0.9

Adjusted Signal

0.9

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

11.8K

Stars

Language

122.7K

Lines of Code

592

Files

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 87 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 4 finding(s).

Agent Over-Engineering Ratio 0.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 5 finding(s).

PR Review Velocity Impact 4.3/100 · LOW

Which changes need focused human review? 96 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 6LOW 90

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 96 distinct pattern matches across 4 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block86 hits · 86 pts

Severity	File	Line	Snippet	Context
LOW	main.go	41		COMMENT
LOW	servercfg/serverconf.go	881	// TODO: Future Enhancement - Implement Leader Election for True HA Failover	COMMENT
LOW	clickhouse/clickhouse.go	61	// IsConnected returns whether a clickhouse connection	COMMENT
LOW	pro/logic/status.go	141		COMMENT
LOW	pro/controllers/users.go	1161	// @Router /api/users/{username}/remote_access_gw/{remote_access_gateway_id} [post]	COMMENT
LOW	pro/controllers/users.go	1241		COMMENT
LOW	pro/controllers/users.go	1621	DnsAddress: node.IngressDNS,	COMMENT
LOW	pro/controllers/jit.go	41	// @Tags JIT	COMMENT
LOW	pro/controllers/jit.go	641	logic.ReturnSuccessResponseWithJson(w, r, networksWithJITStatus, "fetched user JIT network status")	COMMENT
LOW	pro/controllers/auto_relay.go	501	if sendPeerUpdate {	COMMENT
LOW	pro/controllers/events.go	21	}	COMMENT
LOW	pro/controllers/events.go	81	}	COMMENT
LOW	pro/controllers/flows.go	81	// @Param src_entity_id query string false "Source entity ID filter"	COMMENT
LOW	pro/controllers/posture_check.go	41	// @Success 200 {object} models.SuccessResponse	COMMENT
LOW	pro/controllers/posture_check.go	121	proLogic.PopulatePostureCheckGroupNames(r.Context(), []schema.PostureCheck{pc})	COMMENT
LOW	pro/controllers/integrations.go	241		COMMENT
LOW	pro/controllers/integrations.go	361		COMMENT
LOW	grpc/auditlogs/auditlogs_grpc.pb.go	61	// for forward compatibility.	COMMENT
LOW	grpc/flow/flow_grpc.pb.go	61	// for forward compatibility.	COMMENT
LOW	auth/host_session.go	101	}	COMMENT
LOW	k8s/server/netmaker-ui.yaml	41	# kind: Ingress	COMMENT
LOW	k8s/server/netmaker-ui.yaml	61	# service:	COMMENT
LOW	k8s/server/mosquitto.yaml	161	# ingressClassName: nginx	COMMENT
LOW	k8s/server/netmaker-server.yaml	201	# kind: Ingress	COMMENT
LOW	k8s/server/netmaker-server.yaml	221	# service:	COMMENT
LOW	compose/docker-compose.pro.yml	61	restart: always	COMMENT
LOW	logic/peers.go	521	// RelayedBy is temporarily empty/stale after gateway teardown;	COMMENT
LOW	logic/acls_selected_ips_test.go	2221	t.Fatalf("expected reverse Dst to contain relayed device /32, got %v", rev.Dst)	COMMENT
LOW	logic/acls_selected_ips_test.go	2381		COMMENT
LOW	logic/acls_selected_ips_test.go	2561	// site-acl is Uni, src has {EgressID: blr-eg, NodeID: macbook,	COMMENT
LOW	models/network_test.go	1	package models	COMMENT
LOW	migrate/migrate_test.go	1	// Package migrate provides tests for migration functions, including	COMMENT
LOW	scripts/netmaker-ci-runner.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/nm-quick.sh	841		COMMENT
LOW	controllers/enrollmentkeys.go	401		COMMENT
LOW	controllers/dns.go	61		COMMENT
LOW	controllers/dns.go	201	r,	COMMENT
LOW	controllers/dns.go	581	json.NewEncoder(w).Encode(entry)	COMMENT
LOW	controllers/gateway.go	381	json.NewEncoder(w).Encode(apiNode)	COMMENT
LOW	controllers/egress.go	41	presets := []models.EgressPresetApp{}	COMMENT
LOW	controllers/org.go	261	//func createOrg(w http.ResponseWriter, r *http.Request) {	COMMENT
LOW	controllers/org.go	281	// return	COMMENT
LOW	controllers/org.go	581		COMMENT
LOW	controllers/org.go	601	// err := o.Get(r.Context())	COMMENT
LOW	controllers/org.go	621	// err = o.Delete(r.Context())	COMMENT
LOW	controllers/org.go	681		COMMENT
LOW	controllers/org.go	701	// if err != nil {	COMMENT
LOW	controllers/org.go	721	// logic.ReturnErrorResponse(w, r, logic.FormatError(err, logic.BadReq))	COMMENT
LOW	controllers/org.go	741	// logic.ReturnErrorResponse(w, r, logic.FormatError(err, logic.Internal))	COMMENT
LOW	controllers/org.go	781	// @Success 200 {object} models.SuccessResponse	COMMENT
LOW	controllers/org.go	801	// logic.ReturnErrorResponse(w, r, logic.FormatError(errors.New("tenant not found"), logic.NotFound))	COMMENT
LOW	controllers/server.go	101	}	COMMENT
LOW	controllers/server.go	181	}	COMMENT
LOW	controllers/server.go	461		COMMENT
LOW	controllers/user.go	181	// @Produce json	COMMENT
LOW	controllers/user.go	481	// @Summary Get the login methods available for a tenant or organization	COMMENT
LOW	controllers/user.go	861	// @Tags Users	COMMENT
LOW	controllers/user.go	1141	userID := r.Header.Get("user")	COMMENT
LOW	controllers/user.go	1281	logger.Log(2, r.Header.Get("user"), "fetched users")	COMMENT
LOW	controllers/user.go	2001		COMMENT
26 more matches not shown…

Decorative Section Separators5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	test/utils/ip.go	11	// ── IPv4 Public ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	test/utils/ip.go	69	// ── IPv6 Public ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	test/utils/ip.go	121	// ── Private / Shared CIDR generation ────────────────────────────────────────	COMMENT
MEDIUM	test/utils/ip.go	180	// ── Random IP within a CIDR ──────────────────────────────────────────────────	COMMENT
MEDIUM	test/utils/ip.go	242	// ── helpers ──────────────────────────────────────────────────────────────────	COMMENT

Fake / Example Data4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW⚡	pro/integration/mdm/iru/iru_test.go	13	"user": {"email": "user@example.com", "name": "User One"}	CODE
LOW⚡	pro/integration/mdm/iru/iru_test.go	17	if d.User.Email() != "user@example.com" {	CODE
LOW⚡	pro/integration/mdm/iru/iru_test.go	27	"user": "user@example.com"	CODE
LOW⚡	pro/integration/mdm/iru/iru_test.go	31	if d.User.Email() != "user@example.com" {	CODE

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	servercfg/serverconf.go	897	// - Most robust but adds infrastructure dependency	COMMENT

gravitl/netmaker

Open-Source Code Quality, Security and Technical Debt Review