0.9

Adjusted Signal

0.9

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

3.5K

Stars

JavaScript

Language

476.8K

Lines of Code

1.7K

Files

339

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 125 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.3/100 · LOW

Are imports declared and package/API names verified? 192 finding(s).

Agent Over-Engineering Ratio 1.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 77 finding(s).

PR Review Velocity Impact 4.3/100 · LOW

Which changes need focused human review? 339 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 2MEDIUM 25LOW 310

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 339 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Fake / Example Data188 hits · 188 pts

Severity	File	Line	Snippet	Context
LOW	frontend/utils/__tests__/inboxTokens.test.ts	24	splitInboxTokens('x +"Birthday party Saturday 3pm" @"John Doe"')	CODE
LOW	frontend/utils/__tests__/inboxTokens.test.ts	29	{ text: '@"John Doe"', kind: 'person' },	CODE
LOW	frontend/__tests__/Layout.test.tsx	127	currentUser={{ email: 'user@example.com' } as any}	CODE
LOW	frontend/__tests__/Layout.test.tsx	218	currentUser={{ email: 'user@example.com' } as any}	CODE
LOW	backend/tests/unit/modules/oidc/auditService.test.js	176	'user@example.com',	CODE
LOW	backend/tests/unit/modules/oidc/service.test.js	180	email: 'user@example.com',	CODE
LOW	backend/tests/unit/modules/oidc/service.test.js	195	expect(result.claims.email).toBe('user@example.com');	CODE
LOW	backend/tests/unit/modules/oidc/service.test.js	229	claims: () => ({ sub: 'user-sub-123', email: 'user@example.com' }),	CODE
LOW	backend/tests/unit/modules/oidc/service.test.js	243	expect(result.claims.email).toBe('user@example.com');	CODE
LOW	backend/tests/unit/services/waitlistService.test.js	26	'someone@example.org',	CODE
LOW	backend/tests/unit/services/rolesCapabilities.test.js	9	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/unit/services/userService.test.js	9	expect(validateEmail('user@example.com')).toBe(true);	CODE
LOW	backend/tests/unit/services/userService.test.js	11	expect(validateEmail('user+tag@example.org')).toBe(true);	CODE
LOW	backend/tests/integration/people-unified.test.js	36	email: 'admin@example.com',	CODE
LOW	backend/tests/integration/people-unified.test.js	62	phone: '555-0100',	CODE
LOW	backend/tests/integration/people-unified.test.js	183	phone: '555-0199',	CODE
LOW	backend/tests/integration/people-unified.test.js	199	expect(entry.phone).toBe('555-0100');	CODE
LOW	backend/tests/integration/people-unified.test.js	233	expect(res.body.phone).toBe('555-0100');	CODE
LOW	backend/tests/integration/people-unified.test.js	240	await kidPerson.update({ phone: '555-0199', notes: 'kid notes' });	CODE
LOW	backend/tests/integration/people-unified.test.js	312	.send({ phone: '555-0111' });	CODE
LOW	backend/tests/integration/member-sign-in-link.test.js	54	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/user-create-script.test.js	47	'admin@example.com',	CODE
LOW	backend/tests/integration/first-time-setup.test.js	13	email: 'admin@example.com',	CODE
LOW	backend/tests/integration/first-time-setup.test.js	27	email: 'user@example.com',	CODE
LOW	backend/tests/integration/first-time-setup.test.js	50	email: 'admin@example.com',	CODE
LOW	…nd/tests/integration/user-management-hardening.test.js	25	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	…nd/tests/integration/user-management-hardening.test.js	215	email: 'admin@example.com',	CODE
LOW	backend/tests/integration/admin-users-no-email.test.js	42	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/admin-users-no-email.test.js	177	expect(users['admin@example.com'].account_status).toBe('active');	CODE
LOW	backend/tests/integration/people-assignable.test.js	181	phone: '555-0100',	CODE
LOW	backend/tests/integration/people-assignable.test.js	222	{ phone: '555-0100', notes: 'private note' },	CODE
LOW	backend/tests/integration/roles-capabilities.test.js	20	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/roles-capabilities.test.js	182	expect(byEmail['admin@example.com'].role).toBe('admin');	CODE
LOW	backend/tests/integration/admin-users-cascade.test.js	36	adminUser = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/admin-users-cascade.test.js	37	adminAgent = await loginAgent('admin@example.com');	CODE
LOW	backend/tests/integration/groups-admin.test.js	23	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/groups-admin.test.js	27	adminAgent = await loginAgent('admin@example.com');	CODE
LOW	backend/tests/integration/groups-admin.test.js	268	expect(JSON.stringify(res.body)).not.toContain('admin@example.com');	CODE
LOW	…nd/tests/integration/user-management-integrity.test.js	48	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/admin-users.test.js	24	adminUser = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/admin-users.test.js	25	adminAgent = await loginAgent('admin@example.com');	CODE
LOW	backend/tests/integration/admin-users.test.js	39	const user = await createTestUser({ email: 'user@example.com' });	CODE
LOW	backend/tests/integration/admin-users.test.js	40	const agent = await loginAgent('user@example.com');	CODE
LOW	backend/tests/integration/admin-users.test.js	52	const found = res.body.find((u) => u.email === 'admin@example.com');	CODE
LOW	backend/tests/integration/admin-users.test.js	73	expect(byEmail('admin@example.com').email_verified).toBe(true);	CODE
LOW	backend/tests/integration/members.test.js	33	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/members.test.js	313	phone: '555-0100',	CODE
LOW	backend/tests/integration/members.test.js	372	expect(person.phone).toBe('555-0100');	CODE
LOW	backend/tests/integration/admin-oidc-config.test.js	47	adminUser = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/tests/integration/admin-oidc-config.test.js	48	adminAgent = await loginAgent('admin@example.com');	CODE
LOW	backend/tests/integration/admin-oidc-config.test.js	72	await createTestUser({ email: 'user@example.com' });	CODE
LOW	backend/tests/integration/admin-oidc-config.test.js	73	const agent = await loginAgent('user@example.com');	CODE
LOW	backend/tests/integration/mcp/mcp-roles.test.js	63	admin = await createTestUser({ email: 'admin@example.com' });	CODE
LOW	backend/docs/swagger/auth.js	77	* example: "user@example.com"	COMMENT
LOW	backend/modules/landing/locales/sl/landing.json	318	"placeholder": "vi@email.com",	CODE
LOW	backend/modules/landing/locales/sk/landing.json	370	"placeholder": "vy@email.com",	CODE
LOW	backend/modules/landing/locales/pl/landing.json	318	"placeholder": "ty@email.com",	CODE
LOW	backend/modules/landing/locales/vi/landing.json	318	"placeholder": "ban@email.com",	CODE
LOW	backend/modules/landing/locales/sv/landing.json	318	"placeholder": "du@email.com",	CODE
LOW	backend/modules/landing/locales/da/landing.json	318	"placeholder": "dig@email.com",	CODE
128 more matches not shown…

Decorative Section Separators22 hits · 66 pts

Severity	File	Line	Snippet	Context
MEDIUM	frontend/components/Inbox/InboxItems.tsx	216	// ── Item handlers ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Inbox/InboxItemDetail.tsx	129	// ── Parsing helpers ───────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Inbox/InboxItemDetail.tsx	256	// ── Derived values ────────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Inbox/InboxItemDetail.tsx	269	// ── Inline text segment renderer ──────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Inbox/InboxItemDetail.tsx	393	// ── Conversion helpers ────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Inbox/InboxItemDetail.tsx	593	// ── Edit-mode footer ──────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Inbox/InboxItemDetail.tsx	644	// ── Render ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Eisenhower/EisenhowerMatrix.tsx	156	// ── Drag handlers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Eisenhower/EisenhowerMatrix.tsx	206	// ── Config ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Eisenhower/EisenhowerMatrix.tsx	260	// ── Cell renderer ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/Eisenhower/EisenhowerMatrix.tsx	337	// ── Render ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/components/AI/TaskAIInsights.tsx	293	// ── Expanded ───────────────────────────────────────────────────────	COMMENT
MEDIUM	public/sw.js	33	// ─── Install ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	public/sw.js	46	// ─── Activate ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	public/sw.js	61	// ─── Message handler ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	public/sw.js	96	// ─── Fetch ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	public/sw.js	154	// ─── API GET: network-first, stale cache fallback ────────────────────────────	COMMENT
MEDIUM	public/sw.js	203	// ─── API calls that are never queued (stateless, nothing to replay) ──────────	COMMENT
MEDIUM	public/sw.js	219	// ─── API Mutations: queue when offline, replay on sync ───────────────────────	COMMENT
MEDIUM	public/sw.js	276	// ─── Background Sync ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	public/sw.js	351	// ─── Push notifications ──────────────────────────────────────────────────────	COMMENT
MEDIUM	public/sw.js	448	// ─── IndexedDB helpers ───────────────────────────────────────────────────────	COMMENT

Hyper-Verbose Identifiers55 hits · 55 pts

Severity	File	Line	Snippet	Context
LOW	frontend/utils/bannersService.ts	12	export function extractCreatorFromFilename(filename: string): string {	CODE
LOW	frontend/components/Task/CommentComposer.tsx	64	function findMentionTriggerInEditor(	CODE
LOW	backend/config/authConfig.js	7	async function validateAuthConfiguration() {	CODE
LOW	backend/tests/helpers/caldav-test-utils.js	3	function extendSupertestWithCalDAV(Test) {	CODE
LOW	backend/utils/notificationPreferences.js	93	function shouldSendInAppNotification(user, notificationType) {	CODE
LOW	backend/utils/notificationPreferences.js	120	function shouldSendTelegramNotification(user, notificationType) {	CODE
LOW	backend/utils/notificationPreferences.js	144	function shouldSendPushNotification(user, notificationType) {	CODE
LOW	backend/utils/notificationPreferences.js	161	function shouldSendAppriseNotification(user, notificationType) {	CODE
LOW	backend/utils/notificationPreferences.js	210	function getDefaultNotificationPreferences() {	CODE
LOW	backend/utils/notificationPreferences.js	220	function ensureNotificationPreferences(preferences) {	CODE
LOW	backend/utils/timezone-utils.js	170	function processDueDateForResponse(utcDueDate, userTimezone) {	CODE
LOW	backend/utils/timezone-utils.js	182	function processDeferUntilForStorage(deferUntilString, userTimezone) {	CODE
LOW	backend/utils/timezone-utils.js	200	function processDeferUntilForResponse(utcDeferUntil, userTimezone) {	CODE
LOW	backend/utils/db-dialect.js	26	async function withForeignKeyChecksDisabled(sequelize, fn, options = {}) {	CODE
LOW	backend/scripts/lib/dialectGuard.js	13	function guardAgainstAccidentalDialectSwitch(dialect) {	CODE
LOW	backend/modules/comments/service.js	49	async function resolveMentionedPeopleMap(uids) {	CODE
LOW	backend/modules/tasks/deferredTaskService.js	171	async function sendBatchedDeferredTelegramMessage(user, items) {	CODE
LOW	backend/modules/tasks/dueTaskService.js	203	async function sendBatchedTaskTelegramMessage(	CODE
LOW	backend/modules/tasks/dueTaskService.js	257	function generateNotificationContent(taskName, dueDate, now, isOverdue) {	CODE
LOW	backend/modules/tasks/queries/metrics-queries.js	40	async function countTasksPendingOverMonth(visibleTasksWhere) {	CODE
LOW	backend/modules/tasks/queries/metrics-queries.js	361	async function fetchSomedayExcludedTaskIds(userId) {	CODE
LOW	backend/modules/tasks/queries/metrics-queries.js	464	async function fetchSomedayFallbackTasks(	CODE
LOW	backend/modules/tasks/queries/query-builders.js	516	function getTaskIncludeConfigLight() {	CODE
LOW	backend/modules/tasks/utils/validation.js	109	function validateDeferUntilAndDueDate(	CODE
LOW	backend/modules/tasks/utils/validation.js	256	async function getRecurringParentEndDate(recurringParentId, userId) {	CODE
LOW	backend/modules/tasks/operations/parent-child.js	6	async function checkAndUpdateParentTaskCompletion(parentTaskId, userId) {	CODE
LOW	backend/modules/tasks/operations/parent-child.js	156	async function handleParentChildOnStatusChange(	CODE
LOW	backend/modules/projects/dueProjectService.js	203	async function sendBatchedProjectTelegramMessage(	CODE
LOW	backend/modules/projects/dueProjectService.js	257	function generateNotificationContent(projectName, dueDate, now, isOverdue) {	CODE
LOW	backend/modules/spreadsheets/core/zipGuard.js	36	function findEndOfCentralDirectory(buffer) {	CODE
LOW	backend/modules/admin/validation.js	159	function validateToggleRegistration(body) {	CODE
LOW	backend/modules/mcp/tools/projectTools.js	80	function assertNotGoalAndMaintenance(params, goalId) {	CODE
LOW	backend/modules/mcp/tools/tagResolver.js	26	async function resolveTagsForTransaction(tagsInput, userId, transaction) {	CODE
LOW	backend/modules/telegram/telegramInitializer.js	6	async function initializeTelegramPolling() {	CODE
LOW	backend/modules/telegram/telegramNotificationService.js	24	function formatNotificationMessage(user, notification) {	CODE
LOW	backend/modules/ai-assistant/service.js	209	function isResponseFormatRejection(err) {	CODE
LOW	backend/modules/ai-assistant/service.js	228	function swapToMaxCompletionTokens(params) {	CODE
LOW	backend/modules/ai-assistant/service.js	627	async function updateTaskInsightsDismissed(taskUid, userId, dismissed) {	CODE
LOW	backend/modules/ai-assistant/service.js	846	async function updateProjectInsightsDismissed(projectUid, userId, dismissed) {	CODE
LOW	backend/modules/caldav/webdav/projects.js	142	async function handleCalendarHomePropfind(req, res) {	CODE
LOW	backend/modules/caldav/webdav/report.js	175	async function buildCalendarQueryResponse(	CODE
LOW	backend/modules/caldav/icalendar/vtodo-serializer.js	241	async function serializeCollectionToVCALENDAR(tasks, options = {}) {	CODE
LOW	backend/modules/daily-plan/planningSettings.js	55	function normalizeSuggestionSettings(planning) {	CODE
LOW	backend/modules/billing/subscriptionMapper.js	19	function subscriptionToAccountFields(sub) {	CODE
LOW	backend/modules/billing/subscriptionMapper.js	43	function deletedSubscriptionFields(sub) {	CODE
LOW	backend/modules/billing/providers/paddle.js	101	function subscriptionToAccountFields(sub) {	CODE
LOW	backend/modules/billing/providers/lemonsqueezy.js	85	function subscriptionToAccountFields(resource) {	CODE
LOW	backend/services/rolesService.js	167	async function assertAnotherAdminRemains(transaction, message) {	CODE
LOW	backend/services/permissionSources.js	67	async function countDistinctUsersByResource(resourceType, resourceUids) {	CODE
LOW	backend/services/containerShareSync.js	110	async function syncProjectSharesFromContainer(projectId) {	CODE
LOW	backend/services/containerShareSync.js	337	async function dropProjectSharesFromContainer(projectId, from = null) {	CODE
LOW	backend/services/backupService.js	94	function checkVersionCompatibility(backupVersion) {	CODE
LOW	backend/services/permissionsService.js	277	async function ownershipOrPermissionWhere(resourceType, userId, cache = null) {	CODE
LOW	backend/services/permissionsCalculators.js	14	async function collectProjectDescendants(projectId) {	CODE
LOW	backend/services/accountErasureService.js	86	async function handOverTasksInOthersProjects(userId, transaction) {	CODE

Structural Annotation Overuse31 hits · 53 pts

Severity	File	Line	Snippet	Context
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	269	// Step 1: Verify no tags exist	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	274	// Step 2: Create inbox item	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	281	// Step 3: Retrieve inbox items	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	287	// Step 4: Update inbox item	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	294	// Step 5: Process inbox item	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	301	// Step 6: Verify processed item is not in main inbox list	COMMENT
LOW	backend/scripts/reset-and-seed.js	34	// Step 1: Delete existing database	COMMENT
LOW⚡	backend/scripts/reset-and-seed.js	48	// Step 2: Reset database using sequelize.sync	COMMENT
LOW⚡	backend/scripts/reset-and-seed.js	53	// Step 3: Seed basic development data	COMMENT
LOW⚡	backend/scripts/reset-and-seed.js	59	// Step 4: Generate notifications	COMMENT
LOW	docs/14-mcp-integration.md	1197	### Step 1: Generate an API Token	COMMENT
LOW	docs/14-mcp-integration.md	1204	### Step 2: Configure Claude Desktop	COMMENT
LOW	docs/development-workflow.md	185	### Step 1: Create Database Migration	COMMENT
LOW	docs/development-workflow.md	216	### Step 2: Update Sequelize Model	COMMENT
LOW	docs/development-workflow.md	236	### Step 3: Update Serializer (API Response)	COMMENT
LOW	docs/development-workflow.md	250	### Step 4: Update Builder (API Input)	COMMENT
LOW	docs/development-workflow.md	266	### Step 5: Add Validation (Optional)	COMMENT
LOW	docs/development-workflow.md	290	### Step 6: Update Swagger Documentation	COMMENT
LOW	docs/development-workflow.md	314	### Step 7: Update Frontend TypeScript Interface	COMMENT
LOW	docs/development-workflow.md	326	### Step 8: Update Frontend Component	COMMENT
LOW	docs/development-workflow.md	349	### Step 9: Write Tests	COMMENT
LOW	docs/development-workflow.md	380	### Step 10: Run Tests and Checks	COMMENT
LOW	docs/development-workflow.md	396	### Step 11: Commit Changes	COMMENT
LOW	docs/backend-patterns.md	426	### Step 1: Create Directory Structure	COMMENT
LOW	docs/backend-patterns.md	433	### Step 2: Create routes.js	COMMENT
LOW	docs/backend-patterns.md	480	### Step 3: Create repository.js	COMMENT
LOW	docs/backend-patterns.md	535	### Step 4: Create Model	COMMENT
LOW	docs/backend-patterns.md	539	### Step 5: Register Routes in app.js	COMMENT
LOW	docs/backend-patterns.md	551	### Step 6: Add Swagger Documentation	COMMENT
LOW	docs/backend-patterns.md	574	### Step 7: Write Tests	COMMENT
LOW	docs/backend-patterns.md	627	### Step 8: Create Frontend Integration (Optional)	COMMENT

Over-Commented Block24 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	tailwind.config.js	41	plugins: [],	COMMENT
LOW	tailwind.config.js	61	// text: {	COMMENT
LOW	frontend/components/Project/projectTableLayout.ts	1	// Column tracks shared by the projects table header and its rows. Cells that	COMMENT
LOW	frontend/components/Task/taskSheet.ts	1	// "Quiet sheet" task lists: rows sit on one shared surface instead of	COMMENT
LOW	backend/app.js	281	// Counts page views for the admin dashboard. Before the host switches so the	COMMENT
LOW	backend/middleware/uploadsAccess.js	121	raw: true,	COMMENT
LOW	backend/tests/upgrade/schema-parity.test.js	1	// Guards against drift between the three ways a tududi schema comes to exist:	COMMENT
LOW	backend/scripts/migration-create.js	41	// - no PRAGMA, sqlite_master, AUTOINCREMENT or backtick identifiers	COMMENT
LOW	backend/scripts/migration-create.js	61	// autoIncrement: true,	COMMENT
LOW	backend/modules/ai-assistant/service.js	21	6: 'planned',	COMMENT
LOW	backend/modules/daily-plan/ranking.js	1	'use strict';	COMMENT
LOW	backend/modules/billing/providers/index.js	1	'use strict';	COMMENT
LOW	backend/modules/billing/providers/index.js	21	// open the overlay instead of a url)	COMMENT
LOW	backend/services/userDataTransfer.js	1	'use strict';	COMMENT
LOW	docs/development-workflow.md	61		COMMENT
LOW	docs/examples/docker-compose.postgres.yml	1	# Tududi with PostgreSQL	COMMENT
LOW	docs/examples/docker-compose.hosted.yml	1	# tududi as a hosted, multi-user service on one machine.	COMMENT
LOW	docs/examples/docker-compose.hosted.yml	101	# APP_DOMAIN=app.example.com	COMMENT
LOW	public/sw.js	1	// v2: manifest.json gained a share_target member, and the static cache is	COMMENT
LOW	scripts/release-notes.sh	1	#!/bin/bash	COMMENT
LOW	scripts/create-version.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/test-upgrade-docker.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/codeql-config.yml	1	name: "CodeQL Config"	COMMENT
LOW	.github/workflows/docker-publish.yml	1	name: Publish Docker image	COMMENT

Verbosity Indicators10 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	269	// Step 1: Verify no tags exist	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	274	// Step 2: Create inbox item	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	281	// Step 3: Retrieve inbox items	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	287	// Step 4: Update inbox item	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	294	// Step 5: Process inbox item	COMMENT
LOW⚡	backend/tests/integration/inbox-no-tags.test.js	301	// Step 6: Verify processed item is not in main inbox list	COMMENT
LOW	backend/scripts/reset-and-seed.js	34	// Step 1: Delete existing database	COMMENT
LOW⚡	backend/scripts/reset-and-seed.js	48	// Step 2: Reset database using sequelize.sync	COMMENT
LOW⚡	backend/scripts/reset-and-seed.js	53	// Step 3: Seed basic development data	COMMENT
LOW⚡	backend/scripts/reset-and-seed.js	59	// Step 4: Generate notifications	COMMENT

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	backend/tests/unit/utils/migration-utils.test.js	232	const calls = queryInterface.sequelize.query.mock.calls.map(	CODE
CRITICAL	backend/tests/unit/utils/migration-utils.test.js	332	const calls = queryInterface.sequelize.query.mock.calls.map(	CODE

Magic Placeholder Names2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	README.md	310	curl -H "Authorization: Bearer YOUR_API_KEY" \	CODE
HIGH	README.md	315	-H "Authorization: Bearer YOUR_API_KEY" \	CODE

AI Slop Vocabulary2 hits · 5 pts

Severity	File	Line	Snippet	Context
MEDIUM	package-lock.json	20049	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE
MEDIUM	.github/codeql-config.yml	15	# but the implementation is secure and follows OWASP best practices.	COMMENT

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	scripts/docker-entrypoint.sh	14	# Check if app user exists first	COMMENT
LOW	e2e/bin/run-e2e.sh	27	# Check if Playwright is installed	COMMENT

Modern AI Meta-Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	CLAUDE.md	73	npm run migration:create # scaffold a new migration	CODE

chrisvel/tududi

Open-Source Code Quality, Security and Technical Debt Review