2.4

Adjusted Signal

2.4

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

9.3K

Stars

Dart

Language

393.7K

Lines of Code

2.1K

Files

844

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 9.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 795 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 28 finding(s).

Agent Over-Engineering Ratio 0.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 21 finding(s).

PR Review Velocity Impact 11.2/100 · LOW

Which changes need focused human review? 844 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 3HIGH 0MEDIUM 32LOW 809

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 844 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block769 hits · 762 pts

Severity	File	Line	Snippet	Context
LOW	analysis_options.yaml	61		COMMENT
LOW	tests/integration_test/e2e_test.dart	1	// Copyright 2022, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	tests/integration_test/core_shard_test.dart	1	// Copyright 2022, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	tests/lib/firebase_options.dart	1	// Copyright 2022, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	tests/windows/runner/win32_window.cpp	1	// Copyright 2023, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	tests/windows/runner/resource.h	1	/*	COMMENT
LOW	tests/windows/runner/resource.h	21	#endif	COMMENT
LOW	tests/windows/runner/main.cpp	1	// Copyright 2023, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	tests/windows/flutter/generated_plugin_registrant.h	1	//	COMMENT
LOW	docs/app-check/default-providers.md	81	// You can also use a `ReCaptchaEnterpriseProvider` provider instance as an	COMMENT
LOW	scripts/generate_versions_web.dart	1	// Copyright 2025 Google LLC	COMMENT
LOW	scripts/generate_versions_web.dart	81		COMMENT
LOW	scripts/generate_dataconnect_version.dart	1	// Copyright 2024 Google LLC	COMMENT
LOW	scripts/generate_firebaseai_version.dart	1	// Copyright 2024 Google LLC	COMMENT
LOW	scripts/firebase_sdk_version_spm.dart	1	// Copyright 2026 The Chromium Authors. All rights reserved.	COMMENT
LOW	scripts/validate_workspace.dart	1	// Copyright 2025 Google LLC	COMMENT
LOW	scripts/generate_versions_gradle.dart	1	// Copyright 2024 Google LLC	COMMENT
LOW	scripts/validate_wasm_imports.dart	1	// Copyright 2026, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…ging/Sources/firebase_in_app_messaging/Constants.swift	1	// Copyright 2021 The Chromium Authors. All rights reserved.	COMMENT
LOW	…n_app_messaging/FirebaseInAppMessagingMessages.g.swift	1	// Copyright 2026, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…se_in_app_messaging/lib/firebase_in_app_messaging.dart	81	/// Use [InAppMessagingClickEvent.action] to know which URL the campaign	COMMENT
LOW	…se_in_app_messaging/lib/firebase_in_app_messaging.dart	101	Stream<InAppMessagingDismissEvent> get onMessageDismissed =>	COMMENT
LOW	…n_app_messaging_platform_interface/lib/src/events.dart	1	// Copyright 2026, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…_flutterfire_internals/lib/_flutterfire_internals.dart	1	// Copyright 2022, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…_flutterfire_internals/lib/_flutterfire_internals.dart	21	as js_interop;	COMMENT
LOW	packages/_flutterfire_internals/lib/src/exception.dart	61	} else if (platformException.code.isNotEmpty &&	COMMENT
LOW	packages/_flutterfire_internals/lib/src/js_interop.dart	1	// Copyright 2024, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…ashlytics/Sources/firebase_crashlytics/Constants.swift	1	// Copyright 2026 The Chromium Authors. All rights reserved.	COMMENT
LOW	…rebase_crashlytics/FirebaseCrashlyticsMessages.g.swift	1	// Copyright 2026, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…ashlytics/Sources/firebase_crashlytics/Constants.swift	1	// Copyright 2026 The Chromium Authors. All rights reserved.	COMMENT
LOW	…rebase_crashlytics/FirebaseCrashlyticsMessages.g.swift	1	// Copyright 2026, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…firebase_crashlytics/lib/src/firebase_crashlytics.dart	1	// ignore_for_file: require_trailing_commas	COMMENT
LOW	…firebase_crashlytics/lib/src/firebase_crashlytics.dart	41	///	COMMENT
LOW	…firebase_crashlytics/lib/src/firebase_crashlytics.dart	181	Future<void> log(String message) async {	COMMENT
LOW	…firebase_crashlytics/lib/src/firebase_crashlytics.dart	201	/// method. Use [sendUnsentReports] to upload existing reports even when automatic	COMMENT
LOW	…firebase_crashlytics/lib/src/firebase_crashlytics.dart	221	/// non-fatal reports.	COMMENT
LOW	…platform_interface/platform_interface_crashlytics.dart	81	/// automatically and this always returns false. If automatic data collection	COMMENT
LOW	…platform_interface/platform_interface_crashlytics.dart	141		COMMENT
LOW	…platform_interface/platform_interface_crashlytics.dart	161	///	COMMENT
LOW	…uth/Sources/firebase_auth/FirebaseAuthMessages.g.swift	1	// Copyright 2023, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…/firebase_auth/example/windows/runner/win32_window.cpp	1	// Copyright 2023, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…e_auth/firebase_auth/example/windows/runner/resource.h	1	/*	COMMENT
LOW	…e_auth/firebase_auth/example/windows/runner/resource.h	21	#endif	COMMENT
LOW	…ase_auth/firebase_auth/example/windows/runner/main.cpp	1	// Copyright 2023, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…uth/Sources/firebase_auth/FirebaseAuthMessages.g.swift	1	// Copyright 2023, the Chromium project authors. Please see the AUTHORS file	COMMENT
LOW	…ase_auth/firebase_auth/lib/src/recaptcha_verifier.dart	21	/// It is possible to configure the reCAPTCHA widget with the following arguments,	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	81		COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	101	///	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	121	}	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	141	/// currently linked to the user.	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	161	/// - Thrown if the email corresponding to the credential already exists	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	201	///	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	221	/// `credential` directly via [signInWithCredential].	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	241	} on FirebaseAuthMultiFactorExceptionPlatform catch (e) {	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	261	/// - Thrown if the credential given does not correspond to any existing	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	301	/// A [FirebaseAuthException] maybe thrown with the following error code:	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	321	/// verification code of the credential is not valid.	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	341	/// - Thrown if the credential given does not correspond to any existing	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	361	Future<void> reauthenticateWithRedirect(AuthProvider provider) async {	COMMENT
LOW	packages/firebase_auth/firebase_auth/lib/src/user.dart	381	/// Google user by linking a Google credential to it and the Google	COMMENT
709 more matches not shown…

Hallucination Indicators3 hits · 45 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	…er/plugins/firebase/database/FirebaseDatabasePlugin.kt	813	transactionResult ?: return com.google.firebase.database.Transaction.abort()	CODE
CRITICAL⚡	…er/plugins/firebase/database/FirebaseDatabasePlugin.kt	816	return com.google.firebase.database.Transaction.abort()	CODE
CRITICAL⚡	…er/plugins/firebase/database/FirebaseDatabasePlugin.kt	820	return com.google.firebase.database.Transaction.success(mutableData)	CODE

Excessive Try-Catch Wrapping13 hits · 25 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/auth/email-link-auth.md	100	.catchError((onError) => print('Error sending email verification $onError'))	CODE
MEDIUM	docs/auth/email-link-auth.md	160	print('Error signing in with email link.');	CODE
MEDIUM	docs/auth/email-link-auth.md	180	print("Error linking emailLink credential.");	CODE
MEDIUM	docs/auth/email-link-auth.md	194	print("Error reauthenticating credential.");	CODE
MEDIUM	scripts/generate_versions_web.dart	125	print('Error processing $webPackageName: $e');	STRING
MEDIUM	scripts/generate_versions_spm.dart	105	print('Error: pubspec.yaml file not found at $pubspecFile');	CODE
MEDIUM	scripts/generate_versions_spm.dart	116	print('Error: Version not found in pubspec.yaml');	CODE
MEDIUM	scripts/generate_versions_spm.dart	127	print('Error: Constants.swift file not found at $packageSwiftPath');	CODE
MEDIUM	scripts/validate_workspace.dart	42	print('Error: pubspec.yaml not found at root.');	CODE
MEDIUM	scripts/validate_workspace.dart	52	print('Error: No workspace list found in pubspec.yaml.');	CODE
MEDIUM	scripts/validate_wasm_imports.dart	70	print('Error: ${packageConfig.path} not found. Run `melos bootstrap` '	CODE
MEDIUM	…ebase_database/firebase_database/example/lib/main.dart	122	print('Error: ${error.code} ${error.message}');	CODE
MEDIUM	.github/workflows/scripts/nightly_issue_dashboard.dart	66	print('Error: GITHUB_TOKEN or REPO environment variables not set.');	CODE

Decorative Section Separators8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	…estore_web/lib/src/pipeline_expression_parser_web.dart	35	// ── Value expressions ─────────────────────────────────────────────────────	COMMENT
MEDIUM	…estore_web/lib/src/pipeline_expression_parser_web.dart	528	// ── Boolean expressions ───────────────────────────────────────────────────	COMMENT
MEDIUM	…estore_web/lib/src/pipeline_expression_parser_web.dart	643	// ── Stage options ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	…estore_web/lib/src/pipeline_expression_parser_web.dart	697	// ── Aggregate ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…estore_web/lib/src/pipeline_expression_parser_web.dart	722	// ── Other stage options ───────────────────────────────────────────────────	COMMENT
MEDIUM	…estore_web/lib/src/pipeline_expression_parser_web.dart	834	// ── Private helpers ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…restore/cloud_firestore/pipeline_example/lib/main.dart	654	// ── New expression examples (22+) ─────────────────────────────────────	COMMENT
MEDIUM	…restore/cloud_firestore/pipeline_example/lib/main.dart	1008	// ── New pipeline expressions (regex, map, string, array, agg) ───────────	COMMENT

Fake / Example Data25 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	docs/auth/federated-auth.md	72	'login_hint': 'user@example.com'	CODE
LOW	docs/auth/federated-auth.md	87	'login_hint': 'user@example.com'	CODE
LOW	docs/auth/manage-users.md	162	.sendPasswordResetEmail(email: "user@example.com");	CODE
LOW	…se_auth_web/test/get_firebase_auth_exception_test.dart	35	customData['email'] = 'user@example.com'.toJS;	CODE
LOW	…se_auth_web/test/get_firebase_auth_exception_test.dart	59	expect(exception.email, 'user@example.com');	CODE
LOW	…uth_web/test/fetch_sign_in_methods_for_email_test.dart	36	final methods = await auth.fetchSignInMethodsForEmail('user@example.com');	CODE
LOW	…uth_web/test/fetch_sign_in_methods_for_email_test.dart	39	expect(receivedEmail, 'user@example.com');	CODE
LOW	…ase_auth/firebase_auth_web/test/user_to_json_test.dart	21	..['email'] = 'user@example.com'.toJS	CODE
LOW	…ase_auth/firebase_auth_web/test/user_to_json_test.dart	35	'email': 'user@example.com',	CODE
LOW	…uth_platform_interface/test/action_code_info_test.dart	11	const String kMockEmail = 'test@test.com';	CODE
LOW	…m_interface/test/providers_tests/google_auth_test.dart	56	'login_hint': 'user@example.com',	CODE
LOW	…m_interface/test/providers_tests/google_auth_test.dart	63	expect(result.parameters['login_hint'], equals('user@example.com'));	CODE
LOW	…_platform_interface/lib/src/providers/google_auth.dart	20	/// 'login_hint': 'user@example.com'	COMMENT
LOW	…tegration_test/pipeline/pipeline_replace_with_e2e.dart	33	{'father': 'John Doe Sr.', 'mother': 'Jane Doe'},	CODE
LOW	…tegration_test/pipeline/pipeline_replace_with_e2e.dart	47	{'father': 'John Doe Sr.', 'mother': 'Jane Doe'},	CODE
LOW	…e_example/integration_test/pipeline/pipeline_seed.dart	38	'nested': {'father': 'John Doe Sr.', 'mother': 'Jane Doe'},	CODE
LOW	…irebase_ai/firebase_ai/test/response_parsing_test.dart	398	"text": "placeholder"	CODE
LOW	…irebase_ai/firebase_ai/test/response_parsing_test.dart	481	Content.model([const TextPart('placeholder')]),	STRING
LOW	…irebase_ai/firebase_ai/test/response_parsing_test.dart	533	"text": "placeholder"	CODE
LOW	…irebase_ai/firebase_ai/test/response_parsing_test.dart	616	Content.model([const TextPart('placeholder')]),	STRING
LOW	…/firebase_ai/test/google_ai_response_parsing_test.dart	376	"text": "placeholder"	CODE
LOW	…/firebase_ai/test/google_ai_response_parsing_test.dart	459	Content.model([const TextPart('placeholder')]),	STRING
LOW	…/firebase_ai/test/google_ai_response_parsing_test.dart	511	"text": "placeholder"	CODE
LOW	…/firebase_ai/test/google_ai_response_parsing_test.dart	594	Content.model([const TextPart('placeholder')]),	STRING
LOW	…se_storage/example/integration_test/reference_e2e.dart	304	'name': 'John Doe',	CODE

Structural Annotation Overuse11 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	docs/remote-config/_get-started.md	10	## Step 1: Add Firebase and the Remote Config SDK to your app {: #add-firebase }	COMMENT
LOW	docs/remote-config/_get-started.md	49	## Step 2: Get the Remote Config singleton object {: #get-remote-config }	COMMENT
LOW	docs/remote-config/_get-started.md	69	## Step 3: Set in-app default parameter values {: #default-parameter }	COMMENT
LOW	docs/remote-config/_get-started.md	90	## Step 4: Get parameter values to use in your app {: #get-parameter }	COMMENT
LOW	docs/remote-config/_get-started.md	105	## Step 5: Set parameter values in the Remote Config backend {: #set-parameter }	COMMENT
LOW	docs/remote-config/_get-started.md	122	## Step 6: Fetch and activate values {: #fetch-values }	COMMENT
LOW	docs/remote-config/_get-started.md	145	## Step 7: Listen for updates in real time {: #add-real-time-listener }	COMMENT
LOW	docs/cloud-messaging/receive.md	531	### Step 1 - Add a notification service extension {:#step-1-add-notification-service-extension}	COMMENT
LOW	docs/cloud-messaging/receive.md	538	### Step 2 - Add target to the Podfile {:#step-2-add-target-podfile}	COMMENT
LOW	docs/cloud-messaging/receive.md	573	### Step 3 - Use the extension helper {:#step-3-ext-helper}	COMMENT
LOW	docs/cloud-messaging/receive.md	668	### Step 4 - Add the image to the payload {:#add-image-payload}	COMMENT

AI Slop Vocabulary5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/cloud_firestore/cloud_firestore/lib/src/pipeline.dart	35	/// They do not utilize or update the local SDK cache, and they do not support	COMMENT
MEDIUM	…rebase_ai/firebase_ai/example/lib/pages/bidi_page.dart	162	// Intention state for robust stream reconnection	COMMENT
MEDIUM	.github/workflows/e2e_tests_fdc.yaml	317	# WASM runs can hang after building but before the test harness	COMMENT
MEDIUM	.github/workflows/reusable_e2e_web.yaml	189	# harness connects; that is the same failure class.	COMMENT
MEDIUM	.github/workflows/e2e_tests_smoke.yaml	575	# WASM web runs can hang after building but before the test harness	COMMENT

Slop Phrases3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	…irestore/cloud_firestore/pipeline_example/pubspec.yaml	67	# included with your application, so that you can use the icons in	COMMENT
MEDIUM	…ase_messaging/firebase_messaging/example/lib/main.dart	153	/// The API endpoint here accepts a raw FCM payload for demonstration purposes.	COMMENT
MEDIUM	packages/firebase_ai/firebase_ai/example/pubspec.yaml	62	# included with your application, so that you can use the icons in	COMMENT

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	…irestore/cloud_firestore/pipeline_example/pubspec.yaml	63	# The following section is specific to Flutter packages.	COMMENT
MEDIUM	…base_performance/firebase_performance_web/pubspec.yaml	29	# The following section is specific to Flutter.	COMMENT

TODO Padding3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	…ebase_data_connect/lib/src/network/transport_stub.dart	59	// TODO: implement invokeMutation	COMMENT
LOW	…ebase_data_connect/lib/src/network/transport_stub.dart	73	// TODO: implement invokeStreamQuery	COMMENT
LOW	…ebase_data_connect/lib/src/network/transport_stub.dart	87	// TODO: implement invokeQuery	COMMENT

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ages/firebase_auth/firebase_auth/example/lib/auth.dart	27	/// The scaffold of current context.	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.github/workflows/scripts/ensure-simulator-ready.sh	7	# Usage:	COMMENT

firebase/flutterfire

Open-Source Code Quality, Security and Technical Debt Review