1.2

Adjusted Signal

1.2

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

8.1K

Stars

TypeScript

Language

1.5M

Lines of Code

16.9K

Files

996

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 323 finding(s).

Hallucinated Dependency & Supply Chain Risk 3.7/100 · LOW

Are imports declared and package/API names verified? 624 finding(s).

Agent Over-Engineering Ratio 1.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 239 finding(s).

PR Review Velocity Impact 5.4/100 · LOW

Which changes need focused human review? 996 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 52HIGH 6MEDIUM 69LOW 869

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 996 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Fake / Example Data571 hits · 578 pts

Severity	File	Line	Snippet	Context
LOW	.claude/skills/backend-developer/event-publisher.md	362	name: "John Doe"	CODE
LOW	.claude/skills/backend-developer/event-publisher.md	503	email: "test@test.com",	CODE
LOW	…s/.bruno/plans/2026-04-19-mailer-code-driven-config.md	423	user: "user@example.com",	CODE
LOW	…ngine-additions/task-02-actor-on-workflow-use-cases.md	286	displayName: "John Doe",	CODE
LOW	…ter-and-wrappers/task-15-wb-package-and-page-access.md	210	export const ADMIN: IdentityData = { id: "id-12345678", type: "admin", displayName: "John Doe" };	CODE
LOW	…ter-and-hooks/task-07-cms-target-reading-and-access.md	55	export const ADMIN: IdentityData = { id: "id-12345678", type: "admin", displayName: "John Doe" };	CODE
LOW	…3-workflows-phase-4/4.3-cms/task-08-cms-folder-port.md	82	const OWNER = { id: "id-12345678", type: "admin", displayName: "John Doe" };	CODE
LOW	…rkflows-phase-3/3.3-cms-graphql/task-09-cms-graphql.md	99	identity: { id: "id-12345678", type: "admin", displayName: "John Doe" },	CODE
LOW	…lows-phase-1b/task-04-current-user-teams-and-viewer.md	245	displayName: "John Doe",	CODE
LOW	…lows-phase-1b/task-04-current-user-teams-and-viewer.md	259	displayName: "John Doe",	CODE
LOW	…workflows-phase-6/6.10-ai-runner/task-20-end-to-end.md	313	createdBy: { id: params.createdById, displayName: "John Doe", type: "admin" }	CODE
LOW	…workflows-phase-6/6.10-ai-runner/task-20-end-to-end.md	612	displayName: "John Doe"	CODE
LOW	packages/api-core-testing/src/identity.ts	15	displayName: "John Doe",	CODE
LOW	packages/api-core-testing/src/tenancySecurity.ts	11	displayName: "John Doe"	CODE
LOW	packages/api-audit-logs/__tests__/helpers/helpers.ts	15	displayName: "John Doe",	CODE
LOW	…-headless-cms-aco/__tests__/utils/useGraphQlHandler.ts	56	displayName: "John Doe"	CODE
LOW	packages/api-mailer/__tests__/graphQLHandler.ts	51	displayName: "John Doe",	CODE
LOW	packages/api-mailer/__tests__/contextHandler.ts	99	displayName: "John Doe",	CODE
LOW	packages/api-mailer/__tests__/isMailboxAddress.test.ts	6	"foo@bar.com",	CODE
LOW	packages/api-mailer/__tests__/codeSettings.test.ts	10	user: "user@example.com",	CODE
LOW	packages/api-mailer/__tests__/context/helpers.ts	10	displayName: "John Doe",	CODE
LOW	…kages/background-tasks/__tests__/graphql/tasks.test.ts	207	displayName: "John Doe",	CODE
LOW	…es/background-tasks/__tests__/helpers/useRawHandler.ts	27	displayName: "John Doe"	CODE
LOW	packages/background-tasks/__tests__/helpers/helpers.ts	12	displayName: "John Doe",	CODE
LOW	…ackground-tasks/__tests__/helpers/useGraphQLHandler.ts	61	displayName: "John Doe"	CODE
LOW	…s/background-tasks/__tests__/helpers/useTaskHandler.ts	32	displayName: "John Doe"	CODE
LOW	…sts__/resolver/recordTypes/users/usersOnDelete.test.ts	229	email: "test@test.com"	CODE
LOW	…sts__/resolver/recordTypes/users/usersOnDelete.test.ts	242	username: "test@test.com",	CODE
LOW	…sts__/resolver/recordTypes/users/usersOnDelete.test.ts	287	email: "test@test.com"	CODE
LOW	…_tests__/resolver/recordTypes/users/usersOnPut.test.ts	230	email: "test@test.com"	CODE
LOW	…_tests__/resolver/recordTypes/users/usersOnPut.test.ts	243	username: "test@test.com",	CODE
LOW	…_tests__/resolver/recordTypes/users/usersOnPut.test.ts	298	email: "test@test.com"	CODE
LOW	…_tests__/resolver/recordTypes/users/usersOnPut.test.ts	311	username: "test@test.com",	CODE
LOW	…_tests__/resolver/recordTypes/users/usersOnPut.test.ts	360	email: "test@test.com"	CODE
LOW	packages/api-dashboard/__tests__/dashboards.test.ts	37	identity: { id: "api-key:abc/123", type: "admin", displayName: "Jane Doe" }	CODE
LOW	…s/api-dashboard/__tests__/helpers/useGraphQLHandler.ts	20	displayName: "John Doe"	CODE
LOW	…ages/api-file-manager/__tests__/file.lifecycle.test.ts	29	displayName: "John Doe",	CODE
LOW	…ages/api-file-manager/__tests__/file.lifecycle.test.ts	34	displayName: "John Doe",	CODE
LOW	…ages/api-file-manager/__tests__/utils/useGqlHandler.ts	29	displayName: "John Doe"	CODE
LOW	packages/cognito/__tests__/cognitoIdpConfig.test.ts	34	const token = { sub: "cognito-sub", email: "user@example.com" };	CODE
LOW	…headless-cms-bulk-actions/__tests__/context/helpers.ts	12	displayName: "John Doe",	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	160	["JaneDoeKeyword", ["Jane Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	161	["JohnDoeKeyword", ["John Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	162	["TestKeyword", ["John Doe", "Jane Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	162	["TestKeyword", ["John Doe", "Jane Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	163	["JaneDoeKeyword".toLowerCase(), ["Jane Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	164	["JohnDoeKeyword".toLowerCase(), ["John Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	165	["TestKeyword".toLowerCase(), ["John Doe", "Jane Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	165	["TestKeyword".toLowerCase(), ["John Doe", "Jane Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	166	["JaneDoeKeyword".toUpperCase(), ["Jane Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	167	["JohnDoeKeyword".toUpperCase(), ["John Doe"]],	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	168	["TestKeyword".toUpperCase(), ["John Doe", "Jane Doe"]]	CODE
LOW⚡	packages/api-opensearch/__tests__/search/base.test.ts	168	["TestKeyword".toUpperCase(), ["John Doe", "Jane Doe"]]	CODE
LOW	…ckages/api-opensearch/__tests__/search/base.entries.ts	12	name: "John Doe",	CODE
LOW	…ckages/api-opensearch/__tests__/search/base.entries.ts	41	name: "Jane Doe",	CODE
LOW	…lder-scheduler/__tests__/__mocks/context/useHandler.ts	27	identity: { id: "id-12345678", type: "admin", displayName: "John Doe" },	CODE
LOW	…te-builder-workflows/__tests__/__helpers/identities.ts	6	export const ADMIN: IdentityData = { id: "id-12345678", type: "admin", displayName: "John Doe" };	CODE
LOW	…entation/fieldTypes/types/TextFieldSettingsModifier.ts	22	form.layout(layout => [layout.row("placeholder")]);	CODE
LOW	…tion/fieldTypes/types/RichTextFieldSettingsModifier.ts	22	form.layout(layout => [layout.row("placeholder")]);	CODE
LOW	…tion/fieldTypes/types/LongTextFieldSettingsModifier.ts	22	form.layout(layout => [layout.row("placeholder")]);	CODE
511 more matches not shown…

Hallucination Indicators52 hits · 520 pts

Severity	File	Line	Snippet	Context
CRITICAL	…/9c.3-presenters/task-09-exclusion-dialog-presenter.md	462	expect(setup.presenter.vm.user.options.map(option => option.id)).toEqual(["user-ivan"]);	CODE
CRITICAL	…workflows-phase-3/3.4-wb-graphql/task-11-wb-graphql.md	491	listed.data.websiteBuilder.listWebsiteBuilderPageWorkflows.data.map(	CODE
CRITICAL	…workflows-phase-3/3.4-wb-graphql/task-11-wb-graphql.md	563	listed.data.websiteBuilder.listWebsiteBuilderPageWorkflows.data.map(	CODE
CRITICAL	…se-6/6.2-step-runner/task-04b-private-tasks-graphql.md	358	result.data.backgroundTasks.listTasks.data.map((item: { name: string }) => {	CODE
CRITICAL	…se-6/6.2-step-runner/task-04b-private-tasks-graphql.md	399	result.data.backgroundTasks.listTasks.data.map((item: { name: string }) => {	CODE
CRITICAL	…2-admin-foundations/task-07-notifications-extension.md	363	expect(mocks.toast.showToast.mock.calls.map(call => call[0].title)).toEqual([	CODE
CRITICAL	…2-admin-foundations/task-07-notifications-extension.md	368	expect(mocks.presenter.markShown.mock.calls.map(call => call[0])).toEqual([	CODE
CRITICAL	…min-layers/L4-review/task-13-trash-guard-decorators.md	202	const sent = useCases.cancelReviewsForDelete.execute.mock.calls.map(call => call[0]);	CODE
CRITICAL	…-phase-9b/9b.5-presenters/task-14c-inspection-names.md	307	const sizes = setup.config.listUsers.mock.calls.map(call => (call[0].ids ?? []).length);	CODE
CRITICAL	…ase-9b/9b.5-presenters/task-14-reference-resolution.md	685	const sizes = setup.config.listUsers.mock.calls.map(call => (call[0].ids ?? []).length);	CODE
CRITICAL	…ackground-tasks/__tests__/graphql/privateTasks.test.ts	103	result.data.backgroundTasks.listTasks.data.map((item: INamedItem) => item.name).sort()	CODE
CRITICAL	…presentation/FileList/components/Grid/FileGrid.test.ts	299	expect(presenter.vm.list.selection.selectedIds.has("file-1")).toBe(true);	CODE
CRITICAL	…presentation/FileList/components/Grid/FileGrid.test.ts	300	expect(presenter.vm.list.selection.selectedIds.has("file-2")).toBe(false);	CODE
CRITICAL	packages/api-file-manager/__tests__/files.src.test.ts	24	const sources = list.data.fileManager.listFiles.data.map(	CODE
CRITICAL	…tation/listLocking/ContentEntriesPresenterDecorator.ts	34	() => this.original.list.vm.rows.map(r => r.id),	CODE
CRITICAL	…lder-workflows/__tests__/graphql/pageWorkflows.test.ts	45	listed.data.websiteBuilder.listWebsiteBuilderPageWorkflows.data.map(	CODE
CRITICAL	…lder-workflows/__tests__/graphql/pageWorkflows.test.ts	123	listed.data.websiteBuilder.listWebsiteBuilderPageWorkflows.data.map(	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	236	expect(t.presenter.list.vm.rows.map(r => r.entryId)).toEqual(["entry-1", "entry-2"]);	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	279	expect(t.presenter.list.vm.rows.map(r => r.entryId)).toEqual(["folder-1", "folder-2"]);	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	350	t.presenter.list.actions.search.set("entry-1");	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	371	t.presenter.list.actions.search.set("test");	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	406	t.presenter.list.actions.search.set("test");	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	414	const searchCall = t.listEntriesGateway.execute.mock.calls.at(-1) ?? [];	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	433	t.presenter.list.actions.search.set("entry-1");	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	444	t.presenter.list.actions.search.clear();	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	479	t.presenter.list.actions.filter.set("status", "published");	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	525	expect(t.presenter.list.vm.rows.map(r => r.entryId)).toEqual([	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	604	t.presenter.list.actions.search.set("test");	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	650	t.presenter.list.actions.sort.set("savedOn", "ASC");	CODE
CRITICAL	…on/contentEntries/list/ContentEntriesPresenter.test.ts	657	expect(t.presenter.list.vm.rows.map(r => r.entryId)).toEqual([	CODE
CRITICAL	…website-builder/__tests__/frontendSettings.gql.test.ts	131	getResponse.data.frontend.getSettings.data.starterKits.map((kit: any) => kit.id)	CODE
CRITICAL	packages/api-core/__tests__/security/teams.test.ts	94	expect(response.data.security.createTeam.data.roles.map((r: any) => r.id)).toEqual([	CODE
CRITICAL	packages/api-core/__tests__/security/teams.test.ts	106	expect(response.data.security.createTeam.data.roles.map((r: any) => r.id)).toEqual([	CODE
CRITICAL	packages/api-core/__tests__/security/teams.test.ts	134	expect(response.data.security.updateTeam.data.roles.map((r: any) => r.id)).toEqual([	CODE
CRITICAL	packages/api-core/__tests__/security/teams.test.ts	152	expect(response.data.security.updateTeam.data.roles.map((r: any) => r.id)).toEqual([	CODE
CRITICAL	…n/exclusionDialog/ExclusionDialogPresenter.add.test.ts	322	expect(setup.presenter.vm.user.options.map(option => option.id)).toEqual(["user-ivan"]);	CODE
CRITICAL	…n/exclusionDialog/ExclusionDialogPresenter.add.test.ts	336	const ids = setup.presenter.vm.user.options.map(option => option.id);	CODE
CRITICAL	…view/trash/ActiveReviewGuard/ActiveReviewGuard.test.ts	416	const sent = fakes.cancelReviewsForDelete.execute.mock.calls.map(call => call[0]);	CODE
CRITICAL	…view/trash/ActiveReviewGuard/ActiveReviewGuard.test.ts	764	expect(fakes.cancelReviewsForDelete.execute.mock.calls.map(call => call[0])).toEqual([	CODE
CRITICAL	…editor/WorkflowEditorPresenter.inspectionNames.test.ts	203	const sizes = setup.listWorkflowUsers.execute.mock.calls.map(	CODE
CRITICAL	…tion/editor/WorkflowEditorPresenter.references.test.ts	227	const sizes = setup.listWorkflowUsers.execute.mock.calls.map(	CODE
CRITICAL	…dActions/ContentEntriesPresenterSchedulingDecorator.ts	41	this.original.list.vm.rows.map(	CODE
CRITICAL	…tures/trash/BulkDeletePresenterReviewDecorator.test.ts	404	const sizes = useCases.listBlockingReviews.execute.mock.calls.map(call => {	CODE
CRITICAL	…tures/trash/BulkDeletePresenterReviewDecorator.test.ts	691	expect(useCases.cancelReviewsForDelete.execute.mock.calls.map(call => call[0])).toEqual([	CODE
CRITICAL	…ject-aws/src/pulumi/apps/admin/createAdminPulumiApp.ts	67	domain: baseApp.resources.cloudfront.output.domainName.apply(	CODE
CRITICAL	…ages/project-aws/src/pulumi/apps/api/ApiFileManager.ts	29	variables: graphql.functions.graphql.output.environment.apply(env => {	CODE
CRITICAL	…s/project-aws/src/pulumi/apps/api/ApiBackgroundTask.ts	29	layers: graphql.functions.graphql.output.layers.apply(arns => {	CODE
CRITICAL	…ckages/project-aws/src/pulumi/apps/api/ApiScheduler.ts	29	layers: graphql.functions.graphql.output.layers.apply(arns => {	CODE
CRITICAL	…ckages/project-aws/src/pulumi/apps/api/ApiScheduler.ts	62	policy: graphql.functions.graphql.output.arn.apply(resolverArn => {	CODE
CRITICAL	…/project-aws/src/pulumi/apps/api/createApiPulumiApp.ts	355	domain: baseApp.resources.cloudfront.output.domainName.apply(	CODE
CRITICAL	…/features/notifications/NotificationsRenderer.test.tsx	246	expect(mocks.toast.showToast.mock.calls.map(call => call[0].title)).toEqual([	CODE
CRITICAL	…/features/notifications/NotificationsRenderer.test.tsx	251	expect(mocks.presenter.markShown.mock.calls.map(call => call[0])).toEqual([	CODE

Hyper-Verbose Identifiers190 hits · 186 pts

Severity	File	Line	Snippet	Context
LOW	oxlint-plugins/webiny.ts	26	function isCreateImplementationCallee(callee: any): boolean {	CODE
LOW	…specs/remote-component-bundling-nextjs-loading-spec.md	1317	export function RemoteComponentErrorFallback({	CODE
LOW	docs/.bruno/plans/2026-05-15-webhooks-sdk.md	752	export async function listAvailableWebhookEvents(	CODE
LOW	docs/.bruno/plans/2026-05-16-webhooks-admin-ui.md	2231	const WebhookDeliveriesDrawerInner = observer(function WebhookDeliveriesDrawerInner({	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	120	def test_rejects_symlinked_parent(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	129	def test_case_and_unicode_fold(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	135	def test_writes_and_creates_parents(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	142	def test_replaces_symlink_instead_of_writing_through(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1162	def test_rejects_unsafe_and_colliding_paths(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1171	def test_symlink_is_never_adopted(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1180	def test_large_text_needs_manual_export(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	2164	def test_mark_with_commit_and_etag(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	2171	def test_mark_defaults_to_head(self):	CODE
LOW⚡	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	2179	def test_mark_warns_on_dirty_tree(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	104	def test_accepts_normal_paths(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	108	def test_rejects_unsafe_paths(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	336	def test_star_does_not_cross_slash(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	350	def test_last_match_wins_with_negation(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	355	def test_question_mark_and_escaping(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	478	def test_render_parse_round_trip(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	494	def test_empty_lists_and_values(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	832	def test_loads_raw_json_and_skips_directories(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	857	def test_init_writes_header_and_exclude_entry(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	874	def test_init_refuses_existing_catalogue_and_outside_paths(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	881	def test_init_does_not_duplicate_exclude_entry(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1079	def test_adopts_unzipped_files_with_matching_size(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1108	def test_second_run_reports_nothing_changed(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1118	def test_old_local_copy_is_not_adopted_for_newer_etag(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1130	def test_newer_unzipped_copy_is_adopted_for_newer_etag(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1141	def test_missing_local_file_counts_as_changed(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1149	def test_removed_and_excluded(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1401	def test_imports_and_updates_row(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1412	def test_size_mismatch_then_retry_fails(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1424	def test_saved_result_size_mismatch_fails_immediately(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1430	def test_etag_unknown_then_parent_listing(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1441	def test_parent_listing_with_other_etag_fails(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1449	def test_retyped_too_large_is_manual(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1466	def test_reappearing_file_clears_removed_at(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1651	def test_removal_reconciliation_and_report(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1680	def test_report_with_spaces_and_answers(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1840	def test_round_trip_with_tricky_lines(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1849	def test_parse_answers_last_section_wins(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1870	def test_ids_duplicates_and_open(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1882	def test_answers_flow_is_idempotent(self):	CODE
LOW	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	1905	def test_answers_without_file_is_noop(self):	CODE
LOW	…cs/.bruno/plans/2026-05-16-webhooks-admin-ui-polish.md	890	const WebhookDeliveriesDrawerInner = observer(function WebhookDeliveriesDrawerInner({	CODE
LOW	…ans/2026-05-25-webhook-deliveries-filter-by-webhook.md	560	const WebhookDeliveriesPageInner = observer(function WebhookDeliveriesPageInner() {	CODE
LOW	docs/.bruno/plans/2026-05-20-webhook-deliveries-page.md	1602	const WebhookDeliveriesPageInner = observer(function WebhookDeliveriesPageInner() {	CODE
LOW	…ase-9a/9a.4-editor-presenter/task-08-workflow-draft.md	2775	function getAutomationStepWarnings(step: EditorStep, context: StepContext): string[] {	CODE
LOW	….9-trash-delete-warning/task-33-active-review-guard.md	412	function createDeferredConfirmation() {	CODE
LOW	….9-trash-delete-warning/task-33-active-review-guard.md	1145	function isActiveReviewOnTrashData(value: unknown): value is ActiveReviewOnTrashData {	CODE
LOW	…8a/8a.9-trash-delete-warning/task-34-warning-dialog.md	994	function ActiveReviewWarningDialog() {	CODE
LOW	…phase-8a/8a.7-wb-editor/task-23-wb-publish-autosave.md	769	return function PageBasePublishDecoratorAction(props) {	CODE
LOW	…phase-8a/8a.7-wb-editor/task-23-wb-publish-autosave.md	808	return function PageEditorAutoSaveDecorated(props) {	CODE
LOW	…hase-8a/8a.7-wb-editor/task-22-wb-editor-shell-glue.md	1368	return function PageNewRevisionDecoratorAction(props) {	CODE
LOW	…kflows-phase-8a/8a.7-wb-editor/task-24-wb-page-list.md	994	return function PageListChangeStatusAction(props) {	CODE
LOW	…ws-phase-8a/8a.6-cms-editor/task-20-cms-editor-glue.md	335	function createFakeRevisionsPresenter(): RevisionsListPresenter.Interface {	CODE
LOW	…ws-phase-8a/8a.6-cms-editor/task-20-cms-editor-glue.md	1809	export function getCmsEntryReviewInitParams(input: CmsEntryReviewInitInput): TargetReviewInitParams {	CODE
LOW	…ws-phase-8a/8a.6-cms-editor/task-20-cms-editor-glue.md	2058	return createReactiveComponent(function CmsEntryReviewBarDecorator(props) {	CODE
LOW	…ws-phase-8a/8a.6-cms-editor/task-20-cms-editor-glue.md	2123	return function CmsEntryReviewScheduleMenuItemDecorator(props) {	CODE
130 more matches not shown…

Decorative Section Separators44 hits · 168 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	devtools/webiny-config-devtools/panel.js	4	// ── State ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	devtools/webiny-config-devtools/panel.js	14	// ── DOM refs ───────────────────────────────────────────────────	COMMENT
MEDIUM⚡	devtools/webiny-config-devtools/panel.js	20	// ── Polling ────────────────────────────────────────────────────	COMMENT
MEDIUM	devtools/webiny-config-devtools/panel.js	90	// ── Scroll preservation ─────────────────────────────────────────	COMMENT
MEDIUM	devtools/webiny-config-devtools/panel.js	132	// ── Rendering ──────────────────────────────────────────────────	COMMENT
MEDIUM	devtools/webiny-config-devtools/panel.js	555	// ── JSON tree builder ──────────────────────────────────────────	COMMENT
MEDIUM	devtools/webiny-config-devtools/panel.js	843	// ── Properties table ───────────────────────────────────────────	COMMENT
MEDIUM	devtools/webiny-config-devtools/panel.js	895	// ── Clipboard ──────────────────────────────────────────────────	COMMENT
MEDIUM	devtools/webiny-config-devtools/panel.js	910	// ── Context menu ────────────────────────────────────────────────	COMMENT
MEDIUM	devtools/webiny-config-devtools/panel.js	978	// ── Helpers ────────────────────────────────────────────────────	COMMENT
MEDIUM	devtools/webiny-config-devtools/panel.js	992	// ── Init ───────────────────────────────────────────────────────	COMMENT
MEDIUM	…event-handler-standalone/src/createWebinyApiHandler.ts	94	// ── Transport (Node HTTP) ──────────────────────────────────	COMMENT
MEDIUM	…event-handler-standalone/src/createWebinyApiHandler.ts	98	// ── Tenant + auth (extract → shared load) ──────────────────	COMMENT
MEDIUM	…event-handler-standalone/src/createWebinyApiHandler.ts	111	// ── Storage + identity provider (variant-supplied) ─────────	COMMENT
MEDIUM	…event-handler-standalone/src/createWebinyApiHandler.ts	114	// ── WebSockets transport (root) ────────────────────────────	COMMENT
MEDIUM⚡	…event-handler-standalone/src/createWebinyApiHandler.ts	135	// ── GraphQL schema cache (root) ────────────────────────────	COMMENT
MEDIUM⚡	…event-handler-standalone/src/createWebinyApiHandler.ts	139	// ── Encryption key cache (root) ────────────────────────────	COMMENT
MEDIUM⚡	…event-handler-standalone/src/createWebinyApiHandler.ts	145	// ── Background tasks (root) ────────────────────────────────	COMMENT
MEDIUM⚡	…event-handler-standalone/src/createWebinyApiHandler.ts	152	// ── Scheduler (root) ───────────────────────────────────────	COMMENT
MEDIUM⚡	…event-handler-standalone/src/createWebinyApiHandler.ts	161	// ── Bulk actions (root) ───────────────────────────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	93	// ── Build params (before ANY feature) ──────────────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	102	// request child container so per-request event handlers are resolvable) ─────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	106	// ── CMS ────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	112	// ── File Manager (domain) + storage transport ──────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	117	// ── Website Builder ────────────────────────────────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	122	// ── Websockets (domain) + real-time transport ──────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	126	// ── Supporting services ────────────────────────────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	134	// ── Workflows ──────────────────────────────────────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	138	// ── Scheduler + scheduler transport ────────────────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	143	// ── Extensions ─────────────────────────────────────────────	COMMENT
MEDIUM⚡	…/api-event-handler-core/src/registerApiRequestStack.ts	152	// ── GraphQL engine (always last) ───────────────────────────	COMMENT
MEDIUM	…es/api-event-handler-aws/src/createWebinyApiHandler.ts	32	// ── Transport ──────────────────────────────────────────────	COMMENT
MEDIUM	…es/api-event-handler-aws/src/createWebinyApiHandler.ts	36	// ── Tenant + auth (extract → shared load) ──────────────────	COMMENT
MEDIUM⚡	…-event-handler-aws/src/createWebinyStreamApiHandler.ts	36	// ── Transport ──────────────────────────────────────────────	COMMENT
MEDIUM⚡	…-event-handler-aws/src/createWebinyStreamApiHandler.ts	42	// ── Tenant + auth (extract → shared load) ──────────────────	COMMENT
MEDIUM	…-event-handler-aws/src/createWebinyStreamApiHandler.ts	55	// ── Background tasks: outbound dispatch only ───────────────	COMMENT
MEDIUM⚡	…t-handler-aws/src/composition/registerWebinyApiRoot.ts	18	// ── Database ───────────────────────────────────────────────	COMMENT
MEDIUM⚡	…t-handler-aws/src/composition/registerWebinyApiRoot.ts	26	// ── GraphQL schema cache ───────────────────────────────────	COMMENT
MEDIUM⚡	…t-handler-aws/src/composition/registerWebinyApiRoot.ts	31	// ── Encryption key cache ───────────────────────────────────	COMMENT
MEDIUM	ai-context/prds/admin-list-module/list-module-prd.md	801	// ── 1. Per-module abstractions (typed DI tokens) ──────────────────────────	COMMENT
MEDIUM	ai-context/prds/admin-list-module/list-module-prd.md	825	// ── 2. Implementations ────────────────────────────────────────────────────	COMMENT
MEDIUM	ai-context/prds/admin-list-module/list-module-prd.md	872	// ── 3. Feature (the unit of DI registration) ─────────────────────────────	COMMENT
MEDIUM	ai-context/prds/admin-list-module/list-module-prd.md	897	// ── 4. React hook ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	ai-context/prds/admin-list-module/list-module-prd.md	904	// ── 5. Public API ─────────────────────────────────────────────────────────	COMMENT

Modern AI Meta-Vocabulary21 hits · 76 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	.gitleaks.toml	134	# Where: packages/cli-plugin-scaffold-ci/src/index.ts, packages/cli-plugin-scaffold-ci/src/githubActions/index.ts,	COMMENT
MEDIUM⚡	.gitleaks.toml	138	# https://github.com/webiny/webiny-js/blob/1a220a8b72a5b9319049a2f30a13f5153bb7cebc/packages/cli-plugin-scaf	COMMENT
MEDIUM⚡	.gitleaks.toml	138	# https://github.com/webiny/webiny-js/blob/1a220a8b72a5b9319049a2f30a13f5153bb7cebc/packages/cli-plugin-scaf	COMMENT
MEDIUM⚡	.gitleaks.toml	139	# https://github.com/webiny/webiny-js/blob/583cd695357cad2654f30d36d15a8c4d7d5ab523/packages/cli-plugin-scaf	COMMENT
MEDIUM⚡	.gitleaks.toml	139	# https://github.com/webiny/webiny-js/blob/583cd695357cad2654f30d36d15a8c4d7d5ab523/packages/cli-plugin-scaf	COMMENT
MEDIUM⚡	.gitleaks.toml	140	# https://github.com/webiny/webiny-js/blob/bc38044581f1744611085fc600faffe4745b74ae/packages/cli-plugin-scaf	COMMENT
MEDIUM⚡	.gitleaks.toml	140	# https://github.com/webiny/webiny-js/blob/bc38044581f1744611085fc600faffe4745b74ae/packages/cli-plugin-scaf	COMMENT
MEDIUM⚡	.gitleaks.toml	141	# https://github.com/webiny/webiny-js/blob/00138158dbe41f8983373b26bde6f1c2c06df61a/packages/cli-plugin-scaf	COMMENT
MEDIUM⚡	.gitleaks.toml	141	# https://github.com/webiny/webiny-js/blob/00138158dbe41f8983373b26bde6f1c2c06df61a/packages/cli-plugin-scaf	COMMENT
MEDIUM	…de/skills/backend-developer/backend-developer-guide.md	45	│ │ ├── GetUserUseCase.ts # Application service (orchestration)	CODE
MEDIUM⚡	docs/.bruno/gitleaks.md	367	- `00138158dbe41f8983373b26bde6f1c2c06df61a:packages/cli-plugin-scaffold-ci/src/githubActions/index.ts:github-pat:73`	CODE
MEDIUM⚡	docs/.bruno/gitleaks.md	373	- `1a220a8b72a5b9319049a2f30a13f5153bb7cebc:packages/cli-plugin-scaffold-ci/src/index.ts:github-pat:74` (2021-05-10, A	CODE
MEDIUM⚡	docs/.bruno/gitleaks.md	379	- `583cd695357cad2654f30d36d15a8c4d7d5ab523:packages/cli-plugin-scaffold-ci/src/index.ts:github-pat:77` (2021-05-10, A	CODE
MEDIUM⚡	docs/.bruno/gitleaks.md	385	- `bc38044581f1744611085fc600faffe4745b74ae:packages/cli-plugin-scaffold-ci/src/githubActions/index.ts:github-pat:37`	CODE
MEDIUM	docs/.bruno/plans/2026-07-02-graphql-playground.md	171	## Task 1: Delete old package contents, scaffold new package.json	COMMENT
MEDIUM	docs/.bruno/plans/2026-10-07-design-pull-ask-skills.md	66	### Task 1: Script scaffold, path safety, atomic writes	COMMENT
MEDIUM	…s/.bruno/plans/2026-05-20-background-tasks-admin-ui.md	97	### Task 1: Package scaffolding	COMMENT
MEDIUM	docs/.bruno/plans/2026-06-20-api-file-manager-server.md	31	### Task 1: Package scaffolding + utility files + upload token	COMMENT
MEDIUM	docs/.bruno/plans/2026-07-17-api-headless-cms-pg-os.md	25	### Task 1: Package scaffolding + SyncTableManager	COMMENT
MEDIUM	…ate-webiny-project/src/features/CreateWebinyProject.ts	145	// Ask which hosting type to scaffold before anything hosting-specific is copied.	COMMENT
MEDIUM	ai-context/plans/api-opensearch.md	668	### Phase 1: Package scaffolding	COMMENT

Over-Commented Block69 hits · 69 pts

Severity	File	Line	Snippet	Context
LOW	.verdaccio.yaml	1	#	COMMENT
LOW	.gitleaks.toml	1	# Gitleaks config. Findings report: docs/.bruno/gitleaks.md (IDs L01..L39).	COMMENT
LOW	.gitleaks.toml	61	# L15: npm auth token	COMMENT
LOW	.gitleaks.toml	81	# It is a Content Delivery API token (read-only, published content only).	COMMENT
LOW	.gitleaks.toml	101	# Confirmed by the WCP owner, including production.	COMMENT
LOW	.gitleaks.toml	141	# https://github.com/webiny/webiny-js/blob/00138158dbe41f8983373b26bde6f1c2c06df61a/packages/cli-plugin-scaf	COMMENT
LOW	.gitleaks.toml	161	[[allowlists]]	COMMENT
LOW	.gitleaks.toml	181	# "exp" claims: 2025-06-12 (kiboAuthToken.ts), 2025-07-10 (useGetEcommerceSettings.ts),	COMMENT
LOW	.gitleaks.toml	201	# https://github.com/webiny/webiny-js/blob/c8c9498ee69a0b0cd42c872416702121e444778c/packages/app-website-bui	COMMENT
LOW	.gitleaks.toml	221	# URLs:	COMMENT
LOW	typings/void/index.d.ts	1	// Sometimes we need to neutralize certain @types/ packages.	COMMENT
LOW	scripts/layers/regions.js	21	// "eu-south-1", // Region not enabled in AWS account	COMMENT
LOW	packages/handler/src/exports/api.ts	1	// Route abstraction was removed with the Fastify migration.	COMMENT
LOW	…ct-standalone/src/registerStandaloneProjectFeatures.ts	21	container.registerDecorator(GenerateApiDbConnection);	COMMENT
LOW	packages/project-standalone/src/serve/spawnApiServer.ts	61	const runnerTemplate = path.join(import.meta.dirname, "runners", "apiServerRunner.mjs");	COMMENT
LOW	…t-standalone/src/serve/devProxy/pointAppsAtDevProxy.ts	21	// it during the bootstrap config render, so filling blanks would never win. Same thing AWS does	COMMENT
LOW	…manager-standalone/src/FileManagerStandaloneFeature.ts	21	name: "FileManagerServer",	COMMENT
LOW	packages/api-file-manager/__tests__/files.test.ts	21	fileManager: {	COMMENT
LOW	packages/api-file-manager/__tests__/files.test.ts	41	// expect(update1).toEqual({	COMMENT
LOW	packages/cli-aws/bin.js	1	// Dummy file so that yarn does not complain about missing "bin.js" file.	COMMENT
LOW	packages/api-aco/__tests__/folder.so.test.ts	141	const [existingUserResponse] = await aco.listFolders({	COMMENT
LOW	packages/api-aco/__tests__/folder.flp.crud.test.ts	621	// hasMoreItems: true,	COMMENT
LOW	…event-handler-standalone/src/createWebinyApiHandler.ts	101	// the key by tenant partition (ApiKeysRepository reads TenantContext.getTenant()), so	COMMENT
LOW	…event-handler-standalone/src/createWebinyApiHandler.ts	141	EncryptionKeyCacheFeature.register(rootContainer);	COMMENT
LOW	…event-handler-standalone/src/createWebinyApiHandler.ts	161	// ── Bulk actions (root) ───────────────────────────────────	COMMENT
LOW	packages/website-builder-nuxt/src/DocumentRenderer.ts	1	// Re-export the base Vue DocumentRenderer unchanged.	COMMENT
LOW	…ss-cms/src/exports/admin/cms/field-renderers/object.ts	1	// @ts-nocheck unused	COMMENT
LOW	…/src/exports/admin/cms/field-renderers/dynamic-zone.ts	1	// @ts-nocheck unused	COMMENT
LOW	packages/website-builder-vue/index.js	1	// Dev-only proxy: forwards to the compiled dist so that workspace symlinks	COMMENT
LOW	…/api-event-handler-core/src/registerApiRequestStack.ts	141	CmsSchedulerFeature.register(container);	COMMENT
LOW	…site-builder/src/features/installer/ApiKeyInstaller.ts	21	slug: "frontend-integration",	COMMENT
LOW	…tensions/Project/WcpInjectTelemetryClientAfterBuild.ts	61	// wrapper function would strip the marker and silently downgrade the function to	COMMENT
LOW	…s/api-core/src/features/security/shared/description.ts	1	// Roles, teams and API keys all declare `description: String` in the GraphQL schema - nullable -	COMMENT
LOW	…app-sdk-playground/src/plugins/sdkGlobalDeclaration.ts	1	// Global ambient declaration injected into Monaco's TypeScript language service.	COMMENT
LOW	packages/website-builder-sdk/index.js	1	// Dev-only proxy for symlinked monorepo packages: when an external project	COMMENT
LOW	packages/global-config/index.js	21	// A new config file is written if it doesn't exist or is invalid.	COMMENT
LOW	packages/cli-standalone/bin.js	1	// Dummy file so that yarn does not complain about missing "bin.js" file.	COMMENT
LOW	…-event-handler-aws/src/createWebinyStreamApiHandler.ts	41		COMMENT
LOW	…t-handler-aws/src/composition/registerWebinyApiRoot.ts	21	// Identity providers are not registered here. Each one comes from its project extension (e.g.	COMMENT
LOW	…s/admin-ui/scripts/importFromFigma/createThemeCssV4.js	301		COMMENT
LOW	…s/admin-ui/scripts/importFromFigma/createThemeCssV4.js	321	// }	COMMENT
LOW	…s/admin-ui/scripts/importFromFigma/createThemeCssV4.js	341	// }	COMMENT
LOW	…efaultConfig/Sidebar/ElementSettings/ElementInputs.tsx	61	//	COMMENT
LOW	…efaultConfig/Sidebar/ElementSettings/ElementInputs.tsx	81	// }	COMMENT
LOW	…kages/project-aws/src/pulumi/apps/api/ApiCloudfront.ts	281	// We are ignoring changes to the "staging" property. This is because of the following.	COMMENT
LOW	…ject-aws/src/pulumi/apps/react/createReactPulumiApp.ts	101	}	COMMENT
LOW	packages/app-admin/src/styles.scss	1	// ⚠️ DEPRECATED STYLESHEET ⚠️	COMMENT
LOW	…s/build-tools/bundling/function/createRsbuildConfig.js	61	// Declares the entry's exports as the bundle's public API, so ALL of them survive.	COMMENT
LOW	…s/build-tools/bundling/function/createRsbuildConfig.js	81	}),	COMMENT
LOW	…es-tasks/src/tasks/MockDataManager/calculateAmounts.ts	21	amount: 100000,	COMMENT
LOW	.github/workflows/wac/deleteMergedBranches.wac.ts	1	import { createWorkflow } from "github-actions-wac";	COMMENT
LOW	.github/workflows/wac/cleanupPrAssets.wac.ts	1	import { createWorkflow } from "github-actions-wac";	COMMENT
LOW	.github/workflows/wac/assignMilestone.wac.ts	1	import { createWorkflow } from "github-actions-wac";	COMMENT
LOW	.github/workflows/wac/slopCop.wac.ts	1	import { createWorkflow } from "github-actions-wac";	COMMENT
LOW	.github/workflows/wac/slopCop.wac.ts	21	// forks, we skip fork PRs cleanly - the near-totality of PRs here come from	COMMENT
LOW	.github/workflows/wac/utils/actions.ts	1	// Third-party GitHub Actions, pinned to commit SHAs rather than tags.	COMMENT
LOW	.github/workflows/wac/utils/openSearch.ts	1	// OpenSearch for Vitest runs, as a service container on the runner instead of the shared domain in	COMMENT
LOW	…ows/wac/utils/runNodeScripts/assignReleaseMilestone.js	1	// Assigns the `x.y.z` milestone to every merged PR that has reached `release/x.y.z`.	COMMENT
LOW	.github/workflows/wac/utils/runNodeScripts/slopCop.js	1	// "Slop cop" PR analyzer. Reads a pull request's stated intent (title/body),	COMMENT
LOW	.github/workflows/wac/utils/runNodeScripts/slopCop.js	21	// ANTHROPIC_MODEL - model id (default: claude-sonnet-5).	COMMENT
9 more matches not shown…

Structural Annotation Overuse19 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW	scripts/generateSkills/src/pipeline.ts	25	// Step 1: Discovery	COMMENT
LOW	scripts/generateSkills/src/pipeline.ts	42	// Step 2: Resolve source paths and group by category	COMMENT
LOW	scripts/generateSkills/src/pipeline.ts	100	// Step 3: Write SKILL.md per category	COMMENT
LOW⚡	…headless-cms-bulk-actions/src/domain/BulkActionName.ts	2	// Step 1: Remove non-alphanumeric characters and replace them with spaces	COMMENT
LOW⚡	…headless-cms-bulk-actions/src/domain/BulkActionName.ts	5	// Step 2: Split the string into words	COMMENT
LOW⚡	…headless-cms-bulk-actions/src/domain/BulkActionName.ts	8	// Step 3: Capitalize the first letter of each word	COMMENT
LOW⚡	…headless-cms-bulk-actions/src/domain/BulkActionName.ts	11	// Step 4: Join all the capitalized words together	COMMENT
LOW⚡	…_tests__/apiGatewayEventToHttpRequest.security.test.ts	140	// Step 1: __proto__ key passes through JSON.parse as own property.	COMMENT
LOW⚡	…_tests__/apiGatewayEventToHttpRequest.security.test.ts	143	// Step 2: recursive merge (lodash.merge, deepmerge, etc.) triggers pollution.	COMMENT
LOW⚡	…_tests__/apiGatewayEventToHttpRequest.security.test.ts	146	// Step 3: every object in the runtime now has isAdmin === true.	COMMENT
LOW⚡	skills/user-skills/api/v5-to-v6-migration/SKILL.md	289	### Step 1: Find the catalog entry	COMMENT
LOW⚡	skills/user-skills/api/v5-to-v6-migration/SKILL.md	293	### Step 2: Get the source path	COMMENT
LOW⚡	skills/user-skills/api/v5-to-v6-migration/SKILL.md	297	### Step 3: Read the type definition	COMMENT
LOW	ai-context/prds/tasks-graphql-refactor.md	20	### Step 1: Create the CoreGraphQLSchemaFactory implementation	COMMENT
LOW	ai-context/prds/tasks-graphql-refactor.md	54	### Step 2: Export the implementation	COMMENT
LOW⚡	ai-context/prds/tasks-graphql-refactor.md	69	### Step 3: Move registration into `createBackgroundTaskContext`	COMMENT
LOW⚡	ai-context/prds/tasks-graphql-refactor.md	73	### Step 4: Remove `createBackgroundTaskGraphQL`	COMMENT
LOW⚡	ai-context/prds/tasks-graphql-refactor.md	77	### Step 5: Update external consumers	COMMENT
LOW	ai-context/prds/tasks-graphql-refactor.md	92	### Step 6: Update package index exports	COMMENT

Verbosity Indicators14 hits · 26 pts

Severity	File	Line	Snippet	Context
LOW	scripts/generateSkills/src/pipeline.ts	25	// Step 1: Discovery	COMMENT
LOW	scripts/generateSkills/src/pipeline.ts	42	// Step 2: Resolve source paths and group by category	COMMENT
LOW	scripts/generateSkills/src/pipeline.ts	100	// Step 3: Write SKILL.md per category	COMMENT
LOW	…s/background-tasks/src/api/graphql/checkPermissions.ts	47	// If there is no permission that doesn't restrict RWD permissions, that means we need to check if the RWD.	COMMENT
LOW	…i-aco/src/utils/decorators/CmsEntriesCrudDecorators.ts	230	* First we need to check if user has access to the entries existing folder.	COMMENT
LOW⚡	…headless-cms-bulk-actions/src/domain/BulkActionName.ts	2	// Step 1: Remove non-alphanumeric characters and replace them with spaces	COMMENT
LOW⚡	…headless-cms-bulk-actions/src/domain/BulkActionName.ts	5	// Step 2: Split the string into words	COMMENT
LOW⚡	…headless-cms-bulk-actions/src/domain/BulkActionName.ts	8	// Step 3: Capitalize the first letter of each word	COMMENT
LOW⚡	…headless-cms-bulk-actions/src/domain/BulkActionName.ts	11	// Step 4: Join all the capitalized words together	COMMENT
LOW	…es/api-file-manager-s3/src/graphql/checkPermissions.ts	44	// If there is no permission that doesn't restrict RWD permissions, that means we need to check if the RWD.	COMMENT
LOW⚡	…_tests__/apiGatewayEventToHttpRequest.security.test.ts	140	// Step 1: __proto__ key passes through JSON.parse as own property.	COMMENT
LOW⚡	…_tests__/apiGatewayEventToHttpRequest.security.test.ts	143	// Step 2: recursive merge (lodash.merge, deepmerge, etc.) triggers pollution.	COMMENT
LOW⚡	…_tests__/apiGatewayEventToHttpRequest.security.test.ts	146	// Step 3: every object in the runtime now has isAdmin === true.	COMMENT
LOW	…tasks/src/tasks/MockDataManager/createModelAndGroup.ts	29	* First we need to check if the model already exists in the database. If not, we need to create it.	COMMENT

Cross-File Repetition5 hits · 25 pts

Severity	File	Snippet	Context
HIGH	…s-cms/__tests__/contentAPI/snapshots/product.manage.ts	caution: this field is resolved by making an extra query to db. recommendation: use it only with "get" queries (avoid in	STRING
HIGH	…-cms/__tests__/contentAPI/snapshots/category.manage.ts	caution: this field is resolved by making an extra query to db. recommendation: use it only with "get" queries (avoid in	STRING
HIGH	…less-cms/__tests__/contentAPI/snapshots/page.manage.ts	caution: this field is resolved by making an extra query to db. recommendation: use it only with "get" queries (avoid in	STRING
HIGH	…ss-cms/__tests__/contentAPI/snapshots/review.manage.ts	caution: this field is resolved by making an extra query to db. recommendation: use it only with "get" queries (avoid in	STRING
HIGH	…api-headless-cms/src/graphql/schema/createManageSDL.ts	caution: this field is resolved by making an extra query to db. recommendation: use it only with "get" queries (avoid in	STRING

AI Slop Vocabulary4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	extensions/tasks/SelfCleaningTask.ts	17	// api-core, or a robust augmentation loader) — to be discussed with the team.	COMMENT
MEDIUM	…rc/admin/components/LexicalCmsEditor/LexicalEditor.tsx	29	// drops its top border and rounds only the bottom corners — together one seamless	COMMENT
MEDIUM	…lder/src/inputRenderers/LexicalInput/LexicalEditor.tsx	34	// bottom corners so the two read as one seamless rounded box (matches Figma).	COMMENT
MEDIUM	…admin/src/base/Base/FieldRenderers/LexicalRenderer.tsx	43	// drops its top border and rounds only the bottom corners — together one seamless	COMMENT

TODO Padding4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	packages/cli-core/src/abstractions/features/types.ts	4	_: string[]; // TODO: implement this in a better way (handler method probably should have this in its context/meta d	CODE
LOW	…s/cli-core/src/services/LoggerService/LoggerService.ts	74	// TODO: implement a better way to get project root path.	COMMENT
LOW	…tConfig/Sidebar/ElementSettings/ExpressionRenderer.tsx	28	// TODO: implement data type adapters	COMMENT
LOW	…tConfig/Sidebar/ElementSettings/ExpressionRenderer.tsx	36	// TODO: implement data type adapters	COMMENT

Cross-Language Confusion (JS/TS)1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	packages/cli-standalone/src/features/WatchSummary.ts	99	print() {	CODE

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…-handler-standalone/src/server/createNodeHttpServer.ts	22	async function handleRequest(	CODE
LOW	…ect-aws/src/pulumi/apps/blueGreen/functions/handler.js	46	function handleRequest(request, active) {	CODE

webiny/webiny-js

Open-Source Code Quality, Security and Technical Debt Review