3.1

Adjusted Signal

3.1

Raw Pattern Score

100%

Time Factor

2026-10-29

Last Push

9.6K

Stars

TypeScript

Language

109.4K

Lines of Code

608

Files

204

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 144 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 9.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 92 finding(s).

PR Review Velocity Impact 13.8/100 · LOW

Which changes need focused human review? 204 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 60LOW 144

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 204 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators59 hits · 188 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	run-sphere.sh	17	# ── App identity ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	run-sphere.sh	22	# ── App networking ───────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	run-sphere.sh	31	# ── Source ssl-manager run library ───────────────────────────────────────────	COMMENT
MEDIUM⚡	run-sphere.sh	41	# ── App hooks ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	109	# ── Legacy single-URL compat ─────────────────────────────────────────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	117	# ── Fail-closed (#351) ───────────────────────────────────────────────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	200	# ── Subscription flag sanity ─────────────────────────────────────────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	213	# ── AGGREGATOR_API_KEY requirement (conditional on subscriptions) ─────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	230	# ── Build the substitution program ───────────────────────────────────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	244	# ── Runtime config global (window.__SPHERE_RUNTIME_CONFIG__) ────────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	291	# ── Announce the capability set ──────────────────────────────────────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	338	# ── Apply over the built JS (one sed program, all files) ─────────────────────	COMMENT
MEDIUM	deploy/runtime-config.sh	345	# ── Content-Security-Policy ──────────────────────────────────────────────────	COMMENT
MEDIUM	deploy/entrypoint.sh	4	# ── Export env so ssl-setup inherits our defaults ────────────────────────────	COMMENT
MEDIUM	deploy/entrypoint.sh	8	# ── Normalize SSL_REQUIRED (fail closed on unknown values) ───────────────────	COMMENT
MEDIUM	deploy/entrypoint.sh	23	# ── Validate env vars before use in nginx config ────────────────────────────	COMMENT
MEDIUM	deploy/entrypoint.sh	53	# ── SSL setup (certs + HAProxy registration) ─────────────────────────────────	COMMENT
MEDIUM	deploy/entrypoint.sh	90	# ── Generate nginx config ────────────────────────────────────────────────────	COMMENT
MEDIUM	deploy/entrypoint.sh	181	# ── Graceful shutdown ────────────────────────────────────────────────────────	COMMENT
MEDIUM	deploy/entrypoint.sh	213	# ── Runtime public config ────────────────────────────────────────────────────	COMMENT
MEDIUM	deploy/entrypoint.sh	220	# ── Start nginx ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/e2e/two-profile-smoke.spec.ts	229	// ── Onboard both profiles (A funds itself via open minting) ───────────	COMMENT
MEDIUM⚡	tests/e2e/two-profile-smoke.spec.ts	234	// ── A reloads (F5): minted balance must survive the full pull ─────────	COMMENT
MEDIUM⚡	tests/e2e/two-profile-smoke.spec.ts	237	// ── A sends 10 UCT to @B (mailbox delivery + B's claim/handoff) ───────	COMMENT
MEDIUM	tests/e2e/two-profile-smoke.spec.ts	254	// ── B reloads (F5): received balance must survive the full pull ───────	COMMENT
MEDIUM	tests/e2e/two-profile-smoke.spec.ts	257	// ── B requests 5 UCT from @A (§16 payment request) ────────────────────	COMMENT
MEDIUM	tests/e2e/two-profile-smoke.spec.ts	272	// ── A pays it (payPaymentRequest: send + linked 'paid' respond) ───────	COMMENT
MEDIUM	tests/e2e/two-profile-smoke.spec.ts	278	// ── Convergence: B holds 15 UCT, A holds 85 ───────────────────────────	COMMENT
MEDIUM	tests/e2e/perf-many-tokens.spec.ts	93	// ── onboard ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tests/e2e/perf-many-tokens.spec.ts	135	// ── top up N times: each mint is one more UCT source token ────────────────	COMMENT
MEDIUM	tests/e2e/perf-many-tokens.spec.ts	145	// ── send the whole balance, which must consume every token ────────────────	COMMENT
MEDIUM	public/boot.js	18	// ── GitHub Pages SPA path restore ────────────────────────────────────────	COMMENT
MEDIUM	public/boot.js	35	// ── Theme, applied before first paint ────────────────────────────────────	COMMENT
MEDIUM	src/components/desktop/DesktopShortcuts.tsx	30	// ── Sortable wrappers ──────────────────────────────────────────────────	COMMENT
MEDIUM	src/hooks/useInstalledProjects.ts	19	// ── Local (offline / unauthenticated) cache of slugs ──────────────────	COMMENT
MEDIUM	src/hooks/useInstalledProjects.ts	54	// ── Hook ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/hooks/useInstalledProjects.ts	117	// ── Mutations ───────────────────────────────────────────────────────	COMMENT
MEDIUM	src/pages/ExplorePage.tsx	24	// ─── Constants ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/pages/ExplorePage.tsx	50	// ─── Featured Carousel ────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/pages/ExplorePage.tsx	67	// ─── Hero stat ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/pages/ExplorePage.tsx	89	// ─── ExplorePage ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/pages/ProjectPage.tsx	22	// ── Helpers ──────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/pages/ProjectPage.tsx	31	// ── Drag-scrollable media strip ──────────────────────────────────────	COMMENT
MEDIUM	src/pages/ProjectPage.tsx	104	// ── Lightbox with keyboard + thumbnails ───────────────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	14	// ── Types ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	51	// ── JWT storage ───────────────────────────────────────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	65	// ── Sign-in ───────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	121	// ── Authenticated fetch ───────────────────────────────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	151	// ── Installed-apps endpoints ──────────────────────────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	187	// ── Ratings: recommend / helpful voting / replies ────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	226	// ── Helpful voting on a specific rating ──────────────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	243	// ── Replies (Telegram-style comments on a review) ────────────────────	COMMENT
MEDIUM	src/services/userApi.ts	295	// ── Moderation: report content, appeal a hide ────────────────────────	COMMENT
MEDIUM	src/services/marketplaceApi.ts	5	// ── Types ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/services/marketplaceApi.ts	88	// ── Fetch helpers ─────────────────────────────────────────────────────	COMMENT
MEDIUM	src/services/marketplaceApi.ts	108	// ── API functions ─────────────────────────────────────────────────────	COMMENT
MEDIUM	src/services/marketplaceApi.ts	159	// ── Public project metrics (live user/install/completion counts) ──────	COMMENT
MEDIUM	src/services/marketplaceApi.ts	216	// ── Public project ratings (Steam-style reviews) ──────────────────────	COMMENT
MEDIUM	src/services/marketplaceApi.ts	250	// ── Public reply thread for a single rating ───────────────────────────	COMMENT

Over-Commented Block101 hits · 100 pts

Severity	File	Line	Snippet	Context
LOW	run-sphere.sh	1	#!/bin/bash	COMMENT
LOW	docker-compose.yml	21	# Subscriptions (SGW) ship dormant; set exactly "true" to turn on.	COMMENT
LOW	deploy/runtime-config.sh	1	#!/bin/sh	COMMENT
LOW	deploy/runtime-config.sh	21	# SPHERE_API_URL quest-api base (marketplace / user / maintenance)	COMMENT
LOW	deploy/runtime-config.sh	41	# ship the in-app invitation instead.	COMMENT
LOW	deploy/runtime-config.sh	61	# app. Not a secret; the project's allowlist names the	COMMENT
LOW	deploy/runtime-config.sh	81	#	COMMENT
LOW	deploy/runtime-config.sh	101	#	COMMENT
LOW	deploy/runtime-config.sh	141	exit 1 ;;	COMMENT
LOW	deploy/runtime-config.sh	181	# every browser, on every network, whatever REQUIRE_WALLET_API says — which is	COMMENT
LOW	deploy/runtime-config.sh	201	# The app enables these flags only on EXACTLY 'true' (src/config/subscription.ts),	COMMENT
LOW	deploy/runtime-config.sh	241	add __RUNTIME_DEV_PORTAL_URL__ "${DEV_PORTAL_URL-}"	COMMENT
LOW	deploy/runtime-config.sh	341	find "$WEBROOT" -type f -name '*.js' -exec sed -i -f "$SED_SCRIPT" {} \;	COMMENT
LOW	deploy/runtime-config.sh	381	CONNECT="$CONNECT wss://market-api.unicity.network"	COMMENT
LOW	tests/unit/chat/DMChatSection.peerParam.test.tsx	1	import { describe, it, expect, vi, beforeEach } from 'vitest';	COMMENT
LOW	tests/unit/chat/DMChatSection.peerParam.test.tsx	21	// and they belong here, against the component a user can actually hit.	COMMENT
LOW	tests/unit/components/transactionHistoryModal.test.tsx	1	import { describe, it, expect, vi, beforeEach } from 'vitest';	COMMENT
LOW	tests/unit/components/swapModalRates.test.tsx	1	import { describe, it, expect, vi, beforeEach } from 'vitest';	COMMENT
LOW	tests/unit/components/installedProjectIconSdk.test.tsx	61	expect(openTab).toHaveBeenCalledWith('custom', { url: 'https://app.example.com', label: 'Agent Guild' });	COMMENT
LOW	tests/unit/components/installedProjectIconSdk.test.tsx	201	});	COMMENT
LOW	tests/unit/sdk/gatewayErrors.test.ts	81		COMMENT
LOW	public/boot.js	41	// uses STORAGE_KEYS.THEME ('sphere_theme'), so the lookup always missed — and the	COMMENT
LOW	public/runtime-config.js	1	// Default runtime config for dev / GitHub Pages builds: empty, so values	COMMENT
LOW	.github/workflows/docker-build.yml	41	push: true	COMMENT
LOW	.github/workflows/deploy-pages-branch.yml	21	# just-merged deploy was silently cancelled and staging kept the old bundle.	COMMENT
LOW	.github/workflows/deploy-pages-branch.yml	41	# So every writer now retries instead: the two peaceiris steps run again on	COMMENT
LOW	.github/workflows/deploy-pages-branch.yml	81	# Through env, not ${{ }} interpolation — see the deploy job's copy: a branch	COMMENT
LOW	.github/workflows/deploy-pages-branch.yml	141		COMMENT
LOW	.github/workflows/deploy-pages-branch.yml	161	# selectable, which is exactly the switch a subscription/payment fix	COMMENT
LOW	.github/workflows/deploy-pages-branch.yml	181	# SUBSCRIPTION_ENABLED=true, PAID_PLANS_ENABLED=false). Staging feeds	COMMENT
LOW	.github/workflows/deploy-pages-branch.yml	201	# payment. The wallet says so on the screen — the network chip, the	COMMENT
LOW	.github/workflows/deploy-pages-branch.yml	221	# every branch push would report errors/replays against the shared	COMMENT
LOW	.github/workflows/docker-validate.yml	121	\|\| { echo "ERROR: index.html does not load runtime-config.js"; exit 1; }	COMMENT
LOW	src/config/storageKeys.ts	41	// wallet-api device label — one session row per (owner, device) on the	COMMENT
LOW	src/config/storageKeys.ts	61	// so cold-storage tampering can't silently disable/shorten it. Written by	COMMENT
LOW	src/config/storageKeys.ts	121		COMMENT
LOW	src/config/network.ts	501	localStorage.setItem(STORAGE_KEYS.ACTIVE_NETWORK, id);	COMMENT
LOW	src/config/walletApiNetworks.ts	81	const key = RUNTIME_KEY[network];	COMMENT
LOW	src/utils/sentryScrub.ts	21	// 64+ hex chars: the shape of a raw private key (also matches sha256/txids —	COMMENT
LOW	src/utils/sentryScrub.ts	121		COMMENT
LOW	src/components/upgrade/PlanScreen.tsx	561	// waiting the record out. The way out is switching back, which	COMMENT
LOW	src/components/upgrade/PlanScreen.tsx	781	if (!selectedPlan) return;	COMMENT
LOW	src/components/upgrade/NetworkSwitchPlanOffer.tsx	61	// true there and the disarm above never sees it; that onboarding shows its	COMMENT
LOW	src/components/chat/dm/DMChatSection.tsx	61	});	COMMENT
LOW	src/components/marketplace/ProjectCard.tsx	21	// A chat agent is never installable — the API rejects an install call for	COMMENT
LOW	src/components/marketplace/ProjectCard.tsx	41	// mutually exclusive (both key off the same `type` field), so at most one	COMMENT
LOW	src/components/marketplace/ProjectReviewsSection.tsx	81	const [appealComment, setAppealComment] = useState('');	COMMENT
LOW	src/components/agents/WalletRequiredBlocker.tsx	21		COMMENT
LOW	src/components/agents/IframeAgent.tsx	141	// Teardown. Its cleanup is the ONLY place the host and transport are destroyed	COMMENT
LOW	src/components/desktop/InstalledProjectIcon.tsx	41	setMenuOpen(false);	COMMENT
LOW	src/components/desktop/InstalledProjectIcon.tsx	61	// migration was written to retire, and do it from stale localStorage data	COMMENT
LOW	src/components/desktop/InstalledProjectIcon.tsx	101	// an entry that calls it — a non-https value gets no menu item at all,	COMMENT
LOW	src/components/desktop/DesktopLayout.tsx	61	navigate(`/agents/custom?url=${encodeURIComponent(url)}`);	COMMENT
LOW	src/components/wallet/L3/modals/SendModal.tsx	121	// Leaving confirm because the SEND started is the one exit that must NOT	COMMENT
LOW	src/components/wallet/L3/modals/SendModal.tsx	141	/** Only 'converging' finishes on its own (sphere-sdk 0.19.0); see KeepOpenKind. */	COMMENT
LOW	src/components/wallet/L3/modals/SendModal.tsx	201	},	COMMENT
LOW	…mponents/wallet/L3/hooks/useIncomingPaymentRequests.ts	141		COMMENT
LOW	…mponents/wallet/L3/hooks/useIncomingPaymentRequests.ts	161	// CONTRACT DEPENDENCY: non-payability here is the SDK's job, not this	COMMENT
LOW	…omponents/wallet/onboarding/hooks/useOnboardingFlow.ts	201	// Step management — start at "nametag" only if wallet is fully finalized but missing nametag	COMMENT
LOW	…omponents/wallet/onboarding/hooks/useOnboardingFlow.ts	241		COMMENT
41 more matches not shown…

Hyper-Verbose Identifiers33 hits · 33 pts

Severity	File	Line	Snippet	Context
LOW	tests/unit/config/network.test.ts	573	function blockSessionStorageWrites() {	CODE
LOW	tests/unit/config/network.test.ts	590	function breakSessionStorageGetter(): () => void {	CODE
LOW	tests/unit/components/importPassword.test.tsx	77	async function driveRestoreToSetPassword() {	CODE
LOW	tests/unit/components/importPassword.test.tsx	179	async function selectAndImportEncryptedFile() {	CODE
LOW	src/sphere-sdk-browser.d.ts	67	export function createUnicityAggregatorProvider(	CODE
LOW	src/config/storageKeys.ts	110	export function getOrCreateWalletApiDeviceId(): string {	CODE
LOW	src/config/storageKeys.ts	110	export function getOrCreateWalletApiDeviceId(): string {	CODE
LOW	src/config/network.ts	179	function forgetRetiredStoredNetwork(): void {	CODE
LOW	src/config/network.ts	469	export function applyClearedNetworkChoice(opts: { reload?: () => void } = {}): boolean {	CODE
LOW	src/config/networkCapabilities.ts	92	export function salesOptInMatchesTestMoney(network: string): boolean {	CODE
LOW	src/config/networkCapabilities.ts	113	export function allowsSharedAggregatorKey(network: string): boolean {	CODE
LOW	src/config/subscription.ts	29	function resolveSubscriptionApiUrl(): string {	CODE
LOW	src/utils/network-switch-prompts.ts	193	export function clearSwitchPromptSuppression(origin: string): boolean {	CODE
LOW	src/components/chat/utils/groupChatHelpers.ts	26	export function getGroupFormattedLastMessageTime(group: GroupData): string {	CODE
LOW	src/components/chat/utils/groupChatHelpers.ts	65	export function getMessageSenderDisplayName(message: GroupMessageData): string {	CODE
LOW	src/components/layout/PendingTransfersIndicator.tsx	41	export function PendingTransfersIndicator() {	CODE
LOW	src/components/layout/WalletApiSessionIndicator.tsx	18	export function WalletApiSessionIndicator() {	CODE
LOW	src/components/wallet/shared/nft/NftDetails.tsx	304	export function NftResolvedContentDetails({ content, fallbackTitle }: NftContentDetailsProps) {	CODE
LOW	…llet/onboarding/hooks/useOnboardingConnectionStatus.ts	23	export function useOnboardingConnectionStatus() {	CODE
LOW	src/components/connect/PaymentRequestIntentModal.tsx	38	export function PaymentRequestIntentModal({	CODE
LOW	src/components/connect/useNetworkMismatchHandler.ts	134	export function createNetworkMismatchHandler(deps: NetworkMismatchDeps): MismatchHandler {	CODE
LOW	src/components/connect/useNetworkMismatchHandler.ts	234	export function useNetworkMismatchHandler(): MakeNetworkMismatchHandler {	CODE
LOW	src/components/connect/useNetworkMismatchHandler.ts	265	export function claimGraceForSilentHandshake(host: ConnectHost, origin: string): boolean {	CODE
LOW	src/components/connect/rejectionMessage.ts	62	function describeProtocolRejection(data: Record<string, unknown>): string {	CODE
LOW	src/components/connect/rejectionMessage.ts	171	export function connectRejectionDiagnostics(	CODE
LOW	src/sdk/SphereProvider.tsx	214	function readCurrentAutoLockMinutes(oldPassword: string \| null): AutoLockValue {	CODE
LOW	src/sdk/errors.ts	200	function isJsonRpcNetworkErrorShape(	CODE
LOW	src/sdk/hooks/payments/useTransfer.ts	32	function disambiguateGatewayAuthError(openUpgrade: (reason?: UpgradeReason) => void): void {	CODE
LOW	src/hooks/useKeyboardScrollIntoView.ts	13	export function useKeyboardScrollIntoView(_inputRef: RefObject<HTMLElement \| null>) {	CODE
LOW	src/hooks/useMarketplace.ts	188	export function useProjectMetricsByGroups(groups: string[][]) {	CODE
LOW	src/modules/bridge/BridgeScreen.tsx	442	function byAssetThenNetwork(a: BridgeAsset, b: BridgeAsset): number {	CODE
LOW	src/services/announcementsClient.ts	41	export function createAnnouncementsClient(getSphere: () => Sphere \| null): AnnouncementsClient {	CODE
LOW	src/services/telemetry.ts	94	export function getOrCreateClientId(): string {	CODE

Verbosity Indicators4 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/unit/modules/bridge/BridgeScreen.test.tsx	48	// Step 0: which way. Both directions are offered; out counts the assets with a return path.	COMMENT
LOW⚡	tests/unit/modules/bridge/BridgeScreen.test.tsx	53	// Step 1: every asset with its network, ordered by asset then network, tagged as testnets.	COMMENT
LOW	tests/unit/modules/bridge/BridgeScreen.test.tsx	65	// Step 2: the form keeps the choice in view and names the signer.	COMMENT
LOW	…omponents/wallet/onboarding/hooks/useOnboardingFlow.ts	688	// Step 1: Check nametag availability via Nostr (no wallet needed)	COMMENT

Structural Annotation Overuse4 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/unit/modules/bridge/BridgeScreen.test.tsx	48	// Step 0: which way. Both directions are offered; out counts the assets with a return path.	COMMENT
LOW⚡	tests/unit/modules/bridge/BridgeScreen.test.tsx	53	// Step 1: every asset with its network, ordered by asset then network, tagged as testnets.	COMMENT
LOW	tests/unit/modules/bridge/BridgeScreen.test.tsx	65	// Step 2: the form keeps the choice in view and names the signer.	COMMENT
LOW	…omponents/wallet/onboarding/hooks/useOnboardingFlow.ts	688	// Step 1: Check nametag availability via Nostr (no wallet needed)	COMMENT

Modern AI Meta-Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	package-lock.json	1776	"resolved": "https://registry.npmjs.org/@reown/appkit-scaffold-ui/-/appkit-scaffold-ui-1.8.19.tgz",	CODE

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	run-sphere.sh	5	# Usage:	COMMENT

Fake / Example Data1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	tests/unit/utils/sentryScrub.test.ts	51	expect(scrubText('Auth failed for user@example.com')).not.toContain('user@example.com');	CODE

unicity-sphere/sphere

Open-Source Code Quality, Security and Technical Debt Review