3.7

Adjusted Signal

3.7

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

18.8K

Stars

Jinja

Language

52.1K

Lines of Code

832

Files

180

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 16.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 172 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 4 finding(s).

Agent Over-Engineering Ratio 0.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 4 finding(s).

PR Review Velocity Impact 16.7/100 · LOW

Which changes need focused human review? 180 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 5LOW 175

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 180 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block154 hits · 154 pts

Severity	File	Line	Snippet	Context
LOW	tests/scripts/vagrant-install.sh	1	#!/bin/bash	COMMENT
LOW	tests/scripts/vagrant-install.sh	21	# echo \	COMMENT
LOW	tests/scripts/vagrant-install.sh	41	PYTHONDONTWRITEBYTECODE=1	COMMENT
LOW	tests/files/custom_cni/cilium.yaml	41	# nodes by setting how they are stored. The options are "crd", "kvstore" or	COMMENT
LOW	tests/files/custom_cni/cilium.yaml	81	# address.	COMMENT
LOW	tests/files/custom_cni/cilium.yaml	101		COMMENT
LOW	tests/files/custom_cni/cilium.yaml	121	bpf-lb-algorithm-annotation: "false"	COMMENT
LOW	tests/files/custom_cni/cilium.yaml	141	#	COMMENT
LOW	…es/kubernetes-apps/csi_driver/cinder/defaults/main.yml	21	cinder_domain_id: "{{ lookup('env', 'OS_USER_DOMAIN_ID') }}"	COMMENT
LOW	roles/kubernetes-apps/ansible/defaults/main.yml	41	# local	COMMENT
LOW	roles/kubernetes-apps/ansible/defaults/main.yml	81	# dns_autoscaler_extra_tolerations: [{effect: NoSchedule, operator: "Exists"}]	COMMENT
LOW	roles/network_plugin/flannel/defaults/main.yml	1	---	COMMENT
LOW	roles/network_plugin/cilium/defaults/main.yml	41	# Optional features	COMMENT
LOW	roles/network_plugin/cilium/defaults/main.yml	61	# Auto direct nodes routes can be used to advertise pods routes in your cluster	COMMENT
LOW	roles/network_plugin/cilium/defaults/main.yml	161	includeFilters: []	COMMENT
LOW	roles/network_plugin/cilium/defaults/main.yml	181		COMMENT
LOW	roles/network_plugin/cilium/defaults/main.yml	241		COMMENT
LOW	roles/network_plugin/cilium/defaults/main.yml	261	cilium_bpf_map_dynamic_size_ratio: "0.0025"	COMMENT
LOW	roles/kubespray_defaults/vars/main/main.yml	101	#	COMMENT
LOW	roles/kubespray_defaults/defaults/main/download.yml	1	---	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	221	# Deploy cilium even if kube_network_plugin is not cilium.	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	241	# https://docs.cilium.io/en/stable/concepts/networking/ipam/	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	261	# - kube_pods_subnet: 10.233.64.0/18	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	281	# This is only used if ipv6_stack is set to true	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	321	kube_profiling: false	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	401	## A list of insecure docker registries (IP address or domain name), for example	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	481		COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	521		COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	541	kube_apiserver_authentication_config_jwt: []	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	561		COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	581	# type: KubeConfigFile	COMMENT
LOW	roles/kubespray_defaults/defaults/main/main.yml	621	# - { name: vm.swappiness, value: 10 }	COMMENT
LOW	roles/bootstrap_os/defaults/main.yml	1	---	COMMENT
LOW	roles/etcd_defaults/defaults/main.yml	41		COMMENT
LOW	roles/etcd_defaults/defaults/main.yml	81	# Maximum number of snapshot files to retain (0 is unlimited)	COMMENT
LOW	roles/etcd_defaults/defaults/main.yml	101	# - TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA	COMMENT
LOW	roles/kubernetes/preinstall/defaults/main.yml	41	# Specify whether to filter interfaces	COMMENT
LOW	roles/kubernetes/node/defaults/main.yml	101	# Uncomment if you need to enable deprecated runtimes	COMMENT
LOW	roles/kubernetes/node/defaults/main.yml	141		COMMENT
LOW	roles/kubernetes/node/defaults/main.yml	161	# - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256	COMMENT
LOW	roles/kubernetes/kubeadm_common/defaults/main.yml	1	---	COMMENT
LOW	…/kubernetes/control-plane/defaults/main/kube-proxy.yml	61	kube_proxy_min_sync_period: 0s	COMMENT
LOW	roles/kubernetes/control-plane/defaults/main/main.yml	61	# Scale down coredns replicas to 0 if not using coredns dns_mode	COMMENT
LOW	roles/kubernetes/control-plane/defaults/main/main.yml	181	## To use OpenID you have to deploy additional an OpenID Provider (e.g Dex, Keycloak, ...)	COMMENT
LOW	roles/kubernetes/control-plane/defaults/main/main.yml	221		COMMENT
LOW	roles/kubernetes/control-plane/defaults/main/main.yml	241	# - TLS_ECDHE_RSA_WITH_RC4_128_SHA	COMMENT
LOW	roles/container-engine/containerd/defaults/main.yml	81	containerd_cfg_dir: /etc/containerd	COMMENT
LOW	roles/container-engine/cri-o/defaults/main.yml	21	# mirrors:	COMMENT
LOW	docs/calico_peer_example/new-york.yml	1	# ---	COMMENT
LOW	docs/calico_peer_example/paris.yml	1	# ---	COMMENT
LOW	contrib/terraform/terraform.py	1	#!/usr/bin/env python3	COMMENT
LOW	inventory/sample/inventory.ini	1	# This inventory describe a HA typology with stacked etcd (== same nodes as control plane)	COMMENT
LOW	inventory/sample/group_vars/kube_control_plane.yml	1	# Reservation for control plane kubernetes components	COMMENT
LOW	inventory/sample/group_vars/all/azure.yml	1	## When azure is used, you need to also set the following variables.	COMMENT
LOW	inventory/sample/group_vars/all/azure.yml	21	## Azure Disk CSI credentials and parameters	COMMENT
LOW	inventory/sample/group_vars/all/cri-o.yml	1	# Registries defined within cri-o.	COMMENT
LOW	inventory/sample/group_vars/all/hcloud.yml	1	## Values for the external Hcloud Cloud Controller	COMMENT
LOW	inventory/sample/group_vars/all/hcloud.yml	21	# load_balancers_enabled:	COMMENT
LOW	inventory/sample/group_vars/all/containerd.yml	1	---	COMMENT
LOW	inventory/sample/group_vars/all/containerd.yml	21	# options:	COMMENT
94 more matches not shown…

Self-Referential Comments4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	contrib/terraform/aws/modules/nlb/main.tf	1	# Create a new AWS NLB for K8S API	COMMENT
MEDIUM	contrib/terraform/aws/modules/nlb/main.tf	14	# Create a new AWS NLB Instance Target Group	COMMENT
MEDIUM	contrib/terraform/aws/modules/nlb/main.tf	31	# Create a new AWS NLB Listener listen to target group	COMMENT
MEDIUM	…b/terraform/upcloud/modules/kubernetes-cluster/main.tf	2	# Create a list of all disks to create	COMMENT

Redundant / Tautological Comments6 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	roles/kubespray_defaults/defaults/main/main.yml	9	# Check if access_ip responds to ping. Set false if your firewall blocks ICMP.	COMMENT
LOW	contrib/aws_inventory/kubespray-aws-inventory.py	21	##Check if VPC_VISIBILITY is set, if not default to private	COMMENT
LOW	inventory/sample/group_vars/all/all.yml	93	## Set true to download and cache container	COMMENT
LOW	inventory/sample/group_vars/all/all.yml	111	## Check if access_ip responds to ping. Set false if your firewall blocks ICMP.	COMMENT
LOW	inventory/sample/group_vars/all/etcd.yml	15	# Set this to docker if you are using container_manager: docker	COMMENT
LOW	scripts/gen_docs_sidebar.sh	16	# Check if it is a directory	COMMENT

Deep Nesting7 hits · 7 pts

Severity	File	Line	Context
LOW	plugins/modules/kube.py	310	CODE
LOW	tests/scripts/md-table/main.py	55	CODE
LOW	library/kube.py	310	CODE
LOW	contrib/terraform/terraform.py	41	CODE
LOW	contrib/terraform/terraform.py	62	CODE
LOW	…nent_hash_update/src/component_hash_update/download.py	58	CODE
LOW	scripts/openstack-cleanup/main.py	27	CODE

Unused Imports4 hits · 4 pts

Severity	File	Line	Context
LOW	plugins/modules/kube.py	363	CODE
LOW	library/kube.py	363	CODE
LOW	contrib/aws_inventory/kubespray-aws-inventory.py	3	CODE
LOW	scripts/openstack-cleanup/main.py	6	CODE

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/files/custom_cni/cilium.yaml	52	# for seamless migrations from the kvstore mode to the crd mode. Consult the	COMMENT

Excessive Try-Catch Wrapping3 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	plugins/modules/kube.py	160	except Exception as exc:	STRING
LOW	library/kube.py	160	except Exception as exc:	STRING
LOW	scripts/openstack-cleanup/main.py	50	except Exception as ex:	CODE

Modern Structural Boilerplate1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	…nent_hash_update/src/component_hash_update/download.py	30	logger = logging.getLogger(__name__)	CODE

kubernetes-sigs/kubespray

Open-Source Code Quality, Security and Technical Debt Review