2.8

Adjusted Signal

2.8

Raw Pattern Score

100%

Time Factor

2026-04-24

Last Push

61.3K

Stars

Language

391.8K

Lines of Code

1.1K

Files

1.0K

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 12.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1020 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 3 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 1 finding(s).

PR Review Velocity Impact 12.8/100 · LOW

Which changes need focused human review? 1023 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 1MEDIUM 15LOW 1005

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1023 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block946 hits · 946 pts

Severity	File	Line	Snippet	Context
LOW	main.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/warm-backend.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/background-newdisks-heal-ops.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/xl-storage-errors.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/streaming-signature-v4.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/streaming-signature-v4.go	241	func (cr *s3ChunkedReader) Close() (err error) {	COMMENT
LOW	cmd/batch-expire_test.go	1	// Copyright (c) 2015-2023 MinIO, Inc.	COMMENT
LOW	cmd/bucket-policy.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/bucket-lifecycle.go	1	// Copyright (c) 2015-2024 MinIO, Inc.	COMMENT
LOW	cmd/erasure-metadata.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/admin-heal-ops.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/admin-heal-ops.go	601	func (h *healSequence) stop() {	COMMENT
LOW	cmd/admin-heal-ops.go	821	// according to settings. At each "safe" point it also checks if an	COMMENT
LOW	cmd/xl-storage-meta-inline.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/bucket-replication_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/namespace-lock_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/endpoint-ellipses_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/signature-v4.go	1	// Copyright (c) 2015-2023 MinIO, Inc.	COMMENT
LOW	cmd/signature-v4.go	161	}	COMMENT
LOW	cmd/metacache-entries_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/bucket-quota.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/data-scanner.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/data-scanner.go	261		COMMENT
LOW	cmd/data-scanner.go	281	// When selected there is a one in healObjectSelectProb that any object will be chosen for heal scan.	COMMENT
LOW	cmd/iam.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/iam.go	741	if nerr.Err != nil {	COMMENT
LOW	cmd/iam.go	761	// where the parent user is the DN of the actual LDAP user. The parent user	COMMENT
LOW	cmd/iam.go	1441		COMMENT
LOW	cmd/iam.go	2401	// includes `null`, `{}` and `{"Statement": null}`. In fact, MinIO Console	COMMENT
LOW	cmd/iam.go	2461	// must be restricted by it. So, we set `.IsOwner` to false here	COMMENT
LOW	cmd/metacache-stream.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/metacache-stream.go	41	//	COMMENT
LOW	cmd/config.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/site-replication-metrics.go	1	// Copyright (c) 2015-2023 MinIO, Inc.	COMMENT
LOW	cmd/http-stats.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/metacache-server-pool.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/rebalance-admin.go	1	// Copyright (c) 2022 MinIO, Inc.	COMMENT
LOW	cmd/erasure-metadata-utils.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/utils_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/os-dirent_ino.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/object-api-multipart_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/object-api-multipart_test.go	241	{	COMMENT
LOW	cmd/object-api-multipart_test.go	261	// But the uploadID is invalid.	COMMENT
LOW	cmd/object-api-multipart_test.go	461	},	COMMENT
LOW	cmd/object-api-multipart_test.go	1101	// {bucketNames[0], "", "min", "", "", -1, listMultipartResults[7], nil, true},	COMMENT
LOW	cmd/object-api-multipart_test.go	1121	{bucketNames[1], "", "minio-object-1.txt", uploadIDs[1], "", 100, listMultipartResults[16], nil, true},	COMMENT
LOW	cmd/object-api-multipart_test.go	1141	// Objects used: `objectNames[1-5]`.	COMMENT
LOW	cmd/metrics-v3-bucket-replication.go	1	// Copyright (c) 2015-2024 MinIO, Inc.	COMMENT
LOW	cmd/config-migrate.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/object-handlers-common_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/postpolicyform.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/xl-storage_windows_test.go	1	//go:build windows	COMMENT
LOW	cmd/metrics-v3-ilm.go	1	// Copyright (c) 2024 MinIO, Inc.	COMMENT
LOW	cmd/erasure-sets_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/bucket-object-lock.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/bucket-object-lock.go	121	return ObjectLocked{}	COMMENT
LOW	cmd/object-api-listobjects_test.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/lock-rest-server.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/admin-router.go	1	// Copyright (c) 2015-2021 MinIO, Inc.	COMMENT
LOW	cmd/admin-router.go	61	)	COMMENT
886 more matches not shown…

Structural Annotation Overuse41 hits · 55 pts

Severity	File	Line	Snippet	Context
LOW⚡	cmd/erasure-object_test.go	1225	// Step 1: create a bucket	COMMENT
LOW⚡	cmd/erasure-object_test.go	1231	// Step 2: Upload an object with a random content	COMMENT
LOW	cmd/erasure-object_test.go	1242	// Step 3: Upload the object with some disks offline	COMMENT
LOW	cmd/erasure-object_test.go	1258	// Step 4: Try to read the object back and check its md5sum	COMMENT
LOW	docs/bucket/notifications/README.md	73	### Step 1: Add AMQP endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	143	### Step 2: Enable RabbitMQ bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	154	### Step 3: Test on RabbitMQ	COMMENT
LOW	docs/bucket/notifications/README.md	210	### Step 1: Add MQTT endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	270	### Step 2: Enable MQTT bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	281	### Step 3: Test on MQTT	COMMENT
LOW	docs/bucket/notifications/README.md	341	### Step 1: Ensure Elasticsearch minimum requirements are met	COMMENT
LOW	docs/bucket/notifications/README.md	345	### Step 2: Add Elasticsearch endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	403	### Step 3: Enable Elastichsearch bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	418	### Step 4: Test on Elasticsearch	COMMENT
LOW	docs/bucket/notifications/README.md	512	### Step 1: Add Redis endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	563	### Step 2: Enable Redis bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	578	### Step 3: Test on Redis	COMMENT
LOW	docs/bucket/notifications/README.md	611	### Step 1: Add NATS endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	685	### Step 2: Enable NATS bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	696	### Step 3: Test on NATS	COMMENT
LOW	docs/bucket/notifications/README.md	860	### Step 1: Ensure postgresql minimum requirements are met	COMMENT
LOW	docs/bucket/notifications/README.md	864	### Step 2: Add PostgreSQL endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	920	### Step 3: Enable PostgreSQL bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	939	### Step 4: Test on PostgreSQL	COMMENT
LOW	docs/bucket/notifications/README.md	993	### Step 1: Ensure MySQL minimum requirements are met	COMMENT
LOW	docs/bucket/notifications/README.md	997	### Step 2: Add MySQL server endpoint configuration to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	1056	### Step 3: Enable MySQL bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	1074	### Step 4: Test on MySQL	COMMENT
LOW	docs/bucket/notifications/README.md	1100	### Step 1: Ensure minimum requirements are met	COMMENT
LOW	docs/bucket/notifications/README.md	1104	### Step 2: Add Kafka endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	1170	### Step 3: Enable Kafka bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	1181	### Step 4: Test on Kafka	COMMENT
LOW	docs/bucket/notifications/README.md	1258	### Step 1: Add Webhook endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	1304	### Step 2: Enable Webhook bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	1326	### Step 3: Test with Thumbnailer	COMMENT
LOW	docs/bucket/notifications/README.md	1364	### Step 1: Add NSQ endpoint to MinIO	COMMENT
LOW	docs/bucket/notifications/README.md	1414	### Step 2: Enable NSQ bucket notification using MinIO client	COMMENT
LOW	docs/bucket/notifications/README.md	1425	### Step 3: Test on NSQ	COMMENT
LOW⚡	docs/tuning/README.md	12	#### Step 1 - download `tuned.conf` from the referenced link	COMMENT
LOW⚡	docs/tuning/README.md	17	#### Step 2 - install tuned.conf as supported performance profile on all nodes	COMMENT
LOW⚡	docs/tuning/README.md	23	#### Step 3 - to enable minio performance profile on all the nodes	COMMENT

Self-Referential Comments11 hits · 33 pts

Severity	File	Line	Snippet	Context
MEDIUM	cmd/metrics-v3-ilm.go	3	// # This file is part of MinIO Object Storage stack	COMMENT
MEDIUM	cmd/metrics-v3-system-cpu.go	3	// # This file is part of MinIO Object Storage stack	COMMENT
MEDIUM	cmd/metrics-v3-system-memory.go	3	// # This file is part of MinIO Object Storage stack	COMMENT
MEDIUM	cmd/metrics-v3-system-process.go	3	// # This file is part of MinIO Object Storage stack	COMMENT
MEDIUM	cmd/metrics-v3-cluster-notification.go	3	// # This file is part of MinIO Object Storage stack	COMMENT
MEDIUM	internal/kms/config_test.go	3	// # This file is part of MinIO Object Storage stack	COMMENT
MEDIUM	internal/config/browser/help.go	3	// # This file is part of MinIO Object Storage stack	COMMENT
MEDIUM	docs/bucket/replication/setup_replication.sh	7	#### Create a replication admin on source alias	COMMENT
MEDIUM	docs/bucket/replication/setup_replication.sh	48	# Create a replication user : repluser on dest alias	COMMENT
MEDIUM	helm/minio/values.yaml	130	## Create a secret with private.key and public.crt files and pass that here. Ref: https://github.com/minio/minio/tree/	COMMENT
MEDIUM	helm/minio/values.yaml	529	## The following section documents environment variables for enabling external identity management using an OpenID Conne	COMMENT

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	cmd/data-scanner.go	431	if !f.oldCache.Info.replication.Empty() && f.oldCache.Info.replication.Config.HasActiveRules(prefix, true) {	CODE
CRITICAL	internal/s3select/sql/statement.go	73	if selectAST.Expression.Expressions[0].Expression.And[0].Condition[0].Operand.Operand.Left.Left.Primary.JPathExpr.Stri	CODE

AI Slop Vocabulary4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	cmd/bucket-lifecycle.go	837	// Essentially the same as S3Select barring the xml name.	COMMENT
MEDIUM	cmd/server_test.go	1055	// Run the test with -race flag to utilize this	COMMENT
MEDIUM	cmd/veeam-sos-api.go	81	// - The object should be present in all buckets accessed by Veeam products that want to leverage the SOSAPI functionali	COMMENT
MEDIUM	helm/minio/values.yaml	518	## Please refer for comprehensive list https://docs.min.io/community/minio-object-store/reference/minio-server/minio-s	COMMENT

Verbosity Indicators5 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW⚡	cmd/erasure-object_test.go	1225	// Step 1: create a bucket	COMMENT
LOW⚡	cmd/erasure-object_test.go	1231	// Step 2: Upload an object with a random content	COMMENT
LOW	cmd/erasure-object_test.go	1242	// Step 3: Upload the object with some disks offline	COMMENT
LOW	cmd/erasure-object_test.go	1258	// Step 4: Try to read the object back and check its md5sum	COMMENT
LOW	cmd/admin-handlers-idp-config.go	172	// target, we need to check if a configuration value has been set previously	COMMENT

AI Response Leakage1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	internal/arn/arn.go	31	// In this implementation, account-id is empty.	COMMENT

Redundant / Tautological Comments5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	docs/distributed/iam-import-with-openid.sh	51	# Verify if buckets / objects accessible using service account	COMMENT
LOW	docs/resiliency/resiliency-verify-script.sh	41	# Check if check sums match for source and destination directories	COMMENT
LOW	docs/bucket/replication/setup_ilm_expiry_replication.sh	112	## Check if ILM expiry rules replicated	COMMENT
LOW	docs/bucket/replication/setup_ilm_expiry_replication.sh	204	## Check if latest updated rules get replicated to all sites post re-enable of ILM expiry rules replication	COMMENT
LOW	buildscripts/verify-healing-empty-erasure-set.sh	57	# Check if we should retry	COMMENT

Slop Phrases3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	docker-buildx.sh	6	## All binaries are static make sure to disable CGO.	COMMENT
LOW	buildscripts/cross-compile.sh	8	## All binaries are static make sure to disable CGO.	COMMENT
LOW	helm/minio/values.yaml	374	## make sure to disable this if you are using LDAP.	COMMENT

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	internal/s3select/sql/analysis.go	341	// TODO: implement other functions	COMMENT
LOW	internal/s3select/sql/funceval.go	141	// TODO: implement	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	cmd/test-utils_test.go	310	// Example usage:	COMMENT

Fake / Example Data1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	docs/sts/dex.yaml	74	- email: "admin@example.com"	CODE

Hyper-Verbose Identifiers1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	docs/sts/client_grants/__init__.py	63	def _create_credentials_fetcher(self):	CODE

minio/minio

Open-Source Code Quality, Security and Technical Debt Review