0.9

Adjusted Signal

0.9

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

4.5K

Stars

Rust

Language

396.2K

Lines of Code

1.4K

Files

270

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 247 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 13 finding(s).

Agent Over-Engineering Ratio 1.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 89 finding(s).

PR Review Velocity Impact 4.0/100 · LOW

Which changes need focused human review? 270 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 3MEDIUM 19LOW 248

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 270 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block138 hits · 138 pts

Severity	File	Line	Snippet	Context
LOW	…r/pkg/http/get_nft_balances_by_address_and_chain_id.go	1	package http	COMMENT
LOW	…kages/bridge-ui/src/libs/fee/recommendProcessingFee.ts	81	destChainId,	COMMENT
LOW	…kages/bridge-ui/src/libs/fee/recommendProcessingFee.ts	181	// // Calculate how many "10^12 wei" units are in the input	COMMENT
LOW	packages/bridge-ui/src/libs/bridge/types.ts	21	// - the invocation fee for the function call.	COMMENT
LOW	packages/bridge-ui/src/libs/bridge/types.ts	41	// value to invoke on the destination chain.	COMMENT
LOW	packages/bridge-ui/src/libs/bridge/fetchTransactions.ts	81		COMMENT
LOW	packages/bridge-ui/src/libs/bridge/fetchTransactions.ts	141		COMMENT
LOW	…nents/Transactions/Dialogs/DesktopDetailsDialog.svelte	41	// from = null;	COMMENT
LOW	packages/bridge-ui/src/routes/+layout.ts	1	// When setting this to false your entire app will only be rendered on the client,	COMMENT
LOW	packages/fork-diff/fork.yaml	21	# - title: "second layer"	COMMENT
LOW	packages/fork-diff/fork.yaml	41	# - title: "first layer"	COMMENT
LOW	packages/fork-diff/fork.yaml	61	# sub:	COMMENT
LOW	packages/fork-diff/fork.yaml	101	# description: "This cherry-picks the !isOnCurve() bugfix from 1.15.4."	COMMENT
LOW	packages/fork-diff/fork.yaml	141	# - title: "fourth layer"	COMMENT
LOW	packages/fork-diff/fork.yaml	161		COMMENT
LOW	packages/fork-diff/fork.yaml	201	# - title: "les"	COMMENT
LOW	packages/fork-diff/fork.yaml	221	# - title: "Changes in log"	COMMENT
LOW	packages/fork-diff/fork.yaml	261	# - title: "Changes in p2p"	COMMENT
LOW	packages/fork-diff/fork.yaml	281		COMMENT
LOW	packages/fork-diff/fork.yaml	301	- "rpc/*"	COMMENT
LOW	packages/fork-diff/fork.yaml	321	# - "swarm/*"	COMMENT
LOW	packages/protocol/AGENTS.md	21	### Code Organization	COMMENT
LOW	packages/protocol/CLAUDE.md	21	### Code Organization	COMMENT
LOW	packages/protocol/contracts/shared/bridge/README.md	21		COMMENT
LOW	packages/protocol/docs/etna/SPEC.md	641	// [ENC-A-7]	COMMENT
LOW	packages/protocol/docs/etna/SPEC.md	661	// Strict decoding (identical for nodes and guests; any violation makes the proposal invalid): the envelope is exactly	COMMENT
LOW	packages/protocol/docs/etna/SPEC.md	681	Prove exactly in order: anchor [268, 270, 271, 281]; forced entry [base,base+1], base=keccak256(abi.encode(i,280));	COMMENT
LOW	packages/protocol/docs/etna/SPEC.md	701	// [ENC-A-30]	COMMENT
LOW	packages/protocol/docs/etna/SPEC.md	781	// Require ckY < p, the requested parity, a finite curve point, and exact recompression.	COMMENT
LOW	packages/protocol/docs/etna/SPEC.md	801	// [ENC-A-52]	COMMENT
LOW	packages/protocol/script/gen-layouts.sh	1	#!/bin/bash	COMMENT
LOW	…kages/protocol/script/layer1/proposals/Proposal0025.md	521	MODE=l1dryrun FOUNDRY_PROFILE=layer1 forge script script/layer1/proposals/Proposal0025.s.sol:Proposal0025 --rpc-url $L1_	COMMENT
LOW	packages/relayer/types.go	121	return err	COMMENT
LOW	packages/relayer/processor/config.go	221	return q, nil	COMMENT
LOW	packages/relayer/processor/config.go	341	}	COMMENT
LOW	packages/relayer/processor/config.go	381	// Five minutes is a bound this relayer chooses, not the point at which the relays give up. Their	COMMENT
LOW	packages/relayer/processor/processor.go	681	}	COMMENT
LOW	packages/relayer/indexer/get_block_by_timestamp_test.go	221	latest: 500,	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend_test.go	321	// One endpoint, so the ordering cannot mask what is being tested: every resend reaches this	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	21	"github.com/ethereum/go-ethereum/core/types"	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	41	const DefaultPrivateRPCFailureThreshold = 3	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	61	// Below this, the attempt is given the whole remaining budget instead. The endpoints behind it then	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	81	// prevent, so it is the last resort rather than the first — but a claim that never lands is worth	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	101	var urlInErrorText = regexp.MustCompile(`[a-zA-Z][a-zA-Z0-9+.\-]://[^\s"]`)	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	121	// different for every other claim. Nothing else here is both — the nonce recycles, and the hash and	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	161	//	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	201	// NewSendingBackend wraps public so that sends are routed through private, in priority order.	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	301	// fallback exists for the opposite case, healthy relays that all decline one claim.	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	341	// whenever the transaction manager abandons a send.	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	461	// countAllRefused records that every endpoint in rotation refused this nonce, and reports whether	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	541	// A share too short to hear an answer in is worse than no division: it charges the endpoint	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	621	// logs, so the redaction has to travel with the error rather than be applied at one call site.	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	681	//	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	781	// the message — is healthy for everything else, and the transaction manager resubmits that claim	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	801	// transaction would grow without bound, and repeated refusals of more than one claim are weaker	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	861	// It is not a refusal, so it does not touch the failure tally that the threshold reads and does not	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	881	}	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	961	// already holding this nonce is the one place a resend does something useful — it retires the stale	COMMENT
LOW	packages/relayer/pkg/utils/sending_backend.go	1001	rest = append(rest, endpoint)	COMMENT
LOW	packages/relayer/pkg/http/get_events_by_address.go	61	MsgHash string `json:"MsgHash"`	COMMENT
78 more matches not shown…

Hyper-Verbose Identifiers79 hits · 108 pts

Severity	File	Line	Snippet	Context
LOW	…e-ui/scripts/vite-plugins/generateCustomTokenConfig.ts	24	export function generateCustomTokenConfig() {	CODE
LOW	…-ui/scripts/vite-plugins/generateEventIndexerConfig.ts	26	export function generateEventIndexerConfig() {	CODE
LOW	packages/bridge-ui/src/libs/token/getTokenAddresses.ts	23	export async function getTokenAddressesForAddress({	CODE
LOW	…kages/bridge-ui/src/libs/fee/recommendProcessingFee.ts	124	export function applyRelayerGasLimitPadding(messageGasLimit: bigint, isContractRecipient: boolean): bigint {	CODE
LOW	…s/bridge-ui/src/libs/bridge/estimateMessageGasLimit.ts	39	export async function estimateMessageGasLimitWithMinimum({	CODE
LOW	…s/bridge-ui/src/libs/bridge/estimateMessageGasLimit.ts	76	async function getDestinationMessageMinGasLimit({	CODE
LOW	…s/bridge-ui/src/libs/relayer/RelayerAPIService.test.ts	1279	function createReceiptWithMessageSentLog(	CODE
LOW	…s/bridge-ui/src/libs/relayer/RelayerAPIService.test.ts	1298	function createReceiptWithMessageSentLogs(	CODE
LOW	…idge-ui/src/libs/relayer/getFirstAvailableBlockInfo.ts	4	export async function getFirstAvailableBlockInfo(srcChainId: number): Promise<RelayerBlockInfo \| undefined> {	CODE
LOW	…ckages/bridge-ui/src/libs/relayer/RelayerAPIService.ts	107	export function preserveMessageIntegerPrecision(rawResponse: string): string {	CODE
LOW	…ui/src/libs/customActions/withHoverAndFocusListener.ts	1	export function withHoverAndFocusListener(	CODE
LOW	…/src/libs/customActions/closeOnEscapeOrOutsideClick.ts	19	export function closeOnEscapeOrOutsideClick(	CODE
LOW	…/SharedBridgeComponents/RecipientStep/DestOwner.svelte	90	function supersedePendingValidation() {	CODE
LOW	…/SharedBridgeComponents/RecipientStep/Recipient.svelte	87	function supersedePendingValidation() {	CODE
LOW	…/SharedBridgeComponents/RecipientStep/Recipient.svelte	95	function recipientClassificationIsCurrent(): boolean {	CODE
LOW	…/SharedBridgeComponents/RecipientStep/Recipient.svelte	165	function destOwnerClassificationIsCurrent() {	CODE
LOW	…/SharedBridgeComponents/RecipientStep/Recipient.svelte	315	function onCommittedDestOwnerChanged(committed: Maybe<Address>) {	CODE
LOW	…redBridgeComponents/ProcessingFee/ProcessingFee.svelte	207	function unselectNoneIfNotEnoughETH(method: ProcessingFeeMethod, enoughEth: boolean, zeroGasLimit: boolean) {	CODE
LOW	…dge/NFTBridgeComponents/ImportStep/ManualImport.svelte	42	function discardSelectionForNewAddress() {	CODE
LOW	…bridge-ui/src/components/Transactions/Status/status.ts	17	export function isEligibleForStorageRemoval(tx: BridgeTransaction, now: number): boolean {	CODE
LOW	…bridge-ui/src/components/Transactions/Status/status.ts	36	export function shouldShowManualClaimEntry({	CODE
LOW	…s/bridge-ui/src/components/Dialogs/ClaimDialog/mode.ts	3	export function shouldSkipMessageStatusCheck(mode: ClaimDialogMode): boolean {	CODE
LOW	…/bridge-ui/src/components/Dialogs/ClaimDialog/quota.ts	17	export async function showQuotaToastIfClaimIsBlocked(	CODE
LOW	…/bridge-ui/src/components/Dialogs/ClaimDialog/quota.ts	32	export async function showQuotaToastForClaimError(	CODE
LOW	…/bridge-ui/src/components/Dialogs/ClaimDialog/error.ts	38	export function isMessageNotReceivedError(error: unknown): boolean {	CODE
LOW	…/bridge-ui/src/components/Dialogs/ClaimDialog/error.ts	43	export function isQuotaManagerOutOfQuotaError(error: unknown): boolean {	CODE
LOW	…tracts/layer1/verifiers/sgx-verifier-daybreak-audit.md	118	function removeEnclaveAttributePolicy(bytes32 _mrEnclave) external onlyOwnerOr(registrar) {	CODE
LOW	…tracts/layer1/verifiers/sgx-verifier-daybreak-audit.md	178	function removeEnclaveAttributePolicy(bytes32 _mrEnclave) external onlyOwnerOr(registrar) {	CODE
LOW	…tracts/layer1/verifiers/sgx-verifier-daybreak-audit.md	258	function removeEnclaveAttributePolicy(bytes32 _mrEnclave) external onlyOwnerOr(registrar) {	CODE
LOW	…protocol/audit/code4rena-2024-03-taiko-final-report.md	4099	54: function verifyCertificateSignature(	CODE
LOW	…protocol/audit/code4rena-2024-03-taiko-final-report.md	4344	203: function parseAuthDataAndVerifyCertType(	CODE
LOW	…protocol/audit/code4rena-2024-03-taiko-final-report.md	4352	267: function parseCerificationChainBytes(	CODE
LOW	…protocol/audit/code4rena-2024-03-taiko-final-report.md	5047	88: function removeRevokedCertSerialNum(	CODE
LOW	…protocol/audit/code4rena-2024-03-taiko-final-report.md	7206	267: function parseCerificationChainBytes(	CODE
LOW	…protocol/audit/code4rena-2024-03-taiko-final-report.md	7477	203: function parseAuthDataAndVerifyCertType(	CODE
LOW	packages/relayer/bindings/v4/inbox/Inbox.go	541	// Solidity: function getCurrentForcedInclusionFee() view returns(uint64 feeInGwei_)	COMMENT
LOW	packages/relayer/bindings/v4/inbox/Inbox.go	558	// Solidity: function getCurrentForcedInclusionFee() view returns(uint64 feeInGwei_)	COMMENT
LOW	packages/relayer/bindings/v4/inbox/Inbox.go	565	// Solidity: function getCurrentForcedInclusionFee() view returns(uint64 feeInGwei_)	COMMENT
LOW	…/taiko-client/bindings/shasta/gen_preconf_whitelist.go	340	// Solidity: function getOperatorForCurrentEpoch() view returns(address)	COMMENT
LOW	…/taiko-client/bindings/shasta/gen_preconf_whitelist.go	357	// Solidity: function getOperatorForCurrentEpoch() view returns(address)	COMMENT
LOW	…/taiko-client/bindings/shasta/gen_preconf_whitelist.go	364	// Solidity: function getOperatorForCurrentEpoch() view returns(address)	COMMENT
LOW	…kages/taiko-client/bindings/shasta/gen_shasta_inbox.go	539	// Solidity: function getCurrentForcedInclusionFee() view returns(uint64 feeInGwei_)	COMMENT
LOW	…kages/taiko-client/bindings/shasta/gen_shasta_inbox.go	556	// Solidity: function getCurrentForcedInclusionFee() view returns(uint64 feeInGwei_)	COMMENT
LOW	…kages/taiko-client/bindings/shasta/gen_shasta_inbox.go	563	// Solidity: function getCurrentForcedInclusionFee() view returns(uint64 feeInGwei_)	COMMENT
LOW	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	247	// Solidity: function getOldestForcedInclusionDeadline() view returns(uint256)	COMMENT
LOW	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	264	// Solidity: function getOldestForcedInclusionDeadline() view returns(uint256)	COMMENT
LOW	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	271	// Solidity: function getOldestForcedInclusionDeadline() view returns(uint256)	COMMENT
LOW	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	464	// Solidity: function isOldestForcedInclusionDue() view returns(bool)	COMMENT
LOW	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	481	// Solidity: function isOldestForcedInclusionDue() view returns(bool)	COMMENT
LOW	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	488	// Solidity: function isOldestForcedInclusionDue() view returns(bool)	COMMENT
LOW⚡	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	798	// Solidity: function consumeOldestForcedInclusion(address _feeRecipient) returns((bytes32,uint64,uint64,uint32,uint32,u	COMMENT
LOW⚡	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	805	// Solidity: function consumeOldestForcedInclusion(address _feeRecipient) returns((bytes32,uint64,uint64,uint32,uint32,u	COMMENT
LOW⚡	…o-client/bindings/pacaya/gen_forced_inclusion_store.go	812	// Solidity: function consumeOldestForcedInclusion(address _feeRecipient) returns((bytes32,uint64,uint64,uint32,uint32,u	COMMENT
LOW	…/taiko-client/bindings/pacaya/gen_preconf_whitelist.go	216	// Solidity: function getOperatorCandidatesForCurrentEpoch() view returns(address[])	COMMENT
LOW⚡	…/taiko-client/bindings/pacaya/gen_preconf_whitelist.go	233	// Solidity: function getOperatorCandidatesForCurrentEpoch() view returns(address[])	COMMENT
LOW⚡	…/taiko-client/bindings/pacaya/gen_preconf_whitelist.go	240	// Solidity: function getOperatorCandidatesForCurrentEpoch() view returns(address[])	COMMENT
LOW⚡	…/taiko-client/bindings/pacaya/gen_preconf_whitelist.go	247	// Solidity: function getOperatorCandidatesForNextEpoch() view returns(address[])	COMMENT
LOW⚡	…/taiko-client/bindings/pacaya/gen_preconf_whitelist.go	264	// Solidity: function getOperatorCandidatesForNextEpoch() view returns(address[])	COMMENT
LOW⚡	…/taiko-client/bindings/pacaya/gen_preconf_whitelist.go	271	// Solidity: function getOperatorCandidatesForNextEpoch() view returns(address[])	COMMENT
LOW⚡	…/taiko-client/bindings/pacaya/gen_preconf_whitelist.go	278	// Solidity: function getOperatorForCurrentEpoch() view returns(address)	COMMENT
19 more matches not shown…

Decorative Section Separators8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	.github/dependabot.yml	22	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	25	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	44	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	46	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	68	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	71	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	92	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/dependabot.yml	110	# ---------------------------------------------------------------------------	COMMENT

Structural Annotation Overuse9 hits · 19 pts

Severity	File	Line	Snippet	Context
LOW⚡	packages/bridge-ui/src/components/Dialogs/Claim.svelte	61	// Step 1: make sure the user is on the correct chain	COMMENT
LOW⚡	packages/bridge-ui/src/components/Dialogs/Claim.svelte	64	// Step 2: Find out the type of bridge: ETHBridge, ERC20Bridge, etc	COMMENT
LOW⚡	packages/bridge-ui/src/components/Dialogs/Claim.svelte	67	// Step 3: get the user's wallet	COMMENT
LOW⚡	packages/bridge-ui/src/components/Dialogs/Claim.svelte	70	// Step 4: Call claim() method on the bridge	COMMENT
LOW⚡	…kages/protocol/script/layer1/proposals/Proposal0014.md	145	### Step 1 - Install Dependencies	COMMENT
LOW⚡	…kages/protocol/script/layer1/proposals/Proposal0014.md	151	### Step 2 - Compile	COMMENT
LOW⚡	…kages/protocol/script/layer1/proposals/Proposal0014.md	158	### Step 3 - Regenerate DAO Action Markdown	COMMENT
LOW	…kages/protocol/script/layer1/proposals/Proposal0014.md	171	### Step 4 - Dry-Run On L1	COMMENT
LOW	…protocol/audit/code4rena-2024-03-taiko-final-report.md	1973	// Step 4: Parse Quote CertChain	COMMENT

Magic Placeholder Names3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	packages/ejector/.codex/prompts/system.md	5703	let rpc_url = "wss://eth-mainnet.g.alchemy.com/v2/your-api-key";	CODE
HIGH	packages/taiko-client-rs/.claude/.claude.md	5970	let rpc_url = "wss://eth-mainnet.g.alchemy.com/v2/your-api-key";	CODE
HIGH	packages/taiko-client-rs/.codex/prompts/system.md	5703	let rpc_url = "wss://eth-mainnet.g.alchemy.com/v2/your-api-key";	CODE

Verbosity Indicators6 hits · 12 pts

Severity	File	Line	Snippet	Context
LOW	packages/bridge-ui/src/libs/wagmi/watcher.ts	68	// We need to check if the chain is supported, and if not	COMMENT
LOW⚡	packages/bridge-ui/src/components/Dialogs/Claim.svelte	61	// Step 1: make sure the user is on the correct chain	COMMENT
LOW⚡	packages/bridge-ui/src/components/Dialogs/Claim.svelte	64	// Step 2: Find out the type of bridge: ETHBridge, ERC20Bridge, etc	COMMENT
LOW⚡	packages/bridge-ui/src/components/Dialogs/Claim.svelte	67	// Step 3: get the user's wallet	COMMENT
LOW⚡	packages/bridge-ui/src/components/Dialogs/Claim.svelte	70	// Step 4: Call claim() method on the bridge	COMMENT
LOW	packages/taiko-client/prover/event_handler/proposal.go	155	// If the proving window is not expired, we need to check if the current prover is the assigned prover,	COMMENT

AI Slop Vocabulary4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/taiko-client-rs/.config/nextest.toml	7	# Give its per-proposal deadlines and harness startup time to report their errors.	COMMENT
MEDIUM	packages/taiko-client-rs/tests/deploy.sh	13	# the first simulation pass, like the Go harness and the protocol deploy scripts.	COMMENT
MEDIUM	…kages/taiko-client-rs/script/test_derivation_parity.sh	39	# L2 timestamps. Match the Go harness's past Anvil genesis for this test only.	COMMENT
MEDIUM	.github/workflows/repo--openrouter-review.yml	89	// Per-model sticky comment, matched on a hidden marker (robust	COMMENT

Self-Referential Comments4 hits · 11 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/fork-diff/fork.yaml	1	title: "Taiko-Geth Fork Diff" # Define the HTML page title	CODE
MEDIUM	…ges/supplementary-contracts/deployments/gen-layouts.sh	3	# Define the list of contracts to inspect	COMMENT
MEDIUM	packages/nfts/deployments/gen-layouts.sh	3	# Define the list of contracts to inspect	COMMENT
MEDIUM	.github/dependabot.yml	2	# This file is the single source of truth and overrides any GitHub repo settings.	COMMENT

Fake / Example Data10 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	…dge-ui/src/components/Dialogs/Shared/ReviewStep.svelte	34	<img alt="placeholder" src={placeholderUrl} class="rounded-[20px] bg-white max-w-[200px]" />	CODE
LOW	…ges/bridge-ui/src/components/NFTs/NFTInfoDialog.svelte	96	<img alt="placeholder" src={placeholderUrl} class="rounded-[20px] self-center bg-white" />	CODE
LOW	…/bridge-ui/src/components/NFTs/NFTCards/NFTCard.svelte	58	<img alt="placeholder" src={placeholderUrl} class="rounded" />	CODE
LOW	…idge-ui/src/components/NFTs/NFTList/NFTListItem.svelte	64	<img alt="placeholder" src={placeholderUrl} class="rounded bg-white" />	CODE
LOW	packages/bridge-ui/src/i18n/en.json	268	"placeholder": "Select chain",	CODE
LOW	packages/bridge-ui/src/i18n/en.json	318	"placeholder": "Add custom recipient"	CODE
LOW	packages/bridge-ui/src/i18n/en.json	325	"placeholder": "add address that should be able to manually claim...",	CODE
LOW	packages/bridge-ui/src/i18n/en.json	375	"placeholder": "Enter a valid ethereum address",	CODE
LOW	packages/bridge-ui/src/i18n/en.json	391	"placeholder": "e.g. 1 (only numbers)"	CODE
LOW	packages/bridge-ui/src/i18n/en.json	484	"placeholder": "Add custom recipient 0x…",	CODE

Modern AI Meta-Vocabulary2 hits · 4 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/protocol/docs/etna/AGENTS.md	44	Follow [`rules/README.md`](rules/README.md#adding-a-section): build the anchor list outside the repository, apply the ma	CODE
MEDIUM	packages/protocol/docs/etna/CLAUDE.md	44	Follow [`rules/README.md`](rules/README.md#adding-a-section): build the anchor list outside the repository, apply the ma	CODE

Excessive Try-Catch Wrapping2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	packages/protocol/docs/etna/rules/tools/check.py	73	except Exception:	CODE
MEDIUM	packages/protocol/docs/etna/rules/tools/check.py	68	def git_show(rev):	CODE

Deep Nesting3 hits · 3 pts

Severity	File	Line	Context
LOW	packages/protocol/docs/etna/rules/tools/check.py	77	CODE
LOW	packages/protocol/docs/etna/rules/tools/check.py	142	CODE
LOW	packages/protocol/docs/etna/rules/tools/check.py	165	CODE

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	packages/bridge-ui/src/libs/token/fetchNFTMetadata.ts	80	// TODO: implement EIP-681, for now we treat it as invalid URI	COMMENT

Redundant / Tautological Comments1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	.github/workflows/taiko-client--pages.yml	47	publish_dir: packages/taiko-client/docs # Set this to where your `index.html` is located	CODE

taikoxyz/taiko-mono

Open-Source Code Quality, Security and Technical Debt Review