0.6

Adjusted Signal

0.6

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

3.9K

Stars

C++

Language

813.4K

Lines of Code

1.4K

Files

455

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 439 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 10 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 12 finding(s).

PR Review Velocity Impact 2.9/100 · LOW

Which changes need focused human review? 455 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 7LOW 447

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 455 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block390 hits · 390 pts

Severity	File	Line	Snippet	Context
LOW	…ll_integration/dolphin/ownclouddolphinactionplugin.cpp	1	/*	COMMENT
LOW	shell_integration/nautilus/setappname.sh	1	#!/bin/sh	COMMENT
LOW	shell_integration/MacOSX/CMakeLists.txt	141	# A Service Management login item must live in Contents/Library/LoginItems and its	COMMENT
LOW	…ileProviderKitTests/RemoteChangePropagationTests.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…ileProviderKitTests/RemoteChangePropagationTests.swift	21	// -> observer.didUpdate / didDeleteItems	COMMENT
LOW	…ileProviderKitTests/RemoteChangePropagationTests.swift	521	// content change is detected even if the server returned a stale/unchanged ETag and date.	COMMENT
LOW	…ts/NextcloudFileProviderKitTests/ItemModifyTests.swift	241		COMMENT
LOW	…derKitTests/MaterialisedEnumerationObserverTests.swift	201	/// [#10558](https://github.com/nextcloud/desktop/issues/10558).	COMMENT
LOW	…ts/NextcloudFileProviderKitTests/EnumeratorTests.swift	461	// The result should be empty as there are no children.	COMMENT
LOW	…ileProviderKitTests/KeepDownloadedRecursiveTests.swift	141	XCTAssertFalse(	COMMENT
LOW	…ileProviderKitTests/KeepDownloadedRecursiveTests.swift	181	remoteInterface: MockRemoteInterface(account: Self.account),	COMMENT
LOW	…ileProviderKitTests/KeepDownloadedRecursiveTests.swift	261	// operates only on ancestors.	COMMENT
LOW	…ileProviderKitTests/KeepDownloadedRecursiveTests.swift	441	"A sibling outside the pinned folder must not inherit keepDownloaded."	COMMENT
LOW	…ts/NextcloudFileProviderKitTests/LocalFilesTests.swift	1	// SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…ts/NextcloudFileProviderKitTests/LocalFilesTests.swift	21	#expect(isLockFileName("Drawing.dwl2"))	COMMENT
LOW	…ts/NextcloudFileProviderKitTests/LocalFilesTests.swift	41	#expect(!isAdobeLockFileName("Test.prproj"))	COMMENT
LOW	…ts/NextcloudFileProviderKitTests/LocalFilesTests.swift	61	#expect(adobeLockFileDocumentBaseName("~Test(.idlk") == "Test")	COMMENT
LOW	…/NextcloudFileProviderKitTests/ItemPropertyTests.swift	1401	dbManager: Self.dbManager	COMMENT
LOW	…oudFileProviderKitTests/IgnoredFilesMatcherTests.swift	21	#expect(matcher.isExcluded("a/b/c/hello.tmp"))	COMMENT
LOW	…roviderKitTests/Database/RealmStoreImporterTests.swift	101		COMMENT
LOW	…roviderKitTests/Database/RealmStoreImporterTests.swift	121	#expect(session.containerKey == "container")	COMMENT
LOW	…oviderKitTests/Database/ChangeDeliveryStoreTests.swift	41	#expect(session.nextSequence == 0)	COMMENT
LOW	…oviderKitTests/Database/ChangeDeliveryStoreTests.swift	81	#expect(session.pendingReported == false)	COMMENT
LOW	…rKitTests/Database/FilesDatabaseManagerLockTests.swift	41	_ = seed()	COMMENT
LOW	…tTests/Database/FilesDatabaseManagerFailureTests.swift	41	#expect(manager.changeDeliveryItems(sessionId: "s", fromSequence: 0, limit: 10)?.count == 2)	COMMENT
LOW	…tcloudFileProviderKitTests/Utilities/Expectation.swift	1	// SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…eProviderKitTests/Utilities/LoginKeychainFixture.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…derKitTests/Support/FilesDatabaseManager+Testing.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…tcloudFileProviderKit/FileProviderDomainDefaults.swift	1	// SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…cloudFileProviderKit/Database/RealmStoreImporter.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…oudFileProviderKit/Database/FilesDatabaseManager.swift	81	/// Open the domain's database, creating, importing or migrating it as needed.	COMMENT
LOW	…oudFileProviderKit/Database/FilesDatabaseManager.swift	401	.fetchRecord(db, logger: logger)	COMMENT
LOW	…oudFileProviderKit/Database/FilesDatabaseManager.swift	761	return true	COMMENT
LOW	…oudFileProviderKit/Database/FilesDatabaseManager.swift	781	/// (e.g. pinned-via-keep-downloaded) had been cleared.	COMMENT
LOW	…oudFileProviderKit/Database/FilesDatabaseManager.swift	801	if preserveVisitedDirectory {	COMMENT
LOW	…derKit/Database/FilesDatabaseManager+Directories.swift	61	/// - `directory == false`: only files carry real materialized payload; a	COMMENT
LOW	…derKit/Database/FilesDatabaseManager+Directories.swift	121	)	COMMENT
LOW	…rKit/Database/FilesDatabaseManager+Deduplication.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…rKit/Database/FilesDatabaseManager+Deduplication.swift	21	/// Call this inside the caller's transaction.	COMMENT
LOW	…rKit/Database/FilesDatabaseManager+Deduplication.swift	41	///	COMMENT
LOW	…ileProviderKit/Database/Schema/StoreVersionGuard.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…loudFileProviderKit/Database/Schema/StoreVersion.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…extcloudFileProviderKit/Interface/EnumerateDepth.swift	1	// SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…leProviderKit/Extension/RemoveDownloadVisibility.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…dFileProviderKit/Extension/FileProviderExtension.swift	1	// SPDX-FileCopyrightText: 2022 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…dFileProviderKit/Extension/FileProviderExtension.swift	21	///	COMMENT
LOW	…dFileProviderKit/Extension/FileProviderExtension.swift	41		COMMENT
LOW	…dFileProviderKit/Extension/FileProviderExtension.swift	81	///	COMMENT
LOW	…dFileProviderKit/Extension/FileProviderExtension.swift	621	// ``refreshFrameworkCacheIfExtensionVersionChanged`` below; this signal just shortens	COMMENT
LOW	…dFileProviderKit/Extension/FileProviderExtension.swift	701		COMMENT
LOW	…derKit/Extension/FileProviderExtension+BlockSync.swift	1	// SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…ileProviderKit/Enumeration/Enumerator+SyncEngine.swift	21	// while preserving the rest of the local-only state. Skip	COMMENT
LOW	…ileProviderKit/Enumeration/Enumerator+SyncEngine.swift	161	let batchRate = batchElapsed.fpSeconds > 0 ? Double(files.count) / batchElapsed.fpSeconds : 0	COMMENT
LOW	…roviderKit/Enumeration/Enumerator+WorkingSetScan.swift	1	// SPDX-FileCopyrightText: 2022 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…roviderKit/Enumeration/Enumerator+WorkingSetScan.swift	101	/// ``FilesDatabaseManager/pendingWorkingSetChanges(since:)`` alone to re-derive the report from	COMMENT
LOW	…ileProviderKit/Enumeration/Enumerator+SyncAnchor.swift	1	// SPDX-FileCopyrightText: 2022 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…ileProviderKit/Enumeration/Enumerator+SyncAnchor.swift	21	/// The same format is used for every container the extension enumerates (working set, root container, sub-directori	COMMENT
LOW	…ileProviderKit/Enumeration/Enumerator+SyncAnchor.swift	61	///	COMMENT
LOW	…iderKit/Enumeration/Enumerator+ObserverReporting.swift	1	// SPDX-FileCopyrightText: 2022 Nextcloud GmbH and Nextcloud contributors	COMMENT
LOW	…loudFileProviderKit/Enumeration/Enumerator+Trash.swift	1	// SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors	COMMENT
330 more matches not shown…

Verbosity Indicators17 hits · 32 pts

Severity	File	Line	Snippet	Context
LOW	…oudFileProviderKit/Database/FilesDatabaseManager.swift	555	// (we need to check if they were uploaded to prevent deleting ignored/lock files)	COMMENT
LOW	src/gui/accountsettings.cpp	1850	// So we need to check if the folder is in the blacklist or not and tweak the message accordingly.	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	104	// Step 1: Add your CLSID and name your extension	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	107	// Step 2: Set the image for your icon	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	110	// Step 3: Add your extension to the Navigation Pane and make it visible	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	113	// Step 4: Set the location for your extension in the Navigation Pane	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	116	// Step 5: Provide the dll that hosts your extension.	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	119	// Step 6: Define the instance object	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	123	// Step 7: Provide the file system attributes of the target folder	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	126	// Step 8: Set the path for the sync root	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	129	// Step 9: Set appropriate shell flags	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	132	// Step 10: Set the appropriate flags to control your shell behavior	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	135	// Step 11: Register your extension in the namespace root	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	137	// Step 12: Hide your extension from the Desktop	COMMENT
LOW	src/gui/creds/flow2auth.cpp	76	// Step 1: Initiate a login, do an anonymous POST request	COMMENT
LOW	src/gui/creds/flow2auth.cpp	169	// Step 2: Poll	COMMENT
LOW	src/3rdparty/kirigami/wheelhandler.cpp	164	// We need to check if the parent inherits QQuickScrollView in case the	COMMENT

Structural Annotation Overuse14 hits · 28 pts

Severity	File	Line	Snippet	Context
LOW⚡	src/gui/navigationpanehelper.cpp	104	// Step 1: Add your CLSID and name your extension	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	107	// Step 2: Set the image for your icon	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	110	// Step 3: Add your extension to the Navigation Pane and make it visible	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	113	// Step 4: Set the location for your extension in the Navigation Pane	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	116	// Step 5: Provide the dll that hosts your extension.	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	119	// Step 6: Define the instance object	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	123	// Step 7: Provide the file system attributes of the target folder	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	126	// Step 8: Set the path for the sync root	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	129	// Step 9: Set appropriate shell flags	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	132	// Step 10: Set the appropriate flags to control your shell behavior	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	135	// Step 11: Register your extension in the namespace root	COMMENT
LOW⚡	src/gui/navigationpanehelper.cpp	137	// Step 12: Hide your extension from the Desktop	COMMENT
LOW	src/gui/creds/flow2auth.cpp	76	// Step 1: Initiate a login, do an anonymous POST request	COMMENT
LOW	src/gui/creds/flow2auth.cpp	169	// Step 2: Poll	COMMENT

Excessive Try-Catch Wrapping5 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW⚡	shell_integration/nautilus/syncstate.py	97	except Exception as e:	CODE
LOW⚡	shell_integration/nautilus/syncstate.py	99	except Exception as e: # Bad habit	CODE
MEDIUM	shell_integration/nautilus/syncstate.py	84	def _connectToSocketServer(self):	CODE
MEDIUM	…FileProviderKitTests/EnumeratorPageResponseTests.swift	17	print("Error: Failed to create URL in test helper.")	CODE
MEDIUM	…loudFileProviderKitMocks/TestableRemoteInterface.swift	206	print("Error: fetchCapabilitiesHandler not set in TestableRemoteInterface")	CODE

Hyper-Verbose Identifiers6 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW⚡	shell_integration/nautilus/syncstate.py	108	def read_socket_data_with_timeout(self, timeout):	CODE
LOW	shell_integration/nautilus/syncstate.py	365	def invalidate_items_underneath(self, path):	CODE
LOW	admin/linux/tests/test_appimage_icon.py	41	def test_resolves_installed_main_icon(self):	CODE
LOW⚡	admin/linux/tests/test_appimage_icon.py	53	def test_rejects_missing_main_icon(self):	CODE
LOW⚡	admin/linux/tests/test_appimage_icon.py	61	def test_rejects_missing_installed_png(self):	CODE
LOW⚡	admin/linux/tests/test_appimage_icon.py	68	def test_both_linuxdeploy_calls_use_installed_icon(self):	CODE

Fake / Example Data8 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	…ileProviderKitTests/RemoteChangePropagationTests.swift	256	let placeholder = makeFile(name: "placeholder", parent: folder, etag: "placeholder-v1")	CODE
LOW	test/testsharingdialog.cpp	844	{QStringLiteral("placeholder"), QStringLiteral("YYYY-MM-DD")},	CODE
LOW	test/testsharingdialog.cpp	878	{QStringLiteral("placeholder"), QStringLiteral("Note to recipients")},	CODE
LOW	test/testsharingdialog.cpp	940	{QStringLiteral("placeholder"), QStringLiteral("YYYY-MM-DD")},	CODE
LOW	test/testlockfile.cpp	201	QCOMPARE(fileRecord._lockstate._lockOwnerDisplayName, QStringLiteral("John Doe"));	CODE
LOW	test/testlockfile.cpp	1157	QCOMPARE(fileRecord._lockstate._lockOwnerDisplayName, QStringLiteral("John Doe"));	CODE
LOW	test/syncenginetestutils.cpp	1663	xml.writeTextElement(ncUri, QStringLiteral("lock-owner-displayname"), QStringLiteral("John Doe"));	CODE
LOW	src/gui/sharing/propertymodel.cpp	80	{ PlaceholderRole, "placeholder"_ba},	CODE

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	AGENTS.md	117	See [HowToApplyALicense.md](https://github.com/nextcloud/server/blob/master/contribute/HowToApplyALicense.md) for detail	CODE

Redundant / Tautological Comments3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	shell_integration/nautilus/syncstate.py	157	# Check if there are no paths left. If so, its usual	COMMENT
LOW	shell_integration/nautilus/syncstate.py	207	# Check if its a folder (ends with an /), if yes add a "/"	COMMENT
LOW	shell_integration/nautilus/syncstate.py	213	# Check if toplevel folder, we need to ignore those as they cannot be shared	COMMENT

AI Slop Vocabulary2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	…xtcloudFileProviderKitTests/RemoteInterfaceTests.swift	122	let staleDate = Date(timeIntervalSinceNow: -(CapabilitiesFetchInterval + 300)) // Definitely stale	STRING
MEDIUM	test/testsyncvirtualfiles.cpp	195	// Essentially repeating creation of virtual file	COMMENT

Deep Nesting3 hits · 3 pts

Severity	File	Line	Context
LOW	shell_integration/nautilus/syncstate.py	229	CODE
LOW	shell_integration/nautilus/syncstate.py	278	CODE
LOW	shell_integration/nautilus/syncstate.py	379	CODE

Decorative Section Separators1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	src/gui/CMakeLists.txt	605	# --------------------------------------	COMMENT

Unused Imports2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	admin/osx/gen_sym_files.py	8		CODE
LOW	admin/osx/gen_sym_files.py	8		CODE

Self-Referential Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	admin/win/tools/NCToolsShared/3rdparty/SimpleIni.h	54	-# Define the appropriate symbol for the converter you wish to use and	CODE

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	…it/Tests/InterfaceTests/MockRemoteInterfaceTests.swift	173	// TODO: Add test for overwriting existing file	COMMENT

Slop Phrases1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	test/testsharemodel.cpp	851	const auto note = QStringLiteral("Don't forget to test everything!");	CODE

nextcloud/desktop

Open-Source Code Quality, Security and Technical Debt Review