Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 21 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 5.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 21 finding(s).

PR Review Velocity Impact 5.2/100 · LOW

Which changes need focused human review? 22 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern Findings

The scanner identified 22 distinct pattern matches across 2 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers21 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	tests/TestSupport/TestCase.php	335	public function getLastRouteMiddlewareFromRouter($router)	CODE
LOW	tests/Integration/OctaneListenerTest.php	18	function registerOctaneListenerForTest(): void	CODE
LOW	tests/Integration/OctaneListenerTest.php	46	function dispatchOctaneRequestTerminated(Application $sandbox): void	CODE
LOW	src/PermissionRegistrar.php	160	public function forgetWildcardPermissionIndex(?Model $record = null): void	CODE
LOW	src/PermissionRegistrar.php	171	public function getWildcardPermissionIndex(Model $record): array	CODE
LOW	src/PermissionRegistrar.php	185	public function clearPermissionsCollection(): void	CODE
LOW	src/PermissionRegistrar.php	279	private function indexPermissionsForLookup(): void	CODE
LOW	src/PermissionRegistrar.php	365	private function rememberReturnedPermission(Model $permission): void	CODE
LOW	src/PermissionRegistrar.php	458	private function getSerializedPermissionsForCache(): array	CODE
LOW	src/PermissionRegistrar.php	476	private function getSerializedRoleRelation(Model $permission): array	CODE
LOW	src/PermissionRegistrar.php	498	private function getHydratedPermissionCollection(): Collection	CODE
LOW	src/PermissionRegistrar.php	510	private function getHydratedRoleCollection(array $roles): Collection	CODE
LOW	src/Middleware/RoleOrPermissionMiddleware.php	56	protected static function parseRoleOrPermissionToString(array\|string\|BackedEnum $roleOrPermission): string	CODE
LOW	src/Traits/HasPermissions.php	148	protected function convertToPermissionModels($permissions): array	CODE
LOW	src/Traits/HasPermissions.php	463	public function forgetWildcardPermissionIndex(): void	CODE
LOW	src/Traits/RefreshesPermissionCache.php	9	public static function bootRefreshesPermissionCache()	CODE
LOW⚡	src/Support/Config.php	98	public static function usePassportClientCredentials(): bool	CODE
LOW⚡	src/Support/Config.php	108	public static function displayPermissionInException(): bool	CODE
LOW⚡	src/Support/Config.php	113	public static function wildcardPermissionsEnabled(): bool	CODE
LOW	src/Commands/UpgradeForTeamsCommand.php	74	protected function getExistingMigrationsWarning(array $existingMigrations): string	CODE
LOW	src/Commands/UpgradeForTeamsCommand.php	85	protected function alreadyExistingMigrations(): array	CODE

Fake / Example Data1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	docs/basic-usage/new-app.md	112	'email' => 'admin@example.com',	CODE

spatie/laravel-permission

Open-Source Code Quality, Security and Technical Debt Review

Risk Review · Payload v1

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings