1.5

Adjusted Signal

1.5

Raw Pattern Score

100%

Time Factor

2026-10-28

Last Push

5.6K

Stars

TypeScript

Language

143.3K

Lines of Code

710

Files

148

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 62 finding(s).

Hallucinated Dependency & Supply Chain Risk 4.3/100 · LOW

Are imports declared and package/API names verified? 80 finding(s).

Agent Over-Engineering Ratio 1.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 42 finding(s).

PR Review Velocity Impact 6.9/100 · LOW

Which changes need focused human review? 148 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 9MEDIUM 6LOW 133

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 148 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Fake / Example Data71 hits · 80 pts

Severity	File	Line	Snippet	Context
LOW	packages/shared/src/__tests__/mailbox-simulator.test.ts	36	expect(isMailboxSimulatorAddress('simulator.amazonses.com@example.org')).toBe(false);	CODE
LOW	packages/shared/src/i18n/index.ts	162	* Example: t("pages.unsubscribe.description", { email: "user@example.com" })	COMMENT
LOW	packages/email/src/emails/PasswordReset.tsx	14	email = 'user@example.com',	CODE
LOW	packages/email/src/emails/EmailVerification.tsx	14	email = 'user@example.com',	CODE
LOW	apps/landing/src/pages/tools/verify-email.tsx	97	placeholder="user@example.com"	CODE
LOW	apps/web/src/components/TeamSettings.tsx	333	<Input type="email" placeholder="user@example.com" {...field} />	CODE
LOW	…eb/src/components/workflow-steps/WebhookStepDialog.tsx	91	"contact": { "email": "user@example.com", "subscribed": true, "data": { ... } },	CODE
LOW	apps/web/src/pages/onboarding/workflows.tsx	64	email: 'user@example.com',	CODE
LOW	apps/wiki/openapi.json	484	"email": "user@example.com"	CODE
LOW	apps/wiki/openapi.json	882	"to": "user@example.com",	CODE
LOW	apps/wiki/openapi.json	894	"name": "Jane Doe",	CODE
LOW	apps/wiki/openapi.json	913	"name": "Jane Doe",	CODE
LOW	apps/wiki/openapi.json	933	"to": "user@example.com",	CODE
LOW	apps/wiki/openapi.json	949	"to": "user@example.com",	CODE
LOW	apps/wiki/openapi.json	960	"to": "user@example.com",	CODE
LOW	apps/wiki/openapi.json	969	"to": "user@example.com",	CODE
LOW	apps/wiki/openapi.json	985	"to": "user@example.com",	CODE
LOW	apps/wiki/openapi.json	999	"to": "user@example.com",	CODE
LOW	apps/wiki/openapi.json	1084	"email": "user@example.com"	CODE
LOW	apps/wiki/openapi.json	1178	"email": "user@example.com",	CODE
LOW	apps/wiki/openapi.json	1550	"email": "user@example.com",	CODE
LOW	apps/wiki/lib/render-openapi-operation.ts	127	if (schema.format === 'email') return 'user@example.com';	CODE
LOW	apps/api/src/__tests__/integration/actions.test.ts	122	name: 'John Doe',	CODE
LOW	apps/api/src/__tests__/integration/actions.test.ts	149	name: 'John Doe',	CODE
LOW	apps/api/src/__tests__/integration/actions.test.ts	163	name: 'John Doe',	CODE
LOW	apps/api/src/__tests__/integration/actions.test.ts	184	name: 'Jane Doe',	CODE
LOW	apps/api/src/__tests__/integration/actions.test.ts	222	{name: 'Jane Doe', email: 'test1@example.com'},	CODE
LOW	apps/api/src/__tests__/integration/actions.test.ts	247	name: 'Jane Doe',	CODE
LOW	apps/api/src/__tests__/integration/actions.test.ts	260	name: 'Jane Doe',	CODE
LOW	apps/api/src/jobs/__tests__/import-processor.test.ts	262	company: 'Acme Inc',	CODE
LOW	apps/api/src/jobs/__tests__/import-processor.test.ts	279	expect(data?.company).toBe('Acme Inc'); // New	CODE
LOW	apps/api/src/controllers/Actions.ts	48	* email: "user@example.com",	COMMENT
LOW⚡	apps/api/src/controllers/Actions.ts	122	* - String: "user@example.com"	COMMENT
LOW⚡	apps/api/src/controllers/Actions.ts	123	* - Object: {name: "Jane Doe", email: "user@example.com"}	COMMENT
LOW⚡	apps/api/src/controllers/Actions.ts	123	* - Object: {name: "Jane Doe", email: "user@example.com"}	COMMENT
LOW	apps/api/src/controllers/Actions.ts	148	* to: "user@example.com",	COMMENT
LOW	apps/api/src/controllers/Actions.ts	162	* name: "Jane Doe",	COMMENT
LOW	apps/api/src/controllers/Actions.ts	163	* email: "user@example.com"	COMMENT
LOW	apps/api/src/controllers/Actions.ts	176	* {name: "Jane Doe", email: "jane@example.com"},	COMMENT
LOW	apps/api/src/services/__tests__/DomainService.test.ts	192	const result1 = await DomainService.verifyEmailDomain('user@example.com', project.id);	CODE
LOW	apps/api/src/services/__tests__/DomainService.test.ts	193	const result2 = await DomainService.verifyEmailDomain('admin@example.com', project.id);	CODE
LOW	apps/api/src/services/__tests__/SegmentService.test.ts	120	email: 'user@example.com',	CODE
LOW	apps/api/src/services/__tests__/SegmentService.test.ts	137	data: {company: 'Acme Inc'},	CODE
LOW	apps/api/src/services/__tests__/SegmentService.test.ts	499	email: 'user@example.com',	CODE
LOW	apps/api/src/services/__tests__/SegmentService.test.ts	569	data: {company: 'Acme Inc'},	CODE
LOW	apps/api/src/services/__tests__/SegmentService.test.ts	587	name: 'Company not equal to "Acme Inc"',	CODE
LOW	apps/api/src/services/__tests__/SegmentService.test.ts	588	filters: [{field: 'data.company', operator: 'notEquals', value: 'Acme Inc'}],	CODE
LOW	apps/api/src/services/__tests__/SegmentService.test.ts	600	data: {company: 'Acme Inc'},	CODE
LOW	apps/api/src/services/__tests__/ContactService.test.ts	81	const second = await ContactService.upsert(projectId, 'user@example.com', {lastName: 'Doe'});	CODE
LOW	apps/api/src/services/__tests__/ContactService.test.ts	84	expect(second.email).toBe('user@example.com');	CODE
LOW	apps/api/src/services/__tests__/ContactService.test.ts	135	company: 'Acme Inc',	CODE
LOW	apps/api/src/services/__tests__/ContactService.test.ts	143	company: 'Acme Inc',	CODE
LOW	apps/api/src/services/__tests__/ContactService.test.ts	366	name: 'John Doe',	CODE
LOW	apps/api/src/services/__tests__/ContactService.test.ts	373	name: 'John Doe',	CODE
LOW	apps/api/src/services/__tests__/ContactService.test.ts	434	company: 'Acme Inc',	CODE
LOW	apps/api/src/services/__tests__/ContactService.test.ts	444	expect(updated.data).toHaveProperty('company', 'Acme Inc'); // Preserved	CODE
LOW	…rc/services/__tests__/SegmentService.operators.test.ts	52	email: 'user@example.com',	CODE
LOW	…rc/services/__tests__/SegmentService.operators.test.ts	204	email: 'user@example.com',	CODE
LOW	…rc/services/__tests__/SegmentService.operators.test.ts	301	email: 'user@example.com',	CODE
LOW	…rc/services/__tests__/SegmentService.operators.test.ts	551	data: {company: 'Acme Inc'},	CODE
11 more matches not shown…

Hyper-Verbose Identifiers36 hits · 36 pts

Severity	File	Line	Snippet	Context
LOW	packages/ui/src/components/atoms/Select.tsx	138	function SelectItemWithDescription({	CODE
LOW	packages/shared/src/mailbox-simulator.ts	19	export function isMailboxSimulatorAddress(address: string \| null \| undefined): boolean {	CODE
LOW	packages/email/src/emails/ProjectDisabledPayment.tsx	14	export function ProjectDisabledPaymentEmail({	CODE
LOW	packages/email/src/emails/CardVerificationFailed.tsx	16	export function CardVerificationFailedEmail({	CODE
LOW	packages/email/src/emails/BillingLimitExceeded.tsx	17	export function BillingLimitExceededEmail({	CODE
LOW	…s/landing/src/components/snippets/DeliverySnippets.tsx	67	export function ThrottledResponseFragment({className = 'w-full max-w-xs'}: {className?: string}) {	CODE
LOW	apps/landing/src/lib/emailHtmlConverter.ts	166	export function convertToCompleteEmailHtml(html: string): string {	CODE
LOW	…nding/src/pages/features/scheduling-and-throttling.tsx	132	export default function SchedulingAndThrottlingFeature() {	CODE
LOW	apps/landing/src/pages/features/transactional-email.tsx	140	export default function TransactionalEmailFeature() {	CODE
LOW	…ng/src/pages/guides/email-marketing-best-practices.tsx	25	export default function EmailMarketingBestPractices() {	CODE
LOW	…/src/pages/guides/transactional-vs-marketing-email.tsx	16	export default function TransactionalVsMarketingEmail() {	CODE
LOW	…/src/components/workflow-steps/ConditionStepDialog.tsx	78	function hasMultiBranchConnections(step: StepWithTemplate): boolean {	CODE
LOW	apps/web/src/lib/hooks/useDomains.ts	45	export function useCheckDomainVerification() {	CODE
LOW	apps/wiki/lib/render-openapi-operation.ts	141	function findOperationByMethodPath(	CODE
LOW	apps/wiki/lib/render-openapi-operation.ts	159	export async function renderOpenAPIOperationFromMDX(	CODE
LOW	apps/api/src/utils/templateValidation.ts	17	export function assertValidTemplateSyntax(fields: Record<string, unknown>): void {	CODE
LOW	apps/api/src/jobs/campaign-cancel-cleanup-processor.ts	43	export async function deleteUnsentCampaignEmails(	CODE
LOW	apps/api/src/jobs/campaign-cancel-cleanup-processor.ts	101	export function createCampaignCancelCleanupWorker(): Worker<CampaignCancelCleanupJobData> {	CODE
LOW	apps/api/src/jobs/api-request-cleanup-processor.ts	73	export function createApiRequestCleanupWorker(): Worker<ApiRequestCleanupJobData> {	CODE
LOW	apps/api/src/jobs/card-verification-processor.ts	16	export function createCardVerificationWorker(): Worker {	CODE
LOW	apps/api/src/jobs/contact-fields-processor.ts	29	export function createContactFieldsWorker(): Worker<ContactFieldsJobData> {	CODE
LOW	apps/api/src/jobs/card-verification-sweep-processor.ts	249	export function createCardVerificationSweepWorker(): Worker<CardVerificationSweepJobData> {	CODE
LOW	apps/api/src/jobs/background-index-builder.ts	130	function createSingleConnectionClient(): PrismaClient {	CODE
LOW	apps/api/src/jobs/segment-count-processor.ts	77	async function processSegmentCountUpdate(job: Job<SegmentCountJobData>): Promise<void> {	CODE
LOW	apps/api/src/jobs/scheduled-email-sweep-processor.ts	33	export async function requeueOverdueScheduledEmails({	CODE
LOW	apps/api/src/jobs/scheduled-email-sweep-processor.ts	79	export function createScheduledEmailSweepWorker(): Worker<ScheduledEmailSweepJobData> {	CODE
LOW	apps/api/src/jobs/campaign-stats-sweep-processor.ts	43	export function createCampaignStatsSweepWorker(): Worker<CampaignStatsSweepJobData> {	CODE
LOW	apps/api/src/jobs/scheduled-processor.ts	15	export function createScheduledCampaignWorker() {	CODE
LOW	apps/api/src/jobs/idempotency-key-cleanup-processor.ts	75	export async function deleteExpiredThrottleClaims(): Promise<number> {	CODE
LOW	apps/api/src/jobs/idempotency-key-cleanup-processor.ts	101	export function createIdempotencyKeyCleanupWorker(): Worker<IdempotencyKeyCleanupJobData> {	CODE
LOW	apps/api/src/jobs/domain-verification-processor.ts	17	async function processDomainVerification(job: Job<DomainVerificationJobData>): Promise<void> {	CODE
LOW	apps/api/src/jobs/domain-verification-processor.ts	32	export function createDomainVerificationWorker(): Worker {	CODE
LOW	apps/api/src/jobs/email-body-cleanup-processor.ts	79	export function createEmailBodyCleanupWorker(): Worker<EmailBodyCleanupJobData> {	CODE
LOW	apps/api/src/services/EmailHeaderService.ts	60	export function bodyHasListManagementLink(html: string, contactId: string): boolean {	CODE
LOW	…ervices/__tests__/WorkflowConditions.operators.test.ts	39	async function createConditionalWorkflow(	CODE
LOW	…ervices/__tests__/WorkflowConditions.operators.test.ts	734	async function createMultiBranchWorkflow(	CODE

Magic Placeholder Names7 hits · 35 pts

Severity	File	Line	Snippet	Context
HIGH	apps/landing/src/pages/guides/email-api-guide.tsx	27	-H "Authorization: Bearer YOUR_API_KEY" \\	CODE
HIGH	apps/wiki/lib/render-openapi-operation.ts	267	const curlParts = [`curl -X ${method} '${baseUrl}${ref.path}'`, " -H 'Authorization: Bearer YOUR_API_KEY'"];	CODE
HIGH	apps/smtp/README.md	75	<your-api-key> # your project secret (plain text)	CODE
HIGH	apps/api/src/app.ts	327	suggestion = 'Include an Authorization header with format: "Authorization: Bearer YOUR_API_KEY"';	CODE
HIGH	apps/api/src/middleware/auth.ts	128	'Authorization header must use Bearer token format: "Authorization: Bearer YOUR_API_KEY"',	CODE
HIGH	apps/api/src/middleware/auth.ts	197	'Authorization header must use Bearer token format: "Authorization: Bearer YOUR_API_KEY"',	CODE
HIGH	apps/api/src/middleware/auth.ts	265	'Authorization header must use Bearer token format: "Authorization: Bearer YOUR_API_KEY"',	CODE

Decorative Section Separators6 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	docker-compose.yml	26	# ============================================	COMMENT
MEDIUM	docker-compose.yml	28	# ============================================	COMMENT
MEDIUM	docker-compose.yml	107	# ============================================	COMMENT
MEDIUM	docker-compose.yml	109	# ============================================	COMMENT
MEDIUM	.github/workflows/npm-publish.yml	130	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	.github/workflows/npm-publish.yml	143	# ---------------------------------------------------------------------------	COMMENT

Over-Commented Block17 hits · 17 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.yml	1	version: '3.8'	COMMENT
LOW	docker-compose.yml	201	# Explicit SES sending rate (avoid silent fallback to 14/sec when	COMMENT
LOW	vitest.config.ts	21	'*/.config.js',	COMMENT
LOW	.github/workflows/npm-publish.yml	1	name: NPM Publish	COMMENT
LOW	.github/workflows/npm-publish.yml	121	# correct outcome, not a failure.	COMMENT
LOW	.github/workflows/npm-publish.yml	141	# No NPM_TOKEN, nothing to rotate. If a publish ever fails with an OIDC error,	COMMENT
LOW	apps/landing/public/__env.js	1	// Runtime environment configuration placeholder	COMMENT
LOW	apps/web/public/__env.js	1	// Runtime environment configuration placeholder	COMMENT
LOW	apps/wiki/public/__env.js	1	// Runtime environment configuration placeholder	COMMENT
LOW	apps/api/src/app/constants.ts	141	// Maximum total attachment size in MB (default: 10). AWS SES supports up to 40 MB.	COMMENT
LOW	apps/api/src/utils/mime.ts	21	// break anywhere without changing how the text renders. Wrapping here instead	COMMENT
LOW	apps/api/src/jobs/email-processor.ts	321	// Mark as sent with SES message ID.	COMMENT
LOW	apps/api/src/controllers/Webhooks.ts	581		COMMENT
LOW	apps/api/src/controllers/Actions.ts	341	//	COMMENT
LOW	apps/api/src/services/ActivityService.ts	101	startDate?: Date,	COMMENT
LOW	apps/api/src/services/EmailHeaderService.ts	181	// providers to render the one-click control, and List-Unsubscribe-Post is	COMMENT
LOW	apps/api/src/services/SecurityService.ts	501	/**	COMMENT

Cross-Language Confusion (JS/TS)2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	apps/landing/src/pages/guides/email-api-guide.tsx	84	print('Sent', response.json()['data']['emails'][0]['email'])	CODE
HIGH	apps/landing/src/pages/guides/email-api-guide.tsx	86	print('Failed to send', response.status_code, response.text)`,	CODE

Verbosity Indicators3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	apps/api/src/services/EmailVerificationService.ts	102	// Step 1: Check NS records - proves the domain exists in DNS	COMMENT
LOW	apps/api/src/services/EmailVerificationService.ts	114	// Step 2: Check MX records - required for receiving email	COMMENT
LOW	apps/api/src/services/EmailVerificationService.ts	128	// Step 3: Check if domain has A/AAAA records - informational only	COMMENT

Structural Annotation Overuse3 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	apps/api/src/services/EmailVerificationService.ts	102	// Step 1: Check NS records - proves the domain exists in DNS	COMMENT
LOW	apps/api/src/services/EmailVerificationService.ts	114	// Step 2: Check MX records - required for receiving email	COMMENT
LOW	apps/api/src/services/EmailVerificationService.ts	128	// Step 3: Check if domain has A/AAAA records - informational only	COMMENT

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	docker-entrypoint-nginx.sh	55	# Check if openapi.local.json exists in the standalone directory	COMMENT
LOW	.github/workflows/docker-publish.yml	28	# Check if this is a release-please commit	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	docker-compose.yml	13	# Usage:	COMMENT

useplunk/plunk

Open-Source Code Quality, Security and Technical Debt Review