2.2

Adjusted Signal

2.2

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

6.2K

Stars

Mustache

Language

236.2K

Lines of Code

1.1K

Files

488

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 9.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 478 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 1.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 18 finding(s).

PR Review Velocity Impact 12.0/100 · LOW

Which changes need focused human review? 488 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 10MEDIUM 33LOW 445

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 488 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block418 hits · 330 pts

Severity	File	Line	Snippet	Context
LOW	charts/kube-state-metrics/values.yaml	21	# or	COMMENT
LOW	charts/kube-state-metrics/values.yaml	41	enabled: false	COMMENT
LOW	charts/kube-state-metrics/values.yaml	101	create: true	COMMENT
LOW	charts/kube-state-metrics/values.yaml	121		COMMENT
LOW	charts/kube-state-metrics/values.yaml	181		COMMENT
LOW	charts/kube-state-metrics/values.yaml	201	serviceAccount:	COMMENT
LOW	charts/kube-state-metrics/values.yaml	361	readOnlyRootFilesystem: true	COMMENT
LOW	charts/kube-state-metrics/values.yaml	401	podLabels: {}	COMMENT
LOW	charts/kube-state-metrics/values.yaml	421	metricOptInList: []	COMMENT
LOW	charts/kube-state-metrics/values.yaml	481	# - validatingadmissionpolicybindings	COMMENT
LOW	charts/kube-state-metrics/values.yaml	541	# We usually recommend not to specify default resources and to leave this as a conscious	COMMENT
LOW	charts/kube-state-metrics/values.yaml	561	# Enable vertical pod autoscaler support for kube-state-metrics	COMMENT
LOW	charts/kube-state-metrics/values.yaml	581	minAllowed: {}	COMMENT
LOW	charts/kube-state-metrics/values.yaml	601	# - configMap:	COMMENT
LOW	charts/kube-state-metrics/values.yaml	621	initContainers: []	COMMENT
LOW	charts/alertmanager-snmp-notifier/values.yaml	21		COMMENT
LOW	charts/alertmanager-snmp-notifier/values.yaml	41	trapTemplates: {}	COMMENT
LOW	charts/alertmanager-snmp-notifier/values.yaml	61	# template: \|	COMMENT
LOW	charts/alertmanager-snmp-notifier/values.yaml	161		COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	21		COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	101		COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	141	# Scheme/protocol to use for scraping.	COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	181		COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	201	# Only valid in Prometheus versions 2.27.0 and newer.	COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	241	##	COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	281	# - ns1.svc.cluster-domain.example	COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	301	## Additional container arguments	COMMENT
LOW	charts/prometheus-windows-exporter/values.yaml	321	# - name: <secretName>	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1	# Default values for kube-prometheus-stack.	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	21	## Provide a name to substitute for the full names of resources	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	61	##	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	81	affinity: {}	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	101	## If specified, the pod's topology spread constraints.	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	321		COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	341	# groups:	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	361	## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	441	##	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	461	# - from:	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	481	# matchLabels:	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	521	##	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	601		COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	621	#	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	661	##	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	721	## Session persistence configuration for the route rule.	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	761		COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	821	## Requires Gateway API CRDs and a controller that support HTTPRoute timeouts.	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	861	nodePort: 30903	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	941	## Additional labels	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	981	## tlsConfig: TLS configuration to use when scraping the endpoint. For example if using istio mTLS.	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1001	# regex: ^(.*)$	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1041	pullPolicy: IfNotPresent	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1061		COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1081	# - example-config	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1101		COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1141	## Storage is the definition of how storage will be used by the Alertmanager instances.	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1181	## Define resources requests and limits for single Pods.	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1201	## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1221	# effect: "NoSchedule"	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1261	## ListenLocal makes the Alertmanager server listen on loopback, so that it does not bind against the Pod IP.	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	1281	# - containerPort: 8082	COMMENT
358 more matches not shown…

Self-Referential Comments28 hits · 84 pts

Severity	File	Line	Snippet	Context
MEDIUM	charts/kube-state-metrics/values.yaml	296	## Create a scrapeConfig resource for scraping the kube-state-metrics service. Use this instead of serviceMonitor	COMMENT
MEDIUM	charts/kube-state-metrics/values.yaml	576	# Define the max allowed resources for the pod	COMMENT
MEDIUM	charts/kube-state-metrics/values.yaml	580	# Define the min allowed resources for the pod	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	536	# Define the max allowed resources for the pod	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	540	# Define the min allowed resources for the pod	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	3591	## Create a servicemonitor for the operator	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	3746	# Define the max allowed resources for the pod	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	3750	# Define the min allowed resources for the pod	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	4182	# Define the max allowed resources for the pod	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	4186	# Define the min allowed resources for the pod	COMMENT
MEDIUM	…s-stack/templates/prometheus-operator/certmanager.yaml	3	# Create a selfsigned Issuer, in order to create a root CA certificate for	COMMENT
MEDIUM	…s-stack/templates/prometheus-operator/certmanager.yaml	30	# Create an Issuer that uses the above generated CA certificate to issue certs	COMMENT
MEDIUM	charts/prometheus-node-exporter/values.yaml	128	## Creating a service is enabled by default	COMMENT
MEDIUM	charts/prometheus-node-exporter/values.yaml	617	# Define the max allowed resources for the pod	COMMENT
MEDIUM	charts/prometheus-node-exporter/values.yaml	621	# Define the min allowed resources for the pod	COMMENT
MEDIUM	…-operator-admission-webhook/templates/certmanager.yaml	3	# Create a selfsigned Issuer in order to create a root CA certificate for	COMMENT
MEDIUM	…-operator-admission-webhook/templates/certmanager.yaml	32	# Create an Issuer that uses the above generated CA certificate to issue certs	COMMENT
MEDIUM	charts/prometheus-adapter/templates/certmanager.yaml	3	# Create a selfsigned Issuer, in order to create a root CA certificate for	COMMENT
MEDIUM	charts/prometheus-adapter/templates/certmanager.yaml	42	# Create an Issuer that uses the above generated CA certificate to issue certs	COMMENT
MEDIUM	charts/prometheus-pingdom-exporter/values.yaml	69	# Define a serviceAccount name	COMMENT
MEDIUM	charts/prometheus-blackbox-exporter/values.yaml	485	# Define the max allowed resources for the pod	COMMENT
MEDIUM	charts/prometheus-blackbox-exporter/values.yaml	489	# Define the min allowed resources for the pod	COMMENT
MEDIUM	charts/prometheus-elasticsearch-exporter/values.yaml	396	# Create a service account	COMMENT
MEDIUM	scripts/generate-labeler.sh	6	# This file is auto-generated by scripts/generate-labeler.sh. Do not edit manually.	COMMENT
MEDIUM	.github/advanced-issue-labeler.yml	1	# This file is auto-generated by scripts/generate-labeler.sh. Do not edit manually.	COMMENT
MEDIUM	.github/workflows/renovate-custom-hooks.yaml	74	# Define the target directory	COMMENT
MEDIUM	.github/workflows/renovate-custom-hooks.yaml	89	# Create a temporary file for JSON output	COMMENT
MEDIUM	.github/workflows/renovate-custom-hooks.yaml	113	# Create a temporary file for the final JSON payload	COMMENT

Cross-File Repetition8 hits · 40 pts

Severity	File	Snippet	Context
HIGH	…theus-stack/charts/crds/crds/crd-prometheusagents.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…rometheus-stack/charts/crds/crds/crd-prometheuses.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…ometheus-stack/charts/crds/crds/crd-alertmanagers.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…rometheus-stack/charts/crds/crds/crd-thanosrulers.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…r-crds/charts/crds/templates/crd-prometheusagents.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…rator-crds/charts/crds/templates/crd-prometheuses.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…ator-crds/charts/crds/templates/crd-alertmanagers.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING
HIGH	…rator-crds/charts/crds/templates/crd-thanosrulers.yaml	type: string resourcefieldref: description: \|- selects a resource of the container: only resources limits and requests (	STRING

Redundant / Tautological Comments13 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	charts/alertmanager-snmp-notifier/values.yaml	212	# Set path to cloudwatch-exporter telemtery-path	COMMENT
LOW	charts/kube-prometheus-stack/values.yaml	4901	## Set shards to null to omit spec.shards from the Prometheus custom resource (the operator then	COMMENT
LOW	charts/prometheus-redis-exporter/values.yaml	147	# Set path to redis-exporter telemtery-path	COMMENT
LOW	charts/prometheus-pgbouncer-exporter/values.yaml	33	# Set path to cloudwatch-exporter telemtery-path	COMMENT
LOW	charts/prometheus-memcached-exporter/values.yaml	86	# Set path to memcached-exporter telemtery-path	COMMENT
LOW	charts/prometheus-nginx-exporter/values.yaml	91	# Set path to nginx-exporter telemtery-path	COMMENT
LOW	charts/prometheus-consul-exporter/values.yaml	68	# Set path to consul-exporter telemtery-path	COMMENT
LOW	…prometheus-yet-another-cloudwatch-exporter/values.yaml	159	# Set path to cloudwatch-exporter telemtery-path	COMMENT
LOW	charts/prometheus-cloudwatch-exporter/values.yaml	164	# Set path to cloudwatch-exporter telemtery-path	COMMENT
LOW	charts/prometheus-postgres-exporter/values.yaml	38	# Set path to cloudwatch-exporter telemtery-path	COMMENT
LOW	charts/prometheus-postgres-exporter/values.yaml	85	# Set path to postgres-exporter telemetry-path	COMMENT
LOW	charts/prometheus-ipmi-exporter/values.yaml	83	# Set path to ipmi-exporter telemtery-path	COMMENT
LOW	charts/prometheus-fastly-exporter/values.yaml	108	# Set path to fastly-exporter telemtery-path	COMMENT

Slop Phrases4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	charts/kube-prometheus-stack/values.yaml	5057	## If additional scrape configurations are already deployed in a single secret file you can use this section.	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	5086	## them separately from the helm deployment, you can use this section.	COMMENT
MEDIUM	charts/kube-prometheus-stack/values.yaml	5108	## them separately from the helm deployment, you can use this section.	COMMENT
MEDIUM	charts/prometheus-cloudwatch-exporter/values.yaml	102	# Configuration is rendered with `tpl` function, therefore you can use any Helm variables and/or templates here	COMMENT

Hyper-Verbose Identifiers9 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	369	def add_rules_conditions_from_condition_map(rules, indent=4):	CODE
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	375	def remove_additional_aggregation_labels_for_alerts(rules, alert_names, indent=4):	CODE
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	391	def add_rules_per_rule_conditions(rules, group, indent=4):	CODE
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	460	def add_custom_annotations_etcd_runbook_urls(rules, group, indent=4):	CODE
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	580	def add_custom_keep_firing_for(rules, indent=4):	CODE
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	714	def write_rules_names_template():	CODE
LOW⚡	…/kube-prometheus-stack/hack/sync_grafana_dashboards.py	272	def patch_json_set_timezone_as_variable(content):	STRING
LOW⚡	…/kube-prometheus-stack/hack/sync_grafana_dashboards.py	277	def patch_json_set_editable_as_variable(content):	STRING
LOW⚡	…/kube-prometheus-stack/hack/sync_grafana_dashboards.py	282	def patch_json_set_interval_as_variable(content):	STRING

Cross-Language Confusion1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	416	# labels: cannot be null, if a rule does not have any labels by default, the labels block	COMMENT

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…/kube-prometheus-stack/hack/sync_grafana_dashboards.py	266	except (ValueError, KeyError):	CODE

Deep Nesting4 hits · 4 pts

Severity	File	Line	Context
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	329	CODE
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	617	CODE
LOW	…ts/kube-prometheus-stack/hack/sync_prometheus_rules.py	726	CODE
LOW	…/kube-prometheus-stack/hack/sync_grafana_dashboards.py	351	CODE

AI Slop Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	charts/kube-state-metrics/values.yaml	115	# Add permissions for CustomResources' apiGroups in Role/ClusterRole. Should be used in conjunction with Custom Resour	COMMENT

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	charts/prometheus-couchdb-exporter/templates/NOTES.txt	28	###### WARNING: The extensions/v1beta1 API versions of Ingress is #####	COMMENT

prometheus-community/helm-charts

Open-Source Code Quality, Security and Technical Debt Review