0.7

Adjusted Signal

0.7

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

5.0K

Stars

TypeScript

Language

3.8M

Lines of Code

9.0K

Files

2.0K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1778 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 46 finding(s).

Agent Over-Engineering Ratio 2.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 1500 finding(s).

PR Review Velocity Impact 3.4/100 · LOW

Which changes need focused human review? 1986 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 20HIGH 7MEDIUM 219LOW 1740

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1986 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers1338 hits · 1359 pts

Severity	File	Line	Snippet	Context
LOW	BREAKING.md	1003	function createOdspCreateContainerRequest(	CODE
LOW	experimental/framework/last-edited/README.md	80	function shouldDiscardMessageDefault(message: ISequencedDocumentMessage) {	CODE
LOW	experimental/framework/last-edited/src/setup.ts	29	function getLastEditDetailsFromMessage(	CODE
LOW	experimental/framework/last-edited/src/setup.ts	62	export function setupLastEditedTrackerForContainer(	CODE
LOW	…l/PropertyDDS/packages/property-changeset/src/utils.ts	1405	export function traverseChangeSetRecursively(	CODE
LOW	…l/PropertyDDS/packages/property-changeset/src/utils.ts	1443	export function traverseChangeSetRecursivelyAsync(	CODE
LOW	…l/PropertyDDS/packages/property-changeset/src/utils.ts	1837	export function getChangesToTokenizedPaths(	CODE
LOW	…l/PropertyDDS/packages/property-changeset/src/utils.ts	2070	export function getFilteredChangeSetByPaths(	CODE
LOW	…l/PropertyDDS/packages/property-changeset/src/utils.ts	2373	export function excludePathsFromChangeSet(	CODE
LOW	…l/PropertyDDS/packages/property-changeset/src/utils.ts	2428	export function extractPathsFromChangeSet(	CODE
LOW	…DDS/packages/property-changeset/src/test/array.spec.ts	275	function runTestApplyingReverseAndRebasedChangesetForIndependentModifications(	CODE
LOW	…ackages/property-changeset/src/helpers/typeidHelper.ts	160	export function createSerializationTypeId(	CODE
LOW	…ackages/property-changeset/src/helpers/typeidHelper.ts	203	export function extractReferenceTargetTypeIdFromReference(in_typeid: string): string {	CODE
LOW	…ackages/property-properties/src/containerSerializer.js	181	export function deserializeNonPrimitiveArrayElements(in_data, in_scope) {	CODE
LOW	…DS/packages/property-dds/src/test/propertyTree.spec.ts	323	function executePerPropertyTreeType(	CODE
LOW	experimental/dds/tree/src/MergeHealth.ts	22	export function useFailedSequencedEditTelemetry(tree: SharedTree): { disable: () => void } {	CODE
LOW	experimental/dds/tree/src/SummaryTestUtilities.ts	32	export async function getUploadedEditChunkContents(sharedTree: SharedTree): Promise<UploadedEditChunkContents[]> {	CODE
LOW	experimental/dds/tree/src/SummaryTestUtilities.ts	55	export async function getSerializedUploadedEditChunkContents(sharedTree: SharedTree): Promise<string> {	CODE
LOW	experimental/dds/tree/src/Common.ts	310	export function getOrCreate<K, V>(map: Map<K, V>, key: K, defaultValue: (key: K) => V): V {	CODE
LOW	experimental/dds/tree/src/EditLog.ts	180	export function getNumberOfHandlesFromEditLogSummary(summary: EditLogSummary<unknown, unknown>): number {	CODE
LOW	experimental/dds/tree/src/SerializationUtilities.ts	27	export function getChangeNodeFromViewNode(view: TreeView, id: NodeId, lazyTraits = false): ChangeNode {	CODE
LOW	experimental/dds/tree/src/EditUtilities.ts	306	export function areRevisionViewsSemanticallyEqual(	CODE
LOW	experimental/dds/tree/src/SharedTree.ts	1541	function compareSummaryFormatVersions(versionA: string, versionB: string): number {	CODE
LOW	experimental/dds/tree/src/test/Forest.tests.ts	20	function makeForestNodeWithChildren(testTree: TestTree, id: NodeId, ...children: NodeId[]): ForestNode {	CODE
LOW	experimental/dds/tree/src/test/IdCompressor.tests.ts	1850	function createNetworkTestFunction(validateAfter: boolean): NetworkTestFunction & NetworkTestFunctionWithCapacity {	CODE
LOW	experimental/dds/tree/src/test/IdCompressor.tests.ts	1879	function describeNetworkNoValidation(	CODE
LOW	experimental/dds/tree/src/test/LogViewer.tests.ts	114	function getSimpleLogWithLocalEdits(testTree: TestTree): EditLog<ChangeInternal> {	CODE
LOW	experimental/dds/tree/src/test/LogViewer.tests.ts	157	function runLogViewerCorrectnessTests(	CODE
LOW	experimental/dds/tree/src/test/LogViewer.tests.ts	288	function getCachingLogViewerAssumeAppliedEdits(	CODE
LOW	…al/dds/tree/src/test/AppendOnlySortedMap.perf.tests.ts	12	function runAppendOnlyMapPerfTests(mapBuilder: () => AppendOnlySortedMap<number, number>): void {	CODE
LOW	…s/tree/src/test/utilities/SharedTreeVersioningTests.ts	46	export function runSharedTreeVersioningTests(	CODE
LOW	…s/tree/src/test/utilities/IdCompressorTestUtilities.ts	740	function deliverAllOperationsGenerator(): DeliverAllOperations {	CODE
LOW	…s/tree/src/test/utilities/IdCompressorTestUtilities.ts	746	function deliverSomeOperationsGenerator({	CODE
LOW	…s/tree/src/test/utilities/IdCompressorTestUtilities.ts	767	function generateUnifyingIdsGenerator({ activeClients, random }: FuzzTestState): GenerateUnifyingIds {	CODE
LOW	…erimental/dds/tree/src/test/utilities/TestUtilities.ts	303	export async function setUpLocalServerTestSharedTree(	CODE
LOW	…erimental/dds/tree/src/test/utilities/TestUtilities.ts	465	export async function asyncFunctionThrowsCorrectly(	CODE
LOW	…erimental/dds/tree/src/test/utilities/TestUtilities.ts	560	export function getIdNormalizerFromSharedTree(sharedTree: SharedTree): NodeIdNormalizer<OpSpaceNodeId> {	CODE
LOW	…/dds/tree/src/test/utilities/PendingLocalStateTests.ts	34	export function runPendingLocalStateTests(	CODE
LOW	…/dds/tree/src/test/utilities/PendingLocalStateTests.ts	304	function clearedTemporaryStashState(tree: SharedTree): boolean {	CODE
LOW	…imental/dds/tree/src/test/utilities/SharedTreeTests.ts	87	export function runSharedTreeOperationsTests(	CODE
LOW	…erimental/dds/tree/src/test/utilities/UndoRedoTests.ts	45	export function runSharedTreeUndoRedoTestSuite(options: SharedTreeUndoRedoOptions): void {	CODE
LOW	tools/benchmark/api-report/benchmark.public.api.md	37	export function benchmarkDurationBatchless(args: DurationBenchmarkBatchless): BenchmarkDescription & BenchmarkFunction;	CODE
LOW	tools/benchmark/src/sampling.ts	167	export function brandMeasurementNameForMode(name: string): string {	CODE
LOW	tools/benchmark/src/memoryBenchmarking/getMemoryUse.ts	353	async function warmupCollectMemoryUseData(): Promise<void> {	CODE
LOW	…hmark/src/durationBenchmarking/getDurationBatchless.ts	121	export function benchmarkDurationBatchless(	CODE
LOW	…ls/benchmark/src/durationBenchmarking/configuration.ts	257	export function validateBenchmarkArguments(	CODE
LOW	tools/selfhost/tenant-admin/src/tenantManager.js	337	function assertNotBootstrapManaged(tenant, tenantId, operation, force) {	CODE
LOW	tools/selfhost/tenant-admin/src/keyVaultClient.js	65	function createWorkloadIdentityCredential({ clientId, tenantId, tokenFile, authorityHost }) {	CODE
LOW	tools/selfhost/token-service/test/riddlerCompat.test.js	69	function validateTokenClaimsExpiration(claims, maxTokenLifetimeSec) {	CODE
LOW	…elfhost/deploy-validate/src/tokenServiceDiagnostics.js	43	function formatTokenServicePreflightError(	CODE
LOW	tools/selfhost/deploy-validate/src/tokenProvider.js	77	function buildTokenServiceProvider(	CODE
LOW	tools/markdown-magic/src/transforms/templateSections.ts	30	export function createTemplateSectionTransforms(): Record<string, Transform> {	CODE
LOW	…ls/markdown-magic/src/transforms/importInstructions.ts	22	export function generateImportInstructions(	CODE
LOW⚡	…n-documenter/api-report/api-markdown-documenter.api.md	185	function createBreadcrumbParagraph(apiItem: ApiItem, config: ApiItemTransformationConfiguration): Paragraph;	CODE
LOW⚡	…n-documenter/api-report/api-markdown-documenter.api.md	188	function createDeprecationNoticeSection(apiItem: ApiItem, config: ApiItemTransformationConfiguration): Section \| undefin	CODE
LOW⚡	…n-documenter/api-report/api-markdown-documenter.api.md	197	function createQualifiedDocumentNameForApiItem(apiItem: ApiItem, hierarchyConfig: HierarchyConfiguration): string;	CODE
LOW⚡	…n-documenter/api-report/api-markdown-documenter.api.md	218	function createTypeParametersSection(typeParameters: readonly TypeParameter[], contextApiItem: ApiItem, config: ApiItemT	CODE
LOW⚡	…n-documenter/api-report/api-markdown-documenter.api.md	227	export function defaultGetHeadingTextForItem(apiItem: ApiItem): string;	CODE
LOW⚡	…n-documenter/api-report/api-markdown-documenter.api.md	228	export function defaultGetLinkTextForItem(apiItem: ApiItem): string;	CODE
LOW⚡	…n-documenter/api-report/api-markdown-documenter.api.md	229	export function defaultGetUriBaseOverrideForItem(): string \| undefined;	CODE
1278 more matches not shown…

Decorative Section Separators161 hits · 446 pts

Severity	File	Line	Snippet	Context
MEDIUM	tools/selfhost/tenant-admin/tenant-admin.sh	63	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/tenant-admin/tenant-admin.sh	65	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/tenant-admin/tenant-admin.sh	137	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/tenant-admin/tenant-admin.sh	145	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/tenant-admin/tenant-admin.sh	244	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/tenant-admin/tenant-admin.sh	251	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	73	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	75	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	131	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	133	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	146	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	148	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	161	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	266	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	272	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/preflight-check.sh	288	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/preflight-check.sh	297	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/preflight-check.sh	305	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/preflight-check.sh	314	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	358	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	360	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	382	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	386	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	409	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/preflight-check.sh	411	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/deploy.sh	346	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/deploy.sh	351	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/deploy.sh	361	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/deploy.sh	363	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/deploy.sh	585	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/deploy.sh	587	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	tools/selfhost/azure/deploy.sh	596	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	52	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	55	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	303	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	305	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	607	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	634	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	636	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	662	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	665	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	700	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	702	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	934	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	936	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1004	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1006	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1100	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1102	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1149	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1151	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1168	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1206	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1208	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1254	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1256	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1268	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1270	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1348	# ===========================================================================	COMMENT
MEDIUM	tools/selfhost/azure/deploy.sh	1350	# ===========================================================================	COMMENT
101 more matches not shown…

Over-Commented Block260 hits · 245 pts

Severity	File	Line	Snippet	Context
LOW	pnpm-workspace.yaml	1	# This is the workspace definition for the client release group. See https://pnpm.io/pnpm-workspace_yaml for more	COMMENT
LOW	pnpm-workspace.yaml	121	# Resolve a known security vulnerability.	COMMENT
LOW	pnpm-workspace.yaml	141	# Caret dependencies aren't enough on a pre-1.0 package.	COMMENT
LOW	pnpm-workspace.yaml	321	strictPeerDependencies: true	COMMENT
LOW	pnpm-workspace.yaml	341	# axios@0.30.3 is the last legitimate 0.30.x release (published 2026-02-18). The trust	COMMENT
LOW	pnpm-workspace.yaml	361	# hand-published by lukekarrys (a long-time npm/node-semver maintainer), while the	COMMENT
LOW	…s/property-changeset/src/changeset_operations/array.ts	1561	let currentIndexOffset = 0;	COMMENT
LOW	…al/PropertyDDS/packages/property-properties/src/api.ts	381	// It will be passed an Object with these members:	COMMENT
LOW	experimental/dds/tree/src/test/Edit.tests.ts	21	// };	COMMENT
LOW	experimental/dds/tree/src/id-compressor/NumericUuid.ts	301	// string.	COMMENT
LOW	tools/benchmark/pnpm-workspace.yaml	1	# This file is a workaround. pnpm does not support nesting packages under a workspace that is not managed by the	COMMENT
LOW	tools/benchmark/pnpm-workspace.yaml	21	# No supply chain incident is known.	COMMENT
LOW	tools/selfhost/tenant-admin/tenant-admin.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/selfhost/tenant-admin/tenant-admin.sh	21	# authenticated service in front of riddler and have it call src/tenantManager.js directly.	COMMENT
LOW	tools/selfhost/tenant-admin/tenant-admin.sh	41	# Usage:	COMMENT
LOW	tools/selfhost/tenant-admin/bin/tenant-admin.js	1	#!/usr/bin/env node	COMMENT
LOW	tools/selfhost/tenant-admin/src/keyVaultGuard.js	1	/*!	COMMENT
LOW	tools/selfhost/tenant-admin/src/httpClient.js	1	/*!	COMMENT
LOW	tools/selfhost/tenant-admin/src/tenantManager.js	1	/*!	COMMENT
LOW	tools/selfhost/tenant-admin/src/tenantManager.js	121	storage: this.#storageConfig(tenantId),	COMMENT
LOW	tools/selfhost/tenant-admin/src/keyVaultClient.js	1	/*!	COMMENT
LOW	tools/selfhost/tenant-admin/src/validation.js	1	/*!	COMMENT
LOW	tools/selfhost/azure/backends.yaml	1	# In-cluster backends for full-stack Routerlicious on AKS.	COMMENT
LOW	tools/selfhost/azure/routerlicious-values.yaml	1	# Helm values for the routerlicious chart, full-stack on AKS.	COMMENT
LOW	tools/selfhost/azure/routerlicious-values.yaml	41	# Substituted by deploy.sh. The real hostname does not exist until Front Door is created, so	COMMENT
LOW	tools/selfhost/azure/routerlicious-values.yaml	101	localCheckpointEnabled: true	COMMENT
LOW	tools/selfhost/azure/routerlicious-values.yaml	141	# ARM control-plane API rejects both as unsupported. Leave false.	COMMENT
LOW	tools/selfhost/azure/routerlicious-values.yaml	181	#	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/selfhost/azure/deploy.sh	21	# subnets to internal-network-only by default), or Front Door marks every origin unhealthy.	COMMENT
LOW	tools/selfhost/azure/deploy.sh	41	# full (default) — NEW deployment: no Azure infrastructure exists yet. Runs every phase (customer VNet,	COMMENT
LOW	tools/selfhost/azure/deploy.sh	381	# free/standard/premium -- standard is the default since it's what adds the Uptime SLA (see	COMMENT
LOW	tools/selfhost/azure/deploy.sh	401	# -- defaults to AzureLinux (Microsoft-maintained, smaller image/attack surface than Ubuntu). CAN	COMMENT
LOW	tools/selfhost/azure/deploy.sh	421	AKS_ZONES="$(jq -r '.aks.availabilityZones[]?' "$PARAMS_FILE" \| tr '\n' ' ')"	COMMENT
LOW	tools/selfhost/azure/deploy.sh	441	# region entry afterwards, only set when a region is first added. Override via	COMMENT
LOW	tools/selfhost/azure/deploy.sh	461	# explicitly where the selected region or SKU cannot provide it.	COMMENT
LOW	tools/selfhost/azure/deploy.sh	481	# bursts rather than sizing to the average.	COMMENT
LOW	tools/selfhost/azure/deploy.sh	521		COMMENT
LOW	tools/selfhost/azure/deploy.sh	661		COMMENT
LOW	tools/selfhost/azure/deploy.sh	1001	log "Phase 1 VERIFY passed — IMAGE_TAG=$IMAGE_TAG"	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1061	fi	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1101	# Phase 1 (gitrest node pool) — dedicated node for the one gitrest replica	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1161	az acr update -n "$ACR" --admin-enabled false	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1261	fi	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1341	if [[ "$(az cosmosdb show -n "$COSMOS" -g "$RG" --query capacityMode -o tsv)" == "Provisioned" ]]; then	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1361	# nodes/reservations - nexus only: NodeManager/ReservationManager, imported from	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1381	# migration") collection is stuck at -- confirmed	COMMENT
LOW	tools/selfhost/azure/deploy.sh	1621	az storage share-rm create -g "$RG" --storage-account "$STORAGE" --name gitrest-data --quota 16	COMMENT
LOW	tools/selfhost/azure/deploy.sh	2021	# Patch all 6 services to mount every Key-Vault-backed secret via CSI and wire it into the	COMMENT
LOW	tools/selfhost/azure/deploy.sh	2041	# kafka__lib__eventHubConnString is what flips rdkafkaBase.ts from plaintext to SASL_SSL --	COMMENT
LOW	tools/selfhost/azure/deploy.sh	2401	# as wss:// (clients connect via wss://<host>/socket.io/?transport=websocket), not https://.	COMMENT
LOW	tools/selfhost/azure/deploy.sh	2521	}	COMMENT
LOW	…ls/selfhost/azure/end-to-end-tests/end-to-end-tests.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/selfhost/token-service/deploy-token-service.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/selfhost/token-service/deploy-token-service.sh	101	# The symptom is not a clear error but "Cannot acquire exclusive lock" or a GatewayTimeout on	COMMENT
LOW	tools/selfhost/token-service/deploy-token-service.sh	901		COMMENT
LOW	tools/selfhost/token-service/deploy-token-service.sh	961	# CORS	COMMENT
LOW	…ls/selfhost/token-service/client/entraTokenProvider.js	81	const cacheKey = `${tenantId}/${documentId ?? ""}`;	COMMENT
LOW	tools/selfhost/release/generate-release.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tools/selfhost/release/pin-source.sh	1	#!/usr/bin/env bash	COMMENT
200 more matches not shown…

Hallucination Indicators20 hits · 215 pts

Severity	File	Line	Snippet	Context
CRITICAL	…ty-properties/src/test/properties/nodeProperty.spec.js	388	P1._properties.nested.property.propertyNode.insert(	CODE
CRITICAL⚡	…ty-properties/src/test/properties/nodeProperty.spec.js	1577	root._properties.child1.position.propertyNode.insert(	CODE
CRITICAL⚡	…ty-properties/src/test/properties/nodeProperty.spec.js	1581	root._properties.child1.position.propertyNode.insert(	CODE
CRITICAL⚡	…ty-properties/src/test/properties/nodeProperty.spec.js	1585	root._properties.child1.position.propertyNode.insert(	CODE
CRITICAL	…dds/tree/src/test/shared-tree/fuzz/fuzzEditReducers.ts	151	const newView = state.client.channel.kernel.checkout.viewWith(	CODE
CRITICAL	…ckages/dds/tree/src/simple-tree/core/treeNodeKernel.ts	172	this.#hydrationState.innerNode.anchorNode.anchorSet.slots.get(SimpleContextSlot) ??	CODE
CRITICAL	…dds/tree/src/simple-tree/node-kinds/array/arrayNode.ts	1089	const innerSchema = kernel.context.flexContext.schema.nodeSchema.get(	CODE
CRITICAL	…dds/tree/src/simple-tree/node-kinds/array/arrayNode.ts	1345	kernel.context.flexContext.schema.nodeSchema.get(brand(kernel.schema.identifier)) ??	CODE
CRITICAL	…ges/dds/tree/src/simple-tree/node-kinds/map/mapNode.ts	364	const innerSchema = this.innerNode.context.schema.nodeSchema.get(	CODE
CRITICAL	…dds/tree/src/feature-libraries/flex-tree/lazyEntity.ts	87	this.context.checkout.forest.breaker.use();	CODE
CRITICAL	…/dds/tree/src/feature-libraries/flex-tree/lazyField.ts	190	const parent = this.context.checkout.forest.anchors.locate(this.anchor.parent);	CODE
CRITICAL	…/dds/tree/src/feature-libraries/flex-tree/lazyField.ts	213	this.context.checkout.forest.anchors.forget(this.anchor.parent);	CODE
CRITICAL	…/dds/tree/src/feature-libraries/flex-tree/lazyField.ts	255	: (this.context.checkout.forest.anchors.locate(this.anchor.parent) ??	CODE
CRITICAL	…/dds/tree/src/feature-libraries/flex-tree/lazyField.ts	344	const parent = this.context.checkout.forest.anchors.locate(this.anchor.parent);	CODE
CRITICAL	…es/dds/tree/src/feature-libraries/flex-tree/context.ts	136	!this.checkout.forest.anchors.slots.has(ContextSlot),	CODE
CRITICAL	…es/dds/tree/src/feature-libraries/flex-tree/context.ts	139	this.checkout.forest.anchors.slots.set(ContextSlot, this);	CODE
CRITICAL	…es/dds/tree/src/feature-libraries/flex-tree/context.ts	176	const deleted = this.checkout.forest.anchors.slots.delete(ContextSlot);	CODE
CRITICAL	…s/dds/tree/src/feature-libraries/flex-tree/lazyNode.ts	112	this.context.checkout.forest.anchors.forget(this.anchor);	CODE
CRITICAL	packages/dds/tree/src/shared-tree/locations.ts	448	const context = this.checkout.forest.anchors.slots.get(ContextSlot);	CODE
CRITICAL	…kages/dds/tree/src/shared-tree/schematizingTreeView.ts	625	this.checkout.forest.anchors.slots.delete(ViewSlot);	CODE

Structural Annotation Overuse88 hits · 150 pts

Severity	File	Line	Snippet	Context
LOW	.claude/skills/comparison-base/SKILL.md	32	## Step 1: Resolve the target branch	COMMENT
LOW	.claude/skills/comparison-base/SKILL.md	60	## Step 2: Select the comparison commit	COMMENT
LOW	.claude/skills/comparison-base/SKILL.md	78	## Step 3: Check divergence	COMMENT
LOW	.claude/skills/api-changes/SKILL.md	12	## Step 1: Identify what changed	COMMENT
LOW	.claude/skills/api-changes/SKILL.md	36	## Step 2: Check release tags, documentation, and export reachability	COMMENT
LOW	.claude/skills/api-changes/SKILL.md	55	## Step 3: Inform the user about API Council review	COMMENT
LOW	.claude/skills/api-changes/SKILL.md	70	## Step 4: Assess breaking changes	COMMENT
LOW	.claude/skills/api-changes/SKILL.md	101	## Step 5: Deprecation checklist	COMMENT
LOW	.claude/skills/api-changes/SKILL.md	120	## Step 6: Release documentation	COMMENT
LOW	.claude/skills/api-changes/SKILL.md	143	## Step 7: Summary	COMMENT
LOW⚡	…/skills/fluid-release/references/minor-release-prep.md	42	## Step 1: Tag Untagged Asserts	COMMENT
LOW⚡	…/skills/fluid-release/references/minor-release-prep.md	52	## Step 2: Update Compatibility Generation	COMMENT
LOW⚡	…/skills/fluid-release/references/minor-release-prep.md	62	## Step 3: Generate Release Notes and Changelogs	COMMENT
LOW	…/skills/fluid-release/references/minor-release-prep.md	116	## Step 4: Bump Main to Next Version	COMMENT
LOW	…/skills/fluid-release/references/minor-release-prep.md	161	## Step 5: Create the Release Branch	COMMENT
LOW	…e/skills/fluid-release/references/release-execution.md	19	## Step 6: Run and Publish the Release Build	COMMENT
LOW	…e/skills/fluid-release/references/release-execution.md	89	## Step 7: Bump Release Branch to Next Patch	COMMENT
LOW	…e/skills/fluid-release/references/type-test-updates.md	18	## Step 8: Update Type Test Baselines on Main	COMMENT
LOW	…e/skills/fluid-release/references/type-test-updates.md	58	## Step 9: Update Type Test Baselines on Release Branch	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	31	# Step 1: Confirm with the user	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	44	# Step 2: Run the script	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	56	# Step 3: Review output	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	82	# Step 4: Handle unbuilt packages (Build and Test only)	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	88	# Step 5: ESLint auto-fix (Build and Test only)	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	102	# Step 6: API reports and cross-package cascade (Build and Test only)	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	134	# Step 7: Type test regeneration (Build and Test only)	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	142	# Step 8: Run tests (Test mode only)	COMMENT
LOW	.claude/skills/ci-readiness-check/SKILL.md	153	# Step 9: Final status	COMMENT
LOW	.claude/skills/review/SKILL.md	37	## Step 1: Confirm Mode	COMMENT
LOW	.claude/skills/review/SKILL.md	60	## Step 2: Resolve Base & Gather Changes	COMMENT
LOW	.claude/skills/review/SKILL.md	88	## Step 3: Read Diffs and Source Files	COMMENT
LOW	.claude/skills/review/SKILL.md	120	## Step 4: Detect API Surface Changes	COMMENT
LOW	.claude/skills/review/SKILL.md	135	## Step 5: Extract Sections for Sub-agents (Standard and Deep only)	COMMENT
LOW	.claude/skills/review/SKILL.md	153	## Step 6: Perform Review	COMMENT
LOW	.claude/skills/review/SKILL.md	256	## Step 7: De-duplicate and Classify	COMMENT
LOW	.claude/skills/review/SKILL.md	271	## Step 8: Report	COMMENT
LOW	.claude/skills/review/SKILL.md	328	## Step 9: Offer Next Steps	COMMENT
LOW	…ices/src/throttling/distributedTokenBucketThrottler.ts	181	// Step 1: Get or create the token bucket	COMMENT
LOW	…ices/src/throttling/distributedTokenBucketThrottler.ts	198	// Step 2: Consume tokens from the local bucket	COMMENT
LOW	.agency/plugins/ff-oce/skills/ff-oce-dashboard/SKILL.md	13	### Step 0: Confirm with the user	COMMENT
LOW	.agency/plugins/ff-oce/skills/ff-oce-dashboard/SKILL.md	25	### Step 1: Launch 6 background agents in parallel	COMMENT
LOW	.agency/plugins/ff-oce/skills/ff-oce-dashboard/SKILL.md	82	### Step 2: Collect results with a 90-second timeout	COMMENT
LOW	.agency/plugins/ff-oce/skills/ff-oce-dashboard/SKILL.md	88	### Step 3: Present the dashboard	COMMENT
LOW⚡	…cy/plugins/nori/agents/nori-codebase-pattern-finder.md	44	### Step 1: Identify Pattern Types	COMMENT
LOW⚡	…cy/plugins/nori/agents/nori-codebase-pattern-finder.md	54	### Step 2: Search!	COMMENT
LOW⚡	…cy/plugins/nori/agents/nori-codebase-pattern-finder.md	58	### Step 3: Read and Extract	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-codebase-analyzer.md	44	### Step 1: Read Entry Points	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-codebase-analyzer.md	50	### Step 2: Follow the Code Path	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-codebase-analyzer.md	58	### Step 3: Document Key Logic	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-initial-documenter.md	11	# Step 1: Read The Context	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-initial-documenter.md	19	# Step 2: Follow the Documentation	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-initial-documenter.md	25	# Step 3: Create the docs.md Files (Top-Down Pass)	COMMENT
LOW	.agency/plugins/nori/agents/nori-initial-documenter.md	63	# Step 4: Sync Remote docs.md Files	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-change-documenter.md	11	# Step 1: Read The Context	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-change-documenter.md	18	# Step 2: Follow the Documentation	COMMENT
LOW⚡	.agency/plugins/nori/agents/nori-change-documenter.md	25	# Step 3: Modify the docs.md Files	COMMENT
LOW	.agency/plugins/nori/agents/nori-change-documenter.md	39	# Step 4: Sync Remote docs.md Files	COMMENT
LOW	.agency/plugins/nori/skills/updating-noridocs/SKILL.md	18	### Step 1: Gather Context	COMMENT
LOW	.agency/plugins/nori/skills/updating-noridocs/SKILL.md	27	### Step 2: Dispatch nori-change-documenter Subagent	COMMENT
LOW	.agency/plugins/nori/skills/updating-noridocs/SKILL.md	43	### Step 3: Verify Updates	COMMENT
28 more matches not shown…

AI Slop Vocabulary49 hits · 143 pts

Severity	File	Line	Snippet	Context
MEDIUM	…l/PropertyDDS/packages/property-changeset/src/utils.ts	2302	// we can leverage getChangesToTokenizedPaths and only be notified on paths	COMMENT
MEDIUM	experimental/dds/tree/src/SummaryBackCompatibility.ts	80	// TODO:#45414: Add more robust validation of the summary's fields. Even if they are present, they may be malformed.	COMMENT
MEDIUM	experimental/dds/tree/src/SummaryBackCompatibility.ts	80	// TODO:#45414: Add more robust validation of the summary's fields. Even if they are present, they may be malformed.	COMMENT
MEDIUM	…erimental/dds/tree/src/test/utilities/TestUtilities.ts	503	// This accounts for this file being executed after compilation. If many tests want to leverage resources, we should uni	COMMENT
MEDIUM	tools/benchmark/src/memoryBenchmarking/getMemoryUse.ts	69	// Option 2 is both more robust and faster, so it is used here.	COMMENT
MEDIUM	tools/benchmark/src/memoryBenchmarking/getMemoryUse.ts	228	// For simplicity, and to leverage the most data, we split the samples in half.	COMMENT
LOW	tools/selfhost/azure/deploy.sh	2381	# Update in place (not just create-if-missing) so a probe-path change actually takes	COMMENT
LOW	…ls/pipelines/templates/include-install-build-tools.yml	8	# Note that the preferred pattern for using the build tools is to declare a dev dependency on them, and just use that ve	COMMENT
MEDIUM	…/pipelines/templates/include-generate-notice-steps.yml	13	# We're trying to see if we could leverage the auto-injected ones for that.	COMMENT
MEDIUM	tools/api-markdown-documenter/src/LintApiModel.ts	309	// In the future, we could potentially leverage some sort of URL validator here,	COMMENT
MEDIUM	…ls/api-markdown-documenter/src/mdast/SectionHeading.ts	22	// TODO: there is no reason not to just take `PhrasingContent` here, but the library doesn't currently utilize that deg	COMMENT
MEDIUM	…licious/packages/services-shared/src/restLessServer.ts	129	// TODO: not as robust as body-parser middleware,	COMMENT
MEDIUM	…terlicious/packages/services-client/src/restWrapper.ts	353	// temporarily down or inaccessible due to network failures. We leverage that in here	COMMENT
MEDIUM	…amples/utils/example-utils/src/test/exampleApp.spec.ts	141	// We don't have a robust way to narrow or downcast the returned client, but this at least ensures they are different	COMMENT
MEDIUM	scripts/pack-build-output.sh	12	# temp build_output_archive folder, then leverage git to locate changes.	COMMENT
MEDIUM	…/drivers/file-driver/src/fileDocumentStorageService.ts	28	// We leverage it to figure out when container is asking for root document tree.	COMMENT
MEDIUM	packages/drivers/local-driver/src/ephemeralService.ts	486	// Neither state is reachable through the ephemeral service API today, but the checks are cheap and keep this robust	COMMENT
MEDIUM	…ges/test/test-utils/src/testContainerRuntimeFactory.ts	121	// Thus need to leverage old API createDetachedRootDataStore() that is gone in latest releases.	COMMENT
MEDIUM	…o-end-tests/src/test/pointInTime/epochMismatch.spec.ts	155	// after the snap makes this robust to any extra service-created versions (creation	COMMENT
MEDIUM	…kages/framework/react/src/test/useObservation.spec.tsx	140	// Since the second option is both more robust and faster, that is what is used here.	COMMENT
MEDIUM	…ages/runtime/container-runtime/src/containerRuntime.ts	3900	// method robust to future changes in how the two are tracked.	COMMENT
MEDIUM	packages/runtime/datastore/src/dataStoreRuntime.ts	708	// We can remove the need to leverage uuid() as fall-back in couple releases.	COMMENT
MEDIUM	packages/runtime/id-compressor/src/idCompressor.ts	745	// Since such validation can not be robust, this "try" function is explicitly documented not to be allowed to be u	COMMENT
MEDIUM	…s/common/core-interfaces/src/test/deepReadonly.spec.ts	795	// type. The numeric indices are not checked. So far, most robust inspection is manual	COMMENT
MEDIUM	…mmon/core-interfaces/src/test/jsonSerializable.spec.ts	733	// type. The numeric indices are not checked. So far most robust inspection is manually	COMMENT
MEDIUM	…core-interfaces/src/test/jsonStringifyAndParse.spec.ts	778	// type. The numeric indices are not checked. So far most robust inspection is manually	COMMENT
MEDIUM	…mmon/core-interfaces/src/test/jsonDeserialized.spec.ts	775	// type. The numeric indices are not checked. So far most robust inspection is manually	COMMENT
MEDIUM	…ommon/core-interfaces/src/test/shallowReadonly.spec.ts	784	// type. The numeric indices are not checked. So far, most robust inspection is manual	COMMENT
MEDIUM	packages/loader/container-loader/src/deltaManager.ts	1289	// and thus can leverage that to trigger recovery. But this is not going to solve all the problems	COMMENT
MEDIUM	packages/loader/container-loader/src/container.ts	293	// We can leverage DeltaManager's "connect" event here and test for ConnectionState.Disconnected	COMMENT
MEDIUM	packages/dds/tree/src/tableSchema.ts	228	// Note: ideally this type would just leverage `InsertableObjectFromSchemaRecord<typeof columnFields>`,	COMMENT
MEDIUM	packages/dds/tree/src/tableSchema.ts	380	// Note: ideally this type would just leverage `InsertableObjectFromSchemaRecord<typeof rowFields>`,	COMMENT
MEDIUM	packages/dds/tree/src/test/tableSchema.spec.ts	85	// Therefore, we cannot directly utilize `testSchemaCompatibilitySnapshots`, but we can apply it to one example use of	COMMENT
MEDIUM	packages/dds/tree/src/test/testExports.ts	13	// TODO: Find a more robust way to meet the needs of that use-case.	COMMENT
MEDIUM	…ages/dds/tree/src/test/openPolymorphism.integration.ts	568	// Runtime checks are robust so we can cast here and rely on them.	COMMENT
MEDIUM	…ds/tree/src/test/simple-tree/api/discrepancies.spec.ts	265	// Both utilize ObjectNode but with differing fieldSchemas	COMMENT
MEDIUM	…c/test/simple-tree/api/schemaCreationUtilities.spec.ts	62	// Therefore we cannot directly utilize `testSchemaCompatibilitySnapshots`, but we can apply it to one example use of	COMMENT
MEDIUM	…c/test/simple-tree/api/schemaCreationUtilities.spec.ts	71	// Therefore, we cannot directly utilize `testSchemaCompatibilitySnapshots`, but we can apply it to one example use of	COMMENT
MEDIUM	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	1364	// This walks in-order to leverage insertAt requireing all prior nodes to be present.	COMMENT
MEDIUM	…s/dds/tree/src/feature-libraries/flex-tree/lazyNode.ts	213	// This MIGHT work properly with existing merge resolution logic (it must keep client in sync and be unable to viola	COMMENT
MEDIUM	packages/dds/tree/src/shared-tree/tree.ts	476	// It is up to the user of runTransaction to ensure that does not cause problems (and they have no robust way to do th	COMMENT
MEDIUM	…kages/dds/merge-tree/src/test/sortedSegmentSet.spec.ts	134	// as we don't correctly split, or merge, so leverage	COMMENT
MEDIUM	packages/dds/map/src/directory.ts	730	// guaranteed during the serialization process. As a result, it is only essential to utilize the	COMMENT
MEDIUM	packages/dds/counter/src/counter.ts	94	// increments are applied affects the result. A more-robust solution would be required to support this.	COMMENT
MEDIUM	packages/dds/shared-object-base/src/sharedObject.ts	1067	// This assumes no other IFluidLoadable has an `attributes` field, and thus may not be fully robust.	COMMENT
MEDIUM	.github/workflows/website-validation.yml	24	# Publish the build artifact for subsequent jobs to leverage.	COMMENT
MEDIUM	…ls/packages/version-tools/src/internalVersionScheme.ts	483	// These cases are not expected to be positive; nor are robust.	COMMENT
MEDIUM	…/build-cli/src/library/commands/generateEntrypoints.ts	545	// Note: it is likely better to leverage a tsconfig file from package rather than	COMMENT
MEDIUM	…packages/build-cli/src/commands/generate/assertTags.ts	213	// TODO: replace this with robust validation, like a strongly typed utility wrapping lilconfig and typebox.	COMMENT

Self-Referential Comments11 hits · 33 pts

Severity	File	Line	Snippet	Context
MEDIUM	tools/benchmark/pnpm-workspace.yaml	1	# This file is a workaround. pnpm does not support nesting packages under a workspace that is not managed by the	COMMENT
MEDIUM	tools/test-tools/pnpm-workspace.yaml	1	# This file is a workaround. pnpm does not support nesting packages under a workspace that is not managed by the	COMMENT
MEDIUM	tools/api-markdown-documenter/pnpm-workspace.yaml	1	# This file is a workaround. pnpm does not support nesting packages under a workspace that is not managed by the	COMMENT
MEDIUM	website/pnpm-workspace.yaml	1	# This file is a workaround. pnpm does not support nesting packages under a workspace that is not managed by the	COMMENT
MEDIUM	docs/pnpm-workspace.yaml	1	# This file is a workaround. pnpm does not support nesting packages under a workspace that is not managed by the	COMMENT
MEDIUM	common/lib/common-utils/pnpm-workspace.yaml	1	# This file is a workaround. pnpm does not support nesting packages under a workspace that is not managed by the	COMMENT
MEDIUM	common/lib/protocol-definitions/pnpm-workspace.yaml	1	# This file is a workaround. pnpm does not support nesting packages under a workspace that is not managed by the	COMMENT
MEDIUM	scripts/pack-build-output.sh	53	# Create the tarball in the build_output_archive folder	COMMENT
MEDIUM	.github/labeler.yml	1	# This file is used as the configuration for actions/labeler	COMMENT
MEDIUM	.github/labeler-changesets.yml	1	# This file is a map of labels to repo glob paths. See https://github.com/marketplace/actions/labeler for more details	COMMENT
MEDIUM	.github/labeler-areas.yml	1	# This file is a map of labels to repo glob paths. See https://github.com/marketplace/actions/labeler	COMMENT

Verbosity Indicators15 hits · 29 pts

Severity	File	Line	Snippet	Context
LOW	…ices/src/throttling/distributedTokenBucketThrottler.ts	181	// Step 1: Get or create the token bucket	COMMENT
LOW	…ices/src/throttling/distributedTokenBucketThrottler.ts	198	// Step 2: Consume tokens from the local bucket	COMMENT
LOW	packages/utils/telemetry-utils/src/errorLogging.ts	178	* The purpose of this function is to provide ability to capture stack context quickly.	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	911	// Step 1: insert nested Box	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	914	// Step 2: set nested Box value	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	936	// Step 1: insert nested Box	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	940	// Step 2: replace nested Box	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	963	// Step 1: insert nested empty Box	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	967	// Step 2: set nested Box to "x☠️"	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	969	// Step 3: replace nested Box	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	991	// Step 1: insert nested Box	COMMENT
LOW⚡	…/tree/src/test/shared-tree/transactionMinimize.spec.ts	995	// Step 2: remove nested Box	COMMENT
LOW	…/packages/build-cli/src/commands/build-perf/collect.ts	97	// Step 1: Fetch builds from ADO	COMMENT
LOW	…/packages/build-cli/src/commands/build-perf/collect.ts	115	// Step 2: Fetch timeline data in parallel	COMMENT
LOW	…/packages/build-cli/src/commands/build-perf/collect.ts	133	// Step 3: Process data into aggregated metrics	COMMENT

Cross-Language Confusion (JS/TS)4 hits · 22 pts

Severity	File	Line	Snippet	Context
HIGH	…al/PropertyDDS/packages/property-properties/src/api.ts	1397	* @return True, if the property is an instance of the corresponding type	COMMENT
HIGH	…/dds/sequence-deprecated/src/test/sparseMatrix.spec.ts	125	print(matrix1);	CODE
HIGH	…ld-tools/packages/build-tools/src/docStats/docStats.ts	112	print(rec);	CODE
HIGH	…ld-tools/packages/build-tools/src/docStats/docStats.ts	117	print({ name: "Total", total, docTotal, percent: (docTotal / total) * 100 });	CODE

Fake / Example Data16 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	…DS/packages/property-properties/src/test/utils.spec.js	1006	userInfo.insert("name", PropertyFactory.create("String", "single", "John Doe"));	CODE
LOW	website/static/dompurify/purify.min.js	538	"placeholder",	CODE
LOW	website/static/dompurify/purify.min.js	1085	"placeholder",	CODE
LOW	website/src/theme/SearchBar/index.tsx	99	pagefindModalTrigger.setAttribute("placeholder", "Search");	CODE
LOW⚡	examples/apps/contact-collection/src/dataObject.ts	62	this.addContact("Alice", "555-1234");	CODE
LOW⚡	examples/apps/contact-collection/src/dataObject.ts	63	this.addContact("Bob", "555-5678");	CODE
LOW⚡	examples/apps/contact-collection/src/dataObject.ts	64	this.addContact("Carol", "555-9999");	CODE
LOW	…end-to-end-tests/src/test/batchBreakRegression.spec.ts	398	data: '{"clientId":"fake_client","detail":{"user":{"id":"fake_user"},"scopes":["doc:read","doc:write"],"per	CODE
LOW	…/telemetry-utils/src/test/errorTypeLoggingTest.spec.ts	41	const testError = new GenericError("genericError", "placeholder");	CODE
LOW	…tree/src/test/shared-tree/schematizingTreeView.spec.ts	545	new PersonGeneralized({ name: "Alice", age: 42, address: "123 Main St" }),	CODE
LOW	…tree/src/test/shared-tree/schematizingTreeView.spec.ts	583	assert.equal(viewGeneralized.root.address, "123 Main St");	CODE
LOW	…tree/src/test/shared-tree/schematizingTreeView.spec.ts	610	new PersonGeneralized({ name: "Alice", age: 42, address: "123 Main St" }),	CODE
LOW	…tree/src/test/shared-tree/schematizingTreeView.spec.ts	653	assert.equal(viewGeneralized.root[1].address, "123 Main St");	CODE
LOW	…ckages/dds/tree/src/simple-tree/prepareForInsertion.ts	213	const placeholderKey: DetachedField & FieldKey = brand("placeholder" as const);	CODE
LOW	packages/dds/task-manager/src/taskManager.ts	79	const placeholderClientId = "placeholder";	CODE
LOW	packages/dds/task-manager/src/test/taskManager.spec.ts	606	const placeholderClientId = "placeholder";	CODE

Example Usage Blocks11 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	tools/selfhost/tenant-admin/tenant-admin.sh	41	# Usage:	COMMENT
LOW	…ls/selfhost/azure/end-to-end-tests/end-to-end-tests.sh	10	# Usage:	COMMENT
LOW	tools/selfhost/release/generate-release.sh	7	# Usage:	COMMENT
LOW	tools/selfhost/release/pin-source.sh	9	# Usage:	COMMENT
LOW	tools/selfhost/release/update-dependency-images.sh	4	# Usage:	COMMENT
LOW	tools/selfhost/release/setup-build-registry.sh	8	# Usage:	COMMENT
LOW	tools/selfhost/release/validate-pinned-images.sh	13	# Usage:	COMMENT
LOW	tools/selfhost/release/pin-images.sh	10	# Usage:	COMMENT
LOW	tools/selfhost/release/create-and-deploy-release.sh	5	# Usage:	COMMENT
LOW	tools/selfhost/release/build-images.sh	11	# Usage:	COMMENT
LOW	tools/selfhost/release/deleteReleaseLocal.sh	7	# Usage:	COMMENT

Magic Placeholder Names2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	…mples/service-clients/azure-client/todo-list/README.md	82	tokenProvider: new InsecureTokenProvider("YOUR-SECRET-HERE", user),	CODE
HIGH	…ice-clients/azure-client/external-controller/README.md	93	tokenProvider: new InsecureTokenProvider("YOUR-SECRET-HERE", user),	CODE

TODO Padding4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	…ds/tree/src/test/simple-tree/api/getJsonSchema.spec.ts	21	// TODO: Add testing for requireFieldWithDefaults = false.	COMMENT
LOW	…ds/tree/src/test/simple-tree/api/getJsonSchema.spec.ts	22	// TODO: Add testing for KeyEncodingOptions.knownStoredKeys	COMMENT
LOW	…/dds/tree/src/test/simple-tree/api/treeNodeApi.spec.ts	3835	// TODO: implement this case	COMMENT
LOW	packages/dds/tree/src/test/text/textDomain.spec.ts	405	// TODO: Add tests for:	COMMENT

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	.github/scripts/pr_review_propose.py	108	except FileNotFoundError:	CODE

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	tools/pipelines/publish-api-model-artifact.yml	140	# Check if the version is the latest minor of its corresponding major version series	COMMENT
LOW	tools/pipelines/templates/include-build-lint.yml	27	# Set FLUB_TYPETEST_SKIP_VERSION_OUTPUT to 1 when building from test/* branches	COMMENT

Unused Imports4 hits · 3 pts

Severity	File	Line	Context
LOW	.github/scripts/test_consolidate_reviews.py	4	CODE
LOW	.github/scripts/pr_review_propose.py	19	CODE
LOW	.github/scripts/consolidate_reviews.py	18	CODE
LOW	.github/scripts/test_pr_review_propose.py	4	CODE

microsoft/FluidFramework

Open-Source Code Quality, Security and Technical Debt Review