2.0

Adjusted Signal

2.0

Raw Pattern Score

100%

Time Factor

2026-10-26

Last Push

19.0K

Stars

Ruby

Language

151.5K

Lines of Code

682

Files

248

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 154 finding(s).

Hallucinated Dependency & Supply Chain Risk 4.7/100 · LOW

Are imports declared and package/API names verified? 94 finding(s).

Agent Over-Engineering Ratio 3.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 97 finding(s).

PR Review Velocity Impact 9.6/100 · LOW

Which changes need focused human review? 248 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 6HIGH 0MEDIUM 2LOW 240

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 248 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers97 hits · 98 pts

Severity	File	Line	Snippet	Context
LOW⚡	app/mailers/submitter_mailer.rb	272	def build_submitter_preferences_index(submitter)	CODE
LOW⚡	app/mailers/submitter_mailer.rb	276	def select_completed_documents(submitter)	CODE
LOW⚡	app/mailers/submitter_mailer.rb	284	def add_attachments_with_size_limit(submitter, storage_attachments, current_size, filename_format = nil)	CODE
LOW	app/mailers/submitter_mailer.rb	299	def from_address_for_submitter(submitter)	CODE
LOW	…avascript/template_builder/dynamic_variables_schema.js	278	function parseComparisonOrPresence (tokens, pos) {	CODE
LOW	…avascript/template_builder/dynamic_variables_schema.js	325	function extractConditionVariables (node, acc = []) {	CODE
LOW	…avascript/template_builder/dynamic_variables_schema.js	466	function assignNestedSchemaWithPriority (propertiesHash, parentProperties, keyString, newType) {	CODE
LOW	…avascript/template_builder/dynamic_variables_schema.js	497	function processConditionVariables (condition, propertiesHash, parentProperties) {	CODE
LOW	app/jobs/process_submitter_completion_job.rb	98	def enqueue_completed_webhooks(submitter, is_last: false)	CODE
LOW	app/jobs/process_submitter_completion_job.rb	150	def enqueue_bcc_completed_emails(submitter, user, is_sent_to_user)	CODE
LOW	app/jobs/process_submitter_completion_job.rb	190	def enqueue_next_submitter_request_notification(submitter) # rubocop:disable Metrics/PerceivedComplexity	CODE
LOW	app/jobs/process_submitter_completion_job.rb	225	def enqueue_next_submitter_viewer_notification(submission, next_submitters)	CODE
LOW	app/controllers/start_form_controller.rb	90	def find_or_initialize_submitter(template, submitter_params)	CODE
LOW	app/controllers/templates_clone_controller.rb	49	def maybe_redirect_to_template(template)	CODE
LOW	app/controllers/passwords_controller.rb	28	def after_resetting_password_path_for(_)	CODE
LOW	app/controllers/submit_form_upload_controller.rb	72	def build_new_cookie_signatures_json(submitter, attachment)	CODE
LOW	app/controllers/start_form_resubmit_controller.rb	50	def find_or_initialize_submitter(template, resubmit_submitter)	CODE
LOW	app/controllers/api/submitters_controller.rb	114	def maybe_filter_by_completed_at(submitters, params)	CODE
LOW	app/controllers/api/submitters_controller.rb	157	def maybe_assign_completed_attributes(submitter, attrs)	CODE
LOW	app/controllers/api/submission_documents_controller.rb	32	def build_completed_documents(submission, merge: false)	CODE
LOW	app/controllers/api/api_base_controller.rb	42	def access_denied_error_message(error)	CODE
LOW	lib/pdfium.rb	1334	def collect_text_objects_chars(text_page, rect_bounds)	CODE
LOW	lib/pdfium.rb	1384	def rebuild_text_object_survivors(entry)	CODE
LOW	lib/pdfium.rb	1893	def calculate_render_dimensions(width_param, height_param, scale_param)	CODE
LOW	lib/email_messages.rb	19	def find_or_create_for_account_user(account, user, subject, body)	CODE
LOW	lib/submissions.rb	13	def maybe_update_completed_at(submission)	CODE
LOW	lib/submissions.rb	187	def find_first_order_submitters(submission, submitters_index)	CODE
LOW	lib/submissions.rb	250	def filtered_conditions_schema(submission, values: nil, include_submitter_uuid: nil)	CODE
LOW	lib/submissions.rb	262	def filtered_conditions_fields(submitter, only_submitter_fields: true)	CODE
LOW	lib/templates.rb	107	def filter_undefined_submitters(template_submitters)	CODE
LOW	lib/templates.rb	128	def cleanup_document_attachment(attachment)	CODE
LOW	lib/submission_events.rb	14	def create_with_tracking_data(submitter, event_type, request, data = {})	CODE
LOW	lib/template_versions.rb	60	def serialize_dynamic_documents(template, dynamic_docs)	CODE
LOW	lib/search_entries.rb	118	def build_weights_wildcard_tsquery(keyword, weight)	CODE
LOW	lib/search_entries.rb	178	def build_submitter_values_string(submitter)	CODE
LOW	lib/replace_email_variables.rb	99	def build_documents_links_text(submitter, sig = nil)	CODE
LOW	lib/replace_email_variables.rb	188	def build_submission_submitters(submission)	CODE
LOW	lib/account_configs.rb	25	def find_or_initialize_for_key(account, key)	CODE
LOW	lib/load_bmp.rb	138	def extract_raw_pixel_data_blob(bmp_bytes, pixel_data_offset, bmp_stride, height)	CODE
LOW	lib/load_bmp.rb	161	def decode_indexed_pixel_data(padded_rows, bpp, width, color_table)	CODE
LOW	lib/accounts.rb	19	def find_or_create_testing_user(account)	CODE
LOW	lib/accounts.rb	43	def generate_unique_test_email(original_email)	CODE
LOW	lib/accounts.rb	76	def load_recipient_form_fields(_account)	CODE
LOW	lib/document_metadatas.rb	6	def find_or_create_for_document(document, account_id:)	CODE
LOW	lib/submitters.rb	99	def select_attachments_for_download(submitter)	CODE
LOW	lib/submitters.rb	132	def build_prefill_attachment_data(submitter, attachment)	CODE
LOW	lib/submitters.rb	171	def fetch_values_for_delegate(submitter)	CODE
LOW	lib/submitters.rb	262	def send_shared_link_email_verification_code(submitter, request:)	CODE
LOW	lib/submitters/start_form.rb	40	def find_or_initialize_submitter(template, submitter_params, exclude_completed:, request:, current_user: nil)	CODE
LOW	lib/submitters/start_form.rb	76	def assign_submission_attributes(submitter, template, ip:, user_agent:, source: :link, resubmit_submitter: nil)	CODE
LOW	lib/submitters/start_form.rb	133	def enqueue_new_submitter_jobs(submitter)	CODE
LOW	lib/submitters/submit_values.rb	74	def assign_completed_attributes(submitter, request, validate_required: true)	CODE
LOW	lib/submitters/submit_values.rb	266	def calculate_date_formula_value(_formula, _values, _submission)	CODE
LOW	lib/submitters/submit_values.rb	274	def replace_current_date_placeholders(submitter)	CODE
LOW	lib/submitters/submit_values.rb	287	def template_default_value_for_submitter(value, submitter, with_time: false, field: nil)	CODE
LOW	lib/submitters/submit_values.rb	300	def maybe_remove_condition_values(submitter, required_field_uuids_acc: nil)	CODE
LOW	lib/submitters/submit_values.rb	354	def check_field_areas_attachments(field, attachments_index)	CODE
LOW	lib/submitters/submit_values.rb	442	def replace_default_variables(value, attrs, submission, with_time: false, field: nil)	CODE
LOW	lib/submitters/normalize_values.rb	186	def normalize_attachment_value(value, field, account, attachments, for_submitter: nil, purpose: nil)	CODE
LOW	lib/submitters/normalize_values.rb	239	def find_or_create_blob_from_html(_account, value, _field)	CODE
37 more matches not shown…

Fake / Example Data88 hits · 86 pts

Severity	File	Line	Snippet	Context
LOW	app/javascript/template_builder/contenteditable.vue	10	:data-placeholder="placeholder"	CODE
LOW	spec/system/signing_form_spec.rb	171	fill_in 'Name', with: 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	231	expect(submitter.name).to eq('John Doe')	CODE
LOW	spec/system/signing_form_spec.rb	262	fill_in 'Name', with: 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	319	expect(submitter.name).to eq('John Doe')	CODE
LOW	spec/system/signing_form_spec.rb	617	fill_in 'signature_text_input', with: 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	740	fill_in 'initials_text_input', with: 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	960	fill_in 'Full Name (optional)', with: 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	977	expect(field_value(submitter, 'Full Name')).to eq 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	985	fill_in 'Full Name (optional)', with: 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	1002	expect(field_value(submitter, 'Full Name')).to eq 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	1011	fill_in 'Full Name (optional)', with: 'Jane Doe'	CODE
LOW	spec/system/signing_form_spec.rb	1025	expect(field_value(submitter, 'Full Name')).to eq 'Jane Doe'	CODE
LOW	spec/system/signing_form_spec.rb	1297	fill_in 'First Name', with: 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	1308	fill_in 'First Name', with: 'John Doe'	CODE
LOW	spec/system/signing_form_spec.rb	1318	expect(field_value(submitter, 'First Name')).to eq 'John Doe'	CODE
LOW	spec/system/email_settings_spec.rb	17	fill_in 'Username', with: 'user@example.com'	CODE
LOW	spec/system/email_settings_spec.rb	20	fill_in 'Send from Email', with: 'user@example.com'	CODE
LOW	spec/system/email_settings_spec.rb	32	expect(encrypted_config.value['username']).to eq('user@example.com')	CODE
LOW	spec/system/email_settings_spec.rb	37	expect(encrypted_config.value['from_email']).to eq('user@example.com')	CODE
LOW	docs/openapi.json	1683	"name": "John Doe",	CODE
LOW	docs/openapi.json	2371	"value": "John Doe"	CODE
LOW	docs/openapi.json	2889	"name": "John Doe",	CODE
LOW	docs/openapi.json	2897	"value": "John Doe"	CODE
LOW	docs/openapi.json	3379	"value": "John Doe"	CODE
LOW	docs/openapi.json	4446	"value": "John Doe"	CODE
LOW	docs/openapi.json	5408	"value": "John Doe"	CODE
LOW	docs/openapi.json	5556	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"Firs	CODE
LOW	docs/openapi.json	6386	"value": "John Doe"	CODE
LOW	docs/openapi.json	6763	"name": "John Doe",	CODE
LOW	docs/openapi.json	6787	"value": "John Doe"	CODE
LOW	docs/openapi.json	7357	"name": "John Doe",	CODE
LOW	docs/openapi.json	7366	"value": "John Doe"	CODE
LOW	docs/openapi.json	7786	"name": "John Doe",	CODE
LOW	docs/openapi.json	7810	"value": "John Doe"	CODE
LOW	docs/openapi.json	8832	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	CODE
LOW	docs/openapi.json	8900	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"Firs	CODE
LOW	docs/openapi.json	11676	"value": "John Doe"	CODE
LOW	docs/api/go.md	1876	payload := strings.NewReader("{\"name\":\"Test Submission Document\",\"documents\":[{\"name\":\"Test Document\",\"html\	CODE
LOW	docs/api/go.md	1991	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	CODE
LOW	docs/api/go.md	3979	payload := strings.NewReader("{\"html\":\"<p>Lorem Ipsum is simply dummy text of the\\n<text-field\\n name=\\\"Industr	CODE
LOW	docs/api/go.md	4024	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Party\"\n	CODE
LOW	docs/api/go.md	4092	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	CODE
LOW	docs/api/python.md	1801	"html": """<p>Lorem Ipsum is simply dummy text of the	CODE
LOW	docs/api/python.md	1918	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	STRING
LOW	docs/api/python.md	3773	"html": """<p>Lorem Ipsum is simply dummy text of the	STRING
LOW	docs/api/python.md	3813	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Party\"\n	STRING
LOW	docs/api/python.md	3881	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	STRING
LOW	docs/api/csharp.md	1735	request.AddParameter("application/json", "{\"name\":\"Test Submission Document\",\"documents\":[{\"name\":\"Test Documen	CODE
LOW	docs/api/csharp.md	1836	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	CODE
LOW	docs/api/csharp.md	3641	request.AddParameter("application/json", "{\"html\":\"<p>Lorem Ipsum is simply dummy text of the\\n<text-field\\n name=	CODE
LOW	docs/api/csharp.md	3672	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Party\"\n	CODE
LOW	docs/api/csharp.md	3740	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	CODE
LOW	docs/api/php.md	1780	'html' => '<p>Lorem Ipsum is simply dummy text of the	CODE
LOW	docs/api/php.md	1897	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	CODE
LOW	docs/api/php.md	3725	'html' => '<p>Lorem Ipsum is simply dummy text of the	CODE
LOW	docs/api/php.md	3765	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Party\"\n	CODE
LOW	docs/api/php.md	3833	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	CODE
LOW	docs/api/javascript.md	1794	html: `<p>Lorem Ipsum is simply dummy text of the	CODE
LOW	docs/api/javascript.md	1911	"<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First Part	CODE
28 more matches not shown…

Hallucination Indicators6 hits · 60 pts

Severity	File	Line	Snippet	Context
CRITICAL	app/javascript/template_builder/dynamic_editor.js	1053	tr.replaceWith(table.pos, table.pos + table.node.nodeSize, tr.doc.type.schema.nodes.paragraph.create())	CODE
CRITICAL	app/javascript/template_builder/dynamic_editor.js	1119	tr.insert(cellPos + 1, tr.doc.type.schema.nodes.paragraph.create(paragraph?.attrs))	CODE
CRITICAL	app/javascript/template_builder/dynamic_menu.vue	471	this.editor.view.dom.parentElement.addEventListener('mousedown', this.onMouseDown)	CODE
CRITICAL	app/javascript/template_builder/dynamic_menu.vue	479	this.editor.view.dom.parentElement.removeEventListener('mousedown', this.onMouseDown)	CODE
CRITICAL	app/javascript/template_builder/dynamic_area.vue	274	const tr = this.editor.view.state.tr.setNodeMarkup(pos, undefined, {	CODE
CRITICAL	app/javascript/template_builder/dynamic_area.vue	275	...this.editor.view.state.doc.nodeAt(pos)?.attrs,	CODE

Over-Commented Block54 hits · 54 pts

Severity	File	Line	Snippet	Context
LOW	app/models/submission_event.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/account_linked_account.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/email_message.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/account.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/email_message_asset.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/submitter.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/submitter.rb	21	# uuid :string not null	COMMENT
LOW	app/models/search_entry.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/otp_challenge.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/lock_event.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/dynamic_document_version.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/encrypted_user_config.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/webhook_url.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/email_event.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/template_folder.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/template.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/template.rb	21	# author_id :bigint not null	COMMENT
LOW	app/models/webhook_event.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/template_version.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/template_sharing.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/user_config.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/document_generation_event.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/template_access.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/mcp_token.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/submitter_version.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/account_config.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/encrypted_config.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/dynamic_document.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/submission.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/submission.rb	21	# created_at :datetime not null	COMMENT
LOW	app/models/webhook_attempt.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/completed_document.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/account_access.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/completed_submitter.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/document_metadata.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/user.rb	1	# frozen_string_literal: true	COMMENT
LOW	app/models/user.rb	21	# last_sign_in_ip :string	COMMENT
LOW	app/models/access_token.rb	1	# frozen_string_literal: true	COMMENT
LOW	config/initializers/devise.rb	41	end	COMMENT
LOW	config/initializers/devise.rb	61	# Configure the parent class responsible to send e-mails.	COMMENT
LOW	config/initializers/devise.rb	81	# given should be a request method and it will automatically be passed to the	COMMENT
LOW	config/initializers/devise.rb	101	# config.params_authenticatable = true	COMMENT
LOW	config/initializers/devise.rb	121	# Does not affect registerable.	COMMENT
LOW	config/initializers/devise.rb	141	config.reload_routes = false	COMMENT
LOW	config/initializers/devise.rb	161	# Send a notification email when the user's password is changed.	COMMENT
LOW	config/initializers/devise.rb	181	# config.confirm_within = 3.days	COMMENT
LOW	config/initializers/devise.rb	201		COMMENT
LOW	config/initializers/devise.rb	221	# Defines which strategy will be used to lock an account.	COMMENT
LOW	config/initializers/devise.rb	241	config.unlock_in = 23.hours	COMMENT
LOW	config/initializers/devise.rb	261	# Allow you to use another hashing or encryption algorithm besides bcrypt (default).	COMMENT
LOW	config/initializers/devise.rb	281	# only the current scope. By default, Devise signs out all scopes.	COMMENT
LOW	config/initializers/devise.rb	301	#	COMMENT
LOW	config/initializers/devise.rb	321		COMMENT
LOW	db/schema.rb	1	# This file is auto-generated from the current state of the database. Instead	COMMENT

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	db/schema.rb	1	# This file is auto-generated from the current state of the database. Instead	COMMENT
MEDIUM	db/schema.rb	5	# This file is the source Rails uses to define your schema when running `bin/rails	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	config/environments/production.rb	77	# Set this to true and configure the email server for immediate delivery to raise delivery errors.	COMMENT

docusealco/docuseal

Open-Source Code Quality, Security and Technical Debt Review