2.1

Adjusted Signal

2.1

Raw Pattern Score

100%

Time Factor

2026-10-06

Last Push

28.1K

Stars

Language

157.2K

Lines of Code

414

Files

304

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 258 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.1/100 · LOW

Are imports declared and package/API names verified? 23 finding(s).

Agent Over-Engineering Ratio 1.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 28 finding(s).

PR Review Velocity Impact 10.6/100 · LOW

Which changes need focused human review? 304 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 3MEDIUM 17LOW 284

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 304 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block236 hits · 228 pts

Severity	File	Line	Snippet	Context
LOW	zlibWrapper/gzread.c	421	}	COMMENT
LOW	zlibWrapper/gzguts.h	21	#else	COMMENT
LOW	zlibWrapper/gzguts.h	41	#else	COMMENT
LOW	zlibWrapper/gzguts.h	61	# define NO_GZCOMPRESS	COMMENT
LOW	zlibWrapper/gzguts.h	81		COMMENT
LOW	zlibWrapper/gzguts.h	101	# endif	COMMENT
LOW	zlibWrapper/gzguts.h	121	# define local static	COMMENT
LOW	zlibWrapper/gzguts.h	141	# else	COMMENT
LOW	zlibWrapper/gzcompatibility.h	21	#else	COMMENT
LOW	zlibWrapper/gzcompatibility.h	41	#if defined(_WIN32) && !defined(Z_SOLO)	COMMENT
LOW	zlibWrapper/zstd_zlibwrapper.c	21	#include <stdarg.h> /* va_list, for z_gzprintf */	COMMENT
LOW	zlibWrapper/examples/example_original.c	21	*/	COMMENT
LOW	zlibWrapper/examples/zwrapbench.c	41	/-***********************************	COMMENT
LOW	zlibWrapper/examples/minigzip.c	21	#define _POSIX_SOURCE /* fileno */	COMMENT
LOW	zlibWrapper/examples/minigzip.c	41	# include <stdlib.h>	COMMENT
LOW	tests/paramgrill.c	21		COMMENT
LOW	tests/paramgrill.c	61	# define DEBUG 0	COMMENT
LOW	tests/fuzzer.c	21		COMMENT
LOW	tests/decodecorpus.c	21	#include "zstd.h"	COMMENT
LOW	tests/decodecorpus.c	161	* Constants and Structs	COMMENT
LOW	tests/zstreamtest.c	21		COMMENT
LOW	tests/DEPRECATED-test-zstd-speed.py	1	#! /usr/bin/env python3	COMMENT
LOW	tests/fullbench.c	21	#include <assert.h>	COMMENT
LOW	tests/roundTripCrash.c	21	#include <stddef.h> /* size_t */	COMMENT
LOW	tests/rateLimiter.py	1	#!/usr/bin/env python3	COMMENT
LOW	tests/gzip/mixed.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/memcpy-abuse.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/zdiff.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/init.sh	1	# source this file; set up for tests	COMMENT
LOW	tests/gzip/init.sh	21	# The typical skeleton of a test looks like this:	COMMENT
LOW	tests/gzip/init.sh	41	#	COMMENT
LOW	tests/gzip/init.sh	61		COMMENT
LOW	tests/gzip/init.sh	121	NULLCMD=:	COMMENT
LOW	tests/gzip/init.sh	481	# As autoconf-generated configure scripts do, ensure that IFS	COMMENT
LOW	tests/gzip/init.sh	501	# Failing that, we'll roll our own mktemp-like function:	COMMENT
LOW	tests/gzip/trailing-nul.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/help-version.sh	1	#! /bin/sh	COMMENT
LOW	tests/gzip/stdin.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/zgrep-context.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/znew-k.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/zgrep-signal.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/gzip-env.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/null-suffix-clobber.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/zgrep-f.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/hufts.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/z-suffix.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/list.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/keep.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/unpack-invalid.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/helin-segv.sh	1	#!/bin/sh	COMMENT
LOW	tests/gzip/test-driver.sh	1	#! /bin/sh	COMMENT
LOW	tests/gzip/test-driver.sh	141	# mode: shell-script	COMMENT
LOW	tests/fuzz/fuzz_helpers.h	21	#include "zstd.h"	COMMENT
LOW	tests/fuzz/fuzz_helpers.h	41	((cond) ? (void)0 \	COMMENT
LOW	contrib/pzstd/Pzstd.cpp	1	/*	COMMENT
LOW	contrib/pzstd/Pzstd.h	1	/*	COMMENT
LOW	contrib/pzstd/utils/Likely.h	21		COMMENT
LOW	contrib/linux-kernel/btrfs-benchmark.sh	1	# !/bin/sh	COMMENT
LOW	contrib/linux-kernel/btrfs-benchmark.sh	61	# none	COMMENT
LOW	contrib/linux-kernel/btrfs-benchmark.sh	81	# zstd 3	COMMENT
176 more matches not shown…

Fake / Example Data16 hits · 23 pts

Severity	File	Line	Snippet	Context
LOW	tests/loremOut.h	12	* Generate @size bytes of compressible data using lorem ipsum generator into	COMMENT
LOW	tests/fullbench.c	933	* if @compressibility < 0.0, use Lorem Ipsum generator	COMMENT
LOW	tests/loremOut.c	12	* Generates a stream of Lorem ipsum paragraphs to stdout,	COMMENT
LOW	contrib/seekable_format/tests/seekable_tests.c	272	{ char const inBuffer[] = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididu	CODE
LOW	contrib/seekable_format/tests/seekable_tests.c	272	{ char const inBuffer[] = "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididu	CODE
LOW	programs/lorem.h	11	/* lorem ipsum generator */	COMMENT
LOW	programs/lorem.h	17	* Generate @size bytes of compressible data using lorem ipsum generator	COMMENT
LOW	programs/benchzstd.h	128	* if @compressibility < 0.0, uses the lorem ipsum generator	COMMENT
LOW	programs/README.md	141	If no file is provided, the benchmark will use a procedurally generated "lorem ipsum" content.	CODE
LOW	programs/zstd.1.md	675	When no `FILE` is provided, the benchmark will use a procedurally generated `lorem ipsum` text.	CODE
LOW	programs/benchzstd.c	1004	name = "Lorem ipsum";	CODE
LOW⚡	programs/lorem.c	13	* This is a very simple lorem ipsum generator	COMMENT
LOW⚡	programs/lorem.c	20	* The resulting compression / ratio curve of the lorem ipsum generator	COMMENT
LOW⚡	programs/lorem.c	25	* The compression ratio achievable on the generated lorem ipsum	COMMENT
LOW	programs/lorem.c	240	/* It's "common" for lorem ipsum generators to start with the same first	COMMENT
LOW	programs/zstdcli.c	906	double compressibility = -1.0; /* lorem ipsum generator */	CODE

Excessive Try-Catch Wrapping18 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	tests/DEPRECATED-test-zstd-speed.py	74	except Exception:	CODE
LOW	tests/DEPRECATED-test-zstd-speed.py	370	except Exception as e:	CODE
MEDIUM	tests/DEPRECATED-test-zstd-speed.py	71	def does_command_exist(command):	CODE
LOW	tests/fuzz/fuzz.py	398	except Exception as e:	STRING
LOW	tests/fuzz/fuzz.py	584	except Exception as e:	STRING
LOW	tests/fuzz/fuzz.py	637	except Exception as e:	STRING
LOW	tests/fuzz/fuzz.py	669	except Exception as e:	STRING
LOW	tests/fuzz/fuzz.py	763	except Exception as e:	STRING
LOW	tests/fuzz/fuzz.py	838	except Exception as e:	STRING
LOW	tests/fuzz/fuzz.py	863	except Exception as e:	STRING
MEDIUM	tests/fuzz/fuzz.py	929	print("Error: No such command {} (pass -h for help)".format(command))	STRING
MEDIUM	tests/fuzz/fuzz.py	395	def build(args):	CODE
MEDIUM	tests/fuzz/fuzz.py	581	def libfuzzer_cmd(args):	CODE
MEDIUM	tests/fuzz/fuzz.py	634	def afl(args):	CODE
MEDIUM	tests/fuzz/fuzz.py	659	def regression(args):	CODE
MEDIUM	tests/fuzz/fuzz.py	760	def gen(args):	CODE
MEDIUM	tests/fuzz/fuzz.py	831	def minimize(args):	CODE
MEDIUM	tests/fuzz/fuzz.py	857	def zip_cmd(args):	CODE

Self-Referential Comments6 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/gzip/init.cfg	1	# This file is sourced by init.sh, before its initialization.	COMMENT
MEDIUM	tests/gzip/init.sh	136	# The following code attempts to find a shell with support for these features.	COMMENT
MEDIUM	tests/gzip/init.sh	451	# Create an alias, FOO, for each FOO.exe in this directory.	COMMENT
MEDIUM	tests/gzip/init.sh	495	# Create a temporary directory, much like mktemp -d does.	COMMENT
MEDIUM	tests/gzip/help-version.sh	147	# Create a file in the current directory, not in $TMPDIR.	COMMENT
MEDIUM	tests/gzip/test-driver.sh	26	# This file is maintained in Automake, please report	COMMENT

Deep Nesting11 hits · 11 pts

Severity	File	Line	Context
LOW	tests/automated_benchmarking.py	260	CODE
LOW	tests/test-license.py	136	CODE
LOW	tests/fuzz/fuzz.py	760	CODE
LOW	tests/cli-tests/run.py	132	CODE
LOW	tests/cli-tests/run.py	583	CODE
LOW	contrib/freestanding_lib/freestanding.py	115	CODE
LOW	contrib/freestanding_lib/freestanding.py	149	CODE
LOW	contrib/freestanding_lib/freestanding.py	261	CODE
LOW	contrib/freestanding_lib/freestanding.py	523	CODE
LOW	contrib/freestanding_lib/freestanding.py	573	CODE
LOW	contrib/freestanding_lib/freestanding.py	614	CODE

Cross-Language Confusion2 hits · 8 pts

Severity	File	Line	Snippet	Context
HIGH	tests/automated_benchmarking.py	103	os.system("cd ../ && make -j && cd tests")	CODE
HIGH	contrib/freestanding_lib/freestanding.py	55	Handles && and \|\|.	STRING

Decorative Section Separators2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/gzip/init.sh	19	# =========================	COMMENT
MEDIUM	tests/gzip/init.sh	40	# ====================================	COMMENT

Unused Imports5 hits · 5 pts

Severity	File	Line	Context
LOW	tests/check_size.py	13	CODE
LOW	tests/test-zstd-versions.py	19	CODE
LOW	tests/DEPRECATED-test-zstd-speed.py	20	CODE
LOW	tests/test-license.py	13	CODE
LOW	contrib/freestanding_lib/freestanding.py	13	CODE

Hyper-Verbose Identifiers5 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	tests/automated_benchmarking.py	73	def get_builds_for_latest_hash():	CODE
LOW	tests/automated_benchmarking.py	145	def benchmark_dictionary_single(executable, filenames_directory, dictionary_filename, level, iterations):	CODE
LOW	tests/automated_benchmarking.py	172	def parse_regressions_and_labels(old_cspeed, new_cspeed, old_dspeed, new_dspeed, baseline_build, test_build):	CODE
LOW	tests/automated_benchmarking.py	221	def get_regressions_dictionary(baseline_build, test_build, filenames_directory, dictionary_filename, levels, iterations)	CODE
LOW	tests/DEPRECATED-test-zstd-speed.py	92	def send_email_with_attachments(branch, commit, last_commit, args, text, results_files,	CODE

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	tests/rateLimiter.py	40	except (KeyboardInterrupt, BrokenPipeError) as e:	CODE

Modern Structural Boilerplate2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	tests/cli-tests/run.py	489	def _setup_once(self) -> None:	CODE
LOW	tests/cli-tests/run.py	505	def _setup(self, test_basename: str) -> None:	CODE

facebook/zstd

Open-Source Code Quality, Security and Technical Debt Review