2.4

Adjusted Signal

2.4

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

3.0K

Stars

Dart

Language

191.9K

Lines of Code

926

Files

341

Pattern Hits

2026-10-31

Scan Date

0.03

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 211 finding(s).

Hallucinated Dependency & Supply Chain Risk 3.0/100 · LOW

Are imports declared and package/API names verified? 104 finding(s).

Agent Over-Engineering Ratio 3.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 26 finding(s).

PR Review Velocity Impact 12.2/100 · LOW

Which changes need focused human review? 341 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 26MEDIUM 13LOW 302

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 341 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block200 hits · 200 pts

Severity	File	Line	Snippet	Context
LOW	third_party/flutter/bin/internal/shared.sh	81	# thus this script's source file) while we are updating Dart and compiling the	COMMENT
LOW	third_party/flutter/bin/internal/shared.sh	101	# confused by them than helped. The "shlock" method doesn't work for network	COMMENT
LOW	third_party/flutter/bin/internal/shared.sh	141	local compilekey="$revision"	COMMENT
LOW	scripts/patch_e2e.dart	1	// cspell:words genkey keyalg keysize storepass keypass dname getprop avds	COMMENT
LOW	scripts/patch_e2e.dart	21	// --cli <version> A released CLI, e.g. 1.4.0. Its tag is cloned once into	COMMENT
LOW	scripts/patch_e2e.dart	41	// signed-in Shorebird account (CI signs in with OIDC). `shorebird init` and	COMMENT
LOW	scripts/boot_recovery_e2e.dart	1	// cspell:words xfail XPASS dynsym logcat pidof oppo	COMMENT
LOW	scripts/boot_recovery_e2e.dart	21	// 5. launches it again: it must run patch 1, the last patch that booted	COMMENT
LOW	scripts/patch_rollback_e2e.dart	1	// cspell:words Xvfb	COMMENT
LOW	scripts/bootstrap.sh	1	#!/bin/bash	COMMENT
LOW	scripts/patch_signing_e2e.dart	1	// cspell:words genrsa pubout Xvfb xfail XPASS logcat libexec LOCALAPPDATA	COMMENT
LOW	scripts/patch_signing_e2e.dart	21	// does Windows, where every app shares one updater state (see WindowsTarget);	COMMENT
LOW	scripts/no_android_sdk_downloads.sh	1	#!/bin/bash -e	COMMENT
LOW	scripts/macos_resign_e2e.sh	1	#!/bin/bash	COMMENT
LOW	scripts/macos_resign_e2e.sh	21	# Each variant runs on every architecture this Mac can run: arm64 and, under	COMMENT
LOW	scripts/macos_resign_e2e.sh	41	# - SHOREBIRD_FLAGS: extra top-level flags for release and patch, e.g.	COMMENT
LOW	packages/verify_cache/lib/src/key_lock.dart	1	import 'dart:io';	COMMENT
LOW	packages/verify_cache/lib/src/run_slot.dart	1	import 'dart:io';	COMMENT
LOW	packages/verify_cache/lib/src/run_slot.dart	61	}	COMMENT
LOW	packages/verify_cache/lib/src/git_tree.dart	21	}	COMMENT
LOW	packages/verify_cache/lib/src/run_cached.dart	41	/// - A working tree is hashed as it is on disk, uncommitted and untracked	COMMENT
LOW	packages/verify_cache/lib/src/run_cached.dart	161	}	COMMENT
LOW	packages/verify_cache/lib/src/dart_package.dart	21	/// which pub resolves to that member whatever version it asks for,	COMMENT
LOW	packages/redis_client/lib/src/redis_client.dart	81	final String? password;	COMMENT
LOW	packages/redis_client/lib/src/redis_client.dart	121		COMMENT
LOW	packages/redis_client/lib/src/redis_client.dart	261	/// https://redis.io/commands/del	COMMENT
LOW	packages/redis_client/lib/src/redis_client.dart	441	/// Only override if the value is lower than the existing value	COMMENT
LOW	packages/redis_client/lib/src/redis_client.dart	461	/// Unix time is the number of milliseconds that have elapsed since 00:00:00 UTC	COMMENT
LOW	packages/redis_client/lib/src/redis_client.dart	481	/// key: 'sensor',	COMMENT
LOW	packages/redis_client/lib/src/redis_client.dart	501	}	COMMENT
LOW	packages/redis_client/lib/src/redis_connection.dart	1	part of 'redis_client.dart';	COMMENT
LOW	…orebird_code_push_client/lib/src/code_push_client.dart	101		COMMENT
LOW	…s/shorebird_build_trace/lib/shorebird_build_trace.dart	1	/// Chrome Trace Event Format producer for Shorebird's build-trace	COMMENT
LOW	…ckages/shorebird_build_trace/lib/src/build_tracer.dart	1	import 'dart:convert';	COMMENT
LOW	…ckages/shorebird_build_trace/lib/src/build_tracer.dart	21	/// * [recordNetworkSpan] → HTTP-request span with the standard args	COMMENT
LOW	…kages/shorebird_build_trace/lib/src/phase_tracker.dart	1	import 'package:shorebird_build_trace/src/build_tracer.dart';	COMMENT
LOW	packages/shorebird_build_trace/lib/src/process_id.dart	1	import 'dart:io' show pid;	COMMENT
LOW	…ckages/shorebird_build_trace/lib/src/trace_schema.dart	1	/// String-level API contract between the trace producers (flutter_tools,	COMMENT
LOW	…ckages/shorebird_build_trace/lib/src/trace_schema.dart	41		COMMENT
LOW	…ckages/shorebird_build_trace/lib/src/trace_schema.dart	141	}	COMMENT
LOW	…ckages/shorebird_build_trace/lib/src/trace_schema.dart	181	}	COMMENT
LOW	packages/shorebird_cli/test/src/helpers.dart	1	import 'dart:convert';	COMMENT
LOW	packages/shorebird_cli/test/src/helpers.dart	21	/// `test/temp_working_directory_test.dart` enforces that.	COMMENT
LOW	…shorebird_cli/lib/src/shorebird_android_artifacts.dart	61	///	COMMENT
LOW	packages/shorebird_cli/lib/src/interactive_mode.dart	1	import 'dart:io' as io;	COMMENT
LOW	packages/shorebird_cli/lib/src/interactive_mode.dart	21	if (isJsonMode) return false;	COMMENT
LOW	packages/shorebird_cli/lib/src/interactive_mode.dart	41	/// {@macro prompt_declined_exit}	COMMENT
LOW	…shorebird_cli/lib/src/flutter_version_constraints.dart	21	/// The minimum allowed Flutter version for macOS releases and patches.	COMMENT
LOW	…shorebird_cli/lib/src/flutter_version_constraints.dart	61	/// Whether patches for [platform] are linked against the release snapshot	COMMENT
LOW	…shorebird_cli/lib/src/flutter_version_constraints.dart	101		COMMENT
LOW	…shorebird_cli/lib/src/flutter_version_constraints.dart	121		COMMENT
LOW	packages/shorebird_cli/lib/src/server_notices.dart	1	import 'package:scoped_deps/scoped_deps.dart';	COMMENT
LOW	packages/shorebird_cli/lib/src/artifact_manager.dart	181	/// Downloads [artifact], or reuses the copy an earlier run downloaded, so	COMMENT
LOW	packages/shorebird_cli/lib/src/artifact_manager.dart	341	/// The AAB is the exact artifact installed on devices, so libraries	COMMENT
LOW	packages/shorebird_cli/lib/src/artifact_manager.dart	441	/// When [aab] is readable but packages no `libapp.so` for any architecture,	COMMENT
LOW	packages/shorebird_cli/lib/src/jq.dart	21	/// {@template jq_query}	COMMENT
LOW	packages/shorebird_cli/lib/src/cache.dart	121	/// used within [unusedCacheMaxAge], and returns the paths removed.	COMMENT
LOW	packages/shorebird_cli/lib/src/cache.dart	181	///	COMMENT
LOW	packages/shorebird_cli/lib/src/shorebird_flutter.dart	201	/// Whether [directory] definitely does not hold a usable install.	COMMENT
LOW	packages/shorebird_cli/lib/src/shorebird_flutter.dart	241	///	COMMENT
140 more matches not shown…

Cross-File Repetition24 hits · 120 pts

Severity	File	Snippet	Context
HIGH	…st/src/platform/apple/app_extension_versions_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…/shorebird_cli/test/src/platform/apple/plist_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…horebird_cli/test/src/extensions/arg_results_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…rd_cli/test/src/commands/apple_build_helpers_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…d_cli/test/src/commands/release/ios_releaser_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…bird_cli/test/src/commands/patch/ios_patcher_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…rebird_cli/test/src/commands/preview_command_test.dart	the project does not have any flavors defined (no "flavors" in shorebird.yaml), but --flavor was provided. re-run withou	STRING
HIGH	…ird_cli/test/src/validators/flavor_validator_test.dart	the project does not have any flavors defined (no "flavors" in shorebird.yaml), but --flavor was provided. re-run withou	STRING
HIGH	…kages/shorebird_cli/lib/src/config/shorebird_yaml.dart	the project does not have any flavors defined (no "flavors" in shorebird.yaml), but --flavor was provided. re-run withou	STRING
HIGH	…cli/test/src/commands/release/macos_releaser_test.dart	building for device with codesigning disabled. you will have to manually codesign before deploying to device.	STRING
HIGH	…d_cli/test/src/commands/release/ios_releaser_test.dart	building for device with codesigning disabled. you will have to manually codesign before deploying to device.	STRING
HIGH	…orebird_cli/lib/src/commands/release/ios_releaser.dart	building for device with codesigning disabled. you will have to manually codesign before deploying to device.	STRING
HIGH	…ebird_cli/lib/src/commands/release/macos_releaser.dart	building for device with codesigning disabled. you will have to manually codesign before deploying to device.	STRING
HIGH	…cli/test/src/commands/release/macos_releaser_test.dart	shorebird preview will not work for releases created with "--no-codesign". however, you can still preview your app by si	STRING
HIGH	…d_cli/test/src/commands/release/ios_releaser_test.dart	shorebird preview will not work for releases created with "--no-codesign". however, you can still preview your app by si	STRING
HIGH	…orebird_cli/lib/src/commands/release/ios_releaser.dart	shorebird preview will not work for releases created with "--no-codesign". however, you can still preview your app by si	STRING
HIGH	…ebird_cli/lib/src/commands/release/macos_releaser.dart	shorebird preview will not work for releases created with "--no-codesign". however, you can still preview your app by si	STRING
HIGH	…cli/test/src/commands/release/macos_releaser_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…d_cli/test/src/commands/release/ios_releaser_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…bird_cli/test/src/commands/patch/ios_patcher_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…rd_cli/test/src/commands/patch/macos_patcher_test.dart	<?xml version="1.0" encoding="utf-8"?> <!doctype plist public "-//apple//dtd plist 1.0//en" "http://www.apple.com/dtds/p	STRING
HIGH	…bird_cli/test/src/commands/patch/ios_patcher_test.dart	your $podfilelockrelativepath is different from the one used to build the release. this may indicate that the patch cont	STRING
HIGH	…rd_cli/test/src/commands/patch/macos_patcher_test.dart	your $podfilelockrelativepath is different from the one used to build the release. this may indicate that the patch cont	STRING
HIGH	…rd_cli/lib/src/commands/patch/apple_patcher_mixin.dart	your $podfilelockrelativepath is different from the one used to build the release. this may indicate that the patch cont	STRING

Fake / Example Data102 hits · 109 pts

Severity	File	Line	Snippet	Context
LOW	…d_code_push_client/test/src/code_push_client_test.dart	2061	codePushClient.updateCurrentUser(displayName: 'Jane Doe').ignore();	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	2070	equals({'display_name': 'Jane Doe'}),	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	2083	codePushClient.updateCurrentUser(displayName: 'Jane Doe'),	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	2095	codePushClient.updateCurrentUser(displayName: 'Jane Doe'),	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	3461	codePushClient.createOrganization(name: 'Acme Corp').ignore();	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	3468	expect(json.decode(request.body), equals({'name': 'Acme Corp'}));	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	3480	codePushClient.createOrganization(name: 'Acme Corp'),	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	3510	.updateOrganization(organizationId: 42, name: 'Acme Corp')	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	3518	expect(json.decode(request.body), equals({'name': 'Acme Corp'}));	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	3532	name: 'Acme Corp',	CODE
LOW	…d_code_push_client/test/src/code_push_client_test.dart	3553	name: 'Acme Corp',	CODE
LOW	…rebird_cli/test/src/code_push_client_wrapper_test.dart	348	email: 'user@example.com',	CODE
LOW⚡	…rebird_cli/test/src/code_push_client_wrapper_test.dart	1192	name: 'Acme Corp',	CODE
LOW⚡	…rebird_cli/test/src/code_push_client_wrapper_test.dart	1198	() => codePushClient.createOrganization(name: 'Acme Corp'),	CODE
LOW⚡	…rebird_cli/test/src/code_push_client_wrapper_test.dart	1203	name: 'Acme Corp',	CODE
LOW⚡	…rebird_cli/test/src/code_push_client_wrapper_test.dart	1215	name: 'Acme Corp',	CODE
LOW⚡	…rebird_cli/test/src/code_push_client_wrapper_test.dart	1221	name: 'Acme Corp',	CODE
LOW⚡	…rebird_cli/test/src/code_push_client_wrapper_test.dart	1227	name: 'Acme Corp',	CODE
LOW	…rebird_cli/test/src/code_push_client_wrapper_test.dart	1427	displayName: 'Jane Doe',	CODE
LOW	…rebird_cli/test/src/code_push_client_wrapper_test.dart	1431	() => codePushClient.updateCurrentUser(displayName: 'Jane Doe'),	CODE
LOW	…horebird_cli/test/src/commands/usage_command_test.dart	27	name: 'Acme Corp',	CODE
LOW	…ommands/service_accounts/service_account_fixtures.dart	18	name: 'Acme Corp',	CODE
LOW	…vice_accounts/service_account_scoped_command_test.dart	82	'"383" matches 2 service accounts in "Acme Corp": release-bot '	CODE
LOW	…vice_accounts/service_account_scoped_command_test.dart	97	'"release-bot" matches 2 service accounts in "Acme Corp": '	CODE
LOW	…vice_accounts/service_account_scoped_command_test.dart	139	'Service accounts in "Acme Corp": \'bob\'\\\'\'s bot\' (id: 5).',	CODE
LOW	…vice_accounts/service_account_scoped_command_test.dart	161	'Service accounts in "Acme Corp": release-bot (id: 383).',	CODE
LOW	…vice_accounts/service_account_scoped_command_test.dart	177	'No service account "deploy-bot" in "Acme Corp" (id: 42).',	CODE
LOW	…vice_accounts/service_account_scoped_command_test.dart	193	'"Acme Corp" has no service accounts. Create one with shorebird '	CODE
LOW	…vice_accounts/service_account_scoped_command_test.dart	229	'Failed to fetch the service accounts of "Acme Corp".',	CODE
LOW	…rvice_accounts/service_accounts_list_command_test.dart	42	'"Acme Corp" has no service accounts. Create one with shorebird '	CODE
LOW	…i/test/src/commands/auth/auth_status_command_test.dart	22	email: 'user@example.com',	CODE
LOW	…i/test/src/commands/auth/auth_status_command_test.dart	128	'user': {'id': 42, 'email': 'user@example.com'},	CODE
LOW	…est/src/commands/audit_log/audit_log_test_helpers.dart	9	name: 'Acme Corp',	CODE
LOW	…i/test/src/commands/orgs/orgs_update_command_test.dart	62	when(() => argResults['name']).thenReturn('Acme Corp');	CODE
LOW	…i/test/src/commands/orgs/orgs_update_command_test.dart	76	name: 'Acme Corp',	CODE
LOW	…i/test/src/commands/orgs/orgs_update_command_test.dart	90	name: 'Acme Corp',	CODE
LOW	…i/test/src/commands/orgs/orgs_update_command_test.dart	93	verify(() => logger.success('Renamed "Acme" to "Acme Corp".')).called(1);	CODE
LOW	…i/test/src/commands/orgs/orgs_update_command_test.dart	107	name: 'Acme Corp',	CODE
LOW	…i/test/src/commands/orgs/orgs_update_command_test.dart	119	'Pass the new name: shorebird orgs update 42 --name "Acme Corp".',	CODE
LOW	…i/test/src/commands/orgs/orgs_update_command_test.dart	165	name: 'Acme Corp',	CODE
LOW	…i/test/src/commands/orgs/orgs_update_command_test.dart	186	'to_name': 'Acme Corp',	CODE
LOW	…_cli/test/src/commands/orgs/orgs_get_command_test.dart	29	name: 'Acme Corp',	CODE
LOW	…_cli/test/src/commands/orgs/orgs_get_command_test.dart	39	name: 'user@example.com',	CODE
LOW	…_cli/test/src/commands/orgs/orgs_get_command_test.dart	151	contains('Acme Corp'),	CODE
LOW	…_cli/test/src/commands/orgs/orgs_get_command_test.dart	235	'Using organization "Acme Corp" (id: 42), which owns the app in '	CODE
LOW	…_cli/test/src/commands/orgs/orgs_get_command_test.dart	318	'Using organization "Acme Corp" (id: 42), your only '	CODE
LOW	…_cli/test/src/commands/orgs/orgs_get_command_test.dart	363	'name': 'Acme Corp',	CODE
LOW	…i/test/src/commands/orgs/orgs_create_command_test.dart	23	name: 'Acme Corp',	CODE
LOW⚡	…i/test/src/commands/orgs/orgs_create_command_test.dart	56	when(() => argResults.rest).thenReturn(['Acme Corp']);	CODE
LOW⚡	…i/test/src/commands/orgs/orgs_create_command_test.dart	63	() => codePushClientWrapper.createOrganization(name: 'Acme Corp'),	CODE
LOW⚡	…i/test/src/commands/orgs/orgs_create_command_test.dart	70	() => logger.success('Created organization "Acme Corp" (id: 42).'),	CODE
LOW⚡	…i/test/src/commands/orgs/orgs_create_command_test.dart	79	() => codePushClientWrapper.createOrganization(name: 'Acme Corp'),	CODE
LOW⚡	…i/test/src/commands/orgs/orgs_create_command_test.dart	88	'Name the organization: shorebird orgs create "Acme Corp".',	CODE
LOW	…i/test/src/commands/orgs/orgs_create_command_test.dart	99	'shorebird orgs create "Acme Corp".',	CODE
LOW	…i/test/src/commands/orgs/orgs_create_command_test.dart	109	when(() => argResults['name']).thenReturn('Acme Corp');	CODE
LOW	…i/test/src/commands/orgs/orgs_create_command_test.dart	133	() => codePushClientWrapper.createOrganization(name: 'Acme Corp'),	CODE
LOW	…i/test/src/commands/orgs/orgs_create_command_test.dart	141	'Failed to create organization "Acme Corp".',	CODE
LOW	…i/test/src/commands/orgs/orgs_create_command_test.dart	152	'name': 'Acme Corp',	CODE
LOW	…cli/test/src/commands/orgs/orgs_list_command_test.dart	23	name: 'Acme Corp',	CODE
LOW	…cli/test/src/commands/orgs/orgs_list_command_test.dart	33	name: 'user@example.com',	CODE
42 more matches not shown…

AI Slop Vocabulary4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/macos_resign_e2e.sh	13	# the patch must apply. Guards against the harness itself	COMMENT
MEDIUM	scripts/macos_resign_e2e.sh	30	# This is a local harness, not run in CI. It launches real (headful) app	COMMENT
MEDIUM	…ckages/shorebird_cli/lib/src/platform/apple/macho.dart	30	// probably write a more robust MachO header parser, but this is all we need	COMMENT
MEDIUM	…rd_cli/lib/src/artifact_builder/build_environment.dart	146	/// Presence-check (rather than value-compare) to stay robust against	COMMENT

Magic Placeholder Names2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	…d_cli/test/src/commands/release/ios_releaser_test.dart	914	3. Run ${lightCyan.wrap('xcrun altool --upload-app --type ios -f ${p.relative('build/ios/ipa/*.ipa')} --apiKey your_	CODE
HIGH	…orebird_cli/lib/src/commands/release/ios_releaser.dart	177	3. Run ${lightCyan.wrap('xcrun altool --upload-app --type ios -f $ipaSearchString --apiKey your_api_key --apiIssuer	CODE

Self-Referential Comments4 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	third_party/flutter/bin/internal/shared.sh	134	# This function is always run in a subshell. Running the function in a subshell	COMMENT
MEDIUM	third_party/flutter/bin/internal/shared.sh	203	# This function is intended to be executed by entrypoints (e.g. `//bin/shorebird`).	COMMENT
MEDIUM	…kages/shorebird_cli/lib/src/commands/init_command.dart	578	# This file is used to configure the Shorebird updater used by your app.	STRING
MEDIUM	…ckages/shorebird_cli/lib/src/commands/api_command.dart	148	# Create a channel	STRING

Slop Phrases2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	…ckages/shorebird_cli/test/src/pubspec_editor_test.dart	184	# included with your application, so that you can use the icons in	COMMENT
MEDIUM	…ckages/shorebird_cli/test/src/pubspec_editor_test.dart	205	# included with your application, so that you can use the icons in	COMMENT

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	…es/shorebird_cli/lib/src/logging/shorebird_logger.dart	210	/// for agentic consumers that need predictable line-oriented output.	COMMENT

Decorative Section Separators2 hits · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	…es/shorebird_ci/lib/src/commands/generate_command.dart	246	// ── Static (dorny/paths-filter + reusable workflows) ─────────────	STRING
MEDIUM	…es/shorebird_ci/lib/src/commands/generate_command.dart	636	// ── Dynamic (affected_packages + matrix) ─────────────────────────	STRING

shorebirdtech/shorebird

Open-Source Code Quality, Security and Technical Debt Review