1.6

Adjusted Signal

1.6

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

30.4K

Stars

Language

130.2K

Lines of Code

1.7K

Files

179

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 173 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 2 finding(s).

Agent Over-Engineering Ratio 0.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 4 finding(s).

PR Review Velocity Impact 7.8/100 · LOW

Which changes need focused human review? 179 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 16LOW 163

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 179 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block158 hits · 158 pts

Severity	File	Line	Snippet	Context
LOW	test/e2e/helper_test.go	41		COMMENT
LOW	test/e2e/helper_test.go	61	// envIsolate appends a per-run suffix to the repository path. It is off by	COMMENT
LOW	test/e2e/helper_test.go	81	helmBin string	COMMENT
LOW	internal/monocular/search.go	101	// Search performs a search against the monocular search API	COMMENT
LOW	internal/chart/v3/metadata.go	61	// A list of name and URL/email address combinations for the maintainer(s)	COMMENT
LOW	internal/chart/v3/dependency.go	21	//	COMMENT
LOW	…ternal/chart/v3/lint/rules/testdata/v3-fail/Chart.yaml	1	apiVersion: v3	COMMENT
LOW	…ernal/chart/v3/lint/rules/testdata/v3-fail/values.yaml	41	# kubernetes.io/tls-acme: "true"	COMMENT
LOW	…t/v3/lint/rules/testdata/malformed-template/Chart.yaml	1	apiVersion: v3	COMMENT
LOW	…t/v3/lint/rules/testdata/malformed-template/Chart.yaml	21	# incremented each time you make changes to the application. Versions are not expected to	COMMENT
LOW	…/v3/lint/rules/testdata/multi-template-fail/Chart.yaml	1	apiVersion: v3	COMMENT
LOW	internal/chart/v3/util/create.go	81	const defaultChartfile = `apiVersion: v3	COMMENT
LOW	internal/chart/v3/util/create.go	141	# For more information checkout: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/	COMMENT
LOW	internal/chart/v3/util/create.go	201	- path:	COMMENT
LOW	internal/chart/v3/util/create.go	221	# For publicly distributed charts, we recommend leaving 'resources' commented out.	COMMENT
LOW	internal/chart/v3/util/create.go	681		COMMENT
LOW	…quirements-yaml/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…quirements-yaml/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…hart-helmignore/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…ent-chart-alias/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…stdata/frobnitz/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…quirements-yaml/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…bnitz_backslash/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…robnitz.v3.reqs/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…z_with_dev_null/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…tz_with_symlink/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…stdata/frobnitz/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	…obnitz_with_bom/charts/alpine/charts/mast1/values.yaml	1	# Default values for mast1.	COMMENT
LOW	internal/plugin/installer/extractor.go	81	// to be malicious. (If you don't care about this, use the securejoin-filepath library.)	COMMENT
LOW	internal/release/v2/util/manifest.go	41	// Note for Chart API v3: This function (due to the regex above) has allowed _WRONG_	COMMENT
LOW	internal/release/v2/util/manifest_sorter.go	121	// annotations:	COMMENT
LOW	internal/storage/driver/secrets.go	261		COMMENT
LOW	internal/storage/driver/driver.go	81	// Queryor is the interface that wraps the Get and List methods.	COMMENT
LOW	internal/storage/driver/cfgmaps.go	241	return rls, err	COMMENT
LOW	internal/storage/driver/sql.go	581	// labels are set by Create, and a revision keeps the labels it was created with	COMMENT
LOW	internal/third_party/dep/fs/fs_test.go	341	defer cleanup()	COMMENT
LOW	internal/third_party/dep/fs/fs.go	241	l, err := os.Lstat(path)	COMMENT
LOW	internal/third_party/dep/fs/fs.go	261	// matches what the docs above say:	COMMENT
LOW	scripts/release-notes.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/validate-license.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/util.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/coverage.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/workflows/codeql-analysis.yml	1	# For most projects, this workflow file will not need changing; you simply need	COMMENT
LOW	.github/workflows/scorecards.yml	41	# - you want to enable the Branch-Protection check on a public repository, or	COMMENT
LOW	.github/workflows/e2e-registries.yml	1	name: e2e-registries	COMMENT
LOW	.github/workflows/e2e-registries.yml	21	# secrets.E2E_<ID>_PASSWORD token with read and write access	COMMENT
LOW	pkg/cmd/flags.go	61	newWaitValue(kube.HookOnlyStrategy, wait),	COMMENT
LOW	pkg/cmd/testdata/testcharts/lib-chart/values.yaml	1	# Default values for commons.	COMMENT
LOW	…charts/chart-with-template-lib-archive-dep/values.yaml	21	annotations: {}	COMMENT
LOW	…t-with-template-lib-archive-dep/templates/service.yaml	1	{{- template "common.service" (list . "chart-with-template-lib-archive-dep.service") -}}	COMMENT
LOW	…cmd/testdata/testcharts/chart-missing-deps/values.yaml	1	# Default values for reqtest.	COMMENT
LOW	…arts/chart-missing-deps/charts/reqsubchart/values.yaml	1	# Default values for reqsubchart.	COMMENT
LOW	…ata/testcharts/chart-with-template-lib-dep/values.yaml	21	annotations: {}	COMMENT
LOW	…/chart-with-template-lib-dep/charts/common/values.yaml	1	# Default values for commons.	COMMENT
LOW	…rts/chart-with-template-lib-dep/templates/service.yaml	1	{{- template "common.service" (list . "chart-with-template-lib-dep.service") -}}	COMMENT
LOW	…md/testdata/testcharts/chart-with-only-crds/Chart.yaml	1	apiVersion: v2	COMMENT
LOW	pkg/cmd/testdata/testcharts/reqtest/values.yaml	1	# Default values for reqtest.	COMMENT
LOW	…data/testcharts/reqtest/charts/reqsubchart/values.yaml	1	# Default values for reqsubchart.	COMMENT
LOW	…ata/testcharts/reqtest/charts/reqsubchart2/values.yaml	1	# Default values for reqsubchart.	COMMENT
LOW	…testdata/testcharts/chart-bad-requirements/values.yaml	1	# Default values for reqtest.	COMMENT
98 more matches not shown…

Self-Referential Comments11 hits · 33 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/util.sh	49	# Create a temp dir that'll be deleted at the end of this bash session.	COMMENT
MEDIUM	…h-schema-negative-skip-validation/templates/empty.yaml	1	# This file is intentionally blank	COMMENT
MEDIUM	pkg/cmd/testdata/testcharts/empty/templates/empty.yaml	1	# This file is intentionally blank	COMMENT
MEDIUM	…chart/charts/subchart-with-schema/templates/empty.yaml	1	# This file is intentionally blank	COMMENT
MEDIUM	…ts/chart-with-schema-and-subchart/templates/empty.yaml	1	# This file is intentionally blank	COMMENT
MEDIUM	…data/testcharts/chart-with-schema/templates/empty.yaml	1	# This file is intentionally blank	COMMENT
MEDIUM	…charts/chart-with-schema-negative/templates/empty.yaml	1	# This file is intentionally blank	COMMENT
MEDIUM	pkg/cmd/testdata/testcharts/subchart/extra_values.yaml	1	# This file is used to test values passed by file at the command line	COMMENT
MEDIUM	…testdata/charts/chart-with-schema/templates/empty.yaml	1	# This file is intentionally blank	COMMENT
MEDIUM	…harts/chart-with-uncompressed-dependencies/values.yaml	99	## Create a database and a database user	COMMENT
MEDIUM	…charts/chart-with-schema-negative/templates/empty.yaml	1	# This file is intentionally blank	COMMENT

Decorative Section Separators4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	pkg/action/action_test.go	682	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	pkg/action/action_test.go	685	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	pkg/action/action_test.go	696	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	pkg/action/action_test.go	699	# ---------------------------------------------------------------------------	COMMENT

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	internal/plugin/installer/oci_installer.go	55	// Extract plugin name from OCI reference using robust registry parsing	COMMENT

Fake / Example Data2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	internal/chart/v3/lint/rules/chartfile_test.go	107	{"", "test@test.com", "each maintainer requires a name"},	CODE
LOW	pkg/chart/v2/lint/rules/chartfile_test.go	121	{"", "test@test.com", "each maintainer requires a name"},	CODE

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…harts/chart-with-uncompressed-dependencies/values.yaml	180	## Set this to true in order to enable TLS on the ingress record	COMMENT

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	pkg/engine/engine.go	601	// TODO: Handle error	COMMENT

Slop Phrases1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	pkg/downloader/manager.go	639	"example". Don't forget to add the repo, too ('helm repo add').`	CODE

helm/helm

Open-Source Code Quality, Security and Technical Debt Review