3.4

Adjusted Signal

3.4

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

90.6K

Stars

C++

Language

877.2K

Lines of Code

2.5K

Files

2.5K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 13.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 2315 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 19 finding(s).

Agent Over-Engineering Ratio 5.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 719 finding(s).

PR Review Velocity Impact 15.5/100 · LOW

Which changes need focused human review? 2450 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 36MEDIUM 161LOW 2253

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2450 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1460 hits · 1458 pts

Severity	File	Line	Snippet	Context
LOW	test/lint/lint-locale-dependence.py	1	#!/usr/bin/env python3	COMMENT
LOW	test/lint/lint-locale-dependence.py	21	#	COMMENT
LOW	test/lint/test_runner/src/util.rs	1	// Copyright (c) The Bitcoin Core developers	COMMENT
LOW	test/functional/mempool_packages.py	241	# Check that the txs are returned to the mempool, and that transaction ordering is	COMMENT
LOW	test/functional/wallet_fundrawtransaction.py	1141	# 5. Explicit add_inputs=true, no preset inputs (same as (1) but with an explicit set):	COMMENT
LOW	test/functional/wallet_migration.py	1281	wallet = self.create_legacy_wallet("invalid_p2wsh")	COMMENT
LOW	test/functional/mempool_package_limits.py	1	#!/usr/bin/env python3	COMMENT
LOW	test/functional/feature_taproot.py	121	import hashlib	COMMENT
LOW	test/functional/feature_taproot.py	141	# The get(ctx, name) function can evaluate a name, and cache its result in the context.	COMMENT
LOW	test/functional/feature_taproot.py	381	# The default context object.	COMMENT
LOW	test/functional/feature_taproot.py	441	"codesepnum": -1,	COMMENT
LOW	test/functional/feature_taproot.py	701	# Test with signature with bit flipped.	COMMENT
LOW	test/functional/feature_taproot.py	1081	# Test that a stack size of 1000 elements is permitted, but 1001 isn't.	COMMENT
LOW	test/functional/wallet_groups.py	81	self.log.info("Test avoiding partial spends if warranted, even if avoidpartialspends is disabled")	COMMENT
LOW	test/functional/p2p_compactblocks_blocksonly.py	81	# 1 -> high bandwidth	COMMENT
LOW	test/functional/test_runner.py	501	# in the ALL_SCRIPTS list. Accept names with or without a .py extension.	COMMENT
LOW	test/functional/feature_pruning.py	381	self.log.info("Check that we haven't started pruning yet because we're below PruneAfterHeight")	COMMENT
LOW	test/functional/feature_pruning.py	401	#	COMMENT
LOW	test/functional/feature_pruning.py	421	# \ \	COMMENT
LOW	test/functional/feature_pruning.py	441	# ...*(1320)	COMMENT
LOW	test/functional/rpc_decodescript.py	121	# OP_NOP2 is also known as OP_CHECKLOCKTIMEVERIFY.	COMMENT
LOW	test/functional/interface_http.py	741	dl_start_size = self.node.debug_log_size(encoding="utf-8")	COMMENT
LOW	test/functional/feature_bind_port_discover.py	21		COMMENT
LOW	test/functional/feature_block.py	741	self.send_blocks([b48, b48p], success=True) # Reorg to the longer chain	COMMENT
LOW	test/functional/feature_block.py	761	# Result: Fails	COMMENT
LOW	test/functional/feature_block.py	921	# care whether the bloated block is accepted or rejected; it only cares that the second block is accepted.	COMMENT
LOW	test/functional/feature_block.py	1001	self.move_tip(65)	COMMENT
LOW	test/functional/feature_block.py	1081	#	COMMENT
LOW	test/functional/wallet_balance.py	101	assert_raises_rpc_error(-32, "dummy first argument must be excluded or set to \"*\"", self.nodes[1].getbalance,	COMMENT
LOW	test/functional/wallet_balance.py	121	# The balance is indeed "trusted" and "confirmed" insofar as removing	COMMENT
LOW	test/functional/feature_cltv.py	41	tx.vin[0].nSequence = nsequence	COMMENT
LOW	test/functional/test_framework/util.py	561	f.write("shrinkdebugfile=0\n")	COMMENT
LOW	test/functional/test_framework/script_util.py	41	assert_equal,	COMMENT
LOW	test/functional/test_framework/netutil.py	21		COMMENT
LOW	test/functional/test_framework/socks5.py	101	self.auth = False # Support authentication	COMMENT
LOW	test/functional/test_framework/authproxy.py	1	# Copyright (c) 2011 Jeff Garzik	COMMENT
LOW	test/functional/test_framework/test_framework.py	361		COMMENT
LOW	test/functional/test_framework/script.py	901		COMMENT
LOW	test/functional/test_framework/test_node.py	281	# potentially interfere with our attempt to authenticate	COMMENT
LOW	test/functional/test_framework/test_node.py	381	if self.version_is_at_least(190000) and wait_for_import:	COMMENT
LOW	test/functional/test_framework/test_node.py	801	# Wait for the node to send us the version and verack	COMMENT
LOW	contrib/tracing/log_raw_p2p_msgs.py	1	#!/usr/bin/env python3	COMMENT
LOW	contrib/tracing/log_raw_p2p_msgs.py	21	# VM's stack is limited to 512 bytes, and we can't allocate more than about 32kb	COMMENT
LOW	contrib/tracing/log_raw_p2p_msgs.py	41	program = """	COMMENT
LOW	contrib/tracing/p2p_monitor.py	1	#!/usr/bin/env python3	COMMENT
LOW	contrib/qos/tc.sh	1	#!/usr/bin/env bash	COMMENT
LOW	contrib/qos/tc.sh	41		COMMENT
LOW	contrib/asmap/asmap.py	161	# of failure the default instruction's argument is returned. It is followed by an	COMMENT
LOW	contrib/linearize/example-linearize.cfg	21		COMMENT
LOW	contrib/verify-commits/gpg.sh	1	#!/bin/sh	COMMENT
LOW	contrib/devtools/headerssync-params.py	21	MINCHAINWORK_HEADERS = 966143	COMMENT
LOW	contrib/devtools/headerssync-params.py	41	# Explanation:	COMMENT
LOW	contrib/devtools/headerssync-params.py	61	# - When redownloading, headers are fed through a per-peer queue that holds {bufsize} headers,	COMMENT
LOW	contrib/devtools/headerssync-params.py	81	# threshold, we will consume per-peer memory that is sufficient to store {n/period}	COMMENT
LOW	contrib/devtools/headerssync-params.py	161	max_rate = None	COMMENT
LOW	contrib/guix/symbol-check.py	21	# Ubuntu 20.04 (Focal) EOL: 2030. https://wiki.ubuntu.com/ReleaseTeam	COMMENT
LOW	contrib/guix/libexec/setup.sh	1	#!/usr/bin/env bash	COMMENT
LOW	contrib/guix/libexec/codesign.sh	1	#!/usr/bin/env bash	COMMENT
LOW	contrib/guix/libexec/prelude.bash	81	}	COMMENT
LOW	.github/workflows/ci.yml	61	# Moreover, pull requests that contain a merge commit	COMMENT
1400 more matches not shown…

Hyper-Verbose Identifiers599 hits · 601 pts

Severity	File	Line	Snippet	Context
LOW	test/lint/lint-includes.py	104	def find_quote_syntax_inclusions():	CODE
LOW	test/lint/lint-locale-dependence.py	212	def find_locale_dependent_function_uses():	CODE
LOW	test/lint/lint-files.py	123	def check_all_file_permissions(files) -> int:	CODE
LOW	test/lint/lint-files.py	168	def check_shebang_file_permissions(files_meta) -> int:	CODE
LOW	test/lint/check-doc.py	27	def lint_missing_argument_documentation():	CODE
LOW	test/lint/check-doc.py	46	def lint_missing_hidden_wallet_args():	CODE
LOW	test/fuzz/test_runner.py	206	def transform_process_message_target(targets, src_dir):	CODE
LOW	test/functional/p2p_connection_limits.py	29	def create_blocks_only_version(self):	CODE
LOW	test/functional/p2p_connection_limits.py	37	def create_no_services_blocks_only_version(self):	CODE
LOW	test/functional/rpc_signer.py	36	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/tool_bitcoin_chainstate.py	27	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_backwards_compatibility.py	56	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_backwards_compatibility.py	170	def test_ignore_legacy_during_startup(self, legacy_nodes, node_master):	CODE
LOW	test/functional/wallet_backwards_compatibility.py	202	def test_downgrade_preserves_witness_variants(self, node_master, node_miner, node_old):	CODE
LOW	test/functional/wallet_listreceivedby.py	23	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_startup.py	29	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_startup.py	47	def test_load_unwritable_wallet(self, node):	CODE
LOW	test/functional/wallet_startup.py	97	def test_startup_warning_log_injection(self, node):	CODE
LOW	test/functional/wallet_change_address.py	28	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_sendmany.py	12	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_sendmany.py	19	def test_sffo_repeated_address(self):	CODE
LOW	test/functional/wallet_keypool_topup.py	30	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_reorgsrestore.py	31	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_reorgsrestore.py	34	def test_coinbase_automatic_abandon_during_startup(self):	CODE
LOW	test/functional/wallet_reorgsrestore.py	93	def test_reorg_handling_during_unclean_shutdown(self):	CODE
LOW	test/functional/mempool_limit.py	37	def test_mid_package_eviction_success(self):	CODE
LOW	test/functional/mempool_limit.py	130	def test_mid_package_replacement(self):	CODE
LOW	test/functional/interface_ipc.py	28	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/interface_ipc.py	56	def run_rpc_invalid_json_test(self):	CODE
LOW	test/functional/interface_ipc.py	88	def run_deprecated_mining_test(self):	CODE
LOW	test/functional/interface_ipc.py	103	def run_unclean_disconnect_test(self):	CODE
LOW	test/functional/wallet_exported_watchonly.py	31	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_exported_watchonly.py	96	def test_export_with_address_book(self):	CODE
LOW	test/functional/wallet_exported_watchonly.py	120	def test_export_with_txs_and_locked_coins(self):	CODE
LOW	test/functional/wallet_exported_watchonly.py	162	def test_export_imported_descriptors(self):	CODE
LOW	test/functional/wallet_assumeutxo.py	28	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_assumeutxo.py	69	def complete_background_validation(self, node):	CODE
LOW	test/functional/wallet_assumeutxo.py	79	def test_backup_during_background_sync_pruned_node(self, n3, dump_output, expected_error_message):	CODE
LOW	test/functional/wallet_assumeutxo.py	92	def test_restore_wallet_pruneheight(self, n3):	CODE
LOW	test/functional/wallet_gethdkeys.py	23	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/mempool_datacarrier.py	37	def test_null_data_transaction(self, node: TestNode, data, success: bool) -> None:	CODE
LOW	test/functional/rpc_help.py	69	def test_client_conversion_table(self):	CODE
LOW	test/functional/rpc_help.py	100	def test_client_string_conversion_table(self):	CODE
LOW	test/functional/wallet_orphanedreward.py	16	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_musig.py	30	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_musig.py	34	def create_wallets_and_keys_from_pattern(self, pat):	CODE
LOW	test/functional/wallet_musig.py	71	def construct_and_import_musig_descriptor_in_wallets(self, pat, wallets, keys, only_one_musig_wallet=False):	CODE
LOW	test/functional/wallet_musig.py	125	def assert_musig_aggregate_in_script(self, signer_data, pattern, psbtin):	CODE
LOW	test/functional/p2p_leak_tx.py	67	def test_notfound_on_replaced_tx(self):	CODE
LOW	test/functional/p2p_leak_tx.py	100	def test_notfound_on_unannounced_tx(self):	CODE
LOW	test/functional/wallet_anchor.py	31	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/wallet_simulaterawtx.py	22	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/feature_notifications.py	224	def large_work_invalid_chain_warning_in_alert_file(self):	CODE
LOW	test/functional/feature_maxuploadtarget.py	55	def assert_uploadtarget_state(self, *, target_reached, serve_historical_blocks):	CODE
LOW	test/functional/p2p_handshake.py	49	def test_desirable_service_flags(self, node, service_flag_tests, desirable_service_flags, expect_disconnect):	CODE
LOW	test/functional/wallet_basic.py	37	def skip_test_if_missing_module(self):	CODE
LOW	test/functional/p2p_invalid_messages.py	103	def test_duplicate_version_msg(self):	CODE
LOW⚡	test/functional/p2p_invalid_messages.py	272	def test_oversized_getdata_msg(self):	CODE
LOW⚡	test/functional/p2p_invalid_messages.py	276	def test_oversized_headers_msg(self):	CODE
LOW⚡	test/functional/p2p_invalid_messages.py	280	def test_invalid_pow_headers_msg(self):	CODE
539 more matches not shown…

Self-Referential Comments98 hits · 304 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	test/functional/wallet_backwards_compatibility.py	288	# Create a number of wallets and open them in older versions:	COMMENT
MEDIUM⚡	test/functional/wallet_backwards_compatibility.py	297	# Create a confirmed transaction, receiving coins	COMMENT
MEDIUM⚡	test/functional/wallet_backwards_compatibility.py	302	# Create a conflicting transaction using RBF	COMMENT
MEDIUM	test/functional/wallet_listreceivedby.py	182	# Create a new label named "mynewlabel" that has a 0 balance	COMMENT
MEDIUM	test/functional/wallet_reorgsrestore.py	48	# Create a new block in node0, coinbase going to wallet0	COMMENT
MEDIUM	test/functional/wallet_reorgsrestore.py	172	# Create a conflicted tx broadcast on node0 chain and conflicting tx broadcast on node1 chain. Both spend from t	COMMENT
MEDIUM	test/functional/mempool_limit.py	89	# Create a child spending everything with an insane fee, bumping the package above mempool_entry_minrate	COMMENT
MEDIUM	test/functional/mempool_limit.py	173	# Create a child spending everything, CPFPing the low-feerate parent.	COMMENT
MEDIUM	test/functional/wallet_assumeutxo.py	129	# Create a wallet that we will create a backup for later (at snapshot height)	COMMENT
MEDIUM	test/functional/wallet_anchor.py	37	# Create an anchor output, and spend it	COMMENT
MEDIUM	test/functional/wallet_basic.py	208	# Create a couple of transactions to send them to node2, submit them through	COMMENT
MEDIUM	test/functional/feature_assumevalid.py	92	# Create the first block with a coinbase output to our key	COMMENT
MEDIUM	test/functional/feature_assumevalid.py	112	# Create a transaction spending the coinbase output with an invalid (null) signature	COMMENT
MEDIUM	test/functional/rpc_packages.py	451	# Create a transaction chain such as only the parent gets accepted (by making the child's	COMMENT
MEDIUM	test/functional/wallet_rescan_unconfirmed.py	46	# Create an unconfirmed child transaction from the parent tx, sending all	COMMENT
MEDIUM	test/functional/wallet_bumpfee.py	211	# Create a tx with two outputs. recipient and change.	COMMENT
MEDIUM	test/functional/wallet_bumpfee.py	381	# Create a transaction with segwit output, then create an RBF transaction	COMMENT
MEDIUM	test/functional/wallet_bumpfee.py	615	# Create a wallet with private keys that can sign PSBTs	COMMENT
MEDIUM	test/functional/interface_rest.py	176	# Create a transaction, check that it's found with /checkmempool, but	COMMENT
MEDIUM	test/functional/wallet_listsinceblock.py	420	# Create a watchonly wallet tracking two multisig descriptors.	COMMENT
MEDIUM	test/functional/wallet_listsinceblock.py	458	# Create a UTxO paying to one of our change addresses.	COMMENT
MEDIUM	test/functional/wallet_fundrawtransaction.py	1501	# Create a replacement tx to 'final_tx1' that has 1 BTC target instead of 0.1.	COMMENT
MEDIUM	test/functional/feature_bip68_sequence.py	220	# Create a mempool tx.	COMMENT
MEDIUM	test/functional/feature_bip68_sequence.py	235	# Create a spend of the 0th output of orig_tx with a sequence lock	COMMENT
MEDIUM	test/functional/p2p_compactblocks.py	522	# Create a chain of transactions from given utxo, and add to a new block.	COMMENT
MEDIUM	test/functional/wallet_migration.py	1332	# Create a wsh(sh(pkh())) - P2SH inside of P2WSH is invalid	COMMENT
MEDIUM	test/functional/wallet_migration.py	1342	# Create a wsh(wsh(pkh())) - P2WSH inside of P2WSH is invalid	COMMENT
MEDIUM	test/functional/mempool_updatefromblock.py	77	# Create a new transaction.	COMMENT
MEDIUM	test/functional/feature_taproot.py	1347	# Create a list of scripts which will be built into a taptree	COMMENT
MEDIUM	test/functional/mempool_persist.py	109	# Create a tx and prioritise but don't submit until after the restart.	COMMENT
MEDIUM	test/functional/feature_segwit.py	237	# Create a 3-tx chain: tx1 (non-segwit input, paying to a segwit output) ->	COMMENT
MEDIUM	test/functional/wallet_abandonconflict.py	81	#Create a child tx spending AB1 and C	COMMENT
MEDIUM	test/functional/wallet_abandonconflict.py	90	# Create a child tx spending ABC2	COMMENT
MEDIUM	test/functional/wallet_abandonconflict.py	174	# Create a double spend of AB1 by spending again from only A's 10 output	COMMENT
MEDIUM	test/functional/feature_utxo_set_hash.py	36	# Create a spending transaction and mine a block which includes it	COMMENT
MEDIUM	test/functional/rpc_psbt.py	1171	# Create a psbt spending outputs from nodes 1 and 2	COMMENT
MEDIUM	test/functional/rpc_psbt.py	1379	# Create a PSBT. None of the inputs are filled initially	COMMENT
MEDIUM	test/functional/rpc_signrawtransactionwithkey.py	77	# Create a new P2SH-P2WSH 1-of-1 multisig address:	COMMENT
MEDIUM	test/functional/feature_assumeutxo.py	268	# Create an alternative chain of 2 new blocks, forking off the main chain at the block before the snapshot block	COMMENT
MEDIUM	test/functional/feature_assumeutxo.py	427	# Create a stale block that forks off the main chain before the snapshot.	COMMENT
MEDIUM	test/functional/p2p_1p1c_network.py	106	# Create the transactions.	COMMENT
MEDIUM	test/functional/p2p_invalid_block.py	120	# Create a block that spends the output of a tx in a previous block.	COMMENT
MEDIUM	test/functional/feature_config_args.py	191	# Create a temporary directory that will be treated as the default data	COMMENT
MEDIUM	test/functional/feature_config_args.py	480	# Create a temporary directory that will be treated as the default data	COMMENT
MEDIUM	test/functional/feature_config_args.py	579	# Create the directory and ensure the config file now works	COMMENT
MEDIUM	test/functional/rpc_net.py	104	# Create a few getpeerinfo last_block/last_transaction values.	COMMENT
MEDIUM	test/functional/p2p_segwit.py	311	# Create a transaction that spends the coinbase	COMMENT
MEDIUM	test/functional/p2p_segwit.py	627	# Create the same output as tx3, but by replacing tx	COMMENT
MEDIUM	test/functional/p2p_segwit.py	894	# Create a P2WSH transaction.	COMMENT
MEDIUM	test/functional/p2p_segwit.py	1149	# Create a transaction that splits our utxo into many outputs	COMMENT
MEDIUM	test/functional/p2p_segwit.py	1616	# Create a slight bias for producing more utxos	COMMENT
MEDIUM	test/functional/p2p_segwit.py	1718	# Create a p2sh output -- this is so we can pass the standardness	COMMENT
MEDIUM	test/functional/p2p_segwit.py	2015	# Create a Segwit output from the latest UTXO	COMMENT
MEDIUM	test/functional/p2p_segwit.py	2024	# Create a Segwit transaction	COMMENT
MEDIUM	test/functional/wallet_listtransactions.py	304	# Create a script path spend and relay it. With only one variant known it	COMMENT
MEDIUM	test/functional/mempool_cluster.py	131	# Create a package from the second to last transaction.	COMMENT
MEDIUM	test/functional/mempool_cluster.py	198	# Create a chain of transactions	COMMENT
MEDIUM	test/functional/mempool_cluster.py	258	# Create a transaction spending from all clusters that exceeds the cluster size limit.	COMMENT
MEDIUM	test/functional/p2p_private_broadcast.py	111	# Create a Python P2P listening node and instruct the SOCKS5 proxy to	COMMENT
MEDIUM	test/functional/wallet_avoidreuse.py	123	# Create a wallet with avoid reuse, and test that disabling it afterwards persists	COMMENT
38 more matches not shown…

Decorative Section Separators44 hits · 159 pts

Severity	File	Line	Snippet	Context
MEDIUM	CMakeLists.txt	26	#=============================	COMMENT
MEDIUM	CMakeLists.txt	28	#=============================	COMMENT
MEDIUM	CMakeLists.txt	69	#=============================	COMMENT
MEDIUM	CMakeLists.txt	71	#=============================	COMMENT
MEDIUM	CMakeLists.txt	98	#=============================	COMMENT
MEDIUM	CMakeLists.txt	100	#=============================	COMMENT
MEDIUM	CMakeLists.txt	154	#=============================	COMMENT
MEDIUM	CMakeLists.txt	156	#=============================	COMMENT
MEDIUM	CMakeLists.txt	168	#=============================	COMMENT
MEDIUM	CMakeLists.txt	170	#=============================	COMMENT
MEDIUM⚡	CMakeLists.txt	202	#=============================	COMMENT
MEDIUM⚡	CMakeLists.txt	204	#=============================	COMMENT
MEDIUM⚡	CMakeLists.txt	213	#=============================	COMMENT
MEDIUM⚡	CMakeLists.txt	215	#=============================	COMMENT
MEDIUM	test/functional/wallet_conflicts.py	67	# ----------------	COMMENT
MEDIUM	test/functional/feature_assumeutxo.py	720	# -----------------------------	COMMENT
MEDIUM	src/CMakeLists.txt	10	#=============================	COMMENT
MEDIUM	src/CMakeLists.txt	12	#=============================	COMMENT
MEDIUM	src/secp256k1/CMakeLists.txt	3	#=============================	COMMENT
MEDIUM	src/secp256k1/CMakeLists.txt	5	#=============================	COMMENT
MEDIUM⚡	src/secp256k1/CMakeLists.txt	28	#=============================	COMMENT
MEDIUM⚡	src/secp256k1/CMakeLists.txt	30	#=============================	COMMENT
MEDIUM⚡	src/secp256k1/CMakeLists.txt	34	#=============================	COMMENT
MEDIUM⚡	src/secp256k1/CMakeLists.txt	36	#=============================	COMMENT
MEDIUM⚡	src/minisketch/CMakeLists.txt	3	#=============================	COMMENT
MEDIUM⚡	src/minisketch/CMakeLists.txt	5	#=============================	COMMENT
MEDIUM⚡	src/minisketch/CMakeLists.txt	13	# ============================================================	COMMENT
MEDIUM⚡	src/minisketch/CMakeLists.txt	15	# ============================================================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	34	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	36	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	49	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	51	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	83	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	85	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	96	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	98	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	115	#=============================	COMMENT
MEDIUM	src/minisketch/CMakeLists.txt	117	#=============================	COMMENT
MEDIUM⚡	src/node/mini_miner.cpp	336	// ┌─────────────────┐	COMMENT
MEDIUM⚡	src/node/mini_miner.cpp	343	// └──────▲───▲──────┘ P2_ASFR: 2.47 s/vB	COMMENT
MEDIUM⚡	src/node/mini_miner.cpp	345	// ┌───────────────┐ │ │ ┌──────────────┐	COMMENT
MEDIUM⚡	src/node/mini_miner.cpp	352	// └───────────▲───┘ └───▲──────────┘	COMMENT
MEDIUM⚡	src/node/mini_miner.cpp	354	// │ ┌───────────┐ │	COMMENT
MEDIUM⚡	src/node/mini_miner.cpp	361	// └───────────┘	COMMENT

Empty Error Handlers22 hits · 110 pts

Severity	File	Line	Snippet	Context
HIGH	test/functional/interface_ipc.py	22	except ModuleNotFoundError:	CODE
HIGH	test/functional/wallet_descriptor.py	9	except ImportError:	CODE
HIGH	test/functional/interface_usdt_validation.py	16	except ImportError:	CODE
HIGH	test/functional/tool_utxo_to_sqlite.py	11	except ImportError:	CODE
HIGH	test/functional/interface_usdt_coinselection.py	13	except ImportError:	CODE
HIGH	test/functional/interface_usdt_mempool.py	16	except ImportError:	CODE
HIGH	test/functional/test_runner.py	621	except OSError:	CODE
HIGH	test/functional/feature_reindex_readonly.py	75	except Exception:	CODE
HIGH	test/functional/rpc_blockchain.py	551	except (ConnectionError, http.client.BadStatusLine):	CODE
HIGH	test/functional/interface_zmq.py	40	except ImportError:	CODE
HIGH	test/functional/interface_http.py	415	except NETWORK_ERRORS:	CODE
HIGH	test/functional/interface_usdt_net.py	15	except ImportError:	CODE
HIGH	test/functional/interface_ipc_mining.py	55	except ModuleNotFoundError:	CODE
HIGH	test/functional/interface_usdt_utxocache.py	14	except ImportError:	CODE
HIGH	test/functional/feature_utxo_abort_on_error.py	104	except Exception:	CODE
HIGH	test/functional/test_framework/util.py	630	except OSError:	CODE
HIGH	test/functional/test_framework/ipc_util.py	23	except ModuleNotFoundError:	CODE
HIGH	test/functional/test_framework/netutil.py	59	except FileNotFoundError:	CODE
HIGH	test/functional/test_framework/socks5.py	243	except OSError:	CODE
HIGH	test/functional/test_framework/wallet.py	162	except StopIteration:	CODE
HIGH	test/functional/test_framework/test_node.py	461	except ValueError: # cookie file not found and no rpcuser or rpcpassword; bitcoind is still starting	CODE
HIGH	contrib/signet/getcoins.py	63	except IndexError:	CODE

Deep Nesting96 hits · 96 pts

Severity	File	Line	Context
LOW	test/download_utils.py	12	CODE
LOW	test/get_previous_releases.py	134	CODE
LOW	test/lint/lint-files.py	123	CODE
LOW	test/lint/lint-files.py	168	CODE
LOW	test/functional/combine_logs.py	103	CODE
LOW	test/functional/combine_logs.py	145	CODE
LOW	test/functional/wallet_backwards_compatibility.py	96	CODE
LOW	test/functional/wallet_backwards_compatibility.py	272	CODE
LOW	test/functional/wallet_keypool_topup.py	33	CODE
LOW	test/functional/wallet_gethdkeys.py	78	CODE
LOW	test/functional/wallet_gethdkeys.py	132	CODE
LOW	test/functional/rpc_help.py	21	CODE
LOW	test/functional/wallet_musig.py	34	CODE
LOW	test/functional/wallet_musig.py	125	CODE
LOW	test/functional/p2p_v2_misbehaving.py	104	CODE
LOW	test/functional/p2p_v2_misbehaving.py	159	CODE
LOW	test/functional/wallet_address_types.py	97	CODE
LOW	test/functional/wallet_address_types.py	156	CODE
LOW	test/functional/wallet_address_types.py	223	CODE
LOW	test/functional/wallet_fundrawtransaction.py	66	CODE
LOW	test/functional/feature_bip68_sequence.py	129	CODE
LOW	test/functional/mempool_updatefromblock.py	33	CODE
LOW	test/functional/feature_taproot.py	514	CODE
LOW	test/functional/feature_taproot.py	680	CODE
LOW	test/functional/feature_taproot.py	1460	CODE
LOW	test/functional/feature_taproot.py	1661	CODE
LOW	test/functional/feature_taproot.py	1782	CODE
LOW	test/functional/feature_utxo_set_hash.py	22	CODE
LOW	test/functional/wallet_transactiontime_rescan.py	31	CODE
LOW	test/functional/rpc_psbt.py	881	CODE
LOW	test/functional/interface_bitcoin_cli.py	44	CODE
LOW	test/functional/p2p_private_broadcast.py	63	CODE
LOW	test/functional/p2p_private_broadcast.py	234	CODE
LOW	test/functional/p2p_private_broadcast.py	71	CODE
LOW	test/functional/p2p_private_broadcast.py	285	CODE
LOW	test/functional/interface_usdt_coinselection.py	139	CODE
LOW	test/functional/wallet_send.py	40	CODE
LOW	test/functional/test_runner.py	426	CODE
LOW	test/functional/test_runner.py	608	CODE
LOW	test/functional/test_runner.py	781	CODE
LOW	test/functional/p2p_tx_download.py	451	CODE
LOW	test/functional/wallet_taproot.py	173	CODE
LOW	test/functional/feature_reindex_readonly.py	22	CODE
LOW	test/functional/p2p_disconnect_ban.py	19	CODE
LOW	test/functional/interface_zmq.py	138	CODE
LOW	test/functional/interface_zmq.py	456	CODE
LOW	test/functional/feature_torcontrol.py	60	CODE
LOW	test/functional/feature_torcontrol.py	86	CODE
LOW	test/functional/p2p_sendheaders.py	271	CODE
LOW	test/functional/test_framework/v2_p2p.py	178	CODE
LOW	test/functional/test_framework/p2p.py	265	CODE
LOW	test/functional/test_framework/p2p.py	326	CODE
LOW	test/functional/test_framework/util.py	427	CODE
LOW	test/functional/test_framework/util.py	612	CODE
LOW	test/functional/test_framework/key.py	292	CODE
LOW	test/functional/test_framework/key.py	324	CODE
LOW	test/functional/test_framework/socks5.py	53	CODE
LOW	test/functional/test_framework/socks5.py	140	CODE
LOW	test/functional/test_framework/messages.py	353	CODE
LOW	test/functional/test_framework/messages.py	384	CODE
36 more matches not shown…

Excessive Try-Catch Wrapping42 hits · 50 pts

Severity	File	Line	Snippet	Context
LOW	test/download_utils.py	58	except Exception as e:	CODE
LOW	test/download_utils.py	64	except Exception as e2:	CODE
LOW	test/get_previous_releases.py	161	except Exception as e:	CODE
LOW	test/get_previous_releases.py	167	except Exception as e2:	CODE
LOW	test/get_previous_releases.py	199	except Exception as e:	CODE
LOW	test/functional/feature_dbcrash.py	87	except Exception:	CODE
LOW	test/functional/feature_dbcrash.py	111	except Exception as e:	CODE
LOW	test/functional/feature_dbcrash.py	171	except Exception:	CODE
LOW	test/functional/tool_utils.py	78	except Exception as e:	CODE
LOW	test/functional/tool_utils.py	83	except Exception as e:	CODE
LOW	test/functional/feature_reindex_readonly.py	58	except Exception:	CODE
LOW	test/functional/feature_reindex_readonly.py	75	except Exception:	CODE
LOW	test/functional/tool_bitcoin.py	60	except Exception as e:	CODE
LOW	test/functional/rpc_preciousblock.py	20	except Exception:	CODE
LOW	test/functional/feature_utxo_abort_on_error.py	104	except Exception:	CODE
LOW	test/functional/test_framework/p2p.py	383	except Exception as e:	CODE
LOW	test/functional/test_framework/p2p.py	532	except Exception:	CODE
LOW	test/functional/test_framework/util.py	125	except Exception as e:	CODE
LOW	test/functional/test_framework/util.py	191	except Exception as e:	CODE
LOW	test/functional/test_framework/util.py	200	except Exception as e:	CODE
MEDIUM	test/functional/test_framework/util.py	116	def assert_raises_message(exc, message, fun, args, *kwds):	CODE
MEDIUM	test/functional/test_framework/util.py	197	def assert_is_hex_string(string):	CODE
LOW	test/functional/test_framework/netutil.py	219	except Exception:	CODE
LOW	test/functional/test_framework/socks5.py	228	except Exception as e:	CODE
LOW	test/functional/test_framework/socks5.py	267	except Exception as e:	CODE
MEDIUM	test/functional/test_framework/socks5.py	263	def try_join_daemon_thread(thread, timeout=0) -> bool:	CODE
LOW	ci/lint.py	19	except Exception as e:	CODE
LOW	ci/test/02_run_container.py	20	except Exception as e:	CODE
MEDIUM	ci/test/02_run_container.py	127	print(f"Error: Directory '{os.environ['CCACHE_DIR']}' must be created in advance.")	CODE
LOW	contrib/signet/getcoins.py	145	except Exception:	CODE
LOW	contrib/message-capture/message-capture-parser.py	148	except Exception:	CODE
MEDIUM	contrib/utxo-tools/utxo_to_sqlite.py	123	print(f"Error: provided input file '{args.infile}' doesn't exist.")	CODE
MEDIUM	contrib/utxo-tools/utxo_to_sqlite.py	127	print(f"Error: provided output file '{args.outfile}' already exists.")	CODE
MEDIUM	contrib/utxo-tools/utxo_to_sqlite.py	148	print(f"Error: provided input file '{args.infile}' is not an UTXO dump.")	CODE
MEDIUM	contrib/utxo-tools/utxo_to_sqlite.py	151	print(f"Error: provided input file '{args.infile}' has unknown UTXO dump version {version} "	CODE
LOW	contrib/guix/security-check.py	41	except Exception:	CODE
LOW	contrib/verify-binaries/test.py	19	except Exception:	CODE
LOW	contrib/verify-binaries/test.py	34	except Exception:	CODE
LOW	contrib/verify-binaries/verify.py	448	except Exception as e:	CODE
LOW	.github/ci-windows.py	23	except Exception as e:	CODE
LOW	.github/ci-test-each-commit-exec.py	16	except Exception as e:	CODE
LOW	.github/ci-windows-cross.py	23	except Exception as e:	CODE

Cross-Language Confusion8 hits · 42 pts

Severity	File	Line	Snippet	Context
HIGH	test/functional/feature_assumevalid.py	112	# Create a transaction spending the coinbase output with an invalid (null) signature	COMMENT
HIGH	test/functional/interface_usdt_coinselection.py	63	coin_selection_events.push(&data, 0);	CODE
HIGH	test/functional/interface_usdt_coinselection.py	77	coin_selection_events.push(&data, 0);	CODE
HIGH	test/functional/interface_usdt_coinselection.py	88	coin_selection_events.push(&data, 0);	CODE
HIGH	test/functional/interface_usdt_coinselection.py	103	coin_selection_events.push(&data, 0);	CODE
HIGH	test/functional/interface_http.py	371	assert b'{"result":"high-hash","error":null}\n' in response1	CODE
HIGH	ci/test/02_run_container.py	207	f"echo 'Windows cross compiler:' && \"$CXX\" -v && exec bash {shlex.quote(test_script)}",	CODE
HIGH	.github/ci-windows.py	53	f'"{comspec}" /s /c ""{vsdevcmd}" -arch=x64 -no_logo && set"',	CODE

AI Slop Vocabulary18 hits · 42 pts

Severity	File	Line	Snippet	Context
MEDIUM	test/functional/p2p_v2_misbehaving.py	180	# Make a passing connection for more robust disconnection checking.	COMMENT
LOW	test/functional/rpc_createmultisig.py	64	expected_ms_script = keys_to_multisig_script(keys, k=nkeys) # simply use n-of-n	CODE
MEDIUM	test/functional/wallet_migration.py	1292	# In order to get the wsh(pkh()) into only mapScripts and not setWatchOnly, we need to utilize	COMMENT
LOW	test/functional/rpc_psbt.py	753	# The decodepsbt RPC is stateless and independent of any settings, we can always just call it on the first node	COMMENT
LOW	test/functional/mining_basic.py	527	# We know the header for this invalid block, so should just return early without error:	COMMENT
LOW	test/functional/mempool_package_rbf.py	75	# coins (to create conflicts), and perhaps giving them the same fee, we might accidentally just create the same	COMMENT
LOW	test/functional/mempool_truc.py	319	# tx_0fee_parent is our transaction "B"; just create it.	COMMENT
LOW	test/functional/mining_prioritisetransaction.py	341	# This is a less than 1000-byte transaction, so just set the fee	COMMENT
LOW	test/functional/test_framework/test_node.py	137	# For those callers that need more flexibility, they can just set the args property directly.	COMMENT
MEDIUM	test/functional/test_framework/test_node.py	397	# The wait is done here to make tests as robust as possible	COMMENT
LOW	contrib/devtools/gen-manpages.py	91	# Copyright is the same for all binaries, so just use the first.	COMMENT
MEDIUM	contrib/guix/libexec/setup.sh	16	# time-machine to a commit which includes the aforementioned change, we can	COMMENT
MEDIUM	contrib/guix/libexec/codesign.sh	16	# time-machine to a commit which includes the aforementioned change, we can	COMMENT
MEDIUM	src/protocol.h	347	// unauthenticated advertisements, so your code must be robust against	COMMENT
MEDIUM	src/validation.cpp	1447	// N.B. this doesn't take into account CPFPs. Chunk-aware validation may be more robust.	COMMENT
MEDIUM	src/net.cpp	3868	// We also should be robust to those attacks which may not require scraping full victim's AddrMan	COMMENT
MEDIUM	src/test/key_io_tests.cpp	122	// Goal: check that base58 parsing code is robust against a variety of corrupted data	COMMENT
MEDIUM	src/policy/truc_policy.h	19	// RBF abilities more robust. A transaction with version=3 is treated as TRUC.	COMMENT

Cross-File Repetition6 hits · 30 pts

Severity	File	Snippet	Context
HIGH	test/functional/tool_bitcoin_chainstate.py	use the pregenerated, deterministic chain up to height 199.	STRING
HIGH	test/functional/wallet_assumeutxo.py	use the pregenerated, deterministic chain up to height 199.	STRING
HIGH	test/functional/feature_assumeutxo.py	use the pregenerated, deterministic chain up to height 199.	STRING
HIGH	test/functional/tool_bitcoin_chainstate.py	start with the nodes disconnected so that one can generate a snapshot including blocks the other hasn't yet seen.	STRING
HIGH	test/functional/wallet_assumeutxo.py	start with the nodes disconnected so that one can generate a snapshot including blocks the other hasn't yet seen.	STRING
HIGH	test/functional/feature_assumeutxo.py	start with the nodes disconnected so that one can generate a snapshot including blocks the other hasn't yet seen.	STRING

Overly Generic Function Names17 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	test/functional/p2p_orphan_handling.py	95	def test_function():	CODE
LOW	test/functional/p2p_sendheaders.py	150	def test_function():	CODE
LOW⚡	test/functional/p2p_sendheaders.py	178	def test_function():	CODE
LOW⚡	test/functional/p2p_sendheaders.py	192	def test_function():	CODE
LOW⚡	test/functional/test_framework/p2p.py	610	def test_function():	CODE
LOW⚡	test/functional/test_framework/p2p.py	618	def test_function():	CODE
LOW⚡	test/functional/test_framework/p2p.py	624	def test_function():	CODE
LOW⚡	test/functional/test_framework/p2p.py	630	def test_function():	CODE
LOW⚡	test/functional/test_framework/p2p.py	637	def test_function():	CODE
LOW⚡	test/functional/test_framework/p2p.py	645	def test_function():	CODE
LOW⚡	test/functional/test_framework/p2p.py	651	def test_function():	CODE
LOW⚡	test/functional/test_framework/p2p.py	660	def test_function():	CODE
LOW	test/functional/test_framework/p2p.py	672	def test_function():	CODE
LOW	test/functional/test_framework/p2p.py	684	def test_function():	CODE
LOW	test/functional/test_framework/p2p.py	699	def test_function():	CODE
LOW	test/functional/test_framework/p2p.py	707	def test_function():	CODE
LOW	test/functional/test_framework/p2p.py	731	def test_function():	CODE

Redundant / Tautological Comments11 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	test/lint/lint-includes.py	136	# Check if code includes .cpp-files	COMMENT
LOW	test/lint/lint-includes.py	155	# Check if Boost dependencies are no longer used	COMMENT
LOW	test/functional/example_test.py	85	# Set setup_clean_chain to True to skip this and start from the Genesis	COMMENT
LOW	test/functional/interface_rest.py	400	# Check if the 3 tx show up in the new block	COMMENT
LOW	test/functional/rpc_invalidateblock.py	107	# Check if it's possible for an ancestor (with block data) to be the chain tip	COMMENT
LOW	test/functional/mempool_accept.py	190	tx.vin[0].prevout.n = 1 # Set vout to 1, to spend the other outpoint (49 coins) of the in-chain-tx we want to d	CODE
LOW	test/functional/wallet_txn_doublespend.py	51	# Assign coins to foo and bar addresses:	COMMENT
LOW	test/functional/feature_fee_estimation.py	405	# Verify if the string "Flushed fee estimates to block_policy_estimates.dat." is present in the debug log file.	COMMENT
LOW	test/functional/test_framework/util.py	347	# Set paths to bitcoin core binaries allowing overrides with environment	COMMENT
LOW	test/functional/test_framework/test_node.py	153	self.args.append("-lang=nl_NL") # Set language to try to trigger translation bugs	CODE
LOW	contrib/signet/getcoins.py	148	# Display the output as per the returned status code	COMMENT

Structural Annotation Overuse6 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	contrib/macdeploy/README.md	13	### Step 1: Obtaining `Xcode.app`	COMMENT
LOW	contrib/macdeploy/README.md	45	### Step 2: Generating the SDK tarball from `Xcode.app`	COMMENT
LOW	contrib/linearize/README.md	4	## Step 1: Download hash list	COMMENT
LOW	contrib/linearize/README.md	25	## Step 2: Copy local block data	COMMENT
LOW	contrib/guix/README.md	333	### Step 1: Authorize the signing keys	COMMENT
LOW	contrib/guix/README.md	386	### Step 2: Specify the substitute servers	COMMENT

Fake / Example Data5 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	src/crypto/sha256.cpp	493	"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do "	CODE
LOW	src/crypto/sha256.cpp	493	"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do "	CODE
LOW⚡	src/test/script_tests.cpp	1191	CKey dummy_key;	CODE
LOW⚡	src/test/script_tests.cpp	1192	dummy_key.MakeNewKey(/fCompressed=/true);	CODE
LOW⚡	src/test/script_tests.cpp	1193	const CPubKey dummy_pubkey{dummy_key.GetPubKey()};	CODE

Unused Imports6 hits · 6 pts

Severity	File	Line	Context
LOW	test/functional/test_framework/test_framework.py	994	CODE
LOW	test/functional/test_framework/test_framework.py	1008	CODE
LOW	test/functional/test_framework/test_framework.py	1015	CODE
LOW	contrib/devtools/clang-format-diff.py	24	CODE
LOW	contrib/devtools/clang-format-diff.py	24	CODE
LOW	contrib/devtools/clang-format-diff.py	24	CODE

Slop Phrases2 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	src/netbase.cpp	868	/* Don't forget to update doc/p2p-bad-ports.md if you change this list. */	COMMENT
MEDIUM	src/secp256k1/examples/silentpayments.c	80	* the label tweak when a match is found. This is for demonstration purposes	COMMENT

Verbosity Indicators3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	src/cluster_linearize.h	1027	* This variable stores the tiebreak of the current best candidate. */	COMMENT
LOW	src/script/sign.cpp	790	// Note we need to check if the result stack is empty before, because it might be used even if the Script	COMMENT
LOW	src/secp256k1/include/secp256k1_preallocated.h	29	* The purpose of this function is to determine how much memory must be provided	COMMENT

AI Structural Patterns4 hits · 4 pts

Severity	File	Line	Context
LOW	test/functional/feature_taproot.py	514	CODE
LOW	test/functional/wallet_send.py	40	CODE
LOW	test/functional/test_framework/wallet.py	295	CODE
LOW	test/functional/test_framework/test_node.py	97	CODE

Modern Structural Boilerplate2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	contrib/asmap/asmap.py	310	def update_multi(self, entries: list[tuple[list[bool], int]]) -> None:	CODE
LOW	contrib/asmap/asmap.py	316	def _set_trie(self, trie) -> None:	CODE

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	contrib/devtools/circular-dependencies.py	42	# TODO: implement support for multiple include directories	COMMENT

bitcoin/bitcoin

Open-Source Code Quality, Security and Technical Debt Review