0.0

Adjusted Signal

0.0

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

74.5K

Stars

PHP

Language

6.3M

Lines of Code

6.1K

Files

107

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 89 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 17 finding(s).

PR Review Velocity Impact 0.2/100 · LOW

Which changes need focused human review? 107 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 16MEDIUM 0LOW 90

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 107 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block88 hits · 84 pts

Severity	File	Line	Snippet	Context
LOW	Fuzzing/big-list-of-naughty-strings.txt	101	# ASCII punctuation. All of these characters may need to be escaped in some	COMMENT
LOW	Fuzzing/big-list-of-naughty-strings.txt	121	# Whitespace: all of the characters with category Zs, Zl, or Zp (in Unicode	COMMENT
LOW	Fuzzing/template-engines-special-vars.txt	1	# The objective of this dictionary is to help to discover the template engine used	COMMENT
LOW	Fuzzing/template-engines-special-vars.txt	21	.locale_object	COMMENT
LOW	Fuzzing/XSS/human-friendly/XSS-EnDe-evation.txt	1	# =========================================================================== #	COMMENT
LOW	Passwords/Leaked-Databases/myspace.txt	37061	$amR0ck5	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2161	&Zq5#3,6=c8	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2181	#/nttt3k5DQ^	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2201	#$DsU@123$%	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2221	#2020#carey	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2241	#24yazaki	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2261	#5093Sel	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2281	#a&FGP	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2301	#bh06jzO!	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2321	#Cj$G@28	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2341	#Cj$G@D20	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2361	#Ej&w?4utriD	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2381	#Friday12	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2401	#j0hN#N0v*	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2421	#LeVCco	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2441	#MWEI4forti!	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2461	#ps@UntFG	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2481	#S+.rDD~mPkh	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2501	#Sreil456	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2521	#Sykes888	COMMENT
LOW	Passwords/Leaked-Databases/fortinet-2021_passwords.txt	2541	#ur1275nd	COMMENT
LOW	Passwords/PHP-Hashes/Plaintext/plaintext.txt	41	# true in PHP 4.3.10 - 4.4.9, 5.0.3 - 5.2.0	COMMENT
LOW	Passwords/Permutations/1337speak.txt	741	#onda6	COMMENT
LOW	Passwords/Keyboard-Walks/Keyboard-Combinations.txt	3441	#$%^ZQ!	COMMENT
LOW	Passwords/Keyboard-Walks/Keyboard-Combinations.txt	3461	#$%^7890	COMMENT
LOW	Passwords/Keyboard-Walks/Keyboard-Combinations.txt	3481	#$%^op][	COMMENT
LOW	Passwords/Keyboard-Walks/Keyboard-Combinations.txt	3501	#$%^u7y6	COMMENT
LOW	Passwords/Keyboard-Walks/Keyboard-Combinations.txt	9321	#E@WZQ!	COMMENT
LOW	Passwords/Keyboard-Walks/Keyboard-Combinations.txt	9341	#E@W7890	COMMENT
LOW	Passwords/Keyboard-Walks/Keyboard-Combinations.txt	9361	#E@Wop][	COMMENT
LOW	Passwords/Keyboard-Walks/Keyboard-Combinations.txt	9381	#E@Wu7y6	COMMENT
LOW	Discovery/Web-Content/reverse-proxy-inconsistencies.txt	1	#/../console/	COMMENT
LOW	…eb-Content/DirBuster-2007_directory-list-2.3-small.txt	1	# directory-list-2.3-small.txt	COMMENT
LOW	…/DirBuster-2007_directory-list-lowercase-2.3-small.txt	1	# directory-list-lowercase-2.3-small.txt	COMMENT
LOW	Discovery/Web-Content/dutch/new/28.txt	1	#agtourdelasemois	COMMENT
LOW	Discovery/Web-Content/dutch/new/28.txt	21	#forourblackandyellow	COMMENT
LOW	Discovery/Web-Content/dutch/new/28.txt	41	#kampioen	COMMENT
LOW	Discovery/Web-Content/dutch/new/28.txt	61	#prvi	COMMENT
LOW	Discovery/Web-Content/dutch/new/28.txt	81	#tjv	COMMENT
LOW	Discovery/Web-Content/dutch/new/13.txt	1	#allblackeverything	COMMENT
LOW	Discovery/Web-Content/dutch/new/13.txt	21	#ghehehe	COMMENT
LOW	Discovery/Web-Content/dutch/new/13.txt	41	#omdathetkan	COMMENT
LOW	Discovery/Web-Content/dutch/new/10.txt	1	###################################################################################################	COMMENT
LOW	Discovery/Web-Content/dutch/new/6.txt	1	#colophon	COMMENT
LOW	Discovery/Web-Content/dutch/new/7.txt	1	#acties	COMMENT
LOW	Discovery/Web-Content/dutch/new/3.txt	1	#archive-wrapper	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	1	#aalst	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	21	#amsterdam	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	41	#blew	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	61	#cf-error-details	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	81	#crewdragon	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	101	#duststorm	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	121	#expatnoteslux	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	141	#fuego	COMMENT
LOW	Discovery/Web-Content/dutch/new/18.txt	161	#gurgl	COMMENT
28 more matches not shown…

Cross-File Repetition16 hits · 80 pts

Severity	File	Snippet	Context
HIGH	Fuzzing/XSS/human-friendly/XSS-payloadbox.txt	><script>alert("xss")</script>"> <img src=javascript:alert(string.fromcharcode(88,83,83))> <img src=# onmouseover="alert	STRING
HIGH	Fuzzing/XSS/robot-friendly/XSS-payloadbox.txt	><script>alert("xss")</script>"> <img src=javascript:alert(string.fromcharcode(88,83,83))> <img src=# onmouseover="alert	STRING
HIGH	Fuzzing/XSS/human-friendly/XSS-OFJAAAH.txt	><script>alert("xss")</script>"> <img src=javascript:alert(string.fromcharcode(88,83,83))> <img src=# onmouseover="alert	STRING
HIGH	Fuzzing/XSS/robot-friendly/XSS-OFJAAAH.txt	><script>alert("xss")</script>"> <img src=javascript:alert(string.fromcharcode(88,83,83))> <img src=# onmouseover="alert	STRING
HIGH	Fuzzing/XSS/human-friendly/XSS-payloadbox.txt	><script>alert("xss")</script>"> <img src=javascript:alert(string.fromcharcode(88,83,83))> <img src=# onmouseover="alert	STRING
HIGH	Fuzzing/XSS/human-friendly/XSS-OFJAAAH.txt	><script>alert("xss")</script>"> <img src=javascript:alert(string.fromcharcode(88,83,83))> <img src=# onmouseover="alert	STRING
HIGH	Fuzzing/XSS/robot-friendly/XSS-payloadbox.txt	><script>alert("xss")</script>"> <img src=javascript:alert(string.fromcharcode(88,83,83))> <img src=# onmouseover="alert	STRING
HIGH	Fuzzing/XSS/robot-friendly/XSS-OFJAAAH.txt	><script>alert("xss")</script>"> <img src=javascript:alert(string.fromcharcode(88,83,83))> <img src=# onmouseover="alert	STRING
HIGH	Fuzzing/XSS/human-friendly/XSS-payloadbox.txt	<xml id="xss"><i><b><img src="javas<!-- -->cript:javascript:alert(1)"></b></i></xml><span datasrc="#xss" datafld="	STRING
HIGH	Fuzzing/XSS/human-friendly/XSS-OFJAAAH.txt	<xml id="xss"><i><b><img src="javas<!-- -->cript:javascript:alert(1)"></b></i></xml><span datasrc="#xss" datafld="	STRING
HIGH	Fuzzing/XSS/robot-friendly/XSS-payloadbox.txt	<xml id="xss"><i><b><img src="javas<!-- -->cript:javascript:alert(1)"></b></i></xml><span datasrc="#xss" datafld="	STRING
HIGH	Fuzzing/XSS/robot-friendly/XSS-OFJAAAH.txt	<xml id="xss"><i><b><img src="javas<!-- -->cript:javascript:alert(1)"></b></i></xml><span datasrc="#xss" datafld="	STRING
HIGH	Fuzzing/XSS/human-friendly/XSS-payloadbox.txt	><script>alert("xss")</script>"> <scr<script>ipt>alert('xss');</scr</script>ipt> <script>alert(string.fromcharcode(88,83	STRING
HIGH	Fuzzing/XSS/human-friendly/XSS-OFJAAAH.txt	><script>alert("xss")</script>"> <scr<script>ipt>alert('xss');</scr</script>ipt> <script>alert(string.fromcharcode(88,83	STRING
HIGH	Fuzzing/XSS/robot-friendly/XSS-payloadbox.txt	><script>alert("xss")</script>"> <scr<script>ipt>alert('xss');</scr</script>ipt> <script>alert(string.fromcharcode(88,83	STRING
HIGH	Fuzzing/XSS/robot-friendly/XSS-OFJAAAH.txt	><script>alert("xss")</script>"> <scr<script>ipt>alert('xss');</scr</script>ipt> <script>alert(string.fromcharcode(88,83	STRING

Hallucination Indicators1 hit · 10 pts

Severity	File	Line	Snippet	Context
CRITICAL	Fuzzing/User-Agents/hardware-type-specific/tv.txt	782	Mozilla/5.0 (Linux; Andr0id 6.0.1; TPM171E Build/MUE34) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safa	CODE

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.bin/wordlist-updaters/updater.py	35	# Check if the files exists	COMMENT

Excessive Try-Catch Wrapping1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	.bin/pull-sqlmap-payloads.py	59	except Exception as e:	CODE

danielmiessler/SecLists

Open-Source Code Quality, Security and Technical Debt Review