1.4

Adjusted Signal

1.4

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

5.8K

Stars

Language

425.5K

Lines of Code

1.8K

Files

548

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 530 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 0.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 24 finding(s).

PR Review Velocity Impact 6.8/100 · LOW

Which changes need focused human review? 548 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 26LOW 522

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 548 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block481 hits · 461 pts

Severity	File	Line	Snippet	Context
LOW	cmd/webhook/app/options/options.go	41	// CertDir is the directory that contains the server key and certificate.	COMMENT
LOW	cmd/scheduler-estimator/app/scheduler-estimator.go	61	// - https://en.wikipedia.org/wiki/Slowloris_(computer_security)	COMMENT
LOW	cmd/scheduler-estimator/app/options/options.go	41	// GrpcAuthKeyFile SSL key file used for grpc SSL/TLS connections.	COMMENT
LOW	cmd/metrics-adapter/app/options/options.go	61	// request data.	COMMENT
LOW	cmd/descheduler/app/descheduler.go	61	// which in case of no timeout will keep the connection active	COMMENT
LOW	cmd/descheduler/app/options/options.go	61	// SchedulerEstimatorCertFile SSL certification file used to secure scheduler estimator communication.	COMMENT
LOW	cmd/scheduler/app/scheduler.go	61	// and failing to do so might make the application vulnerable	COMMENT
LOW	cmd/agent/app/options/options.go	81	ClusterCacheSyncTimeout metav1.Duration	COMMENT
LOW	cmd/agent/app/options/options.go	101	// HealthProbeBindAddress is the TCP address that the controller should bind to	COMMENT
LOW	cmd/controller-manager/app/options/cluster_failover.go	21	"k8s.io/apimachinery/pkg/util/validation/field"	COMMENT
LOW	cmd/controller-manager/app/options/options.go	41	defaultElectionRetryPeriod = metav1.Duration{Duration: 2 * time.Second}	COMMENT
LOW	cmd/controller-manager/app/options/options.go	61	// ClusterMonitorPeriod represents cluster-controller monitoring period, i.e. how often does	COMMENT
LOW	cmd/controller-manager/app/options/options.go	81	ClusterAPIQPS float32	COMMENT
LOW	cmd/controller-manager/app/options/options.go	101	// Defaults to ":10357".	COMMENT
LOW	test/e2e/suites/base/karmadactl_test.go	1781		COMMENT
LOW	charts/karmada-operator/Chart.yaml	1	apiVersion: v2	COMMENT
LOW	charts/karmada-operator/values.yaml	1	## Default values for charts.	COMMENT
LOW	charts/karmada-operator/values.yaml	41	## Specify a imagePullPolicy, defaults to 'IfNotPresent'	COMMENT
LOW	charts/karmada-operator/values.yaml	61	registry: docker.io	COMMENT
LOW	charts/karmada-operator/values.yaml	81	## A sample stanza is shown below.	COMMENT
LOW	charts/karmada-operator/values.yaml	101	# lines, adjust them as necessary, and remove the curly braces after 'resources:'.	COMMENT
LOW	charts/karmada-operator/values.yaml	121	## @param operator.priorityClassName Priority class name for the operator pods	COMMENT
LOW	charts/karmada/Chart.yaml	1	apiVersion: v2	COMMENT
LOW	charts/karmada/values.yaml	1	## Default values for charts.	COMMENT
LOW	charts/karmada/values.yaml	21	## "latest" is a default value for local installation.	COMMENT
LOW	charts/karmada/values.yaml	41	## @param clusterDomain default domain for karmada	COMMENT
LOW	charts/karmada/values.yaml	61	registry: docker.io	COMMENT
LOW	charts/karmada/values.yaml	201	logVerbosity: 2	COMMENT
LOW	charts/karmada/values.yaml	221	## - myRegistryKeySecretName	COMMENT
LOW	charts/karmada/values.yaml	261	## Multi-value flags (like --feature-gates or --controllers) may not behave as simple overrides.	COMMENT
LOW	charts/karmada/values.yaml	281	## @param image.pullSecrets Specify docker-registry secret names as an array	COMMENT
LOW	charts/karmada/values.yaml	301	# memory: 128Mi	COMMENT
LOW	charts/karmada/values.yaml	321	## @param webhook.priorityClassName the priority class name for the karmada-webhook	COMMENT
LOW	charts/karmada/values.yaml	341	## @param controllerManager.logVerbosity log verbosity level for the controller manager	COMMENT
LOW	charts/karmada/values.yaml	361	## pullSecrets:	COMMENT
LOW	charts/karmada/values.yaml	401		COMMENT
LOW	charts/karmada/values.yaml	421	##	COMMENT
LOW	charts/karmada/values.yaml	461	topologyKey: kubernetes.io/hostname	COMMENT
LOW	charts/karmada/values.yaml	501	## Secret containing an EncryptionConfiguration file and passing --encryption-provider-config to karmada-apiserver.	COMMENT
LOW	charts/karmada/values.yaml	521	## karmada aggregated apiserver config	COMMENT
LOW	charts/karmada/values.yaml	541	registry: docker.io	COMMENT
LOW	charts/karmada/values.yaml	561	# requests:	COMMENT
LOW	charts/karmada/values.yaml	601	## @param image.registry karmada metricsAadpter image registry	COMMENT
LOW	charts/karmada/values.yaml	621	requests:	COMMENT
LOW	charts/karmada/values.yaml	661	replicaCount: 1	COMMENT
LOW	charts/karmada/values.yaml	681	## Secrets must be manually created in the namespace.	COMMENT
LOW	charts/karmada/values.yaml	781	## "pvc" means using volumeClaimTemplates	COMMENT
LOW	charts/karmada/values.yaml	841	podAnnotations: {}	COMMENT
LOW	charts/karmada/values.yaml	861	pullSecrets: []	COMMENT
LOW	charts/karmada/values.yaml	941	tag: *karmadaImageVersion	COMMENT
LOW	charts/karmada/values.yaml	981	## @param schedulerEstimator.certs certs of the scheduler-estimator, only used when installMode is not "host"	COMMENT
LOW	charts/karmada/values.yaml	1001	podLabels: {}	COMMENT
LOW	charts/karmada/values.yaml	1021	resources: {}	COMMENT
LOW	charts/karmada/values.yaml	1061	## @param search.replicaCount target replicas	COMMENT
LOW	charts/karmada/values.yaml	1081	## Secrets must be manually created in the namespace.	COMMENT
LOW	…multicluster/multicluster.x-k8s.io_serviceimports.yaml	1	# Copyright 2020 The Kubernetes Authors.	COMMENT
LOW	…multicluster/multicluster.x-k8s.io_serviceexports.yaml	1	# Copyright 2020 The Kubernetes Authors.	COMMENT
LOW	…elease-notes/references/karmada-release-note-format.md	41		COMMENT
LOW	…elease-notes/references/karmada-release-note-format.md	61	## What's New	COMMENT
LOW	…elease-notes/references/karmada-release-note-format.md	81	```	COMMENT
421 more matches not shown…

Decorative Section Separators12 hits · 48 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	hack/performance/README.md	199	# ── Baseline (master) ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	hack/performance/README.md	205	# ── Target (feature branch) ────────────────────────────────────────────────	COMMENT
MEDIUM⚡	hack/performance/README.md	213	# ── Generate comparison charts ─────────────────────────────────────────────	COMMENT
MEDIUM	hack/performance/collect-metrics.sh	31	# ============================================	COMMENT
MEDIUM	hack/performance/collect-metrics.sh	36	# ============================================	COMMENT
MEDIUM	hack/performance/collect-metrics.sh	57	# ============================================	COMMENT
MEDIUM	hack/performance/collect-metrics.sh	65	# ============================================	COMMENT
MEDIUM⚡	docs/proposals/hpa/cronfederatedhpa.md	331	# ┌───────────── minute (0 - 59)	COMMENT
MEDIUM⚡	docs/proposals/hpa/cronfederatedhpa.md	332	# │ ┌───────────── hour (0 - 23)	COMMENT
MEDIUM⚡	docs/proposals/hpa/cronfederatedhpa.md	333	# │ │ ┌───────────── day of the month (1 - 31)	COMMENT
MEDIUM⚡	docs/proposals/hpa/cronfederatedhpa.md	334	# │ │ │ ┌───────────── month (1 - 12)	COMMENT
MEDIUM⚡	docs/proposals/hpa/cronfederatedhpa.md	335	# │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday;	COMMENT

Structural Annotation Overuse23 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW	charts/karmada/README.md	104	#### Step 1: Create the encryption configuration Secret	COMMENT
LOW	charts/karmada/README.md	138	#### Step 2: Enable encryption in Helm values	COMMENT
LOW	charts/karmada/README.md	162	#### Step 3: Verify encryption is enabled	COMMENT
LOW	.claude/skills/e2e-root-cause-analysis/SKILL.md	10	## Step 0: Find the failing job (if only a PR is given)	COMMENT
LOW	.claude/skills/e2e-root-cause-analysis/SKILL.md	24	## Step 1: Collect the evidence	COMMENT
LOW	.claude/skills/e2e-root-cause-analysis/SKILL.md	46	## Step 2: Find the failure in the ginkgo log	COMMENT
LOW	.claude/skills/e2e-root-cause-analysis/SKILL.md	63	## Step 3: Trace backwards through component logs	COMMENT
LOW	.claude/skills/e2e-root-cause-analysis/SKILL.md	83	## Step 4: Report	COMMENT
LOW	.claude/skills/e2e-root-cause-analysis/SKILL.md	96	## Step 5: Improve this skill	COMMENT
LOW	…/scheduling/workload-rebalancer/workload-rebalancer.md	291	#### Step 2: Controller listens new API resource and do the rescheduling work.	COMMENT
LOW	…/scheduling/workload-rebalancer/workload-rebalancer.md	356	#### Step 3: check the status of WorkloadRebalancer.	COMMENT
LOW	…ls/scheduling/binding-preemption/binding-preemption.md	356	// Step 1: Normal cluster selection (with capacity check)	COMMENT
LOW	…ls/scheduling/binding-preemption/binding-preemption.md	372	// Step 2: Assign replicas	COMMENT
LOW	…ls/scheduling/binding-preemption/binding-preemption.md	548	// Step 1: Remove ALL candidate pods from cloned snapshot	COMMENT
LOW	…ls/scheduling/binding-preemption/binding-preemption.md	558	// Step 2: Reprieve in given order (candidates arrive sorted by scheduler)	COMMENT
LOW	…ct-resolution/dependency-policy-conflict-resolution.md	142	### Step 1: Create ConfigMap and Deployments	COMMENT
LOW	…ct-resolution/dependency-policy-conflict-resolution.md	223	### Step 2: Create PropagationPolicies with conflicting fields	COMMENT
LOW	…ct-resolution/dependency-policy-conflict-resolution.md	297	### Step 3: Verify conflict detection and resolution	COMMENT
LOW⚡	pkg/controllers/cluster/cluster_controller.go	453	// Step 1: Get the last cluster heath from `clusterHealthMap`.	COMMENT
LOW⚡	pkg/controllers/cluster/cluster_controller.go	459	// Step 2: Get the cluster ready condition.	COMMENT
LOW⚡	pkg/controllers/cluster/cluster_controller.go	487	// Step 3: Get the last condition and lease from `clusterHealth`.	COMMENT
LOW⚡	pkg/controllers/cluster/cluster_controller.go	495	// Step 4: Update the clusterHealth if necessary.	COMMENT
LOW	pkg/controllers/cluster/cluster_controller.go	524	// Step 5: Check whether the probe timestamp has timed out.	COMMENT

Self-Referential Comments7 hits · 21 pts

Severity	File	Line	Snippet	Context
MEDIUM	artifacts/deploy/bootstrap-token-configuration.yaml	16	# Define a role with permission to get the cluster-info configmap	COMMENT
MEDIUM	artifacts/deploy/bootstrap-token-configuration.yaml	72	# Define a ClusterRole with permissions to automatically approve the agent CSRs when the agentcsrapproving controller is	COMMENT
MEDIUM	artifacts/deploy/bootstrap-token-configuration.yaml	108	# Define a ClusterRole with permissions to automatically approve the agent CSRs	COMMENT
MEDIUM	pkg/estimator/service/mockery.yaml	2	# This file defines which interfaces to mock and their output settings	COMMENT
MEDIUM	pkg/karmadactl/token/token.go	64	# Create a token and print the full '%[1]s register' flag needed to join the cluster using the token.	COMMENT
MEDIUM	pkg/karmadactl/create/create.go	40	# Create a pod using the data in pod.json	COMMENT
MEDIUM	pkg/karmadactl/create/create.go	43	# Create a pod based on the JSON passed into stdin	COMMENT

Excessive Try-Catch Wrapping6 hits · 11 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ills/generating-release-notes/scripts/fetch_pr_info.py	243	print("Error: --repo must use owner/name format", file=sys.stderr)	CODE
MEDIUM	…ills/generating-release-notes/scripts/fetch_pr_info.py	248	print("Error: GITHUB_TOKEN is not set", file=sys.stderr)	CODE
MEDIUM	hack/performance/visualize-metrics.py	24	print("Error: matplotlib is not installed. Please install it using 'pip install matplotlib'")	CODE
LOW	hack/performance/visualize-metrics.py	44	except Exception as e:	CODE
MEDIUM	hack/performance/visualize-metrics.py	45	print(f"Error loading {filepath}: {e}")	CODE
MEDIUM	hack/performance/visualize-metrics.py	40	def load_json(filepath):	CODE

Verbosity Indicators5 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW⚡	pkg/controllers/cluster/cluster_controller.go	453	// Step 1: Get the last cluster heath from `clusterHealthMap`.	COMMENT
LOW⚡	pkg/controllers/cluster/cluster_controller.go	459	// Step 2: Get the cluster ready condition.	COMMENT
LOW⚡	pkg/controllers/cluster/cluster_controller.go	487	// Step 3: Get the last condition and lease from `clusterHealth`.	COMMENT
LOW⚡	pkg/controllers/cluster/cluster_controller.go	495	// Step 4: Update the clusterHealth if necessary.	COMMENT
LOW	pkg/controllers/cluster/cluster_controller.go	524	// Step 5: Check whether the probe timestamp has timed out.	COMMENT

Hyper-Verbose Identifiers6 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	…ills/generating-release-notes/scripts/fetch_pr_info.py	142	def extract_user_facing_change(pr_body):	CODE
LOW	…ills/generating-release-notes/scripts/fetch_pr_info.py	167	def extract_pr_kind_from_labels(labels):	CODE
LOW	…ills/generating-release-notes/scripts/fetch_pr_info.py	179	def extract_pr_kind_from_body(pr_body):	CODE
LOW	hack/performance/visualize-metrics.py	247	def plot_workqueue_count_group(ax, baseline, target, base_path):	CODE
LOW	…ustomizations/ray.io/v1/RayService/customizations.yaml	302	local function extractDependenciesFromPodSpec(podSpec)	CODE
LOW	…rcecustomizations/ray.io/v1/RayJob/customizations.yaml	190	local function extractDependenciesFromPodSpec(podSpec)	CODE

Example Usage Blocks4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	hack/update-command-line-flags.sh	18	# Usage:	COMMENT
LOW	hack/build.sh	25	# Usage:	COMMENT
LOW	hack/util.sh	554	# Usage:	COMMENT
LOW	hack/docker.sh	26	# Usage:	COMMENT

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	…s/proposals/remediation/cluster-status-based-remedy.md	18	# Cluster status-based policy orchestration solutions	COMMENT

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	pkg/controllers/cluster/taint_manager.go	423	// Therefore, in order to make the method more robust, add the empty judgement.	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	hack/run-e2e.sh	88	# Check if Karmada components have restarted, if any has, it means that OOM or panic has occurred	COMMENT

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	hack/performance/visualize-metrics.py	48		CODE

karmada-io/karmada

Open-Source Code Quality, Security and Technical Debt Review