Pattern Findings

The scanner identified 893 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block847 hits · 814 pts

Severity	File	Line	Snippet	Context
LOW	models/manifest.toml	1	# The models Concat downloads, and where they come from.	COMMENT
LOW	models/manifest.toml	21	# `upstream`, checks each against `sha256`, records the digest when this	COMMENT
LOW	android-native/build-rust.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/generate-icons.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/bundle-cards.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/ci/smoke-linux.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/ci/isa-allow.txt	1	# What scripts/ci/isa-scan.sh lets each shipped x86_64 file hold beyond	COMMENT
LOW	scripts/ci/isa-allow.txt	81	# and ring choose AVX2 or BMI2 paths at run time (ring's hand-written	COMMENT
LOW	scripts/ci/check-min-os.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/ci/isa-scan.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/ci/isa-scan.sh	21	# its fast paths (ring's, Go's), behind a CPU check; counted	COMMENT
LOW	scripts/ci/fetch.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/ci/smoke-ios.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/ci/smoke-ios.sh	21	# uncaught Objective-C exception, one of the app's own start-up	COMMENT
LOW	scripts/ci/smoke-macos.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/ci/smoke-android.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/ci/smoke-android.sh	21	# "Preview failed" notice, which the log carries as `preview: ...`,	COMMENT
LOW	scripts/ci/smoke-android.sh	41	# instead (see untestable_here).	COMMENT
LOW	scripts/ci/smoke-android.sh	201	# runtime's crash report, the C library's on a fatal signal, Rust's on a	COMMENT
LOW	.github/release-notes.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.github/release-notes.sh	21	# the tree rather than on the product - a conventional-commit `test:`,	COMMENT
LOW	.github/dependabot.yml	1	# Dependabot keeps two kinds of pin current, weekly, as pull requests that	COMMENT
LOW	.github/workflows/release.yml	1	name: Release	COMMENT
LOW	.github/workflows/mobile.yml	1	name: Build for phones	COMMENT
LOW	.github/workflows/mobile.yml	21	# environment, here and on a developer's machine.	COMMENT
LOW	.github/workflows/mobile.yml	201	# it installs over the build before it. Only a release asks (`sign`);	COMMENT
LOW	.github/workflows/build-app.yml	1	name: Build app	COMMENT
LOW	.github/workflows/build-app.yml	21	# library its crate downloads for the target.	COMMENT
LOW	.github/workflows/build-app.yml	81	# refuses a file whose digest has changed. The versions below are the	COMMENT
LOW	.github/workflows/build-app.yml	161	llvm: win64	COMMENT
LOW	.github/workflows/build-app.yml	181	# launch with an illegal instruction on an Ivy Bridge, which has AVX	COMMENT
LOW	.github/workflows/build-app.yml	261	# --disable-new-dtags makes that an old-style DT_RPATH, which is	COMMENT
LOW	.github/workflows/build-app.yml	301	run: \|	COMMENT
LOW	.github/workflows/build-app.yml	341	- name: Thin LTO (Intel macOS)	COMMENT
LOW	.github/workflows/build-app.yml	361	# rest of the build; the cc crate hands it the Visual Studio	COMMENT
LOW	.github/workflows/build-app.yml	401	Expand-Archive ffmpeg-win.zip -DestinationPath ffdl	COMMENT
LOW	.github/workflows/build-app.yml	421	# onnxruntime.dll too. sherpa-onnx 1.13.7 is built against ONNX	COMMENT
LOW	.github/workflows/build-app.yml	481		COMMENT
LOW	.github/workflows/build-app.yml	521	"SHERPA_ONNX_LIB_DIR=$PWD\sherpa-libs" \| Out-File -FilePath $env:GITHUB_ENV -Append	COMMENT
LOW	.github/workflows/build-app.yml	901	# core library under it, and the xcb extension under that: a machine	COMMENT
LOW	.github/workflows/models.yml	1	name: Mirror models	COMMENT
LOW	.github/workflows/ci.yml	1	name: CI	COMMENT
LOW	assets/linux/nfpm.yaml	1	# Concat's Linux packages: one description for the .deb and the .rpm.	COMMENT
LOW	src/Cargo.toml	81	# At 0 that is ten seconds. With the profile's incremental honoured (see	COMMENT
LOW	src/Cargo.toml	101	# the fonts and effect previews the build script embeds.	COMMENT
LOW	src/Cargo.toml	121	# edge, which frees the optimiser and shrinks the binary. This is a GUI	COMMENT
LOW	src/.config/nextest.toml	1	# cargo-nextest's settings for this workspace. CI runs the tests through	COMMENT
LOW	src/crates/concat/Cargo.toml	21	# Slint is taken under its GPL-3.0-only option to sit beside the AGPL engine.	COMMENT
LOW	src/crates/concat/Cargo.toml	61	# drags from the strip's drag region.	COMMENT
LOW	src/crates/concat/build.rs	1	// SPDX-License-Identifier: AGPL-3.0-or-later	COMMENT
LOW	src/crates/concat/src/format.rs	1	// SPDX-License-Identifier: AGPL-3.0-or-later	COMMENT
LOW	src/crates/concat/src/format.rs	201	/// lane. The part of a bar over the hot line is drawn there too, as the	COMMENT
LOW	src/crates/concat/src/format.rs	261		COMMENT
LOW	src/crates/concat/src/keymap.rs	1	// SPDX-License-Identifier: AGPL-3.0-or-later	COMMENT
LOW	src/crates/concat/src/keymap.rs	21	//!	COMMENT
LOW	src/crates/concat/src/host.rs	1	// SPDX-License-Identifier: AGPL-3.0-or-later	COMMENT
LOW	src/crates/concat/src/host.rs	41	/// Kokoro, and its model downloads.	COMMENT
LOW	src/crates/concat/src/host.rs	361	/// Asks a native dialog on the event-loop thread with the studio	COMMENT
LOW	src/crates/concat/src/host.rs	721	/// A small frame of the footage or the still. A frame rather than an	COMMENT
LOW	src/crates/concat/src/host.rs	741	pub strip: Option<(concat_core::frame::Frame, u32)>,	COMMENT
787 more matches not shown…

Decorative Section Separators21 hits · 63 pts

Severity	File	Line	Snippet	Context
MEDIUM	models/manifest.toml	36	# ── Cutout ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	models/manifest.toml	87	# ── Text to speech ───────────────────────────────────────────────────────	COMMENT
MEDIUM	models/manifest.toml	121	# ── Chatterbox ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	models/manifest.toml	208	# ── Transcription ────────────────────────────────────────────────────────	COMMENT
MEDIUM	scripts/models.py	141	# ── check ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	scripts/models.py	227	# ── mirror ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	scripts/models.py	324	# ── release manifest ─────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/build-app.yml	237	# ── Linux ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/build-app.yml	294	# ── macOS ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/build-app.yml	349	# ── Windows ────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/build-app.yml	453	# ── sherpa-onnx ────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/build-app.yml	524	# ── Build ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/build-app.yml	565	# ── Package: macOS ─────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/build-app.yml	720	# ── Package: Linux ─────────────────────────────────────────────────	COMMENT
MEDIUM	.github/workflows/build-app.yml	955	# ── Package: Windows ───────────────────────────────────────────────	COMMENT
MEDIUM	src/crates/concat/src/format.rs	113	// ─── the dialogs ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/crates/concat/src/studio.rs	1132	// ── conversions between the document and the window ─────────────────────	COMMENT
MEDIUM	src/crates/concat/src/chips.rs	170	// ── the launch screen ────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/crates/concat-text/src/lib.rs	2078	// ── shapes ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/crates/concat-host/src/sounds.rs	286	// ── Concat's own sounds ─────────────────────────────────────────────────	COMMENT
MEDIUM	src/crates/concat-effects/src/expr.rs	118	// ─── parsing ────────────────────────────────────────────────────────────────	COMMENT

AI Slop Vocabulary7 hits · 21 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/locales.py	42	# harness) is left as it is.	COMMENT
MEDIUM	src/crates/concat-core/src/retime.rs	20	//! the bend is seamless. A slope of zero eases in and out of the point, the	COMMENT
MEDIUM	src/crates/concat-vision/src/stabilize/fit.rs	184	/// What a robust fit found.	COMMENT
MEDIUM	…isper-rs-sys/whisper.cpp/ggml/src/ggml-cpu/amx/mmq.cpp	639	// pack again with 128 to fully utilize vector length	COMMENT
MEDIUM	…isper-rs-sys/whisper.cpp/ggml/src/ggml-cpu/amx/mmq.cpp	681	// pack again with 128 to fully utilize vector length	COMMENT
MEDIUM	…isper-rs-sys/whisper.cpp/ggml/src/ggml-cpu/amx/mmq.cpp	779	// pack again with 128 to fully utilize vector length	COMMENT
MEDIUM	src/patches/whisper-rs-sys/whisper.cpp/src/whisper.cpp	8353	// guaranteed. Might get removed at some point unless a robust algorithm implementation is found	COMMENT

Fake / Example Data7 hits · 7 pts

Severity	File	Line	Snippet	Context
LOW	src/crates/concat-mcp/src/summary.rs	194	if item["placeholder"] == json!(true) {	CODE
LOW	src/crates/concat-mcp/src/summary.rs	195	out["placeholder"] = json!(true);	CODE
LOW	src/crates/concat-host/src/templates.rs	418	"hasAudio": true, "placeholder": true },	CODE
LOW	src/crates/concat-host/src/templates.rs	420	"hasAudio": false, "placeholder": true }	CODE
LOW	src/crates/concat-host/src/templates.rs	486	media[1]["placeholder"] = Value::Bool(false);	CODE
LOW	src/crates/concat-host/src/templates.rs	608	.get("placeholder")	CODE
LOW	src/crates/concat-project/src/lib.rs	3835	"op": "setMediaPlaceholder", "mediaId": "m1", "placeholder": true	CODE

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	scripts/locales.py	46	except (AttributeError, ValueError):	CODE

TODO Padding3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	src/patches/whisper-rs-sys/whisper.cpp/ggml/src/ggml.c	3787	// TODO: implement non F32 return	COMMENT
LOW	src/patches/whisper-rs-sys/whisper.cpp/ggml/src/ggml.c	3811	// TODO: implement non F32 return	COMMENT
LOW	src/patches/whisper-rs-sys/whisper.cpp/ggml/src/ggml.c	4917	// TODO: implement antialias for modes other than bilinear	COMMENT

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/release-notes.sh	30	# front of one is scaffolding for the log and reads as noise in a release,	COMMENT

Unused Imports2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	scripts/models.py	16		CODE
LOW	scripts/readme/gen.py	14		CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	scripts/generate-icons.sh	4	# Usage:	COMMENT

Excessive Try-Catch Wrapping1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	scripts/models.py	301	except Exception as error: # noqa: BLE001 - the report is the point	CODE

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	scripts/models.py	74		CODE

Hyper-Verbose Identifiers1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…whisper-rs-sys/whisper.cpp/ggml/include/ggml-backend.h	200	typedef ggml_backend_buffer_type_t (ggml_backend_split_buffer_type_t)(int main_device, const float tensor_split	CODE

jub0t/Concat

Open-Source Code Quality, Security and Technical Debt Review

Risk Review · Payload v1

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings