1.4

Adjusted Signal

1.4

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

6.1K

Stars

JavaScript

Language

658.7K

Lines of Code

3.8K

Files

733

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 614 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.4/100 · LOW

Are imports declared and package/API names verified? 95 finding(s).

Agent Over-Engineering Ratio 3.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 414 finding(s).

PR Review Velocity Impact 6.8/100 · LOW

Which changes need focused human review? 733 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 7HIGH 8MEDIUM 42LOW 676

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 733 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers390 hits · 394 pts

Severity	File	Line	Snippet	Context
LOW	tools/subcommand-history.ts	86	async function findDirectoryIntroduction(	CODE
LOW	tools/subcommand-history.ts	165	function extractCliffyCommandNames(content: string): string[] {	CODE
LOW	tools/subcommand-history.ts	461	async function scanRemovedPublishProviders(	CODE
LOW	tests/verify-pdf-text-position.ts	236	function evaluateDirectionalRelation(	CODE
LOW	tests/verify-pdf-text-position.ts	310	function evaluateAlignmentRelation(	CODE
LOW	tests/smoke/smoke-all.test.ts	168	function registerPostRenderCleanupFile(file: string, input: string): void {	CODE
LOW	tests/smoke/verify/pdf-text-position.test.ts	356	async function runDistanceConstraintTests() {	CODE
LOW	tests/smoke/verify/pdf-text-position.test.ts	430	async function runDistanceConstraintErrorTests() {	CODE
LOW	tests/smoke/project/project-unreadable-dir.test.ts	37	function registerUnreadableDirTest(	CODE
LOW	tests/unit/chrome-launch.test.ts	24	async function writeSilentChromeExecutable(	CODE
LOW	tests/unit/chrome-launch.test.ts	206	async function writeJsonListChromeExecutable(	CODE
LOW	tests/unit/chrome-launch-flags.test.ts	18	async function writeFakeChromeExecutable(	CODE
LOW	tests/unit/book-title-block-attr.test.ts	20	async function templateAttrAfterPandocRoundTrip(	CODE
LOW	tests/unit/extension-dirs.test.ts	33	async function inputExtensionDirsInWorker(	CODE
LOW	tests/unit/tools/chrome-headless-shell.test.ts	152	function writeLegacyPlaywrightFixture(dir: string): string {	CODE
LOW	tests/unit/schema-validation/utils.ts	41	export function readSelfValidatingSchemaTestFile(file: string): {	CODE
LOW	tests/unit/schema-validation/utils.ts	129	export async function assertYamlValidationFails(	CODE
LOW	tests/integration/playwright/tests/revealjs.spec.ts	46	async function clickScrollViewMenuButton(page: Page) {	CODE
LOW	…s/integration/playwright/tests/revealjs-themes.spec.ts	8	async function getRevealCodeBlockFontSize(page: any): Promise<number> {	CODE
LOW	…s/integration/playwright/tests/revealjs-themes.spec.ts	12	async function getRevealCodeInlineFontSize(page: any): Promise<number> {	CODE
LOW	…ts/integration/playwright/tests/revealjs-brand.spec.ts	10	async function checkBrandedBackgroundColor(page: any) {	CODE
LOW	…ration/playwright/tests/revealjs-announcements.spec.ts	6	async function installAnnouncementObserver(page: Page) {	CODE
LOW	tests/integration/playwright/src/utils.ts	249	export async function checkBackgroundColorProperty(element: Locator, color: RGBColor) {	CODE
LOW	…ipt/qmd-single/_freeze/site_libs/quarto-html/quarto.js	228	async function findAndActivateCategories() {	CODE
LOW	…ipt/qmd-single/_freeze/site_libs/quarto-html/quarto.js	841	function findSelectorsToSyncByLanguage() {	CODE
LOW	…pt/qmd-single/_freeze/index/libs/quarto-html/quarto.js	228	async function findAndActivateCategories() {	CODE
LOW	…pt/qmd-single/_freeze/index/libs/quarto-html/quarto.js	841	function findSelectorsToSyncByLanguage() {	CODE
LOW	…cript/qmd-full/_freeze/site_libs/quarto-html/quarto.js	228	async function findAndActivateCategories() {	CODE
LOW	…cript/qmd-full/_freeze/site_libs/quarto-html/quarto.js	841	function findSelectorsToSyncByLanguage() {	CODE
LOW	tests/unit-lua/luaunit.lua	718	local function mismatchFormattingMapping(table_a, table_b, doDeepAnalysis)	CODE
LOW	tests/unit-lua/luaunit.lua	836	local function mismatchFormattingPureList(table_a, table_b, margin)	CODE
LOW	tests/unit-lua/luaunit.lua	3193	local function getKeyInListWithGlobalFallback(key, listOfNameAndInst)	CODE
LOW	…aude/skills/verify-l10n-pr/scripts/structural_check.py	57	def check_whitespace_and_empty(base, target):	CODE
LOW	…aude/skills/verify-l10n-pr/scripts/structural_check.py	76	def check_raw_line_trailing_whitespace(path):	CODE
LOW	…aude/skills/verify-l10n-pr/scripts/structural_check.py	106	def check_navigation_landmark_rule(target):	CODE
LOW	dev-docs/feature-format-matrix/create_table.py	70	def extract_metadata_from_file(file):	CODE
LOW	dev-docs/feature-format-matrix/create_table.py	151	def render_features_formats_data(trie=None):	CODE
LOW	…/runtime-migration/19-ral-platform-main-permissions.md	624	function platformHasNonAsciiCharacters(): boolean {	CODE
LOW	dev-docs/runtime-migration/26-node-build-job.md	65	export function dependenciesFromImportMap(map): Record<string, string>;	CODE
LOW	dev-docs/runtime-migration/26-node-build-job.md	356	export function dependenciesFromImportMap(map) {	CODE
LOW	llm-docs/synthetic-project-context.md	94	function validateDocumentRenderFlags(flags?: RenderFlags) {	CODE
LOW	…sg017-unofficial-observablehq-compiler/src/compiler.js	197	function defaultResolveFileAttachments(name) {	CODE
LOW	…17-unofficial-observablehq-compiler/src/interpreter.js	9	function createRegularCellDefinition(cell) {	CODE
LOW	…17-unofficial-observablehq-compiler/src/interpreter.js	41	function defaultResolveFileAttachments(name) {	CODE
LOW	packages/ojs/quarto-ojs-runtime/src/ojs-connector.js	314	function createOjsModuleFromHTMLSrc(text) {	CODE
LOW	packages/ojs/quarto-ojs-runtime/src/quarto-ojs.js	903	function fileAttachmentPathResolver(n) {	CODE
LOW	packages/ojs/quarto-ojs-runtime/src/escodegen.js	481	function escapeDisallowedCharacter(code) {	CODE
LOW	package/src/common/update-html-dependencies.ts	1134	async function updateGithubSourceCodeDependency(	CODE
LOW	package/src/common/compile-quarto-latexmk.ts	15	export function compileQuartoLatexmkCommand() {	CODE
LOW	package/src/common/archive-binary-dependencies.ts	36	export async function archiveBinaryDependencies(_config: Configuration) {	CODE
LOW	…src/common/import-report/report-bundle-async-cycles.ts	192	function buildAsyncPropagationGraphFromAST(	CODE
LOW	…src/common/import-report/report-bundle-async-cycles.ts	734	function formatMFASRecommendations(edges: Edge[]): string {	CODE
LOW	…src/common/import-report/report-bundle-async-cycles.ts	757	function formatChainRecommendations(	CODE
LOW	src/tools/github.ts	167	export function defaultAnnotationCounterPath(): string \| undefined {	CODE
LOW	src/tools/github.ts	348	export function appendStepSummaryFirstFit(	CODE
LOW	src/tools/impl/chrome-for-testing.ts	146	export async function fetchPlaywrightBrowsersJson(): Promise<PlaywrightBrowserEntry> {	CODE
LOW⚡	src/tools/impl/chrome-headless-shell-paths.ts	35	function hostMayHaveLegacyPlaywrightLayout(): boolean {	CODE
LOW⚡	src/tools/impl/chrome-headless-shell-paths.ts	44	export function chromeHeadlessShellInstallDir(): string {	CODE
LOW⚡	src/tools/impl/chrome-headless-shell-paths.ts	54	export function chromeHeadlessShellBinaryName(): string {	CODE
LOW	src/tools/impl/chrome-headless-shell-paths.ts	66	export function findChromeHeadlessShellExecutable(	CODE
330 more matches not shown…

Over-Commented Block135 hits · 127 pts

Severity	File	Line	Snippet	Context
LOW	tools/copy-typst-partials.ts	21	const showPreamble = `	COMMENT
LOW	tools/deno-esbuild-bundle.ts	1	import * as esbuild from "npm:esbuild@0.27.1";	COMMENT
LOW	tools/deno-esbuild-bundle.ts	21	// console.log("HERE!!?!?!");	COMMENT
LOW	tools/sass-variable-explainer/declaration-types.ts	181	if (node?.value?.type === "value") {	COMMENT
LOW	tools/sass-variable-explainer/declaration-types.ts	201	// console.log("variable: ", name, node);	COMMENT
LOW	tools/sass-variable-explainer/value-types.ts	101	// return node;	COMMENT
LOW	tools/sass-variable-explainer/value-types.ts	121	// newValues.push({	COMMENT
LOW	tests/verify.ts	1141	!regex.test(content),	COMMENT
LOW	tests/verify.ts	1161	// await Deno.rename(file, zipFile);	COMMENT
LOW	tests/run-fast-tests.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tests/test.ts	121	teardown?: () => Promise<void>;	COMMENT
LOW	tests/run-tests-multiple-file-args.test.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tests/run-tests-agent-flag.test.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tests/run-tests-agent-flag.test.sh	141	[ "$reporter_index" -lt "$dashdash_index" ] \|\| fail "smoke-all routing: --reporter=dot landed after '--' separator (argv	COMMENT
LOW	tests/run-tests-agent-flag.test.sh	241		COMMENT
LOW	tests/run-tests-recursive-glob.test.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tests/git-bisect-test.sh	1	#!/usr/bin/env bash	COMMENT
LOW	tests/smoke/smoke-all.test.ts	161	// Functions to cleanup leftover testing.	COMMENT
LOW	tests/smoke/smoke-all.test.ts	381	// Ideally we'd just walk the one single glob here,	COMMENT
LOW	tests/smoke/render/render-format-extension.test.ts	61	"elsevier-html",	COMMENT
LOW	tests/smoke/schema/load-yaml-schema-schema.test.ts	1	/*	COMMENT
LOW	tests/unit/preview-subdir-knitr-cwd.test.ts	181	// dir may still be the cwd and resist removal — acceptable, matching the	COMMENT
LOW	tests/unit/mapped-strings/mapped-text.test.ts	161	\`\`\`	COMMENT
LOW	tests/unit/render/cleanup.test.ts	21	render: {},	COMMENT
LOW	tests/unit/schema-validation/format-execute.test.ts	21	// title: A bad quarto document	COMMENT
LOW	tests/integration/playwright/playwright.config.ts	61	{	COMMENT
LOW	tests/integration/playwright/playwright.config.ts	81	// name: 'Microsoft Edge',	COMMENT
LOW	…egration/playwright/tests/html-focus-indicator.spec.ts	1	import { expect, Locator, test } from "@playwright/test";	COMMENT
LOW	tests/docs/knitr-spin.R	1	#' ---	COMMENT
LOW	tests/docs/knitr-spin.R	21	# fmt: skip	COMMENT
LOW	tests/docs/unpaired-py.py	1	# ---	COMMENT
LOW	tests/docs/test-jupyter.py	1	# ---	COMMENT
LOW	tests/docs/percent-format/test-markdown-not-first.py	1	# ---	COMMENT
LOW	…qmd-single/_freeze/site_libs/quarto-html/anchor.min.js	1	// @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&dn=expat.txt Expat	COMMENT
LOW	…md-single/_freeze/index/libs/quarto-html/anchor.min.js	1	// @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&dn=expat.txt Expat	COMMENT
LOW	…t/qmd-full/_freeze/site_libs/quarto-html/anchor.min.js	1	// @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&dn=expat.txt Expat	COMMENT
LOW	tests/docs/axe-scan/sites/brand-light-only/_brand.yml	1	# A brand with light values only — no `color.dark`, no dark palette. This is	COMMENT
LOW	…e-all/dark-mode/comment-only-dark-brand-with-theme.yml	1	# A dark brand file that only holds comments, e.g. a commented-out template.	COMMENT
LOW	…s/docs/smoke-all/dark-mode/comment-only-dark-brand.yml	1	# A dark brand file that only holds comments, e.g. a commented-out template.	COMMENT
LOW	…s/smoke-all/dark-mode/comment-only-dark-only-brand.yml	1	# A dark brand file that only holds comments, e.g. a commented-out template.	COMMENT
LOW	…/color-scheme-toggle-ignored-dark-brand/dark-brand.yml	1	# color:	COMMENT
LOW	tests/docs/smoke-all/2026/10/13/issue-14891/_brand.yml	1	# A brand file that only holds comments, e.g. a commented-out template.	COMMENT
LOW	dev-docs/runtime-migration/32-node-ci-required.md	201		COMMENT
LOW	dev-docs/runtime-migration/32-node-ci-required.md	301	console.log(`${f}: passed ${n("passed")}, failed ${n("failed")}, skipped ${n("skipped")}, prereq ${n("prereq")}${noF	COMMENT
LOW	dev-docs/runtime-migration/33-build-tooling-node.md	121	* @param {{ entry: string, outfile: string, sourcemap?: boolean, banner?: string[], define?: Record<string, string>, wr	COMMENT
LOW	dev-docs/runtime-migration/33-build-tooling-node.md	861	}	COMMENT
LOW	dev-docs/runtime-migration/31-test-harness-on-node.md	501	- [ ] Step 2: Implement the hook	COMMENT
LOW	dev-docs/runtime-migration/35-user-scripts-compat.md	421	// bundle. No global is installed and no notice is printed: the user did not	COMMENT
LOW	dev-docs/runtime-migration/35-user-scripts-compat.md	801		COMMENT
LOW	…-docs/runtime-migration/28-ral-process-on-node-apis.md	521	}	COMMENT
LOW	dev-docs/runtime-migration/27-ral-fs-on-node-apis.md	981	// One descriptor owner (review R06, triage A8). The object owns #fd until it	COMMENT
LOW	dev-docs/runtime-migration/30-ral-kv-on-node.md	581	rmSync(tmp, { force: true });	COMMENT
LOW	dev-docs/runtime-migration/22-std-import-seams.md	101	- [ ] Step 1: Write it	COMMENT
LOW	dev-docs/runtime-migration/05-deps-deno-dom-jsr.md	481	#!/usr/bin/env bash	COMMENT
LOW	dev-docs/runtime-migration/20-remove-deno-dom-ffi.md	101	- Create: `tools/parsehtml-gate.sh`	COMMENT
LOW	packages/ojs/external-observablehq-stdlib/src/duckdb.js	1	import {isArqueroTable} from "./arquero.js";	COMMENT
LOW	packages/ojs/external-observablehq-stdlib/src/duckdb.js	21	// may be used to endorse or promote products derived from this software	COMMENT
LOW	packages/ojs/quarto-ojs-runtime/src/ojs-connector.js	361	constructor({ paths, inspectorClass, library, allowPendingGlobals = false }) {	COMMENT
LOW	packages/ojs/quarto-ojs-runtime/src/ojs-connector.js	401	// Customizes the Runtime's behavior when an undefined variable is accessed.	COMMENT
LOW	.github/workflows/runtime-boundary.yml	1	# Runtime boundary ratchet for the Deno -> Node migration.	COMMENT
75 more matches not shown…

Fake / Example Data74 hits · 87 pts

Severity	File	Line	Snippet	Context
LOW	tests/smoke/render/render-email.test.ts	328	"recipients": ["admin@example.com", "superuser@example.com"],	CODE
LOW	tests/smoke/render/render-email.test.ts	375	"recipients": ["admin@example.com", "superuser@example.com"],	CODE
LOW	tests/unit/confluence/confluence.test.ts	199	name: "fake-name",	CODE
LOW	tests/unit/confluence/confluence.test.ts	201	token: "fake-token",	CODE
LOW	tests/unit/confluence/confluence.test.ts	212	name: "fake-name",	CODE
LOW	tests/unit/confluence/confluence.test.ts	214	token: "fake-token",	CODE
LOW	tests/unit/confluence/confluence.test.ts	479	token: "fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	485	token: "fake-token-b",	CODE
LOW	tests/unit/confluence/confluence.test.ts	497	token: "fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	503	token: "fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	515	token: "fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	521	token: "fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	533	token: "fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	539	token: "fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	551	token: "differet-fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	557	token: "fake-token-a",	CODE
LOW	tests/unit/confluence/confluence.test.ts	757	key: "fake-key",	CODE
LOW	tests/unit/confluence/confluence.test.ts	768	["fake-key"]: "fake-value",	CODE
LOW	tests/unit/confluence/confluence.test.ts	787	key: "fake-key",	CODE
LOW	tests/unit/confluence/confluence.test.ts	801	["fake-key"]: "fake-value",	CODE
LOW	tests/unit/confluence/confluence.test.ts	827	key: "fake-key",	CODE
LOW	tests/unit/confluence/confluence.test.ts	847	["fake-key"]: "fake-value",	CODE
LOW	tests/unit/confluence/confluence.test.ts	881	key: "fake-key",	CODE
LOW	tests/unit/confluence/confluence.test.ts	891	["fake-key"]: "fake-value",	CODE
LOW	tests/unit/confluence/confluence.test.ts	4856	"<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam dapibus mattis malesuada. Sed fringilla posuer	CODE
LOW	tests/unit/confluence/confluence.test.ts	4856	"<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam dapibus mattis malesuada. Sed fringilla posuer	CODE
LOW	tests/unit/confluence/confluence.test.ts	4870	"<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam dapibus mattis malesuada. Sed fringilla posuer	CODE
LOW	tests/unit/confluence/confluence.test.ts	4870	"<p>Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam dapibus mattis malesuada. Sed fringilla posuer	CODE
LOW⚡	…/2023/04/24/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…/2023/04/24/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…/2023/04/24/_extensions/dragonstyle/lipsum/lipsum.json	8	"Nullam dapibus cursus dolor sit amet consequat. Nulla facilisi. Curabitur vel nulla non magna lacinia tincidunt. Duis	CODE
LOW⚡	…/2023/04/24/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…/2023/04/24/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…ll/lightbox/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…ll/lightbox/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…ll/lightbox/_extensions/dragonstyle/lipsum/lipsum.json	8	"Nullam dapibus cursus dolor sit amet consequat. Nulla facilisi. Curabitur vel nulla non magna lacinia tincidunt. Duis	CODE
LOW⚡	…ll/lightbox/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…ll/lightbox/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…l/dashboard/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…l/dashboard/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…l/dashboard/_extensions/dragonstyle/lipsum/lipsum.json	8	"Nullam dapibus cursus dolor sit amet consequat. Nulla facilisi. Curabitur vel nulla non magna lacinia tincidunt. Duis	CODE
LOW⚡	…l/dashboard/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…l/dashboard/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…yout/tables/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…yout/tables/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…yout/tables/_extensions/dragonstyle/lipsum/lipsum.json	8	"Nullam dapibus cursus dolor sit amet consequat. Nulla facilisi. Curabitur vel nulla non magna lacinia tincidunt. Duis	CODE
LOW⚡	…yout/tables/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…yout/tables/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…format/html/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…format/html/_extensions/dragonstyle/lipsum/lipsum.json	2	"Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis sagittis posuere ligula sit amet lacinia. Duis dignissi	CODE
LOW⚡	…format/html/_extensions/dragonstyle/lipsum/lipsum.json	8	"Nullam dapibus cursus dolor sit amet consequat. Nulla facilisi. Curabitur vel nulla non magna lacinia tincidunt. Duis	CODE
LOW⚡	…format/html/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW⚡	…format/html/_extensions/dragonstyle/lipsum/lipsum.json	11	"Maecenas turpis velit, ultricies non elementum vel, luctus nec nunc. Nulla a diam interdum, faucibus sapien viverra,	CODE
LOW	tests/docs/smoke-all/jupyter/title/proj/_quarto.yml	7	author: "John Doe"	CODE
LOW	tests/docs/books/simple/_quarto.yml	6	author: "Jane Doe"	CODE
LOW	tests/docs/bug-repros/issue-1340/_quarto.yml	6	author: "Jane Doe"	CODE
LOW⚡	…mats/revealjs/reveal/plugin/highlight/highlight.esm.js	1	function e(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function t(e){return	CODE
LOW⚡	…/formats/revealjs/reveal/plugin/highlight/highlight.js	1	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define	CODE
LOW	src/resources/formats/html/axe/axe.min.js	12	!function i(window){var q=window,document=window.document;function te(e){return(te="function"==typeof Symbol&&"symbol"==	CODE
LOW	src/resources/formats/dashboard/js/dt/datatables.min.js	30	!function(n){"use strict";var a;"function"==typeof define&&define.amd?define(["jquery"],function(e){return n(e,window,do	CODE
14 more matches not shown…

Hallucination Indicators7 hits · 75 pts

Severity	File	Line	Snippet	Context
CRITICAL	src/resources/formats/revealjs/tone/tone.js	7	*/n.prototype.toString=function(){for(var t in n){var e=t[0].match(/^[A-Z]$/),i=n[t]===this.constructor;if(n.isFunction	COMMENT
CRITICAL	…ormats/revealjs/reveal/plugin/markdown/markdown.esm.js	1	function e(){return{async:!1,baseUrl:null,breaks:!1,extensions:null,gfm:!0,headerIds:!0,headerPrefix:"",highlight:null,h	CODE
CRITICAL	…es/formats/revealjs/reveal/plugin/markdown/markdown.js	1	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define	CODE
CRITICAL	…esources/formats/revealjs/reveal/plugin/notes/notes.js	1	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define	CODE
CRITICAL	…rces/formats/revealjs/reveal/plugin/notes/notes.esm.js	1	function t(){return{async:!1,baseUrl:null,breaks:!1,extensions:null,gfm:!0,headerIds:!0,headerPrefix:"",highlight:null,h	CODE
CRITICAL	…/resources/projects/website/search/autocomplete.min.js	2	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?def	CODE
CRITICAL	…/resources/projects/website/search/autocomplete.umd.js	2	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?def	CODE

AI Slop Vocabulary22 hits · 62 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/run-tests.sh	75	# The harness still uses the dev runtime configured above.	COMMENT
LOW	tests/docs/manuscript/qmd-single/renv/activate.R	732	# if RENV_PROFILE is already set, just use that	COMMENT
LOW	tests/docs/manuscript/qmd-full/renv/activate.R	732	# if RENV_PROFILE is already set, just use that	COMMENT
LOW	tests/renv/activate.R	1096	# if RENV_PROFILE is already set, just use that	COMMENT
MEDIUM	…kages/ojs/quarto-ojs-runtime/src/ojs-code-transform.js	133	// this will need to be more robust in the future.	COMMENT
MEDIUM	.github/workflows/test-smokes-built.yml	193	# Older tags do not contain the binary-mode test harness.	COMMENT
MEDIUM	.github/workflows/test-smokes.yml	391	# The harness needs the dev runtime even when testing another binary.	COMMENT
MEDIUM	.github/workflows/test-smokes.yml	487	# Older tags do not contain the binary-mode harness.	COMMENT
MEDIUM	.github/workflows/test-smokes.yml	587	# Prevent the harness from duplicating this loop's workflow commands.	COMMENT
MEDIUM	.github/workflows/test-smokes.yml	638	# Prevent the harness from duplicating this loop's workflow commands.	COMMENT
MEDIUM	src/core/lib/yaml-intelligence/annotated-yaml.ts	527	// happens because tree-sitter's robust parsing sometimes returns	COMMENT
MEDIUM⚡	…mats/revealjs/reveal/plugin/highlight/highlight.esm.js	1	function e(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function t(e){return	CODE
MEDIUM⚡	…mats/revealjs/reveal/plugin/highlight/highlight.esm.js	1	function e(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function t(e){return	CODE
MEDIUM⚡	…mats/revealjs/reveal/plugin/highlight/highlight.esm.js	1	function e(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function t(e){return	CODE
MEDIUM⚡	…/formats/revealjs/reveal/plugin/highlight/highlight.js	1	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define	CODE
MEDIUM⚡	…/formats/revealjs/reveal/plugin/highlight/highlight.js	1	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define	CODE
MEDIUM⚡	…/formats/revealjs/reveal/plugin/highlight/highlight.js	1	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define	CODE
MEDIUM	src/resources/formats/html/ojs/quarto-ojs-runtime.js	23077	// this will need to be more robust in the future.	COMMENT
MEDIUM	…es/extension-subtrees/julia-engine/src/julia-engine.ts	392	// So we utilize powershell instead which can start completely detached processes with	COMMENT
MEDIUM	src/resources/rmd/patch.R	61	# into knitr parse_block -- if it's not then we can pursue more robust versions	COMMENT
MEDIUM	src/project/serve/render.ts	114	// robust file modification time in that case. non-html	COMMENT
MEDIUM	src/command/render/pandoc.ts	805	// The format is providing a more robust local template	COMMENT

Verbosity Indicators22 hits · 35 pts

Severity	File	Line	Snippet	Context
LOW	tests/unit/tools/chrome-for-testing.test.ts	25	// Step 1: detectChromePlatform()	COMMENT
LOW	tests/unit/tools/chrome-for-testing.test.ts	47	// Step 2: fetchLatestCftRelease()	COMMENT
LOW	tests/unit/tools/chrome-for-testing.test.ts	80	// Step 3: findChromeExecutable()	COMMENT
LOW	tests/unit/tools/chrome-for-testing.test.ts	169	// Step 4: downloadAndExtractChrome() — integration test, downloads ~50MB	COMMENT
LOW	src/core/windows.ts	128	// On Windows, we need to check if arguments may need quoting to avoid issue with Deno.Run()	COMMENT
LOW	src/core/lib/yaml-intelligence/yaml-intelligence.ts	609	// then we need to check if the array item schema itself is valid	COMMENT
LOW	src/core/lib/external/tree-sitter-deno.js	22	// We need to check if Module already exists (e.g. case 3 above).	COMMENT
LOW	src/resources/editor/tools/yaml/tree-sitter.js	9	// We need to check if Module already exists (e.g. case 3 above).	COMMENT
LOW	src/project/project-index.ts	173	// so we need to check if the formats have changed	COMMENT
LOW⚡	src/publish/posit-connect-cloud/posit-connect-cloud.ts	113	// Step 1: Initiate device authorization	COMMENT
LOW⚡	src/publish/posit-connect-cloud/posit-connect-cloud.ts	116	// Step 2: Display user code and open browser	COMMENT
LOW⚡	src/publish/posit-connect-cloud/posit-connect-cloud.ts	139	// Step 3: Poll for token	COMMENT
LOW⚡	src/publish/posit-connect-cloud/posit-connect-cloud.ts	147	// Step 4: Verify token and get user info (non-fatal if signup incomplete)	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	164	// Step 5: Get accounts with publishing permissions	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	182	// Step 6: Handle account selection	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	259	// Step 7: Store token	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	393	// Step 1: Prepare - create or update content	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	473	// Step 2: Render and stage	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	486	// Step 3: Bundle and upload	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	504	// Step 4: Publish and poll	COMMENT
LOW	src/format/html/format-html-title.ts	219	// If the parent element is a section, then we need to check if there's	COMMENT
LOW	src/format/html/format-html-title.ts	228	// If the parent element is not a section, then we need to check if there's	COMMENT

Modern AI Meta-Vocabulary12 hits · 33 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ration/playwright/tests/html-code-tools-toggle.spec.ts	5	// block is wrapped in div.code-copy-outer-scaffold, which used to break the	COMMENT
MEDIUM	…integration/playwright/tests/revealjs-callouts.spec.ts	5	// block is a code block (wrapped in the code-copy scaffold) or a paragraph.	COMMENT
MEDIUM	…playwright/tests/html-callout-code-copy-button.spec.ts	5	// div.code-copy-outer-scaffold, which holds div.sourceCode and the copy	COMMENT
MEDIUM	.claude/rules/changelog.md	115	Where the scaffold comes from: the `# v{next} backports` heading (with empty `## In this release` / `## In previous	CODE
MEDIUM	dev-docs/checklist-make-a-new-quarto-release.md	11	- [ ] on this new branch, seed the backports scaffold in `news/changelog-1.x.md`: wrap the existing body under a `# v1	CODE
MEDIUM	…ocs/runtime-migration/37-ci-switch-and-deno-removal.md	37	\| `test-node-bundle.yml` (PR 26/32, workflow name `Node Tests`) \| the jobs that run or compare Deno: `deno-sanity`, `den	CODE
MEDIUM	llm-docs/axe-accessibility-architecture.md	19	### Layer 1: Build-time TypeScript (format detection + dependency injection)	COMMENT
MEDIUM	src/resources/formats/revealjs/quarto.scss	972	// (div.sourceCode, or the code-copy scaffold wrapping it).	COMMENT
MEDIUM	…resources/formats/html/bootstrap/_bootstrap-rules.scss	1584	// Code blocks are wrapped in .code-copy-outer-scaffold, which positions the	COMMENT
MEDIUM	…resources/formats/html/bootstrap/_bootstrap-rules.scss	1585	// copy button. At a callout edge, space the scaffold with margin instead of	COMMENT
MEDIUM	src/project/project-create.ts	100	// create scaffold files if we aren't creating a project within the	COMMENT
MEDIUM	src/format/html/format-html.ts	771	// and scrolling overflow behavior requires a scaffold div to be inserted	COMMENT

Structural Annotation Overuse15 hits · 25 pts

Severity	File	Line	Snippet	Context
LOW	tests/unit/tools/chrome-for-testing.test.ts	25	// Step 1: detectChromePlatform()	COMMENT
LOW	tests/unit/tools/chrome-for-testing.test.ts	47	// Step 2: fetchLatestCftRelease()	COMMENT
LOW	tests/unit/tools/chrome-for-testing.test.ts	80	// Step 3: findChromeExecutable()	COMMENT
LOW	tests/unit/tools/chrome-for-testing.test.ts	169	// Step 4: downloadAndExtractChrome() — integration test, downloads ~50MB	COMMENT
LOW⚡	src/publish/posit-connect-cloud/posit-connect-cloud.ts	113	// Step 1: Initiate device authorization	COMMENT
LOW⚡	src/publish/posit-connect-cloud/posit-connect-cloud.ts	116	// Step 2: Display user code and open browser	COMMENT
LOW⚡	src/publish/posit-connect-cloud/posit-connect-cloud.ts	139	// Step 3: Poll for token	COMMENT
LOW⚡	src/publish/posit-connect-cloud/posit-connect-cloud.ts	147	// Step 4: Verify token and get user info (non-fatal if signup incomplete)	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	164	// Step 5: Get accounts with publishing permissions	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	182	// Step 6: Handle account selection	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	259	// Step 7: Store token	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	393	// Step 1: Prepare - create or update content	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	473	// Step 2: Render and stage	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	486	// Step 3: Bundle and upload	COMMENT
LOW	src/publish/posit-connect-cloud/posit-connect-cloud.ts	504	// Step 4: Publish and poll	COMMENT

Cross-Language Confusion (JS/TS)4 hits · 20 pts

Severity	File	Line	Snippet	Context
HIGH	tests/unit/yaml-intelligence/hover-info.test.ts	28	print(time.time())	CODE
HIGH	tests/unit/mapped-strings/mapped-text.test.ts	34	print(time.time())	CODE
HIGH	src/command/use/commands/binder/binder.ts	332	elif [ $QUARTO_VERSION = "release" ]; then	CODE
HIGH	src/command/use/commands/binder/binder.ts	350	print(data['version'])	CODE

Empty Error Handlers4 hits · 20 pts

Severity	File	Line	Snippet	Context
HIGH	src/resources/capabilities/jupyter.py	28	except Exception:	CODE
HIGH	src/resources/jupyter/jupyter_core_utils_vendor.py	80	except RuntimeError:	CODE
HIGH	src/resources/jupyter/jupyter.py	15	except:	CODE
HIGH	src/resources/jupyter/jupyter.py	178	except:	CODE

Excessive Try-Catch Wrapping15 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW	setup.py	46	except Exception as e:	CODE
MEDIUM	setup.py	47	print("Error downloading Quarto:", e)	CODE
LOW	src/resources/capabilities/jupyter.py	28	except Exception:	CODE
LOW	src/resources/jupyter/notebook.py	743	except Exception as e:	CODE
LOW	src/resources/jupyter/jupyter.py	76	except Exception as e:	CODE
LOW	src/resources/jupyter/jupyter.py	189	except Exception as e:	CODE
LOW	src/resources/jupyter/jupyter.py	230	except Exception as e:	CODE
LOW	src/resources/jupyter/jupyter.py	282	except Exception as e:	CODE
MEDIUM	src/resources/jupyter/jupyter.py	32	def handle(self):	CODE
MEDIUM	src/resources/jupyter/jupyter.py	184	def run_server(options):	CODE
LOW	src/resources/jupyter/lang/python/setup.py	34	except Exception:	CODE
LOW	src/resources/jupyter/lang/python/setup.py	46	except Exception:	CODE
LOW	src/resources/jupyter/lang/python/setup.py	66	except Exception:	CODE
LOW	src/resources/jupyter/lang/python/setup.py	154	except Exception:	CODE
LOW	src/resources/jupyter/lang/python/setup.py	162	except Exception:	CODE

Decorative Section Separators5 hits · 10 pts

Severity	File	Line	Snippet	Context
MEDIUM	…t/qmd-full/_freeze/notebook/execute-results/ipynb.json	4	"markdown": "::: {.cell warning.hidden='true' message.hidden='true'}\n\n```{.r .cell-code .hidden}\n#\| message: fals	CODE
MEDIUM	…t/qmd-full/_freeze/notebook/execute-results/ipynb.json	4	"markdown": "::: {.cell warning.hidden='true' message.hidden='true'}\n\n```{.r .cell-code .hidden}\n#\| message: fals	CODE
MEDIUM	…ipt/qmd-full/_freeze/notebook/execute-results/xml.json	4	"markdown": "::: {.cell warning.hidden='true' message.hidden='true'}\n\n```{.r .cell-code .hidden}\nlibrary(tidyvers	CODE
MEDIUM	…pt/qmd-full/_freeze/notebook/execute-results/html.json	4	"markdown": "::: {.cell warning.hidden='true' message.hidden='true'}\n\n```{.r .cell-code .hidden}\n#\| message: fals	CODE
MEDIUM	…pt/qmd-full/_freeze/notebook/execute-results/html.json	4	"markdown": "::: {.cell warning.hidden='true' message.hidden='true'}\n\n```{.r .cell-code .hidden}\n#\| message: fals	CODE

Unused Imports10 hits · 10 pts

Severity	File	Line	Context
LOW	src/resources/jupyter/jupyter_core_utils_vendor.py	5	CODE
LOW	src/resources/jupyter/jupyter_core_utils_vendor.py	5	CODE
LOW	src/resources/jupyter/jupyter_core_utils_vendor.py	5	CODE
LOW	src/resources/jupyter/notebook.py	9	CODE
LOW	src/resources/jupyter/notebook.py	21	CODE
LOW	src/resources/jupyter/jupyter.py	6	CODE
LOW	src/resources/jupyter/jupyter.py	8	CODE
LOW	src/resources/jupyter/jupyter.py	19	CODE
LOW	src/resources/jupyter/jupyter.py	21	CODE
LOW	src/resources/jupyter/jupyter.py	26	CODE

Self-Referential Comments3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	tests/Manifest.toml	1	# This file is machine-generated - editing it directly is not advised	COMMENT
MEDIUM	tests/docs/percent-format/false-positive-raw.py	1	# This file contains the text "raw]" but is NOT a percent script	COMMENT
MEDIUM	src/resources/jupyter/notebook.py	543	# This function is only called on setup cells	COMMENT

Deep Nesting6 hits · 6 pts

Severity	File	Line	Context
LOW	setup.py	20	CODE
LOW	src/resources/jupyter/notebook.py	188	CODE
LOW	src/resources/jupyter/notebook.py	515	CODE
LOW	src/resources/jupyter/notebook.py	550	CODE
LOW	src/resources/jupyter/notebook.py	636	CODE
LOW	src/resources/jupyter/notebook.py	832	CODE

Redundant / Tautological Comments4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	tests/run-tests.sh	12	# Check if verbose mode is enabled (GitHub Actions debug mode or explicit flag)	COMMENT
LOW	tests/run-tests.sh	18	# Check if keep-outputs mode or agent mode is enabled	COMMENT
LOW	tests/run-tests.sh	58	# Set DENO_DIR to cache location (respects QUARTO_DENO_DIR override)	COMMENT
LOW	.github/workflows/publish-cloudsmith.yml	62	# Check if release exists and get prerelease status	COMMENT

Overly Generic Function Names4 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	src/core/timing.ts	79	export function getData() {	CODE
LOW	…esources/formats/revealjs/plugins/chalkboard/plugin.js	642	function getData() {	CODE
LOW	src/resources/formats/pdf/pdfjs/web/viewer.js	19045	getData: function getData() {	CODE
LOW	src/resources/jupyter/jupyter.py	140	def handle_request(self):	CODE

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	src/execute/rmd.ts	646	// TODO: implement a caching system because spin is slow and it seems we call this twice for each run	COMMENT

quarto-dev/quarto-cli

Open-Source Code Quality, Security and Technical Debt Review