1.8

Adjusted Signal

1.8

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

14.1K

Stars

TypeScript

Language

98.1K

Lines of Code

435

Files

166

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 152 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.6/100 · LOW

Are imports declared and package/API names verified? 12 finding(s).

Agent Over-Engineering Ratio 6.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 133 finding(s).

PR Review Velocity Impact 8.7/100 · LOW

Which changes need focused human review? 166 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 6LOW 160

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 166 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers131 hits · 131 pts

Severity	File	Line	Snippet	Context
LOW	evals/judge/judge.ts	89	function formatConversationForJudge(conversation: ConversationHistory): string {	CODE
LOW	tests/unit/tools.delete_actor_version.test.ts	66	async function callToolExpectingUserError(args: Record<string, unknown>) {	CODE
LOW	tests/unit/tools.apify_api_spec.test.ts	305	async function importFetchApiOperationIndex() {	CODE
LOW	tests/unit/mcp.stateless.request_context.test.ts	92	function widgetRegistryWithSearchActors(): Map<string, WidgetsModule.AvailableWidget> {	CODE
LOW	tests/unit/mcp.actors.test.ts	8	function makeActorDefinitionWithPath(webServerMcpPath?: unknown): ActorDefinition {	CODE
LOW	tests/unit/mcp.server.report_problem_gating.test.ts	60	async function loadReportProblemByDefault(server: ActorsMcpServer): Promise<void> {	CODE
LOW	tests/unit/evals.judge.test.ts	15	function makePromptCapturingClient(): { client: JudgeClient; prompt: () => string } {	CODE
LOW	tests/unit/tools.schemas.test.ts	11	function findNonPortableSubschemas(node: SchemaNode, path: string): string[] {	CODE
LOW	tests/unit/tools.update_actor_version.test.ts	112	async function callToolExpectingUserError(args: Record<string, unknown>) {	CODE
LOW	tests/unit/tools.create_actor_version.test.ts	115	async function callToolExpectingUserError(args: Record<string, unknown>) {	CODE
LOW	tests/unit/mcp.server.tool_call_contracts.test.ts	154	function expectClientContextTelemetry(properties: Record<string, unknown>): void {	CODE
LOW	tests/unit/mcp.server.tool_call_contracts.test.ts	198	function expectFailureClassTelemetry(	CODE
LOW	tests/unit/mcp.server.tool_call_contracts.test.ts	1043	function statusNotificationStatuses(notifySpy: ReturnType<typeof vi.spyOn>): (string \| undefined)[] {	CODE
LOW	tests/unit/mcp.server.tool_call_contracts.test.ts	1051	async function flushDeferredNotification(): Promise<void> {	CODE
LOW	tests/unit/helpers/mcp_server.ts	219	export function listStatelessHandlerMethods(server: StatelessServer): string[] {	CODE
LOW	tests/unit/helpers/mcp_server.ts	247	export function makePermissionApprovalError(): ApifyApiError {	CODE
LOW	tests/unit/helpers/tool_context.ts	67	export function expectSoftFailInvalidInput(result: { isError?: boolean; toolTelemetry?: ToolTelemetrySnapshot }): void {	CODE
LOW	tests/unit/helpers/tool_context.ts	84	export function expectSchemaConformingStructuredContent(result: unknown, schema: object): void {	CODE
LOW	tests/integration/suite.ts	30	export function createIntegrationTestsSuite(options: IntegrationTestsSuiteOptions) {	CODE
LOW	tests/test_kit/helpers.ts	96	export function buildExampleMcpServerAddToolContent(firstNumber: number, secondNumber: number) {	CODE
LOW	tests/test_kit/helpers.ts	135	export function validateStructuredOutputForTool(result: unknown, toolName: string, mode: SERVER_MODE): void {	CODE
LOW	tests/test_kit/helpers.ts	140	export function expectReadmeInStructuredContent(result: unknown, expectedActorFullName?: string): void {	CODE
LOW	tests/test_kit/helpers.ts	172	export function expectNormalModeTestStructuredContent(result: unknown): void {	CODE
LOW	tests/test_kit/helpers.ts	277	export async function assertStatusMessagePropagated(	CODE
LOW	tests/test_kit/mcp_client.ts	71	export async function createMcpStreamableClient(serverUrl: string, options?: SuiteClientOptions): Promise<Client> {	CODE
LOW	src/telemetry.ts	53	export function getOrInitAnalyticsClient(telemetryEnv: TelemetryEnv): Analytics \| null {	CODE
LOW	src/telemetry.ts	105	export function buildReportedProblemProperties(	CODE
LOW	src/dev_server.ts	60	function extractApiTokenFromRequest(req: Request): string \| undefined {	CODE
LOW	src/payments/x402.ts	164	function getPaymentSignatureFromHeader(requestHeaders?: RequestHeaders): string \| undefined {	CODE
LOW	src/payments/x402.ts	177	function getEncodedPaymentSignature(meta?: PaymentMeta, requestHeaders?: RequestHeaders): string \| undefined {	CODE
LOW	src/tools/actor_input_schema.ts	60	export function buildApifySpecificProperties(	CODE
LOW	src/tools/actor_input_schema.ts	117	export function inferArrayItemsTypeIfMissing(properties: { [key: string]: SchemaProperties }): {	CODE
LOW	src/tools/actor_input_schema.ts	145	export function markInputPropertiesAsRequired(input: ActorInputSchema): Record<string, SchemaProperties> {	CODE
LOW	src/tools/actor_input_schema.ts	218	export function pruneSchemaPropertiesByWhitelist(	CODE
LOW	src/tools/actor_input_schema.ts	268	export function addExampleValuesToDescriptions(	CODE
LOW	src/tools/actor_input_schema.ts	388	export function transformActorInputSchemaProperties(input: Readonly<ActorInputSchema>): ActorInputSchemaProperties {	CODE
LOW	src/tools/structured_output_schemas.ts	905	export function buildEnrichedDirectActorOutputSchema(itemProperties: Record<string, unknown>) {	CODE
LOW	src/tools/structured_output_schemas.ts	940	function paginatedListOutputSchema(itemsSchema: object, itemsDescription: string) {	CODE
LOW	src/tools/index.ts	43	export function getUnauthEnabledToolCategories(): ToolCategory[] {	CODE
LOW	src/tools/actor_tool_naming.ts	46	export function getActorToolModeFromInterfaces({ input, mcp }: ActorInterfaces): ACTOR_TOOL_MODE {	CODE
LOW	src/tools/actor_tool_naming.ts	63	export function isActorBlockedUnderPaymentProvider(actor: Pick<ActorInfo['actor'], 'actorStandby'>): boolean {	CODE
LOW	src/tools/actor_tool_naming.ts	120	export function getActorCallabilityCaveat(clientParam?: string): string {	CODE
LOW	src/tools/versions/create_actor_version.ts	65	function formatSecretEnvVarsWarning(	CODE
LOW	src/tools/docs/search_apify_docs.ts	17	function buildDocSourceDescription(): string {	CODE
LOW	src/tools/builds/get_actor_build_list.ts	51	function buildNextStepForBuildList(	CODE
LOW	src/tools/storage/storage_helpers.ts	136	export function buildStorageListSummaryNextStep(params: {	CODE
LOW	src/tools/storage/storage_helpers.ts	169	export function buildDatasetItemsSummaryNextStep(params: {	CODE
LOW	src/tools/storage/storage_helpers.ts	200	export function buildKvsKeysSummaryNextStep(params: {	CODE
LOW	src/tools/storage/storage_helpers.ts	271	export function buildBinaryRecordDisposition(contentType: string \| undefined, value: Buffer): BinaryRecordDisposition {	CODE
LOW	src/tools/actors/server_interface_schema.ts	138	function buildServerOperationDetails({ method, path, operation }: ServerOperation, context: DereferenceContext) {	CODE
LOW	src/tools/actors/actor_definition.ts	84	export async function resolveServerInterfaceDefinition(	CODE
LOW	src/tools/actors/actor_definition.ts	143	function hasWebServerSchemaOperations(schema: unknown): boolean {	CODE
LOW	src/tools/actors/fetch_actor_details.ts	153	export function buildActorNotFoundResponse(actorName: string, loadedToolNames: readonly string[]): ToolResponse {	CODE
LOW	src/tools/actors/fetch_actor_details.ts	166	export function buildActorNotRunnableGuidance(	CODE
LOW	src/tools/actors/fetch_actor_details.ts	179	export function buildActorDetailsTextResponse(options: {	CODE
LOW	src/tools/actors/fetch_actor_details.ts	253	export async function buildFetchActorDetailsResult(toolArgs: InternalToolArgs): Promise<ToolResponse> {	CODE
LOW	src/tools/actors/fetch_actor_mcp_tool_list.ts	48	export async function executeFetchActorMcpToolList(toolArgs: InternalToolArgs): Promise<ToolResponse> {	CODE
LOW	src/tools/actors/actor_run_response.ts	415	async function fetchDatasetItemCountWithLagFallback(	CODE
LOW	src/tools/actors/actor_run_response.ts	556	function buildSucceededSummaryNextStep(	CODE
LOW	src/tools/actors/actor_run_response.ts	611	function buildTimedOutSummaryNextStep(	CODE
71 more matches not shown…

Structural Annotation Overuse10 hits · 15 pts

Severity	File	Line	Snippet	Context
LOW	.claude/skills/bug-triage/SKILL.md	21	## Step 0: Parse arguments	COMMENT
LOW	.claude/skills/bug-triage/SKILL.md	32	## Step 1: Fetch issues	COMMENT
LOW	.claude/skills/bug-triage/SKILL.md	65	## Step 2: Categorize each issue	COMMENT
LOW	.claude/skills/bug-triage/SKILL.md	92	## Step 3: Draft response	COMMENT
LOW	.claude/skills/bug-triage/SKILL.md	113	## Step 4: Present and get approval	COMMENT
LOW	.claude/skills/bug-triage/SKILL.md	124	## Step 5: Post	COMMENT
LOW	.claude/skills/dig/SKILL.md	16	## Step 0: Parse arguments and determine intent	COMMENT
LOW	.claude/skills/dig/SKILL.md	47	## Step 1: Explore	COMMENT
LOW	.claude/skills/dig/SKILL.md	59	## Step 2: Plan (Plan and Spec only)	COMMENT
LOW	.claude/skills/dig/SKILL.md	90	## Step 3: Spec (Spec only)	COMMENT

Fake / Example Data12 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	tests/unit/mcp.server.report_problem_nudge.test.ts	56	token: 'fake-token',	CODE
LOW	tests/unit/mcp.stateless.tool_call.test.ts	255	expect(received.apifyToken).toBe('fake-token');	CODE
LOW	tests/unit/tool_call_engine.test.ts	84	apifyToken: 'fake-token',	CODE
LOW	tests/unit/tool_call_engine.test.ts	108	apifyToken: 'fake-token',	CODE
LOW	tests/unit/tool_call_engine.test.ts	131	apifyToken: 'fake-token',	CODE
LOW	tests/unit/tool_call_engine.test.ts	157	apifyToken: 'fake-token',	CODE
LOW	tests/unit/tool_call_engine.test.ts	212	apifyToken: 'fake-token',	CODE
LOW	tests/unit/tool_call_engine.test.ts	281	apifyToken: 'fake-token',	CODE
LOW	tests/unit/tool_call_engine.test.ts	343	apifyToken: 'fake-token',	CODE
LOW	tests/unit/tool_call_engine.test.ts	359	apifyToken: 'fake-token',	CODE
LOW	tests/unit/helpers/mcp_server.ts	76	token: 'fake-token',	CODE
LOW	.claude/skills/creating-mcp-agent-evals/SKILL.md	55	- An obviously fake URL in a query (`ftp.example.com`, `this-is-a-test.com`) → models defensibly refuse "placeholder" ta	CODE

Modern AI Meta-Vocabulary4 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	README.md	374	> 🪙 Agentic payments (experimental). Agents can pay for Actor runs without an Apify account. [AGI](https://agi.apify	CODE
MEDIUM	tests/unit/utils.actor_card.test.ts	104	expect(result).toContain('## [RAG Web Browser](https://apify.com/apify/rag-web-browser)');	CODE
MEDIUM	tests/unit/utils.actor_card.test.ts	154	expect(result).toContain('## [RAG Web Browser](https://apify.com/apify/rag-web-browser)');	CODE
MEDIUM	src/payments/AGENTS.md	2	# src/payments — agentic payment providers (Skyfire, x402)	COMMENT

Over-Commented Block7 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW	pnpm-workspace.yaml	21	# Postinstall protection — pnpm only runs build scripts for packages with `: true` here.	COMMENT
LOW	scripts/conformance_expected_failures_2026_07_28.yaml	1	# Conformance scenarios excluded from the pass/fail gate of `pnpm run test:conformance` for the	COMMENT
LOW	scripts/conformance_expected_failures_2026_07_28.yaml	21	# scopes them out of this revision. They are not part of it; they do run in the legacy era, where	COMMENT
LOW	scripts/conformance_expected_failures_2026_07_28.yaml	81	# Needs fixture tool `test_input_required_result_elicitation`.	COMMENT
LOW	scripts/conformance_expected_failures_2025_11_25.yaml	1	# Conformance scenarios excluded from the pass/fail gate of `pnpm run test:conformance` for the	COMMENT
LOW	scripts/conformance_expected_failures_2025_11_25.yaml	61	# Needs fixture prompt `test_prompt_with_image`.	COMMENT
LOW	src/tools/storage/get_dataset.ts	81	// The API also returns a raw `schema` (untyped in apify-client). It is 93–95% of the	COMMENT

Decorative Section Separators2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/unit/utils.pricing_info.test.ts	156	// ─── Complete mode: fetch-actor-details ───────────────────────────────────────	COMMENT
MEDIUM	tests/unit/utils.pricing_info.test.ts	262	// ─── Simplified mode: search-actors ───────────────────────────────────────────	COMMENT

apify/apify-mcp-server

Open-Source Code Quality, Security and Technical Debt Review