1.5

Adjusted Signal

1.5

Raw Pattern Score

100%

Time Factor

2026-10-27

Last Push

38.8K

Stars

TypeScript

Language

564.3K

Lines of Code

5.1K

Files

792

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 769 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 19 finding(s).

Agent Over-Engineering Ratio 4.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 520 finding(s).

PR Review Velocity Impact 7.0/100 · LOW

Which changes need focused human review? 792 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 1MEDIUM 6LOW 784

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 792 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers516 hits · 532 pts

Severity	File	Line	Snippet	Context
LOW	…nels/node-labels-table/node-labels-table-controller.js	2	function NodeLabelsTableController() {	CODE
LOW	…lability-select/node-availability-select-controller.js	2	function NodeAvailabilitySelectController() {	CODE
LOW	…e-details-panel/swarm-node-details-panel-controller.js	6	function SwarmNodeDetailsPanelController(NodeService, LabelHelper, Notifications, $state) {	CODE
LOW⚡	app/docker/components/log-viewer/logViewerController.js	31	function handleLogsCollectionChange(enabled) {	CODE
LOW⚡	app/docker/components/log-viewer/logViewerController.js	39	function handleLogsWrapLinesChange(enabled) {	CODE
LOW⚡	app/docker/components/log-viewer/logViewerController.js	45	function handleDisplayTimestampsChange(enabled) {	CODE
LOW	…er/views/swarm/visualizer/swarmVisualizerController.js	19	$scope.handleChangeDisplayOnlyRunningTasks = function handleChangeDisplayOnlyRunningTasks(enabled) {	CODE
LOW	…er/views/swarm/visualizer/swarmVisualizerController.js	26	$scope.handleChangeDisplayNodeLabels = function handleChangeDisplayNodeLabels(enabled) {	CODE
LOW	…host/host-browser-view/host-browser-view-controller.js	4	function HostBrowserViewController(SystemService, Notifications) {	CODE
LOW	…ews/nodes/node-details/node-details-view-controller.js	9	function NodeDetailsViewController($q, $stateParams, NodeService, StateManager, AgentService, Authentication, Notifica	CODE
LOW	…ocker/views/networks/create/createNetworkController.js	126	function prepareAuxiliaryAddresses(ipamConfig, ipFormValues) {	CODE
LOW	…ocker/views/networks/create/createNetworkController.js	190	function modifyNetworkConfigurationForMacvlanConfigOnly(config) {	CODE
LOW	…ocker/views/networks/create/createNetworkController.js	197	function modifyNetworkConfigurationForMacvlanConfigFrom(config, selectedNetworkConfig) {	CODE
LOW	app/docker/views/volumes/edit/volumeController.js	38	function getVolumeDataFromContainer(container, volumeId) {	CODE
LOW	app/docker/views/services/edit/serviceController.js	273	$scope.removePlacementConstraint = function removePlacementConstraint(service, index) {	CODE
LOW	app/docker/views/services/edit/serviceController.js	306	$scope.removePortPublishedBinding = function removePortPublishedBinding(service, index) {	CODE
LOW	…ocker/views/services/create/createServiceController.js	323	function createMountObjectFromVolume(volumeObject, target, readonly) {	CODE
LOW	…ocker/views/services/create/createServiceController.js	434	function prepareResourcesCpuConfig(config, input) {	CODE
LOW	…ocker/views/services/create/createServiceController.js	445	function prepareResourcesMemoryConfig(config, input) {	CODE
LOW	…ocker/views/services/create/createServiceController.js	574	function initSlidersMaxValuesBasedOnNodeData(nodes) {	CODE
LOW	app/docker/helpers/imageHelper.js	20	function createImageConfigForContainer(imageModel) {	CODE
LOW	app/docker/helpers/imageHelper.js	30	function removeDigestFromRepository(repository) {	CODE
LOW	app/docker/helpers/serviceHelper.js	11	function associateTasksToServiceAJS(service, tasks) {	CODE
LOW	app/docker/helpers/taskHelper.js	11	function associateContainerToTaskAJS(task, containers) {	CODE
LOW	app/docker/services/networkService.js	52	async function connectContainerAngularJS(environmentId, networkId, containerId) {	CODE
LOW	app/docker/services/volumeService.js	62	function createVolumeConfiguration(name, driver, driverOptions) {	CODE
LOW	app/docker/services/buildService.js	29	async function buildImageFromUploadAngularJS(environmentId, names, file, path) {	CODE
LOW	app/docker/services/buildService.js	40	async function buildImageFromURLAngularJS(environmentId, names, url, path) {	CODE
LOW	app/docker/services/buildService.js	50	async function buildImageFromDockerfileContentAngularJS(environmentId, names, content) {	CODE
LOW	app/docker/services/buildService.js	61	async function buildImageFromDockerfileContentAndFilesAngularJS(environmentId, names, content, files) {	CODE
LOW	app/docker/services/containerService.js	80	async function updateRestartPolicyAngularJS(environmentId, id, restartPolicy, maximumRetryCounts) {	CODE
LOW	app/portainer/__module.js	518	function isTransitionRequiresAuthentication(transition) {	CODE
LOW	…er/settings/authentication/ldap/ldap-settings.model.js	50	export function buildOpenLDAPSettingsModel() {	CODE
LOW	…gs/authentication/ldap/ldap-settings-security/index.js	42	function updateReactValuesFromSettings(settings) {	CODE
LOW	app/portainer/models/registry.js	21	export function RegistryManagementConfigurationDefaultModel(registry) {	CODE
LOW	app/portainer/models/registryRepository.js	3	export function RegistryRepositoryViewModel(item) {	CODE
LOW	app/portainer/models/registryRepository.js	13	export function RegistryRepositoryGitlabViewModel(data) {	CODE
LOW	app/portainer/models/group.js	1	export function EndpointGroupDefaultModel() {	CODE
LOW	app/portainer/models/group.js	19	export function EndpointGroupCreateRequest(model, endpoints) {	CODE
LOW	app/portainer/models/group.js	26	export function EndpointGroupUpdateRequest(model, endpoints) {	CODE
LOW	app/portainer/models/settings.js	38	export function InternalAuthSettingsViewModel(data) {	CODE
LOW	…models/resourceControl/resourceControlCreatePayload.js	7	export function ResourceControlCreatePayload(resourceId, resourceType, data) {	CODE
LOW	…/resourceControl/resourceControlOwnershipParameters.js	9	export function ResourceControlOwnershipParameters(adminOnly = false, publicOnly = false, users = [], teams = [], subRes	CODE
LOW	…ts/accessControlForm/porAccessControlFormController.js	43	function setAuthorizedUsersAndTeams(authorizedUsers, authorizedTeams) {	CODE
LOW	app/portainer/users/queries.ts	25	export function useIsCurrentUserTeamLeader() {	CODE
LOW	app/portainer/users/user.helpers.ts	6	export function filterNonAdministratorUsers(users: User[]) {	CODE
LOW	…settings/edge-compute/settingsEdgeComputeController.js	7	export default function SettingsEdgeComputeController($q, $async, $state, Notifications, SettingsService, StateManager)	CODE
LOW	…ngs/authentication/settingsAuthenticationController.js	11	function SettingsAuthenticationController($q, $scope, $state, Notifications, SettingsService, FileUploadService, TeamSer	CODE
LOW	…ngs/authentication/settingsAuthenticationController.js	60	$scope.authenticationMethodSelected = function authenticationMethodSelected(value) {	CODE
LOW	…ngs/authentication/settingsAuthenticationController.js	195	function isOAuthTeamMembershipFormValid() {	CODE
LOW	app/portainer/views/account/accountController.js	104	function confirmForceChangePassword() {	CODE
LOW	app/portainer/helpers/json.ts	44	export function jsonObjectsToArrayHandler(data: string): unknown[] {	CODE
LOW	app/portainer/helpers/stackHelper.js	18	function getExternalStacksFromLabel(items, label, type) {	CODE
LOW	…p/portainer/services/dockerMaxApiVersionInterceptor.ts	21	export async function dockerMaxAPIVersionInterceptor(	CODE
LOW	app/portainer/services/http-request.helper.ts	9	export function dispatchCacheRefreshEvent() {	CODE
LOW	app/portainer/services/http-request.helper.ts	15	export function dispatchCacheRefreshEventIfNeeded(req: AxiosRequestConfig) {	CODE
LOW	app/portainer/services/http-request.helper.ts	42	export function registryAuthenticationHeader() {	CODE
LOW	app/portainer/services/http-request.helper.ts	46	export function setRegistryAuthenticationHeader(headerValue: string) {	CODE
LOW	app/portainer/services/http-request.helper.ts	57	export function portainerAgentTargetHeader() {	CODE
LOW⚡	app/portainer/services/http-request.helper.ts	70	export function setPortainerAgentTargetHeader(headerValue: string) {	CODE
456 more matches not shown…

Over-Commented Block244 hits · 244 pts

Severity	File	Line	Snippet	Context
LOW	CONTRIBUTING.md	121	// @tag.name <Name of resource>	COMMENT
LOW	analysis/transaction.go	41	// received. Unlike dataStoreCallInsideTx (a direct $store.Service().Method()	COMMENT
LOW	analysis/transaction.go	81	`$store.ViewTx($fn)`,	COMMENT
LOW	analysis/transaction.go	121	`func ($_ $_) $name($_ $_, tx $_, $_ $_, $_ $_, $_ $_) $_ { $_ }`,	COMMENT
LOW	app/docker/models/network.ts	1	import { IPAM, Network, NetworkContainer } from 'docker-types';	COMMENT
LOW	app/portainer/services/fileUpload.js	1	import { PortainerEndpointCreationTypes } from '@/portainer/models/endpoint/models';	COMMENT
LOW	app/kubernetes/converters/application.js	141	res.Volumes = data.spec.template.spec.volumes ? data.spec.template.spec.volumes : [];	COMMENT
LOW	app/kubernetes/models/history/models.js	1	export const KubernetesSystem_DefaultDeploymentUniqueLabelKey = 'pod-template-hash';	COMMENT
LOW	app/kubernetes/horizontal-pod-auto-scaler/payload.js	41	// kind: '',	COMMENT
LOW	app/kubernetes/horizontal-pod-auto-scaler/payload.js	61	// }	COMMENT
LOW	app/kubernetes/horizontal-pod-auto-scaler/payload.js	81		COMMENT
LOW	app/kubernetes/helpers/application/index.js	501	* @param {KubernetesApplication[]} applications Application list	COMMENT
LOW	app/react/hooks/useDebounce.ts	1	import { debounce } from 'lodash';	COMMENT
LOW	app/react/hooks/useDebounce.ts	21	// // This will always print the first value of the "value" prop + the updated value of "v"	COMMENT
LOW	api/portainer.go	141	// Path on disk to the repository hosting the Stack file	COMMENT
LOW	api/portainer.go	361	ChartPath string `json:"ChartPath,omitempty" example:"charts/my-app"`	COMMENT
LOW	api/portainer.go	1281	// Cluster identifier of the Swarm cluster where the stack is deployed	COMMENT
LOW	api/portainer.go	1301	CreationDate int64 `example:"1587399600"`	COMMENT
LOW	api/portainer.go	1461	// Stack file used for this template	COMMENT
LOW	api/portainer.go	2141	// PortainerAgentHeader represents the name of the header available in any agent response	COMMENT
LOW	api/dataservices/source/validation_rules_test.go	1	package source	COMMENT
LOW	api/dataservices/source/validation_rules_test.go	21	// Git: &gittypes.RepoConfig{URL: url},	COMMENT
LOW	api/dataservices/source/validation_rules_test.go	41		COMMENT
LOW	api/dataservices/source/validation_rules_test.go	61	// t.Parallel()	COMMENT
LOW	api/dataservices/source/validation_rules_test.go	81		COMMENT
LOW	api/filesystem/filesystem.go	41	// PrivateKeyFile represents the name on disk of the file containing the private key.	COMMENT
LOW	api/edge/edge.go	21	DirEntries []filesystem.DirEntry	COMMENT
LOW	api/edge/edge.go	41	// Used only for EE	COMMENT
LOW	api/edge/edge.go	81	// Used for adding labels to Kubernetes manifests	COMMENT
LOW	api/http/handler/handler.go	81	// @title PortainerCE API	COMMENT
LOW	api/http/handler/handler.go	101	// @in header	COMMENT
LOW	api/http/handler/handler.go	121	// @tag.x-displayName Edge agent	COMMENT
LOW	api/http/handler/handler.go	141	// @tag.description Operate git repository	COMMENT
LOW	api/http/handler/handler.go	161	// @tag.name roles	COMMENT
LOW	api/http/handler/handler.go	181	// @tag.x-displayName Tags	COMMENT
LOW	api/http/handler/settings/settings_public.go	41	CommandInterval int `json:"CommandInterval" example:"60"`	COMMENT
LOW	api/http/handler/settings/settings_inspect.go	1	package settings	COMMENT
LOW	api/http/handler/websocket/pod.go	21	// @summary Execute a websocket on pod	COMMENT
LOW	api/http/handler/websocket/attach.go	21	// @description If the nodeName query parameter is not specified, the request will be upgraded to the websocket protocol	COMMENT
LOW	api/http/handler/websocket/exec.go	21	}	COMMENT
LOW	api/http/handler/ssl/ssl_update.go	21	return errors.New("both certificate and key files should be provided")	COMMENT
LOW	api/http/handler/ssl/ssl_inspect.go	1	package ssl	COMMENT
LOW	…/http/handler/customtemplates/customtemplate_update.go	41	// SourceID references an existing Source for git credentials/URL.	COMMENT
LOW	…/http/handler/customtemplates/customtemplate_update.go	121	// @security jwt	COMMENT
LOW	…/http/handler/customtemplates/customtemplate_create.go	101	Title string `example:"Nginx" validate:"required"`	COMMENT
LOW	…/http/handler/customtemplates/customtemplate_create.go	141	return errors.New("Invalid note. <img> tag is not supported")	COMMENT
LOW	…/http/handler/customtemplates/customtemplate_create.go	201	// Valid values are: 1 - 'linux', 2 - 'windows'	COMMENT
LOW	…/http/handler/customtemplates/customtemplate_create.go	261	if !IsValidNote(payload.Note) {	COMMENT
LOW	…/http/handler/customtemplates/customtemplate_create.go	481	// @id CustomTemplateCreateFile	COMMENT
LOW	api/http/handler/customtemplates/customtemplate_list.go	21	// @id CustomTemplateList	COMMENT
LOW	…tp/handler/customtemplates/customtemplate_git_fetch.go	21		COMMENT
LOW	api/http/handler/customtemplates/customtemplate_file.go	21		COMMENT
LOW	…http/handler/customtemplates/customtemplate_inspect.go	21	// @description Retrieve details about a template.	COMMENT
LOW	api/http/handler/docker/images/images_list.go	21	Created int64 `json:"created"`	COMMENT
LOW	…tp/handler/docker/containers/container_gpus_inspect.go	21	// @id dockerContainerGpusInspect	COMMENT
LOW	api/http/handler/edgegroups/edgegroup_list.go	21	type decoratedEdgeGroup struct {	COMMENT
LOW	api/http/handler/edgegroups/edgegroup_create.go	61		COMMENT
LOW	api/http/handler/stacks/create_swarm_stack.go	61	// @tags stacks	COMMENT
LOW	api/http/handler/stacks/create_swarm_stack.go	181	}	COMMENT
LOW	api/http/handler/stacks/create_swarm_stack.go	301	if err != nil {	COMMENT
184 more matches not shown…

Fake / Example Data18 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	app/portainer/react/components/index.ts	118	'placeholder',	CODE
LOW	app/portainer/react/components/index.ts	153	'placeholder',	CODE
LOW	app/kubernetes/react/components/index.ts	72	'placeholder',	CODE
LOW	…EnvironmentGroupsTable/EnvironmentGroupsTable.test.tsx	402	expect(searchInput()).toHaveAttribute('placeholder', 'Filter groups...');	CODE
LOW	…ssManagement/PorAccessManagementUsersSelector.test.tsx	105	describe('placeholder', () => {	CODE
LOW	…essManagement/AccessDatatable/AccessDatatable.test.tsx	65	const mockAccess = createMockAccess({ Name: 'John Doe' });	CODE
LOW	…essManagement/AccessDatatable/AccessDatatable.test.tsx	71	expect(screen.getByText('John Doe')).toBeVisible();	CODE
LOW	…ts/form-components/FormSection/FormSection.stories.tsx	21	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Etiam egestas turpis magna,	CODE
LOW	…ts/form-components/FormSection/FormSection.stories.tsx	21	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Etiam egestas turpis magna,	CODE
LOW	app/react/components/datatables/TableHeaderRow.test.tsx	341	{ id: '1', name: 'John Doe', age: 30, status: 'active' },	CODE
LOW	app/react/components/datatables/Datatable.test.tsx	21	{ id: '1', name: 'John Doe', age: 30 },	CODE
LOW	app/react/components/datatables/Datatable.test.tsx	69	expect(screen.getByText('John Doe')).toBeInTheDocument();	CODE
LOW	api/kubernetes/cli/client_test.go	50	token: fake-token	CODE
LOW	api/git/git_integration_test.go	371	_, err = service.ListRefs(t.Context(), repositoryUrl, username, "fake-token", false, false)	CODE
LOW	api/git/git_integration_test.go	420	_, err = service.ListRefs(t.Context(), repositoryUrl, username, "fake-token", false, false)	CODE
LOW	api/git/git_integration_test.go	424	_, err = service.ListRefs(t.Context(), repositoryUrl, username, "fake-token", true, false)	CODE
LOW	api/git/git_integration_test.go	459	"fake-token",	CODE
LOW	api/git/git_test.go	252	sig := object.Signature{Name: "Test", Email: "test@test.com", When: time.Now()}	CODE

Decorative Section Separators4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ents/form-components/FilePicker/FilePicker.stories.tsx	42	// ─── Demo data ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ents/form-components/FilePicker/FilePicker.stories.tsx	140	// ─── Skeleton ─────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ents/form-components/FilePicker/FilePicker.stories.tsx	186	// ─── Default ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…ents/form-components/FilePicker/FilePicker.stories.tsx	228	// ─── Huge repo (BE-13263) ──────────────────────────────────────────────────────	COMMENT

Hallucination Indicators1 hit · 10 pts

Severity	File	Line	Snippet	Context
CRITICAL	…ngs/authentication/settingsAuthenticationController.js	201	const hasInvalidMapping = $scope.settings.OAuthSettings.TeamMemberships.OAuthClaimMappings.some((m) => !(m.ClaimVa	CODE

AI Slop Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	api/internal/registryutils/access/access.go	41	// validate access for kubernetes namespaces (leverage registry.RegistryAccesses[endpointId].Namespaces)	COMMENT
MEDIUM	api/internal/registryutils/access/access.go	70	// leverage registry.RegistryAccesses[endpointId].UserAccessPolicies (direct access)	COMMENT

Docstring Block Structure1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	api/docs/swagger.yaml	3998	- ' ''values/secrets.yaml'']' items: type: string type: array ValuesInline:	STRING

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	app/kubernetes/helpers/application/index.js	506	// to identify the helm managed applications, we need to check if the applications pod labels include	COMMENT
LOW	api/pendingactions/pendingactions.go	83	// For Kubernetes endpoints, we need to check if the endpoint is up by	COMMENT

TODO Padding2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	api/uac/custom_template.go	3	// TODO: implement UAC rules for Custom templates	COMMENT
LOW	api/uac/containergroup.go	3	// TODO: implement UAC rules for Container groups	COMMENT

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…react/components/SortableList/SortableList.stories.tsx	132	function getData(): Produce[] {	CODE
LOW	.storybook/public/mockServiceWorker.js	121	async function handleRequest(event, requestId, requestInterceptedAt) {	CODE

portainer/portainer

Open-Source Code Quality, Security and Technical Debt Review