1.3

Adjusted Signal

1.3

Raw Pattern Score

100%

Time Factor

2026-10-26

Last Push

6.8K

Stars

Language

80.8K

Lines of Code

419

Files

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 73 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 1.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 10 finding(s).

PR Review Velocity Impact 6.0/100 · LOW

Which changes need focused human review? 81 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 9LOW 72

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 81 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block68 hits · 68 pts

Severity	File	Line	Snippet	Context
LOW	database/dbcore/dbcore.go	441	if err := migrations.Run(migrations.Context{DB: instance}); err != nil {	COMMENT
LOW	web/connection/safe_conn.go	41		COMMENT
LOW	web/api/admin/theme.go	361		COMMENT
LOW	web/api/admin/theme.go	461	// 不保存下载链接，更新后由主题覆盖	COMMENT
LOW	web/api/admin/theme.go	581	// updatedConfigData, err := json.MarshalIndent(updatedThemeInfo, "", " ")	COMMENT
LOW	internal/plugin/server.go	41	// makes unmatched paths fall back to	COMMENT
LOW	internal/plugin/server.go	61	// carrying code/message/data	COMMENT
LOW	internal/plugin/plugin.go	1	// Package plugin manages Komari plugins: ZIP packages with a	COMMENT
LOW	internal/metricstore/store_migration.go	21	//	COMMENT
LOW	pkg/jsruntime/runtime.go	61	// is confined to BaseDir, or the current directory when BaseDir is empty.	COMMENT
LOW	pkg/jsruntime/runtime.go	81	AllowExec bool	COMMENT
LOW	pkg/rpc/principal.go	21	// Principal 调用主体,携带身份信息和能力。	COMMENT
LOW	pkg/metric/config.go	21	//	COMMENT
LOW	pkg/metric/config.go	41	//	COMMENT
LOW	pkg/metric/config.go	61	// RollupPolicy configures downsampling tiers and tiered retention. Exact raw	COMMENT
LOW	pkg/metric/config.go	81	//	COMMENT
LOW	pkg/metric/config.go	101	JournalSizeLimitBytes int64	COMMENT
LOW	pkg/metric/config.go	121	const (	COMMENT
LOW	pkg/metric/config.go	241	// SQLite serializes writes, so a single connection is the safe default and	COMMENT
LOW	pkg/metric/config.go	401		COMMENT
LOW	pkg/metric/aggregate.go	201	return percentile(points, frac), nil	COMMENT
LOW	pkg/metric/rollup.go	1	package metric	COMMENT
LOW	pkg/metric/rollup.go	21	//	COMMENT
LOW	pkg/metric/rollup.go	41	// RawRetention is retained for configuration compatibility. Exact samples	COMMENT
LOW	pkg/metric/rollup.go	141	}	COMMENT
LOW	pkg/metric/rollup.go	161	sum float64	COMMENT
LOW	pkg/metric/rollup.go	181	firstTS int64	COMMENT
LOW	pkg/metric/store.go	21	//	COMMENT
LOW	pkg/metric/store.go	41	//	COMMENT
LOW	pkg/metric/store.go	61	// with respect to other writers.	COMMENT
LOW	pkg/metric/store.go	81	coarse map[coarseRollupKey]*coarseRollup	COMMENT
LOW	pkg/metric/store.go	981	if retentionDays > 0 {	COMMENT
LOW	pkg/metric/store.go	1521	// isTimeSorted reports whether points are already time sorted.	COMMENT
LOW	pkg/metric/types.go	21	//	COMMENT
LOW	pkg/metric/types.go	41	//	COMMENT
LOW	pkg/metric/types.go	61	//	COMMENT
LOW	pkg/metric/types.go	81	//	COMMENT
LOW	pkg/metric/types.go	101	//	COMMENT
LOW	pkg/metric/types.go	121	//	COMMENT
LOW	pkg/metric/types.go	141	Type MetricType `json:"type"`	COMMENT
LOW	pkg/metric/types.go	201	// MetricName names the metric this sample belongs to.	COMMENT
LOW	pkg/metric/types.go	261	//	COMMENT
LOW	pkg/metric/types.go	281	//	COMMENT
LOW	pkg/metric/types.go	461	//	COMMENT
LOW	pkg/metric/types.go	481	// 默认值保留历史 rollup 行为：把匹配到的序列合并进同一个输出桶。	COMMENT
LOW	pkg/metric/types.go	521	}	COMMENT
LOW	pkg/metric/types.go	541	EntityID string `json:"entity_id,omitempty"`	COMMENT
LOW	pkg/metric/types.go	561	//	COMMENT
LOW	pkg/metric/types.go	581	//	COMMENT
LOW	pkg/metric/types.go	601	//	COMMENT
LOW	pkg/metric/rollup_boundary_test.go	1	package metric	COMMENT
LOW	pkg/metric/rollup_boundary_test.go	101	// TestSeriesHybridMergesStraddlingBucket verifies a query output bucket that	COMMENT
LOW	pkg/metric/dialect.go	1	package metric	COMMENT
LOW	pkg/metric/dialect.go	21	jsonPlaceholder(n int) string	COMMENT
LOW	pkg/metric/dialect.go	41		COMMENT
LOW	pkg/metric/dialect.go	81	// sqliteDialect implements SQL rendering for SQLite.	COMMENT
LOW	pkg/metric/dialect.go	121		COMMENT
LOW	pkg/metric/dialect.go	161	}	COMMENT
LOW	pkg/metric/dialect.go	241	// sqlJSONPathQuoted builds a quoted JSON path member access ($."key") for the	COMMENT
LOW	pkg/metric/tdigest.go	21	// is flat) while centroids in the tails stay small (high resolution where	COMMENT
8 more matches not shown…

Decorative Section Separators8 hits · 27 pts

Severity	File	Line	Snippet	Context
MEDIUM	install-komari.sh	74	# ==========================================================	COMMENT
MEDIUM	install-komari.sh	76	# ==========================================================	COMMENT
MEDIUM	install-komari.sh	557	# ==========================================================	COMMENT
MEDIUM	install-komari.sh	559	# ==========================================================	COMMENT
MEDIUM⚡	install-komari.sh	851	# ==========================================================	COMMENT
MEDIUM⚡	install-komari.sh	853	# ==========================================================	COMMENT
MEDIUM	install-komari.sh	1095	# ==========================================================	COMMENT
MEDIUM	install-komari.sh	1097	# ==========================================================	COMMENT

Redundant / Tautological Comments2 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW⚡	install-komari.sh	855	# Check if running as root	COMMENT
LOW	install-komari.sh	898	# Check if Komari is already installed	COMMENT

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/workflows/release.yml	140	# Define the binary name for upload	COMMENT

Hyper-Verbose Identifiers2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	.github/workflows/generate-release-notes.yml	254	function appendCommitsToGeneratedNotes(generatedNotes, baseRef, tag, comparison) {	CODE
LOW	.github/workflows/generate-release-notes.yml	459	async function buildReleaseSummarySection({ tag, release, comparisonBase, whatsChangedSection, comparison, w	CODE

komari-monitor/komari

Open-Source Code Quality, Security and Technical Debt Review