0.7

Adjusted Signal

0.7

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

65.4K

Stars

Language

336.4K

Lines of Code

1.3K

Files

170

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 159 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.7/100 · LOW

Are imports declared and package/API names verified? 11 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 3.2/100 · LOW

Which changes need focused human review? 170 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 4HIGH 1MEDIUM 3LOW 162

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 170 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block128 hits · 128 pts

Severity	File	Line	Snippet	Context
LOW	traefik.sample.yml	1	################################################################	COMMENT
LOW	traefik.sample.yml	21	#	COMMENT
LOW	traefik.sample.yml	41	# Log level	COMMENT
LOW	traefik.sample.yml	61	# format: json	COMMENT
LOW	traefik.sample.yml	81		COMMENT
LOW	traefik.sample.yml	101	#api:	COMMENT
LOW	traefik.sample.yml	121	#ping:	COMMENT
LOW	traefik.sample.yml	141	# endpoint: tcp://10.10.10.10:2375	COMMENT
LOW	traefik.sample.toml	1	################################################################	COMMENT
LOW	traefik.sample.toml	21	#	COMMENT
LOW	traefik.sample.toml	41		COMMENT
LOW	traefik.sample.toml	61	#	COMMENT
LOW	traefik.sample.toml	81	#	COMMENT
LOW	traefik.sample.toml	101		COMMENT
LOW	traefik.sample.toml	121	[ping]	COMMENT
LOW	traefik.sample.toml	141	#	COMMENT
LOW	integration/gateway_api_conformance_test.go	321	// the subnet, so the top stays free.	COMMENT
LOW	integration/conf_throttling_test.go	101	// The test tries to trigger a config reload with the REST API every 200ms,	COMMENT
LOW	integration/https_test.go	1261	assert.NoError(s.T(), err, "test %s failed with: %v", test.desc, err)	COMMENT
LOW	integration/try/try.go	21	// Sleep pauses the current goroutine for at least the duration d.	COMMENT
LOW	docs/content/https/ref-acme.txt	1	# Enable ACME (Let's Encrypt): automatic SSL.	COMMENT
LOW	docs/content/https/ref-acme.txt	21	#	COMMENT
LOW	docs/content/https/ref-acme.txt	41	# Optional	COMMENT
LOW	docs/content/https/ref-acme.txt	61	# Available values : "EC256", "EC384", "RSA2048", "RSA4096", "RSA8192"	COMMENT
LOW	docs/content/https/ref-acme.txt	81	#	COMMENT
LOW	docs/content/https/ref-acme.txt	101	--certificatesresolvers.myresolver.acme.dnschallenge.provider=digitalocean	COMMENT
LOW	docs/content/https/ref-acme.txt	121	# NOT RECOMMENDED:	COMMENT
LOW	docs/content/https/ref-acme.yaml	1	certificatesResolvers:	COMMENT
LOW	docs/content/https/ref-acme.yaml	21	#	COMMENT
LOW	docs/content/https/ref-acme.yaml	41		COMMENT
LOW	docs/content/https/ref-acme.yaml	61	# Optional	COMMENT
LOW	docs/content/https/ref-acme.yaml	81	# Use a HTTP-01 ACME challenge.	COMMENT
LOW	docs/content/https/ref-acme.yaml	101	#	COMMENT
LOW	docs/content/https/ref-acme.yaml	121	# - "1.1.1.1:53"	COMMENT
LOW	docs/content/https/ref-acme.toml	1	# Enable ACME (Let's Encrypt): automatic SSL.	COMMENT
LOW	docs/content/https/ref-acme.toml	21	# Default: "https://acme-v02.api.letsencrypt.org/directory"	COMMENT
LOW	docs/content/https/ref-acme.toml	41	#	COMMENT
LOW	docs/content/https/ref-acme.toml	61	#	COMMENT
LOW	docs/content/https/ref-acme.toml	81	# Optional	COMMENT
LOW	docs/content/https/ref-acme.toml	101	#	COMMENT
LOW	docs/content/https/ref-acme.toml	121	#	COMMENT
LOW	.github/workflows/dispatch.yaml	1	# Relay: forwards pull request and issue events to traefik/ai.	COMMENT
LOW	pkg/proxy/httputil/proxy.go	101	pr.Out.URL.Path, pr.Out.URL.RawPath = JoinURLPath(target, u)	COMMENT
LOW	pkg/config/dynamic/tcp_middlewares.go	21	// The middleware closes the connection if there are already amount connections opened.	COMMENT
LOW	pkg/config/dynamic/http_config.go	401	// When set to a negative number, the cookie expires immediately.	COMMENT
LOW	pkg/config/dynamic/middlewares.go	81	// This middleware converts a gRPC web request to an HTTP/2 gRPC request.	COMMENT
LOW	pkg/config/dynamic/middlewares.go	101		COMMENT
LOW	pkg/config/dynamic/middlewares.go	121	Users Users `json:"users,omitempty" toml:"users,omitempty" yaml:"users,omitempty" loggable:"false"`	COMMENT
LOW	pkg/config/dynamic/middlewares.go	141	// MaxRequestBodyBytes defines the maximum allowed body size for the request (in bytes).	COMMENT
LOW	pkg/config/dynamic/middlewares.go	261	AllowEncodedSemicolon bool `json:"allowEncodedSemicolon,omitempty" toml:"allowEncodedSemicolon,omitempty" yaml:"allowEn	COMMENT
LOW	pkg/config/dynamic/middlewares.go	281	// StatusRewrites defines a mapping of status codes that should be returned instead of the original error status codes.	COMMENT
LOW	pkg/config/dynamic/middlewares.go	301	// +k8s:deepcopy-gen=true	COMMENT
LOW	pkg/config/dynamic/middlewares.go	361	// +k8s:deepcopy-gen=true	COMMENT
LOW	pkg/config/dynamic/middlewares.go	381	AccessControlAllowOriginListRegex []string `json:"accessControlAllowOriginListRegex,omitempty" toml:"accessControlAllow	COMMENT
LOW	pkg/config/dynamic/middlewares.go	401	// STSPreload defines whether the preload flag is appended to the Strict-Transport-Security header.	COMMENT
LOW	pkg/config/dynamic/middlewares.go	421	// PublicKey is the public key that implements HPKP to prevent MITM attacks with forged certificates.	COMMENT
LOW	pkg/config/dynamic/middlewares.go	561	// IPAllowList holds the IP allowlist middleware configuration.	COMMENT
LOW	pkg/config/dynamic/middlewares.go	581	// +kubebuilder:validation:Minimum=0	COMMENT
LOW	pkg/config/dynamic/middlewares.go	621	}	COMMENT
LOW	pkg/config/dynamic/middlewares.go	661	type Redis struct {	COMMENT
68 more matches not shown…

Hallucination Indicators4 hits · 40 pts

Severity	File	Line	Snippet	Context
CRITICAL	pkg/provider/kubernetes/ingress/kubernetes.go	324	Str("servicePort", ingress.Spec.DefaultBackend.Service.Port.String()).	CODE
CRITICAL	pkg/provider/kubernetes/ingress/kubernetes.go	333	Str("servicePort", ingress.Spec.DefaultBackend.Service.Port.String()).	CODE
CRITICAL	pkg/provider/kubernetes/crd/kubernetes_http.go	852	failoverKey := makeSafeKey(tService.Namespace, tService.Name, roleFailover, namespaceOrParentNamespace(tService.Spec.Fa	CODE
CRITICAL	pkg/provider/kubernetes/crd/kubernetes_http.go	858	fallbackKey := makeSafeKey(tService.Namespace, tService.Name, roleFallback, namespaceOrParentNamespace(tService.Spec.Fa	CODE

Structural Annotation Overuse16 hits · 30 pts

Severity	File	Line	Snippet	Context
LOW	docs/content/migrate/v2-to-v3.md	27	## Step 1: Prepare Configurations and Test v3	COMMENT
LOW	docs/content/migrate/v2-to-v3.md	72	## Step 2: Migrate Production Instances to Traefik v3	COMMENT
LOW	docs/content/migrate/v2-to-v3.md	110	## Step 3: Progressively Migrate Routing Configuration	COMMENT
LOW	docs/content/migrate/nginx-to-traefik.md	150	## Step 0: Migrate Your Global ConfigMap Settings	COMMENT
LOW	docs/content/migrate/nginx-to-traefik.md	224	## Step 1: Install Traefik Alongside NGINX	COMMENT
LOW	docs/content/migrate/nginx-to-traefik.md	292	## Step 2: Verify Traefik Is Handling Traffic	COMMENT
LOW	docs/content/migrate/nginx-to-traefik.md	338	## Step 3: Shift Traffic to Traefik	COMMENT
LOW	docs/content/migrate/nginx-to-traefik.md	636	## Step 4: Uninstall Ingress NGINX Controller	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	892	// Step 1: Client sends PostgresStartTLSMsg (SSLRequest).	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	896	// Step 2: Client receives PostgresStartTLSReply ('S').	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	902	// Step 3: Client performs TLS handshake.	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	910	// Step 4: Read the response from the handler through the TLS connection.	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	969	// Step 1: Client sends PostgresStartTLSMsg (SSLRequest).	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	973	// Step 2: Client receives PostgresStartTLSReply ('S').	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	979	// Step 3: Client performs TLS handshake.	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	987	// Step 4: Read the response from the handler through the TLS connection.	COMMENT

Verbosity Indicators8 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW⚡	pkg/server/router/tcp/router_test.go	892	// Step 1: Client sends PostgresStartTLSMsg (SSLRequest).	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	896	// Step 2: Client receives PostgresStartTLSReply ('S').	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	902	// Step 3: Client performs TLS handshake.	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	910	// Step 4: Read the response from the handler through the TLS connection.	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	969	// Step 1: Client sends PostgresStartTLSMsg (SSLRequest).	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	973	// Step 2: Client receives PostgresStartTLSReply ('S').	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	979	// Step 3: Client performs TLS handshake.	COMMENT
LOW⚡	pkg/server/router/tcp/router_test.go	987	// Step 4: Read the response from the handler through the TLS connection.	COMMENT

Fake / Example Data7 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW⚡	pkg/redactor/testdata/example.json	31	"Email": "foo@bar.com",	CODE
LOW⚡	pkg/redactor/testdata/example.json	34	"Main": "foo@bar.com",	CODE
LOW⚡	pkg/redactor/testdata/example.json	38	"Main": "foo@bar.com",	CODE
LOW	pkg/middlewares/auth/forward_test.go	69	w.Header().Set("X-Auth-User", "user@example.com")	CODE
LOW	pkg/middlewares/auth/forward_test.go	81	assert.Equal(t, "user@example.com", r.Header.Get("X-Auth-User"))	CODE
LOW	…lewares/passtlsclientcert/pass_tls_client_cert_test.go	635	EmailAddresses: []string{"test@test.com", "test2@test.com"},	CODE
LOW	…lewares/passtlsclientcert/pass_tls_client_cert_test.go	639	expected: []string{"foo", "bar", "test@test.com", "test2@test.com", "10.0.0.1", "10.0.0.2", urlFoo.String(), urlBar.S	CODE

Slop Phrases2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	pkg/middlewares/ratelimiter/rate_limiter_test.go	334	// Feel free to adjust wrt to the load on e.g. the CI.	COMMENT
MEDIUM	pkg/middlewares/ratelimiter/rate_limiter_test.go	541	// Feel free to adjust wrt to the load on e.g. the CI.	COMMENT

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	docs/content/contributing/submitting-security-issues.md	146	Security reports that are directly generated by AI/LLM tools without proper human validation will be **closed immedi	CODE

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	docs/scripts/lint-yaml.sh	20	# Check if file starts with '---'	COMMENT
LOW	docs/scripts/lint-yaml.sh	41	# Check if any errors were found	COMMENT

Modern AI Meta-Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	…nce/install-configuration/observability/healthcheck.md	15	This can be used with [HEALTHCHECK](https://docs.docker.com/engine/reference/builder/#healthcheck) instruction or any ot	CODE

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	webui/public/mockServiceWorker.js	123	async function handleRequest(event, requestId) {	CODE

traefik/traefik

Open-Source Code Quality, Security and Technical Debt Review