0.8

Adjusted Signal

0.8

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

9.7K

Stars

TypeScript

Language

869.9K

Lines of Code

4.8K

Files

625

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 389 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.6/100 · LOW

Are imports declared and package/API names verified? 234 finding(s).

Agent Over-Engineering Ratio 2.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 373 finding(s).

PR Review Velocity Impact 3.8/100 · LOW

Which changes need focused human review? 625 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 5HIGH 0MEDIUM 2LOW 618

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 625 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers371 hits · 371 pts

Severity	File	Line	Snippet	Context
LOW	tests/api-integration/setup.ts	45	function readDatabaseUrlFromEnvFile() {	CODE
LOW	tests/api-integration/due-date-reminders.test.ts	44	function dueDateInsideReminderWindow() {	CODE
LOW	tests/api-integration/time-entry-duration.test.ts	33	async function runDurationBackfillMigration() {	CODE
LOW	tests/api-integration/helpers/database.ts	64	export async function ensureTestDatabaseMigrated() {	CODE
LOW	…/helpers/project-access/create-restricted-workspace.ts	6	export async function createRestrictedWorkspace() {	CODE
LOW	…/helpers/project-access/create-invitation-workspace.ts	7	export async function createInvitationWorkspace() {	CODE
LOW	tests/api/plugins/gitlab/webhooks/issue-updated.test.ts	93	function linkWithLastTitleWrittenByKaneo(title: string) {	CODE
LOW	packages/importers/src/linear/graphql.ts	86	export function retryRateLimitedResponses(fetchImpl: FetchLike): FetchLike {	CODE
LOW	packages/mcp/src/install/targets.ts	20	export function validateCustomConfigPathInput(	CODE
LOW	packages/mcp/src/install/targets.ts	59	export function getClaudeDesktopConfigPath(): string {	CODE
LOW	packages/cli/src/auth/wait-for-approval.ts	55	export function webUrlFromVerificationUri(uri: string): string \| undefined {	CODE
LOW	packages/cli/src/admin/render-invitation-list.ts	68	export function renderReceivedInvitations(	CODE
LOW	…rs/telegram-integration/create-telegram-integration.ts	20	async function createTelegramIntegration(	CODE
LOW	…rs/telegram-integration/update-telegram-integration.ts	21	async function updateTelegramIntegration(	CODE
LOW	…rs/telegram-integration/delete-telegram-integration.ts	5	async function deleteTelegramIntegration(projectId: string) {	CODE
LOW	…attermost-integration/create-mattermost-integration.ts	18	async function createMattermostIntegration(	CODE
LOW	…attermost-integration/update-mattermost-integration.ts	19	async function updateMattermostIntegration(	CODE
LOW	…attermost-integration/delete-mattermost-integration.ts	5	async function deleteMattermostIntegration(projectId: string) {	CODE
LOW	…etchers/notification/mark-all-notifications-as-read.ts	5	async function markAllNotificationsAsRead(workspaceId?: string) {	CODE
LOW	…tchers/custom-field/get-custom-field-values-by-task.ts	5	async function getCustomFieldValuesByTask({ taskId }: { taskId: string }) {	CODE
LOW	…etchers/custom-field/get-custom-field-filter-values.ts	5	async function getCustomFieldFilterValues({	CODE
LOW	…ers/custom-field/get-custom-field-values-by-project.ts	5	async function getCustomFieldValuesByProject({	CODE
LOW	…b/src/fetchers/admin/send-admin-user-password-reset.ts	4	export async function sendAdminUserPasswordReset(userId: string) {	CODE
LOW	…c/fetchers/admin/send-admin-user-verification-email.ts	4	export async function sendAdminUserVerificationEmail(userId: string) {	CODE
LOW	…b/src/fetchers/admin/mark-admin-user-email-verified.ts	4	export async function markAdminUserEmailVerified(userId: string) {	CODE
LOW	…web/src/fetchers/admin/get-admin-webhook-deliveries.ts	4	export async function getAdminWebhookDeliveries(webhookId: string) {	CODE
LOW	…eb/src/fetchers/admin/remove-admin-workspace-member.ts	5	export async function removeAdminWorkspaceMember({	CODE
LOW	…c/fetchers/admin/update-admin-workspace-member-role.ts	5	export async function updateAdminWorkspaceMemberRole({	CODE
LOW	…c/fetchers/admin/transfer-admin-workspace-ownership.ts	5	export async function transferAdminWorkspaceOwnership({	CODE
LOW	…/web/src/fetchers/mcp/submit-authorization-decision.ts	3	export async function submitMcpAuthorizationDecision(	CODE
LOW	apps/web/src/fetchers/mcp/get-authorization-request.ts	8	export async function getMcpAuthorizationRequest(	CODE
LOW	…webhook-integration/get-generic-webhook-integration.ts	31	async function getGenericWebhookIntegration(	CODE
LOW	…hook-integration/create-generic-webhook-integration.ts	25	async function createGenericWebhookIntegration(	CODE
LOW	…hook-integration/update-generic-webhook-integration.ts	26	async function updateGenericWebhookIntegration(	CODE
LOW	…hook-integration/delete-generic-webhook-integration.ts	5	async function deleteGenericWebhookIntegration(projectId: string) {	CODE
LOW	apps/web/src/fetchers/task/get-description-pages.ts	54	export async function getPublicProjectDescription(	CODE
LOW	…tion-preferences/upsert-notification-workspace-rule.ts	15	async function upsertNotificationWorkspaceRule(	CODE
LOW	…ication-preferences/update-notification-preferences.ts	24	async function updateNotificationPreferences(	CODE
LOW	…tification-preferences/get-notification-preferences.ts	48	async function getNotificationPreferences(): Promise<NotificationPreferences> {	CODE
LOW	…tion-preferences/delete-notification-workspace-rule.ts	5	async function deleteNotificationWorkspaceRule(	CODE
LOW	…etchers/workspace-user/update-member-project-access.ts	12	async function updateMemberProjectAccess({	CODE
LOW	…etchers/workspace-user/get-workspace-project-access.ts	4	async function getWorkspaceProjectAccess(workspaceId: string) {	CODE
LOW	…ings/workspace-general/create-workspace-form-schema.ts	4	export function createWorkspaceFormSchema(t: TFunction) {	CODE
LOW	…s/settings/preferences/general-preferences-section.tsx	11	export function GeneralPreferencesSection() {	CODE
LOW	…nents/settings/profile/is-delete-confirmation-valid.ts	1	export function isDeleteConfirmationValid(	CODE
LOW	…tings/notifications/notification-settings-skeleton.tsx	9	export function NotificationSettingsSkeleton() {	CODE
LOW	…notifications/events/use-event-preferences-autosave.ts	14	export function useEventPreferencesAutosave(	CODE
LOW	apps/web/src/components/calendar/calendar-task-bar.tsx	23	export function getCalendarTaskStatusClass(status: string): string {	CODE
LOW	apps/web/src/components/my-work/group-assigned-tasks.ts	12	export function groupAssignedTasksByDueDate(	CODE
LOW	apps/web/src/components/my-work/group-assigned-tasks.ts	33	export function groupAssignedTasksByProject(	CODE
LOW	…rkspace-management/workspace-member-confirm-dialog.tsx	14	function WorkspaceMemberConfirmDialog({	CODE
LOW	…pace-management/workspace-lifecycle-confirm-dialog.tsx	14	export function WorkspaceLifecycleConfirmDialog({	CODE
LOW	…components/project/mattermost-integration-settings.tsx	4	export function MattermostIntegrationSettings({	CODE
LOW	…rc/components/project/discord-integration-settings.tsx	4	export function DiscordIntegrationSettings({	CODE
LOW	…project/code-hosting/disconnect-integration-button.tsx	13	export function DisconnectIntegrationButton({	CODE
LOW	…ts/project/integrations/filter-enabled-integrations.ts	11	export function filterEnabledIntegrations(	CODE
LOW	…oject/integrations/disabled-integration-disconnect.tsx	9	export function DisabledIntegrationDisconnect({	CODE
LOW	…tions/generic-webhook/build-generic-webhook-request.ts	11	export function buildGenericWebhookRequest(	CODE
LOW	…ns/generic-webhook/generic-webhook-event-checklist.tsx	13	export function GenericWebhookEventChecklist({	CODE
LOW	…neric-webhook/generic-webhook-integration-settings.tsx	28	export function GenericWebhookIntegrationSettings({	CODE
311 more matches not shown…

Fake / Example Data229 hits · 234 pts

Severity	File	Line	Snippet	Context
LOW	tests/api-integration/managed-profile-edits.test.ts	38	name: "Jane Doe",	CODE
LOW	tests/api-integration/managed-profile-edits.test.ts	169	{ name: "Jane Doe", image: PICTURE, locale: null },	CODE
LOW	tests/api-integration/managed-profile-edits.test.ts	183	{ name: "Jane Doe", locale: "de-DE", image: PICTURE },	CODE
LOW	tests/api-integration/managed-profile-edits.test.ts	188	name: "Jane Doe",	CODE
LOW	tests/api-integration/managed-profile-edits.test.ts	249	expect(await loadProfile(userId)).toMatchObject({ name: "Jane Doe" });	CODE
LOW	tests/api-integration/managed-profile-edits.test.ts	262	name: "Jane Doe",	CODE
LOW	tests/api-integration/managed-profile-edits.test.ts	279	expect(await loadProfile(user.id)).toMatchObject({ name: "Jane Doe" });	CODE
LOW	tests/api-integration/managed-profile-edits.test.ts	288	email: "admin@example.com",	CODE
LOW	tests/api-integration/project-access-management.test.ts	463	const adminInvitation = await invite("admin@example.com", "admin", [	CODE
LOW	tests/api-integration/project-access-management.test.ts	467	email: "admin@example.com",	CODE
LOW	tests/api-integration/api-key-socket-revocation.test.ts	67	email: "admin@example.com",	CODE
LOW	tests/api-integration/deferred-issue-edits.test.ts	1401	: { accessToken: "new-fake-token" }),	CODE
LOW	tests/api-integration/admin-user-listing.test.ts	62	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-listing.test.ts	101	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-listing.test.ts	135	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-listing.test.ts	180	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-listing.test.ts	194	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-listing.test.ts	237	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-listing.test.ts	275	email: "admin@example.com",	CODE
LOW	…s/api-integration/admin-user-sessions-api-keys.test.ts	59	email: "admin@example.com",	CODE
LOW	…s/api-integration/admin-user-sessions-api-keys.test.ts	180	const otherAdminSession = await signIn(app, "admin@example.com");	CODE
LOW	…s/api-integration/admin-user-sessions-api-keys.test.ts	229	const otherAdminSession = await signIn(app, "admin@example.com");	CODE
LOW	tests/api-integration/admin-email-change.test.ts	44	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-email-change.test.ts	65	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-email-change.test.ts	87	email: "admin@example.com",	CODE
LOW	tests/api-integration/workspace-role-demotion.test.ts	37	const admin = await signup("admin@example.com");	CODE
LOW	tests/api-integration/admin-user-removal.test.ts	97	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-removal.test.ts	119	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-removal.test.ts	146	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-removal.test.ts	185	email: "admin@example.com",	CODE
LOW	tests/api-integration/admin-user-removal.test.ts	228	email: "admin@example.com",	CODE
LOW	…s/api-integration/admin-audit-log-auth-actions.test.ts	50	email: "admin@example.com",	CODE
LOW	…s/api-integration/admin-audit-log-auth-actions.test.ts	78	actorEmail: "admin@example.com",	CODE
LOW	…s/api-integration/admin-audit-log-auth-actions.test.ts	296	actorEmail: "admin@example.com",	CODE
LOW	tests/api-integration/helpers/admin/admin-users-api.ts	25	email: "admin@example.com",	CODE
LOW	tests/api/utils/custom-oauth-profile.test.ts	11	name: "Jane Doe",	CODE
LOW	tests/api/utils/custom-oauth-profile.test.ts	15	).toEqual({ name: "Jane Doe" });	CODE
LOW	tests/api/utils/custom-oauth-profile.test.ts	26	).toEqual({ name: "Jane Doe" });	CODE
LOW⚡	tests/api/utils/custom-oauth-profile.test.ts	56	name: "Jane Doe",	CODE
LOW⚡	tests/api/utils/custom-oauth-profile.test.ts	62	).toEqual({ name: "Jane Doe", locale: "de" });	CODE
LOW⚡	tests/api/utils/custom-oauth-profile.test.ts	69	name: "Jane Doe",	CODE
LOW⚡	tests/api/utils/custom-oauth-profile.test.ts	76	name: "Jane Doe",	CODE
LOW⚡	tests/api/utils/custom-oauth-profile.test.ts	85	{ name: "Jane Doe", picture: "javascript:alert(1)", locale: "sv" },	CODE
LOW⚡	tests/api/utils/custom-oauth-profile.test.ts	88	).toEqual({ name: "Jane Doe", image: undefined, locale: null });	CODE
LOW	tests/api/user/assert-managed-profile-unchanged.test.ts	41	stored: { name: "Jane Doe", image: null, locale: "en-US" },	CODE
LOW	tests/api/user/assert-managed-profile-unchanged.test.ts	86	{ name: "Jane Doe" },	CODE
LOW	tests/api/user/managed-avatar-guards.test.ts	21	return { fields, stored: { name: "Jane Doe", image, locale: null } };	CODE
LOW	tests/api/user/managed-profile.test.ts	14	return { name: "Jane Doe", image: null, locale: "en-US", ...overrides };	CODE
LOW	tests/api/user/managed-profile.test.ts	40	{ name: "Jane Doe", image: picture, locale: "en-US" },	CODE
LOW	tests/api/user/managed-profile.test.ts	109	{ name: "Jane Doe", picture, locale: "en" },	CODE
LOW	…ents/skills/coss/references/primitives/preview-card.md	54	<AvatarImage src="/avatar.png" alt="John Doe" />	CODE
LOW	.agents/skills/prototype/SKILL.md	21	3. Every variant fully works. Real interactions, real motion, realistic content — actual product-shaped copy, plausi	CODE
LOW	packages/importers/src/plane/mapping.test.ts	138	name: "Jane Doe",	CODE
LOW	packages/importers/src/plane/mapping.test.ts	222	{ name: "Jane Doe", email: "jane@example.com" },	CODE
LOW	packages/importers/src/plane/mapping.test.ts	323	author: { name: "Jane Doe", email: "jane@example.com" },	CODE
LOW	packages/importers/src/plane/source.test.ts	392	assignee: { name: "Jane Doe", email: "jane@example.com" },	CODE
LOW	packages/importers/src/plane/source.test.ts	482	author: { name: "Jane Doe", email: "jane@example.com" },	CODE
LOW	packages/importers/src/plane/source.test.ts	521	expect(result.tasks[0]?.assignee).toEqual({ name: "Jane Doe" });	CODE
LOW	packages/mcp/src/tools/register.test.ts	59	email: "user@example.com",	CODE
LOW	packages/mcp/src/tools/register.test.ts	80	email: "user@example.com",	CODE
169 more matches not shown…

Hallucination Indicators5 hits · 50 pts

Severity	File	Line	Snippet	Context
CRITICAL	apps/web/src/components/activity/comment-editor.tsx	595	view.state.schema.nodes.kaneoIssueLink.create({	CODE
CRITICAL	apps/web/src/components/task/task-description.tsx	503	view.state.schema.nodes.kaneoIssueLink.create({	CODE
CRITICAL	apps/web/src/hooks/use-project-websocket-cache.test.tsx	229	const keys = mocks.client.invalidateQueries.mock.calls.map(	CODE
CRITICAL	apps/web/src/hooks/use-project-websocket-cache.test.tsx	356	mocks.client.invalidateQueries.mock.calls.filter(	CODE
CRITICAL	apps/web/src/hooks/use-project-websocket-cache.test.tsx	475	mocks.client.invalidateQueries.mock.calls.filter(	CODE

Over-Commented Block15 hits · 15 pts

Severity	File	Line	Snippet	Context
LOW	compose.coolify.yml	1	# Kaneo on Coolify	COMMENT
LOW	charts/kaneo/values.yaml	121	# Use existing secret for external database credentials in the form of a uri, e.g.: "postgresql://user:pass@host	COMMENT
LOW	.devcontainer/devcontainer.json	21	// Configure tool-specific properties.	COMMENT
LOW	scripts/provision-sentry-alerts.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/provision-sentry-dashboards.sh	1	#!/usr/bin/env bash	COMMENT
LOW	apps/web/src/main.tsx	21	// Capture a pricing-page `?checkout=<plan>-<interval>` deep link before the	COMMENT
LOW	apps/web/src/hooks/use-workspace-creation-access.ts	21	* it enforces `DISABLE_WORKSPACE_CREATION` through Better Auth's	COMMENT
LOW	apps/web/src/hooks/use-project-websocket.ts	281	queryClient.invalidateQueries({ queryKey });	COMMENT
LOW	…utations/workspace/use-transfer-workspace-ownership.ts	1	import { useMutation, useQueryClient } from "@tanstack/react-query";	COMMENT
LOW	…layout/_authenticated/dashboard/settings/workspace.tsx	1	import { createFileRoute, Outlet, redirect } from "@tanstack/react-router";	COMMENT
LOW	…rd/workspace/$workspaceId/project/$projectId/gantt.tsx	161	);	COMMENT
LOW	…rkspace/$workspaceId/project/$projectId/gantt.test.tsx	361		COMMENT
LOW	apps/api/src/auth.ts	461	);	COMMENT
LOW	apps/api/src/auth.ts	541	},	COMMENT
LOW	apps/api/src/search/task-short-id.ts	1	// A task's short id is its project key plus the task number, e.g. "DEP-23".	COMMENT

Decorative Section Separators2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	apps/site/components/landing/app-preview/index.tsx	404	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	apps/site/components/landing/app-preview/index.tsx	406	// ─────────────────────────────────────────────────────────────────────────────	COMMENT

Example Usage Blocks2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	scripts/provision-sentry-alerts.sh	7	# Usage:	COMMENT
LOW	scripts/provision-sentry-dashboards.sh	8	# Usage:	COMMENT

Slop Phrases1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	charts/kaneo/values.yaml	106	# Important: when using external postgres, make sure you have set up the db user correctly:	COMMENT

usekaneo/kaneo

Open-Source Code Quality, Security and Technical Debt Review