3.5

Adjusted Signal

3.5

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

9.1K

Stars

C++

Language

669.4K

Lines of Code

2.5K

Files

2.1K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 14.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 2019 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.8/100 · LOW

Are imports declared and package/API names verified? 60 finding(s).

Agent Over-Engineering Ratio 2.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 284 finding(s).

PR Review Velocity Impact 16.1/100 · LOW

Which changes need focused human review? 2137 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 4HIGH 18MEDIUM 44LOW 2071

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2137 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1688 hits · 1621 pts

Severity	File	Line	Snippet	Context
LOW	tools/clang-tidy/unsafe-continuation-capture.h	1	#pragma once	COMMENT
LOW	tools/clang-tidy/unsafe-continuation-capture.h	21	// - `kj::Weak<T>` / `kj::WeakRc<T>` / `workerd::WeakRef<T>` /	COMMENT
LOW	tools/clang-tidy/promise-ignore-result.h	1	#pragma once	COMMENT
LOW	tools/clang-tidy/legacy-stream-alloc.h	1	// Copyright (c) 2017-2026 Cloudflare, Inc.	COMMENT
LOW	tools/clang-tidy/coroutine-hostile-raii.h	1	//===----------------------------------------------------------------------===//	COMMENT
LOW	tools/clang-tidy/visit-for-gc.h	1	// Copyright (c) 2017-2022 Cloudflare, Inc.	COMMENT
LOW	tools/clang-tidy/visit-for-gc.h	21	//	COMMENT
LOW	tools/unix/apply-big-move.sh	1	#! /bin/bash	COMMENT
LOW	types/generated-snapshot/index.ts	16301	// Project-specific parameters used to inform types.	COMMENT
LOW	types/generated-snapshot/index.ts	17641	\| Exception	COMMENT
LOW	types/generated-snapshot/index.d.ts	16161	readonly broker: string;	COMMENT
LOW	types/generated-snapshot/index.d.ts	16341	// Type for method return or property on an RPC interface.	COMMENT
LOW	types/generated-snapshot/index.d.ts	16381	// Type of `env`.	COMMENT
LOW	types/generated-snapshot/index.d.ts	16401	// // thus should behave as Durable Object namsepace bindings.	COMMENT
LOW	types/generated-snapshot/index.d.ts	17741	\| Return	COMMENT
LOW	types/generated-snapshot/experimental/index.ts	16441	readonly clientId: string;	COMMENT
LOW	types/generated-snapshot/experimental/index.ts	16661	//	COMMENT
LOW	types/generated-snapshot/experimental/index.d.ts	16521	// itself.	COMMENT
LOW	types/generated-snapshot/experimental/index.d.ts	16701	[I in keyof A]: Unstubify<A[I]>;	COMMENT
LOW	types/generated-snapshot/experimental/index.d.ts	16741	[K in keyof T]: MethodOrProperty<T[K]>;	COMMENT
LOW	types/generated-snapshot/experimental/index.d.ts	16761	// interface GlobalProps {	COMMENT
LOW	types/defines/trace.d.ts	221	\| Log	COMMENT
LOW	types/defines/pubsub.d.ts	1	// PubSubMessage represents an incoming PubSub message.	COMMENT
LOW	types/defines/rpc.d.ts	121	// Utility type for adding `Provider`/`Disposable`s to `object` types only.	COMMENT
LOW	types/defines/rpc.d.ts	181	//	COMMENT
LOW	types/defines/disposable.d.ts	1	// `Disposable` was added to TypeScript's standard lib types in version 5.2.	COMMENT
LOW	types/src/transforms/import-resolve.ts	1	// Copyright (c) 2022-2023 Cloudflare, Inc.	COMMENT
LOW	types/src/transforms/import-resolve.ts	21	//	COMMENT
LOW	types/src/transforms/import-resolve.ts	41	// const _default: {	COMMENT
LOW	types/src/transforms/iterators.ts	1	// Copyright (c) 2022-2023 Cloudflare, Inc.	COMMENT
LOW	types/src/transforms/iterators.ts	21	// export interface ThingIteratorNext {	COMMENT
LOW	types/src/transforms/importable.ts	1	// Copyright (c) 2022-2023 Cloudflare, Inc.	COMMENT
LOW	types/src/transforms/ambient.ts	1	// Copyright (c) 2022-2023 Cloudflare, Inc.	COMMENT
LOW	types/src/transforms/globals.ts	21	// constructor();	COMMENT
LOW	types/src/transforms/internal-namespace.ts	1	// Copyright (c) 2022-2023 Cloudflare, Inc.	COMMENT
LOW	types/src/transforms/internal-namespace.ts	21	// readonly property: boolean;	COMMENT
LOW	types/src/transforms/internal-namespace.ts	41	// function bindStore(store: AsyncLocalStorage, ...): void;	COMMENT
LOW	types/src/transforms/overrides/index.ts	21	// `compileOverridesDefines()` must be used to compile overrides and defines	COMMENT
LOW	types/src/transforms/overrides/index.ts	41	// get(key: string, type: "text"): Promise<string \| null>;	COMMENT
LOW	types/src/transforms/overrides/compiler.ts	21	): [compiled: string, isReplacement: boolean] {	COMMENT
LOW	samples/tcp/gopher.js	1	// Copyright (c) 2022-2023 Cloudflare, Inc.	COMMENT
LOW	…les/nodejs-compat-fs-graceful/graceful-fs/polyfills.js	321	if (stats.uid < 0) stats.uid += 0x100000000	COMMENT
LOW	samples/durable-objects-chat/chat.js	1	// Copyright (c) 2022-2023 Cloudflare, Inc.	COMMENT
LOW	samples/durable-objects-chat/chat.js	21	// exporting a new handler that call into the other Workers as appropriate.	COMMENT
LOW	samples/durable-objects-chat/chat.js	41	//	COMMENT
LOW	samples/durable-objects-chat/chat.js	61	// in .html should be uploaded as "Data", equivalent to content-type `application/octet-stream`.	COMMENT
LOW	samples/durable-objects-chat/chat.js	141	// "anyone with the link can access" sharing. Additionally, IDs generated this way have	COMMENT
LOW	samples/durable-objects-chat/chat.js	181	}	COMMENT
LOW	samples/durable-objects-chat/chat.js	441	// =======================================================================================	COMMENT
LOW	samples/durable-objects-chat/chat.js	521	// we have to provide a dummy URL that will be ignored at the other end anyway.	COMMENT
LOW	deps/rust/Cargo.toml	81	ring = { version = "0.17", default-features = false }	COMMENT
LOW	deps/rust/Cargo.toml	101	# temporal_rs 0.2.6 accepts icu_calendar 2.3, but Chromium builds it with 2.2.1; this pin keeps	COMMENT
LOW	npm/lib/node-platform.ts	141	//	COMMENT
LOW	npm/lib/node-install.ts	181	else fs.unlinkSync(entryPath);	COMMENT
LOW	npm/lib/node-install.ts	201	// Docker. Avoid idempotency issues by just not optimizing when using Yarn.	COMMENT
LOW	npm/lib/node-shim.ts	1	#!/usr/bin/env node	COMMENT
LOW	src/bench/streams/strategies/main.js	1	// Copyright (c) 2026 Cloudflare, Inc.	COMMENT
LOW	src/bench/streams/encoding/decoder.js	1	// Copyright (c) 2026 Cloudflare, Inc.	COMMENT
LOW	src/workerd/util/sqlite-metadata.h	1	// Copyright (c) 2024 Cloudflare, Inc.	COMMENT
LOW	src/workerd/util/string-buffer.h	1	// Copyright (c) 2023 Cloudflare, Inc.	COMMENT
1628 more matches not shown…

Hyper-Verbose Identifiers224 hits · 234 pts

Severity	File	Line	Snippet	Context
LOW	types/test/generator/index.spec.ts	21	function initAsReferencableTypesGroup(	CODE
LOW	types/test/transforms/overrides/index.spec.ts	19	function printDefinitionsWithOverrides(root: StructureGroups): string {	CODE
LOW	types/src/generator/structure.ts	50	function createIteratorMethodPartial(	CODE
LOW	types/src/generator/structure.ts	67	function createInstancePropertyPartial(	CODE
LOW	types/src/generator/structure.ts	149	function createInterfaceMemberNode(	CODE
LOW	types/src/generator/structure.ts	221	function createIteratorInterfaceMemberNode(	CODE
LOW	types/src/generator/structure.ts	328	function createIteratorClassMemberNode(	CODE
LOW	types/src/generator/type.ts	152	export function createParamDeclarationNodes(	CODE
LOW	types/src/transforms/comments.ts	15	export function createCommentsTransformer(	CODE
LOW	types/src/transforms/helpers.ts	52	function ensureModifierRequirements(	CODE
LOW	types/src/transforms/onmessage-declaration.ts	7	export function createAddOnMessageDeclarationTransformer(): ts.TransformerFactory<ts.SourceFile> {	CODE
LOW	types/src/transforms/import-resolve.ts	53	export function createImportResolveTransformer(): ts.TransformerFactory<ts.SourceFile> {	CODE
LOW	types/src/transforms/import-resolve.ts	81	function createImportResolveVisitor(ctx: ts.TransformationContext): ts.Visitor {	CODE
LOW	types/src/transforms/import-resolve.ts	102	function createModuleImportResolveVisitor(	CODE
LOW	types/src/transforms/iterators.ts	45	export function createIteratorTransformer(	CODE
LOW	types/src/transforms/iterators.ts	71	function createIteratorDeclarationsVisitor(	CODE
LOW	types/src/transforms/iterators.ts	183	function createIteratorUsagesVisitor(	CODE
LOW	types/src/transforms/importable.ts	23	export function createImportableTransformer(): ts.TransformerFactory<ts.SourceFile> {	CODE
LOW	types/src/transforms/class-to-interface.ts	36	export function createClassToInterfaceTransformer(	CODE
LOW	types/src/transforms/class-to-interface.ts	64	function transformClassToInterface(	CODE
LOW	types/src/transforms/class-to-interface.ts	78	function createInterfaceDeclaration(	CODE
LOW	types/src/transforms/class-to-interface.ts	126	function transformClassMemberToInterface(	CODE
LOW	types/src/transforms/class-to-interface.ts	236	function createGetAccessorSignature(	CODE
LOW	types/src/transforms/class-to-interface.ts	269	function createVariableDeclaration(	CODE
LOW	types/src/transforms/globals.ts	46	export function createGlobalScopeTransformer(	CODE
LOW	types/src/transforms/internal-namespace.ts	68	export function createInternalNamespaceTransformer(	CODE
LOW	types/src/transforms/internal-namespace.ts	84	function collectInternalModuleStructures(	CODE
LOW	types/src/transforms/internal-namespace.ts	99	function createInternalNamespaceVisitor(	CODE
LOW	types/src/transforms/overrides/index.ts	61	export function createOverrideDefineTransformer(	CODE
LOW	types/src/transforms/overrides/index.ts	300	function createOverrideDefineVisitor(	CODE
LOW	ci/v8_update.py	110	def _update_aligned_dependencies():	CODE
LOW	ci/v8_update_test.py	64	def test_aligned_tree_changes_nothing(self):	STRING
LOW	ci/v8_update_test.py	74	def test_moves_exact_pins_with_cargo_add(self):	STRING
LOW	ci/v8_update_test.py	85	def test_moves_unpinned_crates_with_cargo_update(self):	STRING
LOW	ci/v8_update_test.py	103	def test_fails_when_cargo_refuses_a_version(self):	STRING
LOW	ci/v8_update_test.py	120	def _assert_repinned_bazel_lockfile(self):	STRING
LOW	ci/v8_update_test.py	140	def test_follows_the_versions_the_root_depends_on(self):	STRING
LOW	ci/v8_update_test.py	163	def test_crate_reached_at_two_versions_has_no_chromium_version(self):	STRING
LOW	ci/v8_update_test.py	173	def test_fails_when_the_root_is_locked_at_two_versions(self):	STRING
LOW⚡	ci/jsonc.py	319	def test_comments_trailing_the_document_move_inside(self):	CODE
LOW⚡	ci/jsonc.py	327	def test_comment_in_empty_container(self):	CODE
LOW⚡	ci/jsonc.py	331	def test_blank_lines_are_dropped(self):	CODE
LOW⚡	ci/jsonc.py	356	def test_comments_are_not_found_in_strings(self):	CODE
LOW⚡	ci/jsonc.py	362	def test_scalar_and_empty_documents(self):	CODE
LOW⚡	ci/jsonc.py	370	def test_plain_data_matches_json(self):	CODE
LOW⚡	ci/jsonc.py	395	def test_non_ascii_is_literal(self):	CODE
LOW⚡	ci/jsonc.py	398	def test_comments_on_absent_members_are_ignored(self):	CODE
LOW⚡	ci/jsonc.py	402	def test_dump_appends_newline(self):	CODE
LOW⚡	ci/jsonc.py	409	def test_position_ignores_comments(self):	CODE
LOW⚡	ci/jsonc.py	414	def test_block_comments_are_rejected(self):	CODE
LOW⚡	ci/jsonc.py	417	def test_trailing_commas_are_rejected(self):	CODE
LOW	fuzzilli/analytics-mock.js	5	function getChaoticAnalyticsResponse() {	CODE
LOW	samples/web-streams/streams-util.js	69	export function createSyncLoremByteStream(numChunks) {	CODE
LOW	samples/web-streams/streams-util.js	86	export function createAsyncLoremByteStream(numChunks) {	CODE
LOW	samples/web-streams/streams-util.js	104	export function createSyncUppercaseTransform() {	CODE
LOW	samples/web-streams/streams-util.js	123	export function createAsyncUppercaseTransform() {	CODE
LOW	npm/lib/node-platform.ts	26	export function pkgAndSubpathForCurrentPlatform(): {	CODE
LOW	src/workerd/server/tests/python/asgi/worker.py	158	async def test_error_after_response_is_logged(env):	CODE
LOW	src/workerd/server/tests/python/asgi/worker.py	189	async def test_background_task_error_is_logged():	CODE
LOW	src/workerd/server/tests/python/asgi/worker.py	235	async def test_app_exception_before_response_is_logged():	CODE
164 more matches not shown…

Decorative Section Separators24 hits · 72 pts

Severity	File	Line	Snippet	Context
MEDIUM	types/generated-snapshot/index.ts	12688	// ── Error types ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/generated-snapshot/index.ts	12722	// ── Binding ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/generated-snapshot/index.d.ts	12673	// ── Error types ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/generated-snapshot/index.d.ts	12707	// ── Binding ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/generated-snapshot/experimental/index.ts	13051	// ── Error types ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/generated-snapshot/experimental/index.ts	13085	// ── Binding ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/generated-snapshot/experimental/index.d.ts	13039	// ── Error types ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/generated-snapshot/experimental/index.d.ts	13073	// ── Binding ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/defines/artifacts.d.ts	269	// ── Error types ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	types/defines/artifacts.d.ts	306	// ── Binding ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	22	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	24	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	68	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	70	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	114	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	116	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	182	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	184	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	220	# ------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	222	# ------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	258	# ------------------------------------------------------------------	COMMENT
MEDIUM	.github/scripts/check-compat-flag-docs.py	260	# ------------------------------------------------------------------	COMMENT
MEDIUM	src/workerd/server/tests/python/asgi/worker.py	96	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	src/workerd/server/tests/python/asgi/worker.py	98	# ---------------------------------------------------------------------------	COMMENT

Synthetic Comment Markers8 hits · 60 pts

Severity	File	Line	Snippet	Context
HIGH	src/workerd/api/node/tests/tty-nodejs-test.js	9	// Note: test was generated by claude with manual tweaks	COMMENT
HIGH	src/workerd/api/node/tests/v8-nodejs-test.js	9	// Note: test was generated by claude with manual tweaks	COMMENT
HIGH	src/workerd/api/node/tests/trace-events-nodejs-test.js	9	// Note: test was generated by claude with manual tweaks	COMMENT
HIGH	src/workerd/api/node/tests/domain-nodejs-test.js	10	// Note: test was generated by claude with manual tweaks	COMMENT
HIGH	src/workerd/api/node/tests/vm-test.js	9	// Note: test was generated by claude with manual tweaks	COMMENT
HIGH	src/workerd/api/node/tests/dgram-nodejs-test.js	9	// Note: test was generated by claude with manual tweaks	COMMENT
HIGH	src/workerd/api/node/tests/wasi-nodejs-test.js	9	// Note: test was generated by claude with manual tweaks	COMMENT
HIGH	src/rust/cxx/kj-rs/tests/test_own.rs	300	// This is one test generated by Claude. I am unsure it sufficiently tests multithreading.	COMMENT

Structural Annotation Overuse29 hits · 55 pts

Severity	File	Line	Snippet	Context
LOW	.opencode/skills/update-v8/SKILL.md	27	### Step 1: Identify the target version	COMMENT
LOW	.opencode/skills/update-v8/SKILL.md	39	### Step 2: Sync local V8 to the current workerd version	COMMENT
LOW	.opencode/skills/update-v8/SKILL.md	47	### Step 3: Apply workerd's patches onto a branch	COMMENT
LOW	.opencode/skills/update-v8/SKILL.md	65	### Step 4: Rebase patches onto the new V8 version	COMMENT
LOW⚡	.opencode/skills/update-v8/SKILL.md	79	### Step 5: Regenerate patches	COMMENT
LOW⚡	.opencode/skills/update-v8/SKILL.md	87	### Step 6: Replace patches in workerd	COMMENT
LOW⚡	.opencode/skills/update-v8/SKILL.md	97	### Step 7: Update `build/deps/v8.MODULE.bazel`	COMMENT
LOW	.opencode/skills/update-v8/SKILL.md	114	### Step 8: Update V8's dependencies	COMMENT
LOW	.opencode/skills/update-v8/SKILL.md	139	### Step 9: Build and test	COMMENT
LOW	.opencode/skills/update-v8/SKILL.md	164	### Step 10: Commit and submit	COMMENT
LOW	docs/reference/adding-a-compatibility-flag.md	5	## Step 1: Choose flag names	COMMENT
LOW	docs/reference/adding-a-compatibility-flag.md	15	## Step 2: Add to `compatibility-date.capnp`	COMMENT
LOW	docs/reference/adding-a-compatibility-flag.md	45	## Step 3: Use the flag in C++ code	COMMENT
LOW	docs/reference/adding-a-compatibility-flag.md	70	## Step 4: Add tests	COMMENT
LOW	docs/reference/adding-a-compatibility-flag.md	95	## Step 5: Document the flag	COMMENT
LOW	docs/reference/adding-a-compatibility-flag.md	108	## Step 6: Build and verify	COMMENT
LOW⚡	src/workerd/api/tests/worker-loader-test.js	1138	// Step 1: sub-request sets up the pending promise via a separate entrypoint.	COMMENT
LOW⚡	src/workerd/api/tests/worker-loader-test.js	1143	// Step 2: IoContext B has drained. Give the runtime a moment to clean up.	COMMENT
LOW⚡	src/workerd/api/tests/worker-loader-test.js	1146	// Step 3: resolve the saved promise from IoContext A. The inner .then() continuation throws	COMMENT
LOW⚡	…/workerd/api/tests/stdio-writesync-reentry-uaf-test.js	50	// Step 1: Prime lineBuffer with non-newline data (buffered, no	COMMENT
LOW⚡	…/workerd/api/tests/stdio-writesync-reentry-uaf-test.js	54	// Step 2: Arm the getter and trigger the newline path.	COMMENT
LOW⚡	src/workerd/api/node/tests/zlib-nodejs-test.js	2850	// Step 1: writeSync with Z_NO_FLUSH — data is buffered internally.	COMMENT
LOW⚡	src/workerd/api/node/tests/zlib-nodejs-test.js	2857	// Step 2: params() directly on native handle — no preceding flush.	COMMENT
LOW⚡	src/workerd/api/node/tests/zlib-nodejs-test.js	2865	// Step 3: finish the stream — must still produce a valid deflate stream.	COMMENT
LOW	src/workerd/api/node/tests/zlib-nodejs-test.js	2878	// Step 4: concatenate both output chunks and decompress.	COMMENT
LOW⚡	src/per_isolate/webstreams/writable.ts	1362	// Step 4: GetChunkSize — runs size() which may re-entrantly mutate	COMMENT
LOW⚡	src/per_isolate/webstreams/writable.ts	1369	// Step 5: Re-check writer.[[stream]] — size() may have called	COMMENT
LOW⚡	src/per_isolate/webstreams/writable.ts	1389	// Step 11: Add write request.	COMMENT
LOW⚡	src/per_isolate/webstreams/writable.ts	1392	// Step 12: ControllerWrite (with pre-computed chunkSize, no size()	COMMENT

Empty Error Handlers8 hits · 40 pts

Severity	File	Line	Snippet	Context
HIGH	src/workerd/server/tests/python/sockets/worker.py	225	except OSError:	CODE
HIGH	src/workerd/server/tests/python/sockets/worker.py	238	except OSError:	CODE
HIGH	…d/server/tests/python/metadata-read-overflow/worker.py	21	except Exception:	CODE
HIGH	…d/server/tests/python/vendor_dir_compat_flag/worker.py	9	except ImportError:	CODE
HIGH	src/workerd/server/tests/python/stdlib-zip/worker.py	21	except OSError:	CODE
HIGH	…orkerd/server/tests/python/top-level-entropy/worker.py	48	except RuntimeError:	CODE
HIGH	…ide/internal/topLevelEntropy/entropy_import_context.py	23	except ImportError:	CODE
HIGH	…nal/topLevelEntropy/entropy_import_context_packages.py	106	except module.SchemaError:	CODE

Hallucination Indicators4 hits · 40 pts

Severity	File	Line	Snippet	Context
CRITICAL	src/workerd/api/tests/js-rpc-test.js	910	await assert.rejects(() => env.MyService.objectProperty.nonRpc.bar.baz(), {	CODE
CRITICAL	src/workerd/api/tests/js-rpc-test.js	922	() => env.MyService.objectProperty.env.MyService.noArgsMethod(),	CODE
CRITICAL	src/pyodide/python-entrypoint-helper.ts	185	return await pyodide._module.API.pyodide_base.pyimport_impl.callPromising(	CODE
CRITICAL	src/pyodide/internal/pool/builtin_wrappers.ts	96	return API.config.jsglobals.Function.prototype.apply.apply(func, [	CODE

Excessive Try-Catch Wrapping23 hits · 32 pts

Severity	File	Line	Snippet	Context
LOW	tools/update_node_version.py	39	except Exception as e:	CODE
MEDIUM	tools/update_node_version.py	40	print(f"Error fetching tags: {e}", file=sys.stderr)	CODE
LOW	tools/cross/internal_build.py	46	except Exception as err:	CODE
LOW	tools/cross/internal_build.py	89	except Exception as err:	CODE
LOW	tools/cross/format.py	333	except Exception:	CODE
LOW	samples/python-benchmark/worker.py	33	except Exception:	CODE
LOW	…d/server/tests/python/metadata-read-overflow/worker.py	21	except Exception:	CODE
LOW	src/workerd/server/tests/python/sdk/worker.py	385	except Exception as exc:	CODE
LOW⚡	src/workerd/server/tests/python/sdk/worker.py	509	except Exception as err:	CODE
LOW⚡	src/workerd/server/tests/python/sdk/worker.py	516	except Exception as err:	CODE
LOW⚡	src/workerd/server/tests/python/sdk/worker.py	523	except Exception as err:	CODE
LOW	…/workerd/server/tests/python/top-level-tests/worker.py	54	except Exception as e:	CODE
LOW	src/pyodide/internal/workers-api/src/asgi.py	212	except Exception as e:	CODE
LOW	src/pyodide/internal/workers-api/src/asgi.py	300	except Exception:	CODE
MEDIUM	src/pyodide/internal/workers-api/src/asgi.py	205	def run_app():	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	1300	except Exception as exc:	CODE
MEDIUM	…c/pyodide/internal/workers-api/src/workers/_workers.py	1290	def _closure():	CODE
MEDIUM	src/pyodide/scripts/create_vendor_zip.py	100	print(f"Error: site-packages not found at {site_packages}")	CODE
LOW	src/pyodide/scripts/create_vendor_zip.py	144	except Exception as e:	CODE
MEDIUM	src/pyodide/scripts/create_vendor_zip.py	145	print(f"Error vendoring packages {package_names!r}: {e}")	CODE
MEDIUM	src/pyodide/scripts/create_vendor_zip.py	173	print("Error: Package name is required")	CODE
MEDIUM	src/pyodide/scripts/make_snapshots.py	85	print(f"Error: {url} has sha256 {digest}, expected {sha256}", file=sys.stderr)	CODE
MEDIUM	src/pyodide/scripts/make_snapshots.py	383	print(f"Error: Directory {outdir} exists and is not empty", file=sys.stderr)	CODE

Fake / Example Data25 hits · 32 pts

Severity	File	Line	Snippet	Context
LOW	samples/web-streams/streams-util.js	12	// Sample words for generating lorem ipsum-style text	COMMENT
LOW	samples/web-streams/streams-util.js	35	// Creates a ReadableStream that generates random lorem ipsum-style text synchronously	COMMENT
LOW	samples/web-streams/streams-util.js	51	// Creates a ReadableStream that generates random lorem ipsum-style text asynchronously	COMMENT
LOW	samples/web-streams/streams-util.js	68	// Creates a byte ReadableStream that generates random lorem ipsum-style text synchronously	COMMENT
LOW	samples/web-streams/streams-util.js	85	// Creates a byte ReadableStream that generates random lorem ipsum-style text asynchronously	COMMENT
LOW⚡	src/workerd/server/tests/python/sdk/worker.py	265	js_data.append("key", "lorem ipsum")	CODE
LOW⚡	src/workerd/server/tests/python/sdk/worker.py	266	js_data.append("key", "dolor sit amet")	CODE
LOW⚡	src/workerd/server/tests/python/sdk/worker.py	269	assert data["key"] == "lorem ipsum"	CODE
LOW⚡	src/workerd/server/tests/python/sdk/worker.py	270	assert data.get_all("key") == ["lorem ipsum", "dolor sit amet"]	CODE
LOW⚡	src/workerd/server/tests/python/sdk/worker.py	270	assert data.get_all("key") == ["lorem ipsum", "dolor sit amet"]	CODE
LOW	src/workerd/api/tests/http-test.js	133	hostname: 'placeholder',	CODE
LOW⚡	src/workerd/api/node/tests/legacy_url-nodejs-test.js	673	'm2@example.ord/c2@example.org',	CODE
LOW⚡	src/workerd/api/node/tests/legacy_url-nodejs-test.js	674	'mid:m@example.ord/c@example.org',	CODE
LOW⚡	src/workerd/api/node/tests/legacy_url-nodejs-test.js	675	'mid:m@example.ord/m2@example.ord/c2@example.org',	CODE
LOW	src/workerd/api/node/tests/legacy_url-nodejs-test.js	716	'mailto:user@example.org',	CODE
LOW	src/workerd/api/node/tests/util-nodejs-test.js	1845	'Lorem ipsum dolor\nsit amet,\tconsectetur adipiscing elit, sed do ' +	CODE
LOW	src/workerd/api/node/tests/util-nodejs-test.js	1864	" [ [ 'Lorem ipsum dolor\\nsit amet,\\tconsectetur adipiscing elit, " +	CODE
LOW	src/workerd/api/node/tests/util-nodejs-test.js	1881	" 'Lorem ipsum dolor\\n' +",	CODE
LOW	src/workerd/api/node/tests/util-nodejs-test.js	1900	"'Lorem ipsum dolor\\n' +",	CODE
LOW	src/workerd/api/node/tests/zlib-nodejs-test.js	1166	'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' +	CODE
LOW	src/workerd/api/node/tests/zlib-nodejs-test.js	1166	'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' +	CODE
LOW	src/workerd/api/node/tests/zlib-nodejs-test.js	1485	'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' +	CODE
LOW	src/workerd/api/node/tests/zlib-nodejs-test.js	1485	'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' +	CODE
LOW	src/workerd/api/node/tests/zlib-nodejs-test.js	2161	'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' +	CODE
LOW	src/workerd/api/node/tests/zlib-nodejs-test.js	2161	'ΩΩLorem ipsum dolor sit amet, consectetur adipiscing eli' +	CODE

Verbosity Indicators15 hits · 32 pts

Severity	File	Line	Snippet	Context
LOW⚡	src/workerd/api/tests/worker-loader-test.js	1138	// Step 1: sub-request sets up the pending promise via a separate entrypoint.	COMMENT
LOW⚡	src/workerd/api/tests/worker-loader-test.js	1143	// Step 2: IoContext B has drained. Give the runtime a moment to clean up.	COMMENT
LOW⚡	src/workerd/api/tests/worker-loader-test.js	1146	// Step 3: resolve the saved promise from IoContext A. The inner .then() continuation throws	COMMENT
LOW⚡	…/workerd/api/tests/stdio-writesync-reentry-uaf-test.js	50	// Step 1: Prime lineBuffer with non-newline data (buffered, no	COMMENT
LOW⚡	…/workerd/api/tests/stdio-writesync-reentry-uaf-test.js	54	// Step 2: Arm the getter and trigger the newline path.	COMMENT
LOW⚡	src/workerd/api/node/tests/zlib-nodejs-test.js	2850	// Step 1: writeSync with Z_NO_FLUSH — data is buffered internally.	COMMENT
LOW⚡	src/workerd/api/node/tests/zlib-nodejs-test.js	2857	// Step 2: params() directly on native handle — no preceding flush.	COMMENT
LOW⚡	src/workerd/api/node/tests/zlib-nodejs-test.js	2865	// Step 3: finish the stream — must still produce a valid deflate stream.	COMMENT
LOW	src/workerd/api/node/tests/zlib-nodejs-test.js	2878	// Step 4: concatenate both output chunks and decompress.	COMMENT
LOW	src/node/internal/streams_readable.js	1167	// We need to check if there is someone still listening to	COMMENT
LOW	src/node/internal/streams_readable.js	1186	// We need to check if there is someone still listening to	COMMENT
LOW⚡	src/per_isolate/webstreams/writable.ts	1362	// Step 4: GetChunkSize — runs size() which may re-entrantly mutate	COMMENT
LOW⚡	src/per_isolate/webstreams/writable.ts	1369	// Step 5: Re-check writer.[[stream]] — size() may have called	COMMENT
LOW⚡	src/per_isolate/webstreams/writable.ts	1389	// Step 11: Add write request.	COMMENT
LOW⚡	src/per_isolate/webstreams/writable.ts	1392	// Step 12: ControllerWrite (with pre-computed chunkSize, no size()	COMMENT

Unused Imports29 hits · 28 pts

Severity	File	Line	Context
LOW	tools/cross/format.py	2	CODE
LOW	…d/server/tests/python/vendor_dir_compat_flag/worker.py	6	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	4	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	9	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	30	CODE
LOW	src/pyodide/internal/topLevelEntropy/entropy_patches.py	29	CODE
LOW	…ide/internal/topLevelEntropy/entropy_import_context.py	27	CODE
LOW	…ide/internal/topLevelEntropy/entropy_import_context.py	20	CODE

AI Slop Vocabulary9 hits · 25 pts

Severity	File	Line	Snippet	Context
MEDIUM	samples/durable-objects-chat/chat.js	448	// We utilize this in ChatRoom, above, to apply a per-IP-address rate limit. These limits are	COMMENT
MEDIUM	src/workerd/io/worker-fs.h	130	// instances are kj::Refcounted objects. We utilize the Isolate lock to safely	COMMENT
MEDIUM	src/workerd/io/trace.h	1234	// Interface for writing a span. Essentially, this is a mutable interface to a `Span` object,	COMMENT
MEDIUM	src/workerd/api/basics.h	1051	// Essentially an awaitable alternative to setTimeout(). The wait	COMMENT
MEDIUM	src/workerd/api/tests/actor-alarms-name-test.js	59	// sleep well past the 1000ms alarm delay to stay robust under CI load.	COMMENT
MEDIUM	src/rust/cxx/kj-rs/convert.h	5	// This header provides seamless integration between Rust types and KJ (Cap'n Proto's C++ library)	COMMENT
MEDIUM	src/rust/cxx/kj-rs/convert.h	90	// - kj::str(rust::String) - uses KJ_STRINGIFY for seamless string conversion	COMMENT
LOW⚡	…c/pyodide/internal/workers-api/src/workers/_workers.py	913	# entrypoint is being used, it makes sense to be less loud about it and just pass through the	COMMENT
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	935	# implement a Python wrapper for it, but for now we'll just pass in None.	COMMENT

Deep Nesting18 hits · 18 pts

Severity	File	Line	Context
LOW	tools/update_node_version.py	19	CODE
LOW	tools/cross/format.py	274	CODE
LOW	tools/clang-tidy/unsafe-continuation-capture-test.py	74	CODE
LOW	tools/clang-tidy/unsafe-continuation-capture-test.py	108	CODE
LOW	ci/jsonc.py	155	CODE
LOW	.github/scripts/check-compat-flag-docs.py	187	CODE
LOW	src/workerd/server/tests/python/sdk/worker.py	19	CODE
LOW	src/workerd/server/tests/python/sdk/server.py	5	CODE
LOW	src/rust/jsg/cpp-jsg-allowlist-test.py	131	CODE
LOW	src/pyodide/tools/pack_python_packages.py	30	CODE
LOW	src/pyodide/internal/workers-api/src/asgi.py	117	CODE
LOW	src/pyodide/internal/workers-api/src/asgi.py	157	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	889	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	207	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	665	CODE
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	1197	CODE
LOW	src/pyodide/scripts/create_vendor_zip.py	105	CODE
LOW	src/pyodide/scripts/make_snapshots.py	282	CODE

Redundant / Tautological Comments10 hits · 15 pts

Severity	File	Line	Snippet	Context
LOW	tools/unix/apply-big-move.sh	64	# Check if there's a new "Big Move" in the future and, if so, prompt the user to apply it too.	COMMENT
LOW	tools/unix/apply-big-move.sh	110	# Check if we already applied The Big Move in this branch, as indicated by $AFTER_MOVE_TAG being	COMMENT
LOW	tools/unix/apply-big-move.sh	124	# Check if $BEFORE_MOVE_TAG is in this branch's history. If not, we need to rebase first.	COMMENT
LOW	tools/unix/apply-big-move.sh	167	# Check if there's another move upcoming that we should apply next.	COMMENT
LOW	.github/workflows/release-python-runtime.yml	59	# Check if there are changes to python_metadata.bzl	COMMENT
LOW	.github/workflows/release-python-runtime.yml	67	# Check if there's an open PR for this branch	COMMENT
LOW	.github/workflows/internal-build.yml	70	# Check if this is a fork and if the owner is a Cloudflare org member	COMMENT
LOW	.github/workflows/release-python-snapshots.yml	78	# Check if there are changes to python_metadata.bzl	COMMENT
LOW	.github/workflows/release-python-snapshots.yml	86	# Check if there's an open PR for this branch	COMMENT
LOW	src/pyodide/internal/workers-api/src/asgi.py	166	# Check if this is a server-sent events response	COMMENT

Cross-Language Confusion2 hits · 12 pts

Severity	File	Line	Snippet	Context
HIGH	src/workerd/server/tests/python/python-rpc/worker.py	212	js_undefined = await env.PythonRpc.identity(js.undefined)	CODE
HIGH⚡	…c/pyodide/internal/workers-api/src/workers/_workers.py	908	return Exception(value.toString())	CODE

Self-Referential Comments4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	tools/cross/format.py	15	# This file is symlinked into the internal repo as tools/format.py, so the root may be two levels up	COMMENT
MEDIUM	tools/unix/create-external.sh	3	# Create a symlink to Bazel's external/ directory. This simplifies the	COMMENT
MEDIUM	src/pyodide/internal/workers-api/src/asgi.py	151	# Create a transform stream for handling streaming responses	COMMENT
MEDIUM	…c/pyodide/internal/workers-api/src/workers/_workers.py	1	# This module defines a Workers API for Python. It is similar to the API provided by	COMMENT

Slop Phrases4 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW	src/workerd/jsg/promise.h	77	// your own first. (Don't forget to implement `visitForGc()`.)	COMMENT
LOW	src/workerd/server/tests/container-client/test.js	21	// When writing a test, don't forget to call waitUntilContainerIsHealthy	COMMENT
LOW	src/workerd/api/http.h	637	// When adding new properties to this struct, don't forget to update Request::serialize().	COMMENT
LOW⚡	…c/pyodide/internal/workers-api/src/workers/_workers.py	917	# types here, so if you're doing this make sure to do so behind a compat flag.	COMMENT

Example Usage Blocks4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	src/workerd/jsg/setup.h	857	// Example usage:	COMMENT
LOW	src/workerd/jsg/jsg.h	97	// Example usage:	COMMENT
LOW	src/workerd/jsg/iterator.h	1016	// Example usage:	COMMENT
LOW	src/workerd/jsg/iterator.h	1110	// Example usage:	COMMENT

Overly Generic Function Names3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	samples/nodejs-compat-diagnosticschannel/library.js	5	export function doSomething() {	CODE
LOW	samples/nodejs-compat/worker.js	28	function doSomething(a, cb) {	CODE
LOW	src/workerd/server/tests/python/python-rpc/worker.py	50	async def handle_request(self, req):	CODE

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	src/workerd/api/js-writable-stream.h	225	// guardrails in the design doc).	COMMENT

Modern Structural Boilerplate3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…c/pyodide/internal/workers-api/src/workers/__init__.py	30	__all__ = [	CODE
LOW	…ide/internal/topLevelEntropy/entropy_import_context.py	40	__all__ = ["get_bad_entropy_flag"]	CODE
LOW	src/pyodide/scripts/upload_bundles.py	98	def update_python_metadata_bzl(bundles: list[BundleInfo]) -> None:	CODE

AI Structural Patterns2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	940		CODE
LOW	…c/pyodide/internal/workers-api/src/workers/_workers.py	1000		CODE

cloudflare/workerd

Open-Source Code Quality, Security and Technical Debt Review