - expect exception	COMMENT
LOW⚡	…che/pulsar/proxy/server/ProxyRolesEnforcementTest.java	212	// Step 3: Run Pulsar Proxy and pass proxy params as client params - expect exception	COMMENT
LOW	…che/pulsar/proxy/server/ProxyRolesEnforcementTest.java	252	// Step 4: Pass correct client params	COMMENT
LOW	…pache/pulsar/proxy/server/ProxyAuthenticationTest.java	272	// Step 1: Create Admin Client	COMMENT
LOW	…pache/pulsar/proxy/server/ProxyAuthenticationTest.java	288	// Step 2: Try to use proxy Client as a normal Client - expect exception	COMMENT
LOW⚡	…pache/pulsar/proxy/server/ProxyAuthenticationTest.java	317	// Step 3: Pass correct client params and use multiple connections	COMMENT
LOW⚡	…pache/pulsar/proxy/server/ProxyAuthenticationTest.java	324	// Step 4: Ensure that all client contexts share the same auth provider	COMMENT
LOW	wireshark/README.md	26	## Step 1: prepare PulsarApi.proto file	COMMENT
LOW	wireshark/README.md	38	## Step 2: add pulsar.lua to plugins	COMMENT
LOW	wireshark/README.md	46	## Step 3: start to use	COMMENT

Verbosity Indicators27 hits · 45 pts

Severity	File	Line	Snippet	Context
LOW⚡	…apache/pulsar/broker/service/OneWayReplicatorTest.java	1743	// Step 1: Inject an error to make the replicator is not able to work.	STRING
LOW⚡	…apache/pulsar/broker/service/OneWayReplicatorTest.java	1747	// Step 2: Send one message, since the replicator does not work anymore, this message will not be replicated.	STRING
LOW⚡	…apache/pulsar/broker/service/OneWayReplicatorTest.java	1757	// Step 3: Unload topic, the replicator will be re-created.	STRING
LOW	…org/apache/pulsar/broker/namespace/OwnershipCache.java	246	// If we're not the owner, we need to check if anybody else is	COMMENT
LOW⚡	…sar/broker/service/schema/BookkeeperSchemaStorage.java	413	// Step 1: Store the schema data into a new BookKeeper ledger	COMMENT
LOW⚡	…sar/broker/service/schema/BookkeeperSchemaStorage.java	423	// Step 2: Create the schema locator z-node pointing to the ledger	COMMENT
LOW⚡	…sar/broker/service/schema/BookkeeperSchemaStorage.java	431	// Step 3: Handle failure by cleaning up the orphan ledger	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1268	// Step 3: Terminate the parent segment topic so producers get TopicTerminated	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1271	// Step 4: Atomic metadata update (only after topics + cursors are ready + parent terminated)	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1391	// Step 1: Read the scalable topic's subscriptions from metadata (single source of	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1397	// Step 2: Terminate both parent segment topics	COMMENT
LOW⚡	…r/broker/service/scalable/ScalableTopicController.java	1401	// Step 3: Atomic metadata update (only after topic + cursors are ready + parents terminated)	COMMENT
LOW	…r/broker/service/scalable/ScalableTopicController.java	1257	// Step 1: Read the scalable topic's subscriptions from metadata (the single source	COMMENT
LOW	…r/broker/service/scalable/ScalableTopicController.java	1285	// Step 5: Notify subscriptions of layout change (triggers consumer reassignment)	COMMENT
LOW	…broker/authentication/ProxySaslAuthenticationTest.java	229	// Step 1: Create Admin Client	COMMENT
LOW	…broker/authentication/ProxySaslAuthenticationTest.java	271	// Step 3: Pass correct client params	COMMENT
LOW	…ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java	88	// Step 1: Create Admin Client	COMMENT
LOW	…ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java	102	// Step 2: Run Pulsar Proxy without forwarding authData - expect Exception	COMMENT
LOW	…ache/pulsar/proxy/server/ProxyForwardAuthDataTest.java	137	// Step 3: Create proxy with forwardAuthData enabled	COMMENT
LOW	…che/pulsar/proxy/server/ProxyRolesEnforcementTest.java	186	// Step 1: Create Admin Client	COMMENT
LOW⚡	…che/pulsar/proxy/server/ProxyRolesEnforcementTest.java	202	// Step 2: Try to use proxy Client as a normal Client - expect exception	COMMENT
LOW⚡	…che/pulsar/proxy/server/ProxyRolesEnforcementTest.java	212	// Step 3: Run Pulsar Proxy and pass proxy params as client params - expect exception	COMMENT
LOW	…che/pulsar/proxy/server/ProxyRolesEnforcementTest.java	252	// Step 4: Pass correct client params	COMMENT
LOW	…pache/pulsar/proxy/server/ProxyAuthenticationTest.java	272	// Step 1: Create Admin Client	COMMENT
LOW	…pache/pulsar/proxy/server/ProxyAuthenticationTest.java	288	// Step 2: Try to use proxy Client as a normal Client - expect exception	COMMENT
LOW⚡	…pache/pulsar/proxy/server/ProxyAuthenticationTest.java	317	// Step 3: Pass correct client params and use multiple connections	COMMENT
LOW⚡	…pache/pulsar/proxy/server/ProxyAuthenticationTest.java	324	// Step 4: Ensure that all client contexts share the same auth provider	COMMENT

Empty Error Handlers6 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	docker/pulsar/scripts/watch-znode.py	94	except NodeExistsError:	CODE
HIGH	tests/performance/serve-reports.py	79	except KeyboardInterrupt:	CODE
HIGH	…r-functions/instance/src/main/python/function_stats.py	189	except RateLimitException:	CODE
HIGH	…r-functions/instance/src/main/python/function_stats.py	207	except RateLimitException:	CODE
HIGH	…-functions/instance/src/main/python/python_instance.py	499	except:	CODE
HIGH	…-functions/instance/src/main/python/python_instance.py	454	except:	CODE

Unused Imports23 hits · 23 pts

Severity	File	Line	Context
LOW	…atest-version-image/python-examples/producer_schema.py	22	CODE
LOW	…atest-version-image/python-examples/consumer_schema.py	22	CODE
LOW	…functions/python-examples/avro_schema_test_function.py	22	CODE
LOW	…tions/instance/src/main/python/python_instance_main.py	34	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	20	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	28	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	30	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	30	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	30	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	31	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	32	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	32	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	35	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	37	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	37	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	37	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	38	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	38	CODE
LOW	…ions/instance/src/main/python/prometheus_client_fix.py	38	CODE
LOW	…sar-functions/instance/src/main/python/Function_pb2.py	9	CODE
LOW	…ance/src/main/python/InstanceCommunication_pb2_grpc.py	4	CODE
LOW	…/instance/src/main/python/InstanceCommunication_pb2.py	9	CODE
LOW	…/instance/src/main/python/InstanceCommunication_pb2.py	17	CODE

AI Slop Vocabulary5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	bin/pulsar-admin-common.sh	158	# Netty cannot utilize resources from the memory pool and must frequently allocate native memory.	COMMENT
MEDIUM	…lsar/tests/integration/profiling/pulsar-profiling.yaml	19	# Values not present here keep the harness defaults.	COMMENT
MEDIUM	…e/pulsar/common/util/collections/BitSetRecyclable.java	32	* Provides {@link BitSetRecyclable#resetWords(long[])} method and leverage with netty recycler.	COMMENT
MEDIUM	…tor/NameAndConfigBasedSecretsProviderConfigurator.java	50	// environment variables way. Essentially the secretName/secretPath is	COMMENT
MEDIUM	…onfigurator/KubernetesSecretsProviderConfigurator.java	69	// environment variables way. Essentially the secretName/secretPath	COMMENT

Cross-File Repetition3 hits · 15 pts

Severity	File	Snippet	Context
HIGH	pip/pip-259.md	the maximum size in bytes of the request header. larger headers will allow for more and/or larger cookies plus larger fo	STRING
HIGH	…org/apache/pulsar/proxy/server/ProxyConfiguration.java	the maximum size in bytes of the request header. larger headers will allow for more and/or larger cookies plus larger fo	STRING
HIGH	…ava/org/apache/pulsar/broker/ServiceConfiguration.java	the maximum size in bytes of the request header. larger headers will allow for more and/or larger cookies plus larger fo	STRING

Self-Referential Comments4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	pulsar-functions/instance/src/main/python/log.py	31	# Create the logger	COMMENT
MEDIUM	…ance/src/main/python/InstanceCommunication_pb2_grpc.py	117	# This class is part of an EXPERIMENTAL API.	COMMENT
MEDIUM	src/update_python_protobuf_stubs_with_docker.sh	23	# Create an inline docker container with alpine:3.24 base image and mount the current directory to it as the	COMMENT
MEDIUM	src/update_python_protobuf_stubs.sh	29	# Create a temporary virtual environment to avoid polluting the global Python environment	COMMENT

Modern AI Meta-Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	AGENTS.md	54	## Agent guardrails	COMMENT
MEDIUM	CLAUDE.md	54	## Agent guardrails	COMMENT
MEDIUM	.github/copilot-instructions.md	54	## Agent guardrails	COMMENT

Cross-Language Confusion2 hits · 9 pts

Severity	File	Line	Snippet	Context
HIGH	…er/pulsar/scripts/apply-config-from-env-with-prefix.py	38	SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" >/dev/null 2>&1 && pwd)"	CODE
HIGH⚡	pulsar-functions/instance/src/main/python/util.py	111	enabled with a 10ms maximum publish delay. This mirrors BatchingUtils.convertFromSpec(null).	STRING

AI Response Leakage1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…buffer/impl/SingleSnapshotAbortedTxnProcessorImpl.java	72	//In this implementation we clear the invalid aborted txn ID one by one.	COMMENT

Deep Nesting6 hits · 6 pts

Severity	File	Line	Context
LOW	docker/pulsar/scripts/update-ini-from-env.py	30	CODE
LOW	docker/pulsar/scripts/update-rocksdb-conf-from-env.py	34	CODE
LOW	…tions/instance/src/main/python/python_instance_main.py	149	CODE
LOW	…-functions/instance/src/main/python/python_instance.py	168	CODE
LOW	…-functions/instance/src/main/python/python_instance.py	291	CODE
LOW	…-functions/instance/src/main/python/python_instance.py	461	CODE

Fake / Example Data5 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	…-auth-oidc/src/test/java/resources/fakeKubeConfig.yaml	37	token: fake-token	CODE
LOW	…mon/compression/CompressorCodecBackwardCompatTest.java	34	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras id massa odio. Duis commodo ligula sed "	CODE
LOW	…mon/compression/CompressorCodecBackwardCompatTest.java	34	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras id massa odio. Duis commodo ligula sed "	CODE
LOW	…che/pulsar/common/compression/CompressorCodecTest.java	43	private static final String text = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras id massa odio. "	CODE
LOW	…che/pulsar/common/compression/CompressorCodecTest.java	43	private static final String text = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Cras id massa odio. "	CODE

Excessive Try-Catch Wrapping5 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	pulsar-functions/instance/src/main/python/util.py	45	except Exception as e:	CODE
LOW	pulsar-functions/instance/src/main/python/util.py	50	except Exception as e:	CODE
LOW	…-functions/instance/src/main/python/python_instance.py	203	except Exception as e:	CODE
LOW	…-functions/instance/src/main/python/python_instance.py	216	except Exception as e:	CODE
LOW	…-functions/instance/src/main/python/python_instance.py	657	except Exception as e:	CODE

AI Structural Patterns5 hits · 5 pts

Severity	File	Line	Context
LOW	…ance/src/main/python/InstanceCommunication_pb2_grpc.py	122	CODE
LOW	…ance/src/main/python/InstanceCommunication_pb2_grpc.py	149	CODE
LOW	…ance/src/main/python/InstanceCommunication_pb2_grpc.py	176	CODE
LOW	…ance/src/main/python/InstanceCommunication_pb2_grpc.py	203	CODE
LOW	…ance/src/main/python/InstanceCommunication_pb2_grpc.py	230	CODE

Slop Phrases3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	.github/workflows/pulsar-ci.yaml	31	# if cron expression is changed, make sure to update the expression in jdk_major_version step in preconditions job	COMMENT
LOW	.github/workflows/pulsar-ci-flaky.yaml	31	# if cron expression is changed, make sure to update the expression in jdk_major_version step in preconditions job	COMMENT
LOW	…tions/instance/src/main/python/python_instance_main.py	314	# make sure to close all non-daemon threads before this!	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	gradle/setup-test-gpg.sh	24	# Usage:	COMMENT

apache/pulsar

Open-Source Code Quality, Security and Technical Debt Review