2.3

Adjusted Signal

2.3

Raw Pattern Score

100%

Time Factor

2026-10-07

Last Push

4.1K

Stars

TypeScript

Language

118.9K

Lines of Code

723

Files

250

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 228 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.8/100 · LOW

Are imports declared and package/API names verified? 19 finding(s).

Agent Over-Engineering Ratio 8.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 224 finding(s).

PR Review Velocity Impact 11.6/100 · LOW

Which changes need focused human review? 250 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 6MEDIUM 6LOW 238

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 250 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers221 hits · 208 pts

Severity	File	Line	Snippet	Context
LOW	astro.config.ts	16	function allowSandboxedThemePreviewAssets(): Plugin {	CODE
LOW	astro.config.ts	63	function optimizeWorkerDependencies(): Plugin {	CODE
LOW	tests/unit/manage-cli/instance-management.test.ts	160	function configurableLocalOwnerRunner(	CODE
LOW	tests/unit/cli/manage.test.ts	111	async function installWorkspaceBinaryFixtures(	CODE
LOW	tests/unit/components/public-search.test.ts	96	"function suppressTriggerFocusUntilCloseSettles()",	CODE
LOW	tests/unit/components/admin-access-settings.test.ts	26	function installSynchronousSetState(app: AccessSettingsApp) {	CODE
LOW	tests/unit/components/admin-subscribe-settings.test.ts	49	function installSynchronousSetState(app: SubscribeSettingsApp) {	CODE
LOW	manage-cli/commands.ts	153	export function workersDevInitializationError(	CODE
LOW	manage-cli/commands.ts	424	function cloudflareAuthorizationMessage(): string {	CODE
LOW	manage-cli/commands.ts	792	function validateUnsafeAdminPasswordFlag(flags: Flags): void {	CODE
LOW	manage-cli/commands.ts	891	async function collectInitialAdminSetupEmail(	CODE
LOW	manage-cli/commands.ts	996	function hasCompletedCloudflareInitialization(	CODE
LOW	manage-cli/commands.ts	1004	function completedCloudflareInitializationMessage(	CODE
LOW	manage-cli/commands.ts	1022	async function resumePendingLoginOrStopInitialization(	CODE
LOW	manage-cli/commands.ts	1040	function completedLocalInitializationMessage(	CODE
LOW	manage-cli/commands.ts	1051	async function markLocalInitializationComplete(	CODE
LOW	manage-cli/commands.ts	1442	export function deploymentVerificationUrl(	CODE
LOW	manage-cli/commands.ts	1462	export function workersAndPagesDashboardUrl(accountId: string): string {	CODE
LOW	manage-cli/commands.ts	1536	export function localAdminAuthDisableNotice(	CODE
LOW	manage-cli/commands.ts	1763	export async function redeployWithAdminAuthMode(	CODE
LOW	manage-cli/commands.ts	1852	export function initializationResourceReuse(input: {	CODE
LOW	manage-cli/commands.ts	1864	export async function updateAndReloadInitializationConfig(	CODE
LOW	manage-cli/commands.ts	2385	export function localAdminAuthSetupNotice(instanceName: string): {	CODE
LOW	manage-cli/commands.ts	2829	function webhookLifecycleDeployCommand(	CODE
LOW	manage-cli/commands.ts	2842	function webhookAuthenticationError(	CODE
LOW	manage-cli/commands.ts	2863	async function verifyWebhookLifecycleAccess(	CODE
LOW	manage-cli/commands.ts	2963	async function cancelPendingWebhookDeliveries(	CODE
LOW	manage-cli/commands.ts	2970	function verifiedWebhookQueueConsumers(	CODE
LOW	manage-cli/commands.ts	2993	async function detachWebhookQueueConsumer(	CODE
LOW	manage-cli/commands.ts	3027	async function disabledWebhookDeploymentIsVerified(	CODE
LOW	manage-cli/commands.ts	3047	async function webhookDisableDeploymentIsDetached(	CODE
LOW	manage-cli/commands.ts	3062	async function enabledWebhookDeploymentIsVerified(	CODE
LOW	manage-cli/commands.ts	3747	async function anonymousPublicRoutesAreAvailable(	CODE
LOW	manage-cli/commands.ts	5606	async function verifiedConnectionIdentity(	CODE
LOW	manage-cli/commands.ts	6109	async function recordRemoteRestoreBaseline(	CODE
LOW	manage-cli/commands.ts	6164	export function snapshotMediaProgressMessage(input: {	CODE
LOW	manage-cli/commands.ts	6216	export function remoteRestoreTargetReadinessError(	CODE
LOW	manage-cli/commands.ts	6260	export function canRepairRemoteRestoreBaseline(	CODE
LOW	manage-cli/commands.ts	6268	export function validateRemoteRestoreBaselineRepair(input: {	CODE
LOW	manage-cli/commands.ts	6375	function validateRemoteRestoreThemeState(input: {	CODE
LOW	manage-cli/commands.ts	6409	function validateRemoteRestoreInitialPasswordSetup(input: {	CODE
LOW	manage-cli/commands.ts	6482	function validBootstrapSubscribeMethod(	CODE
LOW	manage-cli/commands.ts	6502	function validateRemoteRestoreBootstrapRows(input: {	CODE
LOW	manage-cli/commands.ts	6607	async function assertFreshRemoteRestoreBaselineTarget(	CODE
LOW	manage-cli/commands.ts	6688	export function remoteRestoreBaselineRepairNotice(	CODE
LOW	manage-cli/commands.ts	6712	async function assertFreshRemoteRestoreTarget(	CODE
LOW	manage-cli/commands.ts	6739	async function saveVerifiedRemoteRestoreBaseline(	CODE
LOW	manage-cli/commands.ts	6771	export async function reverifyRemoteRestoreTargetIfFingerprintChanged(input: {	CODE
LOW	manage-cli/commands.ts	6781	async function repairRemoteRestoreBaseline(	CODE
LOW	manage-cli/commands.ts	7088	async function createRemoteSnapshotWithProgress(	CODE
LOW	manage-cli/commands.ts	7102	function assertSnapshotTableHistory(manifest: SnapshotManifest): void {	CODE
LOW	manage-cli/commands.ts	7126	function snapshotApplicationTables(manifest: SnapshotManifest): string[] {	CODE
LOW	manage-cli/commands.ts	7134	async function repositoryIndexDefinitions(	CODE
LOW	manage-cli/commands.ts	7320	export function restoredRemoteMediaMismatch(	CODE
LOW	manage-cli/commands.ts	7385	export async function verifyRestoredRemoteMediaWithRetries(input: {	CODE
LOW	manage-cli/commands.ts	7648	async function restoreSnapshotLocallyWithProgress(	CODE
LOW	manage-cli/commands.ts	7774	export function snapshotMaintenanceRouting(config: MicrofeedConfig): {	CODE
LOW	manage-cli/commands.ts	7788	export function snapshotWorkerErrorDetail(	CODE
LOW	manage-cli/commands.ts	7954	async function verifyRestoredRemoteMedia(	CODE
LOW	manage-cli/theme.ts	1194	async function pruneInstalledBundledThemeVersions(	CODE
161 more matches not shown…

Magic Placeholder Names3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	docs/api/authentication.md	50	Authorization: Bearer YOUR_API_KEY	CODE
HIGH	docs/api/build-and-test.md	26	Authorization: Bearer YOUR_API_KEY	CODE
HIGH	src/components/admin/api/ApiTryIt.tsx	39	apiKey = "YOUR_API_KEY",	CODE

Cross-Language Confusion (JS/TS)3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	src/shared/WebhookQuickstarts.ts	100	print(	CODE
HIGH	src/shared/WebhookQuickstarts.ts	115	print("Test event accepted; production effects were skipped.", flush=True)	CODE
HIGH	src/shared/WebhookQuickstarts.ts	117	print(	CODE

Modern AI Meta-Vocabulary6 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/unit/site-file-templates.test.ts	32	"[microfeed](https://github.com/microfeed/microfeed), an agentic CMS on Cloudflare",	CODE
MEDIUM	tests/worker/pages-site-files.test.ts	607	"[microfeed](https://github.com/microfeed/microfeed), an agentic CMS on Cloudflare",	CODE
MEDIUM	docs/microfeed-cli.md	37	- [`webhook scaffold`](#npx-microfeedcli-webhook-scaffold)	CODE
MEDIUM	docs/microfeed-cli.md	808	## `npx @microfeed/cli webhook scaffold`	COMMENT
MEDIUM	src/server/site-files/public.ts	39	"This site is powered by [microfeed](https://github.com/microfeed/microfeed), an agentic CMS on Cloudflare.",	CODE
MEDIUM	src/shared/SiteFileTemplates.ts	17	This site is powered by [microfeed](https://github.com/microfeed/microfeed), an agentic CMS on Cloudflare.	CODE

Fake / Example Data13 hits · 13 pts

Severity	File	Line	Snippet	Context
LOW	tests/unit/manage-cli/instance-management.test.ts	1552	email: "admin@example.com",	CODE
LOW	tests/unit/manage-cli/cloudflare.test.ts	421	email: "admin@example.com",	CODE
LOW	tests/unit/manage-cli/cloudflare.test.ts	432	expect(cloudflare.loginEmail()).toBe("admin@example.com");	CODE
LOW	tests/unit/manage-cli/cloudflare.test.ts	518	email: "admin@example.com",	CODE
LOW	tests/unit/manage-cli/cloudflare.test.ts	537	email: "admin@example.com",	CODE
LOW	tests/unit/shared/AdminCredentials.test.ts	12	"admin@example.com",	CODE
LOW	tests/unit/shared/AdminCredentials.test.ts	21	email: "admin@example.com",	CODE
LOW	tests/unit/components/admin-items-list.test.ts	113	expect(output).toContain('data-item-image="placeholder"');	CODE
LOW	tests/worker/bootstrap-admin.test.ts	75	expect(body).not.toContain("admin@example.com");	CODE
LOW	tests/worker/bootstrap-admin.test.ts	94	email: "admin@example.com",	CODE
LOW	tests/worker/bootstrap-admin.test.ts	104	email: "admin@example.com",	CODE
LOW	tests/worker/bootstrap-admin.test.ts	139	expect(users.results).toEqual([{email: "admin@example.com"}]);	CODE
LOW	src/components/admin/items/AllItemsApp/index.tsx	168	data-item-image={imageUrl ? "image" : "placeholder"}	CODE

Excessive Try-Catch Wrapping3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	docs/webhooks/endpoints.md	105	except Exception:	CODE
LOW	packages/cli/templates/webhook/python/server.py	28	except Exception:	CODE
LOW	src/shared/WebhookQuickstarts.ts	91	except Exception:	CODE

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…omponents/admin/shared/AdminImageUploaderApp/index.tsx	75	// TODO: implement it -	COMMENT

microfeed/microfeed

Open-Source Code Quality, Security and Technical Debt Review