1.1

Adjusted Signal

1.1

Raw Pattern Score

100%

Time Factor

2026-10-29

Last Push

4.1K

Stars

JavaScript

Language

214.6K

Lines of Code

864

Files

205

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 194 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.7/100 · LOW

Are imports declared and package/API names verified? 11 finding(s).

Agent Over-Engineering Ratio 4.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 189 finding(s).

PR Review Velocity Impact 5.2/100 · LOW

Which changes need focused human review? 205 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 0MEDIUM 2LOW 201

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 205 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers189 hits · 192 pts

Severity	File	Line	Snippet	Context
LOW	server/visualization/tabular.js	29	function applyLegacyTabularOptions(rows, options = {}) {	CODE
LOW	server/visualization/spec.js	61	function normalizeVisualizationSpec(input = {}) {	CODE
LOW	server/visualization/spec.js	107	function validateVisualizationSpec(input, options = {}) {	CODE
LOW	server/visualization/filterDatasets.js	75	function filterVisualizationDatasets({	CODE
LOW	server/visualization/legacyChartToVisualization.js	182	function legacyChartToVisualization(chartValue) {	CODE
LOW	server/visualization/dateField.js	5	function getVisualizationTimeField(visualization, bindingId) {	CODE
LOW	server/visualization/dateField.js	22	function getPreferredSchemaDateField(fieldsSchema = {}) {	CODE
LOW	server/visualization/remapBindings.js	12	function remapVisualizationBindings(visualization, sourceConfigs = [], createdConfigs = []) {	CODE
LOW	server/visualization/legacyVisualizationSync.js	49	function isLegacyOwnedVisualization(visualization) {	CODE
LOW	server/visualization/compatibilityUpdates.js	164	function applyChartCompatibilityUpdate(visualization, data = {}) {	CODE
LOW	server/visualization/compatibilityUpdates.js	234	function applyCdcCompatibilityUpdate(visualization, bindingId, data = {}) {	CODE
LOW	server/visualization/compilers/chartJsCartesian.js	155	function buildAvailableSeriesMetadata(frame, visualization) {	CODE
LOW	server/tests/unit/sourceAiHarness.test.js	92	function expectDataRequestContract(sourceId, plan) {	CODE
LOW	server/tests/unit/sourceAiHarness.test.js	120	function expectChartDatasetConfigContract({ chartType, chartDatasetConfig, expected = {} }) {	CODE
LOW	server/tests/unit/sourceAiHarness.test.js	346	function setupCustomerioToolRuntime() {	CODE
LOW	server/tests/unit/sourceAiHarness.test.js	372	function setupFirestoreToolRuntime() {	CODE
LOW	server/tests/unit/sourceAiHarness.test.js	384	function setupGoogleAnalyticsToolRuntime() {	CODE
LOW	server/tests/unit/sourceAiHarness.test.js	440	function setupRealtimeDbToolRuntime() {	CODE
LOW	server/tests/unit/sourceAiHarness.test.js	446	function setupStripeOfficialToolRuntime() {	CODE
LOW	server/tests/unit/sourceAiHarness.test.js	604	function getQueryGenerationConnection(fixture) {	CODE
LOW	server/tests/unit/apiProtocol.pagination.test.js	13	function loadApiProtocolWithSafeRequest(safeRequestMock) {	CODE
LOW	server/tests/unit/projectAuthorization.test.js	41	function getProjectPermissionHandler(method, path) {	CODE
LOW	server/tests/unit/sqlProtocol.test.js	13	function requireSqlProtocolWithConnection(fakeConnection) {	CODE
LOW	…rver/tests/integration/chartRoute.publicAccess.test.js	20	function generateProjectShareToken(projectId, sharePolicyId) {	CODE
LOW	server/tests/integration/user.management.test.js	14	async function getRestrictiveForeignKeyTables(models, referencedTable) {	CODE
LOW	…r/tests/integration/sharePolicyRoute.ownership.test.js	17	async function seedPolicyOwnershipFixtures(models) {	CODE
LOW	…tests/integration/projectRoute.dashboardAccess.test.js	19	function generateProjectShareToken(projectId, sharePolicyId) {	CODE
LOW	…tests/integration/projectRoute.dashboardAccess.test.js	27	async function seedDashboardAccessFixtures(models) {	CODE
LOW	server/tests/integration/updateRunRoute.test.js	82	function createAuthorizationHeader(token) {	CODE
LOW	server/tests/integration/templateRoute.security.test.js	96	function createAuthorizationHeader(token) {	CODE
LOW	server/tests/helpers/testApp.js	52	export async function createTestAppWithUserRoutes() {	CODE
LOW	…rver/models/scripts/backfillVisualizationDateFields.js	13	function getVisualizationTimeFields(value) {	CODE
LOW	…rver/models/scripts/backfillVisualizationDateFields.js	23	async function backfillVisualizationDateFields(queryInterface, options = {}) {	CODE
LOW	server/models/scripts/migrateChartVisualization.js	136	async function migrateChartVisualization(queryInterface, options = {}) {	CODE
LOW	server/scripts/auditVisualizationMigration.js	4	async function auditVisualizationMigration() {	CODE
LOW	server/sources/runSourceDataRequest.js	5	function getSourceDataRequestRunner(connection) {	CODE
LOW	server/sources/sourceAvailability.js	57	function assertSourceServerEnabled(source, env = process.env) {	CODE
LOW	server/sources/sourceAvailability.js	67	function serializeSourceDisabledError(error) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	802	function getSubscriptionItemDiscounts(item) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	849	function applySubscriptionDiscounts(amount, subscription, snapshot) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	893	function wasSubscriptionMrrActiveAt(subscription, snapshot) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	908	function wasSubscriptionCanceledDuring(subscription, period) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	913	function getSubscriptionPositiveMrrStart(subscription) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	932	function getNewActiveCustomerMrrDuring(subscriptions, period, startingCustomerMrr) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	971	async function fetchSubscriptionsForCompiledMetric(connection, config) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	994	function calculateRecurringMetricRows(subscriptions, config, metricKey) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	1082	function calculateActiveSubscriberRows(subscriptions, config) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	1143	function calculateCustomerLifetimeValueRows(subscriptions, config) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	1167	async function calculateCustomerLifetimeValue(connection, config) {	CODE
LOW	…rces/plugins/stripeOfficial/stripeOfficial.protocol.js	1183	async function calculateRecurringCompiledMetric(connection, config, metricKey) {	CODE
LOW	server/sources/plugins/firestore/firestore.variables.js	6	function convertFirestoreVariableValue(value, binding) {	CODE
LOW	server/sources/plugins/firestore/firestore.protocol.js	62	function createFirestoreConnection(connection, dataRequestId) {	CODE
LOW	server/sources/plugins/firestore/firestore.protocol.js	107	async function mergeResponseConfiguration(dataRequest, responseData) {	CODE
LOW	server/sources/plugins/mongodb/mongodb.protocol.js	21	function getMongoConnectionOptions(options = {}) {	CODE
LOW	server/sources/plugins/jira/jira.protocol.js	242	function getDefaultDoneStatusLookup() {	CODE
LOW	server/sources/plugins/jira/jira.protocol.js	265	function addBoardDoneColumnStatuses(lookup, boardConfiguration = {}) {	CODE
LOW	server/sources/plugins/jira/jira.protocol.js	422	function transformCreatedResolvedTrend(rows, transform = {}) {	CODE
LOW	server/sources/plugins/jira/jira.protocol.js	491	function shouldDetectFieldMappings(fieldMappings = {}) {	CODE
LOW	server/sources/plugins/jira/jira.protocol.js	495	async function getBoardEstimationFieldMapping(connection, config = {}, boardConfiguration = null) {	CODE
LOW	server/sources/plugins/jira/jira.protocol.js	691	function getCreatedResolvedTrendConfigs(config = {}) {	CODE
129 more matches not shown…

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	…rver/tests/integration/chartRoute.publicAccess.test.js	159	expect(response.body.chartData.data.datasets.map((dataset) => dataset.label))	CODE
CRITICAL	server/charts/AxisChart.js	574	this.chart.chartData.data.datasets.map((dataset) => {	CODE

Fake / Example Data9 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	server/tests/unit/googleAnalyticsConnection.test.js	116	get: vi.fn().mockResolvedValue({ data: { email: "user@example.com" } }),	CODE
LOW	server/tests/unit/snapshotChannels.test.js	36	expect(getSnapshotEmailRecipients(schedule)).toEqual(["user@example.com"]);	CODE
LOW	server/tests/unit/snapshotChannels.test.js	43	customEmails: ["user@example.com"],	CODE
LOW	server/tests/unit/authHelpers.test.js	78	expect(decoded.email).toBe("admin@example.com");	CODE
LOW	server/tests/unit/jiraAi.test.js	877	displayName: "Jane Doe",	CODE
LOW	server/tests/unit/advisoryTriage.test.js	110	db.User.findOne = async () => (${failure === "missing" ? "null" : '{ id: 1, email: "user@example.com" }'});	CODE
LOW	server/tests/unit/advisoryTriage.test.js	111	UserController.prototype.update = async () => ({ id: 1, email: "user@example.com" });	CODE
LOW	server/tests/unit/advisoryTriage.test.js	158	const user = { id: 1, email: "user@example.com", password: await bcrypt.hash("old-password", 4), sessionVersion: 0 }	CODE
LOW	server/tests/helpers/authHelpers.js	45	email: "admin@example.com",	CODE

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	changeVersion.sh	3	# Check if version parameter is provided	COMMENT
LOW	.github/workflows/integration.yml	127	# Check if any test containers are left running	COMMENT

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	client/src/containers/Ai/AiModal.jsx	217	// This allows seamless reconnection when modal reopens	COMMENT

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	server/modules/ai/orchestrator/orchestrator.js	1169	- NEVER place charts in dashboards just because a dashboard was mentioned earlier	CODE

Over-Commented Block1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	server/modules/accessControl.js	501	//	COMMENT

chartbrew/chartbrew

Open-Source Code Quality, Security and Technical Debt Review