1.1

Adjusted Signal

1.1

Raw Pattern Score

100%

Time Factor

2026-10-21

Last Push

9.0K

Stars

Language

267.7K

Lines of Code

1.1K

Files

222

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 203 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.2/100 · LOW

Are imports declared and package/API names verified? 19 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 4.8/100 · LOW

Which changes need focused human review? 222 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 4MEDIUM 3LOW 213

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 222 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block173 hits · 173 pts

Severity	File	Line	Snippet	Context
LOW	.golangci.yml	101	# call graph construction algorithm (cha, rta). In general, use cha for libraries,	COMMENT
LOW	.golangci.yml	141	#- goconst # Finds repeated strings that could be replaced by a constant [fast: true]	COMMENT
LOW	.golangci.yml	181	# Show only new issues: if there are unstaged changes or untracked files,	COMMENT
LOW	cmd/immutest/command/init.go	221	// FIXME OGG:	COMMENT
LOW	cmd/immuadmin/command/stats/statstest/statsResponse.go	41	# TYPE go_memstats_buck_hash_sys_bytes gauge	COMMENT
LOW	cmd/immuadmin/command/stats/statstest/statsResponse.go	61	# HELP go_memstats_heap_objects Number of allocated objects.	COMMENT
LOW	cmd/immuadmin/command/stats/statstest/statsResponse.go	81	go_memstats_mcache_inuse_bytes 13888	COMMENT
LOW	cmd/immuadmin/command/stats/statstest/statsResponse.go	1761	# TYPE process_max_fds gauge	COMMENT
LOW	tools/mtls/generate.sh	41	echo "100212" > 1_root/serial	COMMENT
LOW	tools/mtls/generate.sh	181	# -new	COMMENT
LOW	.github/workflows/codeql.yml	1	# For most projects, this workflow file will not need changing; you simply need	COMMENT
LOW	helm/values.yaml	21	# ImmuDB Configuration Options	COMMENT
LOW	helm/values.yaml	61	pgsql-server-port = 5432	COMMENT
LOW	embedded/tbtree/snapshot.go	381	return nil	COMMENT
LOW	embedded/appendable/remoteapp/remote_storage_reader.go	21	// DefaultReaderRangeCacheSize is the per-window size used by the	COMMENT
LOW	embedded/appendable/remoteapp/remote_storage_reader.go	41		COMMENT
LOW	embedded/appendable/remoteapp/remote_storage_reader.go	341	}	COMMENT
LOW	embedded/appendable/remoteapp/rustfs_bench_test.go	21	"github.com/codenotary/immudb/embedded/remotestorage/s3"	COMMENT
LOW	embedded/appendable/remoteapp/options.go	41		COMMENT
LOW	embedded/appendable/multiapp/appendable_cache.go	21		COMMENT
LOW	embedded/appendable/multiapp/multi_app.go	681	// maybePrefetchAheadLocked so the spawned prefetch goroutine can call	COMMENT
LOW	embedded/store/options.go	221	// first transaction is included in a bulk, subsequent additions only	COMMENT
LOW	embedded/store/transiency_collision_test.go	21	// `ErrCannotUpdateKeyTransiency` firing on UPDATE-after-INSERT within a	COMMENT
LOW	embedded/store/ongoing_tx.go	601	return snap.NewKeyReader(spec)	COMMENT
LOW	embedded/sql/order_by_projection_regression_test.go	21	"fmt"	COMMENT
LOW	embedded/sql/joint_sort_regression_test.go	21	"fmt"	COMMENT
LOW	embedded/sql/system_tables.go	21	"fmt"	COMMENT
LOW	embedded/sql/system_tables.go	41	// Columns is the table's column schema. Must be non-empty. The	COMMENT
LOW	embedded/sql/system_tables.go	121	out = append(out, d)	COMMENT
LOW	embedded/sql/distinct_row_reader.go	21	"bytes"	COMMENT
LOW	embedded/sql/distinct_row_reader_test.go	61	err = rowReader.InferParameters(context.Background(), nil)	COMMENT
LOW	embedded/sql/options.go	81	opts.distinctLimit = distinctLimit	COMMENT
LOW	embedded/sql/options.go	141	// indexed VARCHAR columns. The value is clamped to [64, 65535] by Validate.	COMMENT
LOW	embedded/sql/hash_grouped_row_reader.go	21	// hashGroupedRowReader implements GROUP BY aggregation using a hash map	COMMENT
LOW	embedded/sql/catalog.go	841	// loadCatalog (prefix scans + default-expression re-parse) on every NewTx.	COMMENT
LOW	embedded/sql/max_key_len_test.go	21	"strings"	COMMENT
LOW	embedded/sql/scalar_subquery_params_test.go	21	"testing"	COMMENT
LOW	embedded/sql/scalar_subquery_params_test.go	41		COMMENT
LOW	embedded/sql/joint_row_reader.go	361	}	COMMENT
LOW	embedded/sql/file_sort_pushdown_regression_test.go	21	"fmt"	COMMENT
LOW	embedded/sql/stmt.go	1541	// and XORM's per-repo issue-index counter (INSERT ...	COMMENT
LOW	embedded/sql/stmt.go	3821	collectExpParams(t.Exp, params)	COMMENT
LOW	embedded/sql/stmt.go	3861	}	COMMENT
LOW	embedded/sql/stmt.go	4221	// in order by the index scan (groupBySortExps != nil).	COMMENT
LOW	embedded/sql/stmt.go	4681	err = stmt.where.selectorRanges(table, tableRef.Alias(), params, rangesByColID)	COMMENT
LOW	embedded/sql/stmt.go	6741	return "", false	COMMENT
LOW	embedded/sql/stmt.go	7661	return false	COMMENT
LOW	embedded/sql/stmt.go	8621		COMMENT
LOW	embedded/sql/stmt.go	8641	// reduce() handles real type resolution.	COMMENT
LOW	embedded/sql/case_when_widening_test.go	21	"testing"	COMMENT
LOW	embedded/sql/case_when_widening_test.go	121	// widening must NOT leak into arithmetic or comparison operators.	COMMENT
LOW	embedded/sql/hash_join_reader.go	181	//	COMMENT
LOW	embedded/sql/engine.go	101	ErrColumnMismatchInUnionStmt = errors.New("column mismatch in union statement")	COMMENT
LOW	embedded/sql/engine.go	641	// tryPopulateCatalogCache call sees a coherent (catalog, version) pair —	COMMENT
LOW	embedded/sql/predicate_pushdown.go	41	res = &BinBoolExp{op: And, left: res, right: p}	COMMENT
LOW	embedded/sql/predicate_pushdown.go	121	// reference only an INNER join's inner table to that join's cond, and	COMMENT
LOW	pkg/integration/replication/docker.go	21	// "math/rand"	COMMENT
LOW	pkg/integration/replication/docker.go	41		COMMENT
LOW	pkg/integration/replication/docker.go	61	// }	COMMENT
LOW	pkg/integration/replication/docker.go	81	// func (s dockerTestServer) startContainer(t testing.T, runOptions dockertest.RunOptions) dockertest.Resource {	COMMENT
113 more matches not shown…

Cross-Language Confusion (JS/TS)4 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH⚡	tools/comparison/mongodb/load.js	19	print("Iterations: " + N)	CODE
HIGH⚡	tools/comparison/mongodb/load.js	20	print("Elapsed t.: " + elapsed + " sec")	CODE
HIGH⚡	tools/comparison/mongodb/load.js	21	print("Throughput: " + txSec)	CODE
HIGH⚡	tools/comparison/mongodb/load.js	24	print("Starting test...")	CODE

Structural Annotation Overuse16 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	docs/CONTRIBUTING_SQL.md	59	### Step 1: Define the function name constant	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	70	### Step 2: Implement the Function interface	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	98	### Step 3: Register in the builtinFunctions map	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	107	### Step 4: Add tests	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	121	### Step 1: Add keyword to the lexer	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	132	### Step 2: Declare the token in the grammar	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	140	### Step 3: Add grammar rules	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	152	### Step 4: Add the statement type	COMMENT
LOW⚡	docs/CONTRIBUTING_SQL.md	174	### Step 5: Regenerate the parser	COMMENT
LOW⚡	docs/CONTRIBUTING_SQL.md	182	### Step 6: Add tests	COMMENT
LOW⚡	docs/CONTRIBUTING_SQL.md	188	### Step 1: Define columns	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	199	### Step 2: Implement the resolver	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	222	### Step 3: Register the resolver	COMMENT
LOW	docs/CONTRIBUTING_SQL.md	233	### Step 4: Add tests	COMMENT
LOW	embedded/sql/stmt.go	5472	// Step 1: Execute the base (non-recursive) term	COMMENT
LOW	embedded/sql/stmt.go	5507	// Step 2: Iteratively execute the recursive term	COMMENT

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	embedded/sql/row_reader.go	403	_, err = r.period.start.instant.exp.inferType(cols, params, r.TableAlias())	CODE
CRITICAL	embedded/sql/row_reader.go	410	_, err = r.period.end.instant.exp.inferType(cols, params, r.TableAlias())	CODE

Fake / Example Data13 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	cmd/immuadmin/command/login_test.go	131	return &schema.LoginResponse{Token: "fake-token"}, nil	CODE
LOW	docs/security/vulnerabilities/linear-fake/README.md	255	2022/09/01 15:20:34 fake-key	CODE
LOW	docs/security/vulnerabilities/linear-fake/README.md	259	2022/09/01 15:20:34 FAILURE: Client is vulnerable, was able to read two different datasets for same transaction: 'valid-	CODE
LOW	…/security/vulnerabilities/linear-fake/server/server.go	79	a transaction that will contain "fake-key" entry	CODE
LOW	…y/vulnerabilities/linear-fake/server/go_client_test.go	88	require.Equal(t, "fake-key", string(tx2Fake.GetEntries()[0].GetKey()))	CODE
LOW	…server/data_generation/state_values_generation_test.go	76	err = tx.Set(toKV("fake-key"), nil, toKV("fake-value"))	CODE
LOW	…server/data_generation/state_values_generation_test.go	358	// 2 - diverged TX, in linear linking: {"valid-key-0": "valid-value-0"}, in merkle tree hash for: {"fake-key": "fake-v	COMMENT
LOW	…server/data_generation/state_values_generation_test.go	406	require.Equal(t, toKV("fake-key"), fakeTx2.Entries()[0].key())	CODE
LOW	embedded/sql/stmt_test.go	1389	src: &Varchar{val: `{"name": "John Doe"}`},	CODE
LOW	embedded/sql/stmt_test.go	1390	dst: &JSON{val: map[string]interface{}{"name": "John Doe"}},	CODE
LOW	embedded/sql/stmt_test.go	1678	jsVal := &JSON{val: map[string]interface{}{"name": "John Doe"}}	CODE
LOW	embedded/sql/stmt_test.go	1679	require.Equal(t, jsVal.String(), `{"name":"John Doe"}`)	CODE
LOW	pkg/integration/sql/sql_test.go	553	`INSERT INTO mytable(id, data) VALUES (1, '{"name": "John Doe"}')`,	CODE

Example Usage Blocks9 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	embedded/tbtree/snapshot.go	55	// Example usage:	COMMENT
LOW	embedded/tbtree/snapshot.go	105	// Example usage:	COMMENT
LOW	embedded/tbtree/snapshot.go	165	// Example usage:	COMMENT
LOW	embedded/tbtree/snapshot.go	194	// Example usage:	COMMENT
LOW	embedded/tbtree/snapshot.go	208	// Example usage:	COMMENT
LOW	embedded/tbtree/snapshot.go	245	// Example usage:	COMMENT
LOW	embedded/tbtree/snapshot.go	274	// Example usage:	COMMENT
LOW	embedded/tbtree/snapshot.go	359	// Example usage:	COMMENT
LOW	embedded/tbtree/snapshot.go	401	// Example usage:	COMMENT

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	.golangci.yml	1	# This file contains all available configuration options	COMMENT

Slop Phrases1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/codeql.yml	59	# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how	COMMENT

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	embedded/sql/stmt.go	5472	// Step 1: Execute the base (non-recursive) term	COMMENT
LOW	embedded/sql/stmt.go	5507	// Step 2: Iteratively execute the recursive term	COMMENT

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	pkg/pgsql/server/rewrite/rewriter.go	20	// programme; this is the B1 scaffold with 3 proof-of-concept rules.	COMMENT

codenotary/immudb

Open-Source Code Quality, Security and Technical Debt Review