2.6

Adjusted Signal

2.6

Raw Pattern Score

100%

Time Factor

2026-11-01

Last Push

5.1K

Stars

TypeScript

Language

286.6K

Lines of Code

1.6K

Files

415

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 327 finding(s).

Hallucinated Dependency & Supply Chain Risk 4.9/100 · LOW

Are imports declared and package/API names verified? 59 finding(s).

Agent Over-Engineering Ratio 3.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 143 finding(s).

PR Review Velocity Impact 11.5/100 · LOW

Which changes need focused human review? 415 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 13HIGH 21MEDIUM 33LOW 348

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 415 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block179 hits · 178 pts

Severity	File	Line	Snippet	Context
LOW	AGENTS.md	61		COMMENT
LOW	CLAUDE.md	61		COMMENT
LOW	webapps/console/next.config.js	41	// },	COMMENT
LOW	webapps/console/next-env.d.ts	1	/// <reference types="next" />	COMMENT
LOW	webapps/console/vitest.config.ts	1	import { defineConfig } from "vitest/config";	COMMENT
LOW	webapps/console/components/DataView/EventsBrowser.tsx	501	// useEffect(() => {	COMMENT
LOW	…mponents/ConnectionEditorPage/ConnectionEditorPage.tsx	781	rows={3}	COMMENT
LOW	…ole/components/FunctionsDebugger/FunctionsDebugger.tsx	701	// render: (d: typeof mapEvents[number]) => {	COMMENT
LOW	webapps/console/__tests__/integration/support/setup.ts	1	/* eslint-disable no-restricted-properties -- this file's job is to WRITE the	COMMENT
LOW	webapps/console/scripts/maintenance-mode.sh	1	#!/usr/bin/env bash	COMMENT
LOW	webapps/console/lib/api.ts	361	// working (auth, app-config, maintenance, healthcheck, admin maintenance	COMMENT
LOW	webapps/console/lib/nextauth.config.ts	241	},	COMMENT
LOW	webapps/console/lib/firebase-client.tsx	341	// The lookup endpoint now only returns [] for a genuine	COMMENT
LOW	webapps/console/lib/server/audit-log-service.ts	581	const notCliToken: Prisma.AuditLogWhereInput[] = [	COMMENT
LOW	webapps/console/lib/server/serverEnv.ts	241	// Enable audit logging for security and compliance	COMMENT
LOW	webapps/console/lib/server/serverEnv.ts	261	// `https://ee${JITSU_BRANCH_SUFFIX}.jitsu.localhost/` to follow the current	COMMENT
LOW	webapps/console/lib/server/serverEnv.ts	381	MAINTENANCE: z.string().optional(),	COMMENT
LOW	webapps/console/lib/server/serverEnv.ts	401	// Slack webhook URL for notifications	COMMENT
LOW	webapps/console/lib/server/oauth/services.ts	261	// otherwise returns original credentials part of config	COMMENT
LOW	webapps/console/lib/server/mcp-server/auth.ts	41	send401(res, "invalid_token", "Token format must be tokenId:secret");	COMMENT
LOW	webapps/console/lib/schema/destinations.tsx	1001	credentialsUi: meta.MixpanelCredentialsUi,	COMMENT
LOW	webapps/console/lib/schema/destinations.tsx	1021	// syncOptions: z.object({}),	COMMENT
LOW	webapps/console/lib/schema/export-contracts.ts	1	import { z } from "zod";	COMMENT
LOW	webapps/console/pages/[workspaceId]/streams.tsx	101	// <div className="mb-4 flex items-center justify-left">	COMMENT
LOW	webapps/console/pages/[workspaceId]/destinations.tsx	841	)}	COMMENT
LOW	webapps/console/pages/[workspaceId]/syncs/index.tsx	421	sortDirections={["ascend", "descend"]}	COMMENT
LOW	webapps/console/pages/api/oauth/service.ts	21	throw new ApiError("Method was disabled as it is not used");	COMMENT
LOW	webapps/console/pages/api/oauth/service.ts	41	// const packageId = (object.config as any).package;	COMMENT
LOW	webapps/console/pages/api/oauth/service.ts	61	// warning: `Service ${query.serviceId} not found in database`,	COMMENT
LOW	webapps/console/pages/api/admin/notifications.ts	41		COMMENT
LOW	webapps/console/pages/api/admin/events-log-trim.ts	81	// would otherwise pick up, pausing retention). Reload/materialize below	COMMENT
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	101	clickhouseSettings: z.unknown().optional(),	COMMENT
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	1281	}	COMMENT
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	1481	lastModified: exportWorkspacesWithProfilesLastModified,	COMMENT
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	1501	// const records = await db.prisma().functionsServer.findMany();	COMMENT
LOW	webapps/console/pages/api/[workspaceId]/domain-check.ts	61	}	COMMENT
LOW	types/protocols/analytics.d.ts	521	getContextProperty(name: string): JSONValue;	COMMENT
LOW	helm-deps/values.yaml	1	# Jitsu Dev Dependencies Helm Chart Values	COMMENT
LOW	…estination-functions/src/functions/user-recognition.ts	121	ctx.log.error(`User Recognition function failed for Message ID:${event.messageId} Error: ${e}`);	COMMENT
LOW	…ination-functions/src/functions/posthog-destination.ts	121	json: () => res.json(),	COMMENT
LOW	…ination-functions/src/functions/posthog-destination.ts	221	// This is where the queued events are actually sent. Flush explicitly first:	COMMENT
LOW	…destination-functions/src/functions/ga4-destination.ts	141		COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	921	// if (obj && obj.id) {	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	941	// },	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	961	// 10,	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	981	// name: "nested changes among array insertions and deletions",	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1001	// },	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1021	// id: 12,	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1041	// delta: {	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1061	// 0: [{ id: 1 }],	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1081	// objectHash(obj: { id?: string }) {	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1101	// id: 4,	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1121	// id: 3,	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1141	// },	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1161	// left: [	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1181	// },	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1201	// inner: {	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1221	// },	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1241	// inner: {	COMMENT
LOW	libs/jsondiffpatch/test/examples/diffpatch.ts	1261	// reverse: {	COMMENT
119 more matches not shown…

Hallucination Indicators13 hits · 145 pts

Severity	File	Line	Snippet	Context
CRITICAL	libs/warehouse-query/src/snowflake.test.ts	483	const query = f.connection.execute.mock.calls.at(-1)![0].sqlText;	CODE
CRITICAL	libs/warehouse-query/src/snowflake.test.ts	508	expect(f.connection.execute.mock.calls.every(([options]) => options.parameters.STRICT_JSON_OUTPUT === true)).toBe(	CODE
CRITICAL	…ination-functions/src/functions/hubspot-destination.ts	40	const properties = await this.client.crm.properties.coreApi.getAll(opts.objectType \|\| "contacts");	CODE
CRITICAL	…ination-functions/src/functions/hubspot-destination.ts	45	await this.client.crm.properties.coreApi.create(opts.objectType \|\| "contacts", {	CODE
CRITICAL	…ination-functions/src/functions/hubspot-destination.ts	70	const remoteProps = await this.client.crm.properties.coreApi.getAll(opts.objectType \|\| "contacts");	CODE
CRITICAL	…ination-functions/src/functions/hubspot-destination.ts	82	const remoteProps = await this.client.crm.properties.coreApi.getAll(opts.objectType \|\| "contacts");	CODE
CRITICAL	…ination-functions/src/functions/hubspot-destination.ts	110	const searchResults = await this.client.crm.companies.searchApi.doSearch({	CODE
CRITICAL	…ination-functions/src/functions/hubspot-destination.ts	143	await this.client.crm.companies.basicApi.update(companyId, companyProperties);	CODE
CRITICAL	…ination-functions/src/functions/hubspot-destination.ts	148	const { id: companyId } = await this.client.crm.companies.basicApi.create({	CODE
CRITICAL⚡	…ination-functions/src/functions/hubspot-destination.ts	187	await this.client.crm.contacts.basicApi.update(existingContactId, contactProperties);	CODE
CRITICAL⚡	…ination-functions/src/functions/hubspot-destination.ts	191	const { id: contactId } = await this.client.crm.contacts.basicApi.create({	CODE
CRITICAL⚡	…ination-functions/src/functions/hubspot-destination.ts	200	await this.client.crm.associations.batchApi.create("contacts", "companies", {	CODE
CRITICAL	…ination-functions/src/functions/hubspot-destination.ts	226	const searchResults = await this.client.crm.contacts.searchApi.doSearch({	CODE

Cross-Language Confusion (JS/TS)20 hits · 118 pts

Severity	File	Line	Snippet	Context
HIGH	cli/jitsu-cli/src/commands/spec.ts	26	print(spec, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	70	print(data, opts.output);	CODE
HIGH⚡	cli/jitsu-cli/src/commands/config/handlers.ts	81	print(data.objects ?? data, opts.output);	CODE
HIGH⚡	cli/jitsu-cli/src/commands/config/handlers.ts	90	print(data.links ?? data, opts.output);	CODE
HIGH⚡	cli/jitsu-cli/src/commands/config/handlers.ts	99	print(data.profileBuilders ?? data, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	115	print(data, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	124	print(data, opts.output);	CODE
HIGH⚡	cli/jitsu-cli/src/commands/config/handlers.ts	142	print(data, opts.output);	CODE
HIGH⚡	cli/jitsu-cli/src/commands/config/handlers.ts	152	print(data, opts.output);	CODE
HIGH⚡	cli/jitsu-cli/src/commands/config/handlers.ts	162	print(data, opts.output);	CODE
HIGH⚡	cli/jitsu-cli/src/commands/config/handlers.ts	172	print(data, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	196	print(data, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	207	print(data ?? { ok: true }, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	220	print(data, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	234	print(data, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	273	print(data, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	287	print(data ?? { ok: true }, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	306	print(data ?? { ok: true }, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	317	print(data ?? { ok: true }, opts.output);	CODE
HIGH	cli/jitsu-cli/src/commands/config/handlers.ts	338	print(data, opts.output);	CODE

Hyper-Verbose Identifiers114 hits · 112 pts

Severity	File	Line	Snippet	Context
LOW	…s/console/components/ReverseETL/DeliveryStatistics.tsx	30	export function ReverseDeliveryStatistics({ task }: { task: ReverseTask }) {	CODE
LOW	…le/components/ReverseETL/DestinationTargetSelector.tsx	8	export function DestinationTargetSelector({	CODE
LOW	…kspaceNameAndSlugEditor/WorkspaceNameAndSlugEditor.tsx	13	export function WorkspaceNameAndSlugEditor({	CODE
LOW	…__tests__/integration/backup-retention-service.test.ts	37	function prismaWithConcurrentWrite(onAfterRead: (rows: any[]) => Promise<void>) {	CODE
LOW	webapps/console/lib/nextauth.config.ts	145	export async function getOrCreateUser(opts: {	CODE
LOW	webapps/console/lib/zod.ts	45	export function prepareZodObjectForSerialization(obj: any) {	CODE
LOW	webapps/console/lib/zod.ts	49	export function prepareZodObjectForDeserialization(obj: any) {	CODE
LOW	webapps/console/lib/ui.tsx	45	function copyTextToClipboardFallback(text) {	CODE
LOW	webapps/console/lib/server/ee.ts	110	export function eeAuthHeadersOrServiceToken(	CODE
LOW	webapps/console/lib/server/events-log-stream.ts	42	async function assertActorBelongsToWorkspace(workspaceId: string, actorId: string, type: string) {	CODE
LOW	webapps/console/lib/server/signup-restrictions.ts	18	export function isPersonalEmailSignupBlocked(opts: { email: string; loginProvider?: string \| null }): boolean {	CODE
LOW	webapps/console/lib/server/signup-restrictions.ts	35	export async function shouldRejectPersonalEmailSignup(user: {	CODE
LOW	…ps/console/lib/server/migrate-reverse-sync-settings.ts	47	export async function migrateReverseSyncSettings(prisma: PrismaClient, workspaceId: string) {	CODE
LOW	webapps/console/lib/server/config-objects-service.ts	57	function ingestionDestinationError(config: any): ApiError \| undefined {	CODE
LOW	webapps/console/lib/server/firebase-server.ts	129	export function clearLegacyHostAuthCookie(req: NextApiRequest, opts: { secure: boolean }): string \| undefined {	CODE
LOW	webapps/console/lib/server/firebase-server.ts	213	export function isUnverifiedPasswordAccount(decoded: admin.auth.DecodedIdToken): boolean {	CODE
LOW	webapps/console/lib/server/google-audiences.ts	15	export async function managedGoogleAudienceForSync(	CODE
LOW	webapps/console/lib/server/reverse-microsoft-options.ts	64	export async function microsoftOptionsForConfig(	CODE
LOW	webapps/console/lib/server/destination-accounts.ts	19	export async function destinationAccountsForConfig(	CODE
LOW	webapps/console/lib/server/maintenance.ts	134	export function getPublicMaintenanceState(): PublicMaintenanceState \| undefined {	CODE
LOW	webapps/console/lib/server/google-audience-oauth.ts	15	export async function readGoogleAudienceConnectionToken(	CODE
LOW	webapps/console/lib/server/reverse-retention.ts	93	export async function provisionRetlBucketForSync(	CODE
LOW	webapps/console/lib/server/plan-gate.ts	83	export async function assertCustomDomainsAllowed(	CODE
LOW	webapps/console/lib/server/plan-gate.ts	141	export async function assertCustomDomainsEntitlement(	CODE
LOW	webapps/console/lib/server/plan-gate.ts	168	export async function assertIdentityStitchingAllowed(	CODE
LOW	webapps/console/lib/server/oidc-discovery.ts	71	export async function updateProviderWithDiscovery(	CODE
LOW	webapps/console/lib/server/db.ts	132	export function getApplicationDatabaseUrl(): string {	CODE
LOW	webapps/console/lib/server/reverse-etl-models.ts	175	export async function guardReverseDeliveryChanges(prisma: ModelDb, workspaceId: string, id: string, type: string) {	CODE
LOW	webapps/console/lib/shared/observability-exports.ts	76	export function maskObservabilityExportsSettings(settings: ObservabilityExportsSettings): ObservabilityExportsSettings {	CODE
LOW	webapps/console/lib/shared/observability-exports.ts	83	export function unmaskObservabilityExportsSettings(	CODE
LOW	webapps/console/lib/shared/observability-exports.ts	98	export function containsMaskedHeaderValues(settings: ObservabilityExportsSettings): boolean {	CODE
LOW	webapps/console/lib/shared/data-retention.ts	53	export function defaultBackupRetentionHours(capDays?: number): number {	CODE
LOW	webapps/console/lib/shared/data-retention.ts	106	export function parseExplicitBackupRetentionHours(dataRetentionValue: unknown): number \| undefined {	CODE
LOW	webapps/console/lib/shared/data-retention.ts	170	export function getBackupRetentionCapDays(	CODE
LOW	webapps/console/lib/shared/data-retention.ts	232	export function validateBackupRetentionChange(	CODE
LOW	webapps/console/lib/openapi/annotations.ts	87	export function getAnnotatedConfigObjectSchema(type: string): z.ZodTypeAny \| undefined {	CODE
LOW	webapps/console/lib/schema/secrets.ts	16	export function getDestinationSecretPaths(destinationType: string): string[] {	CODE
LOW	webapps/console/lib/schema/secrets.ts	143	export function unmaskSecretsFromOriginal(object: any, dbEntity: any): any {	CODE
LOW	webapps/console/lib/schema/destinations.tsx	287	export function getCoreDestinationTypeNonStrict(typeId: string \| undefined): DestinationType \| undefined {	CODE
LOW	webapps/console/lib/store/index.tsx	43	export function getProfileBuilderCacheKey(workspaceId: string) {	CODE
LOW	webapps/console/lib/store/index.tsx	263	export function useConfigObjectLinksLoader(opts?: UseConfigObjectLinksParams): Result<UseConfigObjectLinkResult[]> {	CODE
LOW	webapps/console/pages/[workspaceId]/destinations.tsx	384	function ProvisionedDestinationShowCredentials(props: { destination: DestinationConfig }) {	CODE
LOW	webapps/console/pages/[workspaceId]/destinations.tsx	472	function ProvisionedDestinationDeleteButton(props: {	CODE
LOW	webapps/console/pages/api/admin/notifications.ts	296	async function loadNotificationsChannels() {	CODE
LOW	webapps/console/pages/api/admin/notifications.ts	561	function computeBatchConnectionAggregate(	CODE
LOW	webapps/console/pages/api/admin/notifications.ts	667	async function prepareBatchAggregateRows(	CODE
LOW	webapps/console/pages/api/admin/notifications.ts	755	function buildAggregateRowDescription(	CODE
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	246	function selectProfileBuilderFunctionsServer(	CODE
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	317	async function getEnabledObservabilityExports(): Promise<	CODE
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	869	async function exportStreamsWithDestinations(writer: Writer) {	CODE
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	1075	async function exportWorkspacesLastModified(): Promise<Date \| undefined> {	CODE
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	1088	async function functionsClassByWorkspace(): Promise<Map<string, { class: string; status: string }>> {	CODE
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	1176	async function exportWorkspacesWithProfilesLastModified(): Promise<Date \| undefined> {	CODE
LOW	webapps/console/pages/api/admin/export/[name]/index.ts	1197	async function exportWorkspacesWithProfiles(writer: Writer) {	CODE
LOW	…nsole/pages/api/[workspaceId]/ee/provision-db/index.ts	11	export async function findProvisionedDestination(workspaceId) {	CODE
LOW	webapps/console/pages/api/fb-auth/sign-in-methods.ts	19	async function verifiedEmailFromAccessToken(provider: "github.com" \| "google.com", accessToken: string) {	CODE
LOW	cli/jitsu-cli/src/commands/config/handlers.ts	57	async function requireResolvedWorkspaceId(opts: LeafOpts, client: ApiClient): Promise<string> {	CODE
LOW	libs/destination-functions/__tests__/lib/mem-store.ts	58	export function createAnonymousEventsStore(eventsStore: Record<string, EventsByAnonId>): AnonymousEventsStore {	CODE
LOW	libs/destination-functions/src/reverse-etl/editor.ts	74	export function missingStreamRequirements(stream: ReverseStreamEditor, options: ReverseEditorOptions) {	CODE
LOW	libs/destination-functions/src/reverse-etl/failure.ts	21	export function requiresManualReconciliation(error: unknown): boolean {	CODE
54 more matches not shown…

Decorative Section Separators27 hits · 86 pts

Severity	File	Line	Snippet	Context
MEDIUM	webapps/console/components/AuditLog/AuditLog.tsx	298	// ── URL ⇄ filter sync ──────────────────────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/config-objects-service.ts	185	// ─── Config objects ───────────────────────────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/config-objects-service.ts	464	// ─── Connections (links) ──────────────────────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/oauth.ts	100	// ─── Discovery: RFC 8414 ────────────────────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/oauth.ts	116	// ─── Discovery: RFC 9728 (MCP-required) ─────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/oauth.ts	126	// ─── DCR: RFC 7591 ──────────────────────────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/oauth.ts	184	// ─── Authorize approval (called from the consent page) ──────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/oauth.ts	252	// ─── Token endpoint: handles both grants ────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/tools.ts	302	// ─── Observability: events log ────────────────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/tools.ts	353	// ─── Syncs: source → destination lifecycle ─────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/tools.ts	607	// ─── Testing & debugging ───────────────────────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/tools.ts	687	// ─── Reports & stats ───────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	webapps/console/lib/server/mcp-server/index.ts	74	// ─── OAuth endpoints ────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	webapps/console/lib/server/mcp-server/index.ts	80	// ─── Discovery ──────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	webapps/console/lib/server/mcp-server/index.ts	85	// ─── MCP transport ──────────────────────────────────────────────────────	COMMENT
MEDIUM	webapps/console/lib/server/mcp-server/index.ts	119	// ─── Used by /api/user/keys DELETE handler ──────────────────────────────	COMMENT
MEDIUM	services/rotor/src/functions-server.ts	630	// ── FunctionRuntime implementations ──────────────────────────────────	COMMENT
MEDIUM	services/rotor/src/functions-server.ts	680	// ── Lazy worker pool with TTL-based eviction ──────────────────────────	COMMENT
MEDIUM	services/rotor/src/lib/workspace-worker.ts	28	// ── Proxy helpers ───────────────────────────────────────────────────	COMMENT
MEDIUM	services/rotor/src/lib/workspace-worker.ts	45	// ── Loaded function type ────────────────────────────────────────────	COMMENT
MEDIUM	services/rotor/src/lib/workspace-worker.ts	61	// ── UDF instantiation from IIFE code ────────────────────────────────	COMMENT
MEDIUM	services/rotor/src/lib/workspace-worker.ts	79	// ── Build proxied context ───────────────────────────────────────────	COMMENT
MEDIUM	services/rotor/src/lib/workspace-worker.ts	223	// ── Chain execution (delegates to shared runFunctionChain) ──────────	COMMENT
MEDIUM	services/rotor/src/lib/workspace-worker.ts	236	// ── Message handler ─────────────────────────────────────────────────	COMMENT
MEDIUM	services/rotor/src/lib/worker-protocol.ts	6	// ── Messages: Main → Worker ─────────────────────────────────────────	COMMENT
MEDIUM	services/rotor/src/lib/worker-protocol.ts	69	// ── Messages: Worker → Main ─────────────────────────────────────────	COMMENT
MEDIUM	services/rotor/src/lib/worker-protocol.ts	135	// ── Shared helper types ─────────────────────────────────────────────	COMMENT

Fake / Example Data26 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	…omponents/TrackingIntegrationDocumentation/HTTPApi.tsx	78	"userId": "user@example.com",	CODE
LOW	…omponents/TrackingIntegrationDocumentation/HTTPApi.tsx	99	"email": "user@example.com"	CODE
LOW	…console/components/FunctionsDebugger/example_events.ts	16	userId: "user@example.com",	CODE
LOW	…console/components/FunctionsDebugger/example_events.ts	38	email: "user@example.com",	CODE
LOW	…console/components/FunctionsDebugger/example_events.ts	63	userId: "user@example.com",	CODE
LOW	…console/components/FunctionsDebugger/example_events.ts	65	email: "user@example.com",	CODE
LOW	…console/components/FunctionsDebugger/example_events.ts	114	userId: "user@example.com",	CODE
LOW	…console/components/FunctionsDebugger/example_events.ts	136	email: "user@example.com",	CODE
LOW	…bapps/console/components/ProfileBuilderPage/example.ts	49	name: "John Doe",	CODE
LOW	webapps/console/lib/server/templates.tsx	25	inviting: { email: invitingEmail = "john.doe@xyzco.net", name: invitingName = "John Doe" } = {},	CODE
LOW	cli/jitsu-cli/data/page.json	13	"userId": "user@example.com",	CODE
LOW	cli/jitsu-cli/data/page.json	35	"email": "user@example.com"	CODE
LOW	libs/destination-functions/__tests__/lib/test-data.ts	88	const traits = { email: "john.doe.1@gmail.com", name: "John Doe" };	CODE
LOW	…nation-functions/__tests__/lib/datalayout-test-data.ts	320	userId: "user@example.com",	CODE
LOW	…nation-functions/__tests__/lib/datalayout-test-data.ts	342	email: "user@example.com",	CODE
LOW	…nation-functions/__tests__/lib/datalayout-test-data.ts	366	user_id: "user@example.com",	CODE
LOW	…nation-functions/__tests__/lib/datalayout-test-data.ts	388	email: "user@example.com",	CODE
LOW	…nation-functions/__tests__/lib/datalayout-test-data.ts	414	user_id: "user@example.com",	CODE
LOW	…nation-functions/__tests__/lib/datalayout-test-data.ts	436	email: "user@example.com",	CODE
LOW	…nation-functions/__tests__/lib/datalayout-test-data.ts	464	user_id: "user@example.com",	CODE
LOW	…nation-functions/__tests__/lib/datalayout-test-data.ts	486	email: "user@example.com",	CODE
LOW	libs/functions/__tests__/data/classic-events.ts	24	email: "user@example.com",	CODE
LOW	libs/functions/__tests__/data/classic-events.ts	26	name: "John Doe",	CODE
LOW	libs/jitsu-js/__tests__/node/nodejs.test.ts	284	email: "test@test.com",	CODE
LOW	libs/jitsu-js/__tests__/node/nodejs.test.ts	327	expect(identify.traits.email).toBe("test@test.com");	CODE
LOW	services/retl-runner/src/artifacts/journal.test.ts	645	(_a: unknown, row: any) => [{ identity: "user@example.com", upsert: {}, remove: {} }],	CODE

Structural Annotation Overuse10 hits · 17 pts

Severity	File	Line	Snippet	Context
LOW	emulate-ci-build.sh	92	# Step 1: Build or pull the builder image	COMMENT
LOW	emulate-ci-build.sh	109	# Step 2: Emulate lint.yml workflow	COMMENT
LOW	emulate-ci-build.sh	160	# Step 3: Emulate services.yaml workflow	COMMENT
LOW⚡	JITSU_FUNCTIONS_PIPELINE.md	81	### Step 1: Builtin Transformations	COMMENT
LOW⚡	JITSU_FUNCTIONS_PIPELINE.md	85	### Step 2: User Defined Function Pipeline	COMMENT
LOW⚡	JITSU_FUNCTIONS_PIPELINE.md	93	### Step 3: Builtin Destination Function	COMMENT
LOW	bulker/sync-sidecar/load.go	76	// Step 1: if a discover init wrote /shared/discover.jsonl, extract the	COMMENT
LOW	bulker/sync-sidecar/load.go	94	// Step 2: read the catalog row.	COMMENT
LOW	bulker/sync-sidecar/load.go	105	// Step 3: apply selectStreamsFromCatalog port.	COMMENT
LOW	bulker/sync-sidecar/load.go	116	// Step 4: load source_state and format for airbyte.	COMMENT

Verbosity Indicators8 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	emulate-ci-build.sh	92	# Step 1: Build or pull the builder image	COMMENT
LOW	emulate-ci-build.sh	109	# Step 2: Emulate lint.yml workflow	COMMENT
LOW	emulate-ci-build.sh	160	# Step 3: Emulate services.yaml workflow	COMMENT
LOW	…lkerlib/implementations/sql/replacepartition_stream.go	149	//but we need to check if partitionId column exists in table first	COMMENT
LOW	bulker/sync-sidecar/load.go	76	// Step 1: if a discover init wrote /shared/discover.jsonl, extract the	COMMENT
LOW	bulker/sync-sidecar/load.go	94	// Step 2: read the catalog row.	COMMENT
LOW	bulker/sync-sidecar/load.go	105	// Step 3: apply selectStreamsFromCatalog port.	COMMENT
LOW	bulker/sync-sidecar/load.go	116	// Step 4: load source_state and format for airbyte.	COMMENT

Redundant / Tautological Comments5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	helm/dev-deploy.sh	49	# Check if minikube is running	COMMENT
LOW	helm/dev-deploy.sh	67	# Check if already mounted	COMMENT
LOW	helm/dev-deploy.sh	131	# Check if mount is running	COMMENT
LOW	helm/dev-deploy.sh	547	# Check if tunnel might be needed	COMMENT
LOW	helm/templates/install-job.yaml	32	# Check if we need to rebuild by comparing pnpm-lock.yaml hash	COMMENT

TODO Padding4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	cli/jitsu-cli/src/templates/functions.ts	36	//TODO: implement test	COMMENT
LOW	cli/jitsu-cli/src/templates/functions.ts	66	//TODO: implement test	COMMENT
LOW	bulker/bulkerlib/implementations/sql/table_helper.go	306	//TODO: implement system error notification	COMMENT
LOW	bulker/jitsubase/logging/global_logger.go	84	//TODO: implement system error notification	COMMENT

Modern AI Meta-Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/publish.yml	119	# longer drags a stable rebuild of every microservice with it.	COMMENT
MEDIUM	.github/workflows/cli.yaml	9	# doesn't drag along a stable rebuild of every microservice. The published	COMMENT

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	helm/values-custom.example.yaml	3	# This file is for non-secret values (hosts, URLs, database names, etc.)	COMMENT
MEDIUM	helm/templates/console.yaml	56	# Create the events-log ClickHouse tables (powers Live Events).	COMMENT

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	helm/tests/test_dev_tunnel.py	73	except ProcessLookupError:	CODE

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	cli/jitsu-cli/src/lib/body-fields.ts	4	// as ad-hoc body fields, but Commander would reject unknown options. The simplest robust	COMMENT

Example Usage Blocks2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	bulker/connectors/airbytecdk/cmdparser.go	36	// Example usage	COMMENT
LOW	helm/values-custom.example.yaml	5	# Usage:	COMMENT

Excessive Try-Catch Wrapping1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	bulker/sync-sidecar/read.go	500	s.errprint("Error posting events log: %v", err)	CODE

jitsucom/jitsu

Open-Source Code Quality, Security and Technical Debt Review