3.4

Adjusted Signal

3.4

Raw Pattern Score

100%

Time Factor

2026-10-27

Last Push

9.6K

Stars

TypeScript

Language

59.6K

Lines of Code

495

Files

106

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 71 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 15.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 101 finding(s).

PR Review Velocity Impact 13.7/100 · LOW

Which changes need focused human review? 106 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 35LOW 71

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 106 distinct pattern matches across 3 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators35 hits · 134 pts

Severity	File	Line	Snippet	Context
MEDIUM	operations/autorestart.sh	6	# ── Configuration ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	operations/autorestart.sh	18	# ── Logging ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	operations/autorestart.sh	26	# ── Sanity checks ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	operations/autorestart.sh	44	# ── Check PM2 daemon is alive ─────────────────────────────────────────────────	COMMENT
MEDIUM	operations/autorestart.sh	53	# ── Check each required service ───────────────────────────────────────────────	COMMENT
MEDIUM	operations/autorestart.sh	79	# ── Targeted service recovery ─────────────────────────────────────────────────────	COMMENT
MEDIUM	operations/autorestart.sh	113	# ── Main ──────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	pages/trends/Trends.scss	25	// ─── Header ───────────────────────────────────────────────	COMMENT
MEDIUM	pages/trends/Trends.scss	45	// ─── Search & Chips ────────────────────────────────────────	COMMENT
MEDIUM	pages/trends/Trends.scss	515	// ─── Chart Area (Sharp Corners, Flat Borderless) ───────────	COMMENT
MEDIUM	pages/trends/Trends.scss	534	// ─── Chart Internals ──────────────────────────────────────	COMMENT
MEDIUM	pages/trends/Trends.scss	1077	// ─── Innovative Anime.js Monochrome Chart Loader ────────────	COMMENT
MEDIUM	client/components/QuickStatsBar/QuickStatsBar.scss	127	// ── Icon dark mode overrides ──────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	30	// ── Logo & icons ─────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	36	// ── Header nav links ─────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	39	// ── Autocomplete / search input ──────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	52	// ── Quick stats bar ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	57	// ── Announcement banner ──────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	62	// ── Warning bar ──────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	66	// ── Blog ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	73	// ── Footer ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	83	// ── Cards & shadows ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	88	// ── Primary button (dark pill / filled) ──────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	94	// ── Scan page ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	98	// ── Stat / tooltip ───────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	108	// ── JumpingDots ──────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	111	// ── ScanResults fade gradient ─────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	115	// ── Treemap (text overlaid on coloured squares) ───────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	122	// ── Result page ───────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	127	// ── History bar graph ─────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	135	// ── Icon secondary colour (C8CDD3 — gray parts of icons) ─────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	138	// ── General purpose surface & faint tokens ────────────────────────────────	COMMENT
MEDIUM⚡	stylesheets/semantics.scss	145	// ─── Dark mode overrides ─────────────────────────────────────────────────────	COMMENT
MEDIUM	stylesheets/semantics.scss	1	// ─── Semantic colour tokens ───────────────────────────────────────────────────	COMMENT
MEDIUM	stylesheets/theme.scss	1	// ─── Primitive colour tokens ─────────────────────────────────────────────────	COMMENT

Hyper-Verbose Identifiers66 hits · 66 pts

Severity	File	Line	Snippet	Context
LOW	tools/oxlint/anti-slop/shared/function-parameters.ts	13	export function functionParameterTypeAnnotation(	CODE
LOW	tools/oxlint/anti-slop/shared/function-parameters.ts	29	export function functionParameterBindingName(	CODE
LOW	tools/oxlint/anti-slop/shared/reflect-method.ts	13	export function isGlobalReflectMethodCall(	CODE
LOW	tools/oxlint/anti-slop/shared/dictionary-types.ts	128	function isEffectivelyEmptyTypeLiteral(type: ESTree.TSTypeLiteral): boolean {	CODE
LOW	tools/oxlint/anti-slop/shared/dictionary-types.ts	132	function isEffectivelyEmptyInterface(	CODE
LOW	tools/oxlint/anti-slop/shared/dictionary-types.ts	144	function resolvedSubstitutionArgument(	CODE
LOW	tools/oxlint/anti-slop/shared/dictionary-types.ts	296	export function classifyUnsafeDictionaryValue(	CODE
LOW	tools/oxlint/anti-slop/shared/dictionary-types.ts	480	export function isPopulatedObjectExpression(expression: ESTree.Expression): boolean {	CODE
LOW	tools/oxlint/anti-slop/shared/dictionary-types.ts	493	export function isKnownEvidenceExpression(expression: ESTree.Expression): boolean {	CODE
LOW	tools/oxlint/anti-slop/shared/type-alias-resolution.ts	117	export function createTypeAliasEnvironment(	CODE
LOW	…ols/oxlint/anti-slop/shared/lexical-type-parameters.ts	14	function collectInferTypeParameterNames(	CODE
LOW	…ols/oxlint/anti-slop/shared/lexical-type-parameters.ts	35	export function lexicalTypeParameterNames(	CODE
LOW	tools/oxlint/anti-slop/rules/no-widen-then-assert.ts	18	function unwrapExpressionParentheses(expression: ESTree.Expression): ESTree.Expression {	CODE
LOW	tools/oxlint/anti-slop/rules/no-widen-then-assert.ts	143	function isDefinitelyNarrowerRecordType(type: ESTree.TSType): boolean {	CODE
LOW	tools/oxlint/anti-slop/rules/no-widen-then-assert.ts	171	function resolvedVariableForIdentifier(	CODE
LOW	…s/oxlint/anti-slop/rules/no-chained-type-assertions.ts	6	function isTypeAssertionExpression(node: ESTree.Node): node is TypeAssertionExpression {	CODE
LOW	…s/oxlint/anti-slop/rules/no-chained-type-assertions.ts	10	function unwrapParenthesizedExpression(expression: ESTree.Expression): ESTree.Expression {	CODE
LOW	…s/oxlint/anti-slop/rules/no-chained-type-assertions.ts	27	function isOutermostAssertionInChain(node: TypeAssertionExpression): boolean {	CODE
LOW	…s/oxlint/anti-slop/rules/no-chained-type-assertions.ts	39	function isForbiddenAssertionChain(node: TypeAssertionExpression): boolean {	CODE
LOW	tools/oxlint/anti-slop/rules/no-known-value-widening.ts	138	function hasKnownCallArgumentEvidence(	CODE
LOW	tools/oxlint/anti-slop/rules/no-known-value-widening.ts	192	function typePredicateSubjectIndex(	CODE
LOW	tools/oxlint/anti-slop/rules/no-known-value-widening.ts	253	function isDictionaryAccumulatorTarget(destination: WideningTarget): boolean {	CODE
LOW	…/anti-slop/rules/no-conditional-empty-object-spread.ts	16	function isConditionalEmptyObjectSpread(node: ESTree.Expression): boolean {	CODE
LOW	…ls/oxlint/anti-slop/rules/no-unsafe-dictionary-type.ts	61	function isInsideTypeAliasDeclaration(node: ESTree.Node): boolean {	CODE
LOW	…ls/oxlint/anti-slop/rules/no-unsafe-dictionary-type.ts	80	function isInsideTypeParameterConstraint(node: ESTree.TSType): boolean {	CODE
LOW	…lop/rules/require-safety-comment-for-type-assertion.ts	47	function hasSafetyJustificationBefore(	CODE
LOW	…ols/oxlint/anti-slop/rules/no-shape-in-symbol-names.ts	6	function containsForbiddenSymbolName(name: string): boolean {	CODE
LOW	installation-service/resolveRegistryPackageSpec.ts	14	export async function resolveRegistryPackageSpec(	CODE
LOW	installation-service/index.ts	44	async function installPackageWithVersion(	CODE
LOW	bin/updateHistoricalData.ts	62	async function getGithubTrendingPackages() {	CODE
LOW	bin/getResults.ts	36	async function getFirebaseStoreFromNetwork() {	CODE
LOW	server/clients/npm-registry.client.ts	34	export function fetchPackageVersionManifest(	CODE
LOW	server/clients/github.client.ts	72	export async function fetchGithubStarHistoryPage(	CODE
LOW	server/analysis/metrics.ts	41	function recordSuccessfulCacheResponse(request: AnalysisRequest) {	CODE
LOW	server/middlewares/request-logger.middleware.ts	54	export function createRequestLoggerMiddleware(	CODE
LOW	server/middlewares/generate-image.middleware.ts	89	export function createGenerateImgMiddleware(	CODE
LOW	server/middlewares/analysis-context.middleware.ts	6	export function createAnalysisContextMiddleware(	CODE
LOW	server/middlewares/exports-sizes.middleware.ts	20	export function createExportSizesMiddleware(	CODE
LOW	…rver/middlewares/results/resolve-package.middleware.ts	60	export function createResolvePackageMiddleware(	CODE
LOW	server/packages/npm-package.ts	24	export function parseNpmRegistryPackageSpec(	CODE
LOW	server/controllers/package-history.controller.ts	28	function getPackageHistoryDateError(	CODE
LOW	server/controllers/package-history.controller.ts	45	export function createPackageHistoryController(	CODE
LOW	server/controllers/recent-searches.controller.ts	7	export function createRecentSearchesController(): Middleware {	CODE
LOW	utils/firebase.utils.ts	35	async function readPackageHistoryWithFallback(	CODE
LOW	utils/firebase.utils.ts	62	function selectPackageHistoryVersions(	CODE
LOW	utils/common.utils.ts	60	function normalizeParsedPackageUrl(url: URL, original: string): string {	CODE
LOW	languages/package-route.ts	60	export function getExplicitPackagePagePath(	CODE
LOW	languages/javascript.ts	11	export function parseJavaScriptPackageSpecifier(	CODE
LOW	languages/javascript.ts	43	export function formatJavaScriptPackageSpecifier(	CODE
LOW	languages/javascript.ts	51	export function createJavaScriptPackageReference(	CODE
LOW	build-service/installationProvider.ts	92	export function createInstallationProvider(endpoint: string) {	CODE
LOW	__tests__/haproxy-rate-limits.py	112	def test_response_cache_policy_covers_private_paths_and_temporary_errors(self):	CODE
LOW	__tests__/haproxy-rate-limits.py	137	def test_families_share_across_ips_but_do_not_penalize_each_other(self):	CODE
LOW	__tests__/haproxy-rate-limits.py	152	def test_cooldown_escalates_and_expires_for_bots_and_ordinary_clients(self):	CODE
LOW	__tests__/haproxy-rate-limits.py	191	def test_extreme_retries_follow_ip_across_agents_and_routes_until_expiry(self):	CODE
LOW	__tests__/haproxy-rate-limits.py	239	def test_successes_and_other_errors_do_not_trigger_extended_cooldown(self):	CODE
LOW	__tests__/haproxy-rate-limits.py	251	def test_api_and_page_limits_share_pools_but_keep_family_cooldowns(self):	CODE
LOW	__tests__/haproxy-rate-limits.py	287	def test_public_preflights_do_not_spend_budgets_or_bypass_get_cooldowns(self):	CODE
LOW	__tests__/haproxy-rate-limits.py	322	def test_unmapped_crawlers_share_limits_and_cooldowns_across_ips(self):	CODE
LOW	scripts/cleanup-old-keys.ts	252	async function uploadPrunedDataToFirebase(filePath: string) {	CODE
6 more matches not shown…

Over-Commented Block5 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	__tests__/stress-test.sh	41	(curl localhost:5000/api/size?package=mobx-react && echo '\n') &	COMMENT
LOW	__tests__/stress-test.sh	61	#sleep 5	COMMENT
LOW	.github/workflows/library-research.lock.yml	1	# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"fcdbeace79a24f3211cfefef4cd0cb140713eeb1d36ad505b14339a8fcb	COMMENT
LOW	.github/workflows/library-research.lock.yml	21	# gh aw compile	COMMENT
LOW	.github/workflows/library-research.lock.yml	41	# - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 (source v9)	COMMENT

pastelsky/bundlephobia

Open-Source Code Quality, Security and Technical Debt Review