0.2

Adjusted Signal

0.2

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

52.3K

Stars

Java

Language

1.1M

Lines of Code

7.7K

Files

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 60 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 33 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 8 finding(s).

PR Review Velocity Impact 1.1/100 · LOW

Which changes need focused human review? 93 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 16HIGH 1MEDIUM 1LOW 75

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 93 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators16 hits · 175 pts

Severity	File	Line	Snippet	Context
CRITICAL	…dbeaver/ext/cdata/registry/CDataDriverCatalogTest.java	338	var manager = org.eclipse.core.runtime.jobs.Job.getJobManager();	STRING
CRITICAL	….platform/src/org/jkiss/dbeaver/model/DBUtilsTest.java	198	org.eclipse.equinox.launcher.Main.main(new String[] {	CODE
CRITICAL	…/app/standalone/ApplicationWorkbenchWindowAdvisor.java	176	configurer.configureEditorAreaDropListener(new org.eclipse.ui.internal.ide.EditorAreaDropAdapter(	CODE
CRITICAL	…src/org/jkiss/dbeaver/model/fs/nio/EFSNIOResource.java	173	// Same as o.e.c.i.Resource.hashCode()	COMMENT
CRITICAL	…src/org/jkiss/dbeaver/model/fs/nio/EFSNIOResource.java	179	// Similar to o.e.c.i.Resource.equals(Object)	COMMENT
CRITICAL	…dbeaver.core/src/org/jkiss/dbeaver/core/DesktopUI.java	801	return 800; // see org.eclipse.ui.internal.progress.ProgressManager.getLongOperationTime()	CODE
CRITICAL	…dbeaver/ui/editors/sql/templates/SQLTemplateStore.java	148	URL url = FileLocator.find(plugin, org.eclipse.core.runtime.Path.fromOSString(file), null);	CODE
CRITICAL	…dbeaver/ui/editors/sql/templates/SQLTemplateStore.java	152	URL bundleURL = FileLocator.find(plugin, org.eclipse.core.runtime.Path.fromOSString(translations), n	CODE
CRITICAL	…beaver/ui/controls/resultset/FilterSettingsDialog.java	647	* See org.jkiss.dbeaver.ui.properties.PropertyTreeViewer.saveEditorValues()	COMMENT
CRITICAL	…ver/ui/controls/findandreplace/FindReplaceOverlay.java	302	// see org.jkiss.dbeaver.ui.editors.TextEditorUtils.enableHostEditorKeyBindingsSupport(..)	COMMENT
CRITICAL	…/dbeaver/team/git/ui/handlers/ProjectCloneHandler.java	38	org.eclipse.egit.ui.Activator.getDefault().getDialogSettings().put(	CODE
CRITICAL	plugins/org.jkiss.dbeaver.ui.ai/web/marked.umd.js	51	`+r.text,this.inlineQueue.pop(),this.inlineQueue.at(-1).src=s.text):t.push(r);continue}if(e){let s="Infinite loop on byt	CODE
CRITICAL	…ss/dbeaver/ui/ai/engine/openai/OpenAiConfigurator.java	604	: org.eclipse.core.runtime.Status.error(	CODE
CRITICAL	…ss/dbeaver/ui/ai/engine/openai/OpenAiConfigurator.java	625	return org.eclipse.core.runtime.Status.error("Unable to sign in to " + getAccountProviderName(), e);	CODE
CRITICAL	…er/tools/transfer/ui/wizard/DataTransferPagePipes.java	473	List<StreamMappingAttribute> attributes = mapping.getAttributes(new org.jkiss.dbeaver.model.runt	CODE
CRITICAL	…kiss/dbeaver/ext/altibase/model/AltibaseMetaModel.java	1083	at org.jkiss.dbeaver.model.impl.jdbc.exec.JDBCFactoryDefault.createCallableStatement(JDBCFactoryDefault.java	CODE

Over-Commented Block43 hits · 43 pts

Severity	File	Line	Snippet	Context
LOW	…est.platform/src/org/jkiss/dbeaver/ui/svg/SVGTest.java	81	Assertions.assertEquals(a.getRGB(x, y), b.getRGB(x, y), "Pixel at %d-%d should be the same".formatted(x,	COMMENT
LOW	…est.platform/src/org/jkiss/dbeaver/ui/svg/SVGTest.java	101	//	COMMENT
LOW	…model/sql/analyzer/SQLQueryCompletionAnalyzerTest.java	621	"on (\|x1 = xx1 and xx2 is not null)"	COMMENT
LOW	…/jkiss/dbeaver/model/lsm/test/ParseSelectStmtTest.java	81	Assertions.assertTrue(noErrors);	COMMENT
LOW	…er.ext.db2/src/org/jkiss/dbeaver/ext/db2/DB2Utils.java	121	//	COMMENT
LOW	…er/src/org/jkiss/dbeaver/launcher/DBeaverLauncher.java	2481	// property is not already set.	COMMENT
LOW	…c/org/jkiss/dbeaver/ui/editors/sql/QueryProcessor.java	341	final boolean isStatsResult = (statement != null && statement.getData() == SQLQueryJob.STATS_RESULTS);	COMMENT
LOW	…aver/ui/editors/sql/syntax/SQLCompletionProcessor.java	321	// prepared proposals are not relevant anymore.	COMMENT
LOW	…dlers/SQLEditorHandlerToggleMultipleResultsPerTab.java	41	// And workbench never actually removes this command listener, so it leaks with each and any contribution instan	COMMENT
LOW	…dlers/SQLEditorHandlerToggleMultipleResultsPerTab.java	101	//	COMMENT
LOW	…base/src/org/jkiss/dbeaver/ui/editors/EditorUtils.java	841	// if (activationNavigator != null) {	COMMENT
LOW	…g/jkiss/dbeaver/ext/mysql/MySQLDataSourceProvider.java	61	connectionsProps = new HashMap<>();	COMMENT
LOW	…jkiss/dbeaver/ext/postgresql/model/PostgreDialect.java	101	// "ARRAY_AGG",	COMMENT
LOW	…jkiss/dbeaver/ext/postgresql/model/PostgreDialect.java	121	// "COMMAND_FUNCTION",	COMMENT
LOW	…jkiss/dbeaver/ext/postgresql/model/PostgreDialect.java	181	"NAMESPACE",	COMMENT
LOW	…jkiss/dbeaver/ext/postgresql/model/PostgreDialect.java	201	"PERMISSION",	COMMENT
LOW	…jkiss/dbeaver/ext/postgresql/model/PostgreDialect.java	221	//"ROW_COUNT",	COMMENT
LOW	…jkiss/dbeaver/ext/postgresql/model/PostgreDialect.java	241	//"TRANSACTIONS_ROLLED_BACK",	COMMENT
LOW	…org/jkiss/dbeaver/ui/controls/lightgrid/LightGrid.java	3021	*	COMMENT
LOW	…er/src/org/jkiss/dbeaver/ext/mimer/MimerConstants.java	61	// so it resolves to DBPDataKind.UNKNOWN unless MimerDataSource#resolveDataKind forces it	COMMENT
LOW	…er/src/org/jkiss/dbeaver/ext/mimer/MimerConstants.java	81	// NATIONAL CHARACTER LARGE OBJECT (NCLOB) is also missing entirely from the driver's own	COMMENT
LOW	…er/src/org/jkiss/dbeaver/ext/mimer/MimerConstants.java	101	// TYPE_NAMES_LARGE_OBJECT above: the driver's own getTypeInfo() doesn't report these as	COMMENT
LOW	…er/src/org/jkiss/dbeaver/ext/mimer/MimerConstants.java	121	// CHARACTER VARYING/NATIONAL CHARACTER VARYING require an explicit length - unlike CHAR,	COMMENT
LOW	…er/src/org/jkiss/dbeaver/ext/mimer/MimerConstants.java	181	public static final String PROTOCOL_LOCAL = "local";	COMMENT
LOW	…er/src/org/jkiss/dbeaver/ext/mimer/MimerConstants.java	241	algorithms.put(INDEX_ALGORITHM_PINYIN_START_T9, "PinYin Start (T9)");	COMMENT
LOW	…org/jkiss/dbeaver/ext/mimer/model/MimerSQLDialect.java	141		COMMENT
LOW	…jkiss/dbeaver/ui/editors/erd/part/AssociationPart.java	401	return;	COMMENT
LOW	…jkiss/dbeaver/ui/editors/erd/part/AssociationPart.java	421	// using pythagoras theorem) be defined as d. We want to find point r where the	COMMENT
LOW	…/org/jkiss/dbeaver/ui/dialogs/StandardErrorDialog.java	101	return contents;	COMMENT
LOW	…odel/src/org/jkiss/dbeaver/model/sql/SQLConstants.java	421	"BEFORE",	COMMENT
LOW	…odel/src/org/jkiss/dbeaver/model/sql/SQLConstants.java	541	// "PLI",	COMMENT
LOW	plugins/org.jkiss.dbeaver.data.office/about.ini	1	# about.ini	COMMENT
LOW	…eaver/model/sql/semantics/model/SQLQueryNodeModel.java	161	// When the insertion point is the first node:	COMMENT
LOW	…select/SQLQueryRowsSetCorrespondingOperationModel.java	81	}	COMMENT
LOW	…select/SQLQueryRowsSetCorrespondingOperationModel.java	101	// if (i >= leftColumns.size()) {	COMMENT
LOW	…select/SQLQueryRowsSetCorrespondingOperationModel.java	121	// } else {	COMMENT
LOW	…select/SQLQueryRowsSetCorrespondingOperationModel.java	141	//	COMMENT
LOW	plugins/org.jkiss.dbeaver.ext.wmi/src-native/stdafx.h	1	// stdafx.h : include file for standard system include files,	COMMENT
LOW	plugins/org.jkiss.dbeaver.ext.wmi/src-native/stdafx.h	21	#define _WIN32_WINDOWS 0x0410 // Change this to the appropriate value to target Windows Me or later.	COMMENT
LOW	plugins/org.jkiss.dbeaver.ext.wmi/src-native/stdafx.h	41	#include <objbase.h>	COMMENT
LOW	…ver/ui/dashboard/editor/DashboardEditorStandalone.java	101	fileName = fileName.substring(0, fileName.length() - 1 - DashboardConstants.DASHBOARD_EXT.length());	COMMENT
LOW	.github/workflows/codeql.yml	1	# For most projects, this workflow file will not need changing; you simply need	COMMENT
LOW	.github/workflows/codeql.yml	61		COMMENT

Fake / Example Data17 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	…iss/dbeaver/ext/cdata/registry/CDataPromptProcess.java	51	if ("Test User".equals(name) && "test@example.org".equals(email) && "TRIAL".equals(key)) {	CODE
LOW	…/cdata/registry/CDataLicenseActivationRequestTest.java	54	Assertions.assertEquals("user@example.com", request.email());	CODE
LOW	…cdata/registry/CDataLicenseActivationReporterTest.java	69	Assertions.assertEquals("user@example.com", activation.get("email").getAsString());	CODE
LOW	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	186	"Test User", "test@example.org", CDataLicenseType.TRIAL, null);	CODE
LOW	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	282	"test@example.org",	CODE
LOW⚡	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	306	new CDataLicenseActivationRequest("ABC", "test@example.org", CDataLicenseType.PURCHASED, "ABC-SECRET"),	CODE
LOW⚡	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	307	new CDataLicenseActivationRequest("user", "user@example.org", CDataLicenseType.PURCHASED, "user@example.org-	CODE
LOW⚡	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	308	new CDataLicenseActivationRequest("ABC-SECRET", "test@example.org", CDataLicenseType.PURCHASED, "ABC"),	CODE
LOW⚡	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	309	new CDataLicenseActivationRequest("name[1]", "name+tag@example.org", CDataLicenseType.PURCHASED, "name+tag@e	CODE
LOW⚡	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	315	CDataLicenseActivationRequest trial = new CDataLicenseActivationRequest("user", "user@example.org", CDataLicense	CODE
LOW⚡	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	317	CDataLicenseActivator.sanitizeOutput("Name: user Email: user@example.org", trial));	CODE
LOW	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	338	new CDataProcessExecutor.PromptResponse("Email Address:", "test@example.org"),	CODE
LOW	…dbeaver/ext/cdata/registry/CDataLicenseParserTest.java	550	new CDataLicenseActivationRequest("Test User", "test@example.org", CDataLicenseType.PURCHASED, "test-key	CODE
LOW	…est.platform/src/org/jkiss/utils/GeneralUtilsTest.java	64	"user@example.com",	CODE
LOW	…l/ai/engine/openai/OpenAIAccountAuthenticatorTest.java	92	assertEquals("user@example.com", OpenAIAccountAuthenticator.extractEmail(token));	CODE
LOW	…/dbeaver/ext/cdata/model/CDataConnectionHierarchy.java	430	name, string(json, "name"), string(json, "type"), string(json, "description"), string(json, "placeholder	CODE
LOW	plugins/org.jkiss.dbeaver.ui.ai/web/purify.min.js	2	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define	CODE

Hyper-Verbose Identifiers8 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	…jkiss/dbeaver/model/cli/rest/BearerRequestHandler.java	33	public class BearerRequestHandler<T> extends RestServer.RequestHandler<T> {	CODE
LOW	…ss.dbeaver.ui.ai/web/scripts/function-confirmations.js	117	function approveFunctionConfirmation(messageId, functionIndex) {	CODE
LOW	…ss.dbeaver.ui.ai/web/scripts/function-confirmations.js	243	function replaceCardWithCollapsibleStatus(container, text, statusClass, data) {	CODE
LOW	…ss.dbeaver.ui.ai/web/scripts/function-confirmations.js	271	function createConfirmationStatusIcon(statusClass, text) {	CODE
LOW	…ugins/org.jkiss.dbeaver.ui.ai/web/scripts/chat-view.js	1	function hasActiveStreamingResponse() {	CODE
LOW	plugins/org.jkiss.dbeaver.ui.ai/web/scripts/a11y.js	110	function getInteractiveDescendants(item) {	CODE
LOW	plugins/org.jkiss.dbeaver.ui.ai/web/scripts/a11y.js	364	function setAnnouncementsSuspended(suspended) {	CODE
LOW	plugins/org.jkiss.dbeaver.ui.ai/web/scripts/messages.js	187	function calculateIconsContainerOffset(messageDiv, iconsContainer) {	CODE

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…/ai/engine/openai/dto/legacy/ChatCompletionChoice.java	22	* A chat completion generated by OpenAI	COMMENT

TODO Padding4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	…er/ui/controls/resultset/handler/SaveScriptDialog.java	161	// TODO: implement deep cascade	COMMENT
LOW	…/dbeaver/ui/editors/erd/editor/ERDGraphicalViewer.java	505	// TODO: implement	COMMENT
LOW	…jkiss/dbeaver/registry/maven/MavenArtifactVersion.java	406	// TODO: implement real properties checks. Now enable all profiles with !prop	COMMENT
LOW	…src/org/jkiss/dbeaver/ui/navigator/NavigatorUtils.java	373	// TODO: implement some other behavior	COMMENT

Slop Phrases1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/codeql.yml	56	# If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how	COMMENT

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…s/dbeaver/ui/app/config/ProductConfigWizardDialog.java	124	// NOTE: This method is almost identical to its base implementation,	COMMENT

AI Slop Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…iss/dbeaver/ext/postgresql/model/PostgreAttribute.java	170	// TODO: [#2824] Perhaps we should just use type names declared in pg_catalog	COMMENT

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…ns/org.jkiss.dbeaver.ext.wmi/src-native/WMIService.cpp	124	// Step 3: ---------------------------------------------------	COMMENT

dbeaver/dbeaver

Open-Source Code Quality, Security and Technical Debt Review