0.5

Adjusted Signal

0.5

Raw Pattern Score

100%

Time Factor

—

Last Push

—

Stars

—

Language

1.7M

Lines of Code

6.1K

Files

442

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 321 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.0/100 · LOW

Are imports declared and package/API names verified? 64 finding(s).

Agent Over-Engineering Ratio 1.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 294 finding(s).

PR Review Velocity Impact 2.5/100 · LOW

Which changes need focused human review? 442 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 13HIGH 59MEDIUM 13LOW 357

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 442 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers237 hits · 228 pts

Severity	File	Line	Snippet	Context
LOW	bridge/hopper_bridge.py	34	def _bridge_max_request_bytes_constraint():	CODE
LOW	bridge/hopper_bridge.py	51	def _parse_bridge_max_request_bytes(raw):	CODE
LOW	bridge/hopper_bridge.py	74	def _resolve_bridge_max_request_bytes():	CODE
LOW	bridge/hopper_bridge.py	90	def _bridge_max_request_bytes_recovery():	CODE
LOW	bridge/hopper_bridge.py	148	def require_analysis_complete(	CODE
LOW	bridge/hopper_bridge.py	459	def _block_instruction_addresses(procedure, block):	CODE
LOW	bridge/hopper_bridge.py	751	def _invalidate_search_inventory(document):	CODE
LOW	bridge/hopper_bridge.py	863	def _read_function_instructions(document, params):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	28	def test_invalid_launch_process_reports_explicit_no_creation(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	95	def test_failed_launch_does_not_infer_exit_from_a_failed_kill(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	130	def test_failed_launch_publishes_pid_and_retires_live_process(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	184	def test_failed_launch_records_when_valid_process_is_already_exited(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	225	def test_pre_target_integrity_failure_reports_no_process_created(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	261	def test_journal_checks_exact_byte_budget_before_writing(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	270	def test_journal_appends_each_row_once_and_flushes_it(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	290	def test_aggregate_trace_budget_admits_exact_boundary_and_rejects_next_record(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	316	def test_oversized_producer_string_is_rejected_before_serialization(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	323	def test_launch_flags_preserve_default_debug_and_stop_at_entry(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	337	def test_output_pipe_counts_all_bytes_and_keeps_only_the_prefix(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	359	def test_output_pipe_reports_incomplete_capture_after_unexpected_close(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	370	def test_selector_location_report_uses_the_requested_method_type(self):	CODE
LOW	bridge/native/test_rea_lldb_tracer.py	433	def test_breakpoint_report_bounds_aggregate_location_json(self):	CODE
LOW	bridge/native/rea_lldb_tracer.py	549	def _failed_launch_description(process):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	47	def test_ignorable_controls_cannot_hide_authority_credentials(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	57	def test_mixed_network_separators_remove_credentials(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	65	def test_non_special_base_keeps_backslashes_inside_network_authorities(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	75	def test_native_request_paths_preserve_origin_form_and_redact_absolute_form(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	117	def test_backslash_ends_a_special_scheme_authority(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	124	def test_userinfo_before_a_backslash_is_still_removed(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	133	def test_ordinary_userinfo_is_removed(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	137	def test_empty_userinfo_marker_is_removed(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	142	def test_special_schemes_skip_leading_slashes_before_userinfo(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	156	def test_file_base_keeps_paths_after_the_fixed_network_boundary(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	165	def test_file_urls_keep_path_text(self):	CODE
LOW⚡	bridge/mitmproxy/test_capture.py	168	def test_file_urls_reject_userinfo_and_keep_their_source(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	86	def test_same_scheme_locations_preserve_relative_path_text_and_bytes(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	94	def test_location_authorities_still_remove_credentials_with_a_base_scheme(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	106	def test_backup_location_uses_its_own_request_scheme(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	180	def test_rejected_special_hosts_keep_their_source(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	198	def test_accepted_special_hosts_still_remove_userinfo(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	213	def test_unicode_hosts_that_may_map_to_accepted_hosts_remove_userinfo(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	227	def test_trailing_controls_and_spaces_do_not_hide_userinfo(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	237	def test_rejected_ip_literals_keep_their_source(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	252	def test_overlong_ports_are_compared_without_numeric_overflow(self):	CODE
LOW	bridge/mitmproxy/test_capture.py	259	def test_non_special_schemes_keep_backslashes_in_the_authority(self):	CODE
LOW⚡	bridge/cutter/rea_bridge.py	961	def _encode_authenticated_response(	CODE
LOW⚡	bridge/cutter/rea_bridge.py	970	def _iter_authenticated_frame(self, value: dict[str, Any], proof: str):	CODE
LOW⚡	bridge/cutter/rea_bridge.py	976	def _write_authenticated_frame(	CODE
LOW	bridge/cutter/rea_bridge.py	77	def _bridge_max_request_bytes_constraint():	CODE
LOW	bridge/cutter/rea_bridge.py	94	def _parse_bridge_max_request_bytes(raw):	CODE
LOW	bridge/cutter/rea_bridge.py	117	def _resolve_bridge_max_request_bytes():	CODE
LOW	bridge/cutter/rea_bridge.py	133	def _bridge_max_request_bytes_recovery():	CODE
LOW	bridge/cutter/rea_bridge.py	167	def _authenticated_frame_timeout_seconds():	CODE
LOW	bridge/cutter/rea_bridge.py	274	def _verify_windows_private_path(path: Path, directory: bool) -> None:	CODE
LOW	bridge/cutter/rea_bridge.py	375	def _windows_security_attributes() -> tuple[Any, Any]:	CODE
LOW	bridge/cutter/rea_bridge.py	390	def _ensure_windows_bridge_directory(directory: Path) -> None:	CODE
LOW	bridge/cutter/rea_bridge.py	404	def _ensure_posix_bridge_directory(directory: Path) -> None:	CODE
LOW	bridge/cutter/rea_bridge.py	421	def _write_windows_descriptor(directory: Path, destination: Path, payload: bytes) -> None:	CODE
LOW	bridge/cutter/rea_bridge.py	594	def _record_command_completion(	CODE
LOW	bridge/cutter/rea_bridge.py	605	def _refresh_document_identity(self) -> None:	CODE
177 more matches not shown…

Hallucination Indicators13 hits · 130 pts

Severity	File	Line	Snippet	Context
CRITICAL	…mance/android/ReaJadxExternalReferencesRegression.java	43	kotlinx.serialization.json.Json.Default.parseToJsonElement(args.toString());	CODE
CRITICAL	…sts/conformance/android/ReaJadxMetadataRegression.java	33	kotlinx.serialization.json.Json.Default.parseToJsonElement(arguments.toString());	CODE
CRITICAL	…sts/conformance/android/ReaJadxMetadataRegression.java	146	kotlinx.serialization.json.Json.Default.parseToJsonElement("{}");	CODE
CRITICAL	src/browser/IsolatedWebBundleAnalyzer.test.ts	69	result.value.observations.chunks.edges.map(({ specifier }) => specifier),	CODE
CRITICAL	src/browser/CdpCaptureEvents.webSocketFrames.test.ts	118	webPageInspectionSchema.shape.network.shape.websocket_connections.element.safeParse(	CODE
CRITICAL	src/browser/CdpCaptureEvents.consoleTimestamp.test.ts	48	webPageInspectionSchema.shape.console.shape.events.element.safeParse(	CODE
CRITICAL	…javascript/analysis/JavaScriptAnalysisWorkerSchemas.ts	22	javaScriptSemanticNodeSchema.shape.identity.shape.source_range.unwrap();	CODE
CRITICAL	src/domain/analysisView/espFlashImageSummary.ts	60	checksum: espImageMetadataSchema.shape.checksum.shape.status.nullable(),	CODE
CRITICAL	src/domain/analysisView/espFlashImageSummary.ts	62	espImageMetadataSchema.shape.appended_sha256.shape.status.nullable(),	CODE
CRITICAL	src/domain/analysisView/devicetreeView.ts	38	devicetreeSchema.shape.nodes.element.shape.properties.element.extend(	CODE
CRITICAL	src/domain/analysisView/pcapCaptureView.ts	43	fields.dns_queries.element.shape.query_labels_hex.describe(	CODE
CRITICAL	src/domain/apkSignature/apkSignatureQuery.ts	42	apkSignerV3Schema.shape.rotation.shape.lineage.element.extend({	CODE
CRITICAL	src/domain/model/modelArtifactQuery.ts	10	modelArtifactObjectSchema.shape.totals.shape.by_type.element.extend({	CODE

Empty Error Handlers24 hits · 120 pts

Severity	File	Line	Snippet	Context
HIGH	bridge/hopper_bridge.py	1400	except (ConnectionError, OSError):	CODE
HIGH	bridge/hopper_bridge.py	1406	except OSError:	CODE
HIGH	bridge/pwntools/layout.py	16	except (OSError, MemoryError):	CODE
HIGH	bridge/pwntools/recorded_crash.py	16	except (OSError, MemoryError):	CODE
HIGH	bridge/native/rea_lldb_tracer.py	124	except OSError:	CODE
HIGH	bridge/native/rea_lldb_tracer.py	879	except Exception:	CODE
HIGH	bridge/native/rea_lldb_tracer.py	886	except Exception:	CODE
HIGH	bridge/native/rea_lldb_tracer.py	897	except Exception:	CODE
HIGH	bridge/mitmproxy/capture.py	213	except UnicodeEncodeError:	CODE
HIGH	bridge/mitmproxy/capture.py	270	except UnicodeDecodeError:	CODE
HIGH	bridge/cutter/rea_bridge.py	73	except OSError:	CODE
HIGH	bridge/cutter/rea_bridge.py	734	except OSError:	CODE
HIGH	bridge/cutter/rea_bridge.py	936	except OSError:	CODE
HIGH	bridge/cutter/rea_bridge.py	1080	except OSError:	CODE
HIGH	bridge/cutter/rea_bridge.py	1089	except OSError:	CODE
HIGH	bridge/cutter/rea_bridge.py	1096	except OSError:	CODE
HIGH	bridge/cutter/rea_bridge.py	1100	except OSError:	CODE
HIGH	bridge/cutter/rea_bridge.py	676	except OSError:	CODE
HIGH	bridge/cutter/rea_bridge.py	680	except OSError:	CODE
HIGH	bridge/pwndbg/launch.py	16	except (OSError, MemoryError):	CODE
HIGH	bridge/pwndbg/core_context.py	74	except (OSError, MemoryError):	CODE
HIGH	tests/support/analysis-efficiency/review-model.py	37	except json.JSONDecodeError:	CODE
HIGH	tests/support/analysis-efficiency/resource-run.py	158	except FileNotFoundError:	CODE
HIGH	tests/support/analysis-efficiency/resource-run.py	143	except (OSError, ValueError):	CODE

Cross-Language Confusion16 hits · 110 pts

Severity	File	Line	Snippet	Context
HIGH	bridge/hopper_bridge.py	22	# that does not fit is null, not an older descriptor path.	COMMENT
HIGH	bridge/cutter/rea_bridge.py	41	# that fits is kept. A path that does not fit is null, not the descriptor path.	COMMENT
HIGH	tests/support/analysis-efficiency/review-model.py	194	# Missing is not SQL/JSON null; booleans are not numeric counters.	COMMENT
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	52	}}, async(row,event)=>{rows.push(row);events.push(event);});	CODE
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	57	assert.equal(rows[0].reply_bytes,null);assert.equal(rows[0].is_error,true);	CODE
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	64	const call=createRetainedQueryCaller({callTool:async()=>reply},async row=>rows.push(row));	CODE
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	75	rows.push(row);throw failure;	CODE
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	87	e instanceof AggregateError && e.errors[0]===rpc && e.errors[1]===disk);	CODE
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	119	client:{close:async()=>{closed.push('client');}},	CODE
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	120	transport:{close:async()=>{closed.push('transport');}}}),false);	CODE
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	176	client:{close(){closed.push('client');throw new Error('close failed');}},	CODE
HIGH⚡	…s/support/analysis-efficiency/test_retained_queries.py	177	transport:{close:async()=>{closed.push('transport');}}}),false);	CODE
HIGH	…s/support/analysis-efficiency/test_retained_queries.py	30	const stdout=new Writable({write(chunk,encoding,done){chunks.push(chunk.toString());done();}});	CODE
HIGH	…s/support/analysis-efficiency/test_retained_queries.py	30	const stdout=new Writable({write(chunk,encoding,done){chunks.push(chunk.toString());done();}});	CODE
HIGH	…ort/analysis-efficiency/test_javascript_facts_agent.py	73	retained ? 'fixture cleanup denied' : null,	CODE
HIGH	…ort/analysis-efficiency/test_javascript_facts_agent.py	76	retained ? {fixtureOwner: true} : undefined);	CODE

Cross-Language Confusion (JS/TS)15 hits · 75 pts

Severity	File	Line	Snippet	Context
HIGH	tests/boundary/captures/resourceLimits.test.ts	24	print('TShark (Wireshark) 4.6.9 (resource fixture)')	CODE
HIGH	tests/boundary/captures/resourceLimits.test.ts	29	print(json.dumps([{'_source': {'layers': {'frame.number': ['1']}}}]))	CODE
HIGH	tests/boundary/captures/resourceLimits.test.ts	69	print('TShark (Wireshark) 4.6.9 (resource fixture)')	CODE
HIGH	tests/boundary/captures/resourceLimits.test.ts	71	print(json.dumps([{'_source': {'layers': {'frame.number': ['1']}}}]))	CODE
HIGH	tests/boundary/captures/resourceLimits.test.ts	126	print('TShark (Wireshark) 4.6.9 (resource fixture)')	CODE
HIGH	tests/boundary/captures/resourceLimits.test.ts	129	print('before file limit', file=sys.stderr, flush=True)	CODE
HIGH	…s/boundary/providers/adb/adbSelectedLocalPaths.test.ts	39	elif [ "$1" = devices ]; then	CODE
HIGH	tests/boundary/signals/resourceLimits.test.ts	24	print('sigrok-cli 0.7.2\\nlibsigrokdecode (resource fixture)')	CODE
HIGH	tests/boundary/signals/resourceLimits.test.ts	29	print('allocation refused by kernel limit')	CODE
HIGH	tests/boundary/signals/resourceLimits.test.ts	69	print('sigrok-cli 0.7.2\\nlibsigrokdecode (resource fixture)')	CODE
HIGH	tests/boundary/signals/resourceLimits.test.ts	71	print('10-20 uart-1: 42')	CODE
HIGH	tests/boundary/process/packedBridgeVerification.test.ts	102	: ["def parse(args, *kwargs): return None"]),	CODE
HIGH	tests/boundary/process/cleanLinuxHopperRuntime.test.ts	55	print(pid, flush=True)	CODE
HIGH	tests/boundary/process/cleanLinuxHopperRuntime.test.ts	188	print(json.dumps(child), flush=True)	CODE
HIGH	src/application/LinuxHopperPython.ts	64	print(json.dumps({"version": list(sys.version_info[:2]), "library": library}))	CODE

Deep Nesting49 hits · 44 pts

Severity	File	Line	Context
LOW	bridge/hopper_bridge.py	607	CODE
LOW	bridge/hopper_bridge.py	775	CODE
LOW	bridge/hopper_bridge.py	1309	CODE
LOW	bridge/pwntools/layout_impl.py	111	CODE
LOW	bridge/pwntools/recorded_crash_impl.py	37	CODE
LOW	bridge/native/rea_lldb_tracer.py	494	CODE
LOW	bridge/native/rea_lldb_tracer.py	590	CODE
LOW	bridge/mitmproxy/capture.py	207	CODE
LOW	bridge/mitmproxy/capture.py	253	CODE
LOW	bridge/cutter/rea_bridge.py	274	CODE
LOW	bridge/cutter/rea_bridge.py	390	CODE
LOW	bridge/cutter/rea_bridge.py	1257	CODE
LOW	bridge/cutter/rea_bridge.py	684	CODE
LOW	bridge/cutter/rea_bridge.py	737	CODE
LOW	tests/support/analysis-efficiency/review-model.py	14	CODE
LOW	tests/support/analysis-efficiency/review-model.py	108	CODE
LOW	tests/support/analysis-efficiency/agent-trial.py	38	CODE
LOW	tests/support/analysis-efficiency/signal-oracle.py	15	CODE
LOW	tests/support/analysis-efficiency/signal-oracle.py	159	CODE
LOW	tests/support/analysis-efficiency/codex_context.py	22	CODE
LOW	tests/support/analysis-efficiency/codex_context.py	66	CODE
LOW	…alysis-efficiency/test_command_observation_delivery.py	27	CODE
LOW	tests/support/analysis-efficiency/test_codex_context.py	120	CODE
LOW	tests/support/analysis-efficiency/test_codex_context.py	177	CODE
LOW	tests/support/analysis-efficiency/test_codex_context.py	336	CODE
LOW	tests/support/analysis-efficiency/test_codex_context.py	398	CODE
LOW	tests/support/analysis-efficiency/test_codex_context.py	418	CODE
LOW	tests/support/analysis-efficiency/saz-oracle.py	62	CODE
LOW	tests/support/analysis-efficiency/packet-oracle.py	102	CODE
LOW	tests/support/analysis-efficiency/resource-run.py	68	CODE
LOW	tests/conformance/esp/flash_file_tool.py	35	CODE
LOW	scripts/website_i18n.py	229	CODE
LOW	scripts/website_i18n.py	271	CODE
LOW	scripts/website_i18n.py	322	CODE
LOW	scripts/website_i18n.py	509	CODE
LOW	scripts/website_i18n.py	615	CODE
LOW	scripts/website_i18n.py	241	CODE
LOW	scripts/audit-website-links.py	62	CODE
LOW	scripts/website.py	286	CODE
LOW	scripts/test-website.py	296	CODE
LOW	scripts/test-website.py	321	CODE
LOW	scripts/test-website.py	523	CODE
LOW	scripts/test-website.py	682	CODE
LOW	scripts/test-website.py	735	CODE
LOW	scripts/test-website.py	791	CODE
LOW	scripts/verify-website.py	46	CODE
LOW	scripts/verify-website.py	172	CODE
LOW	scripts/verify-website.py	321	CODE
LOW	scripts/verify-website.py	107	CODE

Over-Commented Block30 hits · 30 pts

Severity	File	Line	Snippet	Context
LOW	native/windows/src/authority.hpp	1	#pragma once	COMMENT
LOW	licenses/npm-runtime-notices.txt	341	--- package/dist/esm/wire/varint.js (unchanged leading BSD notice) ---	COMMENT
LOW	licenses/npm-runtime-notices.txt	361	// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR	COMMENT
LOW	licenses/npm-runtime-notices.txt	3501		COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	461	# http://opensource.org/licenses/bsd-license.php	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	481	# CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	501	# - Its license terms and conditions are shown below.	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	521	# * notice, this list of conditions and the following disclaimer in	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	541	#	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	561	# *	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	581	#	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	601	#	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	621	# implied, statutory or otherwise. The term "warranty" used herein	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	641	# knowledge of, the possibility of such damages at any time during the	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	661		COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	681	# list of conditions and the following disclaimer. Redistributions in binary	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	701		COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	721	# with the distribution.	COMMENT
LOW	licenses/Node-22.19.0-LICENSE.txt	2101	- inspector_protocol, located at deps/inspector_protocol, is licensed as follows:	COMMENT
LOW	tests/support/cli/cliCommandSession.ts	181	readonly #requestTimeoutMs: number \| undefined;	COMMENT
LOW	src/artifacts/NativeDmgArtifactReader.ts	161	#directory: DirectoryArtifactReader \| undefined;	COMMENT
LOW	src/ida/IdaSessionClient.ts	201	check: string,	COMMENT
LOW	src/browser/CdpObservationSession.ts	201	finalUrl: string \| null;	COMMENT
LOW	src/ghidra/GhidraClient.ts	141	#endpointPath: string \| undefined;	COMMENT
LOW	src/javascript/analysis/JavaScriptAnalysisWorker.ts	121	#terminalResponseId: string \| undefined;	COMMENT
LOW	src/kuna/KunaSessionClient.ts	341	#layout: Promise<Result<KunaInventoryLayout, AnalysisError>> \| undefined;	COMMENT
LOW	src/domain/firmware/hexRecords.ts	101	const formatFailure = (line: number, detail: string): RegionDecodeFailure => ({	COMMENT
LOW	src/domain/firmware/uf2.ts	161	readonly #families = new Set<number>();	COMMENT
LOW	src/domain/analysisView/webNetworkCaptureView.ts	121	// Native mitmproxy flows report the request target in parts and the status	COMMENT
LOW	src/process/OwnedWorkerRuntime.ts	121	/** Own the private root and process lifecycle shared by sequential workers. */	COMMENT

Excessive Try-Catch Wrapping26 hits · 28 pts

Severity	File	Line	Snippet	Context
LOW	bridge/hopper_bridge.py	1384	except Exception as error:	CODE
LOW	bridge/pwntools/decoder_runtime.py	47	except Exception as error:	CODE
LOW	bridge/native/rea_lldb_tracer.py	150	except Exception:	CODE
LOW	bridge/native/rea_lldb_tracer.py	155	except Exception:	CODE
LOW	bridge/native/rea_lldb_tracer.py	184	except Exception as error:	CODE
LOW	bridge/native/rea_lldb_tracer.py	472	except Exception as error:	CODE
LOW	bridge/native/rea_lldb_tracer.py	649	except Exception:	CODE
LOW	bridge/native/rea_lldb_tracer.py	879	except Exception:	CODE
LOW	bridge/native/rea_lldb_tracer.py	886	except Exception:	CODE
LOW	bridge/native/rea_lldb_tracer.py	897	except Exception:	CODE
LOW	bridge/native/rea_lldb_tracer.py	907	except Exception as error: # Reported as a tracer failure, never re-raised into LLDB.	CODE
MEDIUM	bridge/native/rea_lldb_tracer.py	175	def _reader_loop(self):	CODE
LOW	bridge/mitmproxy/capture.py	370	except Exception as error:	CODE
LOW	bridge/mitmproxy/capture.py	375	except Exception as error:	CODE
MEDIUM	bridge/cutter/rea_bridge.py	478	def _read_current_file() -> str \| None:	CODE
MEDIUM	bridge/cutter/rea_bridge.py	684	def run(self) -> None:	CODE
LOW	bridge/cutter/rea_bridge.py	474	except Exception:	CODE
LOW	bridge/cutter/rea_bridge.py	482	except Exception:	CODE
LOW	bridge/cutter/rea_bridge.py	565	except Exception as error:	CODE
LOW	bridge/cutter/rea_bridge.py	673	except Exception:	CODE
LOW	bridge/cutter/rea_bridge.py	687	except Exception:	CODE
LOW	bridge/cutter/rea_bridge.py	821	except Exception as error:	CODE
LOW	bridge/pwndbg/core_context.py	90	except Exception as error:	CODE
MEDIUM	bridge/pwndbg/core_context.py	69	def failure_exit(request_path, status, marker):	CODE
LOW	scripts/hopper-demo-x11.py	978	except Exception:	CODE
MEDIUM	scripts/hopper-demo-x11.py	504	def socket_directory_state() -> tuple[str \| None, bool \| None, bool]:	CODE

Cross-File Repetition3 hits · 15 pts

Severity	File	Snippet	Context
HIGH	bridge/pwntools/layout.py	catch typed resource failures while loading or running the owned debugger launcher. only this package's fixed sibling is	STRING
HIGH	bridge/pwntools/recorded_crash.py	catch typed resource failures while loading or running the owned debugger launcher. only this package's fixed sibling is	STRING
HIGH	bridge/pwndbg/launch.py	catch typed resource failures while loading or running the owned debugger launcher. only this package's fixed sibling is	STRING

Fake / Example Data12 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	…sts/boundary/filesystem/interfaceBuilderBundle.test.ts	1675	"placeholder",	CODE
LOW	…sts/boundary/filesystem/interfaceBuilderBundle.test.ts	1754	).toBe("placeholder");	CODE
LOW	tests/boundary/filesystem/binaryTarget.test.ts	309	await writeFile(join(app, "Contents", "Info.plist"), "placeholder");	CODE
LOW	tests/boundary/filesystem/binaryTarget.test.ts	334	await writeFile(join(app, "Contents", "Info.plist"), "placeholder");	CODE
LOW	scripts/website_i18n.py	22	ATTRIBUTES = {"alt", "aria-label", "aria-description", "title", "placeholder"}	CODE
LOW	src/artifacts/bun/BunModuleGraphLayout.ts	311	): Promise<BunStandaloneProbe \| { readonly status: "placeholder" }> => {	CODE
LOW	src/artifacts/bun/BunModuleGraphLayout.ts	350	if (payloadLength === 0n) return { status: "placeholder" };	CODE
LOW	src/domain/apple/interfaceBuilderKeyedArchive.ts	15	"placeholder",	CODE
LOW	src/domain/apple/interfaceBuilderKeyedArchive.ts	600	value.includes("placeholder") \|\|	CODE
LOW	src/domain/apple/interfaceBuilderKeyedArchive.ts	604	return "placeholder";	CODE
LOW	src/domain/native/nativeInvestigationGraph.ts	21	"placeholder",	CODE
LOW	src/domain/native/nativeInvestigationGraph.ts	346	owner?.kind !== "placeholder" &&	CODE

Unused Imports8 hits · 8 pts

Severity	File	Line	Context
LOW	bridge/hopper_bridge.py	13	CODE
LOW	bridge/pwntools/layout_impl.py	9	CODE
LOW	bridge/pwntools/layout_impl.py	10	CODE
LOW	bridge/pwntools/layout_impl.py	12	CODE
LOW	bridge/pwntools/decoder_runtime.py	6	CODE
LOW	bridge/cutter/rea_bridge.py	8	CODE
LOW	scripts/hopper-demo-x11.py	4	CODE
LOW	scripts/test-website.py	25	CODE

AI Slop Vocabulary3 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	…sts/boundary/filesystem/dshClientConfiguration.test.ts	927	const notes = "# harness notes\n# keep me\n";	CODE
MEDIUM	…sts/boundary/filesystem/dshClientConfiguration.test.ts	942	expect(text).toContain("# harness notes");	CODE
MEDIUM	…sts/boundary/filesystem/dshClientConfiguration.test.ts	954	expect(removed).toContain("# harness notes");	CODE

AI Response Leakage1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	tests/boundary/filesystem/releaseNotes.test.ts	324	`## 🤖 I have created a release beep boop\n\n${f.notes}\n---\nThis PR was generated with [Release Please](https://git	CODE

Decorative Section Separators4 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	licenses/Node-22.19.0-LICENSE.txt	673	# ----------------------------------------------------------------------	STRING
MEDIUM	licenses/Node-22.19.0-LICENSE.txt	698	# --------------------------------------------------------------------------	STRING
MEDIUM	licenses/Node-22.19.0-LICENSE.txt	710	# --------------------------------------------------------------------------	STRING
MEDIUM	licenses/Node-22.19.0-LICENSE.txt	740	# --------------------------------------------------------------------------	STRING

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/verify/termux/emulator.sh	2	# Host-side orchestration. Root is used only to stage/read files and send the	COMMENT

morluto/rea

Open-Source Code Quality, Security and Technical Debt Review