2.6

Adjusted Signal

2.6

Raw Pattern Score

100%

Time Factor

2026-09-29

Last Push

4.7K

Stars

PHP

Language

267.2K

Lines of Code

4.6K

Files

612

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 11.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 585 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 27 finding(s).

Agent Over-Engineering Ratio 10.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 552 finding(s).

PR Review Velocity Impact 11.2/100 · LOW

Which changes need focused human review? 612 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 1MEDIUM 0LOW 609

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 612 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers552 hits · 602 pts

Severity	File	Line	Snippet	Context
LOW	inc/Ui/Search.php	155	protected function isNamespaceAssistanceAvailable(array $parsedQuery)	CODE
LOW	inc/Ui/Search.php	171	protected function isFragmentAssistanceAvailable(array $parsedQuery)	CODE
LOW	inc/Ui/Search.php	189	protected function addSearchAssistanceElements(Form $searchForm)	CODE
LOW	inc/Ui/Search.php	350	protected function getAdditionalNamespacesFromResults($baseNS)	CODE
LOW	inc/Extension/AdminPlugin.php	90	public function isAccessibleByCurrentUser()	CODE
LOW	inc/ChangeLog/MediaChangeLog.php	46	protected function getGlobalChangelogFilename()	CODE
LOW	inc/ChangeLog/MediaChangeLog.php	104	protected function currentContentMatchesRevision($rev)	CODE
LOW	inc/ChangeLog/PageChangeLog.php	46	protected function getGlobalChangelogFilename()	CODE
LOW	inc/ChangeLog/PageChangeLog.php	78	protected function currentContentMatchesRevision($rev)	CODE
LOW	inc/ChangeLog/RevisionInfo.php	262	public function showIconCompareWithPrevious()	CODE
LOW	inc/ChangeLog/RevisionInfo.php	308	public function showIconCompareWithCurrent()	CODE
LOW	inc/ChangeLog/ChangeLog.php	60	abstract protected function getGlobalChangelogFilename();	CODE
LOW	inc/ChangeLog/ChangeLog.php	670	protected function synthesizeExternalDeletion($recordedRev)	CODE
LOW	inc/ChangeLog/ChangeLog.php	902	protected function persistCurrentRevisionInfo(array $revInfo)	CODE
LOW	inc/ChangeLog/ChangeLog.php	993	abstract protected function currentContentMatchesRevision($rev);	CODE
LOW	inc/Feed/FeedCreator.php	161	protected function fetchItemsFromRecentChanges()	CODE
LOW	inc/Debug/PropertyDeprecationHelper.php	101	private function deprecationHelperGetPropertyOwner($property)	CODE
LOW	inc/Debug/DebugHelper.php	121	public static function dbgCustomDeprecationEvent(	CODE
LOW	inc/Remote/LegacyApiCore.php	468	public function legacyGetRecentMediaChanges($timestamp)	CODE
LOW	inc/Remote/LegacyApiCore.php	509	public function legacyGetRPCVersionSupported()	CODE
LOW	inc/Remote/LegacyApiCore.php	536	public function legacyGetXMLRPCAPIVersion()	CODE
LOW	_test/core/phpQuery-onefile.php	640	private function documentFragmentLoadMarkup($fragment, $charset, $markup = null) {	CODE
LOW	_test/tests/DraftTest.php	34	public function testSaveAndRetrieveWholePage(): void	CODE
LOW	_test/tests/DraftTest.php	53	public function testSaveReassemblesSectionEdit(): void	CODE
LOW	_test/tests/DraftTest.php	97	public function testDeleteRemovesTheDraft(): void	CODE
LOW	_test/tests/DraftTest.php	115	public function testGetDraftTextThrowsWhenMissing(): void	CODE
LOW	_test/tests/DraftTest.php	128	public function testStaleDraftPurgedOnConstruction(): void	CODE
LOW	_test/tests/DraftTest.php	153	public function testFreshDraftKeptOnConstruction(): void	CODE
LOW	_test/tests/MailUtilsTest.php	35	public function testObfuscateHexQueryPreserved(): void	CODE
LOW⚡	_test/tests/MailUtilsTest.php	121	public function testObfuscateUrlNoneNoQuery(): void	CODE
LOW⚡	_test/tests/MailUtilsTest.php	128	public function testObfuscateUrlHexNoQuery(): void	CODE
LOW⚡	_test/tests/MailUtilsTest.php	138	public function testObfuscateUrlVisibleNoQuery(): void	CODE
LOW	_test/tests/MailUtilsTest.php	154	public function testObfuscateEscapesHtmlSpecials(): void	CODE
LOW	_test/tests/MailUtilsTest.php	246	public function testQuotedPrintableSimple(): void	CODE
LOW	_test/tests/MailUtilsTest.php	251	public function testQuotedPrintableSpaceEnd(): void	CODE
LOW	_test/tests/MailUtilsTest.php	271	public function testQuotedPrintableNoWrap(): void	CODE
LOW	_test/tests/MailUtilsTest.php	297	public function testPatternRejectsInvalid(): void	CODE
LOW	_test/tests/Ui/PageDiffTest.php	43	public function testExistingPageComparesPreviousToCurrent()	CODE
LOW	_test/tests/Ui/PageDiffTest.php	66	public function testNormalDeletionComparesPreviousToDeletion()	CODE
LOW	_test/tests/Ui/PageDiffTest.php	93	public function testExternalDeletionComparesPreviousToDeletion()	CODE
LOW	_test/tests/Ui/PageDiffTest.php	120	public function testDeletionDiffRendersRemovedContent()	CODE
LOW	_test/tests/Ui/Media/DisplayTest.php	19	public function testGetDetailHtmlEmitsBboxFittedRotatedDims()	CODE
LOW	_test/tests/Ui/Media/DisplayTest.php	29	public function testGetDetailHtmlStructure()	CODE
LOW	_test/tests/Ui/Media/DisplayTest.php	40	public function testGetDetailHtmlReturnsEmptyForNonImage()	CODE
LOW	_test/tests/Ui/Media/DisplayTest.php	46	public function testGetDetailHtmlUsesRevParamWhenRevIsSet()	CODE
LOW	_test/tests/Ui/Media/DisplayTest.php	61	public function testGetDetailHtmlUsesTimestampWhenNoRev()	CODE
LOW	_test/tests/Form/TextareaElementTest.php	25	public function testStartTagIsFollowedByGuardNewline()	CODE
LOW	_test/tests/Form/TextareaElementTest.php	30	public function testValueIsEmittedInFullAfterGuard()	CODE
LOW	_test/tests/Form/DropdownElementTest.php	157	public function testOptgroupsDoubleselect()	CODE
LOW	_test/tests/inc/html_secedit_pattern.test.php	6	public function dataProviderForTestSecEditPattern() {	CODE
LOW	_test/tests/inc/sort_without_collator.test.php	37	public function testIntlExtensionAvailability()	CODE
LOW	_test/tests/inc/PageUtilsIsHiddenPage.test.php	48	function testEventHandlerBeforeAndPrevent() {	CODE
LOW	_test/tests/inc/PageUtilsIsHiddenPage.test.php	70	function testEventHandlerAfterHide() {	CODE
LOW	_test/tests/inc/PageUtilsIsHiddenPage.test.php	82	function testEventHandlerAfterShow() {	CODE
LOW	_test/tests/inc/html_hilight.test.php	21	function testHighlightTwoWordsHtml() {	CODE
LOW	_test/tests/inc/common_saveWikiText.test.php	20	private function checkChangeLogAfterNormalSave(	CODE
LOW	_test/tests/inc/common_saveWikiText.test.php	52	private function checkChangeLogAfterExternalEdit(	CODE
LOW	_test/tests/inc/pageutils_sectionid.test.php	38	function testSectionIDCanBeCalledWithNonArrayCheck(){	CODE
LOW	_test/tests/inc/sort_with_collator.test.php	14	public function testIntlExtensionAvailability()	CODE
LOW	_test/tests/inc/JWTTest.php	84	public function testLoginAlternativeHeader()	CODE
492 more matches not shown…

Over-Commented Block31 hits · 31 pts

Severity	File	Line	Snippet	Context
LOW	install.php	421	# <?php exit()?>	COMMENT
LOW	inc/MailUtils.php	181	$sLine .= ($iLastChar == 0x09) ? '09' : '20';	COMMENT
LOW	inc/JpegMeta.php	21	// 1. Redistributions of source code must retain the above copyright	COMMENT
LOW	inc/Utf8/tables/romanization.php	561	// 'ヴぁ'=>'va','ヴぇ'=>'ve','ヴぃ'=>'vi','ヴぉ'=>'vo','ヴ'=>'vu',	COMMENT
LOW	inc/Utf8/tables/romanization.php	1201	// 'ロ'=>'lo',	COMMENT
LOW	inc/Utf8/tables/romanization.php	1221	// 'テョ'=>'tho',	COMMENT
LOW	inc/Utf8/tables/romanization.php	1241	// 'ジョ'=>'zho',	COMMENT
LOW	inc/lang/uk/stopwords.txt	1	# Це список ігнорованих індексатором слів, одне слово в рядку	COMMENT
LOW	inc/Parsing/ParserMode/GfmLink.php	41	*/	COMMENT
LOW	inc/Parsing/ParserMode/GfmCode.php	81	// Entry pattern breakdown (F = fence char, INFO = info-string class):	COMMENT
LOW	inc/Parsing/ParserMode/GfmTable.php	101	{	COMMENT
LOW	inc/Parsing/ParserMode/GfmEmphasis.php	41	// (?<![\s]) — last body char: not whitespace, not ``	COMMENT
LOW	inc/Debug/PropertyDeprecationHelper.php	101	private function deprecationHelperGetPropertyOwner($property)	COMMENT
LOW	_test/core/phpQuery-onefile.php	561	if ($source instanceof DOMNODE && !($source instanceof DOMNODELIST))	COMMENT
LOW	_test/tests/inc/IpTest.php	381	$tests = [	COMMENT
LOW	_test/tests/inc/sort_with_collator.test.php	181	// a = ä	COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	21	// trigger, otherwise tabs are ordinary characters.	COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	61	49 => 'ATX headings (§4.2): empty heading - XHTML renderer skips blank headings via blank() guard',	COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	101	// -----------------------------------------------------------------------------------------------------------------	COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	121		COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	261		COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	321		COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	341	328 => 'Entity refs (§6.2): link with entity-decoded URL and title - title attribute discarded, no DW link slot',	COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	421	483 => 'Emphasis (§6.4): crossing link _foo [bar_](/url) - leftmost-match cannot reject opener crossing link',	COMMENT
LOW	_test/tests/Parsing/Markdown/gfm-spec/skip.php	581	647 => 'Raw HTML (§6.10): EMPTY declaration - pass-through not supported',	COMMENT
LOW	_test/conf/users.auth.php	1	# users.auth.php	COMMENT
LOW	_test/conf/acl.auth.php	1	# acl.auth.php	COMMENT
LOW	lib/plugins/authad/adLDAP/classes/adLDAPUsers.php	341	// Password expiry in AD can be calculated from TWO values:	COMMENT
LOW	lib/plugins/authad/adLDAP/classes/adLDAPUsers.php	361	//	COMMENT
LOW	lib/scripts/jquery/update.sh	1	#!/usr/bin/env sh	COMMENT
LOW	conf/dokuwiki.php	121	// 'rss' - RSS 0.91	COMMENT

Fake / Example Data25 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	inc/template.php	762	'placeholder' => $lang['btn_search'],	CODE
LOW	_test/tests/MailUtilsTest.php	293	preg_match('<' . MailUtils::PREG_PATTERN_VALID_EMAIL . '>', 'user@example.com')	CODE
LOW	_test/tests/inc/toolbar.test.php	11	$INFO['userinfo']['mail'] = 'example@example.org';	CODE
LOW	_test/tests/Parsing/Markdown/gfm-spec/spec.txt	9910	"Lorem ipsum dolor\nsit amet."	CODE
LOW	_test/tests/Parsing/Markdown/gfm-spec/spec.txt	9969	> Lorem ipsum dolor	CODE
LOW	_test/tests/Parsing/Markdown/gfm-spec/spec.txt	9984	> Lorem ipsum dolor	CODE
LOW	_test/tests/Parsing/Markdown/gfm-spec/spec.txt	9996	"Lorem ipsum dolor"	CODE
LOW	_test/tests/Parsing/Markdown/gfm-spec/spec.txt	10012	"Lorem ipsum dolor\nsit amet."	CODE
LOW	_test/tests/Parsing/Markdown/gfm-spec/spec.txt	10030	"Lorem ipsum dolor\nsit amet."	CODE
LOW	_test/tests/Parsing/Markdown/gfm-spec/spec.txt	10052	"Lorem ipsum dolor\nsit amet."	CODE
LOW	_test/tests/Parsing/Markdown/gfm-spec/spec.txt	10075	str "Lorem ipsum dolor"	CODE
LOW⚡	_test/tests/Parsing/ParserMode/GfmLinkTest.php	374	['emaillink', ['user@example.com', $this->mediaArray([])]],	CODE
LOW	_test/tests/Parsing/ParserMode/GfmLinkTest.php	109	['emaillink', ['user@example.com', 'mail']],	CODE
LOW⚡	_test/tests/Parsing/Helpers/LinkTest.php	65	['emaillink', ['user@example.com', 'Mail']],	CODE
LOW⚡	_test/tests/Parsing/Helpers/LinkTest.php	66	Link::classify('user@example.com', 'Mail')	CODE
LOW	lib/plugins/authpdo/_test/sqlite.test.php	133	$this->assertEquals('admin@example.com', $info['mail']);	CODE
LOW	lib/plugins/authpdo/_test/sqlite.test.php	167	'mail' => 'admin@example.com',	CODE
LOW	lib/plugins/authpdo/_test/sqlite.test.php	174	'mail' => 'user@example.com',	CODE
LOW	lib/plugins/authpdo/_test/mysql/wordpress.sql	123	(1, 'admin', '$P$BlO2X5nM.djjfsPjOBHz97GHZmpBRr.', 'admin', 'admin@example.com', '', '2016-02-10 18:55:26', '', 0, 'admi	CODE
LOW	lib/plugins/authpdo/_test/mysql/fluxbb.php	87	'mail' => 'admin@example.com',	CODE
LOW	lib/plugins/authpdo/_test/mysql/wordpress.php	78	'mail' => 'admin@example.com',	CODE
LOW	lib/plugins/authpdo/_test/mysql/fluxbb.sql	131	(2, 1, 'admin', '9d4e1e23bd5b727046a9e3b4b7db57bd8d6ee684', 'admin@example.com', NULL, NULL, NULL, NULL, NULL, NULL, NUL	CODE
LOW	lib/plugins/authpdo/_test/pgsql/django.sql	696	INSERT INTO auth_user (id, password, last_login, is_superuser, username, first_name, last_name, email, is_staff, is_acti	CODE
LOW	lib/plugins/authplain/_test/userdata.test.php	72	$this->assertEquals('admin@example.com', $data['mail']);	CODE
LOW	lib/scripts/jquery/jquery-ui.min.js	6	(t=>{"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)})(function(V){V.ui=V.ui\|\|{};V.ui.version="1.14	CODE

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	lib/scripts/jquery/jquery-ui.min.js	6	(t=>{"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)})(function(V){V.ui=V.ui\|\|{};V.ui.version="1.14	CODE
CRITICAL	lib/scripts/jquery/jquery.min.js	2	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):f	CODE

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	SECURITY.md	15	Please refer to our [AI policy](AI_POLICY.md) for general guidance on using AI tools. Most importantly, use your own voi	CODE

Slop Phrases1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	lib/tpl/dokuwiki/style.ini	7	; Please don't forget to copy the section your changes should be under	CODE

dokuwiki/dokuwiki

Open-Source Code Quality, Security and Technical Debt Review