0.7

Adjusted Signal

0.7

Raw Pattern Score

100%

Time Factor

2026-11-01

Last Push

9.7K

Stars

Shell

Language

147.7K

Lines of Code

145

Files

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 35 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 2 finding(s).

Agent Over-Engineering Ratio 1.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 47 finding(s).

PR Review Velocity Impact 3.2/100 · LOW

Which changes need focused human review? 83 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 6LOW 77

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 83 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Excessive Try-Catch Wrapping45 hits · 47 pts

Severity	File	Line	Snippet	Context
LOW	docker/_tests/tests/elasticpot.sh	160	except Exception as exc:	CODE
LOW	docker/_tests/tests/medpot.sh	183	except Exception as exc:	CODE
LOW	docker/_tests/tests/medpot.sh	234	except Exception as exc:	CODE
MEDIUM	docker/_tests/tests/medpot.sh	231	def decode_payload(encoded):	CODE
LOW	docker/_tests/tests/heralding.sh	197	except Exception as exc:	CODE
LOW	docker/_tests/tests/heralding.sh	249	except Exception:	CODE
LOW	docker/_tests/tests/heralding.sh	372	except Exception:	CODE
LOW	docker/_tests/tests/conpot.sh	463	except Exception as exc:	CODE
LOW	docker/_tests/tests/conpot.sh	500	except Exception as exc:	CODE
LOW	docker/_tests/tests/conpot.sh	536	except Exception as exc:	CODE
LOW	docker/_tests/tests/conpot.sh	555	except Exception as exc:	CODE
LOW	docker/_tests/tests/conpot.sh	582	except Exception as exc:	CODE
LOW	docker/_tests/tests/ciscoasa.sh	196	except Exception as exc:	CODE
LOW	docker/_tests/tests/hellpot.sh	181	except Exception as exc:	CODE
LOW	docker/_tests/tests/hellpot.sh	266	except Exception as exc:	CODE
LOW	docker/_tests/tests/honeypots.sh	110	except Exception as exc:	CODE
LOW	docker/_tests/tests/honeypots.sh	284	except Exception as exc:	CODE
LOW	docker/_tests/tests/honeypots.sh	322	except Exception:	CODE
LOW	docker/_tests/tests/honeypots.sh	349	except Exception:	CODE
LOW	docker/_tests/tests/honeypots.sh	364	except Exception:	CODE
LOW	docker/_tests/tests/honeypots.sh	377	except Exception:	CODE
LOW	docker/_tests/tests/honeypots.sh	514	except Exception as exc:	CODE
LOW	docker/_tests/tests/tanner.sh	354	except Exception as exc:	CODE
LOW	docker/_tests/tests/tanner.sh	436	except Exception as exc:	CODE
LOW	docker/_tests/tests/tanner.sh	489	except Exception as exc:	CODE
LOW	docker/_tests/tests/cowrie.sh	217	except Exception as exc:	CODE
LOW	docker/_tests/tests/cowrie.sh	329	except Exception as exc:	CODE
LOW	docker/_tests/tests/dicompot.sh	445	except Exception:	CODE
LOW	docker/_tests/tests/miniprint.sh	171	except Exception as exc:	CODE
LOW	docker/_tests/tests/miniprint.sh	238	except Exception as exc:	CODE
LOW	docker/_tests/tests/sentrypeer.sh	237	except Exception as exc:	CODE
LOW	docker/_tests/tests/rdphoneypot.sh	170	except Exception as exc:	CODE
LOW	docker/_tests/tests/mailoney.sh	237	except Exception as exc:	CODE
LOW	docker/_tests/tests/go-pot.sh	176	except Exception as exc:	CODE
LOW	docker/_tests/tests/redishoneypot.sh	215	except Exception as exc:	CODE
LOW	docker/_tests/tests/h0neytr4p.sh	242	except Exception as exc:	CODE
LOW	docker/_tests/tests/wordpot.sh	190	except Exception as exc:	CODE
LOW	docker/_tests/tests/honeyaml.sh	341	except Exception as exc:	CODE
LOW	docker/_tests/tests/citrixhoneypot.sh	167	except Exception as exc:	CODE
LOW	docker/_tests/tests/dionaea.sh	423	except Exception as exc:	CODE
MEDIUM	docker/_tests/tests/dionaea.sh	212	def read_proc(path):	CODE
LOW	docker/_tests/tests/ddospot.sh	223	except Exception as exc:	CODE
LOW	docker/_tests/tests/ddospot.sh	275	except Exception as exc:	CODE
LOW	docker/_tests/tests/ddospot.sh	311	except Exception as exc:	CODE
LOW	docker/_tests/tests/ddospot.sh	356	except Exception as exc:	CODE

Redundant / Tautological Comments14 hits · 20 pts

Severity	File	Line	Snippet	Context
LOW	uninstall.sh	54	# Check if running with root privileges	COMMENT
LOW	uninstall.sh	62	# Check if running on a supported distribution	COMMENT
LOW	install.sh	286	# Check if running with root privileges	COMMENT
LOW	install.sh	294	# Check if running on a supported distribution	COMMENT
LOW	install.sh	306	# Check if running on a supported distribution version. T-Pot follows the	COMMENT
LOW	restore.sh	59	# Check if running with root privileges	COMMENT
LOW	update.sh	126	# Check if running with root privileges	COMMENT
LOW	deploy.sh	21	# Check if the script is running in a HIVE installation	COMMENT
LOW	deploy.sh	29	# Check if running on a supported distribution	COMMENT
LOW	deploy.sh	72	# Check if ssh key has been deployed	COMMENT
LOW	docker/_builder/builder.sh	20	UPLOAD_BANDWIDTH=40mbit # Set this to max 90% of available upload bandwidth	CODE
LOW	docker/_builder/builder.sh	97	# Check if 'mybuilder' exists, and ensure it's running with bootstrap	COMMENT
LOW	docker/_builder/setup_builder.sh	9	# Check if the user is in the docker group	COMMENT
LOW	docker/_builder/setup_builder.sh	26	# Check if the mybuilder exists and is running	COMMENT

Over-Commented Block16 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	install.sh	101	sudo_password_required() {	COMMENT
LOW	docker/tanner/docker-compose.yml	61	# restart: always	COMMENT
LOW	docker/p0f/alloc-inl.h	261	}	COMMENT
LOW	docker/p0f/process.c	21	#include <sys/socket.h>	COMMENT
LOW	docker/p0f/fp_http.c	21	#include <sys/types.h>	COMMENT
LOW	docker/p0f/config.h	41	# define MAX_CONN 1000	COMMENT
LOW	docker/p0f/types.h	21	typedef int8_t s8;	COMMENT
LOW	docker/p0f/types.h	41	# define RD32(_val) ((u32)_val)	COMMENT
LOW	docker/p0f/p0f.c	21	#include <pwd.h>	COMMENT
LOW	docker/p0f/p0f.c	41	# include <net/bpf.h>	COMMENT
LOW	docker/p0f/process.h	61	#define QUIRK_DF 0x00000002 /* DF used (probably PMTUD) */	COMMENT
LOW	docker/p0f/process.h	141		COMMENT
LOW	docker/p0f/readfp.c	21	#include <netinet/in.h>	COMMENT
LOW	docker/p0f/tools/p0f-sendsyn6.c	21	#include <stdio.h>	COMMENT
LOW	docker/p0f/tools/p0f-client.c	21		COMMENT
LOW	docker/p0f/tools/p0f-sendsyn.c	21	#include <netdb.h>	COMMENT

Self-Referential Comments3 hits · 8 pts

Severity	File	Line	Snippet	Context
MEDIUM	update.sh	714	echo "### Create a backup, just in case ... "	CODE
MEDIUM	deploy.sh	91	# Create a random SENSOR user name that is easily readable	COMMENT
MEDIUM	deploy.sh	94	# Create a random password	COMMENT

Decorative Section Separators1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	docker/p0f/build.sh	4	# ------------------	COMMENT

Fake / Example Data2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	docker/_tests/tests/mailoney.sh	158	sender = f"sender-{token}@example.org"	CODE
LOW	docker/_tests/tests/mailoney.sh	276	sender = f"sender-{token}@example.org"	CODE

Hyper-Verbose Identifiers1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	docker/_tests/tests/miniprint.sh	355	def validate_connection_fields(events):	CODE

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	compose/customizer.py	53		CODE

telekom-security/tpotce

Open-Source Code Quality, Security and Technical Debt Review