The fastest knowledge base for growing teams. Beautiful, realtime collaborative, feature packed, and markdown compatible.
This report summarizes scanner evidence for outline/outline, a TypeScript project with 41,124 GitHub stars. SynthScan examined 434,410 lines of code across 2476 source files, recording 225 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 0.8 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 131 finding(s).
Are imports declared and package/API names verified? 94 finding(s).
Are wrappers, guards, and repeated structures necessary? 102 finding(s).
Which changes need focused human review? 225 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 225 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …es/Settings/components/GroupMemberSelectionToolbar.tsx | 29 | function GroupMemberSelectionToolbar({ group }: Props) { | CODE |
| LOW | app/scenes/Settings/components/GroupMembersTable.tsx | 37 | const GroupMemberRowContextMenu = observer(function GroupMemberRowContextMenu({ | CODE |
| LOW | …ettings/components/OAuthAuthenticationRevokeDialog.tsx | 10 | export default function OAuthAuthenticationRevokeDialog({ | CODE |
| LOW | app/scenes/Document/components/Notices.tsx | 38 | function permanentlyDeletedDescription() { | CODE |
| LOW | app/scenes/Document/components/ReferenceListItem.tsx | 51 | export function NewChildReferenceListItem({ | CODE |
| LOW | app/scenes/Document/hooks/useDocumentSave.ts | 54 | export function shouldAutoDeleteDraftOnUnmount({ | CODE |
| LOW | app/scenes/Login/urls.ts | 9 | function validateAndEncodeSubdomain(subdomain: string): string { | CODE |
| LOW | app/scenes/Login/urls.ts | 9 | function validateAndEncodeSubdomain(subdomain: string): string { | CODE |
| LOW | …nes/Login/components/PasskeyAuthenticationProvider.tsx | 87 | export function PasskeyAuthenticationProvider(props: Props) { | CODE |
| LOW | app/utils/autotrack.js | 261 | function getOrCreateMethodChain(context, methodName) { | CODE |
| LOW | app/utils/autotrack.js | 496 | function linkClickWillUnloadCurrentPage(event, link) { | CODE |
| LOW | app/utils/splitView.ts | 139 | export function isSplitViewNavigationSuppressed(): boolean { | CODE |
| LOW | app/utils/splitView.ts | 149 | export function withoutSplitViewNavigation(callback: () => void): void { | CODE |
| LOW | app/utils/splitView.ts | 245 | export function isSplitViewModifierPressed(): boolean { | CODE |
| LOW | app/utils/emoji.ts | 24 | export function generateEmojiNameFromFilename(filename: string): string { | CODE |
| LOW | app/components/ModelSelectionActionToolbar.tsx | 28 | export function ModelSelectionActionToolbar({ models, actions }: Props) { | CODE |
| LOW | app/components/CollectionDuplicateDialog.tsx | 19 | function CollectionDuplicateDialog({ collection, onSubmit }: Props) { | CODE |
| LOW | app/components/Lightbox.tsx | 148 | function ZoomablePannablePinchable({ | CODE |
| LOW | app/components/InputMemberPermissionSelect.tsx | 15 | export default function InputMemberPermissionSelect( | CODE |
| LOW | app/components/Sidebar/components/SidebarNavigation.tsx | 32 | function SidebarNavigationProvider({ | CODE |
| LOW | …ponents/Sidebar/components/SidebarDisclosureContext.ts | 80 | export function useSidebarDisclosureState() { | CODE |
| LOW | app/components/Sidebar/components/DraggableSection.tsx | 47 | export function normalizeSidebarSectionOrder( | CODE |
| LOW | app/components/Sidebar/hooks/useDragAndDrop.tsx | 184 | export function useDropToReorderSidebarSection( | CODE |
| LOW | app/components/Sidebar/hooks/useDragAndDrop.tsx | 251 | export function useDropToChangeCollection( | CODE |
| LOW | app/components/Sidebar/hooks/useDragAndDrop.tsx | 340 | export function useDropToReparentDocument( | CODE |
| LOW | app/components/Sidebar/hooks/useDragAndDrop.tsx | 579 | export function useDropToReorderUserMembership(getIndex?: () => string) { | CODE |
| LOW | …ents/DocumentExplorer/DocumentExplorerSearchResult.tsx | 23 | function DocumentExplorerSearchResult({ | CODE |
| LOW | app/components/Notifications/Notifications.tsx | 34 | function useStableOrderedNotifications( | CODE |
| LOW | app/hooks/useKeyboardShortcutsQuery.tsx | 12 | export default function useKeyboardShortcutsQuery() { | CODE |
| LOW | app/hooks/useTemplateSettingsActions.tsx | 24 | export function useTemplateSettingsActions( | CODE |
| LOW | app/hooks/useLocationSidebarContext.ts | 9 | export function useLocationSidebarContext() { | CODE |
| LOW | app/editor/components/CellBackgroundColorPicker.tsx | 11 | function CellBackgroundColorPicker({ activeColor, command }: Props) { | CODE |
| LOW | app/editor/menus/mention.tsx | 192 | export function createDocumentMentionItems( | CODE |
| LOW | plugins/gitea/server/api/gitea.test.ts | 11 | async function buildConnectedIntegration() { | CODE |
| LOW | plugins/slack/server/presenters/userNotLinkedBlocks.ts | 6 | export function presentUserNotLinkedBlocks(team?: Team) { | CODE |
| LOW | …gins/webhooks/server/presenters/webhookSubscription.ts | 4 | export default function presentWebhookSubscription( | CODE |
| LOW | …/client/components/WebhookSubscriptionDeleteDialog.tsx | 11 | export default function WebhookSubscriptionRevokeDialog({ | CODE |
| LOW | …bhooks/client/components/WebhookSubscriptionsTable.tsx | 47 | function WebhookSubscriptionsTable(props: Props) { | CODE |
| LOW | …ooks/client/hooks/useWebhookSubscriptionMenuActions.ts | 15 | export function useWebhookSubscriptionMenuActions( | CODE |
| LOW | server/errors.ts | 21 | export function InvalidAuthenticationError( | CODE |
| LOW | server/errors.ts | 187 | export function EmailAuthenticationRequiredError( | CODE |
| LOW⚡ | server/errors.ts | 216 | export function GmailAccountCreationError( | CODE |
| LOW⚡ | server/errors.ts | 225 | export function OIDCMalformedUserInfoError( | CODE |
| LOW⚡ | server/errors.ts | 234 | export function AuthenticationProviderDisabledError( | CODE |
| LOW | server/errors.ts | 254 | export function InvalidClientMetadataError( | CODE |
| LOW | server/test/factories.ts | 676 | export async function buildDocumentWithAttachment( | CODE |
| LOW | server/test/factories.ts | 898 | export async function buildMetadataDocumentOAuthClient( | CODE |
| LOW | server/test/factories.ts | 912 | export async function buildOAuthAuthorizationCode({ | CODE |
| LOW | server/middlewares/rateLimiter.ts | 30 | async function getRateLimiterIdentifiers(ctx: AppContext): Promise<string[]> { | CODE |
| LOW | server/middlewares/rateLimiter.ts | 148 | return async function registerRateLimiterMiddleware( | CODE |
| LOW | server/middlewares/cleanupMultipartFiles.ts | 13 | return async function cleanupMultipartFilesMiddleware( | CODE |
| LOW | server/middlewares/feature.ts | 27 | return async function commentingEnabledMiddleware( | CODE |
| LOW | server/middlewares/csrf.ts | 24 | return async function attachCSRFTokenMiddleware(ctx: AppContext, next: Next) { | CODE |
| LOW | server/middlewares/csrf.ts | 85 | return async function verifyCSRFTokenMiddleware(ctx: AppContext, next: Next) { | CODE |
| LOW | server/middlewares/validateWebhook.ts | 15 | return async function validateWebhookMiddleware(ctx: APIContext, next: Next) { | CODE |
| LOW | server/middlewares/apexAuthRedirect.ts | 28 | return async function apexAuthRedirectMiddleware( | CODE |
| LOW | server/utils/jwt.ts | 121 | export async function getUserForEmailSigninToken( | CODE |
| LOW | server/utils/jwt.ts | 176 | export async function getDetailsForEmailUpdateToken( | CODE |
| LOW | server/utils/embeds.ts | 226 | export function convertBareUrlsToEmbedMarkdown( | CODE |
| LOW | server/utils/fs.ts | 30 | function encodeWindowsUnsafeCharacter(char: string): string { | CODE |
| 42 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | app/models/Collection.ts | 173 | return !!this.store.rootStore.stars.orderedData.find( | CODE |
| CRITICAL | app/models/Document.ts | 339 | return !!this.store.rootStore.stars.orderedData.find( | CODE |
| CRITICAL | app/models/Document.ts | 579 | const pin = this.store.rootStore.pins.orderedData.find( | CODE |
| CRITICAL | app/models/Document.ts | 695 | return !!this.store.rootStore.pins.orderedData.find( | CODE |
| CRITICAL | app/models/Document.ts | 703 | return !!this.store.rootStore.pins.orderedData.find( | CODE |
| CRITICAL | app/models/User.ts | 318 | return this.store.rootStore.userMemberships.orderedData.find( | CODE |
| CRITICAL | app/editor/extensions/Keys.ts | 169 | view.state.schema.nodes.paragraph.create({}) | CODE |
| CRITICAL | server/middlewares/feature.ts | 14 | if (!ctx.state.auth.user.team.getPreference(preference)) { | CODE |
| CRITICAL | server/middlewares/feature.ts | 31 | const commenting = ctx.state.auth.user.team.getPreference( | CODE |
| CRITICAL | shared/editor/plugins/UploadPlugin.ts | 288 | const node = view.state.schema.nodes.image.create({ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/scenes/Collection/components/Overview.tsx | 114 | color: ${s("placeholder")}; | CODE |
| LOW | app/scenes/Document/components/DocumentTitle.tsx | 311 | color: ${s("placeholder")}; | CODE |
| LOW | app/scenes/Document/components/DocumentTitle.tsx | 312 | -webkit-text-fill-color: ${s("placeholder")}; | CODE |
| LOW⚡ | app/scenes/Search/components/SearchInput.tsx | 68 | color: ${s("placeholder")}; | CODE |
| LOW⚡ | app/scenes/Search/components/SearchInput.tsx | 71 | color: ${s("placeholder")}; | CODE |
| LOW⚡ | app/scenes/Search/components/SearchInput.tsx | 74 | color: ${s("placeholder")}; | CODE |
| LOW⚡ | app/scenes/Search/components/SearchInput.tsx | 77 | color: ${s("placeholder")}; | CODE |
| LOW | app/components/Editor.tsx | 23 | "placeholder" | "defaultValue" | "onClickLink" | "embeds" | "extensions" | CODE |
| LOW | app/components/Table.tsx | 846 | color: ${s("placeholder")}; | CODE |
| LOW | app/components/Input.tsx | 34 | color: ${s("placeholder")}; | CODE |
| LOW | app/components/Input.tsx | 63 | color: ${s("placeholder")}; | CODE |
| LOW | app/components/ContentEditable.tsx | 290 | color: ${s("placeholder")}; | CODE |
| LOW | app/components/ContentEditable.tsx | 291 | -webkit-text-fill-color: ${s("placeholder")}; | CODE |
| LOW | app/components/Sharing/components/index.tsx | 53 | color: ${s("placeholder")}; | CODE |
| LOW | app/components/primitives/components/InputSelect.tsx | 88 | color: ${s("placeholder")}; | CODE |
| LOW | app/components/CommandBar/SharedCommandBar.tsx | 69 | color: ${s("placeholder")}; | CODE |
| LOW | app/components/CommandBar/CommandBar.tsx | 87 | color: ${s("placeholder")}; | CODE |
| LOW | app/editor/components/SuggestionsMenu.tsx | 1115 | "placeholder" in insertItem && !!insertItem.placeholder | CODE |
| LOW | app/editor/components/SuggestionsMenu.tsx | 1173 | "placeholder" in insertItem && !!insertItem.placeholder | CODE |
| LOW | app/editor/menus/formatting.tsx | 238 | name: "placeholder", | CODE |
| LOW | plugins/email/server/auth/email.test.ts | 138 | email: "user@example.com", | CODE |
| LOW | plugins/email/server/auth/email.test.ts | 154 | const email = "sso-user@example.org"; | CODE |
| LOW | plugins/email/server/auth/email.test.ts | 183 | const email = "guest-user@example.org"; | CODE |
| LOW | plugins/email/server/auth/email.test.ts | 212 | const email = "sso-user-2@example.org"; | CODE |
| LOW | plugins/email/server/auth/email.test.ts | 241 | const email = "guest-user-2@example.org"; | CODE |
| LOW | server/emails/templates/BaseEmail.test.tsx | 60 | { to: "user@example.com" }, | CODE |
| LOW | server/emails/templates/BaseEmail.test.tsx | 84 | { to: "user@example.com" }, | CODE |
| LOW | server/utils/validators.test.ts | 259 | expect(isMailboxAddress("user@example.com")).toBe(true); | CODE |
| LOW | server/utils/VerificationCode.test.ts | 6 | const email = "user@example.com"; | CODE |
| LOW | server/utils/VerificationCode.test.ts | 47 | "user@example.com" | CODE |
| LOW | server/utils/VerificationCode.test.ts | 50 | await VerificationCode.delete(teamId, "user@example.com"); | CODE |
| LOW | server/models/ShareSubscription.test.ts | 77 | ShareSubscription.normalizeEmailFingerprint("user@example.com"); | CODE |
| LOW | server/models/ShareSubscription.test.ts | 84 | ).toBe(ShareSubscription.normalizeEmailFingerprint("user@example.com")); | CODE |
| LOW | server/models/ShareSubscription.test.ts | 106 | ).toBe(ShareSubscription.normalizeEmailFingerprint("user@example.com")); | CODE |
| LOW | server/models/ShareSubscription.test.ts | 130 | ).toBe(ShareSubscription.normalizeEmailFingerprint("user@example.com")); | CODE |
| LOW | server/models/ShareSubscription.test.ts | 156 | ShareSubscription.normalizeEmailFingerprint("user@example.com"); | CODE |
| LOW | server/models/helpers/ProseMirrorHelper.test.ts | 1463 | const text = "lorem ipsum dolor sit amet ".repeat(50); | CODE |
| LOW | server/models/helpers/ProseMirrorHelper.test.ts | 1463 | const text = "lorem ipsum dolor sit amet ".repeat(50); | CODE |
| LOW | server/routes/api/users/users.test.ts | 27 | name: "John Doe", | CODE |
| LOW | server/routes/api/users/users.test.ts | 669 | name: "Jane Doe", | CODE |
| LOW | server/routes/api/users/users.test.ts | 684 | const other = await buildUser({ teamId: team.id, name: "Jane Doe" }); | CODE |
| LOW | server/routes/api/suggestions/suggestions.test.ts | 106 | name: "Jane Doe", | CODE |
| LOW⚡ | server/routes/api/shares/shares.test.ts | 1553 | email: "user@example.com", | CODE |
| LOW⚡ | server/routes/api/shares/shares.test.ts | 1555 | ShareSubscription.normalizeEmailFingerprint("user@example.com"), | CODE |
| LOW⚡ | server/routes/api/shares/shares.test.ts | 1564 | email: "user@example.com", | CODE |
| LOW⚡ | server/routes/api/shares/shares.test.ts | 1577 | email: "user@example.com", | CODE |
| LOW⚡ | server/routes/api/shares/shares.test.ts | 1579 | ShareSubscription.normalizeEmailFingerprint("user@example.com"), | CODE |
| LOW⚡ | server/routes/api/shares/shares.test.ts | 1589 | email: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1604 | email: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1606 | ShareSubscription.normalizeEmailFingerprint("user@example.com"), | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1620 | email: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1634 | email: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1636 | ShareSubscription.normalizeEmailFingerprint("user@example.com"), | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1653 | email: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1670 | email: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1695 | email: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1696 | emailFingerprint: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1721 | email: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1722 | emailFingerprint: "user@example.com", | CODE |
| LOW | server/routes/api/shares/shares.test.ts | 1746 | email: "user@example.com", | CODE |
| 24 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/models/Comment.ts | 216 | // Step 1: Update the reactions cache. | COMMENT |
| LOW | app/models/Comment.ts | 236 | // Step 2: Add the user to the store. | COMMENT |
| LOW | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 203 | // Step 1: Read candidate document IDs from readonly replica to avoid | COMMENT |
| LOW | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 264 | // Step 2: Insert the eligible IDs into the working table on primary | COMMENT |
| LOW | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 311 | // Step 1: Get batch of document IDs to process | COMMENT |
| LOW⚡ | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 331 | // Step 2: Calculate scores outside of a transaction | COMMENT |
| LOW⚡ | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 338 | // Step 3: Update document scores | COMMENT |
| LOW⚡ | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 341 | // Step 4: Mark batch as processed | COMMENT |
| LOW | server/routes/api/auth/auth.ts | 141 | // If the user did not _just_ sign in then we need to check if they continue | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | app/models/Comment.ts | 216 | // Step 1: Update the reactions cache. | COMMENT |
| LOW | app/models/Comment.ts | 236 | // Step 2: Add the user to the store. | COMMENT |
| LOW | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 203 | // Step 1: Read candidate document IDs from readonly replica to avoid | COMMENT |
| LOW | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 264 | // Step 2: Insert the eligible IDs into the working table on primary | COMMENT |
| LOW | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 311 | // Step 1: Get batch of document IDs to process | COMMENT |
| LOW⚡ | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 331 | // Step 2: Calculate scores outside of a transaction | COMMENT |
| LOW⚡ | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 338 | // Step 3: Update document scores | COMMENT |
| LOW⚡ | …ver/queues/tasks/UpdateDocumentsPopularityScoreTask.ts | 341 | // Step 4: Mark batch as processed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ugins/search-postgres/server/PostgresSearchProvider.ts | 781 | // - the doc is published AND lives in a collection the user can access | COMMENT |
| LOW | .claude/skills/verify-outline/scripts/verify-outline.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | server/typings/outlinewiki__koa-passport.d.ts | 1 | declare module "@outlinewiki/koa-passport" { | COMMENT |
| LOW | server/utils/requestFilteringAgent/index.ts | 1 | // Vendored from request-filtering-agent v3.2.0 (MIT, by azu). | COMMENT |
| LOW | server/policies/cancan.ts | 421 | // of this software and associated documentation files (the "Software"), to deal | COMMENT |
| LOW | server/logging/tracing.ts | 1 | // MIT License | COMMENT |
| LOW | shared/styles/normalize.ts | 1 | // MIT License | COMMENT |
| LOW | shared/editor/lib/markdown/serializer.ts | 21 | // :: (Object<(state: MarkdownSerializerState, node: Node, parent: Node, index: number)>, Object) | COMMENT |
| LOW | shared/editor/lib/markdown/serializer.ts | 41 | // opening and closing syntax appears relative to other mixable | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | README.md | 35 | > **Note:** Please do not submit AI-generated pull requests. We receive a high volume of mass, low-quality PRs generated | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | shared/i18n/locales/zh_TW/translation.json | 1752 | "Import a zip file of Markdown documents exported from Slab – collections, posts, images, and attachments will be impo | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .claude/skills/verify-outline/scripts/verify-outline.sh | 4 | # Usage: | COMMENT |