1.7

Adjusted Signal

1.7

Raw Pattern Score

100%

Time Factor

2026-07-25

Last Push

73.7K

Stars

Rust

Language

510.8K

Lines of Code

2.8K

Files

775

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 760 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 11 finding(s).

Agent Over-Engineering Ratio 0.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 26 finding(s).

PR Review Velocity Impact 8.2/100 · LOW

Which changes need focused human review? 775 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 9HIGH 0MEDIUM 12LOW 754

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 775 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block720 hits · 717 pts

Severity	File	Line	Snippet	Context
LOW	Cargo.toml	581	# # https://aptos.dev/en/build/sdks/rust-sdk	COMMENT
LOW	ts-sdk-evm/src/internal/zkgmClient.ts	301	// Effect.flatMap(	COMMENT
LOW	sui/muno/Move.toml	21	muno = "0x0"	COMMENT
LOW	sui/u/Move.toml	21	u = "0x0"	COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	301		COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	321	// use unionlabs::{encoding::EncodeAs, google::protobuf::any::Any};	COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	341	// format!(	COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	361		COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	381	// &fs::read_to_string("src/test/substitute_consensus_state.json").unwrap(),	COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	401	// &wasm_client_state,	COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	421	// )	COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	441	// fn migrate_client_store_fails_when_invalid_change() {	COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	461	// };	COMMENT
LOW	cosmwasm/lightclient/gno/src/client.rs	481	// }	COMMENT
LOW	cosmwasm/lightclient/movement/src/lib.rs	1	pub mod client;	COMMENT
LOW	cosmwasm/lightclient/movement/src/lib.rs	21	// // )	COMMENT
LOW	cosmwasm/lightclient/movement/src/lib.rs	41	// let state_proof: StateProof = serde_json::from_str(	COMMENT
LOW	cosmwasm/lightclient/movement/src/lib.rs	61		COMMENT
LOW	cosmwasm/lightclient/movement/src/lib.rs	81	// );	COMMENT
LOW	cosmwasm/lightclient/attested/src/execute.rs	121	Ok(Response::new().add_event(event))	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	401	.chain(key)	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	421	// FROZEN_HEIGHT,	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	441	// );	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	461	// );	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	481	// .unwrap(),	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	501	// save_states_to_migrate_store(	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	521	// deps.as_ref(),	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	541		COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	561	// s.upgrade_path.push(String::new()),	COMMENT
LOW	cosmwasm/lightclient/tendermint/src/client.rs	581	// );	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	321	}	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	341		COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	361	// )	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	381	// WasmClientState,	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	401	// }	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	421	// );	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	441	// );	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	461	// wasm_consensus_state,	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	481	// &state,	COMMENT
LOW	cosmwasm/lightclient/cometbls/src/client.rs	501		COMMENT
LOW	cosmwasm/lightclient/berachain/src/errors.rs	81		COMMENT
LOW	cosmwasm/cw20-base/src/msg.rs	41	#[cw_serde]	COMMENT
LOW	cosmwasm/deployer/src/main.rs	81	#[arg(long)]	COMMENT
LOW	…sm/osmosis-tokenfactory-token-minter/src/bank_types.rs	41	/// - Metadata:	COMMENT
LOW	cosmwasm/on-zkgm-call-proxy/src/lib.rs	61	/// Funds that should be forwarded to the destination contract.	COMMENT
LOW	cosmwasm/core/msg/src/lightclient.rs	41	#[cfg_attr(feature = "schemars", derive(schemars::JsonSchema))]	COMMENT
LOW	cosmwasm/core/msg/src/lightclient.rs	61	#[serde(untagged)]	COMMENT
LOW	cosmwasm/core/msg/src/lightclient.rs	161	#[cfg_attr(feature = "schemars", derive(schemars::JsonSchema))]	COMMENT
LOW	cosmwasm/core/msg/src/lightclient.rs	181	pub counterparty_chain_id: String,	COMMENT
LOW	cosmwasm/core/msg/src/lightclient.rs	201	pub enum VerifyCreationResponseEvent {	COMMENT
LOW	cosmwasm/core/light-client-interface/src/lib.rs	441	type ClientState: Decode<Self::Encoding, Error: Error + 'static>	COMMENT
LOW	cosmwasm/app/ucs03-zkgm/src/state.rs	41	/// Temporarily stores the acknowledgement from packet execution.	COMMENT
LOW	cosmwasm/app/ucs03-zkgm/src/contract.rs	1521	channel_id: packet.destination_channel_id,	COMMENT
LOW	cosmwasm/app/ucs03-zkgm/src/contract.rs	1541	// account, and queue the same sub messages. In this case, the instantiation will return with	COMMENT
LOW	cosmwasm/app/ucs03-zkgm/src/msg.rs	21		COMMENT
LOW	cosmwasm/app/ucs03-zkgm/src/msg.rs	41	pub dummy_code_id: u64,	COMMENT
LOW	cosmwasm/access-managed/src/lib.rs	1	//! CosmWasm implementation of [OpenZeppelin][oz]'s [`AccessManaged.sol`][am].	COMMENT
LOW	cosmwasm/cw20-wrapped-tokenfactory/src/msg.rs	81	/// Returns metadata on the contract - name, decimals, supply, etc.	COMMENT
LOW	cosmwasm/cw-escrow-vault/src/msg.rs	21		COMMENT
LOW	cosmwasm/ucs03-zkgm-token-minter-api/src/lib.rs	61	#[serde(alias = "cw20_base_code_id")]	COMMENT
660 more matches not shown…

Hallucination Indicators9 hits · 90 pts

Severity	File	Line	Snippet	Context
CRITICAL	cosmwasm/lightclient/parlia/src/client.rs	274	Timestamp::from_nanos(self.ctx.env.block.time.nanos())	CODE
CRITICAL	voyager/plugins/client-update/parlia/src/main.rs	461	logs_bloom: Box::new(block.header.inner.logs_bloom.0.into()),	CODE
CRITICAL	app2/src/lib/dashboard/components/Leaderboard.svelte	109	? dashboard.leaderboard.value.leaderboard.value.slice(0, validatedShow)	CODE
CRITICAL	e2e/access-manager-tests/src/main.rs	417	block.block.header.time.seconds.inner() as u64 > when.get()	CODE
CRITICAL	e2e/access-manager-tests/src/main.rs	523	block.block.header.time.seconds.inner() as u64 > when.get()	CODE
CRITICAL	e2e/access-manager-tests/src/main.rs	626	block.block.header.time.seconds.inner() as u64 > when.get()	CODE
CRITICAL	e2e/access-manager-tests/src/main.rs	760	block.block.header.time.seconds.inner() as u64 > when.get()	CODE
CRITICAL	e2e/access-manager-tests/src/main.rs	905	block.block.header.time.seconds.inner() as u64 > grant_role_schedule_when.get()	CODE
CRITICAL	e2e/access-manager-tests/src/main.rs	906	&& block.block.header.time.seconds.inner() as u64 > execute_schedule_when.get()	CODE

Hyper-Verbose Identifiers22 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	tools/union-test/src/evm.rs	1068	function predictStakeManagerAddress() public view returns (ZkgmERC721) ;	CODE
LOW	app2/src/lib/dashboard/errors.ts	57	export function mapSupabaseErrorToCustomError(	CODE
LOW	app2/src/lib/dashboard/components/WalletDisplay.svelte	171	function handleRemoveSelectedWallets() {	CODE
LOW	app2/src/lib/dashboard/components/WalletDialog.svelte	110	function selectCosmosAndSetDefaults() {	CODE
LOW	app2/src/lib/dashboard/components/Leaderboard.svelte	39	async function validateAndCacheImage(url: string): Promise<boolean> {	CODE
LOW	app2/src/lib/dashboard/components/WalletCard.svelte	14	function getChainDisplayNameForAvatar(chainId: string): string {	CODE
LOW	app2/src/lib/dashboard/components/WalletCard.svelte	21	function getChainDisplayNameForTitle(chainId: string, cat: WalletCategory): string {	CODE
LOW	app2/src/lib/wallet/sui/config.svelte.ts	100	function getConnectionErrorMessage(error: unknown): string \| undefined {	CODE
LOW	app2/src/lib/wallet/evm/config.svelte.ts	40	function clearLastConnectedWalletId() {	CODE
LOW	app2/src/lib/wallet/evm/wagmi-config.svelte.ts	350	function createWagmiConfigInstance() {	CODE
LOW	app2/src/routes/explorer/orbital/canvasInit.ts	64	export function initializeCanvasWithCleanup(options: EnhancedCanvasInitOptions): () => void {	CODE
LOW	…outes/explorer/orbital/charts/NetworkVisualizer.svelte	178	function createParticleFromTransfer(transfer: EnhancedTransferListItem) {	CODE
LOW	…c/routes/explorer/orbital/charts/ChainFlowChart.svelte	206	function getAssetIncomingOutgoingWidths(	CODE
LOW	…c/routes/explorer/orbital/charts/ChainFlowChart.svelte	228	function getIncomingOutgoingWidths(	CODE
LOW	…routes/explorer/orbital/charts/AssetVolumeChart.svelte	166	function calculateRemainingRoutePercentage(routes: AssetRoute[]): number {	CODE
LOW	typescript-sdk/src/cosmos/wallet.ts	21	export function connectStargateWithSigner({	CODE
LOW	typescript-sdk/src/cosmos/wallet.ts	56	export function connectCosmwasmWithSigner({	CODE
LOW	typescript-sdk/src/cosmos/transfer.ts	376	export async function cosmosSameChainTransferSimulate({	CODE
LOW	typescript-sdk/src/evm/transfer.ts	245	export async function transferAssetFromEvmSimulate(	CODE
LOW	typescript-sdk/src/query/on-chain.ts	244	export async function getCosmosTransactionReceipt(params: {	CODE
LOW	typescript-sdk/src/query/on-chain.ts	269	export async function getCosmosAccountTransactions({	CODE
LOW	typescript-sdk/src/query/on-chain.ts	295	export async function getAptosAccountTransactions({	CODE

Self-Referential Comments5 hits · 15 pts

Severity	File	Line	Snippet	Context
MEDIUM	cairo/zkgm/snfoundry.toml	4	# [sncast.default] # Define a profile name	COMMENT
MEDIUM	cairo/ibc/snfoundry.toml	4	# [sncast.default] # Define a profile name	COMMENT
MEDIUM	cairo/mock_client/snfoundry.toml	4	# [sncast.default] # Define a profile name	COMMENT
MEDIUM	cairo/cometbls_light_client/snfoundry.toml	4	# [sncast.default] # Define a profile name	COMMENT
MEDIUM	cairo/loopback_light_client/snfoundry.toml	4	# [sncast.default] # Define a profile name	COMMENT

Decorative Section Separators4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	Cargo.toml	486	# =====================	COMMENT
MEDIUM	Cargo.toml	488	# =====================	COMMENT
MEDIUM	app2/src/lib/gasprice/index.ts	202	// ── MOCKED SUI GAS PRICE ─────────────────────────────────────────────	COMMENT
MEDIUM	lib/arbitrum-types/src/lib.rs	258	/// ├───────────┼─┼─┼───────────────┼───────────────┼──────────────┤	COMMENT

Structural Annotation Overuse6 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	voyager/src/main.rs	87	// NOTE: This function is a mess, will be cleaned up	COMMENT
LOW	lib/access-manager-types/src/manager/msg.rs	76	/// NOTE: This function does not report the permissions of the admin functions in the manager	COMMENT
LOW	lib/aptos-types/src/account.rs	81	/// NOTE: This function has strict parsing behavior. For relaxed behavior, please use	COMMENT
LOW	11-cometbls/store.go	196	// NOTE: This function is currently only used for testing purposes	COMMENT
LOW	typescript-sdk/src/query/offchain/ucs03-channels.ts	196	// Step 1: Get the local WETH address	COMMENT
LOW	typescript-sdk/src/query/offchain/ucs03-channels.ts	214	// Step 2: Predict the quote token for WETH, just like a regular token	COMMENT

AI Slop Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	voyager/plugins/periodic-client-update/src/main.rs	53	// never interested in any messages since this plugin does not utilize a queue	COMMENT
MEDIUM	lib/voyager-vm/src/lib.rs	161	/// The message that will utilize the aggregated data.	COMMENT

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	typescript-sdk/src/query/offchain/ucs03-channels.ts	196	// Step 1: Get the local WETH address	COMMENT
LOW	typescript-sdk/src/query/offchain/ucs03-channels.ts	214	// Step 2: Predict the quote token for WETH, just like a regular token	COMMENT

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	cosmwasm/cw20-base/src/lib.rs	2	This is a basic implementation of a cw20 contract. It implements	CODE

Fake / Example Data2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	mpc/edge/supabase/seed.sql	177	display_name text NOT NULL DEFAULT ('John Doe')	CODE
LOW	site/src/content/blog/testing-unpublished-post.md	5	description: "lorem ipsum"	CODE

TODO Padding1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	lib/frissitheto/src/lib.rs	156	// TODO: Add tests for version changes as well	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	unionvisor/src/testdata/home/config/config.toml	254	# Set true to enable the peer-exchange reactor	COMMENT

unionlabs/union

Open-Source Code Quality, Security and Technical Debt Review