1.2

Adjusted Signal

1.2

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

80.7K

Stars

TypeScript

Language

412.7K

Lines of Code

1.9K

Files

309

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 264 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.5/100 · LOW

Are imports declared and package/API names verified? 37 finding(s).

Agent Over-Engineering Ratio 2.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 145 finding(s).

PR Review Velocity Impact 5.0/100 · LOW

Which changes need focused human review? 309 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 10HIGH 1MEDIUM 10LOW 288

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 309 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers137 hits · 140 pts

Severity	File	Line	Snippet	Context
LOW	packages/hoppscotch-common/src/newstore/history.ts	62	export function translateToNewRESTHistory(x: any): RESTHistoryEntry {	CODE
LOW	packages/hoppscotch-common/src/newstore/history.ts	315	export function toggleRESTHistoryEntryStar(entry: RESTHistoryEntry) {	CODE
LOW	packages/hoppscotch-common/src/newstore/history.ts	336	export function deleteGraphqlHistoryEntry(entry: GQLHistoryEntry) {	CODE
LOW⚡	packages/hoppscotch-common/src/newstore/history.ts	350	export function toggleGraphqlHistoryEntryStar(entry: GQLHistoryEntry) {	CODE
LOW⚡	packages/hoppscotch-common/src/newstore/history.ts	357	export function removeDuplicateRestHistoryEntry(id: string) {	CODE
LOW⚡	packages/hoppscotch-common/src/newstore/history.ts	364	export function removeDuplicateGraphqlHistoryEntry(id: string) {	CODE
LOW	packages/hoppscotch-common/src/newstore/mockServers.ts	208	export function loadMockServersForWorkspace(	CODE
LOW	packages/hoppscotch-common/src/newstore/settings.ts	312	export function performSettingsDataMigrations(data: any): SettingsDef {	CODE
LOW	packages/hoppscotch-common/src/newstore/environments.ts	542	export function getAggregateEnvsWithCurrentValue() {	CODE
LOW⚡	packages/hoppscotch-common/src/newstore/environments.ts	726	export function getSelectedEnvironmentIndex() {	CODE
LOW⚡	packages/hoppscotch-common/src/newstore/environments.ts	730	export function getSelectedEnvironmentType() {	CODE
LOW⚡	packages/hoppscotch-common/src/newstore/environments.ts	734	export function setSelectedEnvironmentIndex(	CODE
LOW	packages/hoppscotch-common/src/newstore/environments.ts	745	export function getLegacyGlobalEnvironment(): Environment \| null {	CODE
LOW	packages/hoppscotch-common/src/newstore/environments.ts	778	export function getLocalIndexByEnvironmentID(id: string) {	CODE
LOW	packages/hoppscotch-common/src/newstore/environments.ts	949	export function removeEnvironmentVariable(	CODE
LOW	packages/hoppscotch-common/src/newstore/environments.ts	962	export function updateEnvironmentVariable(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	75	export function navigateToFolderWithIndexPath(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	135	export function cascadeParentCollectionForProperties(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	729	function recursiveChangeRefIdToAvoidConflicts(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	1456	function recursiveChangeRefIdToAvoidConflicts(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	1735	function computeCollectionInheritedProps(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	1813	export function getRESTCollectionInheritedProps(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	1954	export function removeDuplicateRESTCollectionOrFolder(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	2065	export function updateRESTCollectionOrder(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	2174	export function duplicateGraphQLCollection(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	2187	export function removeDuplicateGraphqlCollectionOrFolder(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	2310	export function updateGraphqlCollectionOrder(	CODE
LOW	packages/hoppscotch-common/src/newstore/collections.ts	2323	function removeDuplicateCollectionsFromPath(	CODE
LOW	packages/hoppscotch-common/src/newstore/reordering.ts	41	export function changeCurrentReorderStatus(reorderItem: ReorderingItem) {	CODE
LOW	…cotch-common/src/composables/gqlWorkspaceVisibility.ts	13	export function useGqlWorkspaceVisibility() {	CODE
LOW	…ppscotch-common/src/composables/mockServerWorkspace.ts	14	export function useMockServerWorkspaceSync() {	CODE
LOW	…otch-common/src/composables/documentationVisibility.ts	8	export function useDocumentationVisibility() {	CODE
LOW	…/hoppscotch-common/src/components/settings/Desktop.vue	394	async function toggleDisableUpdateChecks(): Promise<void> {	CODE
LOW	…ppscotch-common/src/components/app/spotlight/index.vue	209	function newUseArrowKeysForNavigation() {	CODE
LOW	packages/hoppscotch-common/src/lib/sync/index.ts	26	export function runDispatchWithOutSyncing(func: () => void) {	CODE
LOW	packages/hoppscotch-common/src/lib/sync/index.ts	77	function startListeningToSubscriptions() {	CODE
LOW	packages/hoppscotch-common/src/lib/sync/index.ts	87	function stopListeningToSubscriptions() {	CODE
LOW	…kages/hoppscotch-common/src/lib/sync/settings/index.ts	73	function setupUserSettingsUpdatedSubscription() {	CODE
LOW	…s/hoppscotch-common/src/lib/sync/environments/index.ts	160	function setupUserEnvironmentCreatedSubscription() {	CODE
LOW	…s/hoppscotch-common/src/lib/sync/environments/index.ts	183	function setupUserEnvironmentUpdatedSubscription() {	CODE
LOW	…s/hoppscotch-common/src/lib/sync/environments/index.ts	246	function setupUserEnvironmentDeletedSubscription() {	CODE
LOW	…ckages/hoppscotch-common/src/lib/sync/history/index.ts	199	function setupUserHistoryCreatedSubscription() {	CODE
LOW	…ckages/hoppscotch-common/src/lib/sync/history/index.ts	240	function setupUserHistoryUpdatedSubscription() {	CODE
LOW	…ckages/hoppscotch-common/src/lib/sync/history/index.ts	280	function setupUserHistoryDeletedSubscription() {	CODE
LOW	…ckages/hoppscotch-common/src/lib/sync/history/index.ts	315	function setupUserHistoryDeletedManySubscription() {	CODE
LOW	…ckages/hoppscotch-common/src/lib/sync/history/index.ts	332	function setupUserHistoryStoreStatusChangedSubscription() {	CODE
LOW	…ckages/hoppscotch-common/src/lib/sync/history/index.ts	347	function setupUserHistoryAllDeletedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	133	function normalizeCollectionRequest(	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	196	export function exportedCollectionToHoppCollection(	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	447	function setupUserCollectionCreatedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	561	function setupUserCollectionUpdatedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	638	function setupUserCollectionMovedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	676	function setupUserCollectionRemovedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	717	function setupUserCollectionOrderUpdatedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	763	function setupUserCollectionDuplicatedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	1001	function setupUserRequestCreatedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	1055	function setupUserRequestUpdatedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	1095	function setupUserRequestMovedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	1198	function setupUserRequestDeletedSubscription() {	CODE
LOW	…es/hoppscotch-common/src/lib/sync/collections/index.ts	1239	function getCollectionPathFromCollectionID(	CODE
77 more matches not shown…

Hallucination Indicators10 hits · 100 pts

Severity	File	Line	Snippet	Context
CRITICAL	…s/hoppscotch-common/src/components/http/TestResult.vue	329	testResults.value.envDiff.selected.additions.every(	CODE
CRITICAL	…pscotch-common/src/components/http/test/TestResult.vue	295	testResults.value.envDiff.selected.additions.every(	CODE
CRITICAL	packages/hoppscotch-common/src/helpers/RequestRunner.ts	566	tab.value.document.request.requestVariables.map(	CODE
CRITICAL	…hoppscotch-common/src/helpers/collection/collection.ts	140	folderPath: tab.value.document.saveContext.folderPath.replace(	CODE
CRITICAL	…__tests__/pm-namespace/response/bdd-assertions.spec.ts	785	pm.response.to.have.responseTime.below(500)	CODE
CRITICAL	…__tests__/pm-namespace/response/bdd-assertions.spec.ts	816	pm.response.to.have.responseTime.above(100)	CODE
CRITICAL	…__tests__/pm-namespace/response/bdd-assertions.spec.ts	872	pm.response.to.have.responseTime.below(500)	CODE
CRITICAL	…chai-powered-assertions/properties-collections.spec.ts	536	hopp.expect([{a: 1}, {b: 2}]).to.not.have.deep.ordered.members([{b: 2}, {a: 1}])	CODE
CRITICAL	…chai-powered-assertions/properties-collections.spec.ts	568	hopp.expect([{a: 1}, {b: 2}, {c: 3}]).to.not.include.deep.ordered.members([{b: 2}, {a: 1}])	CODE
CRITICAL	…ugin-workspace/tauri-plugin-appload/src/uri/handler.rs	80	let csp = match self.config.app.security.csp.as_ref() {	CODE

Over-Commented Block64 hits · 64 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.yml	1	# To make it easier to self-host, we have a preset docker compose config that also	COMMENT
LOW	docker-compose.yml	241	# This will start: AIO only (use when you have an external database)	COMMENT
LOW	…/hoppscotch-common/src/composables/desktop-settings.ts	1	import { reactive, ref, readonly } from "vue"	COMMENT
LOW	…ges/hoppscotch-common/src/platform/desktop-settings.ts	41	// Connection and startup behavior. The `connectionTimeoutMs` default	COMMENT
LOW	…ch-common/src/components/environments/ImportExport.vue	401	}	COMMENT
LOW	…otch-common/src/components/graphql/ExplorerSection.vue	41		COMMENT
LOW	…s/hoppscotch-common/src/components/graphql/Headers.vue	701	// No inspection wiring here: this component serves the legacy /graphql page,	COMMENT
LOW	…s/hoppscotch-common/src/lib/sync/collections/import.ts	101	// Flush orphans left under originals' refIds when the backend dropped	COMMENT
LOW	packages/hoppscotch-common/src/helpers/ternlint.js	461	if (!parentType.isEmpty() && type.isEmpty()) {	COMMENT
LOW	…n/src/helpers/curl/__tests__/detectContentType.spec.js	41	// </book>	COMMENT
LOW	…n/src/helpers/curl/__tests__/detectContentType.spec.js	61	// TODO: Figure this test situation	COMMENT
LOW	…n/src/helpers/curl/__tests__/detectContentType.spec.js	81	// <head>	COMMENT
LOW	…rs/__tests__/RequestRunner-cookie-jar-laziness.spec.ts	1	import { describe, expect, test } from "vitest"	COMMENT
LOW	…c/helpers/editor/extensions/HoppPredefinedVariables.ts	41	// Don't show tooltip if the cursor is inside a comment	COMMENT
LOW	…s/hoppscotch-common/src/services/cookie-jar.service.ts	61	private hydrated: Promise<void> \| null = null	COMMENT
LOW	…s/hoppscotch-common/src/services/cookie-jar.service.ts	81	// older jsdom, some SSR setups) where the Web Crypto API is not	COMMENT
LOW	…s/hoppscotch-common/src/services/cookie-jar.service.ts	241	// `path` is what `pathMatches` reads to decide whether	COMMENT
LOW	…s/hoppscotch-common/src/services/cookie-jar.service.ts	361	if (!cookie.domain) {	COMMENT
LOW	…s/hoppscotch-common/src/services/cookie-jar.service.ts	381	console.warn(	COMMENT
LOW	…s/hoppscotch-common/src/services/cookie-jar.service.ts	461	const stripped = trimmed.startsWith(".") ? trimmed.slice(1) : trimmed	COMMENT
LOW	…s/hoppscotch-common/src/services/cookie-jar.service.ts	781	result.sort((a, b) => (b.path?.length ?? 1) - (a.path?.length ?? 1))	COMMENT
LOW	packages/hoppscotch-common/src/kernel/log.ts	1	// kernel log wrapper. same setup as store.ts: delegates to the kernel	COMMENT
LOW	packages/hoppscotch-common/src/kernel/log.ts	21	// in-memory buffer that works even before the kernel is initialized.	COMMENT
LOW	packages/hoppscotch-common/src/kernel/store.ts	21	// sanitize it the same way Tauri sanitizes window labels: replace all	COMMENT
LOW	packages/hoppscotch-agent/src-tauri/.cargo/config.toml	1	# Enable static linking for C runtime library on Windows.	COMMENT
LOW	packages/hoppscotch-agent/src-tauri/src/webview/mod.rs	1	/// The WebView2 Runtime is a critical dependency for Tauri applications on Windows.	COMMENT
LOW	packages/hoppscotch-agent/src-tauri/src/webview/mod.rs	21	/// > HKEY_CURRENT_USER\Software\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}	COMMENT
LOW	…sandbox/src/__tests__/pm-namespace/sendRequest.spec.ts	661	])	COMMENT
LOW	packages/hoppscotch-kernel/src/relay/impl/web/v/1.ts	141		COMMENT
LOW	packages/hoppscotch-kernel/src/relay/impl/web/v/1.ts	161	// }	COMMENT
LOW	packages/hoppscotch-kernel/src/relay/impl/web/v/1.ts	181	// accessKeyId: accessKey,	COMMENT
LOW	packages/hoppscotch-desktop/src-tauri/src/config.rs	81	.build()	COMMENT
LOW	packages/hoppscotch-desktop/src-tauri/src/config.rs	101	.get(DESKTOP_SETTINGS_NAMESPACE)?	COMMENT
LOW	packages/hoppscotch-desktop/src-tauri/src/config.rs	141	// so `persisted_connection_timeout()` reads the store file for that one	COMMENT
LOW	packages/hoppscotch-desktop/src-tauri/src/config.rs	161	}	COMMENT
LOW	packages/hoppscotch-desktop/src-tauri/src/server.rs	41	"Failed to emit device token event"	COMMENT
LOW	…ckages/hoppscotch-desktop/src-tauri/src/webview/mod.rs	1	/// The WebView2 Runtime is a critical dependency for Tauri applications on Windows.	COMMENT
LOW	…ckages/hoppscotch-desktop/src-tauri/src/webview/mod.rs	21	/// > HKEY_CURRENT_USER\Software\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}	COMMENT
LOW	…ri-plugin-appload/examples/tauri-app/src/vite-env.d.ts	1	/// <reference types="svelte" />	COMMENT
LOW	…op/plugin-workspace/tauri-plugin-appload/src/models.rs	141	pub bundle_name: String,	COMMENT
LOW	…op/plugin-workspace/tauri-plugin-appload/src/models.rs	201	#[derive(Debug, Clone, Deserialize)]	COMMENT
LOW	…/plugin-workspace/tauri-plugin-appload/src/commands.rs	121		COMMENT
LOW	…p/plugin-workspace/tauri-plugin-appload/src/mapping.rs	1	use dashmap::DashMap;	COMMENT
LOW	…p/plugin-workspace/tauri-plugin-appload/src/mapping.rs	41	/// * `host` - The virtual host (e.g., "acme_hoppscotch_io")	COMMENT
LOW	…/hoppscotch-desktop/plugin-workspace/relay/devenv.yaml	21		COMMENT
LOW	…pscotch-desktop/plugin-workspace/relay/src/security.rs	401	handle.perform().expect("perform");	COMMENT
LOW	…hoppscotch-desktop/plugin-workspace/relay/src/trust.rs	1	//! Reads the host trust store into a PEM blob.	COMMENT
LOW	…hoppscotch-desktop/plugin-workspace/relay/src/trust.rs	261		COMMENT
LOW	…hoppscotch-desktop/plugin-workspace/relay/src/trust.rs	441	CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID, CERT_SYSTEM_STORE_LOCAL_MACHINE,	COMMENT
LOW	…hoppscotch-desktop/plugin-workspace/relay/src/trust.rs	481	// permitted purposes in the entry's enhanced key usage property, which	COMMENT
LOW	…hoppscotch-desktop/plugin-workspace/relay/src/trust.rs	561	oids.push(text.to_owned());	COMMENT
LOW	…ppscotch-desktop/plugin-workspace/relay/src/interop.rs	21	#[serde(rename = "text/csv")]	COMMENT
LOW	…ppscotch-desktop/plugin-workspace/relay/src/interop.rs	41	#[serde(rename = "multipart/form-data")]	COMMENT
LOW	…ppscotch-desktop/plugin-workspace/relay/src/interop.rs	61	#[serde(rename = "audio/mp4")]	COMMENT
LOW	…ppscotch-desktop/plugin-workspace/relay/src/interop.rs	81	#[serde(rename = "video/mp4")]	COMMENT
LOW	…ppscotch-desktop/plugin-workspace/relay/src/interop.rs	101	#[serde(rename = "image/png")]	COMMENT
LOW	packages/hoppscotch-desktop/src/main.ts	21	// Sync the launcher window's zoom with the user's persisted preference.	COMMENT
LOW	…scotch-desktop/src/composables/useAppInitialization.ts	301	await loadVendoredInstance()	COMMENT
LOW	…hoppscotch-desktop/src/services/persistence.service.ts	101	version: 1,	COMMENT
LOW	…hoppscotch-desktop/src/services/persistence.service.ts	121	// `SCHEMA_VERSION` value, which the `runMigrations` parse-defense	COMMENT
4 more matches not shown…

Verbosity Indicators29 hits · 56 pts

Severity	File	Line	Snippet	Context
LOW	…es/hoppscotch-common/src/components/smart/EnvInput.vue	610	// since the readonly prop is reactive, we need to check if it has changed	COMMENT
LOW⚡	packages/hoppscotch-common/src/helpers/auth/digest.ts	46	// Step 1: Hash the username, realm, password and any additional fields based on the algorithm	COMMENT
LOW⚡	packages/hoppscotch-common/src/helpers/auth/digest.ts	54	// Step 2: Hash the method and URI	COMMENT
LOW⚡	packages/hoppscotch-common/src/helpers/auth/digest.ts	60	// Step 3: Compute the response hash	COMMENT
LOW⚡	…ges/hoppscotch-common/src/helpers/auth/types/digest.ts	25	// Step 1: Fetch the initial auth info (nonce, realm, etc.)	COMMENT
LOW⚡	…ges/hoppscotch-common/src/helpers/auth/types/digest.ts	34	// Step 2: Set up the parameters for the digest authentication header	COMMENT
LOW	…ges/hoppscotch-common/src/helpers/auth/types/digest.ts	54	// Step 3: Generate the Authorization header	COMMENT
LOW	…ppscotch-js-sandbox/src/bootstrap-code/post-request.js	1840	// For the Chai extension, we need to check if cookies exist	COMMENT
LOW	…backend/src/user-collection/user-collection.service.ts	757	// Step 0: lock the rows	COMMENT
LOW⚡	…backend/src/user-collection/user-collection.service.ts	772	// Step 1: Decrement orderIndex of all items that come after collection.orderIndex till end of list of ite	COMMENT
LOW⚡	…backend/src/user-collection/user-collection.service.ts	782	// Step 2: Update orderIndex of collection to length of list	COMMENT
LOW	…backend/src/user-collection/user-collection.service.ts	832	// Step 0: lock the rows	COMMENT
LOW⚡	…backend/src/user-collection/user-collection.service.ts	852	// Step 1: Determine if we are moving collection up or down the list	COMMENT
LOW⚡	…backend/src/user-collection/user-collection.service.ts	856	// Step 2: Update OrderIndex of items in list depending on moving up or down	COMMENT
LOW	…backend/src/user-collection/user-collection.service.ts	876	// Step 3: Update OrderIndex of collection	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	901	// Step 0: lock the rows	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	916	// Step 1: Decrement orderIndex of all items that come after collection.orderIndex till end of list of ite	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	930	// Step 2: Update orderIndex of collection to length of list	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	977	// Step 0: lock the rows	COMMENT
LOW⚡	…backend/src/team-collection/team-collection.service.ts	996	// Step 1: Determine if we are moving collection up or down the list	COMMENT
LOW⚡	…backend/src/team-collection/team-collection.service.ts	1000	// Step 2: Update OrderIndex of items in list depending on moving up or down	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	1020	// Step 3: Update OrderIndex of collection	COMMENT
LOW	…pscotch-backend/src/mock-server/mock-server.service.ts	863	// Step 6: Return highest scoring example	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/pre-request.ts	315	// Step 1: Fetch the initial auth info (nonce, realm, etc.)	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/pre-request.ts	322	// Step 2: Set up the parameters for the digest authentication header	COMMENT
LOW	packages/hoppscotch-cli/src/utils/pre-request.ts	345	// Step 3: Generate the Authorization header	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/auth/digest.ts	68	// Step 1: Hash the username, realm, password and any additional fields based on the algorithm	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/auth/digest.ts	76	// Step 2: Hash the method and URI	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/auth/digest.ts	82	// Step 3: Compute the response hash	COMMENT

Structural Annotation Overuse28 hits · 54 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.yml	27	# NOTE: The default and default-no-db profiles should not be mixed with individual service	COMMENT
LOW⚡	packages/hoppscotch-common/src/helpers/auth/digest.ts	46	// Step 1: Hash the username, realm, password and any additional fields based on the algorithm	COMMENT
LOW⚡	packages/hoppscotch-common/src/helpers/auth/digest.ts	54	// Step 2: Hash the method and URI	COMMENT
LOW⚡	packages/hoppscotch-common/src/helpers/auth/digest.ts	60	// Step 3: Compute the response hash	COMMENT
LOW⚡	…ges/hoppscotch-common/src/helpers/auth/types/digest.ts	25	// Step 1: Fetch the initial auth info (nonce, realm, etc.)	COMMENT
LOW⚡	…ges/hoppscotch-common/src/helpers/auth/types/digest.ts	34	// Step 2: Set up the parameters for the digest authentication header	COMMENT
LOW	…ges/hoppscotch-common/src/helpers/auth/types/digest.ts	54	// Step 3: Generate the Authorization header	COMMENT
LOW	…backend/src/user-collection/user-collection.service.ts	757	// Step 0: lock the rows	COMMENT
LOW⚡	…backend/src/user-collection/user-collection.service.ts	772	// Step 1: Decrement orderIndex of all items that come after collection.orderIndex till end of list of ite	COMMENT
LOW⚡	…backend/src/user-collection/user-collection.service.ts	782	// Step 2: Update orderIndex of collection to length of list	COMMENT
LOW	…backend/src/user-collection/user-collection.service.ts	832	// Step 0: lock the rows	COMMENT
LOW⚡	…backend/src/user-collection/user-collection.service.ts	852	// Step 1: Determine if we are moving collection up or down the list	COMMENT
LOW⚡	…backend/src/user-collection/user-collection.service.ts	856	// Step 2: Update OrderIndex of items in list depending on moving up or down	COMMENT
LOW	…backend/src/user-collection/user-collection.service.ts	876	// Step 3: Update OrderIndex of collection	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	901	// Step 0: lock the rows	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	916	// Step 1: Decrement orderIndex of all items that come after collection.orderIndex till end of list of ite	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	930	// Step 2: Update orderIndex of collection to length of list	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	977	// Step 0: lock the rows	COMMENT
LOW⚡	…backend/src/team-collection/team-collection.service.ts	996	// Step 1: Determine if we are moving collection up or down the list	COMMENT
LOW⚡	…backend/src/team-collection/team-collection.service.ts	1000	// Step 2: Update OrderIndex of items in list depending on moving up or down	COMMENT
LOW	…backend/src/team-collection/team-collection.service.ts	1020	// Step 3: Update OrderIndex of collection	COMMENT
LOW	…pscotch-backend/src/mock-server/mock-server.service.ts	863	// Step 6: Return highest scoring example	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/pre-request.ts	315	// Step 1: Fetch the initial auth info (nonce, realm, etc.)	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/pre-request.ts	322	// Step 2: Set up the parameters for the digest authentication header	COMMENT
LOW	packages/hoppscotch-cli/src/utils/pre-request.ts	345	// Step 3: Generate the Authorization header	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/auth/digest.ts	68	// Step 1: Hash the username, realm, password and any additional fields based on the algorithm	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/auth/digest.ts	76	// Step 2: Hash the method and URI	COMMENT
LOW⚡	packages/hoppscotch-cli/src/utils/auth/digest.ts	82	// Step 3: Compute the response hash	COMMENT

Fake / Example Data27 hits · 28 pts

Severity	File	Line	Snippet	Context
LOW	packages/hoppscotch-common/locales/tr.json	2108	"placeholder": "Her şeyi sorun veya beceriler için / yazın",	CODE
LOW	packages/hoppscotch-common/locales/en.json	2106	"placeholder": "Ask anything, or type / for skills",	CODE
LOW	…es/hoppscotch-common/src/components/smart/EnvInput.vue	11	:placeholder="placeholder"	CODE
LOW	…es/hoppscotch-common/src/components/smart/EnvInput.vue	19	:placeholder="placeholder"	CODE
LOW	…omponents/collections/documentation/MarkdownEditor.vue	15	:placeholder="placeholder"	CODE
LOW	…-common/src/helpers/auth/types/__tests__/test-utils.ts	76	initialValue: '{"sub": "1234567890", "name": "John Doe"}',	CODE
LOW	…-common/src/helpers/auth/types/__tests__/test-utils.ts	77	currentValue: '{"sub": "1234567890", "name": "John Doe"}',	CODE
LOW	…ch-common/src/helpers/auth/types/__tests__/jwt.spec.ts	35	payload: '{"sub": "1234567890", "name": "John Doe"}',	CODE
LOW	…ch-common/src/helpers/auth/types/__tests__/jwt.spec.ts	48	payload: '{"sub": "1234567890", "name": "John Doe"}',	CODE
LOW	…ch-common/src/helpers/auth/types/__tests__/jwt.spec.ts	111	payload: '{"sub": "1234567890", "name": "John Doe"}',	CODE
LOW	…ommon/src/helpers/utils/__tests__/organization.spec.ts	21	expect(getOrgInitials("Acme Corp")).toBe("AC")	CODE
LOW	…ommon/src/helpers/utils/__tests__/organization.spec.ts	41	expect(getOrgInitials("Acme Corp")).toBe("AC")	CODE
LOW⚡	…ommon/src/helpers/utils/__tests__/organization.spec.ts	54	const a = getOrgColorIndex("Acme Corp")	CODE
LOW⚡	…ommon/src/helpers/utils/__tests__/organization.spec.ts	55	const b = getOrgColorIndex("Acme Corp")	CODE
LOW⚡	…ommon/src/helpers/utils/__tests__/organization.spec.ts	60	const a = getOrgColorIndex("Acme Corp")	CODE
LOW	…ommon/src/helpers/utils/__tests__/organization.spec.ts	79	const color = getOrgColor("Acme Corp")	CODE
LOW	…h-common/src/helpers/curl/__tests__/curlparser.spec.js	459	value: "test@test.com",	CODE
LOW	…mon/src/helpers/__tests__/clientLocalVariables.spec.ts	437	const root = buildCollection("placeholder", [], [child])	CODE
LOW	…mon/src/helpers/__tests__/clientLocalVariables.spec.ts	443	expect(secretService.getSecretEnvironment("placeholder")).toBeUndefined()	CODE
LOW	…src/__tests__/pm-namespace/advanced-assertions.spec.ts	637	name: "John Doe",	CODE
LOW	…src/__tests__/pm-namespace/advanced-assertions.spec.ts	649	pm.response.to.have.jsonPath("$.user.profile.name", "John Doe")	CODE
LOW	…src/__tests__/pm-namespace/advanced-assertions.spec.ts	665	"Expected 'John Doe' to deep equal 'John Doe'"	CODE
LOW	…sandbox/src/__tests__/pm-namespace/sendRequest.spec.ts	203	raw: JSON.stringify({ name: 'John Doe' })	CODE
LOW	…space/chai-powered-assertions/functions-errors.spec.ts	726	hopp.expect('user@example.com').to.satisfy(function(email) {	CODE
LOW	…amespace/chai-powered-assertions/strings-regex.spec.ts	257	hopp.expect('user@example.com').to.match(/^[a-z0-9._%+-]+@[a-z0-9.-]+\\.[a-z]{2,}$/i)	CODE
LOW	packages/hoppscotch-relay/README.md	88	Some(BodyDef::Text(r#"{"name": "John Doe"}"#.to_string())),	CODE
LOW	…tch-backend/src/published-docs/published-docs.model.ts	162	example: '{"author": "John Doe", "tags": ["api", "rest"]}',	CODE

Decorative Section Separators8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	…tch-common/src/helpers/utils/__tests__/tooltip.spec.ts	17	// ─── truncateText ────────────────────────────────────────────────	COMMENT
MEDIUM	…tch-common/src/helpers/utils/__tests__/tooltip.spec.ts	81	// ─── formatTooltipValue ──────────────────────────────────────────	COMMENT
MEDIUM	…tch-common/src/helpers/utils/__tests__/tooltip.spec.ts	118	// ─── calculateTooltipDimensions ──────────────────────────────────	COMMENT
MEDIUM	…tch-common/src/helpers/utils/__tests__/tooltip.spec.ts	164	// ─── applyTooltipOverflowStyles ──────────────────────────────────	COMMENT
MEDIUM	…tch-common/src/helpers/utils/__tests__/tooltip.spec.ts	209	// ─── createTooltipValueRow ───────────────────────────────────────	COMMENT
MEDIUM	…tch-common/src/helpers/utils/__tests__/tooltip.spec.ts	300	// ─── constrainTooltipToViewport ──────────────────────────────────	COMMENT
MEDIUM	…tch-common/src/helpers/utils/__tests__/tooltip.spec.ts	378	// ─── stabilizeTooltipHover ───────────────────────────────────────	COMMENT
MEDIUM	…tch-common/src/helpers/utils/__tests__/tooltip.spec.ts	396	// ─── Constants ───────────────────────────────────────────────────	COMMENT

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…hoppscotch-common/src/services/oauth/flows/authCode.ts	99	// missing, default to 'plain' as requested by the user.	COMMENT

Modern AI Meta-Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	…kages/hoppscotch-common/src/components/share/index.vue	192	// GraphQL shares use the same modal scaffold but a different tab set —	COMMENT
MEDIUM	…ages/hoppscotch-common/src/services/ai-chat.service.ts	1362	// Online: run the agentic loop, surfacing each step live.	COMMENT

Slop Phrases2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.yml	43	# Edit the below line to match your PostgresDB URL if you have an outside DB (make sure to update the .env file as	COMMENT
LOW	docker-compose.yml	195	# Edit the below line to match your PostgresDB URL if you have an outside DB (make sure to update the .env file as	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	healthcheck.sh	12	# Check if the container has been running for at least 15 seconds	COMMENT

hoppscotch/hoppscotch

Open-Source Code Quality, Security and Technical Debt Review