1.6

Adjusted Signal

1.6

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

23.3K

Stars

TypeScript

Language

444.0K

Lines of Code

1.9K

Files

638

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 589 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 17 finding(s).

Agent Over-Engineering Ratio 6.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 544 finding(s).

PR Review Velocity Impact 7.6/100 · LOW

Which changes need focused human review? 638 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 33LOW 605

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 638 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers512 hits · 515 pts

Severity	File	Line	Snippet	Context
LOW	license_header_checker.py	23	def extract_leading_block_comment(content):	STRING
LOW	server/integrationApiServer.ts	25	export function createIntegrationApiServer() {	CODE
LOW	server/routers/idp/validateOidcCallback.ts	760	function normalizeRoleMappingResult(result: unknown): string[] {	CODE
LOW	server/routers/launcher/listLauncherAiModels.ts	25	export async function listLauncherPublicAiModels(	CODE
LOW	server/routers/launcher/formatLauncherAccess.ts	11	export function resolveHttpHttpsDisplayPort(	CODE
LOW	server/routers/launcher/formatLauncherAccess.ts	21	export function formatSiteResourceDestinationDisplay(	CODE
LOW	server/routers/launcher/formatLauncherAccess.ts	66	function formatTcpUdpResourceAccess(	CODE
LOW	server/routers/launcher/formatLauncherAccess.ts	98	export function formatPublicResourceAccess(	CODE
LOW	server/routers/launcher/launcherDefaultView.ts	27	export function extractDefaultViewOverrides(	CODE
LOW	server/routers/launcher/launcherDefaultView.ts	69	export async function upsertDefaultViewOverride({	CODE
LOW	server/routers/launcher/launcherDefaultView.ts	112	export async function deleteDefaultViewOverride({	CODE
LOW	server/routers/launcher/launcherDefaultView.ts	131	export async function deleteAllDefaultViewOverrides(	CODE
LOW	server/routers/launcher/types.ts	103	export function getEffectiveDefaultLauncherConfig(	CODE
LOW	server/routers/launcher/upsertLauncherDefaultView.ts	16	export async function upsertLauncherDefaultView(	CODE
LOW	server/routers/launcher/launcherScale.ts	26	function launcherScaleCountsCacheKey(	CODE
LOW	server/routers/launcher/launcherScale.ts	57	async function getLauncherScaleCountsForUser(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	98	function launcherResourcesQueryHash(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	114	function launcherResourcesCacheKey(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	130	function launcherAccessibleIdsCacheKey(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	139	async function resolveAccessibleIdsUncached(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	312	function buildSearchConditionForPublic(query: string) {	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	345	function buildSearchConditionForSiteResource(query: string) {	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	378	async function filterPublicResourceIdsByTextSearch(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	413	async function filterSiteResourceIdsByTextSearch(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	1038	async function listLauncherGroupsForUserUncached(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	1053	export async function listLauncherGroupsForUser(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	1368	async function listLauncherResourcesForUserUncached(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	1512	export async function listLauncherResourcesForUser(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	1540	function buildSiteNameSearchCondition(query: string) {	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	1551	function buildLabelNameSearchCondition(query: string) {	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	1755	export async function listAccessibleLauncherSitesForUser(	CODE
LOW	server/routers/launcher/launcherResourceAccess.ts	1789	export async function listAccessibleLauncherLabelsForUser(	CODE
LOW	server/routers/launcher/invalidateLauncherCache.ts	7	async function invalidateLauncherCacheForUser(	CODE
LOW	server/routers/launcher/deleteLauncherDefaultView.ts	18	export async function deleteLauncherDefaultView(	CODE
LOW	server/routers/aiProvider/validation.ts	74	export function refineProviderUpstreamFields(	CODE
LOW	server/routers/auth/requestEmailVerificationCode.ts	15	export async function requestEmailVerificationCode(	CODE
LOW	server/routers/virtualApiKey/validation.ts	13	function refineVirtualApiKeyEmailFields(	CODE
LOW	…rver/routers/aiBudget/listAiBudgetsForVirtualApiKey.ts	32	export async function listAiBudgetsForVirtualApiKey(	CODE
LOW	server/routers/aiBudget/listAiBudgetsForSiteResource.ts	32	export async function listAiBudgetsForSiteResource(	CODE
LOW	server/routers/olm/fingerprintingUtils.ts	40	export async function handleFingerprintInsertion(	CODE
LOW	server/routers/olm/fingerprintingUtils.ts	218	export async function cleanUpOldFingerprintSnapshots(retentionDays: number) {	CODE
LOW	server/routers/olm/handleOlmRegisterMessage.ts	37	function getHolePunchChainCounterKey(olmId: string, chainId: string): string {	CODE
LOW	server/routers/olm/buildConfiguration.ts	22	export async function buildSiteConfigurationForOlmClient(	CODE
LOW	server/routers/olm/peers.ts	342	export async function initPeerAddHandshakeBatch(	CODE
LOW	server/routers/olm/recoverOlmWithFingerprint.ts	25	export async function recoverOlmWithFingerprint(	CODE
LOW	server/routers/olm/gateway.ts	15	async function sendGatewayMessageToClients(	CODE
LOW	server/routers/user/adminGeneratePasswordResetCode.ts	32	export async function adminGeneratePasswordResetCode(	CODE
LOW	…ver/routers/siteResource/setSiteResourceAiProviders.ts	60	export async function setSiteResourceAiProviders(	CODE
LOW	…ver/routers/siteResource/removeRoleFromSiteResource.ts	98	export async function removeRoleFromSiteResource(	CODE
LOW	…er/routers/siteResource/exportSiteResourceBlueprint.ts	49	export async function exportSiteResourceBlueprint(	CODE
LOW	…rver/routers/siteResource/listAllSiteResourcesByOrg.ts	294	export async function listAllSiteResourcesByOrg(	CODE
LOW	…ver/routers/siteResource/removeUserFromSiteResource.ts	98	export async function removeUserFromSiteResource(	CODE
LOW	…er/routers/siteResource/addAiProviderToSiteResource.ts	60	export async function addAiProviderToSiteResource(	CODE
LOW	…/routers/siteResource/batchAddClientToSiteResources.ts	103	export async function batchAddClientToSiteResources(	CODE
LOW	…/routers/siteResource/removeAiModelFromSiteResource.ts	55	export async function removeAiModelFromSiteResource(	CODE
LOW	…uters/siteResource/removeAiProviderFromSiteResource.ts	60	export async function removeAiProviderFromSiteResource(	CODE
LOW	server/routers/siteResource/getSiteResource.test.ts	4	function testSiteResourceIdOnlyParams() {	CODE
LOW	server/routers/siteResource/getSiteResource.test.ts	29	function testOrgScopedParamsRemainSupported() {	CODE
LOW	server/routers/siteResource/getSiteResource.test.ts	42	function testInvalidSiteResourceId() {	CODE
LOW	…r/routers/siteResource/removeClientFromSiteResource.ts	99	export async function removeClientFromSiteResource(	CODE
452 more matches not shown…

Decorative Section Separators29 hits · 87 pts

Severity	File	Line	Snippet	Context
MEDIUM	server/routers/newt/pingAccumulator.ts	27	// ── Site (newt) pings ──────────────────────────────────────────────────	COMMENT
MEDIUM	server/routers/newt/pingAccumulator.ts	31	// ── Client (OLM) pings ────────────────────────────────────────────────	COMMENT
MEDIUM	server/routers/newt/pingAccumulator.ts	47	// ── Public API ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/routers/newt/pingAccumulator.ts	76	// ── Flush Logic ────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/routers/newt/pingAccumulator.ts	200	// ── Flush client pings ─────────────────────────────────────────────	COMMENT
MEDIUM	server/routers/newt/pingAccumulator.ts	241	// ── Flush OLM archive resets ───────────────────────────────────────	COMMENT
MEDIUM	server/routers/newt/pingAccumulator.ts	277	// ── Retry / Error Helpers ──────────────────────────────────────────────	COMMENT
MEDIUM	server/routers/newt/pingAccumulator.ts	280	// ── Lifecycle ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/lib/traefik/pathEncoding.test.ts	23	// ── Helpers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/lib/traefik/pathEncoding.test.ts	65	// ── Tests ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	server/lib/traefik/pathEncoding.test.ts	72	// ── encodePath unit tests ────────────────────────────────────────	COMMENT
MEDIUM	server/lib/traefik/pathEncoding.test.ts	187	// ── Collision fix: the actual bug we're fixing ───────────────────	COMMENT
MEDIUM	server/lib/traefik/pathEncoding.test.ts	253	// ── Edge cases ───────────────────────────────────────────────────	COMMENT
MEDIUM	src/app/[orgId]/settings/logs/streaming/page.tsx	59	// ── Re-export Destination so the rest of the file can use it ──────────────────	COMMENT
MEDIUM	src/app/[orgId]/settings/logs/streaming/page.tsx	70	// ── Destination card ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/app/[orgId]/settings/logs/streaming/page.tsx	227	// ── Add destination card ───────────────────────────────────────────────────────	COMMENT
MEDIUM	src/app/[orgId]/settings/logs/streaming/page.tsx	250	// ── Destination type picker ────────────────────────────────────────────────────	COMMENT
MEDIUM	src/app/[orgId]/settings/logs/streaming/page.tsx	354	// ── Main page ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/HttpDestinationCredenza.tsx	30	// ── Types ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/HttpDestinationCredenza.tsx	67	// ── Helpers ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/HttpDestinationCredenza.tsx	91	// ── Headers editor ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/HttpDestinationCredenza.tsx	158	// ── Component ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/S3DestinationCredenza.tsx	29	// ── Types ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/S3DestinationCredenza.tsx	45	// ── Helpers ────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/S3DestinationCredenza.tsx	67	// ── Component ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…omponents/resource-policy/PolicyAccessRulesSection.tsx	55	// ─── PolicyRulesSection ───────────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/resource-policy/CreatePolicyForm.tsx	49	// ─── CreatePolicyForm ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	…mponents/resource-policy/EditPolicyNameSectionForm.tsx	44	// ─── PolicyNameSection ──────────────────────────────────────────────────	COMMENT
MEDIUM	src/components/resource-policy/index.ts	1	// ─── Schemas & types ──────────────────────────────────────────────────────────	COMMENT

Over-Commented Block72 hits · 72 pts

Severity	File	Line	Snippet	Context
LOW	server/routers/external.ts	921		COMMENT
LOW	server/routers/external.ts	1201	// verifyRoleAccess,	COMMENT
LOW	server/routers/external.ts	1261	verifyUserHasAction(ActionsEnum.removeUser),	COMMENT
LOW	server/routers/external.ts	1281	// "/org/:orgId/user/:userId/action",	COMMENT
LOW	server/routers/role/removeRoleSite.ts	61	if (deletedRoleSite.length === 0) {	COMMENT
LOW	server/routers/auth/login.ts	161	// // Check if user has security keys registered	COMMENT
LOW	server/routers/auth/lookupUser.ts	41	// path: "/auth/lookup-user",	COMMENT
LOW	server/routers/org/createOrg.ts	121		COMMENT
LOW	server/routers/org/listUserOrgs.ts	41	// 200: {	COMMENT
LOW	server/routers/olm/createUserOlm.ts	41	// }	COMMENT
LOW	server/routers/olm/getUserOlm.ts	21	const querySchema = z.object({	COMMENT
LOW	server/routers/olm/listUserOlms.ts	41	// query: querySchema,	COMMENT
LOW	server/routers/olm/deleteUserOlm.ts	21	userId: z.string(),	COMMENT
LOW	server/routers/user/removeUserSite.ts	61	if (deletedUserSite.length === 0) {	COMMENT
LOW	server/routers/user/addUserSite.ts	41	})	COMMENT
LOW	server/routers/auditLogs/queryRequestAuditLog.ts	361	.from(requestAuditLog)	COMMENT
LOW	server/routers/auditLogs/generateCSV.ts	1	// Spreadsheet applications (Excel, LibreOffice, Google Sheets) evaluate a cell	COMMENT
LOW	server/routers/site/updateSite.ts	141	// // if remoteSubnets is provided, ensure it's a valid comma-separated list of cidrs	COMMENT
LOW	server/routers/client/listClients.ts	521	roles: rolesForClients	COMMENT
LOW	server/routers/client/listClients.ts	541	// const latestOlmVersion = await latestOlVersionPromise;	COMMENT
LOW	server/routers/ws/checkRoundTripMessage.ts	21	// registry.registerPath({	COMMENT
LOW	server/setup/scriptsPg/1.25.0.ts	121	} catch (e) {	COMMENT
LOW	server/setup/scriptsPg/1.25.0.ts	141	// })	COMMENT
LOW	server/setup/scriptsPg/1.25.0.ts	161	// console.log(	COMMENT
LOW	server/setup/scriptsSqlite/1.25.0.ts	141	// APP_PATH,	COMMENT
LOW	server/setup/scriptsSqlite/1.25.0.ts	161		COMMENT
LOW	server/private/routers/org/sendUsageNotifications.ts	61	// "application/json": {	COMMENT
LOW	…ate/routers/domain/checkDomainNamespaceAvailability.ts	81	// build == "saas" &&	COMMENT
LOW	server/private/routers/billing/getOrgUsage.ts	41	// },	COMMENT
LOW	server/private/middlewares/verifyRemoteExitNode.ts	41	// .from(users)	COMMENT
LOW	server/private/lib/readConfigFile.ts	181	enable_redis: z.boolean().optional().default(false),	COMMENT
LOW	server/private/lib/readConfigFile.ts	201	cert_mode: z	COMMENT
LOW	server/private/lib/certificates/scheduler.ts	21		COMMENT
LOW	server/private/lib/certificates/certificate-service.ts	21	import { withTimeout, withRetry } from "@server/lib/retry";	COMMENT
LOW	server/private/lib/certificates/certificate-service.ts	41	const CERTIFICATE_ISSUANCE_TIMEOUT_MS = 20 * 60 * 1000;	COMMENT
LOW	server/private/lib/certificates/acme-client.ts	21	import { acmeRateLimiter } from "./acmeRateLimiter";	COMMENT
LOW	server/private/lib/exitNodes/exitNodes.ts	201	);	COMMENT
LOW	server/private/lib/exitNodes/exitNodes.ts	221	// if (isActuallyOnline != node.online) {	COMMENT
LOW	server/private/lib/dns/customRecordMatch.ts	21	port: number \| null;	COMMENT
LOW	server/private/lib/dns/server.ts	1661		COMMENT
LOW	server/lib/ip.test.ts	41	// Test 4: Empty existing	COMMENT
LOW	server/lib/ip.test.ts	101	// assertEqualsObj(result, {	COMMENT
LOW	server/lib/ip.test.ts	121	// "Invalid IPv4 prefix test failed"	COMMENT
LOW	server/lib/aiBudgetEnforcement.ts	461	// Same id as the aiSessionLog row logged for this request, so the two	COMMENT
LOW	server/lib/rebuildClientAssociations.ts	641	`rebuildClientAssociations: [rebuildClientAssociationsFromSiteResource] siteId=${siteId} otherResourceCl	COMMENT
LOW	server/lib/blueprints/parseDotNotation.ts	81	// "resources.resource-nice-id.name": "this is my resource",	COMMENT
LOW	server/lib/blueprints/parseDotNotation.ts	101	// "resources.resource-nice-id2.protocol": "tcp",	COMMENT
LOW	server/lib/blueprints/parseDockerContainers.ts	221	}	COMMENT
LOW	server/lib/blueprints/parseDockerContainers.ts	241	// ip: "0.0.0.0"	COMMENT
LOW	server/lib/blueprints/parseDockerContainers.ts	261	// name: "nginx2",	COMMENT
LOW	server/lib/blueprints/parseDockerContainers.ts	281	// owen_default: {	COMMENT
LOW	server/lib/blueprints/parseDockerContainers.ts	301	// ],	COMMENT
LOW	server/lib/blueprints/parseDockerContainers.ts	321	// image: "bolkedebruin/rdpgw:latest",	COMMENT
LOW	server/db/sqlite/driver.ts	21	const sqlite = new Database(location, { verbose });	COMMENT
LOW	server/db/pg/poolConfig.ts	41	);	COMMENT
LOW	.github/workflows/linting.yml	1	name: ESLint	COMMENT
LOW	.github/workflows/mirror-node.yml	1	name: Mirror Node Base Image (Docker Hub to GHCR)	COMMENT
LOW	src/components/ShareLinksTable.tsx	201	// cell: ({ row }) => {	COMMENT
LOW	src/components/ShareLinksTable.tsx	221	// variant="ghost"	COMMENT
LOW	src/components/ShareLinksTable.tsx	241	// );	COMMENT
12 more matches not shown…

Fake / Example Data17 hits · 17 pts

Severity	File	Line	Snippet	Context
LOW	messages/it-IT.json	650	"placeholder": "Segnaposto",	CODE
LOW	messages/ko-KR.json	650	"placeholder": "자리 표시자",	CODE
LOW	messages/es-ES.json	650	"placeholder": "Marcador de posición",	CODE
LOW	messages/bg-BG.json	650	"placeholder": "Запълване",	CODE
LOW	messages/zh-CN.json	650	"placeholder": "占位符",	CODE
LOW	messages/tr-TR.json	650	"placeholder": "Yer Tutucu",	CODE
LOW	messages/pt-PT.json	650	"placeholder": "Espaço reservado",	CODE
LOW	messages/pl-PL.json	650	"placeholder": "Symbol zastępczy",	CODE
LOW	messages/da-DK.json	650	"placeholder": "Pladsholder",	CODE
LOW	messages/nb-NO.json	650	"placeholder": "Plassholder",	CODE
LOW	messages/de-DE.json	650	"placeholder": "Platzhalter",	CODE
LOW	messages/cs-CZ.json	650	"placeholder": "Zástupný symbol",	CODE
LOW	messages/fr-FR.json	650	"placeholder": "Espace réservé",	CODE
LOW	messages/zh-TW.json	407	"placeholder": "占位符",	CODE
LOW	messages/ru-RU.json	650	"placeholder": "Заполнитель",	CODE
LOW	messages/nl-NL.json	650	"placeholder": "Plaatsaanduiding",	CODE
LOW	messages/en-US.json	650	"placeholder": "Placeholder",	CODE

Excessive Try-Catch Wrapping3 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	license_header_checker.py	117	except Exception as e:	STRING
MEDIUM	license_header_checker.py	118	print(f"Error processing file {file_path}: {e}")	STRING
MEDIUM	license_header_checker.py	134	print(f"Error: Directory '{target_directory}' not found.")	STRING

AI Slop Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	package-lock.json	16088	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE

Self-Referential Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	src/components/newt-install-commands.tsx	123	command: `# Create the directory and environment file	CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	server/lib/blueprints/parseDotNotation.ts	79	// // Example usage:	COMMENT

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	license_header_checker.py	62		CODE

Slop Phrases1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	messages/en-US.json	1707	"otpSetupSuccessStoreBackupCodes": "Your account is now more secure. Don't forget to save your backup codes.",	CODE

fosrl/pangolin

Open-Source Code Quality, Security and Technical Debt Review