1.3

Adjusted Signal

1.3

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

8.1K

Stars

Language

547.2K

Lines of Code

2.2K

Files

735

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 715 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 20 finding(s).

Agent Over-Engineering Ratio 3.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 334 finding(s).

PR Review Velocity Impact 6.6/100 · LOW

Which changes need focused human review? 735 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 3LOW 731

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 735 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers334 hits · 346 pts

Severity	File	Line	Snippet	Context
LOW⚡	frontend/src/lib/types/notifications.ts	287	function telegramChatIdsToDestinations(chatIds: string[]): TelegramDestination[] {	CODE
LOW⚡	frontend/src/lib/types/notifications.ts	296	function telegramDestinationsToChatIds(destinations: TelegramDestination[]): string[] {	CODE
LOW⚡	frontend/src/lib/types/notifications.ts	303	export function telegramSettingsToFormValues(settings?: NotificationSettings): TelegramFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	257	export function discordSettingsToFormValues(settings?: NotificationSettings): DiscordFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	270	export function emailSettingsToFormValues(settings?: NotificationSettings): EmailFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	317	export function signalSettingsToFormValues(settings?: NotificationSettings): SignalFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	335	export function slackSettingsToFormValues(settings?: NotificationSettings): SlackFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	351	export function discordFormValuesToSettings(values: DiscordFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	365	export function emailFormValuesToSettings(values: EmailFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	386	export function telegramFormValuesToSettings(values: TelegramFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	401	export function signalFormValuesToSettings(values: SignalFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	423	export function slackFormValuesToSettings(values: SlackFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	462	export function pushoverSettingsToFormValues(settings?: NotificationSettings): PushoverFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	476	export function gotifySettingsToFormValues(settings?: NotificationSettings): GotifyFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	494	export function matrixSettingsToFormValues(settings?: NotificationSettings): MatrixFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	509	export function googleChatSettingsToFormValues(settings?: NotificationSettings): GoogleChatFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	519	export function genericSettingsToFormValues(settings?: NotificationSettings): GenericFormValues {	CODE
LOW	frontend/src/lib/types/notifications.ts	568	export function pushoverFormValuesToSettings(values: PushoverFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	586	export function gotifyFormValuesToSettings(values: GotifyFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	605	export function matrixFormValuesToSettings(values: MatrixFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	621	export function googleChatFormValuesToSettings(values: GoogleChatFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/types/notifications.ts	632	export function genericFormValuesToSettings(values: GenericFormValues): NotificationSettings {	CODE
LOW	frontend/src/lib/config/navigation-config.ts	357	export function getNavigationTitleForPath(pathname: string): string \| undefined {	CODE
LOW	frontend/src/lib/config/navigation-config.ts	374	export function getSettingsSubpageUrlsInNavOrder(): string[] {	CODE
LOW	frontend/src/lib/config/navigation-config.ts	379	export function getCustomizeSubpageUrlsInNavOrder(): string[] {	CODE
LOW	frontend/src/lib/config/navigation-config.ts	428	export function getAvailableMobileNavItems(options?: {	CODE
LOW	frontend/src/lib/stores/environment.store.svelte.ts	42	function createEnvironmentManagementStore() {	CODE
LOW	frontend/src/lib/stores/features.store.svelte.ts	12	async function clearVulnerabilityQueries(environmentId: string): Promise<void> {	CODE
LOW	frontend/src/lib/stores/dashboard.store.svelte.ts	87	function replaceEnvironmentSnapshotInternal(environmentId: string, snapshot: DashboardSnapshot) {	CODE
LOW	frontend/src/lib/stores/client-stream.svelte.ts	20	function createClientStreamInternal() {	CODE
LOW	…tend/src/lib/stores/environment-status.store.svelte.ts	22	function createEnvironmentStatusStoreInternal() {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	52	function getActivitySortTimeInternal(activity: Activity): number {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	61	function activitySearchHaystackInternal(activity: Activity): string {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	119	function finalizeBatchGroupInternal(group: ActivityBatchGroup) {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	140	function groupStatusIsActiveInternal(group: ActivityGroup): boolean {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	144	function sourceEnvironmentIdInternal(activity: Activity \| null \| undefined): string {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	174	function noteActivityStatusInternal(activity: Activity) {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	294	function normalizeActivityInternal(activity: Activity, environmentId: string): Activity {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	310	function replaceEnvironmentSnapshotInternal(environmentId: string, activities: Activity[]) {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	340	function rebuildActivitiesInternal() {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	415	function activityEnvironmentIdInternal(activityId: string): string {	CODE
LOW	frontend/src/lib/stores/activity.store.svelte.ts	522	function environmentFailuresInternal(): ActivityEnvironmentFailure[] {	CODE
LOW	frontend/src/lib/stores/version.store.svelte.ts	13	function createVersionStoreInternal() {	CODE
LOW	frontend/src/lib/stores/operation-watch.store.svelte.ts	8	function createOperationWatchStore() {	CODE
LOW	frontend/src/lib/stores/environment-stream.svelte.ts	123	function clearAllEnvironmentErrors() {	CODE
LOW	frontend/src/lib/utils/image-updates.ts	18	export function formatImageUpdateCheckedAt(value: string) {	CODE
LOW	frontend/src/lib/utils/access-policy.ts	45	export function getFallbackAccessSurfaces(manifest: PermissionsManifest \| null \| undefined): AccessSurface[] {	CODE
LOW	frontend/src/lib/utils/access-policy.ts	102	function hasPermissionForScopeInternal(	CODE
LOW	frontend/src/lib/utils/access-policy.ts	123	function permissionsForEnvInternal(user: User, envId: string \| undefined): Set<string> {	CODE
LOW	frontend/src/lib/utils/access-policy.ts	134	function buildSurfaceIndexInternal(surfaces: AccessSurface[]): SurfaceIndex {	CODE
LOW	frontend/src/lib/utils/access-policy.ts	154	function isTemplateSegmentInternal(segment: string): boolean {	CODE
LOW	frontend/src/lib/utils/resource-actions.ts	14	export function createRefreshActionButtons({	CODE
LOW	frontend/src/lib/utils/vulnerability.ts	166	export function toBulkVulnerabilityFilters(options: SearchPaginationSortRequest): BulkVulnerabilityFilters {	CODE
LOW⚡	frontend/src/lib/utils/vulnerability.ts	194	export function vulnerabilityOverviewEnvironments(): EnvironmentRef[] {	CODE
LOW⚡	frontend/src/lib/utils/vulnerability.ts	204	export function vulnerabilityOverviewEnvironment(): EnvironmentRef \| undefined {	CODE
LOW⚡	frontend/src/lib/utils/vulnerability.ts	213	export function vulnerabilityEnvironments(): EnvironmentRef[] {	CODE
LOW	frontend/src/lib/utils/vulnerability.ts	252	export function toastVulnerabilityScanStatus(	CODE
LOW	frontend/src/lib/utils/activity-toast.ts	26	export function activityIdFromStreamFrame(data: unknown): string \| undefined {	CODE
LOW	frontend/src/lib/utils/navigation.ts	22	export function getEffectiveNavigationSettings(): MobileNavigationSettings {	CODE
LOW	frontend/src/lib/utils/browser-download.ts	20	export function filenameFromContentDisposition(header: string \| null, fallback: string): string {	CODE
274 more matches not shown…

Over-Commented Block371 hits · 324 pts

Severity	File	Line	Snippet	Context
LOW	types/settings/settings.go	21	// SettingDto represents a setting with visibility information.	COMMENT
LOW	types/settings/settings.go	41	// Must be an absolute path.	COMMENT
LOW	types/settings/settings.go	61		COMMENT
LOW	types/settings/settings.go	81		COMMENT
LOW	types/settings/settings.go	101		COMMENT
LOW	types/settings/settings.go	121		COMMENT
LOW	types/settings/settings.go	141	// Required: false	COMMENT
LOW	types/settings/settings.go	161	// Required: false	COMMENT
LOW	types/settings/settings.go	181	// Required: false	COMMENT
LOW	types/settings/settings.go	201		COMMENT
LOW	types/settings/settings.go	221	//	COMMENT
LOW	types/settings/settings.go	241	GitSyncMaxBinarySizeMb *string `json:"gitSyncMaxBinarySizeMb,omitzero"`	COMMENT
LOW	types/settings/settings.go	261		COMMENT
LOW	types/settings/settings.go	281		COMMENT
LOW	types/settings/settings.go	301	// Required: false	COMMENT
LOW	types/settings/settings.go	321	// Required: false	COMMENT
LOW	types/settings/settings.go	341	// TrivyPrivileged controls whether Trivy scan containers run in privileged mode.	COMMENT
LOW	types/settings/settings.go	361	TrivyMemoryLimitMb *string `json:"trivyMemoryLimitMb,omitzero"`	COMMENT
LOW	types/settings/settings.go	381	//	COMMENT
LOW	types/settings/settings.go	401	//	COMMENT
LOW	types/settings/settings.go	421	// ImageAutoPatchInterval is the cron expression for scheduled image patching.	COMMENT
LOW	types/settings/settings.go	441	// OidcScopes is the list of OIDC scopes to request.	COMMENT
LOW	types/settings/settings.go	461		COMMENT
LOW	types/settings/settings.go	481		COMMENT
LOW	types/settings/settings.go	501		COMMENT
LOW	types/settings/settings.go	521		COMMENT
LOW	types/settings/settings.go	541		COMMENT
LOW	types/settings/settings.go	561	BuildsDirectory *string `json:"buildsDirectory,omitzero"`	COMMENT
LOW	types/swarm/service.go	61	ID string `json:"id"`	COMMENT
LOW	types/swarm/service.go	81	//	COMMENT
LOW	types/swarm/service.go	101	//	COMMENT
LOW	types/swarm/service.go	121	//	COMMENT
LOW	types/swarm/service.go	141		COMMENT
LOW	types/swarm/service.go	261	// EncodedRegistryAuth is the encoded registry authorization credentials.	COMMENT
LOW	types/swarm/service.go	301	// NewServiceSummary converts a Docker swarm service into the API-facing ServiceSummary shape.	COMMENT
LOW	types/swarm/task.go	21	//	COMMENT
LOW	types/swarm/task.go	41	//	COMMENT
LOW	types/swarm/task.go	61	//	COMMENT
LOW	types/swarm/task.go	81	// NewTaskSummary converts a Docker swarm task into the API-facing TaskSummary shape.	COMMENT
LOW	types/swarm/swarm.go	21	// Required: true	COMMENT
LOW	types/swarm/stack.go	21	// Services is the number of services in the stack.	COMMENT
LOW	types/swarm/stack.go	41	Name string `json:"name"`	COMMENT
LOW	types/swarm/stack.go	81	// EnvContent is the optional environment file content.	COMMENT
LOW	types/swarm/stack.go	101	Services []string `json:"services"`	COMMENT
LOW	types/swarm/stack.go	121	//	COMMENT
LOW	types/swarm/stack.go	141		COMMENT
LOW	types/swarm/stack.go	161	//	COMMENT
LOW	types/swarm/stack_deploy.go	1	package swarm	COMMENT
LOW	types/swarm/stack_deploy.go	21	// EnvContent is the optional environment file content.	COMMENT
LOW	types/swarm/stack_deploy.go	41	// ResolveImage controls how image digests are resolved (always, changed, never).	COMMENT
LOW	types/swarm/node.go	61	Role string `json:"role"`	COMMENT
LOW	types/swarm/node.go	81	ManagerStatus string `json:"managerStatus,omitempty"`	COMMENT
LOW	types/swarm/node.go	101	SystemLabels map[string]string `json:"systemLabels,omitempty"`	COMMENT
LOW	types/swarm/node.go	141	//	COMMENT
LOW	types/containerregistry/browse.go	21	//	COMMENT
LOW	types/containerregistry/browse.go	41	//	COMMENT
LOW	types/containerregistry/container_registry.go	21		COMMENT
LOW	types/containerregistry/container_registry.go	41		COMMENT
LOW	types/containerregistry/container_registry.go	81	RegistryID string `json:"registryId"`	COMMENT
LOW	types/containerregistry/container_registry.go	101	Repository string `json:"repository,omitempty"`	COMMENT
311 more matches not shown…

Fake / Example Data20 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	types/user/user.go	42	DisplayName *string `json:"displayName,omitempty" maxLength:"255" doc:"Display name of the user" example:"John Doe"	CODE
LOW	types/user/user.go	71	DisplayName *string `json:"displayName,omitempty" doc:"Display name of the user" example:"Jo	CODE
LOW	frontend/messages/tr.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/hu.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/ja.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/ru.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/pl.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/uk.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/eo.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/zh-CN.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/en.json	1639	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/it.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/fr.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/el.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/ko.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/zh-TW.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/vi.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/cs.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/da.json	1637	"user_example_com_placeholder": "user@example.com",	CODE
LOW	frontend/messages/sv.json	1637	"user_example_com_placeholder": "user@example.com",	CODE

Redundant / Tautological Comments4 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW⚡	scripts/development/dev.sh	128	# Check if Docker is available	COMMENT
LOW⚡	scripts/development/dev.sh	133	# Check if Docker daemon is running (only if Docker is available)	COMMENT
LOW⚡	scripts/development/dev.sh	138	# Check if Docker Compose is available	COMMENT
LOW	scripts/development/dev.sh	192	# Check if the specified service container is running	COMMENT

Modern AI Meta-Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	backend/internal/project/handler.go	314	// streamProjectOperation is the shared scaffold for the streamed	COMMENT
MEDIUM	backend/api/ws/log_streams.go	101	// serveLogStream is the shared scaffold for all three WS log endpoints (project, container, service).	COMMENT

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	SECURITY.md	15	> Reports must be written by a human, not generated by AI. This requirement may seem unusual, but it serves as a validat	CODE

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	types/base/json.go	10	// seamless database integration.	COMMENT

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	backend/internal/user/service.go	550	// Step 1: ensure the default admin user row exists. If the users table is	COMMENT

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	backend/internal/user/service.go	550	// Step 1: ensure the default admin user row exists. If the users table is	COMMENT

getarcaneapp/arcane

Open-Source Code Quality, Security and Technical Debt Review