2.8

Adjusted Signal

2.8

Raw Pattern Score

100%

Time Factor

—

Last Push

—

Stars

—

Language

385.9K

Lines of Code

2.5K

Files

1.3K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 12.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1306 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 6 finding(s).

Agent Over-Engineering Ratio 0.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 11 finding(s).

PR Review Velocity Impact 16.2/100 · LOW

Which changes need focused human review? 1321 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 1MEDIUM 9LOW 1309

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1321 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1289 hits · 996 pts

Severity	File	Line	Snippet	Context
LOW	integration/tests/addons/addons_test.go	601	ContainElement(ContainSubstring("vpc-cni")),	COMMENT
LOW	integration/utilities/cluster/cluster.go	61	nextVersion = supportedVersions[nextVersionIndex]	COMMENT
LOW	examples/18-node-to-pod-label-matching.yaml	1	# This example demonstrates how to force the spawning of	COMMENT
LOW	examples/23-kubeflow-spot-instance.yaml	1	# Cost-Optimized EKS cluster for Kubeflow with spot GPU instances and node scale down to zero	COMMENT
LOW	.github/.goreleaser.yml	41	checksum:	COMMENT
LOW	.github/dependabot.yml	1	version: 2	COMMENT
LOW	.github/dependabot.yml	61	- "patch"	COMMENT
LOW	pkg/karpenter/karpenter.go	81		COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/iam.go	41	FargatePodExecutionRoleARN *string `json:"fargatePodExecutionRoleARN,omitempty"`	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/identity_provider.go	21		COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/addon.go	41	type Addon struct {	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/addon.go	61	// +optional	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/vpc.go	141	// LocalZoneSubnets represents subnets in local zones.	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/vpc.go	161	// and managed nodes.	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/vpc.go	181	// ControlPlaneOnPrivateSubnets restricts the control plane (the cross-account ENIs	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	321	// SpotAllocationStrategyCapacityOptimized defines the ASG spot allocation strategy of capacity-optimized	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	701	// the AWS region hosting this cluster	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	721	// AccountID the ID of the account hosting this cluster	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1261	// +required	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1541	// UpdateConfig configures how to update NodeGroups.	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1641	func (c *ClusterConfig) HasGitOpsFluxConfigured() bool {	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1661	// +optional	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1681	// +optional	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1701	// AppMesh enables full access to AppMesh	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1721	}	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1741	}	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1761	SpotInstancePools *int `json:"spotInstancePools,omitempty"`	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1801	// MaxUnhealthyNodeThresholdPercentage specifies a percentage threshold of unhealthy nodes, above which node auto	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1881	// +optional	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1901		COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1921	InstancePrefix string `json:"instancePrefix,omitempty"`	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	1961	// +optional	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	2001	// Defaults to `true`	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	2041		COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	2061	TCPEstablishedTimeout *int `json:"tcpEstablishedTimeout,omitempty"`	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/types.go	2301	AdditionalEndpointServices []string `json:"additionalEndpointServices,omitempty"`	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/partitions_test.go	41	// }	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/partitions_test.go	61	// actual, err := Partitions.V1SDKDNSPrefixForRegion(r)	COMMENT
LOW	pkg/apis/eksctl.io/v1alpha5/validation.go	581	}	COMMENT
LOW	pkg/addons/assets/nvidia-device-plugin.yaml	1	# Copyright (c) 2019, NVIDIA CORPORATION. All rights reserved.	COMMENT
LOW	pkg/cfn/manager/capability.go	61	for _, tag := range stack.Tags {	COMMENT
LOW	pkg/cfn/manager/capability.go	81	// }	COMMENT
LOW	pkg/awsapi/eks.go	21	// information about associating access policies, see [Associating and disassociating access policies to and from acces	COMMENT
LOW	pkg/awsapi/eks.go	41	AssociateIdentityProviderConfig(ctx context.Context, params eks.AssociateIdentityProviderConfigInput, optFns ...func(	COMMENT
LOW	pkg/awsapi/eks.go	61	// Kubernetes Role , ClusterRole , RoleBinding , and ClusterRoleBinding objects.	COMMENT
LOW	pkg/awsapi/eks.go	81	//	COMMENT
LOW	pkg/awsapi/eks.go	101	// provisions elastic network interfaces in your VPC subnets to provide	COMMENT
LOW	pkg/awsapi/eks.go	121	// CloudWatch Logs ingestion, archive storage, and data scanning rates apply to	COMMENT
LOW	pkg/awsapi/eks.go	141	// Creates an Fargate profile for your Amazon EKS cluster. You must have at least	COMMENT
LOW	pkg/awsapi/eks.go	161	// Fargate profiles are immutable. However, you can create a new updated profile	COMMENT
LOW	pkg/awsapi/eks.go	181	//	COMMENT
LOW	pkg/awsapi/eks.go	201	//	COMMENT
LOW	pkg/awsapi/eks.go	221	// that you run less frequently.	COMMENT
LOW	pkg/awsapi/eks.go	241	DeleteAddon(ctx context.Context, params eks.DeleteAddonInput, optFns ...func(Options)) (*eks.DeleteAddonOutput, error	COMMENT
LOW	pkg/awsapi/eks.go	261	// you must delete them first. For more information, see DeleteNodgroup and	COMMENT
LOW	pkg/awsapi/eks.go	281	// You must wait for a Fargate profile to finish deleting before you can delete any	COMMENT
LOW	pkg/awsapi/eks.go	301	DescribeAccessEntry(ctx context.Context, params eks.DescribeAccessEntryInput, optFns ...func(Options)) (*eks.Describe	COMMENT
LOW	pkg/awsapi/eks.go	321	// The API server endpoint and certificate authority data aren't available until	COMMENT
LOW	pkg/awsapi/eks.go	341	//	COMMENT
LOW	pkg/awsapi/eks.go	361	// Lists the access entries for your cluster.	COMMENT
1229 more matches not shown…

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	pkg/cfn/manager/compat.go	96	publicIDs := c.spec.VPC.Subnets.Public.WithIDs()	CODE
CRITICAL	pkg/cfn/builder/nodegroup.go	220	SecurityGroupIngress: makeNodeIngressRules(ng.NodeGroupBase, refControlPlaneSG, n.options.ClusterConfig.VPC.CIDR.Strin	CODE

Decorative Section Separators4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/dependabot.yml	3	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	14	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	86	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	94	# ---------------------------------------------------------------------------	COMMENT

Slop Phrases5 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	examples/23-kubeflow-spot-instance.yaml	19	# If changed, make sure to change all nodegroup tags from	COMMENT
MEDIUM	pkg/goformation/test/yaml/api-swagger-plain.yaml	143	description: "This is a sample server Petstore server. You can find out more about Swagger at <a href=\"http:	CODE
MEDIUM	…/goformation/test/yaml/aws-serverless-api-swagger.yaml	121	description: "This is a sample server Petstore server. You can find out more about Swagger at <a href=\"http:	CODE
MEDIUM	…t/yaml/sam-official-samples/api-swagger-intrinsic.yaml	121	description: "This is a sample server Petstore server. You can find out more about Swagger at <a href=\"http:	CODE
MEDIUM	…/test/yaml/sam-official-samples/api-swagger-plain.yaml	143	description: "This is a sample server Petstore server. You can find out more about Swagger at <a href=\"http:	CODE

Redundant / Tautological Comments5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	pkg/addons/default/scripts/update_aws_node.sh	12	# Check if the latest release tag was found	COMMENT
LOW	pkg/addons/default/scripts/update_aws_node.sh	30	# Check if the download was successful	COMMENT
LOW	…g/addons/assets/scripts/update_nvidia_device_plugin.sh	9	# Check if the latest release tag was found	COMMENT
LOW	…g/addons/assets/scripts/update_nvidia_device_plugin.sh	27	# Check if the download was successful	COMMENT
LOW	pkg/cfn/builder/templates/beta.py	246	# Check if the cluster already exists	COMMENT

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	pkg/awsapi/elasticloadbalancingv2.go	300	// If any of the specified attributes can't be modified as requested, the call	COMMENT

Excessive Try-Catch Wrapping5 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	pkg/cfn/builder/templates/beta.py	235	except Exception as e:	CODE
LOW	pkg/cfn/builder/templates/beta.py	373	except Exception as e:	CODE
LOW	pkg/cfn/builder/templates/beta.py	421	except Exception as e:	CODE
LOW	…ml/sam-official-samples/encryption_proxy/encryption.py	25	except Exception as e:	CODE
LOW	…ml/sam-official-samples/encryption_proxy/decryption.py	25	except Exception as e:	CODE

Fake / Example Data3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	userdocs/src/adopters.md	16	Following the example of the Acme Corp, new list element will be `<li class="glide__slide"><img src="/assets/adopters/ac	CODE
LOW	userdocs/src/usage/iamserviceaccounts.md	185	Owner: "John Doe"	CODE
LOW	pkg/ctl/create/cluster_test.go	58	commandArgs := []string{"cluster", "--managed=false", "--ssh-access=false", "--ssh-public-key=dummy-key"}	CODE

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	pkg/cfn/builder/templates/beta.py	214	# Create an access entry for the EKS cluster	COMMENT

Hyper-Verbose Identifiers2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	pkg/cfn/builder/templates/beta.py	35	def convert_keys_to_lowercase_first_letter(d):	CODE
LOW	pkg/cfn/builder/templates/beta.py	259	def wait_for_cluster_creation(eks_client, cluster_name):	CODE

Deep Nesting2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	pkg/cfn/builder/templates/beta.py	61		CODE
LOW	pkg/cfn/builder/templates/beta.py	74		CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	pkg/cfn/builder/templates/beta.py	6		CODE

Verbosity Indicators1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	pkg/ctl/get/cluster.go	57	regionGiven := cfg.Metadata.Region != "" // eks.New resets this field, so we need to check if it was set in the first p	CODE

eksctl-io/eksctl

Open-Source Code Quality, Security and Technical Debt Review