3.6

Adjusted Signal

3.6

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

4.8K

Stars

Ruby

Language

25.6K

Lines of Code

438

Files

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 11.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 59 finding(s).

Hallucinated Dependency & Supply Chain Risk 5.0/100 · LOW

Are imports declared and package/API names verified? 8 finding(s).

Agent Over-Engineering Ratio 7.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 42 finding(s).

PR Review Velocity Impact 16.3/100 · LOW

Which changes need focused human review? 67 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 0MEDIUM 3LOW 62

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 67 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers42 hits · 42 pts

Severity	File	Line	Snippet	Context
LOW	app/models/room.rb	65	def reset_remote_connections_of(user_ids)	CODE
LOW	app/models/webhook.rb	72	def receive_attachment_reply_to(room, attachment:)	CODE
LOW	app/models/webhook.rb	76	def without_recipient_mentions(body)	CODE
LOW	app/models/room/message_pusher.rb	44	def push_subscriptions_for_mentionable_users(mentionees)	CODE
LOW	app/models/user/mentionable.rb	19	def attachable_plain_text_representation(caption)	CODE
LOW	app/models/opengraph/metadata/fetching.rb	30	def fetch_non_fxtwitter_document(untrusted_url)	CODE
LOW	app/models/opengraph/metadata/fetching.rb	53	def replace_twitter_domain_for_opengraph_support(url)	CODE
LOW	app/javascript/lib/autocomplete/helpers.js	28	export function transitionElementWithClass(element, className, callback) {	CODE
LOW	app/javascript/lib/autocomplete/helpers.js	86	export function getAbsolutePositionForOffsets({ top, right, bottom, left }) {	CODE
LOW	app/controllers/concerns/cached_responses.rb	28	def combined_fragment_cache_key(key)	CODE
LOW	app/controllers/concerns/authentication.rb	14	def allow_unauthenticated_access(**options)	CODE
LOW	app/controllers/concerns/authentication.rb	22	def require_unauthenticated_access(**options)	CODE
LOW	app/controllers/concerns/authentication.rb	93	def set_authentication_cookie(session)	CODE
LOW	app/helpers/messages_helper.rb	89	def message_fragment_cache_key(message)	CODE
LOW	app/helpers/messages_helper.rb	106	def text_message_presentation(body)	CODE
LOW	app/helpers/messages_helper.rb	153	def message_attachment_presentation(message)	CODE
LOW	app/helpers/messages_helper.rb	157	def message_sound_presentation(message)	CODE
LOW	app/helpers/users_helper.rb	2	def button_to_direct_room_with(user)	CODE
LOW	app/helpers/clipboard_helper.rb	2	def button_to_copy_to_clipboard(url, &)	CODE
LOW	app/helpers/messages/attachment_presentation.rb	59	def inline_media_dimension_constraints(width, height, &)	CODE
LOW	app/helpers/rooms/involvements_helper.rb	2	def turbo_frame_for_involvement_tag(room, &)	CODE
LOW	app/helpers/rooms/involvements_helper.rb	8	def button_to_change_involvement(room, involvement)	CODE
LOW	test/integration/content_security_policy_test.rb	161	def assert_scripts_allowed_by_path(script_src, urls, message = nil)	CODE
LOW	test/models/room/push_test.rb	114	def wait_for_web_push_delivery_pool_tasks(count)	CODE
LOW	test/models/room/push_test.rb	118	def wait_for_invalidation_pool_tasks(count)	CODE
LOW	test/models/room/messages_count_tasks_test.rb	146	def assert_counter_tracks_insert(connection)	CODE
LOW	test/models/message/creation_test.rb	91	def assert_rolled_back_creation(message)	CODE
LOW	test/models/message/attachment_test.rb	99	def create_attachment_message(file, content_type)	CODE
LOW	test/models/message/attachment_test.rb	106	def create_unreadable_attachment_message(content, filename)	CODE
LOW	test/system/composer_test.rb	233	def wait_for_persisted_message(room: rooms(:designers), since: 1.minute.ago)	CODE
LOW	test/controllers/messages_controller_test.rb	244	def ensure_messages_not_present(*messages)	CODE
LOW	test/controllers/unfurl_links_controller_test.rb	159	def assert_unfurls_nothing_within(limit)	CODE
LOW	test/controllers/accounts/logos_controller_test.rb	49	def assert_valid_png_response(size:)	CODE
LOW	test/controllers/users/profiles_controller_test.rb	200	def assert_password_change_refused(alert, params)	CODE
LOW	test/test_helpers/turbo_test_helper.rb	2	def assert_rendered_turbo_stream_broadcast(*streambles, action:, target:, &block)	CODE
LOW	test/helpers/messages_helper_test.rb	156	def message_with_file_in_rich_text(file, content_type)	CODE
LOW	test/helpers/content_filters_test.rb	189	def unfurled_message_body_for_basecamp(text)	CODE
LOW	test/helpers/content_filters_test.rb	199	def unfurled_message_body_for_twitter(text)	CODE
LOW	test/channels/unread_rooms_channel_test.rb	42	def capture_unread_broadcasts_for(user)	CODE
LOW	lib/rails_ext/actiontext_opengraph_embeds.rb	101	def attachable_plain_text_representation(caption)	CODE
LOW	lib/rails_ext/action_text_attachables.rb	13	def attachable_from_possibly_expired_sgid(sgid)	CODE
LOW	lib/web_push/pool.rb	48	def invalidate_subscription_later(id)	CODE

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	app/javascript/controllers/refresh_room_controller.js	52	this.channel.consumer.connection.monitor.visibilityDidChange()	CODE
CRITICAL	test/helpers/messages_helper_test.rb	130	message.body.embeds.first.blob.variant(resize_to_limit: [ 1024, 768 ]).processed	CODE

Over-Commented Block14 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	app/controllers/concerns/inline_script_hashes.rb	41	end	COMMENT
LOW	app/channels/room_messages_channel.rb	1	# Authorizes the room message stream when the subscription is made, so that revoking a	COMMENT
LOW	test/system/message_id_spoofing_test.rb	1	require "application_system_test_case"	COMMENT
LOW	config/storage.yml	1	test:	COMMENT
LOW	config/storage.yml	21	# credentials: <%= Rails.root.join("path/to/gcs.keyfile") %>	COMMENT
LOW	config/locales/en.yml	1	# Files in the config/locales directory are used for internationalization	COMMENT
LOW	config/locales/en.yml	21	#	COMMENT
LOW	config/environments/test.rb	1	require "active_support/core_ext/integer/time"	COMMENT
LOW	config/initializers/uploaded_script_guard.rb	1	# Uploaded files are served from this origin. Application pages only allow	COMMENT
LOW	config/initializers/permissions_policy.rb	1	# Define an application-wide HTTP permissions policy. For further	COMMENT
LOW	config/initializers/content_security_policy.rb	1	# Enforcing baseline policy. Application pages narrow script-src from this	COMMENT
LOW	config/initializers/inflections.rb	1	# Be sure to restart your server when you modify this file.	COMMENT
LOW	lib/restricted_http/private_network_guard.rb	1	require "surfguard"	COMMENT
LOW	db/schema.rb	1	# This file is auto-generated from the current state of the database. Instead	COMMENT

Self-Referential Comments3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	config/initializers/permissions_policy.rb	1	# Define an application-wide HTTP permissions policy. For further	COMMENT
MEDIUM	db/schema.rb	1	# This file is auto-generated from the current state of the database. Instead	COMMENT
MEDIUM	db/schema.rb	5	# This file is the source Rails uses to define your schema when running `bin/rails	COMMENT

Fake / Example Data6 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	test/models/first_run_test.rb	27	FirstRun.create!({ name: "User", email_address: "user@example.com", password: "secret123456" })	CODE
LOW	test/models/user_test.rb	119	User.create!(name: "User", email_address: "user@example.com", password: "secret123456")	CODE
LOW	test/models/user/role_test.rb	5	assert User.create!(name: "User", email_address: "user@example.com", password: "secret123456").member?	CODE
LOW	test/controllers/users/profiles_controller_test.rb	22	put user_profile_url, params: { user: { name: "John Doe", bio: "Acrobat" } }	CODE
LOW	test/controllers/users/profiles_controller_test.rb	25	assert_equal "John Doe", users(:david).reload.name	CODE
LOW	test/controllers/users/profiles_controller_test.rb	194	put user_profile_url(users(:jason)), params: { user: { name: "John Doe" } }	CODE

basecamp/once-campfire

Open-Source Code Quality, Security and Technical Debt Review