1.3

Adjusted Signal

1.3

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

9.3K

Stars

TypeScript

Language

169.7K

Lines of Code

1.1K

Files

183

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 163 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.6/100 · LOW

Are imports declared and package/API names verified? 20 finding(s).

Agent Over-Engineering Ratio 4.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 157 finding(s).

PR Review Velocity Impact 6.2/100 · LOW

Which changes need focused human review? 183 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 3MEDIUM 1LOW 177

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 183 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers157 hits · 158 pts

Severity	File	Line	Snippet	Context
LOW	tests/integration/media-download.integration.test.ts	184	async function assertDependencyPreconditions(): Promise<void> {	CODE
LOW	tests/integration/media-download.integration.test.ts	272	async function createTemporaryLayoutAndBuildCore(): Promise<void> {	CODE
LOW	tests/e2e/extension/capture-and-download.spec.ts	211	async function findOwnedChromiumIdentity(	CODE
LOW	tests/e2e/extension/capture-and-download.spec.ts	336	async function terminateOwnedProcessTree(	CODE
LOW	tests/e2e/extension/capture-and-download.spec.ts	401	async function waitForSuccessfulDownload(	CODE
LOW	tests/e2e/extension/capture-and-download.spec.ts	678	async function clickAndCaptureActionPopup(	CODE
LOW	tests/e2e/extension/capture-and-download.spec.ts	871	async function expectSinglePageActionSource(	CODE
LOW	tests/e2e/support/artifacts.ts	127	async function verifiedRetainedVideoPath(	CODE
LOW	tests/e2e/support/artifacts.ts	151	async function copyRetainedVideoNoFollow(	CODE
LOW	tests/e2e/support/artifacts.ts	263	export async function startManualContextArtifacts(	CODE
LOW	tests/e2e/support/artifacts.ts	385	export async function finalizeManualContextArtifacts(	CODE
LOW	tests/e2e/support/electron-process.ts	143	export async function terminateOwnedProcessTree(	CODE
LOW	tests/e2e/support/process.ts	452	function isUnquotedApiKeyDelimiter(value: string): boolean {	CODE
LOW	tests/e2e/support/process.ts	456	function isProxyAuthorityDelimiter(value: string): boolean {	CODE
LOW	tests/e2e/support/fake-dependencies.ts	21	export function fakeBBDownExecutableSource(	CODE
LOW	tests/e2e/support/fake-dependencies.ts	51	export async function createFakeBilibiliDependencyLeaf(	CODE
LOW	tests/e2e/support/electron-network.ts	82	export function normalizeElectronCoreOrigin(value: string): string {	CODE
LOW	tests/e2e/support/electron-network.ts	144	export function assertElectronNetworkSnapshot(	CODE
LOW	tests/e2e/support/electron-network.ts	188	export function installElectronNetworkPolicy({	CODE
LOW	tests/e2e/support/electron-network.ts	280	export function tightenElectronNetworkPolicy(	CODE
LOW	tests/e2e/support/electron-network.ts	333	export function readElectronNetworkPolicy(	CODE
LOW	tests/e2e/support/electron-network.ts	349	export async function installElectronNetworkGuard(	CODE
LOW	tests/e2e/support/bilibili-capture-fixture.ts	110	export async function injectControlledBilibiliSource(	CODE
LOW	tests/e2e/support/bilibili-capture-fixture.ts	164	export async function importControlledBilibiliSource(	CODE
LOW	tests/e2e/support/bilibili-capture-fixture.ts	188	export async function openControlledBilibiliPopup(	CODE
LOW	tests/e2e/support/bilibili-capture-fixture.ts	216	export async function captureRealBilibiliImport(	CODE
LOW	tests/e2e/support/bilibili-capture-fixture.ts	246	export function expectNoInvalidDownloadIDRequests(	CODE
LOW	tests/e2e/support/electron-window.ts	8	export async function waitForElectronMainWindow(	CODE
LOW	packages/tooling/src/electron-artifacts/index.test.ts	398	function createWindowsInstallerFixture(	CODE
LOW	packages/tooling/src/electron-artifacts/manifest.ts	53	export function parseUpdaterManifestEntry(	CODE
LOW	packages/tooling/src/core-build/build-args.ts	3	export function createCurrentPlatformBuildArgs(options: {	CODE
LOW	packages/tooling/src/core-build/dev.ts	52	export function createEmbeddedUiBuildPlans(): EmbeddedUiBuildPlan[] {	CODE
LOW	packages/tooling/src/core-build/dev.ts	93	async function buildCurrentPlatformBinary(	CODE
LOW	packages/tooling/src/runtime-deps/integrity.ts	45	export async function dependencyFileMatchesIntegrity(	CODE
LOW	packages/tooling/src/runtime-deps/integrity.ts	59	export async function inspectDependencyFileIntegrity(	CODE
LOW	packages/tooling/src/runtime-deps/integrity.ts	90	export async function assertDependencyFileIntegrity(	CODE
LOW	packages/tooling/src/runtime-deps/provisioner.ts	86	export async function inspectDependencyReadiness({	CODE
LOW	packages/tooling/src/runtime-deps/layout.ts	140	export function manifestDependencyExecutableName(	CODE
LOW	packages/tooling/src/bootstrap/task-doctor.ts	83	export function parsePackageManagerPnpmVersion(	CODE
LOW	packages/tooling/src/bootstrap/task-doctor.ts	90	export function parsePnpmUserAgentVersion(	CODE
LOW	packages/tooling/src/security/container-architecture.ts	3	export function verifyContainerArchitecture(	CODE
LOW	…ooling/src/contracts/documentation-contract-helpers.ts	18	export function migratedPnpmCommandsInCodeBlocks(source: string): string[] {	CODE
LOW	…ooling/src/contracts/documentation-contract-helpers.ts	179	function extractMarkdownCodeBlocks(source: string): CodeBlock[] {	CODE
LOW	…ckages/tooling/src/contracts/taskfile-behavior.test.ts	607	function createRepositoryTaskfileFixture(	CODE
LOW	…ckages/tooling/src/contracts/taskfile-behavior.test.ts	753	function createCleanCloneProductionFixture(	CODE
LOW	…ckages/tooling/src/contracts/taskfile-behavior.test.ts	826	function createNodePrerequisiteFixture(	CODE
LOW	…ckages/tooling/src/contracts/taskfile-contract.test.ts	41	function expectInternalDocsExcluded(patterns: string[] \| undefined): void {	CODE
LOW	…ckages/tooling/src/contracts/taskfile-contract.test.ts	1724	function createDependencyRootFixture(): TaskFixture {	CODE
LOW	…ooling/src/contracts/shell-command-contract-helpers.ts	23	export function migratedPnpmCommandSegments(source: string): string[] {	CODE
LOW	…ooling/src/contracts/shell-command-contract-helpers.ts	213	function skipEnvironmentAssignments(tokens: string[], start: number): number {	CODE
LOW	…kages/tooling/src/contracts/build-env-contract.test.ts	178	function assertNoSecretDefinitions(definitions: string[]): void {	CODE
LOW	packages/tooling/src/release/planning.ts	208	function resolveLockedOfficialCore(	CODE
LOW	packages/tooling/src/release/planning.ts	228	function assertSupportedOfficialPrereleases(	CODE
LOW	packages/tooling/src/release/planning.ts	266	function assertNoDuplicateVersions(versions: readonly string[]): void {	CODE
LOW	…oling/src/verification/verify-isolated-runtime-deps.ts	50	export function assertBBDownExecutableNames(	CODE
LOW	packages/tooling/src/vite/index.ts	12	export function mediaGoBuildMetadataPlugin(	CODE
LOW	packages/tooling/src/github/docker-workflow.ts	56	export function validateDockerWorkflowInputs(	CODE
LOW	packages/tooling/src/github/docker-workflow.ts	168	export function dockerHubCredentialsEnabled(	CODE
LOW	packages/tooling/src/github/docker-workflow.ts	188	export async function verifyPreviewPackagePrivate(	CODE
LOW	packages/tooling/src/github/desktop-workflow.ts	51	export function validateDesktopBuildRequest(	CODE
97 more matches not shown…

Fake / Example Data15 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	.agents/skills/design-taste-frontend-v1/SKILL.md	116	### Content & Data (The "Jane Doe" Effect)	COMMENT
LOW	.agents/skills/design-taste-frontend-v1/SKILL.md	117	* NO Generic Names: "John Doe", "Sarah Chan", or "Jack Su" are banned. Use highly creative, realistic-sounding names	COMMENT
LOW	.agents/skills/imagegen-frontend-mobile/SKILL.md	1075	- lorem ipsum overload	CODE
LOW	.agents/skills/stitch-design-taste/SKILL.md	108	- No generic names ("John Doe", "Acme", "Nexus")	CODE
LOW	.agents/skills/stitch-design-taste/DESIGN.md	114	- No generic names: "John Doe", "Sarah Chan", "Acme", "Nexus", "SmartFlow"	CODE
LOW	.agents/skills/design-taste-frontend/SKILL.md	615	### 9.D Content & Data ("Jane Doe" Effect)	COMMENT
LOW	.agents/skills/design-taste-frontend/SKILL.md	616	* NO generic names. "John Doe", "Sarah Chan", "Jack Su" → use creative, realistic, locale-appropriate names.	COMMENT
LOW⚡	.agents/skills/minimalist-ui/SKILL.md	21	- DO NOT use generic placeholder names like "John Doe", "Acme Corp", or "Lorem Ipsum". Use realistic, contextual content	CODE
LOW⚡	.agents/skills/minimalist-ui/SKILL.md	21	- DO NOT use generic placeholder names like "John Doe", "Acme Corp", or "Lorem Ipsum". Use realistic, contextual content	CODE
LOW⚡	.agents/skills/minimalist-ui/SKILL.md	21	- DO NOT use generic placeholder names like "John Doe", "Acme Corp", or "Lorem Ipsum". Use realistic, contextual content	CODE
LOW⚡	.agents/skills/redesign-existing-projects/SKILL.md	79	- Generic names like "John Doe" or "Jane Smith". Use diverse, realistic-sounding names.	CODE
LOW⚡	.agents/skills/redesign-existing-projects/SKILL.md	81	- Placeholder company names like "Acme Corp", "Nexus", "SmartFlow". Invent contextual, believable brand names.	CODE
LOW⚡	.agents/skills/redesign-existing-projects/SKILL.md	88	- Lorem Ipsum. Never use placeholder latin text. Write real draft copy.	CODE
LOW	.agents/skills/brandkit/SKILL.md	573	- lorem ipsum	CODE
LOW	apps/core/internal/core/downloader_contract_test.go	139	if err := os.WriteFile(binaryPath, []byte("placeholder"), 0o700); err != nil {	CODE

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	apps/electron/src/app.test.ts	203	const listener = mainWindow.window.webContents.on.mock.calls.find(	CODE
CRITICAL	apps/electron/src/app.test.ts	226	const listener = mainWindow.window.webContents.on.mock.calls.find(	CODE

Magic Placeholder Names3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	docs/it/skills.md	44	set mediago url to http://localhost:8899, api key is YOUR_API_KEY	CODE
HIGH	docs/jp/skills.md	44	set mediago url to http://localhost:8899, api key is YOUR_API_KEY	CODE
HIGH	docs/en/skills.md	44	set mediago url to http://localhost:8899, api key is YOUR_API_KEY	CODE

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/plans/2026-08-25-release-channel-versioning-design.md	476	### Release-orchestration unit tests	COMMENT

Over-Commented Block3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	apps/core/cmd/server/main.go	21	// @version 1.0	COMMENT
LOW	apps/core/internal/core/downloader.go	561	path := line[markerIndex+len(ytDLPOutputMarker):]	COMMENT
LOW	apps/core/internal/api/handler/auth.go	81	}	COMMENT

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	tests/media-service/server.ts	159	function handleRequest(	CODE
LOW	packages/mediago-extension/src/background/sniffer.ts	126	async function handleRequest(	CODE

mediago-dev/mediago

Open-Source Code Quality, Security and Technical Debt Review