0.6

Adjusted Signal

0.6

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

25.9K

Stars

TypeScript

Language

643.3K

Lines of Code

2.0K

Files

363

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 321 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 22 finding(s).

Agent Over-Engineering Ratio 2.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 296 finding(s).

PR Review Velocity Impact 3.1/100 · LOW

Which changes need focused human review? 363 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 20LOW 343

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 363 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers276 hits · 280 pts

Severity	File	Line	Snippet	Context
LOW	web/src/components/website-traffic-checker-tool.tsx	50	export function WebsiteTrafficCheckerTool() {	CODE
LOW	web/src/routes/_marketing/website-traffic-checker.tsx	63	function WebsiteTrafficCheckerPage() {	CODE
LOW	web/src/routes/_marketing/google-search-console-mcp.tsx	118	function GoogleSearchConsoleMcpPage() {	CODE
LOW	web/src/routes/_marketing/google-search-console-mcp.tsx	172	function GoogleSearchConsoleMcpCta() {	CODE
LOW	…c/routes/_marketing/library/keyword-research/index.tsx	62	function KeywordResearchLibraryPage() {	CODE
LOW	…utes/_marketing/library/competitive-analysis/index.tsx	69	function CompetitiveAnalysisLibraryPage() {	CODE
LOW	web/src/routes/js/script[.]js.ts	32	function buildFallbackScriptResponse() {	CODE
LOW	scripts/selfhost-preflight.ts	31	async function sendPreflightFailedBeacon(failedChecks: string[]) {	CODE
LOW	src/middleware/ensure-user/delegated.ts	83	export async function resolveSharedWorkspaceContext(	CODE
LOW	src/middleware/ensure-user/delegated.ts	101	export async function resolveLocalNoAuthContext(): Promise<EnsuredUserContext> {	CODE
LOW	src/middleware/ensure-user/cloudflareAccess.ts	39	export async function resolveCloudflareAccessContext(	CODE
LOW	src/middleware/ensure-user/accessTokenErrors.ts	10	export function classifyAccessVerificationError(error: unknown): AppError {	CODE
LOW	src/middleware/ensure-user/resolve.ts	12	export async function resolveUserContextFromHeaders(	CODE
LOW	src/middleware/ensure-user/everyApp.ts	49	export async function resolveEveryAppUserContext(	CODE
LOW	src/server/standalone/sign-up.ts	27	export async function assertStandaloneSignUpOpen(	CODE
LOW	src/server/auth/ownership-transfer.ts	14	export async function transferOrganizationOwnership(	CODE
LOW	src/server/auth/default-hosted-organization.ts	21	function getDefaultHostedOrganizationName(user: HostedUser) {	CODE
LOW	src/server/auth/default-hosted-organization.ts	30	function getDefaultHostedOrganizationSlug(user: HostedUser) {	CODE
LOW	src/server/auth/default-hosted-organization.ts	44	async function createDefaultHostedOrganization(	CODE
LOW	src/server/auth/default-hosted-organization.ts	74	async function findExistingActiveOrganization(	CODE
LOW	src/server/auth/default-hosted-organization.ts	107	async function createActiveHostedOrganization(	CODE
LOW	src/server/auth/default-hosted-organization.ts	138	export async function resolveActiveHostedOrganization(	CODE
LOW	src/server/auth/default-hosted-organization.ts	162	export async function resolveSignInHostedOrganization(	CODE
LOW⚡	src/server/auth/delegated-organization.ts	9	export async function ensureSharedWorkspaceOrganization() {	CODE
LOW⚡	src/server/auth/delegated-organization.ts	19	function getDelegatedOrganizationId(userId: string) {	CODE
LOW⚡	src/server/auth/delegated-organization.ts	23	function getDelegatedOrganizationName(email: string, userId: string) {	CODE
LOW⚡	src/server/auth/delegated-organization.ts	27	function getDelegatedOrganizationSlug(email: string, userId: string) {	CODE
LOW⚡	src/server/auth/delegated-organization.ts	32	export async function ensureDelegatedOrganizationForUser(	CODE
LOW	src/server/auth/invitation-send-limit.ts	23	export async function consumeInvitationSendBudget(	CODE
LOW	src/server/auth/repositories/AuthRepository.ts	32	async function upsertDelegatedOrganization(input: DelegatedOrganizationInput) {	CODE
LOW	src/server/auth/repositories/AuthRepository.ts	52	async function findFirstOrganizationIdForUser(userId: string) {	CODE
LOW	src/server/auth/repositories/AuthRepository.ts	65	async function findFirstFoundedOrganizationIdForUser(userId: string) {	CODE
LOW	src/server/auth/repositories/AuthRepository.ts	236	async function findNewestMembershipForUser(userId: string) {	CODE
LOW	src/server/auth/repositories/AuthRepository.ts	262	async function hasPendingInvitationForEmail(email: string) {	CODE
LOW	src/server/auth/repositories/AuthRepository.ts	283	async function getLastActiveOrganizationId(userId: string) {	CODE
LOW	src/server/auth/repositories/AuthRepository.ts	292	async function setLastActiveOrganization(	CODE
LOW	src/server/referrals/dub.ts	123	export async function markDubReferredOrganization(userId: string) {	CODE
LOW	src/server/referrals/dub.ts	177	async function sweepDubSalesForOrganization(	CODE
LOW	src/server/referrals/dub.ts	231	export async function trackDubSalesForOrganization(organizationId: string) {	CODE
LOW	src/server/referrals/dub.ts	258	export async function sweepDubReferredOrganizations() {	CODE
LOW	…/features/ai-visibility/services/aiVisibilityExport.ts	92	export async function handleAiVisibilityDownload(	CODE
LOW	src/server/features/google/gatewayGoogle.ts	108	export async function getGatewayGoogleConnectUrl(	CODE
LOW	src/server/features/google/oauth-config.ts	16	export async function getGoogleOAuthClientConfig(): Promise<GoogleOAuthClientConfig \| null> {	CODE
LOW	src/server/features/google/googleAccess.ts	33	export async function ownGoogleCallbackDisabled(): Promise<boolean> {	CODE
LOW	src/server/features/google/GoogleAccountRepository.ts	152	async function hasDataGrantsForGoogleAccount(accountId: string) {	CODE
LOW	src/server/features/google/googleOAuth.ts	191	export async function createGoogleAuthorizationUrl(input: {	CODE
LOW	src/server/features/google/googleOAuth.ts	244	async function handleGoogleOAuthCallback(input: {	CODE
LOW	src/server/features/google/googleOAuth.ts	426	export async function handleGoogleOAuthCallbackRequest(	CODE
LOW	…er/features/projects/repositories/ProjectRepository.ts	29	async function getProjectForOrganization(	CODE
LOW	…er/features/projects/repositories/ProjectRepository.ts	50	async function getArchivedProjectForOrganization(	CODE
LOW	src/server/features/projects/services/projects.ts	63	function isReservedDefaultConflict(	CODE
LOW	src/server/features/projects/services/projects.ts	194	export async function getProjectForOrganization(	CODE
LOW	src/server/features/activation/mcpActivation.ts	33	export async function recordExternalMcpToolCall(caller: {	CODE
LOW	src/server/features/activation/mcpActivation.ts	84	export async function completeOnboardingFromAgent(	CODE
LOW	…atures/activation/repositories/ActivationRepository.ts	22	async function getOrganizationActivation(	CODE
LOW	…/server/features/ga4/services/Ga4ReportEnhancements.ts	159	function buildAttributionDiagnostics(report: NormalizedGa4Report) {	CODE
LOW	…/server/features/ga4/services/Ga4ReportEnhancements.ts	309	export function buildReportSpecificEnhancements(	CODE
LOW	src/server/features/ga4/services/Ga4Service.ts	57	async function listPropertiesForUserWithGrantStatus(userId: string) {	CODE
LOW	…ures/audit/repositories/CrawlerCredentialRepository.ts	22	async function findForOrganizationAndHost(	CODE
LOW	…ver/features/audit/repositories/auditSummaryQueries.ts	11	export async function getIssueTypePageCountsForAudit(auditId: string) {	CODE
216 more matches not shown…

Decorative Section Separators20 hits · 60 pts

Severity	File	Line	Snippet	Context
MEDIUM	web/src/components/landing-page.tsx	73	// ─── Icons (inline SVG only, per project convention) ─────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	179	// ─── Shared bits ─────────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	213	// ─── Hero ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	267	// ─── Testimonial (true-black inverse strip) ──────────────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	338	// ─── Product ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	468	// ─── MCP: the page's one Fin Orange moment ───────────────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	929	// ─── Beyond the data ─────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	1052	// ─── Open source ─────────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	1094	// ─── Footer ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/landing-page.tsx	1144	// ─── Page ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/campaign-pages.tsx	35	// ─── Shared pieces ───────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/campaign-pages.tsx	192	// ─── /agencies ───────────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/campaign-pages.tsx	532	// ─── /agents ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	web/src/components/campaign-pages.tsx	628	// ─── Icons ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/types/schemas/audit.ts	8	// ─── Server function input schemas ──────────────────────────────────────────	COMMENT
MEDIUM	src/types/schemas/audit.ts	48	// ─── URL search params schema for /p/$projectId/audit ────────────────────────	COMMENT
MEDIUM	src/server/mcp/tools/site-audit-tools.ts	55	// ─── run_site_audit ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/server/mcp/tools/site-audit-tools.ts	174	// ─── get_audit_status ────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/server/mcp/tools/site-audit-tools.ts	232	// ─── get_audit_issues ────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/server/mcp/tools/site-audit-tools.ts	413	// ─── get_audit_pages ─────────────────────────────────────────────────────────	COMMENT

Over-Commented Block42 hits · 42 pts

Severity	File	Line	Snippet	Context
LOW	everyapp.config.ts	81	why: "Renders JavaScript-heavy pages when a site audit asks for it.",	COMMENT
LOW	vite.config.ts	101	sourcemap: emitSourcemaps,	COMMENT
LOW	pnpm-workspace.yaml	41	# TEMPORARY (remove after 2026-08-15): workers-oauth-provider 0.10.2 was	COMMENT
LOW	pnpm-workspace.yaml	61	#	COMMENT
LOW	web/src/routes/_marketing/pricing.tsx	41	const RAW_COST_USD = {	COMMENT
LOW	deploy/alchemy/alchemy.run.ts	21	// boundary depends on. The shell copy in .github/workflows/pr-preview.yml	COMMENT
LOW	deploy/alchemy/alchemy.access.ts	1	// The contract shared by the two email-gated Cloudflare Access boundaries —	COMMENT
LOW	tests/playwright.mcp-isolation.config.ts	1	import { fileURLToPath } from "node:url";	COMMENT
LOW	scripts/migrate-d1-to-postgres.ts	221	for (const col of idx.config.columns) {	COMMENT
LOW	.github/workflows/release.yml	1	name: Release	COMMENT
LOW	.github/workflows/pr-preview.yml	1	name: PR Preview	COMMENT
LOW	src/audit-worker.ts	1	// Auxiliary worker "open-seo-audit": hosts the entire site-audit engine — the	COMMENT
LOW	src/router.tsx	1	import { createRouter as createTanStackRouter } from "@tanstack/react-router";	COMMENT
LOW	src/server.ts	41		COMMENT
LOW	src/worker-configuration.d.ts	10161	} : T;	COMMENT
LOW	src/worker-configuration.d.ts	10181	// For properties, rewrite types to be `Result`s.	COMMENT
LOW	src/worker-configuration.d.ts	10201	interface Env {	COMMENT
LOW	src/worker-configuration.d.ts	10521	readonly value: string \| string[] \| boolean \| boolean[] \| number \| number[] \| bigint \| bigint[];	COMMENT
LOW	src/report-widgets/rank-grid.ts	1	import L from "leaflet";	COMMENT
LOW	src/server/auth/default-hosted-organization.ts	121	}	COMMENT
LOW	src/server/referrals/meta.ts	1	import { env, waitUntil } from "cloudflare:workers";	COMMENT
LOW	src/server/referrals/dub.ts	1	import { env, waitUntil } from "cloudflare:workers";	COMMENT
LOW	src/server/referrals/dub.ts	21	// Every entry point no-ops without DUB_API_KEY, so self-host and previews	COMMENT
LOW	src/server/features/sam/SamChatAgent.ts	61	// up to a whole credit (a tenth of a cent).	COMMENT
LOW	src/server/features/sam/SamChatAgent.ts	121	* "project_context" block renders the project's shared memory, which every	COMMENT
LOW	src/server/features/sam/SamChatAgent.ts	501		COMMENT
LOW	…features/rank-tracking/services/scheduledRankChecks.ts	21	// full tick can burst ~1,000 polls into a single minute, stacking with the	COMMENT
LOW	src/server/mcp/context.ts	41		COMMENT
LOW	src/server/lib/dataforseo/keyword-metrics.ts	101	// competition_index is a 0-100 scale; the app stores a 0-1 ratio.	COMMENT
LOW	src/server/lib/dataforseo/core.ts	101	// Resolve the signal once so retries share the overall request timeout	COMMENT
LOW	src/server/lib/audit/discovery.ts	361	// Every discovered URL is returned, not just the first maxPages. Seeding is	COMMENT
LOW	src/shared/report-sandbox.ts	1	// The report sandbox lives here so the two halves cannot drift: the header	COMMENT
LOW	src/lib/auth-mode.ts	1	import { z } from "zod";	COMMENT
LOW	src/lib/auth-config.ts	21	// X-Real-IP instead (deploy/standalone/nginx.conf).	COMMENT
LOW	src/lib/auth-config.ts	41	allowDifferentEmails: true,	COMMENT
LOW	src/lib/auth-api-key.ts	1	import { apiKey } from "@better-auth/api-key";	COMMENT
LOW	src/lib/auth-api-key.ts	21	// window resets only after a full timeWindow of complete idle (it	COMMENT
LOW	src/lib/auth-turnstile.ts	21	// No runtime site key means the Worker is allowed to rely on a client build	COMMENT
LOW	src/lib/auth.ts	81	const baseAuthConfig = createBaseAuthConfig(	COMMENT
LOW	src/lib/auth.ts	261	if (standalone && ctx.path === "/sign-up/email")	COMMENT
LOW	src/db/reports.schema.ts	41	createdBy: text("created_by").notNull(),	COMMENT
LOW	src/db/pg/app.schema.ts	81	// Default DataForSEO location/language for the project, set during	COMMENT

Fake / Example Data22 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	…res/ai-visibility/services/aiVisibilityTestFixtures.ts	7	userEmail: "user@example.com",	CODE
LOW	src/server/features/activation/mcpActivation.test.ts	23	userEmail: "user@example.com",	CODE
LOW	…atures/dashboard/services/DashboardSiteService.test.ts	104	userEmail: "user@example.com",	CODE
LOW	…tures/dashboard/services/DashboardCacheService.test.ts	166	userEmail: "user@example.com",	CODE
LOW	…ures/audit/services/AuditService.crawlerAccess.test.ts	99	userEmail: "user@example.com",	CODE
LOW	…features/audit/services/AuditService.rendering.test.ts	69	userEmail: "user@example.com",	CODE
LOW	…features/audit/services/AuditService.limitTier.test.ts	31	userEmail: "user@example.com",	CODE
LOW	…ures/rank-tracking/services/rankCheckRunGuards.test.ts	35	userEmail: "user@example.com",	CODE
LOW	…acking/services/RankTrackingService.management.test.ts	51	userEmail: "user@example.com",	CODE
LOW	…r/features/keywords/services/research/research.test.ts	60	userEmail: "user@example.com",	CODE
LOW	src/server/features/reports/reportRoute.test.ts	37	userEmail: "user@example.com",	CODE
LOW	src/server/workflows/RankCheckWorkflow.test.ts	75	userEmail: "user@example.com",	CODE
LOW	src/server/workflows/SiteAuditWorkflow.test.ts	74	userEmail: "user@example.com",	CODE
LOW	src/server/workflows/AiVisibilityWorkflow.test.ts	59	userEmail: "user@example.com",	CODE
LOW	src/server/mcp/oauth-provider.test.ts	108	userEmail: "user@example.com",	CODE
LOW	src/server/mcp/oauth-provider.test.ts	179	userEmail: "user@example.com",	CODE
LOW	src/server/mcp/transport-v2.test.ts	126	userEmail: "user@example.com",	CODE
LOW	src/server/mcp/instrumentation.test.ts	45	userEmail: "user@example.com",	CODE
LOW	src/server/mcp/transport.test.ts	121	userEmail: "user@example.com",	CODE
LOW	src/server/mcp/transport.test.ts	297	userEmail: "user@example.com",	CODE
LOW	src/server/mcp/oauth-refresh.e2e.test.ts	37	userEmail: "user@example.com",	CODE
LOW	src/server/lib/audit/rendering-billing.test.ts	33	userEmail: "user@example.com",	CODE

Structural Annotation Overuse3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	web/content/blogs/google-search-console-setup.md	34	## Step 1: Check whether your site is already set up	COMMENT
LOW	web/content/blogs/google-search-console-setup.md	48	## Step 2: Add your website	COMMENT
LOW	web/content/blogs/google-search-console-setup.md	63	## Step 3: Connect it to OpenSEO	COMMENT

every-app/open-seo

Open-Source Code Quality, Security and Technical Debt Review