3.3

Adjusted Signal

3.3

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

1.9K

Stars

Rust

Language

224.5K

Lines of Code

567

Files

639

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 11.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 544 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.0/100 · LOW

Are imports declared and package/API names verified? 39 finding(s).

Agent Over-Engineering Ratio 4.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 115 finding(s).

PR Review Velocity Impact 15.9/100 · LOW

Which changes need focused human review? 639 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 11MEDIUM 43LOW 585

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 639 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block449 hits · 429 pts

Severity	File	Line	Snippet	Context
LOW	Cargo.toml	21	# parsing is reserved for Apple's project-domain formats (DOCS.md §3.1).	COMMENT
LOW	sweetpad-cli/build.rs	1	use std::{env, fs, path::Path, process::Command};	COMMENT
LOW	sweetpad-cli/tests/spm_oracle.rs	1	//! SwiftPM CLI oracle — ground sweetpad's manifest-derived project view against	COMMENT
LOW	sweetpad-cli/tests/cli_json_envelope.rs	1	//! Enforces the `--json` envelope contract across the non-streaming commands.	COMMENT
LOW	sweetpad-cli/src/lib.rs	1	//! The `sweetpad` command-line interface.	COMMENT
LOW	sweetpad-cli/src/vscode_cli.rs	1	//! The `sweetpad vscode` command — a thin, generic JSON-RPC client for the	COMMENT
LOW	sweetpad-cli/src/bin/sweetpad.rs	1	//! `sweetpad` — the SweetPad command-line interface.	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	181	/// a resolved target.	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	201	/// sandbox stripping): the ephemeral sandbox-stripped plist (or a	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	401	)	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	561	/// What a [`TestPlan::run`] produced: the raw pass/fail, plus — in the	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	1021	}	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	1701	.collect())	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	1721	pub sources: Vec<PathBuf>,	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	1781	}	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	1901	into.append(&mut added);	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	2061	match path.file_name().and_then(\|n\| n.to_str()) {	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	2121	/// -enableCodeCoverage is only supported when testing"), as Xcode 27 refuses	COMMENT
LOW	sweetpad-cli/src/cli/xcodebuild.rs	2141	/// in a nested source directory names a directory beside the project, not	COMMENT
LOW	sweetpad-cli/src/cli/pymobiledevice3.rs	1	//! Streaming a physical iOS device's os_log via the external `pymobiledevice3`	COMMENT
LOW	sweetpad-cli/src/cli/rawmode.rs	1	//! Minimal raw-terminal input for the `app run` interactive rebuild session.	COMMENT
LOW	sweetpad-cli/src/cli/rawmode.rs	81	/// Nothing was pressed this tick (the `VTIME` timeout elapsed).	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	1	//! Target resolution: figuring out what a command acts on.	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	61	.unwrap_or_else(\|_\| sweetpad_lib::project::absolutize(self.path()))	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	201	_ => String::new(),	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	381	/// The fully resolved targeting for a command, after layering.	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	661	prompt_choice(what, candidates, ctx.out.use_color_stderr())	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	781	.cloned();	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	1001	/// validated against the project's candidates with a did-you-mean hint, so a	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	1141	}	COMMENT
LOW	sweetpad-cli/src/cli/resolve.rs	1441	/// exists: clear it (under `track`), warn, and re-pick — the destination	COMMENT
LOW	sweetpad-cli/src/cli/config.rs	1	//! Hand-authored configuration: `~/.config/sweetpad/config.toml`.	COMMENT
LOW	sweetpad-cli/src/cli/config.rs	21	pub struct Config {	COMMENT
LOW	sweetpad-cli/src/cli/config.rs	141		COMMENT
LOW	sweetpad-cli/src/cli/config.rs	361	let cost = usize::from(ca != cb);	COMMENT
LOW	sweetpad-cli/src/cli/config.rs	401		COMMENT
LOW	sweetpad-cli/src/cli/config.rs	421		COMMENT
LOW	sweetpad-cli/src/cli/config.rs	441	/// The effective `xcodebuild` passthrough for one invocation, and the file's	COMMENT
LOW	sweetpad-cli/src/cli/render.rs	1	//! The render contract: a command produces a payload, and the dispatcher in	COMMENT
LOW	sweetpad-cli/src/cli/merge.rs	1	//! Shared plumbing for sweetpad's semantic git-conflict merges.	COMMENT
LOW	sweetpad-cli/src/cli/signals.rs	1	//! Process-wide signal handling for the CLI half.	COMMENT
LOW	sweetpad-cli/src/cli/signals.rs	21	//! runs — PIPE always gets the handler.	COMMENT
LOW	sweetpad-cli/src/cli/signals.rs	41		COMMENT
LOW	sweetpad-cli/src/cli/buildlog.rs	241	}	COMMENT
LOW	sweetpad-cli/src/cli/buildlog.rs	501		COMMENT
LOW	sweetpad-cli/src/cli/buildlog.rs	581		COMMENT
LOW	sweetpad-cli/src/cli/oslog.rs	1	//! Formatting for streamed `os_log` output (`simctl spawn … log stream	COMMENT
LOW	sweetpad-cli/src/cli/oslog.rs	221	/// ndjson` prints after its last entry. It counts what the query returned, so	COMMENT
LOW	sweetpad-cli/src/cli/exits.rs	1	//! Why an app stopped running, read from launchd's own account of the exit.	COMMENT
LOW	sweetpad-cli/src/cli/exits.rs	601	let year_of_era = year - era * 400;	COMMENT
LOW	sweetpad-cli/src/cli/exits.rs	761	/// The exit a crash log of `xctest` records, read from its text: the crash	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	1	//! The standalone, headless `sweetpad` CLI — "xcodebuild for humans".	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	81	/// not here: those flags live on the commands that consume them, as the	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	101	pub output: Option<OutputMode>,	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	121	/// Print verbose diagnostics (raw tool output, extra detail). For	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	141	/// Colored human output (the default).	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	321	}	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	521	if !mac {	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	601	#[derive(Debug, Subcommand)]	COMMENT
LOW	sweetpad-cli/src/cli/mod.rs	641	},	COMMENT
389 more matches not shown…

Decorative Section Separators22 hits · 70 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	sweetpad-lib/ci/smoke.sh	242	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	sweetpad-lib/ci/smoke.sh	249	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	sweetpad-lib/ci/smoke.sh	258	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	sweetpad-lib/ci/smoke.sh	609	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	sweetpad-lib/ci/smoke.sh	615	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	sweetpad-lib/ci/smoke.sh	623	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	132	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	145	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	171	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	289	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	364	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	466	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	476	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	496	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	513	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	531	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	652	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	700	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	714	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	747	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	756	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	772	# ---------------------------------------------------------------------------	COMMENT

Hyper-Verbose Identifiers58 hits · 61 pts

Severity	File	Line	Snippet	Context
LOW	sweetpad-lib/scripts/03_run_builds.py	95	def pick_representative_destination(	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	216	def probe_setting_key_present(key: str, label: str \| None = None) -> Probe:	CODE
LOW	sweetpad-lib/scripts/common.py	103	def discover_installed_xcodes(apps_dir: Path = Path("/Applications")) -> list[XcodeInstall]:	CODE
LOW	sweetpad-lib/scripts/10_xcconfig_resolution.py	162	def capture_xcconfig_resolution(	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	127	def _pick_workspace_or_project(root: Path, *, label: str) -> Subproject \| None:	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	349	def representative_destinations(	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	408	def destination_filename_slug(d: dict[str, str]) -> str:	CODE
LOW⚡	sweetpad-vscode/src/__mocks__/devices.ts	168	export function createMockDeviceWithoutOS(): DevicectlDevice {	CODE
LOW⚡	sweetpad-vscode/src/__mocks__/devices.ts	175	export function createMockDeviceWithoutUDID(): DevicectlDevice {	CODE
LOW⚡	sweetpad-vscode/src/__mocks__/devices.ts	182	export function createMockDeviceWithoutName(): DevicectlDevice {	CODE
LOW	sweetpad-vscode/src/simulators/commands.ts	131	export async function removeSimulatorCacheCommand(deps: AppDeps) {	CODE
LOW	sweetpad-vscode/src/simulators/commands.ts	163	export async function openSimulatorStreamInBrowserCommand(deps: AppDeps, item?: SimulatorDestinationTreeItem) {	CODE
LOW	sweetpad-vscode/src/simulators/commands.ts	173	export async function copySimulatorStreamUrlCommand(deps: AppDeps, item?: SimulatorDestinationTreeItem) {	CODE
LOW	sweetpad-vscode/src/simulators/utils.ts	31	export function parseDeviceTypeIdentifier(deviceTypeIdentifier: string): SimulatorType \| null {	CODE
LOW	sweetpad-vscode/src/destination/commands.ts	15	export async function searchDestinationsViewCommand(_deps: AppDeps) {	CODE
LOW	sweetpad-vscode/src/destination/commands.ts	20	export async function selectDestinationForBuildCommand(deps: AppDeps, item?: DestinationTreeItem) {	CODE
LOW	sweetpad-vscode/src/destination/commands.ts	49	export async function selectDestinationForTestingCommand(deps: AppDeps, item?: DestinationTreeItem) {	CODE
LOW	sweetpad-vscode/src/destination/commands.ts	67	export async function removeRecentDestinationCommand(deps: AppDeps, item?: DestinationTreeItem) {	CODE
LOW	sweetpad-vscode/src/destination/utils.ts	23	export function splitSupportedDestinatinos(options: {	CODE
LOW	sweetpad-vscode/src/destination/utils.ts	79	export function filterDestinationsForAction(destinations: Destination[], action: DestinationAction): Destination[] {	CODE
LOW	sweetpad-vscode/src/destination/utils.ts	90	export function assertRunnableDestination(	CODE
LOW	sweetpad-vscode/src/destination/utils.ts	103	export function assertDestinationSupportsAction(destination: Destination, action: DestinationAction): void {	CODE
LOW	sweetpad-vscode/src/destination/utils.ts	119	export function findDestinationForTaskInput(	CODE
LOW	sweetpad-vscode/src/destination/types.ts	271	export function selectedDestinationPlatform(destination: SelectedDestination): DestinationPlatform \| undefined {	CODE
LOW	sweetpad-vscode/src/bsp/commands.ts	45	export function isSweetpadBuildServerConfig(config: BuildServerConfig \| undefined): boolean {	CODE
LOW	sweetpad-vscode/src/bsp/commands.ts	58	export function isExtensionManagedBuildServerConfig(	CODE
LOW	sweetpad-vscode/src/bsp/commands.ts	100	function hasForeignBuildServerConfig(): boolean {	CODE
LOW	sweetpad-vscode/src/bsp/commands.ts	121	export function isPreservingForeignBuildServer(): boolean {	CODE
LOW	sweetpad-vscode/src/bsp/commands.ts	125	export async function isSweetpadBuildServerActive(workspacePath: string): Promise<boolean> {	CODE
LOW	sweetpad-vscode/src/testing/commands.ts	12	export async function selectTestingTargetCommand(deps: AppDeps): Promise<void> {	CODE
LOW	sweetpad-vscode/src/testing/commands.ts	33	export async function testWithoutBuildingCommand(deps: AppDeps, ...items: vscode.TestItem[]): Promise<void> {	CODE
LOW	sweetpad-vscode/src/testing/commands.ts	40	export async function selectXcodeSchemeForTestingCommand(deps: AppDeps, item?: BuildTreeItem) {	CODE
LOW	sweetpad-vscode/src/testing/commands.ts	63	export async function selectConfigurationForTestingCommand(deps: AppDeps): Promise<void> {	CODE
LOW	sweetpad-vscode/src/testing/utils.ts	74	export async function askConfigurationForTesting(	CODE
LOW	sweetpad-vscode/src/testing/utils.ts	120	export async function selectDestinationForTesting(	CODE
LOW⚡	sweetpad-vscode/src/system/commands.ts	23	export async function createIssueGenericCommand(deps: AppDeps) {	CODE
LOW⚡	sweetpad-vscode/src/system/commands.ts	31	export async function createIssueNoSchemesCommand() {	CODE
LOW⚡	sweetpad-vscode/src/system/commands.ts	41	export async function testErrorReportingCommand() {	CODE
LOW	sweetpad-vscode/src/common/askers.ts	93	export async function askConfigurationForScheme(options: {	CODE
LOW	sweetpad-vscode/src/common/tasks/shell-env.ts	223	function maybeNotifyShellEnvFailure(error: unknown): void {	CODE
LOW	sweetpad-vscode/src/common/tasks/presentation.ts	5	export function setTaskPresentationOptions(task: vscode.Task): void {	CODE
LOW	sweetpad-vscode/src/common/cli/scripts.ts	360	async function getBuildSettingsViaXcodebuild(options: {	CODE
LOW	sweetpad-vscode/src/common/cli/scripts.ts	439	export function isXcodeBuildCommandCustomized(): boolean {	CODE
LOW	sweetpad-vscode/src/common/cli/scripts.ts	691	export function getProjectDefaultConfiguration(xcworkspace: string): string \| undefined {	CODE
LOW	sweetpad-vscode/src/common/cli/scripts.ts	706	export async function generateBuildServerConfig(options: {	CODE
LOW	sweetpad-vscode/src/common/cli/scripts.ts	805	export async function generateSweetpadBuildServerConfig(options: {	CODE
LOW	sweetpad-vscode/src/common/cli/scripts.ts	892	async function handleSwiftPackageNativeLsp(packageManifest: string): Promise<void> {	CODE
LOW	sweetpad-vscode/src/common/cli/scripts.ts	907	async function generateXBSBuildServerConfig(options: {	CODE
LOW	sweetpad-vscode/src/common/cli/scripts.ts	996	async function injectEnvIntoBuildServerConfig(	CODE
LOW	sweetpad-vscode/src/cli-server/builds.ts	351	function sessionCommandToBuildCommand(c: BuildSessionCommand): BuildCommand {	CODE
LOW	sweetpad-vscode/src/cli-server/service.ts	22	function extractSweetpadConfigKeys(context: vscode.ExtensionContext): string[] {	CODE
LOW	sweetpad-vscode/src/format/formatter.ts	23	export function registerRangeFormatProvider(formatter: SwiftFormattingProvider): vscode.Disposable {	CODE
LOW	sweetpad-vscode/src/debugger/cli.ts	53	export function resetSweetpadCliStatusCache(): void {	CODE
LOW	sweetpad-vscode/src/debugger/route.ts	17	export function getDebuggerAdapterSetting(): DebuggerAdapter {	CODE
LOW	sweetpad-vscode/src/debugger/provider.ts	390	export function registerDebugConfigurationProvider(options: DynamicProviderDeps) {	CODE
LOW	sweetpad-vscode/src/previews/commands.ts	38	export async function screenshotPreviewVariantsCommand(deps: AppDeps, item?: PreviewItem) {	CODE
LOW	sweetpad-vscode/src/devices/merge.spec.ts	31	function makeEmptyHardwareDevicectl(identifier = "urn:x-ios-devicectl:device-DC1"): DevicectlDevice {	CODE
LOW	sweetpad-vscode/src/devices/merge.ts	39	function inferDeviceTypeFromXcdevice(xc: XcdeviceDevice): DeviceCtlDeviceType \| null {	CODE

Modern AI Meta-Vocabulary13 hits · 39 pts

Severity	File	Line	Snippet	Context
MEDIUM	sweetpad-cli/CLI_DESIGN.md	210	## 3a. `project new` — scaffolding	COMMENT
MEDIUM	sweetpad-cli/tests/cli_json_envelope.rs	323	// A refused scaffold wrote nothing into the working directory.	COMMENT
MEDIUM	sweetpad-cli/tests/cli_json_envelope.rs	421	// A non-empty directory where 'project new App' would scaffold.	COMMENT
MEDIUM	sweetpad-cli/src/cli/output.rs	6	//! small for the scaffold — render helpers grow alongside the commands.	COMMENT
MEDIUM	sweetpad-cli/src/cli/scaffold.rs	802	// Digits-and-dots isn't enough: these scaffold settings Xcode rejects.	COMMENT
MEDIUM	sweetpad-cli/src/cli/commands/project.rs	1	//! `sweetpad project …` — inspect and scaffold projects.	COMMENT
MEDIUM	sweetpad-cli/src/cli/commands/project.rs	288	/// Refuse to scaffold over an existing non-empty directory. `--force` waives the	COMMENT
MEDIUM	sweetpad-cli/src/cli/commands/project.rs	324	/// `--force` waives the not-empty gate, not file ownership: a scaffold file	COMMENT
MEDIUM	sweetpad-cli/src/cli/commands/project.rs	401	/// The outcome of a `project new` scaffold: the created project's facts. JSON	COMMENT
MEDIUM	sweetpad-cli/src/cli/commands/project.rs	443	/// Assemble the `Created` payload from the scaffold result. Derives the	COMMENT
MEDIUM	sweetpad-lib/ci/smoke.sh	281	# --current-dir variant: scaffold in place, name defaults to the directory.	COMMENT
MEDIUM	sweetpad-lib/scripts/01_clone_corpus.py	47	# Earlier scaffolding's `fixtures/` directory no longer exists. Patterns are	COMMENT
MEDIUM	sweetpad-docs/docs/cli/project-new.md	81	## After scaffolding	COMMENT

Empty Error Handlers7 hits · 35 pts

Severity	File	Line	Snippet	Context
HIGH	sweetpad-lib/scripts/06_audit_coverage.py	518	except Exception:	CODE
HIGH	sweetpad-lib/scripts/06_audit_coverage.py	525	except Exception:	CODE
HIGH	sweetpad-lib/scripts/06_audit_coverage.py	119	except Exception:	CODE
HIGH	sweetpad-lib/scripts/09_per_project_settings.py	136	except json.JSONDecodeError:	CODE
HIGH	sweetpad-lib/scripts/09_per_project_settings.py	161	except json.JSONDecodeError:	CODE
HIGH	sweetpad-lib/scripts/toolshim/_shim.py	75	except Exception:	CODE
HIGH	sweetpad-lib/scripts/toolshim/_shim.py	90	except OSError:	CODE

Unused Imports32 hits · 32 pts

Severity	File	Line	Context
LOW	sweetpad-lib/scripts/03_run_builds.py	50	CODE
LOW	sweetpad-lib/scripts/12_pif_dumps.py	29	CODE
LOW	sweetpad-lib/scripts/22_spm_cli_oracle.py	28	CODE
LOW	sweetpad-lib/scripts/04_snapshot_xcspecs.py	32	CODE
LOW	sweetpad-lib/scripts/08_global_defaults.py	33	CODE
LOW	sweetpad-lib/scripts/17_static_library.py	24	CODE
LOW	sweetpad-lib/scripts/07_synthetic_overrides.py	25	CODE
LOW	sweetpad-lib/scripts/07_synthetic_overrides.py	29	CODE
LOW	sweetpad-lib/scripts/19_multimodule.py	28	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	31	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	40	CODE
LOW	sweetpad-lib/scripts/16_capture_compiler_args.py	45	CODE
LOW	sweetpad-lib/scripts/09_per_project_settings.py	44	CODE
LOW	sweetpad-lib/scripts/09_per_project_settings.py	48	CODE
LOW	sweetpad-lib/scripts/09_per_project_settings.py	49	CODE
LOW	sweetpad-lib/scripts/05_validate.py	27	CODE
LOW	sweetpad-lib/scripts/20_objc_headers.py	22	CODE
LOW	sweetpad-lib/scripts/common.py	16	CODE
LOW	sweetpad-lib/scripts/common.py	28	CODE
LOW	sweetpad-lib/scripts/14_compare_versions.py	35	CODE
LOW	sweetpad-lib/scripts/10_xcconfig_resolution.py	34	CODE
LOW	sweetpad-lib/scripts/13_capture_version.py	67	CODE
LOW	sweetpad-lib/scripts/15_custom_configuration.py	36	CODE
LOW	sweetpad-lib/scripts/11_synthetic_xcconfigs.py	38	CODE
LOW	sweetpad-lib/scripts/11_synthetic_xcconfigs.py	43	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	42	CODE
LOW	sweetpad-lib/scripts/00_bootstrap.py	26	CODE
LOW	sweetpad-lib/scripts/01_clone_corpus.py	31	CODE
LOW	sweetpad-lib/scripts/01_clone_corpus.py	35	CODE
LOW	sweetpad-lib/scripts/23_header_maps.py	30	CODE
LOW	sweetpad-lib/scripts/18_rich_settings.py	32	CODE
LOW	sweetpad-lib/scripts/toolshim/_shim.py	22	CODE

Excessive Try-Catch Wrapping27 hits · 27 pts

Severity	File	Line	Snippet	Context
LOW	sweetpad-lib/scripts/03_run_builds.py	355	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/03_run_builds.py	455	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/03_run_builds.py	463	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/22_spm_cli_oracle.py	167	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/04_snapshot_xcspecs.py	220	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/08_global_defaults.py	164	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	85	except Exception:	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	119	except Exception:	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	501	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	518	except Exception:	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	525	except Exception:	CODE
LOW	sweetpad-lib/scripts/09_per_project_settings.py	222	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/09_per_project_settings.py	229	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/10_xcconfig_resolution.py	112	except Exception:	CODE
LOW	sweetpad-lib/scripts/10_xcconfig_resolution.py	142	except Exception:	CODE
LOW	sweetpad-lib/scripts/10_xcconfig_resolution.py	287	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/13_capture_version.py	615	except Exception as e: # one bad version must not strand the rest	CODE
LOW	sweetpad-lib/scripts/15_custom_configuration.py	335	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/11_synthetic_xcconfigs.py	392	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	487	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	676	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/00_bootstrap.py	117	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/01_clone_corpus.py	214	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/01_clone_corpus.py	230	except Exception:	CODE
LOW	sweetpad-lib/scripts/01_clone_corpus.py	380	except Exception as e:	CODE
LOW	sweetpad-lib/scripts/toolshim/_shim.py	75	except Exception:	CODE
LOW	sweetpad-lib/scripts/toolshim/_shim.py	114	except Exception as e:	CODE

AI Slop Vocabulary8 hits · 19 pts

Severity	File	Line	Snippet	Context
MEDIUM	sweetpad-cli/src/cli/commands/dependency.rs	1595	/// the precise identity→subpath map in `workspace-state.json` (robust to	COMMENT
MEDIUM	sweetpad-lib/scripts/21_mutation_audit.py	101	"""Run one net and classify by exit status — robust to output formatting.	STRING
MEDIUM	sweetpad-lib/scripts/19_multimodule.py	47	# ModuleB imports ModuleA — the cross-module edge the BSP harness measures.	STRING
MEDIUM	sweetpad-lib/src/xcode.rs	163	/// the install path. Cheaper and more robust than stat-ing every spec —	COMMENT
MEDIUM	sweetpad-lib/src/catalog_cache.rs	165	/// Cheaper and more robust when the caller already knows the source identity —	COMMENT
MEDIUM	sweetpad-docs/package-lock.json	18163	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE
MEDIUM	sweetpad-core/tests/bsp_lsp_e2e.rs	111	#[allow(clippy::too_many_lines)] // a linear end-to-end harness reads clearer in one piece	COMMENT
MEDIUM	sweetpad-core/tests/scheme_planner.rs	24	/// entry — robust enough without pulling in a JSON parser dependency.	COMMENT

Deep Nesting14 hits · 14 pts

Severity	File	Line	Context
LOW	sweetpad-lib/scripts/03_run_builds.py	405	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	71	CODE
LOW	sweetpad-lib/scripts/06_audit_coverage.py	466	CODE
LOW	sweetpad-lib/scripts/09_per_project_settings.py	101	CODE
LOW	sweetpad-lib/scripts/09_per_project_settings.py	141	CODE
LOW	sweetpad-lib/scripts/09_per_project_settings.py	203	CODE
LOW	sweetpad-lib/scripts/common.py	403	CODE
LOW	sweetpad-lib/scripts/common.py	471	CODE
LOW	sweetpad-lib/scripts/10_xcconfig_resolution.py	255	CODE
LOW	sweetpad-lib/scripts/13_capture_version.py	532	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	475	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	652	CODE
LOW	sweetpad-lib/scripts/01_clone_corpus.py	150	CODE
LOW	sweetpad-lib/scripts/toolshim/_shim.py	43	CODE

Cross-Language Confusion3 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	sweetpad-lib/scripts/06_audit_coverage.py	15	the probe reports "not evaluable" (ok: null) instead of a false ❌, and the	STRING
HIGH	sweetpad-lib/scripts/common.py	73	notes="Subset of fixtures/, requires `tuist install && tuist generate`",	CODE
HIGH	sweetpad-lib/scripts/01_clone_corpus.py	13	resources). It then runs `tuist install && tuist generate` per selected	STRING

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	sweetpad-cli/src/cli/buildlog.rs	713	/// Whether a listing entry is the destination xcodebuild echoed as requested:	COMMENT

Fake / Example Data4 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	sweetpad-lib/scripts/07_synthetic_overrides.py	176	and "placeholder" not in d.get("id", "").lower()	CODE
LOW	sweetpad-lib/scripts/10_xcconfig_resolution.py	150	and "placeholder" not in d.get("id", "") \	CODE
LOW	sweetpad-lib/scripts/02_capture_metadata.py	272	targets. They have id values containing 'Placeholder' / 'placeholder',	STRING
LOW	sweetpad-lib/scripts/02_capture_metadata.py	276	if "Placeholder" in pid or "placeholder" in pid:	CODE

AI Structural Patterns1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	sweetpad-lib/scripts/14_compare_versions.py	93		CODE

sweetpad-dev/sweetpad

Open-Source Code Quality, Security and Technical Debt Review