3.2

Adjusted Signal

3.2

Raw Pattern Score

100%

Time Factor

—

Last Push

—

Stars

—

Language

85.9K

Lines of Code

173

Files

255

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 11.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 231 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 4 finding(s).

Agent Over-Engineering Ratio 12.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 210 finding(s).

PR Review Velocity Impact 16.1/100 · LOW

Which changes need focused human review? 255 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 23LOW 232

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 255 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers190 hits · 171 pts

Severity	File	Line	Snippet	Context
LOW	test/server.test.js	48	function normalizeCssForAssertions(css) {	CODE
LOW	test/server.test.js	4306	async function openShutdownBroadcastServer() {	CODE
LOW	test/cli-output.test.js	92	function assertObservablePollWakePath(text) {	CODE
LOW	test/cli-output.test.js	1209	function parseSuggestedShareCommand(text) {	CODE
LOW	test/cli-agent-reply.test.js	26	function assertConciseFirstGuidance(text) {	CODE
LOW	test/cli-agent-reply.test.js	44	function assertStructuredAgentHtml(html) {	CODE
LOW	test/release-ci-exclusions.test.js	145	function pullRequestFilterCoverage(pr) {	CODE
LOW	test/chrome-client-queue.test.js	1756	async function exhaustOneBeginLoadAttempt(chrome) {	CODE
LOW	test/chrome-client-queue.test.js	6277	async function initializeInlineWhiteboard(chrome, token = "inline-channel") {	CODE
LOW	test/chrome-client-queue.test.js	9116	async function whiteboardInitWithLibraries({ librariesResponse, sourcesVersion }) {	CODE
LOW	test/mobile-conversation-sheet.browser.test.js	187	function assertPopulatedComposerUsable(g) {	CODE
LOW	src/session-store.js	1075	function normalizeStoredArtifactLoad(stored) {	CODE
LOW	src/session-store.js	1135	function normalizeArtifactFailures(failures) {	CODE
LOW⚡	src/export-bundle.js	318	function isRawTextElementForNamespace(tagName, elementNamespace) {	CODE
LOW⚡	src/export-bundle.js	323	async function transformInertContentElement(token, body, closeTag, baseDir, ctx) {	CODE
LOW⚡	src/export-bundle.js	329	async function transformPlaintextElement(token, body, baseDir, ctx) {	CODE
LOW⚡	src/export-bundle.js	2897	function findInlineModuleImportRefs(source) {	CODE
LOW⚡	src/export-bundle.js	2901	function findInlineDynamicImportRefs(source) {	CODE
LOW⚡	src/export-bundle.js	2907	function findInlineModuleImportRefTokens(source) {	CODE
LOW	src/export-bundle.js	265	function isEffectiveSelfClosingTag(tagName, selfClosing, openStack = [], elementNamespace = null) {	CODE
LOW	src/export-bundle.js	428	async function transformUnterminatedRawTextElement(token, body, baseDir, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	472	function transformInertRawTextElement(token, body, closeTag, baseDir, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	497	function scrubRawTextBodyWithoutInlining(tagName, attrs, body, baseDir, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	601	async function inlineRenderResourceAttrs(tagName, attrs, baseDir, ctx) {	CODE
LOW	src/export-bundle.js	688	function hasStylesheetBehaviorAttrs(attrs) {	CODE
LOW	src/export-bundle.js	692	function scrubGeneratedHtmlAttrValue(value, ctx) {	CODE
LOW	src/export-bundle.js	888	function isSrcsetCandidateSeparator(value, commaIndex) {	CODE
LOW	src/export-bundle.js	1044	function warnExternalizedCssImport(item, baseDir, ctx, depth, importIndex, failureIndex, failureCause, classification) {	CODE
LOW	src/export-bundle.js	1250	function scrubCssRefsWithoutInlining(css, baseDir, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	1254	function scrubCssRefsWithoutInliningInner(css, baseDir, ctx, options) {	CODE
LOW	src/export-bundle.js	1350	function scrubCssImageSetArgsWithoutInlining(args, baseDir, ctx, options) {	CODE
LOW	src/export-bundle.js	1394	function scrubCssRefWithoutInlining(ref, baseDir, ctx, options) {	CODE
LOW	src/export-bundle.js	1421	function shouldWarnRedactedLocalRefAsUnresolved(options = {}) {	CODE
LOW	src/export-bundle.js	1523	async function rewriteCssStringUrlOperand(ref, baseDir, ctx, outputBaseDir, options = {}) {	CODE
LOW	src/export-bundle.js	1703	function parseCssConditionalAtRuleBlock(css, index) {	CODE
LOW	src/export-bundle.js	1834	function scrubFileUrlsInCommentBody(text, ctx) {	CODE
LOW	src/export-bundle.js	1870	function scrubClassicScriptFileUrlComments(source, ctx) {	CODE
LOW	src/export-bundle.js	1942	function isJsHtmlCloseCommentStart(input, index) {	CODE
LOW	src/export-bundle.js	1979	function findCssPreludeStatementEnd(css, index) {	CODE
LOW	src/export-bundle.js	2013	function skipCssWhitespaceAndComments(css, index) {	CODE
LOW	src/export-bundle.js	2041	function hasCssIdentifierBoundaryBefore(css, index) {	CODE
LOW	src/export-bundle.js	2050	function startsUnsupportedCssImportTail(tail) {	CODE
LOW	src/export-bundle.js	2242	function findFirstDocumentBaseHref(html) {	CODE
LOW	src/export-bundle.js	2315	function rootDirectoryFromBasePath(ref) {	CODE
LOW	src/export-bundle.js	2377	function resolveLocalPathPreservingTrailingSlash(baseDir, localPath) {	CODE
LOW	src/export-bundle.js	2388	function unresolvedDescriptorWarning(descriptor, ref) {	CODE
LOW	src/export-bundle.js	2438	function sanitizeSvgTextForDataUri(svg, baseDir, ctx) {	CODE
LOW	src/export-bundle.js	2445	function warnUnsupportedScriptTiming(ref, baseDir, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	2523	function warnUnterminatedScriptSrc(ref, baseDir, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	2536	function warnUnsupportedScriptType(ref, baseDir, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	2549	function warnUnsupportedStylesheetType(ref, baseDir, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	2562	function scrubUnsupportedStyleElementBody(css, baseDir, ctx) {	CODE
LOW	src/export-bundle.js	2693	function warnClassicScriptDynamicImports(body, baseDir, ctx) {	CODE
LOW	src/export-bundle.js	2701	function redactInlineModuleFileRefs(body, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	2718	function warnInlineImportMapLocalRefs(body, baseDir, ctx) {	CODE
LOW	src/export-bundle.js	2729	function redactInlineImportMapFileRefs(body, ctx, options = {}) {	CODE
LOW	src/export-bundle.js	2779	function pushInlineModuleImportWarning(ctx, ref) {	CODE
LOW	src/export-bundle.js	2787	function pushInlineImportMapLocalRefWarning(ctx, ref) {	CODE
LOW	src/export-bundle.js	2952	function collectImportMapAddressRefs(imports, refs, seen) {	CODE
LOW	src/export-bundle.js	3062	function skipJsWhitespaceAndComments(source, index) {	CODE
130 more matches not shown…

Decorative Section Separators20 hits · 60 pts

Severity	File	Line	Snippet	Context
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	1520	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	1530	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	1671	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	1683	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	1973	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	1975	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	2518	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	2521	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	2850	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	2852	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	131	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	141	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	250	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	262	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	499	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	501	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	823	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	826	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	956	// ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	958	// ─────────────────────────────────────────────────────────────	COMMENT

Over-Commented Block38 hits · 35 pts

Severity	File	Line	Snippet	Context
LOW	.agents/skills/lavish-design/_ds_bundle.js	1441	//	COMMENT
LOW	.agents/skills/lavish-design/_ds_bundle.js	1481	// Below ~4ch of label room: hide the label entirely, and drop the grip to	COMMENT
LOW	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	1	// @ds-adherence-ignore -- omelette starter scaffold (raw elements/hex/px by design)	COMMENT
LOW	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	101	// The header uses transform:scale (out-of-flow, so layout impact doesn't	COMMENT
LOW	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	121	// DCSection/DCArtboard children from the type-based walks below.	COMMENT
LOW	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	241	<DCCtx.Provider value={api}>	COMMENT
LOW	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	421	// Host's [readyGen] reset asks whether a canvas is present; it	COMMENT
LOW	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	561	// Per-artboard export (kind: 'png' \| 'html'). Both paths share the same	COMMENT
LOW	.github/workflows/no-mistakes-required.yml	41	# - github-actions[bot] opens PRs via GITHUB_TOKEN	COMMENT
LOW	src/session-store.js	41		COMMENT
LOW	src/session-store.js	141	// it: only a newer `beginArtifactLoad` retires a load.	COMMENT
LOW	src/session-store.js	1041	"request_sequence",	COMMENT
LOW	src/export-bundle.js	1	import { readFile, realpath, stat } from "node:fs/promises";	COMMENT
LOW	src/html-app.js	1	// Hosted sharing transport: publish a self-contained HTML page to ht-ml.app	COMMENT
LOW	src/server.js	121	const LOOPBACK_OWNER_PROBE_TIMEOUT_MS = 500;	COMMENT
LOW	src/server.js	261	// A detached server should not live forever. When no browser chrome or agent poll	COMMENT
LOW	src/server.js	561	const rest = { ...result };	COMMENT
LOW	src/server.js	641	// Origin and Host, so the two still match. The robust defense is a Host-header	COMMENT
LOW	src/server.js	741		COMMENT
LOW	src/server.js	1881	}	COMMENT
LOW	src/attachment-store.js	1	import crypto from "node:crypto";	COMMENT
LOW	src/attachment-store.js	21	// these three raster formats are accepted for v1 (SVG is an active-content	COMMENT
LOW	src/attachment-store.js	41	// the total exceed the cap (admission still refuses new uploads with 507 when only	COMMENT
LOW	src/attachment-store.js	61	// Round a file's logical size up to whole allocation blocks (min one block for any	COMMENT
LOW	src/attachment-store.js	341	}	COMMENT
LOW	src/attachment-store.js	441	} catch {	COMMENT
LOW	src/chrome-client.js	281	const ARTIFACT_SILENCE_PROBE_MS = 8000;	COMMENT
LOW	src/chrome-client.js	381	// The in-memory state still works if browser storage is unavailable.	COMMENT
LOW	src/chrome-client.js	2821	// layout-issues drawer uses, and only when the reader asks for it.	COMMENT
LOW	src/artifact-sdk.js	481	let ignoreNextClick = false;	COMMENT
LOW	src/artifact-sdk.js	501	// it in add() BEFORE reading the file is what stops a multi-GB drop from being	COMMENT
LOW	src/whiteboard-frame.js	1	/* global document, window, FileReader, location */	COMMENT
LOW	src/mermaid-node.js	1	/* global document */	COMMENT
LOW	src/async-mutex.js	1	// A minimal promise-chain mutex. `SessionStore` owns one instance and serializes	COMMENT
LOW	src/chat-messages.js	1	// The conversation transcript's two shapes: what a prompt becomes when it enters `session.chat`	COMMENT
LOW	src/artifact-revisions.js	1	// Helpers for reading an artifact's agent-declared revision registry.	COMMENT
LOW	src/artifact-revisions.js	41	const palette = revisionPalette();	COMMENT
LOW	src/mermaid-source.js	1	import crypto from "node:crypto";	COMMENT

Modern AI Meta-Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	.agents/skills/lavish-design/_ds_bundle.js	1431	// @ds-adherence-ignore -- omelette starter scaffold (raw elements/hex/px by design)	COMMENT
MEDIUM	…/skills/lavish-design/ui_kits/editor/design-canvas.jsx	1	// @ds-adherence-ignore -- omelette starter scaffold (raw elements/hex/px by design)	COMMENT

Fake / Example Data4 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	test/whiteboard-libraries.test.js	77	[square("c"), text("Mobile", 16), text("Lorem ipsum dolor sit amet,\nconsectetur adipiscing elit", 2.5)],	CODE
LOW	test/whiteboard-libraries.test.js	77	[square("c"), text("Mobile", 16), text("Lorem ipsum dolor sit amet,\nconsectetur adipiscing elit", 2.5)],	CODE
LOW	lavish-editor-marketing/index.html	1019	<span class="placeholder">Write a message for the agent...</span>	CODE
LOW	src/playbooks.js	253	const label = el.name \|\| el.labels?.[0]?.textContent?.trim() \|\| el.getAttribute('aria-label')?.trim() \|\| el.getA	CODE

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	src/server.js	641	// Origin and Host, so the two still match. The robust defense is a Host-header	COMMENT

kunchenguid/lavish-axi

Open-Source Code Quality, Security and Technical Debt Review