4.9

Adjusted Signal

4.9

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

4.8K

Stars

JavaScript

Language

122.7K

Lines of Code

220

Files

183

Pattern Hits

2026-10-31

Scan Date

0.16

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 127 finding(s).

Hallucinated Dependency & Supply Chain Risk 17.0/100 · LOW

Are imports declared and package/API names verified? 45 finding(s).

Agent Over-Engineering Ratio 4.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 121 finding(s).

PR Review Velocity Impact 19.1/100 · LOW

Which changes need focused human review? 183 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 34HIGH 1MEDIUM 13LOW 135

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 183 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators34 hits · 445 pts

Severity	File	Line	Snippet	Context
CRITICAL	tests/test-noiseSuppression.js	260	context.window.AudioContext.prototype.audioWorklet.addModule.callsFake(	CODE
CRITICAL⚡	tests/test-videoDrawing.js	556	tools.panel.hidden.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	558	tools.panel.hidden.should.be.false();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	562	tools.panel.hidden.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	563	appearance.panel.hidden.should.be.false();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	566	appearance.panel.hidden.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	580	tools.panel.hidden.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	586	tools.panel.hidden.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	592	overlay.appearanceButton.firstChild.style.backgroundColor.should.equal('rgb(255, 23, 68)');	CODE
CRITICAL⚡	tests/test-videoDrawing.js	596	overlay.widthPreview.style.height.should.equal('8px');	CODE
CRITICAL	tests/test-videoDrawing.js	711	overlay.toolButtons.pencil.disabled.should.be.true();	CODE
CRITICAL	tests/test-videoDrawing.js	731	overlay.toolButtons.pencil.disabled.should.be.false();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	745	overlay.toolButtons.pencil.disabled.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	746	overlay.undoButton.disabled.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	747	overlay.clearButton.disabled.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	748	overlay.visibilityButton.disabled.should.be.false();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	761	overlay.toolButtons.pencil.disabled.should.be.false();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	770	queued.toolButtons.pencil.disabled.should.be.true();	CODE
CRITICAL⚡	tests/test-videoDrawing.js	774	dom.window.Overlay.pendingPermissions.size.should.equal(0);	CODE
CRITICAL⚡	tests/test-videoDrawing.js	784	ownerOverlay.toolButtons.pencil.disabled.should.be.false();	CODE
CRITICAL	tests/test-videoDrawing.js	907	saved.blob.size.should.be.above(0);	CODE
CRITICAL	tests/test-hostProtection.js	171	result.data.is_presenter.should.be.true();	CODE
CRITICAL	tests/test-hostProtection.js	196	guestResult.data.is_presenter.should.be.false();	CODE
CRITICAL	tests/test-oidcCreateRoom.js	162	hostResult.data.is_presenter.should.be.true();	CODE
CRITICAL	tests/test-oidcCreateRoom.js	166	guestResult.data.is_presenter.should.be.false();	CODE
CRITICAL	tests/test-validate.js	281	cfg.wbCanvasJson.objects.should.have.length(4);	CODE
CRITICAL⚡	tests/test-roomTimeLimit.js	233	host.data.time_limit.durationMs.should.equal(2000);	CODE
CRITICAL⚡	tests/test-roomTimeLimit.js	234	host.data.time_limit.reached.should.equal(false);	CODE
CRITICAL⚡	tests/test-roomTimeLimit.js	240	joined.data.time_limit.durationMs.should.equal(2000);	CODE
CRITICAL⚡	tests/test-roomTimeLimit.js	241	joined.data.time_limit.remainingMs.should.be.belowOrEqual(2000);	CODE
CRITICAL	tests/test-presenterSecurity.js	126	presenterResult.data.is_presenter.should.be.true();	CODE
CRITICAL	tests/test-presenterSecurity.js	131	participantResult.data.is_presenter.should.be.false();	CODE
CRITICAL	tests/test-presenterSecurity.js	192	result.data.is_presenter.should.be.false();	CODE
CRITICAL	tests/test-presenterSecurity.js	203	result.data.is_presenter.should.be.false();	CODE

Hyper-Verbose Identifiers110 hits · 70 pts

Severity	File	Line	Snippet	Context
LOW	app/src/server.js	260	function isOidcPresenterTokenValid(token, roomId) {	CODE
LOW	app/src/server.js	4185	function scheduleBreakoutIdleCheck(room_id) {	CODE
LOW	app/src/oidcPresenter.js	5	function isOidcConfiguredPresenter(oidcUser, presenterList) {	CODE
LOW	public/js/detectSpeaking.js	20	async function getMicrophoneVolumeIndicator(stream) {	CODE
LOW	public/js/client.js	1130	function refreshMainButtonsToolTipPlacement() {	CODE
LOW	public/js/client.js	1504	function handleRoomTimeLimitReached() {	CODE
LOW	public/js/client.js	1619	function applyNoiseSuppressionDefault() {	CODE
LOW	public/js/client.js	2864	function getCameraBackgroundPresets() {	CODE
LOW	public/js/client.js	2872	function createCameraBackgroundGrid(grid, fileInput) {	CODE
LOW	public/js/client.js	2945	function updateCameraBackgroundGrid(grid) {	CODE
LOW	public/js/client.js	3007	function attachCameraBackgroundStream(stream, previousStream) {	CODE
LOW	public/js/client.js	3144	async function storeCameraBackgroundFile(file) {	CODE
LOW	public/js/client.js	3152	function loadCameraBackgroundImageElement(url) {	CODE
LOW	public/js/client.js	3165	async function selectCameraBackgroundImage(source) {	CODE
LOW	public/js/client.js	3215	async function loadCameraBackgroundImage(event) {	CODE
LOW	public/js/client.js	3293	async function updateInitLocalVideoMediaStream(camStream) {	CODE
LOW	public/js/client.js	3399	async function updateLocalVideoMediaStream(camStream) {	CODE
LOW	public/js/client.js	3545	function handleRNNoiseNotSupported() {	CODE
LOW	public/js/client.js	3617	function setMicrophoneNoiseSuppression(track, enabled, isCurrent) {	CODE
LOW	public/js/client.js	3676	function stopNoiseSuppressionPipeline() {	CODE
LOW	public/js/client.js	3750	function setNoiseSuppressionForAllPeers(enabled) {	CODE
LOW	public/js/client.js	3766	async function handleNoiseSuppressionRequest(enabled) {	CODE
LOW	public/js/client.js	3993	async function handlePeersConnectionStatus(peer_id) {	CODE
LOW	public/js/client.js	4942	function updateButtonsBarPinnedOffset() {	CODE
LOW	public/js/client.js	4961	async function initEnumerateAudioDevices() {	CODE
LOW	public/js/client.js	4985	async function initEnumerateVideoDevices() {	CODE
LOW	public/js/client.js	5013	async function getUserMediaWithDeviceFallback(kind, getConstraints) {	CODE
LOW	public/js/client.js	5186	async function refreshMyAudioVideoDevices() {	CODE
LOW	public/js/client.js	5357	async function updateLocalVideoMediaStream(stream) {	CODE
LOW	public/js/client.js	6986	function createResponsiveDropdownItem(sourceButton, label, tier = 'secondary') {	CODE
LOW	public/js/client.js	7001	function createResponsiveDropdownRangeItem(sourceRange, label, iconClass) {	CODE
LOW	public/js/client.js	7286	function updateScreenCameraLayoutUI(mode) {	CODE
LOW	public/js/client.js	7316	function handleScreenCameraLayoutBtn(button) {	CODE
LOW	public/js/client.js	7855	function scheduleParticipantViewRestore() {	CODE
LOW	public/js/client.js	8173	function removeVideoPinMediaContainer(peer_id, force_remove = false) {	CODE
LOW	public/js/client.js	8954	function openPinnedParticipantsSidebar(announce = false) {	CODE
LOW	public/js/client.js	9117	function confirmTranscriptionStartWithAudioOff() {	CODE
LOW	public/js/client.js	9144	function applyWhisperUiAvailability() {	CODE
LOW	public/js/client.js	10267	async function documentPictureInPictureRestart() {	CODE
LOW	public/js/client.js	10278	async function documentPictureInPictureClose() {	CODE
LOW	public/js/client.js	10289	async function documentPictureInPictureOpen() {	CODE
LOW	public/js/client.js	10358	function observeElementClassChanges(element, observerName) {	CODE
LOW	public/js/client.js	10665	function updateSettingsExtraGroups() {	CODE
LOW	public/js/client.js	10771	function handleExitMenuOutsideClick(e) {	CODE
LOW	public/js/client.js	11290	function loadSettingsFromLocalStorage() {	CODE
LOW	public/js/client.js	11396	function handleUsernameEmojiPicker() {	CODE
LOW	public/js/client.js	11737	function createVideoLoadingSpinner(wrap, videoEl) {	CODE
LOW	public/js/client.js	12370	function getScreenShareVideoConstraints() {	CODE
LOW	public/js/client.js	12392	function getScreenShareConstraints() {	CODE
LOW	public/js/client.js	12618	async function handleToggleScreenException(reason, init) {	CODE
LOW	public/js/client.js	13186	function getAudioStreamFromAudioElements() {	CODE
LOW	public/js/client.js	13501	function setChatRoomAndCaptionForMobile() {	CODE
LOW	public/js/client.js	13569	function shouldDockParticipantsPanel() {	CODE
LOW	public/js/client.js	13573	function syncParticipantsListContainer(showParticipantsPanel = false) {	CODE
LOW	public/js/client.js	13593	function syncParticipantsPanelVisibility(forceVisible = null) {	CODE
LOW	public/js/client.js	13670	function toggleCaptionDropDownMenu() {	CODE
LOW	public/js/client.js	13690	function handleMsgerDropdownOutsidePress(event) {	CODE
LOW	public/js/client.js	13710	function toggleParticipantsDropDownMenu(activeMenu, siblingMenu = null) {	CODE
LOW	public/js/client.js	13722	function syncCaptionEveryoneButtons(isActive) {	CODE
LOW	public/js/client.js	14130	function hideChatRoomAndEmojiPicker() {	CODE
50 more matches not shown…

Decorative Section Separators11 hits · 46 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	docker-compose-whisper.yml	1	# =============================================================================	COMMENT
MEDIUM⚡	docker-compose-whisper.yml	3	# =============================================================================	COMMENT
MEDIUM⚡	docker-compose-whisper.yml	12	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	docker-compose-whisper.yml	14	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	docker-compose-whisper.yml	20	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	docker-compose-whisper.yml	22	# -----------------------------------------------------------------------------	COMMENT
MEDIUM⚡	docker-compose-whisper.yml	40	# =============================================================================	COMMENT
MEDIUM⚡	docker-compose-whisper.yml	43	# -------------------------------------------------------------------------	COMMENT
MEDIUM⚡	docker-compose-whisper.yml	45	# -------------------------------------------------------------------------	COMMENT
MEDIUM	docker-compose-whisper.yml	67	# -------------------------------------------------------------------------	COMMENT
MEDIUM	docker-compose-whisper.yml	69	# -------------------------------------------------------------------------	COMMENT

Fake / Example Data11 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/test-api.js	44	peerId1: { peer_name: 'John Doe' },	CODE
LOW⚡	tests/test-api.js	45	peerId2: { peer_name: 'John Doe' },	CODE
LOW⚡	tests/test-api.js	48	peerId1: { peer_name: 'John Doe' },	CODE
LOW	tests/test-api.js	94	peer_name: 'John Doe',	CODE
LOW	tests/test-api.js	139	name: 'John Doe',	CODE
LOW	tests/test-editor.js	250	const big = 'lorem ipsum '.repeat(5000);	CODE
LOW	tests/test-gifSearch.js	74	assert.equal(elements.input.getAttribute('placeholder'), 'Search KLIPY');	CODE
LOW	public/js/client.js	18499	const text = new fabric.IText('Lorem Ipsum', {	CODE
LOW	public/js/gifSearch.js	38	this.input.setAttribute('placeholder', GifSearch.PLACEHOLDER);	CODE
LOW	public/js/i18n.js	60	const ATTR_KEYS = ['title', 'placeholder', 'aria-label', 'data-tippy-content'];	CODE
LOW	scripts/extract-ui-lang.js	23	const ATTR_KEYS = ['title', 'placeholder', 'aria-label', 'data-tippy-content'];	CODE

Over-Commented Block11 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose-whisper.yml	1	# =============================================================================	COMMENT
LOW	docker-compose-whisper.yml	21	# Point MiroTalk P2P at this server	COMMENT
LOW	docker-compose.template.yml	21	# - ./app/:/src/app/:ro	COMMENT
LOW	app/src/config.template.js	121	},	COMMENT
LOW	app/src/config.template.js	221	},	COMMENT
LOW	app/src/config.template.js	321	model: process.env.CHATGPT_MODEL \|\| 'gpt-6-luna',	COMMENT
LOW	app/src/config.template.js	341	// - apiKey : KLIPY app key. Per KLIPY's integration requirements, searches are	COMMENT
LOW	app/src/config.template.js	361	// OpenAI-compatible server (whisper.cpp server, faster-whisper, etc.).	COMMENT
LOW	public/css/client.css	4861	#activeRoomsBtn,	COMMENT
LOW	public/css/client.css	4901	}	COMMENT
LOW	public/js/helpers.js	81	// To start recording, call audioRecorder.getMixedAudioStream(audioStreams);	COMMENT

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	public/js/client.js	12747	// Enable/disable local audio as requested by caller	COMMENT

Slop Phrases1 hit · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	docker-compose-whisper.yml	5	# Runs an OpenAI-compatible Whisper server so you can use the room	COMMENT

Structural Annotation Overuse3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	webhook/README.md	7	### Step 1: Enable Webhooks	COMMENT
LOW	webhook/README.md	20	### Step 2: Run the Webhook Server	COMMENT
LOW	webhook/README.md	36	### Step 3: Webhook Events	COMMENT

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	app/src/lib/whisper.js	13	// Stored normalized (lowercase, no spaces/punctuation) for robust matching.	COMMENT

miroslavpejic85/mirotalk

Open-Source Code Quality, Security and Technical Debt Review