4.1

Adjusted Signal

4.1

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

5.8K

Stars

Java

Language

159.8K

Lines of Code

1.2K

Files

123

Pattern Hits

2026-10-31

Scan Date

0.03

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 84 finding(s).

Hallucinated Dependency & Supply Chain Risk 16.5/100 · LOW

Are imports declared and package/API names verified? 39 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 13.8/100 · LOW

Which changes need focused human review? 123 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 39HIGH 0MEDIUM 0LOW 84

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 123 distinct pattern matches across 2 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators39 hits · 575 pts

Severity	File	Line	Snippet	Context
CRITICAL	…main/java/io/github/duzhaokun123/hook/GalBgBlurHook.kt	89	addView(com.google.android.material.textfield.TextInputEditText(ctx).apply {	CODE
CRITICAL	…main/java/io/github/duzhaokun123/hook/GalBgBlurHook.kt	101	addView(com.google.android.material.textfield.TextInputEditText(ctx).apply {	CODE
CRITICAL	…/src/main/java/io/github/qauxv/core/HookInstaller.java	64	sAnnotatedHooks = io.github.qauxv.gen.AnnotatedFunctionHookEntryList.getAnnotatedFunctionHookEntryLi	CODE
CRITICAL	app/src/main/java/io/github/qauxv/util/HostInfo.kt	165	io.github.qauxv.util.Log.w("Overriding version code from ${hostInfo.versionCode32} to $newVersionCode")	CODE
CRITICAL	app/src/main/java/io/github/qauxv/util/Initiator.java	267	if (!android.os.Handler.Callback.class.isAssignableFrom(klass)) {	CODE
CRITICAL	…ava/io/github/qauxv/util/hookstatus/ModuleAppImpl.java	61	com.github.kyuubiran.ezxhelper.utils.Log.INSTANCE.getCurrentLogger().setLogTag("QAuxv");	CODE
CRITICAL	…c/main/java/io/github/qauxv/activity/BaseActivity.java	542	* java.lang.LinkageError: Method boolean io.github.qauxv.activity.BaseActivity.isResumed() overrides final method i	COMMENT
CRITICAL	…java/io/github/qauxv/bridge/ntapi/NtGrayTipHelper.java	60	return new com.tencent.qqnt.kernel.nativeinterface.JsonGrayElement(busiId, jsonStr, recentAbstract, false, n	CODE
CRITICAL	…java/io/github/qauxv/bridge/ntapi/NtGrayTipHelper.java	65	return new com.tencent.qqnt.kernelpublic.nativeinterface.JsonGrayElement(busiId, jsonStr, recentAbstract, fa	CODE
CRITICAL	…io/github/qauxv/bridge/kernelcompat/ContactCompat.java	51	return new com.tencent.qqnt.kernel.nativeinterface.Contact(chatType, peerUid, guildId);	CODE
CRITICAL	…io/github/qauxv/bridge/kernelcompat/ContactCompat.java	56	return new com.tencent.qqnt.kernelpublic.nativeinterface.Contact(chatType, peerUid, guildId);	CODE
CRITICAL	…n/java/io/github/qauxv/poststartup/StartupRoutine.java	64	com.github.kyuubiran.ezxhelper.utils.Log.INSTANCE.getCurrentLogger().setLogTag("QAuxv");	CODE
CRITICAL	…n/java/io/github/qauxv/poststartup/StartupRoutine.java	101	io.github.qauxv.util.Log.e("Failed to get version code from Lcooperation/qzone/QUA;->QUA:Ljava/lang/	CODE
CRITICAL	…ithub/qauxv/router/dispacher/ItemBuilderFactoryHook.kt	68	io.github.qauxv.util.Log.w("ItemBuilderFactoryHook: createMsgItem has no MsgRecord parameter, hook disab	CODE
CRITICAL	app/src/main/java/me/singleneuron/hook/SystemEmoji.kt	48	// com.tencent.mobileqq.text.EmotcationConstants.getSingleEmoji(II)I	COMMENT
CRITICAL	app/src/main/java/me/singleneuron/hook/SystemEmoji.kt	49	// com.tencent.mobileqq.text.EmotcationConstants.getDoubleEmoji(I)I	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	63	* at cooperation.vip.qqbanner.manager.VasADImmersionBannerManager.J(P:1)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	64	* at com.tencent.mobileqq.activity.recent.bannerprocessor.VasADBannerProcessor.updateBanner(P:3)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	65	* at com.tencent.mobileqq.banner.BannerManager.J(P:9)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	66	* at com.tencent.mobileqq.banner.BannerManager.a(P:19)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	67	* at com.tencent.mobileqq.banner.BannerManager.C(P:5)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	68	* at com.tencent.mobileqq.banner.BannerManager.A(P:17)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	69	* at com.tencent.mobileqq.banner.BannerManager.O(P:9)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	70	* at com.tencent.mobileqq.activity.recent.bannerprocessor.VasADBannerProcessor.i(P:3)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	71	* at com.tencent.mobileqq.activity.recent.bannerprocessor.VasADBannerProcessor.handleMessage(P:5)	COMMENT
CRITICAL⚡	app/src/main/java/me/hd/hook/DisableGrowHalfLayer.kt	72	* at com.tencent.mobileqq.utils.ay.handleMessage(P:2)	COMMENT
CRITICAL	…/src/main/java/cc/hicore/hook/UnlockLeftSlipLimit.java	76	.name(io.github.qauxv.util.HostInfo.requireRangePlayQQVersion(PlayQQVersion.PlayQQ_8_2_11, PlayQQVersion	CODE
CRITICAL	…c/main/java/cc/hicore/hook/ShowAccurateGaggedTime.java	78	if (io.github.qauxv.util.HostInfo.requireRangePlayQQVersion(PlayQQVersion.PlayQQ_8_2_11, PlayQQVersion.PlayQQ_8_	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	45	return io.github.qauxv.util.HostInfo.getHostInfo().getApplication();	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	50	return io.github.qauxv.util.HostInfo.getHostInfo().getPackageName();	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	55	return io.github.qauxv.util.HostInfo.getHostInfo().getHostName();	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	60	return io.github.qauxv.util.HostInfo.getHostInfo().getVersionName();	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	64	return io.github.qauxv.util.HostInfo.getHostInfo().getVersionCode32();	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	72	return io.github.qauxv.util.HostInfo.getHostInfo().getVersionCode();	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	76	return io.github.qauxv.util.HostInfo.isInModuleProcess();	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	84	return io.github.qauxv.util.HostInfo.isAndroidxFileProviderAvailable();	CODE
CRITICAL⚡	app/src/main/java/cc/ioctl/util/HostInfo.java	88	return io.github.qauxv.util.HostInfo.isTim();	CODE
CRITICAL	app/src/main/java/cc/ioctl/util/HostInfo.java	100	return !io.github.qauxv.util.HostInfo.isPlayQQ();	CODE
CRITICAL	app/src/main/java/cc/ioctl/util/HostInfo.java	105	return !io.github.qauxv.util.HostInfo.isTim();	CODE

Over-Commented Block84 hits · 84 pts

Severity	File	Line	Snippet	Context
LOW	…src/main/java/io/github/fusumayuki/hook/HideQQValue.kt	61	// val qqValueClass = Initiator.loadClass("com.tencent.mobileqq.vas.qqvaluecard.view.QQValuePagView;")	COMMENT
LOW	app/src/main/java/io/github/qauxv/util/SyncUtils.java	61	//*MSF -- PROC_MSF	COMMENT
LOW	app/src/main/java/io/github/qauxv/util/SyncUtils.java	81	//* qqfav	COMMENT
LOW	app/src/main/java/io/github/qauxv/util/Initiator.java	581	}	COMMENT
LOW	app/src/main/java/io/github/qauxv/util/ArscKit.java	81	// The 'data' holds a complex number encoding a dimension value,	COMMENT
LOW	…xv/util/hookimpl/LibXposedNewApiByteCodeGenerator.java	181	List.of(typeBeforeHookCallback, "I"), typeInvocationParamWrapper)));	COMMENT
LOW	…n/java/io/github/qauxv/util/soloader/NativeLoader.java	61	// There are two logical native libraries in QAuxiliary:	COMMENT
LOW	…src/main/java/io/github/qauxv/util/dexkit/DexFlow.java	401	//struct DexCode {	COMMENT
LOW	…c/main/java/cc/microblock/hook/DumpTelegramStickers.kt	341		COMMENT
LOW	app/src/main/java/cc/ioctl/util/BinaryXmlParser.java	241	// The 'data' holds an attribute resource identifier.	COMMENT
LOW	app/src/main/java/cc/ioctl/util/BinaryXmlParser.java	281	// TYPE_DIMENSION: Value is Device Independent Pixels.	COMMENT
LOW	…ain/java/cc/ioctl/hook/msg/Ipv6LinkSpanMitigation.java	61	@Override	COMMENT
LOW	…ain/java/cc/ioctl/hook/msg/Ipv6LinkSpanMitigation.java	101	hostWithPort = body.substring(0, body.indexOf("/"));	COMMENT
LOW	…ain/java/cc/ioctl/hook/msg/Ipv6LinkSpanMitigation.java	121	// targetField = f;	COMMENT
LOW	app/src/main/java/cc/ioctl/hook/msg/CopyCardMsg.kt	101	}	COMMENT
LOW	app/src/main/cpp/misc/md5.cpp	1	//	COMMENT
LOW	app/src/main/cpp/misc/md5.cpp	21	#define S34 23	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	101	enum JNICallType jni_call_type);	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	141	// True if native library paths are valid and is for an ABI that is supported by native bridge.	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	161	// Create new namespace in which native libraries will be loaded.	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	201		COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	221	// Starting with v3, NativeBridge has two scenarios: with/without namespace.	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	241	// Parameters:	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	261		COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	281	// runtime.	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	301	// Returns:	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	321	// cannot identify the caller of dlopen/dlsym which happens for the code not loaded	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	341	// default_library_path [IN] the second set of library search path of the namespace.	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	361	// from [IN] the namespace where libraries are accessed.	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	381	// Returns:	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	401	// android_get_exported_namespace(const char*) function.	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	421	// jni_call_type [IN] the type of JNI call	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	441	uint32_t len,	COMMENT
LOW	app/src/main/cpp/nativebridge/native_bridge.h	461	// Returns:	COMMENT
LOW	app/src/main/cpp/utils/shared_memory.cpp	1	//	COMMENT
LOW	app/src/main/cpp/utils/shared_memory.cpp	21	#define ASHMEM_WAS_PURGED 1	COMMENT
LOW	app/src/main/cpp/utils/ConfigManager.h	1	//	COMMENT
LOW	app/src/main/cpp/utils/JniUtils.h	1	// QAuxiliary - An Xposed module for QQ/TIM	COMMENT
LOW	app/src/main/cpp/utils/byte_array_output_stream.h	1	//	COMMENT
LOW	app/src/main/cpp/utils/arch_utils.h	1	//	COMMENT
LOW	app/src/main/cpp/utils/ElfView.cpp	1	//	COMMENT
LOW	app/src/main/cpp/utils/FileMemMap.cpp	1	//	COMMENT
LOW	app/src/main/cpp/utils/ElfView.h	1	//	COMMENT
LOW	app/src/main/cpp/utils/ProcessView.cpp	1	//	COMMENT
LOW	app/src/main/cpp/utils/MemoryBuffer.h	1	// QAuxiliary - An Xposed module for QQ/TIM	COMMENT
LOW	app/src/main/cpp/utils/AobScanUtils.h	1	//	COMMENT
LOW	app/src/main/cpp/utils/TextUtils.h	1	// QAuxiliary - An Xposed module for QQ/TIM	COMMENT
LOW	app/src/main/cpp/utils/MemoryUtils.h	1	// QAuxiliary - An Xposed module for QQ/TIM	COMMENT
LOW	app/src/main/cpp/qauxv_core/Natives.h	1	/* DO NOT EDIT THIS FILE - it is machine generated */	COMMENT
LOW	app/src/main/cpp/qauxv_core/Natives.h	21	#define io_github_qauxv_util_Natives_RTLD_GLOBAL 256L	COMMENT
LOW	app/src/main/cpp/qauxv_core/NativeCoreBridge.h	1	// QAuxiliary - An Xposed module for QQ/TIM	COMMENT
LOW	app/src/main/cpp/qauxv_core/NativeCoreBridge.h	21	//	COMMENT
LOW	app/src/main/cpp/qauxv_core/Natives.cpp	1	#include <cerrno>	COMMENT
LOW	libs/mmkv/CMakeLists.txt	21	)	COMMENT
LOW	…silk/silk-v3-decoder/silk/interface/SKP_Silk_typedef.h	41	#ifdef __GNUC__	COMMENT
LOW	…silk/silk-v3-decoder/silk/interface/SKP_Silk_typedef.h	61		COMMENT
LOW	…silk/silk-v3-decoder/silk/interface/SKP_Silk_typedef.h	81	#define SKP_int32_MIN ((SKP_int32)0x80000000) /* -2^31 = -2147483648*/	COMMENT
LOW	…silk/silk-v3-decoder/silk/interface/SKP_Silk_typedef.h	101	# define SKP_assert(COND) _ASSERTE(COND)	COMMENT
LOW	…3-decoder/silk/src/SKP_Silk_common_pitch_est_defines.h	41	#define PITCH_EST_MAX_FRAME_LENGTH (PITCH_EST_FRAME_LENGTH_MS * PITCH_EST_MAX_FS_KHZ)	COMMENT
LOW	libs/silk/silk-v3-decoder/silk/src/SKP_Silk_macros.h	41		COMMENT
24 more matches not shown…

cinit/QAuxiliary

Open-Source Code Quality, Security and Technical Debt Review