0.8

Adjusted Signal

0.8

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

2.1K

Stars

JavaScript

Language

370.9K

Lines of Code

1.4K

Files

247

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 245 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 2 finding(s).

Agent Over-Engineering Ratio 2.8/100 · LOW

Are wrappers, guards, and repeated structures necessary? 191 finding(s).

PR Review Velocity Impact 3.6/100 · LOW

Which changes need focused human review? 247 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 1MEDIUM 7LOW 238

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 247 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers191 hits · 212 pts

Severity	File	Line	Snippet	Context
LOW	docs/guides/build-modular-monolith.md	917	function buildOnGatewayResponseCallback (peopleProps) {	CODE
LOW	packages/wattpm-pprof-capture/index.js	105	function scheduleLastProfileCleanup (state) {	CODE
LOW	packages/wattpm-pprof-capture/index.js	119	function unscheduleLastProfileCleanup (state) {	CODE
LOW	packages/wattpm-pprof-capture/index.js	137	function unscheduleProfileRotation (state) {	CODE
LOW	packages/wattpm-pprof-capture/test/sourcemap.test.js	25	function verifyTypeScriptFilesInProfile (profile) {	CODE
LOW	…es/wattpm-pprof-capture/lib/node-modules-sourcemaps.js	186	export async function loadNodeModulesSourceMaps (appPath, moduleNames, debug = false) {	CODE
LOW	packages/globals/lib/index.js	78	export function getAdditionalServerOptions (options) {	CODE
LOW	packages/globals/lib/index.js	190	export function getOnActiveResourcesEventLoop (options) {	CODE
LOW⚡	packages/globals/lib/index.d.ts	208	export declare function getAdditionalServerOptions (options?: RequiredGlobalGetterOptions): PlatformaticGlobal['addition	CODE
LOW⚡	packages/globals/lib/index.d.ts	209	export declare function getAdditionalServerOptions (options: OptionalGlobalGetterOptions): PlatformaticGlobal['additiona	CODE
LOW⚡	packages/globals/lib/index.d.ts	210	export declare function getAdditionalServerOptions (options: GlobalGetterOptions): PlatformaticGlobal['additionalServerO	CODE
LOW⚡	packages/globals/lib/index.d.ts	292	export declare function getOnActiveResourcesEventLoop (options?: RequiredGlobalGetterOptions): PlatformaticGlobal['onAct	CODE
LOW⚡	packages/globals/lib/index.d.ts	293	export declare function getOnActiveResourcesEventLoop (options: OptionalGlobalGetterOptions): PlatformaticGlobal['onActi	CODE
LOW⚡	packages/globals/lib/index.d.ts	294	export declare function getOnActiveResourcesEventLoop (options: GlobalGetterOptions): PlatformaticGlobal['onActiveResour	CODE
LOW	packages/metrics/index.js	179	function getHttpClientRequestOrigin (request) {	CODE
LOW	packages/metrics/index.js	187	function isHttpClientMetricsEnabled (metricsConfig) {	CODE
LOW	packages/metrics/index.js	407	export function collectEluAndSystemCpuMetrics (registry) {	CODE
LOW	packages/next/test/compatibility/compatibility.test.js	40	async function verifyDevelopmentMiddlewareContext (t, configuration) {	CODE
LOW	packages/next/test/integration/development.test.js	33	export async function verifyDevelopmentFrontendWithExternalProxy (	CODE
LOW	packages/next/test/caching/helper.js	12	export async function prepareRuntimeWithBackend (	CODE
LOW	packages/next/lib/standalone.js	7	export async function resolveStandaloneEntrypoint (root) {	CODE
LOW	packages/next/lib/standalone.js	31	export async function parseStandaloneNextConfig (serverEntrypoint) {	CODE
LOW	packages/next/lib/standalone.js	41	export function requireStandaloneStartServer (serverEntrypoint) {	CODE
LOW	packages/next/lib/pack.js	76	export async function materializeRuntimeDependencies ({ bundleRoot, logger }) {	CODE
LOW	packages/next/lib/pack.js	149	function listWorkspaceDependencies (packageJson) {	CODE
LOW	packages/next/lib/pack.js	197	function resolvePackageJsonFromSearchPaths (require, name) {	CODE
LOW	packages/next/lib/pack.js	229	function resolveWorkspacePackageRoot (name) {	CODE
LOW	packages/next/lib/pack.js	437	export async function ensurePortableNodeModules (bundleRoot) {	CODE
LOW	packages/next/lib/loader.js	25	function createEvaluatorWrapperFunction (original) {	CODE
LOW	packages/sql-openapi/test/ignore.test.js	31	async function createUsersWithPasswordHash (db, sql) {	CODE
LOW	packages/sql-openapi/lib/utils.js	3	function removeOperationPropertiesFromOpenApiPathItem (pathItem) {	CODE
LOW	packages/sql-openapi/lib/utils.js	14	export function getSchemaOverrideFromOpenApiPathItem (pathItem, method) {	CODE
LOW⚡	packages/tanstack/test/production.test.js	22	function verifyFrontendWithBundleOnRoot (t, url) {	CODE
LOW⚡	packages/tanstack/test/production.test.js	26	async function verifyFrontendWithBundleOnPrefix (t, url) {	CODE
LOW⚡	packages/tanstack/test/production.test.js	33	async function verifyFrontendWithBundleOnAutodetectedPrefix (t, url) {	CODE
LOW	packages/create-wattpm/test/cli/helper.js	54	export async function executeCreatePlatformatic (dir, options = {}) {	CODE
LOW	packages/create-wattpm/lib/utils.js	103	async function resolveWorkspaceDependency (dependencyName) {	CODE
LOW	packages/create-wattpm/lib/utils.js	122	export function convertApplicationNameToPrefix (applicationName) {	CODE
LOW	packages/sql-json-schema-mapper/index.js	61	function mapSQLTypeToOpenAPISchema (field, output) {	CODE
LOW	packages/sql-json-schema-mapper/test/simple.test.js	43	async function createBasicGeneratedTests (db, sql) {	CODE
LOW	packages/runtime/test/pprof-auto-detection.test.js	9	function isWattpmPprofCapturePreloaded (preload) {	CODE
LOW	packages/runtime/test/scheduler-control.test.js	12	async function createRuntimeWithScheduler (t, scheduler, { managementApi = false } = {}) {	CODE
LOW	…ages/runtime/test/worker-interceptor-rejection.test.js	25	function captureUnhandledRejections (t) {	CODE
LOW	packages/runtime/test/opentelemetry-metrics.test.js	11	async function testOpenTelemetryMetricsForwarding (t, fixture) {	CODE
LOW	packages/runtime/test/scheduler.test.js	13	async function createRuntimeWithScheduler (t, scheduler) {	CODE
LOW	packages/runtime/test/base-path.test.js	11	async function startApplicationWithEntrypoint (t, fixture, entrypoint) {	CODE
LOW	packages/runtime/test/api/metrics.test.js	10	function findPrometheusLinesForMetric (metric, output) {	CODE
LOW	…kages/runtime/test/api/metrics-label-collision.test.js	9	function createRuntimeWithCollidingLabels (t) {	CODE
LOW	…/runtime/test/multiple-workers/per-worker-port.test.js	31	async function getOccupiedPortWithAvailablePreviousPort () {	CODE
LOW	…/runtime/test/multiple-workers/per-worker-port.test.js	50	async function preparePerWorkerPortRuntime (	CODE
LOW	packages/runtime/lib/config.js	313	function conflictingApplicationSource (root, resolvedApplicationsPath, existing, entryPath) {	CODE
LOW	packages/runtime/lib/prom-server.js	116	function isHealthProbesServerEnabled (healthProbes) {	CODE
LOW	packages/runtime/lib/prom-server.js	145	function resolveHealthProbesOptions (metricsOpts, healthProbes) {	CODE
LOW	packages/runtime/lib/prom-server.js	162	async function registerExtensionHealthRoutes (promServer, runtime) {	CODE
LOW	packages/runtime/lib/policies.js	1	export function createChannelCreationHook (config) {	CODE
LOW	packages/runtime/lib/generator.js	34	function getRuntimeWrappableProperties (skipServer) {	CODE
LOW	packages/runtime/lib/worker/health-signals.js	95	export function startEventLoopDelayMonitor (sendHealthSignal, options = {}) {	CODE
LOW	packages/runtime/lib/worker/health-signals.js	112	return function stopEventLoopDelayMonitor () {	CODE
LOW	packages/runtime/lib/worker/interceptors.js	23	export function markAsPlatformaticDispatcher (dispatcher) {	CODE
LOW	packages/runtime/lib/worker/interceptors.js	126	function createUpdatableInterceptor (originInterceptor) {	CODE
131 more matches not shown…

Structural Annotation Overuse28 hits · 42 pts

Severity	File	Line	Snippet	Context
LOW	docs/learn/beginner/environment-variables.md	23	## Step 1: Understanding Variable Replacement	COMMENT
LOW	docs/learn/beginner/environment-variables.md	47	## Step 2: Using .env Files for Local Development	COMMENT
LOW	docs/learn/beginner/environment-variables.md	66	## Step 3: Setting Variables from Command Line	COMMENT
LOW	docs/learn/beginner/environment-variables.md	80	## Step 4: Environment-Specific Configuration	COMMENT
LOW	docs/learn/beginner/environment-variables.md	108	## Step 5: Common Configuration Patterns	COMMENT
LOW	docs/learn/beginner/crud-application.md	62	## Step 1: Add Your First Application to Watt	COMMENT
LOW	docs/learn/beginner/crud-application.md	103	## Step 2: Define Your Application's Data Schema	COMMENT
LOW	docs/learn/beginner/crud-application.md	298	## Step 3: Explore Your Application's Auto-Generated API	COMMENT
LOW	docs/learn/beginner/crud-application.md	312	## Step 4: Experience Watt's Unified Development Environment	COMMENT
LOW	docs/learn/beginner/crud-application.md	372	## Step 5: Prepare for Multi-Application Architecture	COMMENT
LOW	docs/guides/use-watt-multiple-repository.md	39	## Step 1: Create Your Project	COMMENT
LOW	docs/guides/use-watt-multiple-repository.md	83	## Step 2: Configure Multi-Repository Applications	COMMENT
LOW	docs/guides/use-watt-multiple-repository.md	142	## Step 3: Configure Environment Variables	COMMENT
LOW	docs/guides/use-watt-multiple-repository.md	196	## Step 4: Resolve and Run Applications	COMMENT
LOW	docs/guides/use-watt-multiple-repository.md	240	## Step 5: Verification and Testing	COMMENT
LOW	docs/guides/use-watt-with-ts-node.md	148	### Step 1: Install Dependencies	COMMENT
LOW	docs/guides/use-watt-with-ts-node.md	155	### Step 2: Create Watt Configuration	COMMENT
LOW	docs/guides/use-watt-with-ts-node.md	193	### Step 3: Update Package.json	COMMENT
LOW	docs/guides/cache-with-platformatic-watt.md	123	## Step 1: Setup Fastify and Enable HTTP Cache	COMMENT
LOW	docs/guides/cache-with-platformatic-watt.md	182	## Step 2: Add Multiple Services for Demonstration	COMMENT
LOW	docs/guides/cache-with-platformatic-watt.md	212	## Step 3: Add Cache Headers to Your Responses	COMMENT
LOW	docs/guides/cache-with-platformatic-watt.md	312	## Step 4: Configure the Gateway	COMMENT
LOW	docs/guides/cache-with-platformatic-watt.md	348	## Step 5: Enable HTTP Cache in Watt	COMMENT
LOW	docs/guides/cache-with-platformatic-watt.md	415	## Step 6: Implement Cache Invalidation	COMMENT
LOW	docs/guides/cache-with-platformatic-watt.md	535	## Step 7: Verification and Testing	COMMENT
LOW	docs/guides/deployment/dockerize-a-watt-app.md	21	## Step 1: Configure Your Application for Containers	COMMENT
LOW	docs/guides/deployment/dockerize-a-watt-app.md	43	## Step 2: Create Your Dockerfile	COMMENT
LOW	docs/guides/deployment/dockerize-a-watt-app.md	99	## Step 3: Build and Run Your Container	COMMENT

Over-Commented Block17 hits · 17 pts

Severity	File	Line	Snippet	Context
LOW	scripts/license-check.js	1	#!/usr/bin/env node	COMMENT
LOW	…ages/runtime/test/worker-interceptor-rejection.test.js	1	import { deepStrictEqual, ok } from 'node:assert'	COMMENT
LOW	packages/runtime/lib/runtime.js	181	#loggerDestination	COMMENT
LOW	packages/runtime/lib/runtime.js	201	#healthMetricsTimer	COMMENT
LOW	packages/runtime/lib/runtime.js	221	#extensions	COMMENT
LOW	packages/runtime/lib/runtime.js	2741	// The main thread drives it based on the ELU measured by the health	COMMENT
LOW	packages/runtime/lib/runtime.js	2881	this.#workers.set(workerId, worker)	COMMENT
LOW	packages/runtime/lib/runtime.js	3021	// Reschedule the next check. We are not using .refresh() because it's more	COMMENT
LOW	packages/runtime/lib/worker-scaler.js	21	#maxWorkers	COMMENT
LOW	packages/basic/lib/worker/child-manager.js	41		COMMENT
LOW	packages/db-core/index.js	41		COMMENT
LOW	packages/db-core/index.js	61	// {	COMMENT
LOW	packages/nuxt/lib/dev-ready.js	1	// Runs inside the spawned `nuxt dev` child process (either the built-in development	COMMENT
LOW	packages/generators/test/base-generator.test.js	541	})	COMMENT
LOW	packages/node/lib/capability.js	121	export class NodeCapability extends BaseCapability {	COMMENT
LOW	packages/gateway/lib/graphql-fetch.js	1	import { compose } from '@platformatic/graphql-composer'	COMMENT
LOW	packages/gateway/lib/capability.js	101	}	COMMENT

Modern AI Meta-Vocabulary5 hits · 13 pts

Severity	File	Line	Snippet	Context
MEDIUM	docs/guides/use-watt-multiple-repository.md	127	├── my-microapplications-app/ # Main orchestration app	CODE
MEDIUM	…rate-frontend-code-to-consume-platformatic-rest-api.md	50	Refer to the [Scaffolding Your First Vite Project](https://vitejs.dev/guide/#scaffolding-your-first-vite-project) docume	CODE
MEDIUM	docs/skills/watt/references/wattpm-cli.md	51	## Existing scaffolding and dependency workflows	COMMENT
MEDIUM	docs/overview/comparison-with-alternatives.md	426	# Convert each microservice to Watt service	COMMENT
MEDIUM	docs/overview/comparison-with-alternatives.md	427	# Keep existing business logic, change orchestration	COMMENT

Hallucination Indicators1 hit · 10 pts

Severity	File	Line	Snippet	Context
CRITICAL	packages/gateway/lib/root.js	47	app.platformatic.config.gateway.applications.forEach(s => {	CODE

AI Slop Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ime/test/gateway-restart-on-application-change.test.js	15	// with two or more workers and SO_REUSEPORT the restart is seamless — but with	COMMENT
MEDIUM	packages/gateway/lib/capability.js	117	// seamless; with ONE — the default, and forced wherever reusePort is	COMMENT

Magic Placeholder Names1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	docs/guides/datadog.md	58	DD_API_KEY=replace-with-your-api-key	CODE

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	packages/db-authorization/index.js	168	// If we have `fields` in save rules, we need to check if all the not-nullable	COMMENT

Slop Phrases1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	packages/basic/lib/modules.js	87	logger.warn(`Also don't forget to add "${moduleName}" to the application dependencies.`)	CODE

platformatic/platformatic

Open-Source Code Quality, Security and Technical Debt Review