0.7

Adjusted Signal

0.7

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

7.1K

Stars

PHP

Language

429.2K

Lines of Code

3.0K

Files

272

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 234 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.5/100 · LOW

Are imports declared and package/API names verified? 38 finding(s).

Agent Over-Engineering Ratio 2.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 176 finding(s).

PR Review Velocity Impact 3.2/100 · LOW

Which changes need focused human review? 272 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 6LOW 266

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 272 distinct pattern matches across 4 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers176 hits · 185 pts

Severity	File	Line	Snippet	Context
LOW	app/Util/Lexer/Autolink.php	212	public function setAutolinkActiveUsersOnly($active)	CODE
LOW	app/Util/Lexer/Autolink.php	544	public function autoLinkUsernamesAndLists($tweet = null)	CODE
LOW	app/Util/Lexer/Extractor.php	103	public function extractEntitiesWithIndices($tweet = null)	CODE
LOW	app/Util/Lexer/Extractor.php	174	public function extractMentionedScreennames($tweet = null): array	CODE
LOW	app/Util/Lexer/Extractor.php	205	public function extractMentionedUsernames($tweet)	CODE
LOW	app/Util/Lexer/Extractor.php	254	public function extractHashtagsWithIndices($tweet = null, $checkUrlOverlap = true): array	CODE
LOW	app/Util/Lexer/Extractor.php	316	public function extractCashtagsWithIndices($tweet = null): array	CODE
LOW	app/Util/Lexer/Extractor.php	413	public function extractMentionedScreennamesWithIndices($tweet = null)	CODE
LOW	app/Util/Lexer/Extractor.php	438	public function extractMentionedUsernamesWithIndices()	CODE
LOW	app/Util/Lexer/Extractor.php	449	public function extractMentionsOrListsWithIndices($tweet = null): array	CODE
LOW	app/Util/Lexer/Extractor.php	501	public function extractMentionedUsernamesOrListsWithIndices()	CODE
LOW	app/Util/Lexer/Extractor.php	511	public function extractURLWithoutProtocol($flag = null)	CODE
LOW	app/Util/Lexer/Extractor.php	527	public function removeOverlappingEntities($entities): array	CODE
LOW	app/Util/Lexer/LooseAutolink.php	58	public function autoLinkUsernamesAndLists($tweet = null)	CODE
LOW	app/Util/Lexer/LooseAutolink.php	176	public function addLinksToUsernamesAndLists()	CODE
LOW⚡	app/Util/RateLimit/User.php	12	public function getMaxPostsPerHourAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	17	public function getMaxPostsPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	22	public function getMaxCommentsPerHourAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	27	public function getMaxCommentsPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	32	public function getMaxLikesPerHourAttribute(): int	CODE
LOW⚡	app/Util/RateLimit/User.php	37	public function getMaxLikesPerDayAttribute(): int	CODE
LOW⚡	app/Util/RateLimit/User.php	42	public function getMaxSharesPerHourAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	47	public function getMaxSharesPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	52	public function getMaxUserBansPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	57	public function getMaxInstanceBansPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	62	public function getMaxHashtagFollowsPerHourAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	67	public function getMaxHashtagFollowsPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	72	public function getMaxCollectionsPerHourAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	77	public function getMaxCollectionsPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	82	public function getMaxCollectionsPerMonthAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	87	public function getMaxComposeMediaUpdatesPerHourAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	92	public function getMaxComposeMediaUpdatesPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	97	public function getMaxComposeMediaUpdatesPerMonthAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	102	public function getMaxStoriesPerHourAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	107	public function getMaxStoriesPerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	112	public function getMaxStoryDeletePerDayAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	117	public function getMaxPostEditsPerHourAttribute()	CODE
LOW⚡	app/Util/RateLimit/User.php	122	public function getMaxPostEditsPerDayAttribute()	CODE
LOW	app/Util/ActivityPub/HttpSignature.php	197	public static function instanceActorSignWithDigest(	CODE
LOW	app/Util/ActivityPub/Helpers.php	1737	public static function handleStatusPostProcessing(Status $status, int $profileId, string $url): void	CODE
LOW	app/Util/ActivityPub/Helpers.php	2040	public static function setOptionalMediaAttributes(Media $media, array $data): void	CODE
LOW	app/Util/ActivityPub/Helpers.php	2074	public static function validateAttachmentCollection(array $attachments, array $mediaTypes, array $mimeTypes): bool	CODE
LOW	app/Util/ActivityPub/Helpers.php	2110	public static function processMediaTypeAttachment(array $media, Status $status, int $order): ?Media	CODE
LOW	app/Util/ActivityPub/Helpers.php	2222	public static function getOrFetchRemoteProfile(string $url): ?Profile	CODE
LOW	app/Util/ActivityPub/Helpers.php	2412	public static function getOrCreateInstance(string $domain): Instance	CODE
LOW	app/Util/ActivityPub/Inbox/HandlesFeatureRequests.php	13	public function handleFeatureRequestActivity(): void	CODE
LOW	app/Util/ActivityPub/Inbox/HandlesQuoteRequests.php	20	public function handleQuoteRequestActivity(): void	CODE
LOW	app/Util/ActivityPub/Inbox/HandlesQuoteRequests.php	125	protected function quoteRequestInstrumentUrl(Profile $actor): ?string	CODE
LOW	app/Util/ActivityPub/Inbox/HandlesQuoteRequests.php	156	protected function quoteRequestInstrumentMatches(Profile $actor, Status $status): bool	CODE
LOW	app/Util/ActivityPub/Inbox/InboxHelpers.php	19	public function validateAndFetchActor(string $actorUrl): ?Profile	CODE
LOW	app/Util/ActivityPub/Inbox/HandlesStories.php	87	public function handleStoryReactionActivity(): void	CODE
LOW	app/Auth/AppRegisterGrant.php	34	public function respondToAccessTokenRequest(	CODE
LOW	app/Providers/TelescopeServiceProvider.php	41	protected function hideSensitiveRequestDetails()	CODE
LOW	app/Models/User.php	210	public function receivesBroadcastNotificationsOn(): string	CODE
LOW	app/Models/CustomFilter.php	311	public static function getCachedFiltersForAccount($profileId)	CODE
LOW	app/Passport/CachedPersonalAccessClientRepository.php	60	private function discoverPersonalAccessClient(string $provider): Client	CODE
LOW	app/Http/Controllers/AdminController.php	681	public function customEmojiShowDuplicates(Request $request, $id): View	CODE
LOW	app/Http/Controllers/GroupController.php	500	public function getMemberInteractionLimits(Request $request, $id): JsonResponse	CODE
LOW	app/Http/Controllers/GroupController.php	516	public function updateMemberInteractionLimits(Request $request, $id)	CODE
LOW	app/Http/Controllers/AppRegisterController.php	405	protected function normalizeRegistrationInput(Request $request): void	CODE
116 more matches not shown…

Over-Commented Block52 hits · 52 pts

Severity	File	Line	Snippet	Context
LOW	app/Util/Lexer/Autolink.php	621	}	COMMENT
LOW	app/Util/Lexer/Autolink.php	641	// <span class='tco-ellipsis'> <!-- This stuff should get displayed but not copied -->	COMMENT
LOW	app/Util/Lexer/Regex.php	61	return;	COMMENT
LOW	app/Util/Lexer/Regex.php	81	// 0x3000 Zs # IDEOGRAPHIC SPACE	COMMENT
LOW	app/Util/Lexer/Regex.php	101	// 0x0256-0x0257	COMMENT
LOW	app/Util/Lexer/Regex.php	121	//	COMMENT
LOW	app/Util/Lexer/Regex.php	141	// 0xff5e FULLWIDTH TILDE	COMMENT
LOW	app/Util/Lexer/Regex.php	161	// $after in the following regular expression. Note that we only use a	COMMENT
LOW	app/Util/ActivityPub/Validator/Add.php	21	// 'object.id' => 'required\|url',	COMMENT
LOW	app/Util/Media/Blurhash.php	21	// The output is a 4x4-component DCT, so sampling the source at full resolution	COMMENT
LOW	app/Models/CustomFilter.php	361	// $statusFilters->groupBy('custom_filter_id')->each(function ($statuses, $filterId) use (&$filtersHash) {	COMMENT
LOW	app/Http/Controllers/TimelineController.php	41	'layout' => 'nullable\|string\|in:grid,feed',	COMMENT
LOW	app/Http/Controllers/TimelineController.php	61	// $page = $request->input('page');	COMMENT
LOW	app/Http/Controllers/TimelineController.php	81	// $dir = $min ? '>' : '<';	COMMENT
LOW	app/Http/Controllers/TimelineController.php	101	// )->where('id', $dir, $id)	COMMENT
LOW	app/Http/Controllers/TimelineController.php	121	// 'local',	COMMENT
LOW	app/Http/Controllers/TimelineController.php	141		COMMENT
LOW	app/Http/Controllers/Groups/GroupsCommentController.php	201	// $gp = new GroupPost;	COMMENT
LOW	app/Http/Controllers/Groups/GroupsCommentController.php	221	// todo: perform in job	COMMENT
LOW	app/Http/Controllers/Groups/GroupsTopicController.php	81	// ->select('status_hashtags.', 'group_posts.')	COMMENT
LOW	app/Http/Controllers/Groups/GroupsFeedController.php	121	$filtered = $user ? UserFilterService::filters($user->profile_id) : [];	COMMENT
LOW	app/Http/Controllers/Groups/GroupsPostController.php	61	$gp->visibility = 'draft';	COMMENT
LOW	app/Http/Controllers/Groups/GroupsPostController.php	201	$gp->id	COMMENT
LOW	app/Http/Controllers/Groups/GroupsPostController.php	221	// 'caption' => $status->caption,	COMMENT
LOW	app/Http/Controllers/Groups/GroupsPostController.php	301	GroupLike::class,	COMMENT
LOW	app/Http/Controllers/Api/ApiV1Controller.php	3141	if ($res->isNotEmpty()) {	COMMENT
LOW	app/Services/Status/ReplyCleanupService.php	21	{	COMMENT
LOW	config/auth.php	81		COMMENT
LOW	resources/assets/js/spa.js	121	// const AboutComponent = () => import(/* webpackChunkName: "about.bundle" */ "./../components/About.vue");	COMMENT
LOW	resources/assets/js/spa.js	281	// component: HomeComponent	COMMENT
LOW	resources/assets/js/spa.js	321	// {	COMMENT
LOW	resources/assets/js/spa.js	461	getProfileLayout: state => {	COMMENT
LOW	resources/assets/js/spa.js	621	} catch (e) {	COMMENT
LOW	resources/assets/js/status.js	41	// Vue.component(	COMMENT
LOW	resources/assets/js/lib/argon.js	941	// $sliderId = $slider.attr('id'),	COMMENT
LOW	resources/assets/components/GroupPage.vue	821	// let observer = new IntersectionObserver((entries, observer) => {	COMMENT
LOW	resources/assets/components/GroupFeed.vue	81	document.querySelectorAll(".mobile-footer").forEach(e => e.parentNode.removeChild(e));	COMMENT
LOW	resources/assets/components/groups/GroupsHome.vue	241	// if(u.has('ct')) {	COMMENT
LOW	resources/assets/components/groups/GroupFeed.vue	601	// let video = document.querySelectorAll('video');	COMMENT
LOW	…nents/groups/partials/MemberLimitInteractionsModal.vue	141		COMMENT
LOW	…ssets/components/groups/partials/SelfNotifications.vue	141	// let ids = res.data.map(n => n.id);	COMMENT
LOW	…ssets/components/groups/partials/SelfNotifications.vue	161	// if(n.type == 'share' && !n.status) {	COMMENT
LOW	resources/assets/components/partials/sidebar.vue	361	// {	COMMENT
LOW	resources/assets/components/partials/sidebar.vue	381	// {	COMMENT
LOW	tests/Feature/StoryIndexRebuildChunkSkipTest.php	61	// The row we drop mid-scan sorts EARLY in the rebuild order (created_at	COMMENT
LOW	tests/Feature/RemoteOidcTest.php	41	// 'email' => fake()->unique()->freeEmail,	COMMENT
LOW	tests/Feature/RemoteOidcTest.php	61	// $this->assertEquals($user->email, $oauthData['email']);	COMMENT
LOW	tests/Feature/RemoteOidcTest.php	81	// 'email' => $user->email,	COMMENT
LOW	.github/dependabot.yml	21	# interval: "weekly"	COMMENT
LOW	.github/workflows/php-laravel-tests-db-matrix.yml	1	name: PHP - Laravel Tests (DB Matrix - experimental)	COMMENT
LOW	.github/workflows/php-laravel-tests-db-matrix.yml	161	# Unique Redis key prefix per matrix entry so cache/queue keys never	COMMENT
LOW	routes/api.php	381	// Route::get('active/list', [LiveStreamController::class, 'getActiveStreams'])->middleware($middleware);	COMMENT

Fake / Example Data38 hits · 39 pts

Severity	File	Line	Snippet	Context
LOW	app/Services/EmailService.php	2176	'fake-email.pp.ua',	CODE
LOW	app/Console/Commands/Dev/SeedDevUsers.php	36	'email' => 'admin@example.com',	CODE
LOW	app/Console/Commands/Dev/SeedDevUsers.php	42	'email' => 'user@example.com',	CODE
LOW	resources/views/settings/invites/create.blade.php	22	<input type="email" class="form-control" name="email" placeholder="friend@example.org" autocomplete="off">	CODE
LOW	resources/views/admin/discover/show.blade.php	76	(function($){"use strict";var defaultOptions={tagClass:function(item){return'badge badge-info'},focusClass:'focus',item	CODE
LOW	resources/assets/components/Notifications.vue	211	"placeholder": Placeholder,	CODE
LOW	resources/assets/components/sections/Notifications.vue	201	"placeholder": Placeholder	CODE
LOW	resources/assets/components/admin/AdminDirectory.vue	349	placeholder="info@example.org"	CODE
LOW	…assets/components/admin/partial/AdminSettingsInput.vue	10	:placeholder="placeholder"	CODE
LOW	resources/assets/components/groups/CreateGroup.vue	169	membership: "placeholder",	CODE
LOW	resources/assets/components/groups/GroupSettings.vue	714	'user@example.org',	CODE
LOW	…ces/assets/components/groups/partials/GroupCompose.vue	26	:placeholder="placeholder"	CODE
LOW	…ts/components/groups/partials/CreateForm/TextInput.vue	12	:placeholder="placeholder"	CODE
LOW	…ts/components/groups/partials/CreateForm/TextInput.vue	20	:placeholder="placeholder"	CODE
LOW	…omponents/groups/partials/CreateForm/TextAreaInput.vue	13	:placeholder="placeholder"	CODE
LOW	…omponents/groups/partials/CreateForm/TextAreaInput.vue	23	:placeholder="placeholder"	CODE
LOW	tests/Unit/CuratedOnboardingNotifyAdminTest.php	128	$admin = User::factory()->admin()->create(['email' => 'admin@example.com']);	CODE
LOW	tests/Unit/CuratedOnboardingNotifyAdminTest.php	135	return $mail->hasTo('admin@example.com');	CODE
LOW	tests/Unit/Lexer/UsernameTest.php	239	$expectedAutolink = 'hello <a class="u-url list-slug" href="'.config('app.url').'/@märz@example.org" rel="extern	CODE
LOW	tests/Feature/Framework/MiddlewarePipelineTest.php	21	'email' => 'test@test.com',	CODE
LOW	tests/Feature/Compose/MediaUpdateBlocklistTest.php	58	Storage::disk('local')->put($mediaPath, 'placeholder');	CODE
LOW	tests/Feature/Compose/MediaUpdateBlocklistTest.php	84	Storage::disk('local')->put($mediaPath, 'placeholder');	CODE
LOW	tests/Feature/Compose/ComposeMediaCwEnforcementTest.php	38	Storage::disk('local')->put($mediaPath, 'placeholder');	CODE
LOW	…s/Feature/Federation/StringObjectDeleteIngressTest.php	138	str_replace('{username}', 'placeholder', $endpoint),	CODE
LOW	…s/Feature/Federation/StringObjectDeleteIngressTest.php	157	str_replace('{username}', 'placeholder', $endpoint),	CODE
LOW	…s/Feature/Federation/StringObjectDeleteIngressTest.php	176	str_replace('{username}', 'placeholder', $endpoint),	CODE
LOW	…s/Feature/Federation/StringObjectDeleteIngressTest.php	209	str_replace('{username}', 'placeholder', $endpoint),	CODE
LOW	public/js/home.chunk.df507e687bcdafa0.js	2	"use strict";(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[4951],{27836(t,e,s){s.r(e),s.d(e,{default:	CODE
LOW	public/js/spa.js	2	(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[7228],{93729(e,t,o){"use strict";o.r(t),o.d(t,{default:	CODE
LOW⚡	public/js/groups.js	1	(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[7610],{19933(t,e,s){"use strict";s.r(e),s.d(e,{default:	CODE
LOW⚡	public/js/groups.js	1	(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[7610],{19933(t,e,s){"use strict";s.r(e),s.d(e,{default:	CODE
LOW	public/js/profile~following.bundle.107cdd43840f4562.js	1	"use strict";(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[1645],{94657(t,e,r){r.r(e),r.d(e,{default:	CODE
LOW	public/js/discover~hashtag.bundle.7d2ecd4b8dcf64a3.js	1	"use strict";(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[2966],{86377(t,a,e){e.r(a),e.d(a,{default:	CODE
LOW	public/js/profile~followers.bundle.7ad5ad69f3e9fb0f.js	1	"use strict";(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[8977],{80189(t,e,r){r.r(e),r.d(e,{default:	CODE
LOW	public/js/post.chunk.e603077eff2eefbc.js	2	"use strict";(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[8408],{22151(t,e,s){s.r(e),s.d(e,{default:	CODE
LOW	public/js/profile.chunk.974a5385adcb4e42.js	1	"use strict";(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[8087],{44182(t,e,s){s.r(e),s.d(e,{default:	CODE
LOW	public/js/admin.js	2	(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[9567],{95366(t,e,a){"use strict";a.r(e),a.d(e,{default:	CODE
LOW	public/js/notifications.chunk.d2559e00a1a30220.js	1	"use strict";(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[7744],{14329(t,e,a){a.r(e),a.d(e,{default:	CODE

Slop Phrases6 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM	config/telescope.php	85	\| a request or task is executed. Feel free to customize this list.	CODE
MEDIUM	public/js/spa.js	2	(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[7228],{93729(e,t,o){"use strict";o.r(t),o.d(t,{default:	CODE
MEDIUM⚡	public/js/groups.js	1	(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[7610],{19933(t,e,s){"use strict";s.r(e),s.d(e,{default:	CODE
MEDIUM	public/js/compose.js	2	(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[5666],{28320(t,e,a){"use strict";a.r(e),a.d(e,{default:	CODE
MEDIUM	public/js/remote_auth.js	1	(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[9649],{68633(t,r,o){"use strict";o.r(r),o.d(r,{default:	CODE
MEDIUM	public/js/compose.chunk.0c6eb8ec0fec011e.js	2	"use strict";(self.webpackChunkpixelfed=self.webpackChunkpixelfed\|\|[]).push([[9124],{66517(t,e,a){a.r(e),a.d(e,{default:	CODE

pixelfed/pixelfed

Open-Source Code Quality, Security and Technical Debt Review