0.9

Adjusted Signal

0.9

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

3.4K

Stars

Rust

Language

197.1K

Lines of Code

570

Files

108

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 91 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.3/100 · LOW

Are imports declared and package/API names verified? 5 finding(s).

Agent Over-Engineering Ratio 0.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 12 finding(s).

PR Review Velocity Impact 4.4/100 · LOW

Which changes need focused human review? 108 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 5HIGH 0MEDIUM 12LOW 91

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 108 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block81 hits · 81 pts

Severity	File	Line	Snippet	Context
LOW	deny.toml	1	# This template contains all of the possible sections and their default values	COMMENT
LOW	deny.toml	21	# `target_family = "unix"` configuration, that only having windows targets in	COMMENT
LOW	deny.toml	41	#exclude = []	COMMENT
LOW	deny.toml	61		COMMENT
LOW	deny.toml	121	{ allow = ["AGPL-3.0"], crate = "revolt-autumn" },	COMMENT
LOW	deny.toml	141	]	COMMENT
LOW	deny.toml	161	multiple-versions = "warn"	COMMENT
LOW	deny.toml	181	#{ crate = "ansi_term@0.11.0", reason = "you can specify a reason it is allowed" },	COMMENT
LOW	deny.toml	201	# "rustls",	COMMENT
LOW	deny.toml	221	# detection. Unlike skip, it also includes the entire tree of transitive	COMMENT
LOW	Revolt.toml	1	# ⚠️ This configuration is intended for development environment.	COMMENT
LOW	crates/delta/src/routes/root.rs	161	/// # Server Configuration	COMMENT
LOW	crates/bonfire/src/events/state.rs	21	add: Vec<String>,	COMMENT
LOW	crates/core/database/src/lib.rs	121	};	COMMENT
LOW	crates/core/database/src/util/email.rs	41	pub html: Option<String>,	COMMENT
LOW	crates/core/database/src/models/bots/model.rs	21	/// The permissions the bot will ask to have upon being invited to a server,	COMMENT
LOW	crates/core/database/src/models/messages/model.rs	21	#[cfg(feature = "tasks")]	COMMENT
LOW	crates/core/database/src/models/messages/model.rs	41	#[serde(skip_serializing_if = "Option::is_none")]	COMMENT
LOW	crates/core/database/src/models/messages/model.rs	61	/// Array of message ids this message is replying to	COMMENT
LOW	crates/core/database/src/models/messages/model.rs	121	/// Name and / or avatar override information	COMMENT
LOW	crates/core/database/src/models/messages/model.rs	141	pub reactions: Option<IndexSet<String>>,	COMMENT
LOW	crates/core/database/src/models/server_members/model.rs	21	/// Unique member id	COMMENT
LOW	crates/core/database/src/models/server_members/model.rs	41	/// Timestamp this member is timed out until	COMMENT
LOW	crates/core/database/src/models/accounts/model.rs	101	/// MFA configuration	COMMENT
LOW	crates/core/database/src/models/users/model.rs	21	auto_derived_partial!(	COMMENT
LOW	crates/core/database/src/models/users/model.rs	41	#[serde(skip_serializing_if = "Option::is_none")]	COMMENT
LOW	crates/core/database/src/models/users/model.rs	121	/// User's active status	COMMENT
LOW	crates/core/database/src/models/files/model.rs	21	/// ID of user who uploaded this file	COMMENT
LOW	crates/core/database/src/models/servers/model.rs	21	/// User id of the owner	COMMENT
LOW	crates/core/database/src/models/servers/model.rs	81	/// Permissions available to this role	COMMENT
LOW	crates/core/database/src/models/channels/model.rs	61	#[serde(skip_serializing_if = "Option::is_none")]	COMMENT
LOW	crates/core/database/src/models/channels/model.rs	81	/// Id of the server this channel belongs to	COMMENT
LOW	crates/core/database/src/events/client.rs	241	update: UserSettings,	COMMENT
LOW	crates/core/result/src/lib.rs	21	#[cfg(feature = "axum")]	COMMENT
LOW	crates/core/coalesced/src/lib.rs	1	//! # Coalesced	COMMENT
LOW	crates/core/coalesced/src/lib.rs	21	//! ## Example:	COMMENT
LOW	crates/core/config/Revolt.toml	161	# Generate your own key using `openssl rand -base64 32`	COMMENT
LOW	crates/core/config/Revolt.toml	201	[files.s3]	COMMENT
LOW	crates/core/models/src/v0/servers.rs	21	/// Name of the server	COMMENT
LOW	crates/core/models/src/v0/servers.rs	141	/// Unique ID for this category	COMMENT
LOW	crates/core/models/src/v0/servers.rs	161	pub user_kicked: Option<String>,	COMMENT
LOW	crates/core/models/src/v0/servers.rs	181		COMMENT
LOW	crates/core/models/src/v0/servers.rs	241	/// Attachment Id for icon	COMMENT
LOW	crates/core/models/src/v0/servers.rs	261	///	COMMENT
LOW	crates/core/models/src/v0/server_members.rs	141	/// Member nickname	COMMENT
LOW	crates/core/models/src/v0/bots.rs	1	use super::User;	COMMENT
LOW	crates/core/models/src/v0/bots.rs	141	feature = "validator",	COMMENT
LOW	crates/core/models/src/v0/users.rs	21		COMMENT
LOW	crates/core/models/src/v0/users.rs	141	Invisible,	COMMENT
LOW	crates/core/models/src/v0/users.rs	161	/// Text content on user's profile	COMMENT
LOW	crates/core/models/src/v0/users.rs	201	SuspendedUntil = 1,	COMMENT
LOW	crates/core/models/src/v0/users.rs	241	pub status: Option<UserStatus>,	COMMENT
LOW	crates/core/models/src/v0/channel_invites.rs	21	max_uses: Option<u64>,	COMMENT
LOW	crates/core/models/src/v0/channel_invites.rs	61	pub enum InviteResponse {	COMMENT
LOW	crates/core/models/src/v0/channel_invites.rs	81	/// Name of server channel	COMMENT
LOW	crates/core/models/src/v0/files.rs	21	/// Whether this file was reported	COMMENT
LOW	crates/core/models/src/v0/audit_logs.rs	141	/// Filter by the action type	COMMENT
LOW	crates/core/models/src/v0/embeds.rs	141	#[serde(skip_serializing_if = "Option::is_none")]	COMMENT
LOW	crates/core/models/src/v0/embeds.rs	161	/// Text Embed	COMMENT
LOW	crates/core/models/src/v0/channels.rs	41		COMMENT
21 more matches not shown…

Hallucination Indicators5 hits · 50 pts

Severity	File	Line	Snippet	Context
CRITICAL	crates/delta/src/routes/root.rs	190	enabled: !config.api.security.captcha.hcaptcha_key.is_empty(),	CODE
CRITICAL	crates/delta/src/routes/root.rs	191	key: config.api.security.captcha.hcaptcha_sitekey.clone(),	CODE
CRITICAL	crates/core/database/src/util/captcha.rs	16	if !config.api.security.captcha.hcaptcha_key.is_empty() {	CODE
CRITICAL	crates/core/database/src/util/captcha.rs	24	("secret", config.api.security.captcha.hcaptcha_key.as_str()),	CODE
CRITICAL	crates/core/config/src/settings.rs	450	if self.api.security.captcha.hcaptcha_key.is_empty() {	CODE

Decorative Section Separators12 hits · 36 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	9	# ── Thank you section ────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	17	# ── Pre-flight checks ────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	31	# ── Bug description ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	43	# ── Steps to reproduce ───────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	59	# ── Expected behavior ────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	69	# ── Client / platform ────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	84	# ── Client version ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	96	# ── OS / browser details ─────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	106	# ── Reproducibility ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	121	# ── Screenshots or video ─────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	130	# ── Additional context ───────────────────────────────────────────────────────	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/bug.yml	141	# ── Closing note ─────────────────────────────────────────────────────────────	COMMENT

Verbosity Indicators4 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	crates/daemons/pushd/src/consumers/inbound/ack.rs	39	// Step 1: fetch unreads and don't continue if there's no unreads	COMMENT
LOW	crates/daemons/pushd/src/consumers/inbound/ack.rs	60	// Step 2: find any apple sessions, since we don't need to calculate this for anything else.	COMMENT
LOW⚡	crates/daemons/pushd/src/consumers/inbound/ack.rs	81	// Step 3: calculate the actual mention count, since we have to send it out	COMMENT
LOW⚡	crates/daemons/pushd/src/consumers/inbound/ack.rs	87	// Step 4: loop through each apple session and send the badge update	COMMENT

Structural Annotation Overuse4 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	crates/daemons/pushd/src/consumers/inbound/ack.rs	39	// Step 1: fetch unreads and don't continue if there's no unreads	COMMENT
LOW	crates/daemons/pushd/src/consumers/inbound/ack.rs	60	// Step 2: find any apple sessions, since we don't need to calculate this for anything else.	COMMENT
LOW⚡	crates/daemons/pushd/src/consumers/inbound/ack.rs	81	// Step 3: calculate the actual mention count, since we have to send it out	COMMENT
LOW⚡	crates/daemons/pushd/src/consumers/inbound/ack.rs	87	// Step 4: loop through each apple session and send the badge update	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	crates/core/database/src/lib.rs	127	/// ## Usage:	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	scripts/publish-debug-image.sh	6	# Check if an argument was provided	COMMENT

stoatchat/stoatchat

Open-Source Code Quality, Security and Technical Debt Review