3.3

Adjusted Signal

3.3

Raw Pattern Score

100%

Time Factor

2026-10-22

Last Push

80.5K

Stars

Language

404.5K

Lines of Code

1.4K

Files

1.3K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 14.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1258 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.2/100 · LOW

Are imports declared and package/API names verified? 10 finding(s).

Agent Over-Engineering Ratio 0.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 9 finding(s).

PR Review Velocity Impact 15.4/100 · LOW

Which changes need focused human review? 1269 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 8HIGH 1MEDIUM 2LOW 1258

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1269 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1219 hits · 1156 pts

Severity	File	Line	Snippet	Context
LOW	KBD/cfg/KBD_QWERTZ_SLOV_CROAT.cfg	41		COMMENT
LOW	KBD/cfg/KBD_AZERTY.cfg	61	#minus (-), underscore (_), equal (=), parenleft [(], backspace (backspace), tab (Tab), bracketleft ([), braceleft ({),	COMMENT
LOW	KBD/cfg/KBD_ITALIANO.cfg	41	if [ "${quiet}" = "" ]; then	COMMENT
LOW	KBD/cfg/KBD_QWERTZ.cfg	41	#braceright (}), enter (carriage return), semicolon (;), colon (:), quote (') , doublequote ("), slash (/), backquote (`	COMMENT
LOW	KBD/cfg/KBD_VIETNAMESE.cfg	41		COMMENT
LOW	KBD/cfg/KBD_PORTU_BRAZIL.cfg	41	#Use prefix A for Alt+, e.g. Aequal, Aq, Aslash, A0, etc.	COMMENT
LOW	KBD/cfg/KBD_DVORAK_USA.cfg	101	#braceright (}), enter (carriage return), semicolon (;), colon (:), quote (') , doublequote ("), slash (/), backquote (`	COMMENT
LOW	KBD/cfg/KBD_TURKISH_Q.cfg	41	fi	COMMENT
LOW	KBD/cfg/KBD_LATIN_USA.cfg	41	setkey -e	COMMENT
LOW	KBD/cfg/KBD_QWERTZ_HUN.cfg	61	fi	COMMENT
LOW	KBD/cfg/KBD_QWERTY_UK.cfg	21	#key names	COMMENT
LOW	KBD/cfg/KBD_CZECH_QWERTZ.cfg	61	#braceright (}), enter (carriage return), semicolon (;), colon (:), quote (') , doublequote ("), slash (/), backquote (`	COMMENT
LOW	Plugson/www/static/AdminLTE/js/app.js	41	navbarMenuHeight: "200px", //The height of the inner menu	COMMENT
LOW	Plugson/www/static/AdminLTE/js/app.js	61	//Enable Fast Click. Fastclick.js creates a more	COMMENT
LOW	Plugson/src/main_linux.c	1	#include <stdio.h>	COMMENT
LOW	Plugson/src/main_windows.c	481		COMMENT
LOW	Plugson/src/Core/ventoy_json.h	61	} \	COMMENT
LOW	Plugson/src/Core/ventoy_json.h	281		COMMENT
LOW	Plugson/src/Core/ventoy_json.h	321		COMMENT
LOW	Plugson/src/Core/ventoy_util_linux.c	21	#include <stdint.h>	COMMENT
LOW	Plugson/src/Core/ventoy_define.h	21	#define __VENTOY_DEFINE_H__	COMMENT
LOW	Plugson/src/Core/ventoy_define.h	141		COMMENT
LOW	Plugson/src/Core/ventoy_disk_linux.c	21	#include <stdint.h>	COMMENT
LOW	Plugson/src/Core/ventoy_json.c	21	#include <stdio.h>	COMMENT
LOW	Plugson/src/Core/ventoy_utf.c	21	#include <stdlib.h>	COMMENT
LOW	Plugson/src/Core/ventoy_utf.c	41	// The codepoint that is used to replace invalid encodings	COMMENT
LOW	Plugson/src/Core/ventoy_utf.c	61	#define SURROGATE_CODEPOINT_BITS 10	COMMENT
LOW	Plugson/src/Core/ventoy_utf.c	101	#define UTF8_LEADING_BYTES_LEN 4	COMMENT
LOW	Plugson/src/Core/ventoy_disk.h	81	#define SCSI_DISK0_MAJOR 8	COMMENT
LOW	Plugson/src/Core/ventoy_disk.h	101	#define COMPAQ_SMART2_MAJOR4 76	COMMENT
LOW	Plugson/src/Core/ventoy_disk.h	121	#define I2O_MAJOR7 86	COMMENT
LOW	Plugson/src/Web/ventoy_http.c	21	#include <stdint.h>	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.h	21	*/	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	21	*/	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	41	#ifndef _FILE_OFFSET_BITS	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	101	/* DTL -- including winsock2.h works better if lean and mean */	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	121		COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	181	t->tv_nsec = now % 1000000000;	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	201	#define MAX_WORKER_THREADS (1024 * 64)	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	221		COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	241	typedef long off_t;	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	261	#define __func__ __FILE__ ":" STR(__LINE__)	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	281		COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	301	#define pipe(x) _pipe(x, MG_BUF_LEN, _O_BINARY)	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	401	#if defined(_MSC_VER)	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	421	#if defined(ANDROID)	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	441	#endif	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	541		COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	801	#endif	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	821	#define vsnprintf DO_NOT_USE_THIS_FUNCTION__USE_mg_vsnprintf	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	841	#endif	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	861	typedef struct ssl_ctx_st SSL_CTX;	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	881	const char name; / SSL function name */	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	901	((void ()(SSL_CTX *, mg_callback_t))ssl_sw[13].ptr)	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	921	((const char ()(const SSL_CIPHER ))ssl_sw[27].ptr)	COMMENT
LOW	Plugson/src/Lib/libhttp/include/civetweb.c	13121	#if !defined(NO_CGI)	COMMENT
LOW	Plugson/src/Lib/xz-embedded/linux/lib/decompress_unxz.c	101	* XZ_PREBOOT here.	COMMENT
LOW	Plugson/src/Lib/xz-embedded/linux/lib/decompress_unxz.c	121	/*	COMMENT
LOW	Plugson/src/Lib/xz-embedded/linux/lib/xz/xz_dec_bcj.c	541	#endif	COMMENT
LOW	Plugson/src/Lib/xz-embedded/linux/lib/xz/xz_private.h	21	# include <linux/string.h>	COMMENT
1159 more matches not shown…

Hallucination Indicators8 hits · 95 pts

Severity	File	Line	Snippet	Context
CRITICAL	Plugson/www/static/js/jQuery-2.1.4.min.js	4	void 0===c?d&&"get"in d&&null!==(e=d.get(a,b))?e:(e=n.find.attr(a,b),null==e?void 0:e):null!==c?d&&"set"in d&&void 0!==(	CODE
CRITICAL	…ensions/FixedColumns/js/dataTables.fixedColumns.min.js	8	!0!==this.s.dt.oInstance.fnVersionCheck("1.8.0"))alert("FixedColumns "+j.VERSION+" required DataTables 1.8.0 or later. P	CODE
CRITICAL	…ensions/FixedColumns/js/dataTables.fixedColumns.min.js	15	g=c.childNodes[0],f=c.childNodes[1];this.dom.grid.dt.parentNode.insertBefore(c,this.dom.grid.dt);c.appendChild(this.dom.	CODE
CRITICAL⚡	…/extensions/ColReorder/js/dataTables.colReorder.min.js	14	this.s.dt.aoColumns.length)&&(d=this.s.dt.oLoadedState.ColReorder);if(d)if(a.s.dt._bInitComplete)b=p(d),a._fnOrderColumn	CODE
CRITICAL⚡	…/extensions/ColReorder/js/dataTables.colReorder.min.js	15	else{for(var b=0,e=a.length;b<e;b++){var h=d.inArray(b,a);b!=h&&(l(a,h,b),this.s.dt.oInstance.fnColReorder(h,b))}(""!==t	CODE
CRITICAL⚡	…/extensions/ColReorder/js/dataTables.colReorder.min.js	20	this.dom.drag=null,this.dom.pointer=null,this.s.dt.oInstance.fnColReorder(this.s.mouse.fromIndex,this.s.mouse.toIndex),t	CODE
CRITICAL	…tatables/extensions/ColVis/js/dataTables.colVis.min.js	16	c+"</span></label></li>").click(function(c){var e=!d("input",this).is(":checked");if("li"!==c.target.nodeName.toLowerCas	CODE
CRITICAL	LinuxGUI/WebUI/static/js/jQuery-2.1.4.min.js	4	void 0===c?d&&"get"in d&&null!==(e=d.get(a,b))?e:(e=n.find.attr(a,b),null==e?void 0:e):null!==c?d&&"set"in d&&void 0!==(	CODE

Verbosity Indicators14 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	IMG/cpio/ventoy/ventoy_chain.sh	22	# Step 1 : Parse kernel parameter #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_chain.sh	42	# Step 2 : Do OS specific hook #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_chain.sh	445	# Step 3 : Run LiveInjection Hook #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_chain.sh	459	# Step 4 : Check for debug break #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_chain.sh	476	# Step 5 : Hand over to real init #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	22	# Step 1 : Parse kernel parameter #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	42	# Step 2 : Process ko #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	63	# Step 3 : Do OS specific hook #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	399	# Step 4 : Check for debug break #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	416	# Step 5 : Hand over to real init #	COMMENT
LOW⚡	IMG/cpio/ventoy/hook/pclos/ventoy-hook.sh	22	# Step 1: dd initrd file to ramdisk	COMMENT
LOW⚡	IMG/cpio/ventoy/hook/pclos/ventoy-hook.sh	28	# Step 2: mount ramdisk	COMMENT
LOW⚡	IMG/cpio/ventoy/hook/pclos/ventoy-hook.sh	34	# Step 3: Copy ventoy tool to new root directory.	COMMENT
LOW⚡	IMG/cpio/ventoy/hook/pclos/ventoy-hook.sh	44	# Step 4: add hook in linuxrc&rc.sysinit script file	COMMENT

Structural Annotation Overuse14 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	IMG/cpio/ventoy/ventoy_chain.sh	22	# Step 1 : Parse kernel parameter #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_chain.sh	42	# Step 2 : Do OS specific hook #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_chain.sh	445	# Step 3 : Run LiveInjection Hook #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_chain.sh	459	# Step 4 : Check for debug break #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_chain.sh	476	# Step 5 : Hand over to real init #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	22	# Step 1 : Parse kernel parameter #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	42	# Step 2 : Process ko #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	63	# Step 3 : Do OS specific hook #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	399	# Step 4 : Check for debug break #	COMMENT
LOW	IMG/cpio/ventoy/ventoy_loop.sh	416	# Step 5 : Hand over to real init #	COMMENT
LOW⚡	IMG/cpio/ventoy/hook/pclos/ventoy-hook.sh	22	# Step 1: dd initrd file to ramdisk	COMMENT
LOW⚡	IMG/cpio/ventoy/hook/pclos/ventoy-hook.sh	28	# Step 2: mount ramdisk	COMMENT
LOW⚡	IMG/cpio/ventoy/hook/pclos/ventoy-hook.sh	34	# Step 3: Copy ventoy tool to new root directory.	COMMENT
LOW⚡	IMG/cpio/ventoy/hook/pclos/ventoy-hook.sh	44	# Step 4: add hook in linuxrc&rc.sysinit script file	COMMENT

Hyper-Verbose Identifiers8 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	Plugson/www/plugson_auto_install.html	482	function OnAutoInstallInnerAddClick() {	CODE
LOW	Plugson/www/plugson_auto_install.html	518	function OnAutoInstallInnerDelClick() {	CODE
LOW	Plugson/www/plugson_persistence.html	184	function FillPersistenceInnerTable(i, data) {	CODE
LOW	Plugson/www/plugson_persistence.html	447	function OnPersistenceInnerAddClick() {	CODE
LOW	Plugson/www/plugson_persistence.html	483	function OnPersistenceInnerDelClick() {	CODE
LOW	GRUB2/MOD_SRC/grub-2.04/gentpl.py	487	def set_canonical_name_suffix(suffix):	CODE
LOW	GRUB2/MOD_SRC/grub-2.04/gentpl.py	545	def foreach_platform_specific_value(defn, platform, suffix, nonetag, closure):	CODE
LOW	GRUB2/MOD_SRC/grub-2.04/gentpl.py	618	def under_platform_specific_conditionals(defn, platform, closure):	CODE

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	GRUB2/MOD_SRC/grub-2.04/gentpl.py	288	except ValueError:	CODE

Slop Phrases1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	INSTALL/grub/grub.cfg	2525	# Default menu display mode, you can change it as you want.	COMMENT

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	IMG/cpio/ventoy/hook/vine/udev_disk_hook.sh	83	#Create a fake IDE-CDROM driver can't be ide-scsi /proc has been patched to /vtoy	COMMENT

Fake / Example Data1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	Plugson/www/static/datatables/jquery.dataTables.min.js	38	f=function(){var b=!this.value?"":this.value;b!=d.sSearch&&(fa(a,{sSearch:b,bRegex:d.bRegex,bSmart:d.bSmart,bCaseInsensi	CODE

Unused Imports1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	GRUB2/MOD_SRC/grub-2.04/gentpl.py	18		CODE

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	GRUB2/MOD_SRC/grub-2.04/gentpl.py	197		CODE

ventoy/Ventoy

Open-Source Code Quality, Security and Technical Debt Review