0.8

Adjusted Signal

0.8

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

17.1K

Stars

Language

868.4K

Lines of Code

5.5K

Files

508

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 477 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.7/100 · LOW

Are imports declared and package/API names verified? 17 finding(s).

Agent Over-Engineering Ratio 0.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 29 finding(s).

PR Review Velocity Impact 3.9/100 · LOW

Which changes need focused human review? 508 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 8HIGH 5MEDIUM 39LOW 456

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 508 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block422 hits · 422 pts

Severity	File	Line	Snippet	Context
LOW	demo/csi/ceph-csi-plugin/ceph-csi-id.tf	1	# Copyright IBM Corp. 2015, 2026	COMMENT
LOW	ui/app/adapters/watchable.js	21	// Initialize from the configuration, but this might be dynamically	COMMENT
LOW	ui/app/routes/administration/policies/new.js	61	# * read-job	COMMENT
LOW	ui/tests/test-helper.ts	21	setup(QUnit.assert);	COMMENT
LOW	ui/tests/helpers/index.ts	21	//	COMMENT
LOW	enos/enos-scenario-upgrade.hcl	161		COMMENT
LOW	drivers/docker/config.go	161	// configSpec is the hcl specification returned by the ConfigSchema RPC	COMMENT
LOW	drivers/docker/config.go	181	// volumes {	COMMENT
LOW	drivers/docker/win32_volume_parse.go	21	// myname:d:	COMMENT
LOW	drivers/docker/win32_volume_parse.go	41		COMMENT
LOW	drivers/docker/driver.go	941		COMMENT
LOW	drivers/docker/driver.go	961	// oversubscription setting.	COMMENT
LOW	drivers/docker/driver_test.go	141		COMMENT
LOW	drivers/shared/capabilities/defaults.go	21	extractLiteral = regexp.MustCompile(`([\w]+)`)	COMMENT
LOW	drivers/shared/capabilities/defaults.go	121	//	COMMENT
LOW	drivers/shared/executor/executor_linux_cgo.go	1061		COMMENT
LOW	drivers/shared/executor/utils.go	161	const (	COMMENT
LOW	drivers/shared/executor/executor.go	61	// Launch a user process configured by the given ExecCommand	COMMENT
LOW	drivers/shared/executor/executor.go	201	// Critical: is "/reserve/<id>" or "/share"; do not try to parse this!	COMMENT
LOW	drivers/shared/executor/executor_universal_linux.go	81	// its use case is for removing the cgroup from the system once it is no longer	COMMENT
LOW	drivers/shared/executor/procstats/procstats.go	81	Pids: procStats,	COMMENT
LOW	plugins/csi/client.go	41	//	COMMENT
LOW	plugins/csi/plugin.go	81	NodeGetCapabilities(ctx context.Context) (*NodeCapabilitySet, error)	COMMENT
LOW	plugins/csi/plugin.go	121	// If the volume was attached via a call to `ControllerPublishVolume` then	COMMENT
LOW	plugins/csi/plugin.go	201	// The path to which the volume MAY be staged. It MUST be an	COMMENT
LOW	plugins/drivers/driver.go	581	// ExecTaskStreamingRawDriver represents a low-level interface for executing a streaming exec	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	1	// Copyright IBM Corp. 2015, 2026	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	21	// `int(number)` returns the integer portion of the given number, rounding towards zero.	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	41	//	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	81	// Types that are valid to be assigned to Block:	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	281		COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	301	//	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	381	//	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	401	// by a parent `Object` spec, if the input block type name should match the	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	481	// }	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	561	}	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	581	// ```	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	661	}	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	761	// properties are derived from the labels set on each matching block.	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	781	// by a parent `Object` spec, if the input block type name should match the	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	861	// ```hcl	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	921	//	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	1001	// }	COMMENT
LOW	plugins/shared/hclspec/hcl_spec.pb.go	1061	return x.Attributes	COMMENT
LOW	plugins/device/cmd/example/device.go	141	// listPeriod is how often we should list the device directory to detect new	COMMENT
LOW	ci/slow.go	21	// Parallel runs t in parallel, unless CI is set to a true value.	COMMENT
LOW	scheduler/annotate.go	21	UpdateTypeIgnore = "ignore"	COMMENT
LOW	scheduler/doc.go	1	// Copyright IBM Corp. 2015, 2026	COMMENT
LOW	scheduler/feasible/device.go	61	// Matches returns whether the given device instance is on a PCI bus that is	COMMENT
LOW	scheduler/feasible/doc.go	1	// Copyright IBM Corp. 2015, 2026	COMMENT
LOW	scheduler/feasible/rank.go	461		COMMENT
LOW	scheduler/structs/interfaces.go	21		COMMENT
LOW	scheduler/structs/interfaces.go	121		COMMENT
LOW	scheduler/structs/doc.go	1	// Copyright IBM Corp. 2015, 2026	COMMENT
LOW	scheduler/benchmarks/benchmarks_test.go	21	// benchmark for the Nomad scheduler. The starting state for your	COMMENT
LOW	scheduler/reconciler/reconcile_cluster.go	81	// clusterState stores frequently accessed properties of the cluster:	COMMENT
LOW	scheduler/reconciler/reconcile_cluster.go	1261	// reconnect, which ones to stop, and the stop results for the latter.	COMMENT
LOW	scheduler/reconciler/filters.go	21	markStop(migrate, "", sstructs.StatusAllocNotNeeded),	COMMENT
LOW	scheduler/reconciler/filters.go	441	if eligibleLater {	COMMENT
LOW	scheduler/reconciler/filters.go	461	func shouldFilter(alloc *structs.Allocation, isBatch bool) (untainted, ignore bool) {	COMMENT
362 more matches not shown…

Hallucination Indicators8 hits · 80 pts

Severity	File	Line	Snippet	Context
CRITICAL	…integration/components/das/recommendation-card-test.js	158	RecommendationCard.activeTask.totalsTable.recommended.cpu.as(	CODE
CRITICAL	…integration/components/das/recommendation-card-test.js	165	RecommendationCard.activeTask.totalsTable.recommended.memory.as(	CODE
CRITICAL	…integration/components/das/recommendation-card-test.js	209	RecommendationCard.activeTask.totalsTable.recommended.cpu.as(	CODE
CRITICAL	scheduler/util.go	678	Networks: update.Alloc.AllocatedResources.Shared.Networks.Copy(),	CODE
CRITICAL	scheduler/feasible/rank.go	487	nodeCores := option.Node.NodeResources.Processors.Topology.UsableCores()	CODE
CRITICAL	scheduler/feasible/rank.go	581	availableCores: option.Node.NodeResources.Processors.Topology.UsableCores(),	CODE
CRITICAL	scheduler/feasible/rank.go	693	nodeCores := option.Node.NodeResources.Processors.Topology.UsableCores()	CODE
CRITICAL	client/allocrunner/taskrunner/task_runner.go	1224	PercentTicks: float64(taskResources.Cpu.CpuShares) / float64(tr.clientConfig.Node.NodeResources.Processors.Topol	CODE

Decorative Section Separators14 hits · 57 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	nomad/node_endpoint.go	636	// ┌────────────────────────────────────── No ───┐	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	638	// ┌──▼───┐ ┌─────────────┐ ┌────────┴────────┐	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	640	// └──▲──▲┘ └─────┬───────┘ └────────┬────────┘	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	642	// │ │ └─ No ─┐ ┌─────── Yes ──┘	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	644	// │ │ ┌────────▼──▼───────┐	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	645	// │ └──────────No───┤ Node pool exists? │	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	646	// │ └─────────┬─────────┘	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	650	// ┌──────┴───────┐ ┌───▼───┐ ┌──────┐	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	652	// └──────────────┘ └───▲───┘ └──┬───┘	COMMENT
MEDIUM⚡	nomad/node_endpoint.go	654	// └──── ready ─────┘	COMMENT
MEDIUM	e2e/terraform/variables.tf	50	# ----------------------------------------	COMMENT
MEDIUM	e2e/terraform/variables.tf	103	# ----------------------------------------	COMMENT
MEDIUM	e2e/terraform/provision-infra/variables.tf	50	# ----------------------------------------	COMMENT
MEDIUM	e2e/terraform/provision-infra/variables.tf	106	# ----------------------------------------	COMMENT

AI Slop Vocabulary15 hits · 45 pts

Severity	File	Line	Snippet	Context
MEDIUM	ui/app/utils/qp-serialize.js	8	// An unattractive but robust way to encode query params	COMMENT
MEDIUM	ui/mirage/config.js	624	// Use the server instead of the schema to leverage the job factory	COMMENT
MEDIUM	ui/mirage/config.js	639	// Use the server instead of the schema to leverage the job factory	COMMENT
MEDIUM	drivers/docker/win32_volume_parse.go	49	// - Essentially using the folder solution from	COMMENT
MEDIUM	nomad/job_endpoint_hooks.go	68	// groups that utilize Nomad's native service discovery checks feature. This	COMMENT
MEDIUM	nomad/job_endpoint_hooks.go	79	// utilize Nomad's NUMA aware scheduling which requires Nomad 1.7 or later.	COMMENT
MEDIUM	nomad/job_endpoint_hooks.go	86	// numaKernelConstraint is the constraint injected into task groups that utilize	COMMENT
MEDIUM	nomad/consul.go	35	// the Consul scope. There was a Meta field introduced which Nomad can leverage	COMMENT
MEDIUM	api/internal/testutil/discover/discover.go	70	// delve debug executable for debugging test	COMMENT
MEDIUM	command/deployment_status.go	393	// TODO We may want to find a more robust way of waiting for rollbacks to launch instead of	COMMENT
MEDIUM	command/deployment_status.go	502	// TODO We may want to find a more robust way of waiting for rollbacks to launch instead of	COMMENT
MEDIUM	command/agent/agent.go	1386	// running consul-template functions that utilize the Nomad API. We lazy	COMMENT
MEDIUM	helper/escapingfs/escapes.go	27	// API, which is both simple and robust. We retain the older checks for	COMMENT
MEDIUM	…nt/allocrunner/taskrunner/template/template_default.go	152	// stderr the same way CT does so the results look seamless	COMMENT
MEDIUM	client/hostvolumemanager/host_volumes.go	346	// dynamic volumes, like CSI, have more robust `capabilities`,	COMMENT

Cross-Language Confusion (JS/TS)5 hits · 32 pts

Severity	File	Line	Snippet	Context
HIGH⚡	…app/utils/sentinel_policy_templates/restrict-images.js	37	print(task.config.image, "in task", task.name, "does not conform to policy, not in allowed images", allowed_im	CODE
HIGH⚡	…app/utils/sentinel_policy_templates/restrict-images.js	46	print(task.config.image, "in task", task.name, "does not conform to policy, using :latest instead of a specifi	CODE
HIGH⚡	…app/utils/sentinel_policy_templates/restrict-images.js	51	print(task.config.image, "in task", task.name, "does not conform to policy, not from an allowed registry", allow	CODE
HIGH	ui/mirage/scenarios/default.js	712	print("volume is missing tag")	CODE
HIGH	ui/mirage/scenarios/default.js	729	print("volume is missing tag")	CODE

Self-Referential Comments7 hits · 21 pts

Severity	File	Line	Snippet	Context
MEDIUM	demo/csi/digitalocean/.terraform.lock.hcl	1	# This file is maintained automatically by "terraform init".	COMMENT
MEDIUM	ui/app/utils/default_jobs/variables.js	52	# Create a template resource that will be used to render the html file	COMMENT
MEDIUM	drivers/docker/test-resources/docker/gen_stopsignal.sh	6	# Create the tarball used in TestDockerDriver_StopSignal	COMMENT
MEDIUM	.github/actions/jira/transition/jira-transition.bash	45	# Create the initial payload. This will be updated as needed prior	COMMENT
MEDIUM	…ithub/actions/jira/sync-comment/jira-sync-comment.bash	29	# Create the comment	COMMENT
MEDIUM	.github/actions/jira/create/jira-create.bash	64	# Create the issue	COMMENT
MEDIUM	command/quota_init.go	117	# Create a limit for the global region. Additional limits may	COMMENT

Hyper-Verbose Identifiers15 hits · 15 pts

Severity	File	Line	Snippet	Context
LOW	ui/app/utils/rollback-without-changed-attrs.js	6	export default function rollbackWithoutChangedAttrs(model) {	CODE
LOW	ui/app/abilities/client.js	41	function policiesIncludePermissions(policies = [], permissions = []) {	CODE
LOW	ui/app/adapters/watchable.js	534	function hasNonBlockingQueryParams(options) {	CODE
LOW	ui/app/adapters/watchable.js	549	function shouldPreAdvanceWatchIndex() {	CODE
LOW	ui/app/helpers/format-scheduled-hertz.js	17	function formatScheduledHertzHelper([hertz], { start }) {	CODE
LOW	ui/app/helpers/format-scheduled-bytes.js	17	function formatScheduledBytesHelper([bytes], { start }) {	CODE
LOW	ui/tests/utils/ember-power-select-extensions.js	17	async function openIfClosedAndGetContentId(trigger) {	CODE
LOW	ui/tests/acceptance/optimize-test.js	22	function getLatestRecommendationSubmitTimeForJob(job) {	CODE
LOW	ui/tests/acceptance/job-deployments-test.js	317	function promotionTestForTaskGroup(taskGroup) {	CODE
LOW	ui/tests/helpers/module-for-job.js	277	export function moduleForJobWithClientStatus(	CODE
LOW	ui/tests/helpers/glimmer-factory.js	25	export default function setupGlimmerComponentFactory(hooks, componentKey) {	CODE
LOW	ui/tests/helpers/glimmer-factory.js	39	function glimmerComponentInstantiator(owner, componentKey) {	CODE
LOW	ui/tests/helpers/setup-authenticated-acceptance.js	6	export default function setupAuthenticatedAcceptance(	CODE
LOW	ui/mirage/factories/evaluation.js	140	export function generateTaskGroupFailures() {	CODE
LOW	ui/mirage/scenarios/default.js	1260	function getScenarioQueryParameter() {	CODE

Verbosity Indicators7 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	client/allocrunner/alloc_runner_test.go	1852	// Step 1: start and run a task	COMMENT
LOW	client/allocrunner/taskrunner/plugin_supervisor_hook.go	297	// Step 1: Wait for the plugin to initially become available.	COMMENT
LOW⚡	client/allocrunner/taskrunner/plugin_supervisor_hook.go	327	// Step 2: Register the plugin with the catalog.	COMMENT
LOW⚡	client/allocrunner/taskrunner/plugin_supervisor_hook.go	336	// Step 3: Start the lightweight supervisor loop. At this point,	COMMENT
LOW	client/pluginmanager/csimanager/volume_test.go	82	// Step 1: Validate that the test case makes sense	COMMENT
LOW	client/pluginmanager/csimanager/volume_test.go	94	// Step 2: Test Setup	COMMENT
LOW	client/pluginmanager/csimanager/volume_test.go	109	// Step 3: Now we can do some testing	COMMENT

Structural Annotation Overuse7 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	client/allocrunner/alloc_runner_test.go	1852	// Step 1: start and run a task	COMMENT
LOW	client/allocrunner/taskrunner/plugin_supervisor_hook.go	297	// Step 1: Wait for the plugin to initially become available.	COMMENT
LOW⚡	client/allocrunner/taskrunner/plugin_supervisor_hook.go	327	// Step 2: Register the plugin with the catalog.	COMMENT
LOW⚡	client/allocrunner/taskrunner/plugin_supervisor_hook.go	336	// Step 3: Start the lightweight supervisor loop. At this point,	COMMENT
LOW	client/pluginmanager/csimanager/volume_test.go	82	// Step 1: Validate that the test case makes sense	COMMENT
LOW	client/pluginmanager/csimanager/volume_test.go	94	// Step 2: Test Setup	COMMENT
LOW	client/pluginmanager/csimanager/volume_test.go	109	// Step 3: Now we can do some testing	COMMENT

Slop Phrases3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/example_weave.bash	81	# Script checks are run from inside the container, so you can use	COMMENT
MEDIUM	e2e/terraform/variables.tf	104	# If you want to deploy different versions you can use these variables to	COMMENT
MEDIUM	e2e/terraform/provision-infra/variables.tf	107	# If you want to deploy different versions you can use these variables to	COMMENT

Fake / Example Data4 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	ui/tests/pages/optimize.js	25	placeholder: attribute('placeholder'),	CODE
LOW	contributing/CHANGELOG.md	85	main: Lorem ipsum dolor `sit amet`, _consectetur_ adipiscing elit, sed do	CODE
LOW	client/allocrunner/taskrunner/getter/sandbox_test.go	935	cmd = exec.Command("git", "config", "user.email", "user@example.com")	CODE
LOW	client/allocwatcher/alloc_watcher_test.go	95	MigrateToken: "fake_token",	CODE

TODO Padding1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	ui/app/controllers/jobs/index.js	49	this.system.shouldShowNodepools ? 'node pool' : null, // TODO: implement on system service	CODE

hashicorp/nomad

Open-Source Code Quality, Security and Technical Debt Review