2.7

Adjusted Signal

2.7

Raw Pattern Score

100%

Time Factor

2026-10-21

Last Push

14.7K

Stars

Language

218.9K

Lines of Code

654

Files

437

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 10.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 332 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.3/100 · LOW

Are imports declared and package/API names verified? 75 finding(s).

Agent Over-Engineering Ratio 1.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 56 finding(s).

PR Review Velocity Impact 10.6/100 · LOW

Which changes need focused human review? 437 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 4MEDIUM 16LOW 417

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 437 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Structural Annotation Overuse115 hits · 180 pts

Severity	File	Line	Snippet	Context
LOW	plugin/go/TUTORIAL.md	13	## Step 0: Build Canopy	COMMENT
LOW	plugin/go/TUTORIAL.md	23	## Step 1: Define the Protobuf Messages	COMMENT
LOW	plugin/go/TUTORIAL.md	50	## Step 2: Regenerate Go Protobuf Code	COMMENT
LOW	plugin/go/TUTORIAL.md	61	## Step 3: Register the Transaction Types	COMMENT
LOW	plugin/go/TUTORIAL.md	87	## Step 4: Add CheckTx Validation	COMMENT
LOW	plugin/go/TUTORIAL.md	189	## Step 5: Add DeliverTx Execution	COMMENT
LOW	plugin/go/TUTORIAL.md	493	## Step 6: Build and Deploy	COMMENT
LOW	plugin/go/TUTORIAL.md	502	## Step 7: Running Canopy with the Plugin	COMMENT
LOW	plugin/go/TUTORIAL.md	614	## Step 8: Testing	COMMENT
LOW	plugin/go/CUSTOMIZE.md	5	## Step 1: Register the Transaction	COMMENT
LOW	plugin/go/CUSTOMIZE.md	22	## Step 2: Add CheckTx Validation	COMMENT
LOW	plugin/go/CUSTOMIZE.md	68	## Step 3: Add DeliverTx Execution	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	34	// Step 1: Create two new accounts in the keystore	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	64	// Step 2: Use faucet to add balance to account 1	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	100	// Step 3: Send tokens from account 1 to account 2	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	139	// Step 4: Send reward from account 2 back to account 1	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	225	// Step 1: Create a recipient and an admin account in the keystore	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	255	// Step 2: Faucet the recipient twice and verify the aggregated faucet record	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	342	// Step 3: Faucet the admin so it has balance to pay the reward fee	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	358	// Step 4: Reward the recipient and verify the reward record	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	414	// Step 5: an address that never received a faucet/reward must return an EMPTY record from both	COMMENT
LOW	plugin/python/TUTORIAL.md	14	## Step 0: Build Canopy	COMMENT
LOW	plugin/python/TUTORIAL.md	24	## Step 1: Define the Protobuf Messages	COMMENT
LOW	plugin/python/TUTORIAL.md	51	## Step 2: Regenerate Python Protobuf Code	COMMENT
LOW	plugin/python/TUTORIAL.md	62	## Step 3: Update Proto Imports	COMMENT
LOW	plugin/python/TUTORIAL.md	76	## Step 4: Register the Transaction Types	COMMENT
LOW	plugin/python/TUTORIAL.md	107	## Step 5: Add CheckTx Validation	COMMENT
LOW	plugin/python/TUTORIAL.md	223	## Step 6: Add DeliverTx Execution	COMMENT
LOW	plugin/python/TUTORIAL.md	575	## Step 7: Running Canopy with the Plugin	COMMENT
LOW	plugin/python/TUTORIAL.md	685	## Step 8: Testing	COMMENT
LOW⚡	plugin/python/tutorial/rpc_test.py	512	# Step 1: Create a recipient and an admin account in the keystore	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	529	# Step 2: Faucet the recipient twice and verify the aggregated faucet record	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	590	# Step 3: Faucet the admin so it has balance to pay the reward fee	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	602	# Step 4: Reward the recipient and verify the reward record	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	671	# Step 1: Create two new accounts in the keystore	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	688	# Step 2: Use faucet to add balance to account 1	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	723	# Step 3: Send tokens from account 1 to account 2	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	762	# Step 4: Send reward from account 2 back to account 1	COMMENT
LOW	plugin/typescript/TUTORIAL.md	14	## Step 0: Build Canopy	COMMENT
LOW	plugin/typescript/TUTORIAL.md	24	## Step 1: Define the Protobuf Messages	COMMENT
LOW	plugin/typescript/TUTORIAL.md	51	## Step 2: Regenerate TypeScript Protobuf Code	COMMENT
LOW	plugin/typescript/TUTORIAL.md	62	## Step 3: Register the Transaction Types	COMMENT
LOW	plugin/typescript/TUTORIAL.md	87	## Step 4: Add FromAny Message Decoding	COMMENT
LOW	plugin/typescript/TUTORIAL.md	116	## Step 5: Add CheckTx Validation	COMMENT
LOW	plugin/typescript/TUTORIAL.md	230	## Step 6: Add DeliverTx Execution	COMMENT
LOW	plugin/typescript/TUTORIAL.md	641	## Step 7: Build and Deploy	COMMENT
LOW	plugin/typescript/TUTORIAL.md	650	## Step 8: Running Canopy with the Plugin	COMMENT
LOW	plugin/typescript/TUTORIAL.md	762	## Step 9: Testing	COMMENT
LOW	plugin/typescript/CUSTOMIZE.md	5	## Step 1: Register the Transaction	COMMENT
LOW	plugin/typescript/CUSTOMIZE.md	18	## Step 2: Add CheckTx Validation	COMMENT
LOW	plugin/typescript/CUSTOMIZE.md	56	## Step 3: Add DeliverTx Execution	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	405	// Step 1: Create two new accounts in the keystore	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	430	// Step 2: Use faucet to add balance to account 1	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	477	// Step 3: Send tokens from account 1 to account 2	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	518	// Step 4: Send reward from account 2 back to account 1	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	797	// Step 1: Create a recipient and an admin account in the keystore	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	818	// Step 2: Faucet the recipient twice and verify the aggregated faucet record	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	930	// Step 3: Faucet the admin so it has balance to pay the reward fee	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	952	// Step 4: Reward the recipient and verify the reward record	COMMENT
LOW	plugin/kotlin/TUTORIAL.md	14	## Step 0: Build Canopy	COMMENT
55 more matches not shown…

Verbosity Indicators64 hits · 106 pts

Severity	File	Line	Snippet	Context
LOW	plugin/go/tutorial/rpc_test.go	34	// Step 1: Create two new accounts in the keystore	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	64	// Step 2: Use faucet to add balance to account 1	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	100	// Step 3: Send tokens from account 1 to account 2	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	139	// Step 4: Send reward from account 2 back to account 1	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	225	// Step 1: Create a recipient and an admin account in the keystore	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	255	// Step 2: Faucet the recipient twice and verify the aggregated faucet record	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	342	// Step 3: Faucet the admin so it has balance to pay the reward fee	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	358	// Step 4: Reward the recipient and verify the reward record	COMMENT
LOW	plugin/go/tutorial/rpc_test.go	414	// Step 5: an address that never received a faucet/reward must return an EMPTY record from both	COMMENT
LOW⚡	plugin/python/tutorial/rpc_test.py	512	# Step 1: Create a recipient and an admin account in the keystore	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	529	# Step 2: Faucet the recipient twice and verify the aggregated faucet record	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	590	# Step 3: Faucet the admin so it has balance to pay the reward fee	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	602	# Step 4: Reward the recipient and verify the reward record	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	671	# Step 1: Create two new accounts in the keystore	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	688	# Step 2: Use faucet to add balance to account 1	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	723	# Step 3: Send tokens from account 1 to account 2	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	762	# Step 4: Send reward from account 2 back to account 1	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	405	// Step 1: Create two new accounts in the keystore	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	430	// Step 2: Use faucet to add balance to account 1	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	477	// Step 3: Send tokens from account 1 to account 2	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	518	// Step 4: Send reward from account 2 back to account 1	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	797	// Step 1: Create a recipient and an admin account in the keystore	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	818	// Step 2: Faucet the recipient twice and verify the aggregated faucet record	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	930	// Step 3: Faucet the admin so it has balance to pay the reward fee	COMMENT
LOW	plugin/typescript/tutorial/src/rpc_test.ts	952	// Step 4: Reward the recipient and verify the reward record	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	78	// Step 1: Create two new accounts in the keystore	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	95	// Step 2: Use faucet to add balance to account 1	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	131	// Step 3: Send tokens from account 1 to account 2	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	172	// Step 4: Send reward from account 2 back to account 1	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	284	// Step 1: Create a recipient and an admin account in the keystore	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	301	// Step 2: Faucet the recipient twice and verify the aggregated faucet record	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	359	// Step 3: Faucet the admin so it has balance to pay the reward fee	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	370	// Step 4: Reward the recipient and verify the reward record	COMMENT
LOW	…utorial/src/test/kotlin/com/canopy/tutorial/RpcTest.kt	406	// Step 5: Query both single-record endpoints with a fresh, never-used address and assert the	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	59	// Step 1: Create two new accounts in the keystore	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	76	// Step 2: Use faucet to add balance to account 1	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	110	// Step 3: Send tokens from account 1 to account 2	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	149	// Step 4: Send reward from account 2 back to account 1	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	234	// Step 1: Create a recipient and an admin account in the keystore	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	251	// Step 2: Faucet the recipient twice and verify the aggregated faucet record	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	308	// Step 3: Faucet the admin so it has balance to pay the reward fee	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	320	// Step 4: Reward the recipient and verify the reward record	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	354	// Step 5: an address that never received a faucet/reward must return an EMPTY record from both	COMMENT
LOW	fsm/dex_test.go	3592	// Step 1: Submit swap on chain2 targeting chain1	COMMENT
LOW	fsm/dex_test.go	3605	// Step 2: Process complete cross-chain cycle (following TestDexSwap pattern)	COMMENT
LOW	fsm/dex_test.go	3629	// Step 3: Validate AMM mechanics worked correctly	COMMENT
LOW	fsm/dex_test.go	3679	// Step 1: Submit liquidity deposit on chain2 targeting chain1 (following TestDexDeposit)	COMMENT
LOW	fsm/dex_test.go	3691	// Step 2: Process complete cross-chain cycle (following TestDexDeposit pattern)	COMMENT
LOW	fsm/dex_test.go	3717	// Step 3: Validate liquidity deposit mechanics worked correctly	COMMENT
LOW⚡	fsm/dex_test.go	3823	// Step 1: Submit liquidity withdraw on chain2 targeting chain1 (following TestDexWithdraw)	COMMENT
LOW⚡	fsm/dex_test.go	3831	// Step 2: Process complete cross-chain cycle (following TestDexWithdraw pattern)	COMMENT
LOW	fsm/dex_test.go	3857	// Step 3: Validate liquidity withdraw mechanics worked correctly	COMMENT
LOW⚡	lib/crypto/classgroup.go	69	// Step 0: Reduce both class groups for efficient arithmetic operations	COMMENT
LOW⚡	lib/crypto/classgroup.go	76	// Step 1: Calculate intermediate value g = (b1+b2) // 2	COMMENT
LOW⚡	lib/crypto/classgroup.go	79	// Step 2: Calculate intermediate value h = b2 - b1	COMMENT
LOW⚡	lib/crypto/classgroup.go	82	// Step 3: Calculate intermediate value w as the GCD of a2 and the (GCD of a1 and g)	COMMENT
LOW⚡	lib/crypto/classgroup.go	87	// Step 4:	COMMENT
LOW⚡	lib/crypto/classgroup.go	95	// Step 5: Solve the modular equation for k and constant_factor	COMMENT
LOW⚡	lib/crypto/classgroup.go	103	// Step 6: Solve for n in another modular equation	COMMENT
LOW⚡	lib/crypto/classgroup.go	111	// Step 7: Compute intermediate value k = k_temp + constant_factor * n	COMMENT
4 more matches not shown…

Over-Commented Block79 hits · 78 pts

Severity	File	Line	Snippet	Context
LOW	cmd/rpc/sock.go	461	}	COMMENT
LOW	.docker/compose.yaml	41	command: ["start"]	COMMENT
LOW	.docker/compose.yaml	61	# - 30003:30003 # Admin RPC	COMMENT
LOW	plugin/go/TUTORIAL.md	221	// This is called AFTER CheckTx passes and the transaction is included in a block.	COMMENT
LOW	plugin/go/contract/plugin.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	plugin/go/contract/plugin.pb.go	261	// payload: the payload of the message	COMMENT
LOW	plugin/go/contract/rpc.go	21		COMMENT
LOW	plugin/go/tutorial/contract/plugin.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	plugin/go/tutorial/contract/plugin.pb.go	241	state protoimpl.MessageState `protogen:"open.v1"`	COMMENT
LOW	plugin/csharp/TUTORIAL.md	261	```csharp	COMMENT
LOW	plugin/csharp/tutorial/RpcTest.cs	201	/// <summary>	COMMENT
LOW	plugin/csharp/src/CanopyPlugin/rpc.cs	21	place to hang their own endpoints. See TUTORIAL.md ("Custom RPC endpoints") for a fully worked	COMMENT
LOW	fsm/gov.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	fsm/gov.pb.go	321	// This is necessary to prevent dead validators from forever existing in the state	COMMENT
LOW	fsm/gov.pb.go	341	// one view	COMMENT
LOW	fsm/account.pb.go	21	// Verify that runtime/protoimpl is sufficiently up-to-date.	COMMENT
LOW	fsm/dex.go	21	// ---------------------------------------------	COMMENT
LOW	fsm/dex.go	41	// c) Add produced receipts → Y.nextBatch, then lock + send to X	COMMENT
LOW	fsm/dex.go	61	// That snapshot is sent to the counter chain so it can mirror our pool for its next cycle.	COMMENT
LOW	fsm/dex.go	121	//	COMMENT
LOW	fsm/dex.go	141	//	COMMENT
LOW	fsm/dex.go	161	// • Burn proportional liquidity points.	COMMENT
LOW	fsm/dex.go	221	// get the local locked dex batch	COMMENT
LOW	fsm/indexer.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	fsm/message.pb.go	21	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)	COMMENT
LOW	fsm/message.pb.go	601	// This type of message must be manually pre-approved by +2/3rds of the Validators via their APPROVE_LIST	COMMENT
LOW	fsm/message.pb.go	921	// as the recipient address	COMMENT
LOW	fsm/state.go	261	// exit	COMMENT
LOW	fsm/validator.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	fsm/validator.pb.go	41	// and maintaining the blockchain's integrity and security. In Canopy, Validators provide this service for multiple	COMMENT
LOW	fsm/genesis.pb.go	21	// Verify that runtime/protoimpl is sufficiently up-to-date.	COMMENT
LOW	fsm/genesis.pb.go	41	// certain height. The main use-cases for the Genesis state are acting as block 0 and analyzing the state db in	COMMENT
LOW	controller/consensus.go	61	return ""	COMMENT
LOW	controller/consensus.go	201	// calculate and log the elapsed time	COMMENT
LOW	controller/block.go	581	// exit with error	COMMENT
LOW	bft/bft.pb.go	21	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)	COMMENT
LOW	bft/bft.pb.go	41	// (Consensus) Message	COMMENT
LOW	p2p/set_test.go	61	require.Error(t, err)	COMMENT
LOW	p2p/set.go	161	//if err != nil {	COMMENT
LOW	p2p/p2p.pb.go	21	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)	COMMENT
LOW	p2p/conn.go	441	func (c MultiConn) sendPacket(packet Packet, m *limiter.Monitor) {	COMMENT
LOW	p2p/conn.go	541	// lib.BytesToTruncatedString(peerInfo.Address.PublicKey),	COMMENT
LOW	lib/tx.pb.go	21	// Verify that runtime/protoimpl is sufficiently up-to-date.	COMMENT
LOW	lib/store.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	lib/metrics.go	21	// Metric Name \| Hard Limit \| Soft Limit \| Note	COMMENT
LOW	lib/metrics.go	41	// RootChainInfoTime \| 2 secs \| 1 sec \| Hard = 10% of block time	COMMENT
LOW	lib/swap.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	lib/swap.pb.go	41	//	COMMENT
LOW	lib/consensus.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	lib/consensus.pb.go	41	type Phase int32	COMMENT
LOW	lib/consensus.pb.go	61	// propose_vote:	COMMENT
LOW	lib/consensus.pb.go	81	// commit_process:	COMMENT
LOW	lib/consensus.pb.go	161	// and the canopy height when a canopy block is produced.	COMMENT
LOW	lib/plugin.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	lib/plugin.pb.go	41	state protoimpl.MessageState `protogen:"open.v1"`	COMMENT
LOW	lib/peer.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	lib/wrapper.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
LOW	lib/event.pb.go	21	// Verify that runtime/protoimpl is sufficiently up-to-date.	COMMENT
LOW	lib/event.pb.go	41	// *Event_FinishUnstaking	COMMENT
LOW	lib/certificate.pb.go	21	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)	COMMENT
19 more matches not shown…

Redundant / Tautological Comments35 hits · 53 pts

Severity	File	Line	Snippet	Context
LOW	.docker/auto-update/entrypoint.sh	31	# Check if it exist	COMMENT
LOW	plugin/go/pluginctl.sh	115	# Check if the process is running based on PID file	COMMENT
LOW	plugin/go/pluginctl.sh	127	# Check if process exists and is the go-plugin binary	COMMENT
LOW	plugin/go/pluginctl.sh	146	# Check if already running	COMMENT
LOW	plugin/go/pluginctl.sh	157	# Check if binary exists and is executable	COMMENT
LOW	plugin/go/pluginctl.sh	186	# Check if running	COMMENT
LOW	plugin/go/pluginctl.sh	209	# Check if running	COMMENT
LOW	plugin/python/pluginctl.sh	93	# Check if venv exists, Python binary works, AND pip exists	COMMENT
LOW	plugin/python/pluginctl.sh	103	# Check if protobuf is installed (basic dependency check)	COMMENT
LOW	plugin/python/pluginctl.sh	137	# Check if the process is running based on PID file	COMMENT
LOW	plugin/python/pluginctl.sh	149	# Check if process exists and is running our Python script	COMMENT
LOW	plugin/python/pluginctl.sh	168	# Check if already running	COMMENT
LOW	plugin/python/pluginctl.sh	185	# Check if Python script exists	COMMENT
LOW	plugin/python/pluginctl.sh	226	# Check if running	COMMENT
LOW	plugin/python/pluginctl.sh	264	# Check if running	COMMENT
LOW⚡	plugin/python/contract/plugin.py	349	# Check if this is a response to our request	COMMENT
LOW	plugin/python/tutorial/rpc_test.py	130	# Check if our transaction is in the results	COMMENT
LOW	plugin/typescript/pluginctl.sh	54	# Check if the process is running based on PID file	COMMENT
LOW	plugin/typescript/pluginctl.sh	66	# Check if process exists and is running our Node.js script	COMMENT
LOW	plugin/typescript/pluginctl.sh	85	# Check if already running	COMMENT
LOW	plugin/typescript/pluginctl.sh	94	# Check if Node.js script exists	COMMENT
LOW	plugin/typescript/pluginctl.sh	123	# Check if running	COMMENT
LOW	plugin/typescript/pluginctl.sh	161	# Check if running	COMMENT
LOW	plugin/kotlin/pluginctl.sh	58	# Check if the process is running based on PID file	COMMENT
LOW	plugin/kotlin/pluginctl.sh	70	# Check if process exists and is the kotlin-plugin	COMMENT
LOW	plugin/kotlin/pluginctl.sh	89	# Check if already running	COMMENT
LOW	plugin/kotlin/pluginctl.sh	98	# Check if JAR exists	COMMENT
LOW	plugin/kotlin/pluginctl.sh	128	# Check if running	COMMENT
LOW	plugin/kotlin/pluginctl.sh	166	# Check if running	COMMENT
LOW	plugin/csharp/pluginctl.sh	85	# Check if the process is running based on PID file	COMMENT
LOW	plugin/csharp/pluginctl.sh	97	# Check if process exists and is the CanopyPlugin binary	COMMENT
LOW	plugin/csharp/pluginctl.sh	116	# Check if already running	COMMENT
LOW	plugin/csharp/pluginctl.sh	125	# Check if binary exists	COMMENT
LOW	plugin/csharp/pluginctl.sh	154	# Check if running	COMMENT
LOW	plugin/csharp/pluginctl.sh	192	# Check if running	COMMENT

Fake / Example Data59 hits · 40 pts

Severity	File	Line	Snippet	Context
LOW	cmd/rpc/web/explorer/src/data/blocks.json	16	"placeholder": "Search blocks, transactions, addresses..."	CODE
LOW	cmd/rpc/web/explorer/src/data/transactions.json	16	"placeholder": "Search blocks, transactions, addresses..."	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	125	"placeholder": "Select From Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	190	"placeholder": "Add a note for this transfer",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	507	"placeholder": "Select Staking Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	549	"placeholder": "Select Rewards Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	603	"placeholder": "Add a note about this transaction",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	623	"placeholder": "0.00",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	732	"placeholder": "e.g. 1,2,3",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	755	"placeholder": "tcp://127.0.0.1:xxxx",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1307	"placeholder": "Select Validator Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1324	"placeholder": "Select Signer Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1347	"placeholder": "Add a note about this pause action",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1515	"placeholder": "Select Validator Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1532	"placeholder": "Select Signer Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1555	"placeholder": "Add a note about this unpause action",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1724	"placeholder": "What would you like to ask?",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1740	"placeholder": "Provide additional context for the poll...",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1916	"placeholder": "Select Validator Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1943	"placeholder": "Select Signer Address",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	1959	"placeholder": "Add a note about this unstake action",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2187	"placeholder": "Select parameter key",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2207	"placeholder": "Enter new value",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2237	"placeholder": "Block height to start voting",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2259	"placeholder": "Block height to end voting",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2445	"placeholder": "Amount to transfer from DAO treasury",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2463	"placeholder": "Address to receive treasury funds",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2498	"placeholder": "Block height to start voting",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2520	"placeholder": "Block height to end voting",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2550	"placeholder": "Provide justification for this treasury request...",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2704	"placeholder": "Enter proposal hash",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2836	"placeholder": "Enter the poll question",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2854	"placeholder": "Block height when poll ends",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	2874	"placeholder": "https://discord.com/...",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	3048	"placeholder": "Poll proposal or question",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	3069	"placeholder": "Block height when poll ends",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	3082	"placeholder": "https://...",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	3206	"placeholder": "https://...",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	3541	"placeholder": "{{ form.proposalType === 'treasury' ? 'Description or reason for the treasury request' : 'De	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	3772	"placeholder": "Description/reason for transfer",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	3878	"placeholder": "{\"type\":\"...\"}",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	3954	"placeholder": "Paste the generated proposal JSON here",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4254	"placeholder": "e.g. 1",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4314	"placeholder": "Optional message",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4517	"placeholder": "Enter order ID",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4555	"placeholder": "e.g. 1",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4616	"placeholder": "Sub-asset contract address (hex)",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4629	"placeholder": "Optional message",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4811	"placeholder": "Enter order ID",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4827	"placeholder": "e.g. 1",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	4845	"placeholder": "Optional message",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	5021	"placeholder": "Enter order ID",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	5187	"placeholder": "Enter order ID",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	5344	"placeholder": "e.g. 1",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	5397	"placeholder": "Optional message",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	5559	"placeholder": "e.g. 1",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	5594	"placeholder": "Optional message",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	5749	"placeholder": "e.g. 1",	CODE
LOW	cmd/rpc/web/wallet/public/plugin/canopy/manifest.json	5817	"placeholder": "Optional message",	CODE

Hyper-Verbose Identifiers26 hits · 27 pts

Severity	File	Line	Snippet	Context
LOW	cmd/rpc/web/explorer/src/lib/utils.ts	6	export function shouldIgnoreRowNavigation(target: EventTarget \| null): boolean {	CODE
LOW	cmd/rpc/web/explorer/src/lib/utils.ts	114	export function upperCaseAndRepUnderscore(str: string): string {	CODE
LOW	cmd/rpc/web/explorer/src/lib/api.ts	207	function getTransactionTimestampMs(tx: any): number {	CODE
LOW	cmd/rpc/web/explorer/src/lib/api.ts	224	function attachBlockMetadataToTransactions(transactions: any[], block: any): any[] {	CODE
LOW	cmd/rpc/web/explorer/src/lib/api.ts	238	async function fetchTransactionsForBlock(block: any): Promise<any[]> {	CODE
LOW	cmd/rpc/web/explorer/src/lib/api.ts	266	export async function getRecentTransactionsPreview(limit: number = 5, cachedBlocks?: any[]): Promise<any[]> {	CODE
LOW	cmd/rpc/web/explorer/src/lib/api.ts	315	export async function getTransactionsWithRealPagination(page: number, perPage: number = 10, filters?: {	CODE
LOW	cmd/rpc/web/explorer/src/lib/api.ts	568	function extractTransactionsFromBlocks(blocks: any[]): any[] {	CODE
LOW	cmd/rpc/web/explorer/src/lib/api.ts	628	async function fetchTransactionsForBlockRange(	CODE
LOW	cmd/rpc/web/wallet/src/toast/manifestRuntime.ts	42	export function resolveRedirectFromManifest(	CODE
LOW	…wallet/src/hooks/useMultipleValidatorRewardsHistory.ts	11	export function useMultipleValidatorRewardsHistory(addresses: string[]) {	CODE
LOW	…rpc/web/wallet/src/hooks/useValidatorRewardsHistory.ts	10	export function useValidatorRewardsHistory(address?: string) {	CODE
LOW	cmd/rpc/web/wallet/src/hooks/useBlockProducerData.ts	76	export function useMultipleBlockProducerData(validatorAddresses: string[]) {	CODE
LOW⚡	plugin/python/contract/error.py	43	def err_invalid_plugin_resp_id() -> PluginError:	CODE
LOW⚡	plugin/python/contract/error.py	47	def err_unexpected_fsm_to_plugin(t: Any) -> PluginError:	CODE
LOW⚡	plugin/python/contract/error.py	51	def err_invalid_fsm_to_plugin_message(t: Any) -> PluginError:	CODE
LOW	plugin/python/contract/error.py	75	def err_tx_fee_below_state_limit() -> PluginError:	CODE
LOW	plugin/python/tutorial/rpc_test.py	480	def test_plugin_custom_rpc_endpoints() -> None:	CODE
LOW	plugin/python/tests/test_contract.py	72	def test_invalid_from_address(self, contract):	CODE
LOW	plugin/python/tests/test_contract.py	143	async def test_check_tx_without_plugin(self, config):	CODE
LOW	plugin/python/tests/test_config.py	50	def test_default_config_helper(self):	CODE
LOW	plugin/python/tests/test_config.py	84	def test_load_with_missing_fields_uses_defaults(self):	CODE
LOW	plugin/python/tests/test_config.py	99	def test_load_missing_file_raises(self):	CODE
LOW	plugin/typescript/tutorial/src/rpc_test.ts	778	async function testPluginCustomRPCEndpoints(): Promise<void> {	CODE
LOW	plugin/typescript/src/contract/contract.ts	26	function encodePreservingUnknownFields(	CODE
LOW	plugin/typescript/src/contract/error.ts	47	export function ErrInvalidFSMToPluginMMessage(t: string): IPluginError {	CODE

Decorative Section Separators9 hits · 27 pts

Severity	File	Line	Snippet	Context
MEDIUM	cmd/rpc/web/wallet/src/app/pages/Accounts.tsx	71	// ── Derived aggregates ────────────────────────────────────────────────────	COMMENT
MEDIUM	cmd/rpc/web/wallet/src/app/pages/Accounts.tsx	79	// ── Helpers ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	cmd/rpc/web/wallet/src/app/pages/Accounts.tsx	214	// ── Loading skeleton ──────────────────────────────────────────────────────	COMMENT
MEDIUM	cmd/rpc/web/wallet/src/app/pages/Accounts.tsx	229	// ── Change pill helper ────────────────────────────────────────────────────	COMMENT
MEDIUM	.docker/auto-update/Dockerfile.go	52	# =============================================================================	COMMENT
MEDIUM	.docker/auto-update/Dockerfile.go	54	# =============================================================================	COMMENT
MEDIUM	fsm/dex.go	115	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	fsm/dex.go	127	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	fsm/dex.go	174	// ─────────────────────────────────────────────────────────────────────────────	COMMENT

Unused Imports16 hits · 16 pts

Severity	File	Line	Context
LOW	plugin/python/contract/__init__.py	3	CODE
LOW	plugin/python/contract/__init__.py	4	CODE
LOW	plugin/python/contract/__init__.py	4	CODE
LOW	plugin/python/contract/__init__.py	5	CODE
LOW	plugin/python/contract/__init__.py	5	CODE
LOW	plugin/python/contract/__init__.py	5	CODE
LOW	plugin/python/contract/__init__.py	5	CODE
LOW	plugin/python/contract/__init__.py	5	CODE
LOW	plugin/python/contract/__init__.py	6	CODE
LOW	plugin/python/contract/plugin.py	16	CODE
LOW	plugin/python/contract/plugin.py	30	CODE
LOW	plugin/python/contract/plugin.py	30	CODE
LOW	plugin/python/contract/contract.py	10	CODE
LOW	plugin/python/contract/contract.py	10	CODE
LOW	plugin/python/contract/contract.py	15	CODE
LOW	plugin/python/contract/contract.py	15	CODE

Excessive Try-Catch Wrapping15 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	plugin/python/contract/plugin.py	80	except Exception as err:	CODE
LOW	plugin/python/contract/plugin.py	135	except Exception as err:	CODE
LOW	plugin/python/contract/plugin.py	335	except Exception as err:	CODE
LOW⚡	plugin/python/contract/plugin.py	359	except Exception as err:	CODE
LOW	plugin/python/contract/plugin.py	422	except Exception as err:	CODE
LOW	plugin/python/contract/plugin.py	439	except Exception as err:	CODE
LOW	plugin/python/contract/contract.py	128	except Exception as err:	CODE
LOW	plugin/python/contract/contract.py	140	except Exception as err:	CODE
LOW	plugin/python/contract/contract.py	217	except Exception as err:	CODE
LOW	plugin/python/contract/contract.py	242	except Exception as err:	CODE
LOW⚡	plugin/python/tutorial/rpc_test.py	504	except Exception as e:	CODE
LOW	plugin/python/tutorial/rpc_test.py	134	except Exception:	CODE
LOW	plugin/python/tutorial/rpc_test.py	392	except Exception as e:	CODE
LOW	plugin/python/tutorial/rpc_test.py	414	except Exception as e:	CODE
LOW	plugin/python/tutorial/rpc_test.py	825	except Exception as e:	CODE

Self-Referential Comments3 hits · 10 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	plugin/python/contract/plugin.py	365	# Create a new contract instance for this request	COMMENT
MEDIUM	plugin/python/tutorial/rpc_test.py	179	# Create the Any message	COMMENT
MEDIUM	plugin/python/tutorial/rpc_test.py	184	# Create the transaction without signature for signing	COMMENT

Docstring Block Structure2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	plugin/python/TUTORIAL.md	138	CheckMessageFaucet statelessly validates a 'faucet' message. This is called during mempool validation BEFO	STRING
HIGH	plugin/python/TUTORIAL.md	185	CheckMessageReward statelessly validates a 'reward' message. Rewards allow an admin to mint tokens to any	STRING

Empty Error Handlers2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	plugin/python/contract/plugin.py	153	except asyncio.CancelledError:	CODE
HIGH	plugin/python/tutorial/rpc_test.py	134	except Exception:	CODE

AI Slop Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	fsm/dex_test.go	3774	// Use randomized withdraw percentage for robust testing	COMMENT
MEDIUM	lib/plugin.go	20	// PluginCompatibleFSM: defines the 'expected' interface that plugins utilize to read and write data from the FSM store	COMMENT
MEDIUM	lib/crypto/key_batch.go	161	// leverage a batch verifier	COMMENT

Modern Structural Boilerplate4 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	plugin/python/main.py	13	logger = logging.getLogger(__name__)	CODE
LOW	plugin/python/contract/__init__.py	8	__all__ = [	CODE
LOW	plugin/python/contract/rpc.py	60	logger = logging.getLogger(__name__)	CODE
LOW	plugin/python/contract/plugin.py	41	logger = logging.getLogger(__name__)	CODE

Deep Nesting4 hits · 4 pts

Severity	File	Line	Context
LOW	plugin/python/contract/plugin.py	302	CODE
LOW	plugin/python/contract/plugin.py	362	CODE
LOW	plugin/python/contract/contract.py	273	CODE
LOW	plugin/python/tutorial/rpc_test.py	120	CODE

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	cmd/rpc/web/explorer/src/data/validatorDetail.json	72	"note": "Note: Some data is simulated for demonstration purposes",	CODE

canopy-network/canopy

Open-Source Code Quality, Security and Technical Debt Review