3.5

Adjusted Signal

3.5

Raw Pattern Score

100%

Time Factor

—

Last Push

—

Stars

—

Language

86.2K

Lines of Code

571

Files

274

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 14.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 270 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.6/100 · LOW

Are imports declared and package/API names verified? 4 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 15.9/100 · LOW

Which changes need focused human review? 274 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 0MEDIUM 3LOW 269

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 274 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block266 hits · 264 pts

Severity	File	Line	Snippet	Context
LOW	poem-derive/src/lib.rs	1	//! Macros for poem	COMMENT
LOW	poem-lambda/src/lib.rs	21	///	COMMENT
LOW	poem-lambda/src/lib.rs	41	}	COMMENT
LOW	poem-mcpserver/src/server.rs	181	/// Returns the shared metadata of this server.	COMMENT
LOW	poem-mcpserver/src/tool.rs	141	}	COMMENT
LOW	poem-mcpserver/src/streamable_http.rs	541		COMMENT
LOW	poem-mcpserver/src/streamable_http.rs	561	/// use poem::{Route, http::StatusCode};	COMMENT
LOW	poem-mcpserver/src/streamable_http.rs	581	ToolsType: Tools + Send + Sync + 'static,	COMMENT
LOW	poem-mcpserver/src/streamable_http.rs	601	/// promptly. HTTP-only Streamable HTTP sessions do not have a persistent	COMMENT
LOW	poem-mcpserver/src/protocol/initialize.rs	41	/// Resources capability.	COMMENT
LOW	poem-mcpserver/src/protocol/tool.rs	21	pub name: &'static str,	COMMENT
LOW	poem-mcpserver/src/protocol/tool.rs	61	#[serde(rename_all = "camelCase")]	COMMENT
LOW	poem-mcpserver/src/protocol/resources.rs	21	/// Resource information.	COMMENT
LOW	poem-mcpserver/src/protocol/resources.rs	41	}	COMMENT
LOW	poem-mcpserver/src/protocol/rpc.rs	41	/// The ID of the request to cancel	COMMENT
LOW	poem-mcpserver/src/protocol/rpc.rs	61	#[serde(rename = "prompts/list")]	COMMENT
LOW	examples/mcpserver/prompts-streamable-http/src/main.rs	61	}	COMMENT
LOW	examples/mcpserver/prompts/src/main.rs	61		COMMENT
LOW	examples/poem/static-files/files/#a.txt	1	#a	COMMENT
LOW	poem-openapi/tests/response.rs	21		COMMENT
LOW	poem-openapi/src/lib.rs	1	//! OpenAPI support for Poem.	COMMENT
LOW	poem-openapi/src/lib.rs	21	//! used directly.	COMMENT
LOW	poem-openapi/src/lib.rs	41	//! main.rs	COMMENT
LOW	poem-openapi/src/lib.rs	61	//! OpenApiService::new(Api, "Hello World", "1.0").server("http://localhost:3000");	COMMENT
LOW	poem-openapi/src/lib.rs	81	//! ## Interactive API docs	COMMENT
LOW	poem-openapi/src/lib.rs	101	//! \| humantime \| Integrate with the [`humantime` crate](https://crates.io/crates/humantime) \|	COMMENT
LOW	poem-openapi/src/lib.rs	121		COMMENT
LOW	poem-openapi/src/lib.rs	141	//! serializes in UTC. Jiff's native parser	COMMENT
LOW	poem-openapi/src/base.rs	21	#[derive(Debug, Copy, Clone, Eq, PartialEq, Serialize)]	COMMENT
LOW	poem-openapi/src/base.rs	141	///	COMMENT
LOW	poem-openapi/src/base.rs	161	///	COMMENT
LOW	poem-openapi/src/base.rs	181	///	COMMENT
LOW	poem-openapi/src/base.rs	301	///	COMMENT
LOW	poem-openapi/src/base.rs	321	/// It means that this API does not have any response body.	COMMENT
LOW	poem-openapi/src/types/maybe_undefined.rs	21	/// use poem_openapi::{payload::Json, types::MaybeUndefined, Object, OpenApi, OpenApiService};	COMMENT
LOW	poem-openapi/src/types/maybe_undefined.rs	41	/// #[OpenApi]	COMMENT
LOW	poem-openapi/src/types/maybe_undefined.rs	61	/// MaybeUndefined::Undefined => {}	COMMENT
LOW	poem-openapi/src/types/maybe_undefined.rs	261	MaybeUndefined::Null => MaybeUndefined::Null,	COMMENT
LOW	poem-openapi/src/types/mod.rs	1	//! Commonly used data types.	COMMENT
LOW	poem-openapi/src/types/mod.rs	21	//! use serde_json::json;	COMMENT
LOW	poem-openapi/src/types/mod.rs	61		COMMENT
LOW	poem-openapi/src/payload/response.rs	21	/// http::{Method, StatusCode, Uri},	COMMENT
LOW	poem-openapi/src/payload/binary.rs	21	/// test::TestClient,	COMMENT
LOW	poem-openapi/src/payload/binary.rs	41	/// let mut bytes = Vec::new();	COMMENT
LOW	poem-openapi/src/payload/base64_payload.rs	21	/// Body, IntoEndpoint, Request, Result,	COMMENT
LOW	poem-openapi/src/payload/base64_payload.rs	41	/// let len = data.len();	COMMENT
LOW	poem-openapi/src/payload/base64_payload.rs	61	/// .send()	COMMENT
LOW	poem-openapi/src/payload/event_stream.rs	41	keep_alive: Some(duration),	COMMENT
LOW	poem-grpc-build/src/config.rs	61	}	COMMENT
LOW	poem-grpc-build/src/config.rs	81	/// .codec("::poem_grpc::codec::ProstCodec")	COMMENT
LOW	poem-grpc-build/src/config.rs	101	/// is generated instead of the default [`HashMap`][3].	COMMENT
LOW	poem-grpc-build/src/config.rs	121	/// // Match all fields named 'my_map_field'.	COMMENT
LOW	poem-grpc-build/src/config.rs	141		COMMENT
LOW	poem-grpc-build/src/config.rs	161	/// ```rust	COMMENT
LOW	poem-grpc-build/src/config.rs	181	/// ```	COMMENT
LOW	poem-grpc-build/src/config.rs	201	/// omitted.	COMMENT
LOW	poem-grpc-build/src/config.rs	221	/// // Some messages want to be serializable with serde as well.	COMMENT
LOW	poem-grpc-build/src/config.rs	241	/// `oneof`, the match would look like	COMMENT
LOW	poem-grpc-build/src/config.rs	261	/// type. The expected usage are additional attributes, but anything is	COMMENT
LOW	poem-grpc-build/src/config.rs	281	/// );	COMMENT
206 more matches not shown…

Hallucination Indicators2 hits · 25 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	…penapi/src/ui/openapi_explorer/openapi-explorer.min.js	2	(()=>{var e,t,n={6614:(e,t,n)=>{"use strict";const r=window,a=r.ShadowRoot&&(void 0===r.ShadyCSS\|\|r.ShadyCSS.nativeShado	CODE
CRITICAL	poem-openapi/src/ui/rapidoc/rapidoc-min.js	2	(()=>{var e,t,r={448:(e,t,r)=>{"use strict";const n=window.ShadowRoot&&(void 0===window.ShadyCSS\|\|window.ShadyCSS.native	CODE

AI Slop Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	…penapi/src/ui/openapi_explorer/openapi-explorer.min.js	4	</pre> </div>`} <div class="tab-content col m-markdown" style="flex:1;display:${"headers"===this.activeRes	CODE
MEDIUM⚡	…penapi/src/ui/openapi_explorer/openapi-explorer.min.js	4	</pre> </div>`} <div class="tab-content col m-markdown" style="flex:1;display:${"headers"===this.activeRes	CODE
MEDIUM⚡	…penapi/src/ui/openapi_explorer/openapi-explorer.min.js	4	</pre> </div>`} <div class="tab-content col m-markdown" style="flex:1;display:${"headers"===this.activeRes	CODE

Fake / Example Data2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW⚡	…penapi/src/ui/openapi_explorer/openapi-explorer.min.js	3	</code></pre> </div>`}))} </div></section>`}function er(e){return F` <div class="api-request col regular-font	CODE
LOW	poem-openapi/src/ui/rapidoc/rapidoc-min.js	1319	`;function yR(e){if(!e)return;let t="",r="";if(e.$ref){const r=e.$ref.lastIndexOf("/");t=`{recursive: ${e.$ref.substring	CODE

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	scripts/check-licenses.py	16		CODE

poem-web/poem

Open-Source Code Quality, Security and Technical Debt Review