AI Slop Code Risk Monitor

mnfst/manifest

SlopCodeMonitor badge for mnfst/manifest Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Open Source LLM Gateway 🦚

1.3 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for mnfst/manifest, a TypeScript project with 7,611 GitHub stars. SynthScan examined 462,197 lines of code across 1690 source files, recording 463 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 1.3 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.3
Adjusted Signal
1.3
Raw Pattern Score
100%
Time Factor
2026-10-29
Last Push
7.6K
Stars
TypeScript
Language
462.2K
Lines of Code
1.7K
Files
463
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 315 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.3/100 · LOW

Are imports declared and package/API names verified? 98 finding(s).

Agent Over-Engineering Ratio 4.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 306 finding(s).

PR Review Velocity Impact 6.0/100 · LOW

Which changes need focused human review? 463 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 0MEDIUM 51LOW 411

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 463 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers256 hits · 275 pts
SeverityFileLineSnippetContext
LOWnodes/Manifest/Manifest.node.ts82export function withoutRouteManagedStream(body: IDataObject): IDataObject {CODE
LOW…ons/n8n-nodes-manifest/nodes/Manifest/Manifest.node.ts82export function withoutRouteManagedStream(body: IDataObject): IDataObject {CODE
LOWpackages/frontend/tests/components/MultiSelect.test.tsx124 function renderSelfDerivedMultiSelect() {CODE
LOW…rontend/tests/components/DeviceCodeDetailView.test.tsx385function renderConnectedWithAddKeyOpen() {CODE
LOW…ckages/frontend/src/components/message-table-cells.tsx186function resolveMessageProviderName(item: MessageRow): string | undefined {CODE
LOWpackages/frontend/src/components/ProviderKeyForm.tsx35function baseUrlPlaceholderMatches(CODE
LOWpackages/frontend/src/services/playground-store.ts486export function getOrCreatePlaygroundStore(agentName: string): PlaygroundStore {CODE
LOWpackages/frontend/src/services/playground-store.ts486export function getOrCreatePlaygroundStore(agentName: string): PlaygroundStore {CODE
LOWpackages/frontend/src/services/routing-params.ts40export function parseCustomProviderParams(CODE
LOWpackages/frontend/src/services/billing-display.ts26export function formatBillingPriceWithInterval(CODE
LOWpackages/frontend/src/services/routing-utils.ts21export function usedKeyLabelsForModelInTier(CODE
LOWpackages/frontend/src/services/routing-utils.ts80export function availableRouteKeysForModel(CODE
LOWpackages/frontend/src/services/routing-utils.ts103export function routeKeySelectionForModel(input: {CODE
LOW…ckages/frontend/src/services/message-error-taxonomy.ts8export function isPlanRequestLimitMessage(message: MessageErrorTaxonomySignals): boolean {CODE
LOW⚡…s/frontend/src/services/connection-breadcrumb-store.ts13export function connectionBreadcrumbProviderId(): string | null {CODE
LOW⚡…s/frontend/src/services/connection-breadcrumb-store.ts17export function connectionBreadcrumbLabel(): string | null {CODE
LOW⚡…s/frontend/src/services/connection-breadcrumb-store.ts21export function connectionBreadcrumbBackLink(): string {CODE
LOW⚡…s/frontend/src/services/connection-breadcrumb-store.ts25export function connectionBreadcrumbBackLabel(): string {CODE
LOWpackages/frontend/src/services/discovery.ts115export function hasDiscoveryBeenDoneLocally(userId: string): boolean {CODE
LOWpackages/frontend/src/services/chart-utils.ts88export function createFormatLegendTimestamp(CODE
LOWpackages/frontend/src/services/framework-snippets.ts127function getOpenAIChatPythonSnippet(CODE
LOWpackages/frontend/src/services/framework-snippets.ts149function getOpenAIChatTypeScriptSnippet(CODE
LOWpackages/frontend/src/services/framework-snippets.ts181function getAnthropicPythonSnippet(CODE
LOWpackages/frontend/src/services/framework-snippets.ts205function getAnthropicTypeScriptSnippet(CODE
LOWpackages/frontend/src/services/framework-snippets.ts329export function getOpenClawDisableSnippet(model: string): string {CODE
LOWpackages/frontend/src/services/provider-key-labels.ts1export function suggestNextProviderKeyLabel(existing: string[]): string {CODE
LOWpackages/frontend/src/services/api/oauth.ts36export function submitOpenaiOAuthCallback(code: string, state: string) {CODE
LOWpackages/frontend/src/services/api/oauth.ts158export function submitGeminiOAuthCallback(code: string, state: string) {CODE
LOWpackages/frontend/src/services/api/analytics.ts34export function getProviderAnalyticsAgents(authType: string): Promise<{ agents: string[] }> {CODE
LOWpackages/frontend/src/services/api/analytics.ts61export function getConnectionAttemptStatusTimeseries(CODE
LOWpackages/frontend/src/services/api/analytics.ts78export function getConnectionAttemptHttpStatusTimeseries(CODE
LOWpackages/frontend/src/services/api/analytics.ts105export function getConnectionAttemptBreakdown(CODE
LOWpackages/frontend/src/services/api/analytics.ts122export function getConnectionAttemptsByAgentTimeseries(CODE
LOWpackages/frontend/src/services/api/analytics.ts138export function getPerAgentMessageTimeseries(CODE
LOWpackages/frontend/src/services/api/analytics.ts154export function getPerAgentCostTimeseries(CODE
LOW⚡packages/frontend/src/services/api/analytics.ts174export function getGlobalPerAgentTimeseries(range = '24h'): PivotedTimeseries {CODE
LOW⚡packages/frontend/src/services/api/analytics.ts178export function getGlobalPerAgentMessageTimeseries(range = '24h'): PivotedTimeseries {CODE
LOW⚡packages/frontend/src/services/api/analytics.ts182export function getGlobalPerAgentCostTimeseries(range = '24h'): PivotedTimeseries {CODE
LOW⚡packages/frontend/src/services/api/analytics.ts190export function getGlobalPerProviderTimeseries(range = '24h'): PivotedTimeseries {CODE
LOW⚡packages/frontend/src/services/api/analytics.ts194export function getGlobalPerProviderMessageTimeseries(range = '24h'): PivotedTimeseries {CODE
LOW⚡packages/frontend/src/services/api/analytics.ts198export function getGlobalPerProviderCostTimeseries(range = '24h'): PivotedTimeseries {CODE
LOW⚡packages/frontend/src/services/api/analytics.ts206export function getGlobalPerModelTimeseries(range = '24h'): PivotedTimeseries {CODE
LOW⚡packages/frontend/src/services/api/analytics.ts210export function getGlobalPerModelMessageTimeseries(range = '24h'): PivotedTimeseries {CODE
LOW⚡packages/frontend/src/services/api/analytics.ts214export function getGlobalPerModelCostTimeseries(range = '24h'): PivotedTimeseries {CODE
LOWpackages/frontend/src/services/api/analytics.ts225export function getPerProviderMessageTimeseries(CODE
LOWpackages/frontend/src/services/api/analytics.ts235export function getPerProviderCostTimeseries(agentName: string, range = '24h'): PivotedTimeseries {CODE
LOWpackages/frontend/src/services/api/analytics.ts343export function getWorkspaceAutofixStatus(): Promise<AutofixStatus> {CODE
LOWpackages/frontend/src/services/api/analytics.ts432export function getPerProviderReliability(CODE
LOWpackages/frontend/src/services/api/messages.ts216export function flagMessageMiscategorized(id: string) {CODE
LOWpackages/frontend/src/services/api/messages.ts222export function clearMessageMiscategorized(id: string) {CODE
LOWpackages/frontend/src/services/api/routing.ts422export function getAgentProviderDisableImpact(agentName: string, userProviderId: string) {CODE
LOWpackages/frontend/src/services/api/routing.ts492export function invalidateCustomProvidersCache(agentName?: string): void {CODE
LOWpackages/frontend/src/services/api/header-tiers.ts76export function setHeaderTierResponseMode(CODE
LOWpackages/frontend/src/services/api/providers.ts78export async function ensureManagedFreeProvider(CODE
LOWpackages/frontend/src/services/api/specificity.ts17export function getSpecificityAssignments(agentName: string) {CODE
LOWpackages/frontend/src/services/api/specificity.ts65export function setSpecificityResponseMode(CODE
LOWpackages/frontend/src/services/api/specificity.ts98export function clearSpecificityFallbacks(agentName: string, category: string) {CODE
LOWpackages/frontend/src/services/api/billing.ts25export function updateBillingEmailPreferences(CODE
LOWpackages/backend/test/helpers.ts335export function stubProviderDiscoveryFetch(): () => void {CODE
LOWpackages/backend/test/helpers.ts360function stubOpenRouterPricingFetch(): () => void {CODE
196 more matches not shown…
Decorative Section Separators50 hits · 152 pts
SeverityFileLineSnippetContext
MEDIUM…frontend/tests/components/ProviderSelectModal.test.tsx4// ─────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…frontend/tests/components/ProviderSelectModal.test.tsx34// ─────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…frontend/tests/components/ProviderSelectModal.test.tsx151// Helpers ──────────────────────────────────────────────────────────────────COMMENT
MEDIUM…frontend/tests/components/ProviderSelectModal.test.tsx229 // ── Overlay / modal-card behavior (survives on ProviderSelectModal) ──────COMMENT
MEDIUM…tend/tests/components/ProviderSubscriptionTab.test.tsx71 // ── hasDetailView() branch coverage ─────────────────────────────────COMMENT
MEDIUM…tend/tests/components/ProviderSubscriptionTab.test.tsx105 // ── connected() / requiresStoredToken() branches ────────────────────COMMENT
MEDIUM…tend/tests/components/ProviderSubscriptionTab.test.tsx170 // ── Add connection button ───────────────────────────────────────────COMMENT
MEDIUM…tend/tests/components/ProviderSubscriptionTab.test.tsx250 // ── busy / multi-provider rendering ─────────────────────────────────COMMENT
MEDIUMpackages/frontend/tests/pages/Playground.test.tsx5// ─── API mocks (incl. the streaming primitive the real store calls) ─────────COMMENT
MEDIUMpackages/frontend/tests/pages/Playground.test.tsx31// ─── Router primitives ──────────────────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/tests/pages/Playground.test.tsx45// ─── Right sidebar — capture the history-sidebar content ─────────────────────COMMENT
MEDIUMpackages/frontend/tests/pages/Playground.test.tsx56// ─── Leaf component stubs (keep the page + real store logic exercised) ───────COMMENT
MEDIUMpackages/frontend/tests/pages/ProviderPages.test.tsx928 // ── Collapsed connections list ──────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/tests/pages/Routing.test.tsx4// ── API mocks ───────────────────────────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/Overview.tsx258 // ── Provider breakdown (per-agent, grouped by provider) ─────────────COMMENT
MEDIUMpackages/frontend/src/pages/Overview.tsx289 // ── Autofix resources ─────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/GlobalOverview.tsx191 // ── Range state (persisted in localStorage) ──────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/GlobalOverview.tsx208 // ── Group by state (persisted in localStorage) ───────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/GlobalOverview.tsx228 // ── Chart view state ─────────────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/GlobalOverview.tsx248 // ── Data resources (5 parallel) ──────────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/GlobalOverview.tsx337 // ── Autofix resources ─────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/GlobalOverview.tsx453 // ── Harness filter state (sessionStorage) ────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/GlobalOverview.tsx584 // ── Derived data ─────────────────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/Routing.tsx123 // ── Routing deprecation gate ──────────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/Welcome.tsx167 // ── Shared resources ─────────────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/Welcome.tsx211 // ── Step: providers ──────────────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/Welcome.tsx273 // ── Step: harness ────────────────────────────────────────────────────COMMENT
MEDIUMpackages/frontend/src/pages/Welcome.tsx325 // ── Step: routing — the app's real default-routing card ──────────────COMMENT
MEDIUMpackages/frontend/src/pages/Welcome.tsx435 // ── Step: first real agent request ───────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts112 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts114 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts145 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts147 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts190 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts192 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts217 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts219 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts247 // ──────────────────────────────────────────────COMMENT
MEDIUM…d/src/otlp/services/api-key.service.edge-cases.spec.ts249 // ──────────────────────────────────────────────COMMENT
MEDIUM…ages/backend/src/otlp/services/api-key.service.spec.ts133 // ──────────────────────────────────────────────COMMENT
MEDIUM…ages/backend/src/otlp/services/api-key.service.spec.ts135 // ──────────────────────────────────────────────COMMENT
MEDIUM…ages/backend/src/otlp/services/api-key.service.spec.ts388 // ──────────────────────────────────────────────COMMENT
MEDIUM…ages/backend/src/otlp/services/api-key.service.spec.ts390 // ──────────────────────────────────────────────COMMENT
MEDIUM…ages/backend/src/otlp/services/api-key.service.spec.ts474 // ──────────────────────────────────────────────COMMENT
MEDIUM…ages/backend/src/otlp/services/api-key.service.spec.ts476 // ──────────────────────────────────────────────COMMENT
MEDIUMpackages/backend/src/github/github.controller.spec.ts28 // ── Happy path ────────────────────────────────────────────────COMMENT
MEDIUMpackages/backend/src/github/github.controller.spec.ts85 // ── Error handling ────────────────────────────────────────────COMMENT
MEDIUMpackages/backend/src/github/github.controller.spec.ts137 // ── Edge cases ────────────────────────────────────────────────COMMENT
MEDIUM⚡packages/backend/src/github/github.controller.spec.ts172 // ── Concurrency ───────────────────────────────────────────────COMMENT
MEDIUM…ackend/src/routing/proxy/provider-client-converters.ts102// ─── OpenAI wire normalization (used by ProviderClient.forward) ─────────────COMMENT
Fake / Example Data97 hits · 108 pts
SeverityFileLineSnippetContext
LOW…ges/frontend/tests/components/ProviderKeyForm.test.tsx239 describe('placeholder', () => {CODE
LOW…ges/frontend/tests/components/ProviderKeyForm.test.tsx244 expect(input!.getAttribute('placeholder')).toBe('sk-xxx');CODE
LOW…ges/frontend/tests/components/ProviderKeyForm.test.tsx257 expect(input!.getAttribute('placeholder')).toBe('Paste your Ollama Cloud API key');CODE
LOW…ges/frontend/tests/components/ProviderKeyForm.test.tsx268 expect(input!.getAttribute('placeholder')).toBe('Paste token');CODE
LOWpackages/frontend/tests/pages/ResetPassword.test.tsx80 fireEvent.input(emailInput, { target: { value: "test@test.com" } });CODE
LOWpackages/frontend/tests/pages/ResetPassword.test.tsx102 fireEvent.input(emailInput, { target: { value: "test@test.com" } });CODE
LOW…ges/frontend/tests/pages/GlobalOverviewFilter.test.tsx140 data: { user: { id: 'u1', name: 'Test User', email: 'test@test.com' } },CODE
LOWpackages/frontend/tests/pages/Login-validation.test.tsx74 fireEvent.input(emailInput, { target: { value: "user@example.com" } });CODE
LOWpackages/frontend/tests/pages/Login-validation.test.tsx87 fireEvent.input(emailInput, { target: { value: "user@example.com" } });CODE
LOWpackages/frontend/tests/pages/Login-validation.test.tsx116 fireEvent.input(emailInput, { target: { value: "user@example.com" } });CODE
LOWpackages/frontend/tests/pages/Login-validation.test.tsx128 expect(call.email).toBe("user@example.com");CODE
LOWpackages/frontend/tests/pages/Login-validation.test.tsx143 fireEvent.input(emailInput, { target: { value: "user@example.com" } });CODE
LOWpackages/frontend/tests/pages/Login-validation.test.tsx174 target: { value: "user@example.com" },CODE
LOWpackages/frontend/tests/pages/Limits.test.tsx92 useSession: () => () => ({ data: { user: { email: "user@example.com" } } }),CODE
LOWpackages/frontend/tests/pages/Limits.test.tsx187 expect(container.textContent).toContain("user@example.com");CODE
LOWpackages/frontend/tests/pages/Register.test.tsx35 data: { user: { id: 'u1', name: 'Test User', email: 'test@test.com' } },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx118 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx134 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx143 email: 'test@test.com',CODE
LOWpackages/frontend/tests/pages/Register.test.tsx155 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx240 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx249 email: 'test@test.com',CODE
LOWpackages/frontend/tests/pages/Register.test.tsx405 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx428 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx446 email: 'test@test.com',CODE
LOWpackages/frontend/tests/pages/Register.test.tsx461 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx488 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx521 target: { value: 'test@test.com' },CODE
LOWpackages/frontend/tests/pages/Register.test.tsx568 target: { value: 'test@test.com' },CODE
LOW…ages/frontend/tests/pages/Limits-interactions.test.tsx55 useSession: () => () => ({ data: { user: { email: "user@example.com" } } }),CODE
LOWpackages/frontend/tests/pages/Discovery.test.tsx26 data: { user: { id: 'u1', name: 'Test User', email: 'test@test.com' } },CODE
LOWpackages/frontend/tests/pages/Account.test.tsx33 data: { user: { id: 'u1', name: 'Test User', email: 'test@test.com' } },CODE
LOWpackages/frontend/tests/pages/Account.test.tsx148 expect(input.value).toBe('test@test.com');CODE
LOWpackages/frontend/tests/pages/Login.test.tsx130 fireEvent.input(emailInput, { target: { value: 'test@test.com' } });CODE
LOWpackages/frontend/tests/pages/Login.test.tsx136 email: 'test@test.com',CODE
LOWpackages/frontend/tests/services/providers.test.ts1055 expect(p).not.toHaveProperty('placeholder');CODE
LOW⚡…ages/frontend/tests/services/api/notifications.test.ts99 notificationEmail: 'admin@example.com',CODE
LOW⚡…ages/frontend/tests/services/api/notifications.test.ts107 notificationEmail: 'admin@example.com',CODE
LOW⚡…ages/frontend/tests/services/api/notifications.test.ts117 notificationEmail: 'admin@example.com',CODE
LOW⚡…ages/frontend/tests/services/api/notifications.test.ts126 notificationEmail: 'admin@example.com',CODE
LOW⚡…ages/frontend/tests/services/api/notifications.test.ts144 to: 'foo@bar.com',CODE
LOW⚡…ages/frontend/tests/services/api/notifications.test.ts154 const out = await notifications.testSavedEmailProvider('foo@bar.com');CODE
LOW⚡…ages/frontend/tests/services/api/notifications.test.ts159 expect(JSON.parse((init as RequestInit).body as string)).toEqual({ to: 'foo@bar.com' });CODE
LOWpackages/backend/test/helpers.ts202 request.user = { id: userId, email: 'test@test.com', name: 'Test' };CODE
LOWpackages/backend/test/setup.e2e-spec.ts69 'admin@example.com',CODE
LOWpackages/backend/test/setup.e2e-spec.ts150 'admin@example.com',CODE
LOWpackages/backend/src/auth/auth.instance.spec.ts306 const mockUser = { name: 'Jane Doe', email: 'jane@example.com' };CODE
LOWpackages/backend/src/auth/auth.instance.spec.ts312 userName: 'Jane Doe',CODE
LOWpackages/backend/src/auth/auth.instance.spec.ts345 const mockUser = { name: 'John Doe', email: 'john@example.com' };CODE
LOWpackages/backend/src/auth/auth.instance.spec.ts351 userName: 'John Doe',CODE
LOWpackages/backend/src/auth/session.guard.spec.ts90 user: { id: 'user-1', name: 'Test', email: 'test@test.com' },CODE
LOWpackages/backend/src/auth/session.guard.spec.ts107 user: { id: 'user-1', name: 'Test', email: 'test@test.com' },CODE
LOWpackages/backend/src/auth/session.guard.spec.ts136 user: { id: 'user-1', name: 'Test', email: 'test@test.com' },CODE
LOW…ckend/src/discovery/dto/complete-discovery.dto.spec.ts14 name: 'Jane Doe',CODE
LOW…ages/backend/src/otlp/services/api-key.service.spec.ts275 organizationName: 'Acme Corp',CODE
LOW…ages/backend/src/otlp/services/api-key.service.spec.ts281 organization_name: 'Acme Corp',CODE
LOW…free-provider/managed-free-provider.controller.spec.ts33 { id: 'user-1', email: 'user@example.com' },CODE
LOW…free-provider/managed-free-provider.controller.spec.ts41 userEmail: 'user@example.com',CODE
LOW…free-provider/managed-free-provider.controller.spec.ts53 { id: 'user-1', email: 'user@example.com' },CODE
LOW…free-provider/managed-free-provider.controller.spec.ts61 userEmail: 'user@example.com',CODE
37 more matches not shown…
Over-Commented Block47 hits · 47 pts
SeverityFileLineSnippetContext
LOWrailway.toml1[build]COMMENT
LOWdocker/install.sh1#!/usr/bin/env bashCOMMENT
LOWdocker/install.sh21# Re-running against an existing install directory resumes it: the composeCOMMENT
LOWdocker/docker-compose.yml1# Managed by Manifest's installer. Keep local settings in `.env` orCOMMENT
LOWdocker/docker-compose.yml21# - To harden the database password, set BOTH `POSTGRES_PASSWORD` ANDCOMMENT
LOWdocker/docker-compose.yml81 # Per-tenant (M201) and per-IP (M202) requests/minute for this backend process.COMMENT
LOWdocker/docker-compose.yml141 - RUN_MIGRATIONS_ON_BOOT=${RUN_MIGRATIONS_ON_BOOT:-true}COMMENT
LOWdeploy/apple-containers/start.sh1#!/usr/bin/env bashCOMMENT
LOWscripts/db-reindex-bloated.sh1#!/usr/bin/env bashCOMMENT
LOWscripts/check-changesets.js1const fs = require('fs');COMMENT
LOWpackages/frontend/vite.config.ts1import { readFileSync } from 'node:fs';COMMENT
LOW…s/components/ProviderSelectModal-subscription.test.tsx1import { describe, it, expect, vi, beforeEach } from "vitest";COMMENT
LOW…frontend/tests/components/ProviderSelectModal.test.tsx1import { describe, it, expect, vi, beforeEach } from 'vitest';COMMENT
LOW…frontend/tests/components/ProviderSelectModal.test.tsx21//COMMENT
LOW…ntend/tests/components/MessageDetails.autofix.test.tsx21 getModelDisplayName: (slug: string) => slug,COMMENT
LOWpackages/frontend/src/components/AddAgentModal.tsx41 // Where the logs live depends on the deployment: self-hosted keeps them inCOMMENT
LOWpackages/frontend/src/pages/Routing.tsx121 const complexityEnabled = () => complexityStatus()?.enabled ?? true;COMMENT
LOWpackages/frontend/src/services/api/cache.ts41// Module-level cache keyed by fully-qualified request URL (path + query string).COMMENT
LOWpackages/backend/test/messages.isolation.e2e-spec.ts1import { INestApplication } from '@nestjs/common';COMMENT
LOWpackages/backend/test/proxy.e2e-spec.ts241COMMENT
LOWpackages/backend/src/main.ts81 // tokens and wrecks streaming time-to-first-token. All other responses useCOMMENT
LOWpackages/backend/src/main.ts101 // Newer Chrome replaced PNA with Local Network Access, a user permission thatCOMMENT
LOWpackages/backend/src/main.ts141 expressApp.use(httpErrorLogger);COMMENT
LOWpackages/backend/src/cors-csp-config.ts141// LEGACY — kept for old browsers only. Do not reach for this when debugging aCOMMENT
LOW…backend/src/database/pricing-sync.service.edge.spec.ts41 });COMMENT
LOWpackages/backend/src/database/database.module.ts41 // single instance (dev, self-hosted) must boot with the schema appliedCOMMENT
LOWpackages/backend/src/playground/playground.service.ts381 isSubscription: authType === 'subscription',COMMENT
LOWpackages/backend/src/config/app.config.ts41 // to skip (e.g. a managed Postgres where the role lacks ALTER ROLE on itself).COMMENT
LOWpackages/backend/src/config/app.config.ts81 // Shared secret guarding the internal CRM metrics feedCOMMENT
LOW…backend/src/model-discovery/model-discovery.service.ts721 return this.computeScore(this.applyCapabilities(model, providerId));COMMENT
LOWpackages/backend/src/common/utils/secret-scrub.ts1// Best-effort redaction of provider credentials that may appear in upstreamCOMMENT
LOWpackages/backend/src/scoring/specificity-signals.ts21 * URL alone is intentionally not enough to activate web_browsing — a URLCOMMENT
LOWpackages/backend/src/scoring/keywords/web-browsing.ts1// Only unambiguous browse-intent phrases. Generic web-dev vocabularyCOMMENT
LOWpackages/backend/src/routing/proxy/provider-client.ts781 if (shouldApplyAnthropicAutomaticCacheControl(endpointKey)) {COMMENT
LOW…ckages/backend/src/routing/proxy/provider-endpoints.ts481 buildHeaders: (apiKey: string) => ({COMMENT
LOW…ckages/backend/src/routing/proxy/provider-endpoints.ts621 // models (Qwen, GLM, Kimi, MiniMax, …) on a single Bearer-auth route.COMMENT
LOW…ackend/src/routing/proxy/anthropic-messages-adapter.ts521 if (!choice) continue;COMMENT
LOW…es/backend/src/routing/proxy/proxy-fallback.service.ts1001 // every request even when the caller sent no x-session-key. NUL-joined soCOMMENT
LOW…outing/proxy/__tests__/provider-client.timeout.spec.ts1// Tests that the PROVIDER_TIMEOUT_MS abort signal actually fires andCOMMENT
LOW…src/routing/custom-provider/custom-provider.service.ts321 name: dto.name,COMMENT
LOWpackages/backend/src/routing/autofix/autofix.service.ts421 // A patch to apply: reached on `patched` (already verified) or `unverified`COMMENT
LOWpackages/backend/src/routing/autofix/autofix.module.ts41 const nodeEnv = config.get<string>('NODE_ENV');COMMENT
LOW…ckages/backend/src/analytics/services/query-helpers.ts181export function sqlExcludePlayground(alias: string): string {COMMENT
LOW…ckages/backend/src/analytics/services/query-helpers.ts201 // matching across tenants is identical to matching within one, andCOMMENT
LOW.github/workflows/db-diagram-comment.yml1name: DB Diagram CommentCOMMENT
LOW.github/workflows/release.yml61 - name: Detect version bumpCOMMENT
LOW.github/workflows/publish-cli.yml1name: Publish CLICOMMENT
Hallucination Indicators1 hit · 10 pts
SeverityFileLineSnippetContext
CRITICAL…ckend/src/routing/proxy/__tests__/kiro-adapter.spec.ts429 request.conversationState.currentMessage.userInputMessage.userInputMessageContext.tools.map(CODE
Verbosity Indicators4 hits · 8 pts
SeverityFileLineSnippetContext
LOW⚡packages/backend/src/github/github.controller.spec.ts175 // Step 1: prime the cache with a known value so we can exercise theCOMMENT
LOW⚡packages/backend/src/github/github.controller.spec.ts184 // Step 2: expire the cache by advancing Date.now past the 10-minute TTL.COMMENT
LOW⚡packages/backend/src/github/github.controller.spec.ts187 // Step 3: fire 10 concurrent calls while a single fetch is in flight.COMMENT
LOWpackages/backend/src/github/github.controller.spec.ts215 // Step 4: release the gated fetch and verify all 10 concurrent callersCOMMENT
Structural Annotation Overuse4 hits · 8 pts
SeverityFileLineSnippetContext
LOW⚡packages/backend/src/github/github.controller.spec.ts175 // Step 1: prime the cache with a known value so we can exercise theCOMMENT
LOW⚡packages/backend/src/github/github.controller.spec.ts184 // Step 2: expire the cache by advancing Date.now past the 10-minute TTL.COMMENT
LOW⚡packages/backend/src/github/github.controller.spec.ts187 // Step 3: fire 10 concurrent calls while a single fetch is in flight.COMMENT
LOWpackages/backend/src/github/github.controller.spec.ts215 // Step 4: release the gated fetch and verify all 10 concurrent callersCOMMENT
Example Usage Blocks3 hits · 4 pts
SeverityFileLineSnippetContext
LOWdocker/install.sh12# Usage:COMMENT
LOWdeploy/apple-containers/start.sh19# Usage:COMMENT
LOWscripts/db-reindex-bloated.sh14# Usage:COMMENT
Modern AI Meta-Vocabulary1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMCLAUDE.md171│ │ │ ├── Limits.tsx # Alert rule management — mounted at /harnesses/:agentName/guardrails ("GuaCODE