1.1

Adjusted Signal

1.1

Raw Pattern Score

100%

Time Factor

2026-10-29

Last Push

4.2K

Stars

Rust

Language

196.4K

Lines of Code

1.5K

Files

145

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 140 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.0/100 · LOW

Are imports declared and package/API names verified? 5 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 5.0/100 · LOW

Which changes need focused human review? 145 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 4HIGH 0MEDIUM 11LOW 130

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 145 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block104 hits · 104 pts

Severity	File	Line	Snippet	Context
LOW	Cargo.toml	141	ignored = ["serde"]	COMMENT
LOW	crates/cas/src/gc.rs	101		COMMENT
LOW	crates/cas/src/cas.rs	81	Ok(true)	COMMENT
LOW	crates/token/src/funcs.rs	41	// }	COMMENT
LOW	crates/token/src/funcs.rs	61	// Value::try_from_serializable(&context)	COMMENT
LOW	crates/daemon-proto/src/lib.rs	1	#![allow(clippy::disallowed_types)]	COMMENT
LOW	crates/pdk-api/src/host.rs	21	#[serde(default)]	COMMENT
LOW	crates/pdk-api/src/host.rs	41	/// the cache key/hash.	COMMENT
LOW	crates/pdk-api/src/vcs.rs	1	//! Serializable interface for source-control provider plugins.	COMMENT
LOW	crates/pdk-api/src/vcs.rs	81	///	COMMENT
LOW	crates/pdk-api/src/vcs.rs	181	bitflags! {	COMMENT
LOW	crates/pdk-api/src/toolchain/tier1.rs	41	/// Will be used for task usage detection.	COMMENT
LOW	crates/pdk-api/src/toolchain/tier2.rs	21	);	COMMENT
LOW	crates/daemon-client/src/daemon_client.rs	21	/// plus the HTTP/2 handshake. Enforced locally with a timer around the	COMMENT
LOW	crates/cache-remote/src/grpc_tls.rs	1	use moon_config::{RemoteMtlsConfig, RemoteTlsConfig};	COMMENT
LOW	crates/hash/src/content_hash.rs	21	pub fn hash_file<T: AsRef<Path>>(path: T) -> miette::Result<Self> {	COMMENT
LOW	crates/config/tests/extensions_config_test.rs	21	// fn errors_invalid_locator() {	COMMENT
LOW	crates/config/src/project_config.rs	61		COMMENT
LOW	crates/config/src/project_config.rs	101	config_struct!(	COMMENT
LOW	crates/config/src/project_config.rs	141	/// Defines ownership of source code within the current project, by mapping	COMMENT
LOW	crates/config/src/project_config.rs	161	/// A map of identifiers to task objects. Tasks represent the work-unit	COMMENT
LOW	crates/config/src/workspace_config.rs	121	pub schema: String,	COMMENT
LOW	crates/config/src/workspace_config.rs	141	#[serde(rename = "unstable_daemon")]	COMMENT
LOW	crates/config/src/workspace_config.rs	161	/// Supports a relative file path or a secure URL.	COMMENT
LOW	crates/config/src/workspace_config.rs	181	pub pipeline: PipelineConfig,	COMMENT
LOW	crates/config/src/task_config.rs	121	#[derive(Config)]	COMMENT
LOW	crates/config/src/task_config.rs	141	/// @since 2.6.0	COMMENT
LOW	crates/config/src/task_config.rs	181	pub enum TaskDependencyCacheStrategy {	COMMENT
LOW	crates/config/src/task_config.rs	221	/// otherwise `ignored`.	COMMENT
LOW	crates/config/src/task_config.rs	281	}	COMMENT
LOW	crates/config/src/task_config.rs	301	pub command: TaskArgs,	COMMENT
LOW	crates/config/src/task_config.rs	321	pub deps: Option<Vec<TaskDependency>>,	COMMENT
LOW	crates/config/src/task_config.rs	341	pub inputs: Option<Vec<Input>>,	COMMENT
LOW	crates/config/src/inherited_tasks_config.rs	141	/// Lower is inherited first, while higher is last.	COMMENT
LOW	crates/config/src/inherited_tasks_config.rs	281	/// Docs: https://moonrepo.dev/docs/config/tasks	COMMENT
LOW	crates/config/src/inherited_tasks_config.rs	301		COMMENT
LOW	crates/config/src/inherited_tasks_config.rs	321	/// tasks and configuration. If not defined, will be inherited by all projects.	COMMENT
LOW	crates/config/src/template_config.rs	181	config_enum!(	COMMENT
LOW	crates/config/src/template_config.rs	281	/// workspace root when leading with `/`, otherwise the working directory.	COMMENT
LOW	crates/config/src/toolchains_config.rs	41	/// Run the `InstallDependencies` actions for each running task	COMMENT
LOW	crates/config/src/toolchains_config.rs	81	#[derive(Config)]	COMMENT
LOW	crates/config/src/task_options_config.rs	321	config_struct!(	COMMENT
LOW	crates/config/src/task_options_config.rs	341	/// used to invalidate local and remote caches.	COMMENT
LOW	crates/config/src/task_options_config.rs	361	#[serde(skip_serializing_if = "Option::is_none")]	COMMENT
LOW	crates/config/src/task_options_config.rs	381	#[serde(skip_serializing_if = "Option::is_none")]	COMMENT
LOW	crates/config/src/task_options_config.rs	421	/// The strategy to use when merging `tags` with an inherited task.	COMMENT
LOW	crates/config/src/task_options_config.rs	441	/// The style in which task output will be printed to the console.	COMMENT
LOW	crates/config/src/task_options_config.rs	461		COMMENT
LOW	crates/config/src/workspace/notifier_config.rs	41	/// When enabled, will bypass the daemon and send webhooks in the	COMMENT
LOW	crates/config/src/workspace/experiments_config.rs	1	use crate::config_struct;	COMMENT
LOW	crates/config/src/workspace/codeowners_config.rs	21	/// A map of global file paths and glob patterns to a list of owners.	COMMENT
LOW	crates/config/src/workspace/hasher_config.rs	41	/// when a hash is being generated. Patterns are workspace relative,	COMMENT
LOW	crates/config/src/workspace/remote_config.rs	81	/// When local, only download matching blobs and do not upload new	COMMENT
LOW	crates/config/src/workspace/remote_config.rs	101	pub verify_integrity: bool,	COMMENT
LOW	crates/config/src/workspace/remote_config.rs	121		COMMENT
LOW	crates/config/src/workspace/remote_config.rs	161	config_struct!(	COMMENT
LOW	crates/config/src/workspace/remote_config.rs	181	/// The remote host to connect and send requests to.	COMMENT
LOW	crates/config/src/workspace/docker_config.rs	21		COMMENT
LOW	crates/config/src/workspace/docker_config.rs	41	/// rendering the `Dockerfile`. Powered by Tera.	COMMENT
LOW	crates/config/src/workspace/docker_config.rs	61	pub install_toolchain_dependencies: bool,	COMMENT
44 more matches not shown…

Structural Annotation Overuse25 hits · 40 pts

Severity	File	Line	Snippet	Context
LOW	.agents/skills/improve-code-quality/SKILL.md	27	## Step 1: Validate and detect language	COMMENT
LOW	.agents/skills/improve-code-quality/SKILL.md	40	## Step 2: Manual analysis	COMMENT
LOW	.agents/skills/improve-code-quality/SKILL.md	90	## Step 3: Run automated tools	COMMENT
LOW	.agents/skills/improve-code-quality/SKILL.md	124	## Step 4: Present the report	COMMENT
LOW	.agents/skills/improve-code-quality/SKILL.md	197	## Step 5: Apply fixes (after approval)	COMMENT
LOW	.agents/skills/improve-code-quality/SKILL.md	216	## Step 6: Validate best practices	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	187	### Step 1: Clarifying Questions	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	196	### Step 2: Brainstorming	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	207	### Step 3: Curation	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	223	### Step 4: Gap Check	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	228	### Step 5: Drafting	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	249	### Step 6: Iterative Refinement	COMMENT
LOW⚡	.agents/skills/doc-coauthoring/SKILL.md	305	### Step 1: Predict Reader Questions	COMMENT
LOW⚡	.agents/skills/doc-coauthoring/SKILL.md	312	### Step 2: Test with Sub-Agent	COMMENT
LOW⚡	.agents/skills/doc-coauthoring/SKILL.md	321	### Step 3: Run Additional Checks	COMMENT
LOW⚡	.agents/skills/doc-coauthoring/SKILL.md	329	### Step 4: Report and Fix	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	345	### Step 1: Predict Reader Questions	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	352	### Step 2: Setup Testing	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	369	### Step 3: Additional Checks	COMMENT
LOW	.agents/skills/doc-coauthoring/SKILL.md	377	### Step 4: Iterate Based on Results	COMMENT
LOW	skills/debug-task/SKILL.md	42	### Step 1: Inspect the resolved task configuration	COMMENT
LOW	skills/debug-task/SKILL.md	130	### Step 2: Run with maximum verbosity	COMMENT
LOW	skills/debug-task/SKILL.md	163	### Step 3: Inspect cache state	COMMENT
LOW	skills/debug-task/SKILL.md	187	### Step 4: Diagnose the problem type	COMMENT
LOW	skills/debug-task/SKILL.md	226	### Step 5: Validate the fix	COMMENT

Hallucination Indicators4 hits · 40 pts

Severity	File	Line	Snippet	Context
CRITICAL	crates/app/src/commands/docker/scaffold.rs	177	docker_config: self.session.workspace_config.docker.scaffold.clone(),	CODE
CRITICAL	crates/app/src/commands/docker/prune.rs	137	let docker_config = self.session.workspace_config.docker.prune.clone();	CODE
CRITICAL	crates/process-augment/src/augmented_command.rs	426	let proto_version = self.context.toolchains_config.proto.version.to_string();	CODE
CRITICAL	crates/action-graph/src/action_graph_builder.rs	1496	ActionNode::setup_proto(self.app_context.toolchains_config.proto.version.clone())	CODE

Modern AI Meta-Vocabulary8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	crates/pdk-api/src/toolchain/tier1.rs	132	/// Docker scaffold configuration. When scaffolding a project, this	COMMENT
MEDIUM	crates/pdk-api/src/toolchain/tier1.rs	159	/// List of virtual paths that were copied into the scaffold.	COMMENT
MEDIUM	crates/config/src/template_config.rs	280	/// A pre-populated destination to scaffold to, relative from the	COMMENT
MEDIUM	…ipeline/tests/__fixtures__/pipeline/dep-types/moon.yml	100	# orchestrate their dependencies, but it still ran, so the cleanup runs	COMMENT
MEDIUM	crates/project-constraints/tests/constraints_test.rs	547	#[should_panic(expected = "Layering violation: Project foo with layer scaffolding")]	COMMENT
MEDIUM	crates/project-constraints/tests/constraints_test.rs	558	#[should_panic(expected = "Layering violation: Project foo with layer scaffolding")]	COMMENT
MEDIUM	crates/project-constraints/tests/constraints_test.rs	569	#[should_panic(expected = "Layering violation: Project foo with layer scaffolding")]	COMMENT
MEDIUM	crates/project-constraints/tests/constraints_test.rs	580	#[should_panic(expected = "Layering violation: Project foo with layer scaffolding")]	COMMENT

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	crates/cache/src/cache_engine.rs	64	# This file is a cache directory tag created by moon.	COMMENT
MEDIUM	.github/workflows/release.yml	273	# Create a GitHub Release while uploading all files to it	COMMENT

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	crates/action-pipeline/src/reports/estimate.rs	60	// Comparisons don't utilize the same caching mechanisms that moon does,	COMMENT

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	scenarios/interactive/input.py	1		CODE

moonrepo/moon

Open-Source Code Quality, Security and Technical Debt Review