1.8

Adjusted Signal

1.8

Raw Pattern Score

100%

Time Factor

2026-10-26

Last Push

11.6K

Stars

Language

265.1K

Lines of Code

1.8K

Files

344

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 190 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.6/100 · LOW

Are imports declared and package/API names verified? 114 finding(s).

Agent Over-Engineering Ratio 3.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 77 finding(s).

PR Review Velocity Impact 8.7/100 · LOW

Which changes need focused human review? 344 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 1MEDIUM 57LOW 284

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 344 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block119 hits · 119 pts

Severity	File	Line	Snippet	Context
LOW	lefthook.yml	1	# This is the configuration file for pre-push and pre-commit hooks that can	COMMENT
LOW	lefthook.yml	21	echo 'npm not found in PATH; it is required to run these hooks. Install Node.js/npm, or bypass with: git push	COMMENT
LOW	main.go	141	// Every service, handler, and repository is constructed here and	COMMENT
LOW	metrics/playbackClients.go	21	// client. Unlike the windowed aggregate values it is not reset by the	COMMENT
LOW	tools/tools.go	1	//go:build tools	COMMENT
LOW	pluginhost/authgate.go	81	// worker, manifest, etc. that the (exempt) admin app needs to render. This is	COMMENT
LOW	pluginhost/authgate.go	121	// reachable while unauthenticated — it serves the login screen, the auth	COMMENT
LOW	pluginhost/authgate.go	141	// the HLS handlers never inspect Authorization, so "Authorization: anything"	COMMENT
LOW	pluginhost/sqlite.go	21	pluginSQLiteDriver = "owncast_plugin_sqlite"	COMMENT
LOW	pluginhost/sqlite.go	61	}	COMMENT
LOW	pluginhost/pluginhost.go	101	// requireAdminAuth is the host's admin Basic Auth middleware, plumbed	COMMENT
LOW	pluginhost/pluginhost.go	401	buf.WriteByte('\n')	COMMENT
LOW	pluginhost/pluginhost.go	881	// GET /api/admin/plugins/<name>/instructions bundled INSTRUCTIONS.md markdown (admin)	COMMENT
LOW	pluginhost/pluginhost.go	1321	// Inside a plugin's storage directory, its two kinds of storage get their own	COMMENT
LOW	pluginhost/pluginhost.go	1421	total += info.Size()	COMMENT
LOW	pluginhost/registry.go	21	// public catalog (DefaultPluginRegistry); operators can override	COMMENT
LOW	pluginhost/pluginevents.go	81	final, allowed, _ := pluginDispatcher.Filter(ctx, plugins.EventChatMessageReceived, pluginChatMessage{ID: msg.ID, User	COMMENT
LOW	test/test-local.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/auth/run.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/auth/oauth-gate-test/src/plugin.js	1	// OAuth viewer-auth gate (test fixture).	COMMENT
LOW	test/automated/plugins/run.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/plugins/run.sh	21		COMMENT
LOW	test/automated/browser/run.sh	1	#!/bin/bash	COMMENT
LOW	…ted/browser/cypress/support/remote-fediverse-server.js	1	// A fake remote fediverse server for full end-to-end federation tests.	COMMENT
LOW	test/automated/upgrades/run.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/test-follower-validation.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/dev-up.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/test-following.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/run.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/test-fediverse-otp.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/test-featured-streams.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/test-featured-streams.sh	21	# verify the durable delivery is scheduled for retry, restart the instance,	COMMENT
LOW	test/automated/activitypub/test-federation.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/test-chat-sanitization.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/entrypoint.sh	1	#!/bin/bash	COMMENT
LOW	test/automated/activitypub/test-indieauth.sh	1	#!/bin/bash	COMMENT
LOW	config/config.go	1	package config	COMMENT
LOW	config/config.go	41	// listener and read by the transcoder when it spins up.	COMMENT
LOW	web/next.config.js	1	const withBundleAnalyzer = require('@next/bundle-analyzer');	COMMENT
LOW	web/next-env.d.ts	1	/// <reference types="next" />	COMMENT
LOW	web/tests/localeFlip.test.tsx	1	import React from 'react';	COMMENT
LOW	web/components/ui/Content/MobileContent.tsx	101	items.push({ label: 'About', key: '0', children: aboutTabContent });	COMMENT
LOW	web/components/ui/Content/DesktopContent.tsx	81	// Add Featured tab if there are featured streams	COMMENT
LOW	web/components/ui/Content/Content.module.scss	41	margin-bottom: 0;	COMMENT
LOW	web/components/ui/PluginTabFrame/PluginTabFrame.tsx	21	// 5. customStyles — the admin's custom CSS.	COMMENT
LOW	web/components/ui/PluginTabFrame/PluginTabFrame.tsx	61		COMMENT
LOW	web/components/video/latencyCompensator.js	361	// Find the first segment whose end is past the playhead.	COMMENT
LOW	web/components/video/latencyCompensator.js	501	}	COMMENT
LOW	web/components/video/OwncastPlayer/OwncastPlayer.tsx	221	iconPlaceholder.innerHTML =	COMMENT
LOW	web/components/admin/plugins/BrowseRegistry.tsx	101	installedVersions: Map<string, string>;	COMMENT
LOW	web/components/theme/AntdProvider.tsx	101	if (vars['theme-color-components-menu-item-focus-bg']) {	COMMENT
LOW	web/components/theme/AntdProvider.tsx	121	// build render, and the browser, so the class baked into the static	COMMENT
LOW	web/public/dev-sw.js	1	/* eslint-disable no-restricted-globals */	COMMENT
LOW	web/pages/_app.tsx	1	// All these imports are almost exclusively for the Admin.	COMMENT
LOW	web/pages/admin/plugins.tsx	41	} = useContext(PluginsContext);	COMMENT
LOW	web/pages/admin/plugins.tsx	61	// Registry list, used both by the Browse tab and by the Installed	COMMENT
LOW	web/interfaces/plugin.ts	41		COMMENT
LOW	web/interfaces/plugin.ts	61	path: string;	COMMENT
LOW	web/interfaces/plugin.ts	81	// the plugin is held in a not-loaded state until the admin re-enables	COMMENT
LOW	models/pluginStyle.go	1	package models	COMMENT
59 more matches not shown…

Decorative Section Separators36 hits · 114 pts

Severity	File	Line	Snippet	Context
MEDIUM	test/automated/activitypub/test-following.sh	85	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	87	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	291	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	293	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	325	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	327	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	561	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	563	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	587	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	589	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	603	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	605	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	628	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	630	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	663	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-following.sh	665	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	172	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	174	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	371	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	373	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	531	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	533	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	1055	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	1057	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	1081	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-featured-streams.sh	1083	# ==========================	COMMENT
MEDIUM	test/automated/activitypub/test-federation.sh	846	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-federation.sh	848	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-federation.sh	864	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-federation.sh	866	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-federation.sh	879	# ==========================================	COMMENT
MEDIUM	test/automated/activitypub/test-federation.sh	881	# ==========================================	COMMENT
MEDIUM⚡	test/automated/activitypub/test-federation.sh	925	# ==========================================	COMMENT
MEDIUM⚡	test/automated/activitypub/test-federation.sh	927	# ==========================================	COMMENT
MEDIUM⚡	test/automated/activitypub/test-federation.sh	935	# ==========================================	COMMENT
MEDIUM⚡	test/automated/activitypub/test-federation.sh	937	# ==========================================	COMMENT

Fake / Example Data112 hits · 114 pts

Severity	File	Line	Snippet	Context
LOW	test/fakeChat.js	8	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a	CODE
LOW	test/fakeChat.js	8	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a	CODE
LOW	test/populateContent.sh	45	--data-raw '{"value":"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labo	CODE
LOW	test/populateContent.sh	45	--data-raw '{"value":"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labo	CODE
LOW	test/populateContent.sh	85	--data-raw '{"value":"# Header\n\nLorem ipsum dolor sit amet, _consectetur adipiscing elit_, sed do eiusmod tempor inci	CODE
LOW	test/populateContent.sh	85	--data-raw '{"value":"# Header\n\nLorem ipsum dolor sit amet, _consectetur adipiscing elit_, sed do eiusmod tempor inci	CODE
LOW	test/load/chatLoadTest.js	11	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a	CODE
LOW	test/load/chatLoadTest.js	11	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna a	CODE
LOW	test/load/badchatdata.js	8	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna	CODE
LOW	test/load/badchatdata.js	8	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna	CODE
LOW	test/load/package-lock.json	5439	"artillery-plugin-fake-data": "1.18.0",	CODE
LOW	test/load/package-lock.json	5596	"node_modules/artillery-plugin-fake-data": {	CODE
LOW	test/load/package-lock.json	5598	"resolved": "https://registry.npmjs.org/artillery-plugin-fake-data/-/artillery-plugin-fake-data-1.18.0.tgz",	CODE
LOW	auth/fediverse/fediverse_test.go	13	userID = "fake-user-id"	CODE
LOW	auth/fediverse/fediverse_test.go	14	userDisplayName = "fake-user-display-name"	CODE
LOW	web/tests/displayNameValidation.test.ts	172	{ input: 'John Doe', expected: true, description: 'Name with space' },	CODE
LOW	…ui/followers/SingleFollower/SingleFollower.stories.tsx	26	name: 'John Doe',	CODE
LOW	…omponents/chat/ChatTextField/ChatTextField.stories.tsx	61	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma	CODE
LOW	…omponents/chat/ChatTextField/ChatTextField.stories.tsx	61	'Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma	CODE
LOW	…ponents/modals/FediAuthModal/FediAuthModal.stories.tsx	21	displayName: 'fake-user',	CODE
LOW	…ponents/modals/FediAuthModal/FediAuthModal.stories.tsx	29	displayName: 'fake-user',	CODE
LOW⚡	…ponents/common/ContentHeader/ContentHeader.stories.tsx	40	name: 'My Awesome Owncast Stream, streaming the best of streams and some lorem ipsum too',	CODE
LOW⚡	…ponents/common/ContentHeader/ContentHeader.stories.tsx	42	'A calvacade of glorious sights and sounds. Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmo	CODE
LOW⚡	…ponents/common/ContentHeader/ContentHeader.stories.tsx	42	'A calvacade of glorious sights and sounds. Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmo	CODE
LOW	web/i18n/pl/translation.json	490	"placeholder": "Twoje konto fediverse @account@server",	CODE
LOW	web/i18n/pl/translation.json	513	"placeholder": "Twoja nazwa wyświetlana czatu"	CODE
LOW	web/i18n/vi/translation.json	490	"placeholder": "Tài khoản Fediverse của bạn @account@server",	CODE
LOW	web/i18n/vi/translation.json	513	"placeholder": "Tên hiển thị của bạn trong chat"	CODE
LOW	web/i18n/sv/translation.json	490	"placeholder": "Ditt fediverse-konto @account@server",	CODE
LOW	web/i18n/sv/translation.json	513	"placeholder": "Ditt visningsnamn på chatten"	CODE
LOW	web/i18n/ga/translation.json	490	"placeholder": "Do chuntas fediverse @account@server",	CODE
LOW	web/i18n/ga/translation.json	513	"placeholder": "Do shainainm comhoiriúnachta"	CODE
LOW	web/i18n/ms/translation.json	490	"placeholder": "Akaun fediverse anda @account@server",	CODE
LOW	web/i18n/ms/translation.json	513	"placeholder": "Nama paparan sembang anda"	CODE
LOW	web/i18n/no/translation.json	490	"placeholder": "Din fediverse konto @account@server",	CODE
LOW	web/i18n/no/translation.json	513	"placeholder": "Ditt chatte visningsnavn"	CODE
LOW	web/i18n/ja/translation.json	490	"placeholder": "あなたのfediverseアカウント @account@server",	CODE
LOW	web/i18n/ja/translation.json	513	"placeholder": "チャットの表示名"	CODE
LOW	web/i18n/el/translation.json	490	"placeholder": "Ο fediverse λογαριασμός σας @account@server",	CODE
LOW	web/i18n/el/translation.json	513	"placeholder": "Το όνομα της συνομιλίας σας"	CODE
LOW	web/i18n/it/translation.json	490	"placeholder": "Il tuo account fediverse @account@server",	CODE
LOW	web/i18n/it/translation.json	513	"placeholder": "Il nome della tua chat"	CODE
LOW	web/i18n/ru/translation.json	490	"placeholder": "Ваш fediverse аккаунт @account@server",	CODE
LOW	web/i18n/ru/translation.json	513	"placeholder": "Отображаемое имя чата"	CODE
LOW	web/i18n/pt/translation.json	490	"placeholder": "Sua conta fediversifica @account@server",	CODE
LOW	web/i18n/pt/translation.json	513	"placeholder": "Seu nome de exibição do chat"	CODE
LOW	web/i18n/zh/translation.json	490	"placeholder": "您的 Fediverse 帳戶 @account@server",	CODE
LOW	web/i18n/zh/translation.json	513	"placeholder": "您的聊天顯示名稱"	CODE
LOW	web/i18n/pa/translation.json	490	"placeholder": "ਤੁਹਾਡਾ ਫੇਡਿਵਰਸ ਖਾਤਾ @account@server",	CODE
LOW	web/i18n/pa/translation.json	513	"placeholder": "ਤੁਹਾਡਾ ਚੈਟ ਡਿਸਪਲੇ ਨਾਮ"	CODE
LOW	web/i18n/ar/translation.json	490	"placeholder": "حسابك fediverse @account@server",	CODE
LOW	web/i18n/ar/translation.json	513	"placeholder": "اسم عرض المحادثة"	CODE
LOW	web/i18n/hr/translation.json	490	"placeholder": "Vaš fediverse račun @account@server",	CODE
LOW	web/i18n/hr/translation.json	513	"placeholder": "Vaše ime prikazano u chatu"	CODE
LOW	web/i18n/nl/translation.json	490	"placeholder": "Je Fediverse-account @account@server",	CODE
LOW	web/i18n/nl/translation.json	513	"placeholder": "Je chatnaam"	CODE
LOW	web/i18n/bn/translation.json	490	"placeholder": "আপনার ফেডিভার্স অ্যাকাউন্ট @account@server",	CODE
LOW	web/i18n/bn/translation.json	513	"placeholder": "আপনার চ্যাট ডিসপ্লে নাম"	CODE
LOW	web/i18n/hi/translation.json	490	"placeholder": "आपका Fediverse खाता @account@server",	CODE
LOW	web/i18n/hi/translation.json	513	"placeholder": "आपका चैट डिस्प्ले नाम"	CODE
52 more matches not shown…

Hyper-Verbose Identifiers37 hits · 45 pts

Severity	File	Line	Snippet	Context
LOW	test/userColorsTest.js	23	function messageBubbleColorForString(str) {	CODE
LOW	web/utils/format.ts	45	export function parseSecondsToDurationString(seconds = 0) {	CODE
LOW	web/utils/fediverseAuthSession.ts	20	export function parsePendingFediverseAuth(	CODE
LOW	web/utils/fediverseAuthSession.ts	77	export function clearPendingFediverseAuth(): void {	CODE
LOW	web/utils/browserPushNotifications.ts	3	export function arePushNotificationSupported() {	CODE
LOW	web/utils/browserPushNotifications.ts	7	export function canPushNotificationsBeSupported() {	CODE
LOW	web/components/video/settings-menu.ts	14	export function createVideoSettingsMenuButton(	CODE
LOW	web/components/video/latencyCompensator.js	353	function getCurrentlyPlayingSegment(tech) {	CODE
LOW	web/components/video/latencyCompensator.js	383	function loadPersistedRebufferEvents() {	CODE
LOW	web/components/video/metrics/playback.js	6	function getCurrentlyPlayingSegment(tech) {	CODE
LOW	web/components/chat/ChatContainer/ChatContainer.tsx	104	function calculateCollapsedMessages() {	CODE
LOW⚡	…omponents/admin/config/general/EditInstanceDetails.tsx	167	function handleHideViewerCountChange(enabled: boolean) {	CODE
LOW⚡	…omponents/admin/config/general/EditInstanceDetails.tsx	171	function handleDisableSearchEngineIndexingChange(enabled: boolean) {	CODE
LOW⚡	…omponents/admin/config/general/EditInstanceDetails.tsx	175	function directoryInfoModalCancelPressed() {	CODE
LOW⚡	…omponents/admin/config/general/EditInstanceDetails.tsx	181	function directoryInfoModalOkPressed() {	CODE
LOW	…/stores/eventhandlers/connected-client-info-handler.ts	3	export function handleConnectedClientInfoMessage(	CODE
LOW	web/hooks/useFeatureRequests.tsx	102	export function usePendingFeatureRequestCount(enabled: boolean): number {	CODE
LOW	web/hooks/useFederatedServers.tsx	55	function getFederatedServerErrorMessage(	CODE
LOW⚡	web/pages/admin/config-chat.tsx	66	function handleChatJoinMessagesEnabledChange(enabled: boolean) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	70	function handleEstablishedUserModeChange(enabled: boolean) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	74	function handleChatSpamProtectionChange(enabled: boolean) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	78	function handleChatSlurFilterChange(enabled: boolean) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	82	function handleChatRequireAuthenticationChange(enabled: boolean) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	86	function resetForbiddenUsernameState() {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	109	function handleDeleteForbiddenUsernameIndex(index: number) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	114	function handleCreateForbiddenUsername(tag: string) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	123	function resetSuggestedUsernameState() {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	146	function handleDeleteSuggestedUsernameIndex(index: number) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	151	function handleCreateSuggestedUsername(tag: string) {	CODE
LOW⚡	web/pages/admin/config-chat.tsx	160	function getSuggestedUsernamesLimitWarning(length: number): StatusState \| null {	CODE
LOW	web/pages/admin/config-federation.tsx	175	function federationInfoModalCancelPressed() {	CODE
LOW	web/pages/admin/config-federation.tsx	194	function federationInfoModalOkPressed() {	CODE
LOW	web/pages/admin/config-federation.tsx	213	function resetBlockedDomainsSaveState() {	CODE
LOW	web/pages/admin/config-federation.tsx	241	function handleDeleteBlockedDomain(index: number) {	CODE
LOW	web/pages/admin/config-federation.tsx	246	function handleCreateBlockedDomain(domain: string) {	CODE
LOW	web/services/notifications-service.ts	1	export async function saveNotificationRegistration(channel, destination, accessToken) {	CODE
LOW	web/services/notifications-service.ts	30	export async function registerWebPushNotifications(vapidPublicKey) {	CODE

AI Slop Vocabulary14 hits · 33 pts

Severity	File	Line	Snippet	Context
MEDIUM	test/automated/activitypub/test-fediverse-otp.sh	16	# Runs inside the same Docker harness as the federation tests:	COMMENT
MEDIUM	test/automated/activitypub/test-fediverse-otp.sh	19	# Reuses the activitypub harness's certs (mkcert), Caddy reverse proxy, and	COMMENT
MEDIUM	test/automated/activitypub/test-indieauth.sh	17	# Runs in the same Docker harness as the federation tests:	COMMENT
MEDIUM	web/components/video/latencyCompensator.js	218	// aliasing (min of a window covering the beat cycle), phase-robust when	COMMENT
MEDIUM	static/web/_next/static/chunks/1ved9t-41jmx5.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,702361,e	CODE
MEDIUM	static/web/_next/static/chunks/11-mpi2rquu_4.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,655830,e	CODE
MEDIUM	static/web/_next/static/chunks/3bknes1ihjbof.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,168034,e	CODE
MEDIUM	static/web/_next/static/chunks/3bknes1ihjbof.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,168034,e	CODE
MEDIUM	static/web/_next/static/chunks/0wc8_zm_xd7c3.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,168034,e	CODE
MEDIUM⚡	static/web/_next/static/chunks/34jcgv64ymddr.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,114293,(	CODE
MEDIUM⚡	static/web/_next/static/chunks/34jcgv64ymddr.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,114293,(	CODE
MEDIUM	static/web/_next/static/chunks/2ii8si9sk1wly.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,970806,(	CODE
MEDIUM	static/web/_next/static/chunks/2ii8si9sk1wly.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,970806,(	CODE
LOW	static/web/_next/static/chunks/08ncx1vjsvcx_.js	8	`)});let w=t.nonTextTags\|\|["script","style","textarea","option","xmp"];t.allowedAttributes&&(g={},m={},c(t.allowedAttrib	CODE

Hallucination Indicators2 hits · 25 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	static/web/_next/static/chunks/34jcgv64ymddr.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,114293,(	CODE
CRITICAL	static/web/_next/static/chunks/1nrmiek5civep.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,494335,(	CODE

Slop Phrases9 hits · 16 pts

Severity	File	Line	Snippet	Context
MEDIUM	…nts/ui/CustomPageContent/CustomPageContent.stories.tsx	40	content: `<hr>\n<h3>The upcoming streams</h3>\n<h4>Thursday, Apr. 28:</h4>\n<ul>\n<li>22:00 CEST / 20:00 UTC / 4:00	CODE
LOW	web/style-definitions/tokens/color/owncast-colors.yaml	12	# If you add more colors here make sure to add them to	COMMENT
MEDIUM	static/web/_next/static/chunks/1h_w8qmvr5nj0.js	10	`,transition:`all ${e.motionDurationMid}`,"&-hoverable:hover":{position:"relative",zIndex:1,boxShadow:r}}})(e),[`${t	CODE
MEDIUM	static/web/_next/static/chunks/3tot3xibxlyii.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,466361,(	CODE
LOW	static/web/_next/static/chunks/3tot3xibxlyii.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,466361,(	CODE
MEDIUM	static/web/_next/static/chunks/3k4d8ayc3sjjl.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,474242,6	CODE
LOW	static/web/_next/static/chunks/3k4d8ayc3sjjl.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,474242,6	CODE
MEDIUM	static/web/_next/static/chunks/2n3784k_fnc57.js	1	(globalThis.TURBOPACK\|\|(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,132259,e	CODE
MEDIUM	static/web/admin/index.html	47	</style><noscript data-n-css=""></noscript><script src="/_next/static/chunks/3pdahgzxqm8ih.js" defer=""></script><script	CODE

Redundant / Tautological Comments5 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	test/automated/activitypub/test-follower-validation.sh	50	# Check if test has exceeded maximum duration	COMMENT
LOW	test/automated/activitypub/test-follower-validation.sh	394	# Check if we've exceeded the maximum test duration	COMMENT
LOW	test/automated/activitypub/test-federation.sh	150	# Check if hosts entries exist	COMMENT
LOW	test/automated/activitypub/test-federation.sh	166	# Check if snac2 is already installed	COMMENT
LOW	test/automated/activitypub/test-federation.sh	295	# Check if caddy is installed	COMMENT

Excessive Try-Catch Wrapping4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	services/plugins/shared_engine_test.go	564	except Exception as err:	CODE
LOW	services/plugins/shared_engine_test.go	595	except Exception as err:	CODE
MEDIUM	services/plugins/shared_engine_test.go	561	def handle(msg):	CODE
MEDIUM	services/plugins/shared_engine_test.go	592	def handle(msg):	CODE

AI Response Leakage1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…nts/ui/CustomPageContent/CustomPageContent.stories.tsx	40	content: `<hr>\n<h3>The upcoming streams</h3>\n<h4>Thursday, Apr. 28:</h4>\n<ul>\n<li>22:00 CEST / 20:00 UTC / 4:00	CODE

Overly Generic Function Names3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	…ted/browser/cypress/support/remote-fediverse-server.js	85	function handleRequest(req, res) {	CODE
LOW	web/public/mockServiceWorker.js	124	async function handleRequest(event, requestId, requestInterceptedAt) {	CODE
LOW	static/web/mockServiceWorker.js	124	async function handleRequest(event, requestId, requestInterceptedAt) {	CODE

Example Usage Blocks2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	test/automated/activitypub/dev-up.sh	25	# Usage:	COMMENT
LOW	test/automated/activitypub/run.sh	5	# Usage:	COMMENT

owncast/owncast

Open-Source Code Quality, Security and Technical Debt Review