0.6

Adjusted Signal

0.6

Raw Pattern Score

100%

Time Factor

2026-10-30

Last Push

66.0K

Stars

JavaScript

Language

822.7K

Lines of Code

19.6K

Files

234

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 193 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.4/100 · LOW

Are imports declared and package/API names verified? 41 finding(s).

Agent Over-Engineering Ratio 0.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 45 finding(s).

PR Review Velocity Impact 2.7/100 · LOW

Which changes need focused human review? 234 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 40MEDIUM 6LOW 188

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 234 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Cross-Language Confusion (JS/TS)39 hits · 238 pts

Severity	File	Line	Snippet	Context
HIGH	test/unitCases/Defaults.unittest.js	91	print(received) {	CODE
HIGH	test/unitCases/Defaults.unittest.js	104	print(received) {	CODE
HIGH	test/unitCases/compileBooleanMatcher.unittest.js	33	print(received) {	CODE
HIGH	test/unitCases/css/printer.unittest.js	2420	print(	CODE
HIGH	test/unitCases/css/printer.unittest.js	2428	print("@media screen{.a{color:#ff0000;margin:1px 2px 1px 2px}}", "minify")	CODE
HIGH	test/unitCases/css/printer.unittest.js	8841	print(code, "minify")	CODE
HIGH	test/unitCases/css/printer.unittest.js	16192	print(runs[j]);	CODE
HIGH⚡	test/unitCases/css/printer.unittest.js	16270	print(css, {	CODE
HIGH⚡	test/unitCases/css/printer.unittest.js	16277	print(css, {	CODE
HIGH⚡	test/unitCases/css/printer.unittest.js	16284	print(	CODE
HIGH⚡	test/unitCases/css/printer.unittest.js	16294	print("a{color:red;top:0}", {	CODE
HIGH	test/unitCases/css/printer.unittest.js	16306	print("a{margin:0;margin-top:#f00}b{margin:0;margin-top:1px}", {	CODE
HIGH	test/unitCases/css/printer.unittest.js	16331	print("/! x /a{color:red}b{top:0}", {	CODE
HIGH	test/unitCases/css/printer.unittest.js	16347	print(css, {	CODE
HIGH	test/unitCases/css/printer.unittest.js	16367	print("a{--x: foo #f00 bar(#f00) }", visitors, "beautify")	CODE
HIGH	test/unitCases/css/printer.unittest.js	16371	print("a{--x: a, b c;b:x}", {	CODE
HIGH⚡	test/unitCases/css/parser.unittest.js	645	print(css, {	CODE
HIGH⚡	test/unitCases/css/parser.unittest.js	652	print(css, {	CODE
HIGH⚡	test/unitCases/css/parser.unittest.js	659	print(	CODE
HIGH⚡	test/unitCases/css/parser.unittest.js	669	print("a{color:red;top:0}", {	CODE
HIGH	test/unitCases/css/parser.unittest.js	681	print("a{margin:0;margin-top:#f00}b{margin:0;margin-top:1px}", {	CODE
HIGH	test/unitCases/css/parser.unittest.js	706	print("/! x /a{color:red}b{top:0}", {	CODE
HIGH	test/unitCases/css/parser.unittest.js	722	print(css, {	CODE
HIGH	test/unitCases/css/parser.unittest.js	742	print("a{--x: foo #f00 bar(#f00) }", visitors, "beautify")	CODE
HIGH	test/unitCases/css/parser.unittest.js	746	print("a{--x: a, b c;b:x}", {	CODE
HIGH	test/unitCases/html/printer.unittest.js	4274	print(source, "minify")	CODE
HIGH⚡	test/unitCases/html/printer.unittest.js	5971	print("<table><colgroup><col></colgroup><tr><td>x</table>", MINIFY)	CODE
HIGH⚡	test/unitCases/html/printer.unittest.js	5974	print("<template><tbody><tr><td>x</tbody></template>", MINIFY)	CODE
HIGH⚡	test/unitCases/html/printer.unittest.js	5984	print("<body>\n<div>", { ...MINIFY, fragmentContext: "div" })	CODE
HIGH	test/unitCases/html/printer.unittest.js	6021	print("<template><colgroup><col></template>", {	CODE
HIGH	test/unitCases/html/printer.unittest.js	6032	print("<form><form>", { ...BEAUTIFY, fragmentContext: "template" })	CODE
HIGH	test/unitCases/html/printer.unittest.js	6108	print("<table><caption>x</caption><tbody><tr><td>y</table>", MINIFY)	CODE
HIGH⚡	examples/module-code-splitting/example.js	5	print(counter.value);	CODE
HIGH⚡	examples/module-code-splitting/example.js	9	print(counter.value);	CODE
HIGH⚡	examples/module-code-splitting/example.js	11	print(counter.value);	CODE
HIGH⚡	examples/module/example.js	3	print(value);	CODE
HIGH⚡	examples/module/example.js	7	print(value);	CODE
HIGH⚡	examples/module/example.js	9	print(value);	CODE
HIGH	lib/stats/StatsPrinter.js	320	print(type, object, baseContext) {	CODE

Over-Commented Block124 hits · 123 pts

Severity	File	Line	Snippet	Context
LOW	tooling/generate-css-data.js	1	/*	COMMENT
LOW	tooling/generate-css-data.js	81	/** @typedef {KeywordNode \| LiteralNode \| TypeNode \| PropertyNode \| FunctionCallNode \| GroupNode \| CombinatorNode \| Mult	COMMENT
LOW	tooling/generate-css-data.js	2021	// WHY: `conversion` says what a color read in this space passes through on its way	COMMENT
LOW	tooling/generate-css-data.js	4301	["right", "100%"],	COMMENT
LOW	tooling/generate-css-data.js	4321	// and `-ms-content-zooming` read differently per user agent, and `all` has no	COMMENT
LOW	tooling/generate-css-data.js	4361	unmergeableSlotKeywords: [["flex-wrap", "balance"]],	COMMENT
LOW	tooling/generate-css-data.js	4461	// is 2018-era. Every other name above is newer in its one-value form too.	COMMENT
LOW	tooling/generate-css-data.js	4501	// not the longhand's initial (`flex` reads a missing basis as `0%` where	COMMENT
LOW	tooling/generate-css-data.js	4581	"starting-style",	COMMENT
LOW	tooling/generate-css-data.js	5041	["grad", 100],	COMMENT
LOW	tooling/generate-css-data.js	5061	// result the unit the answer carries: `same` as its arguments, `` for a	COMMENT
LOW	tooling/generate-css-data.js	5101	// `<calc-sum>` — and it is emitted from here rather than written beside the	COMMENT
LOW	tooling/generate-css-data.js	5621	"upper-roman"	COMMENT
LOW	tooling/generate-css-data.js	5801	// the two version tables hold numbers alone — `Infinity` prints as an identifier	COMMENT
LOW	tooling/generate-css-data.js	6341	}	COMMENT
LOW	tooling/generate-css-data.js	6961	// the same engine on the same version line, but caniuse has the property	COMMENT
LOW	tooling/generate-css-data.js	7141	// similar name: `font-smooth` takes `never`/`always`/a size, while	COMMENT
LOW	tooling/generate-css-data.js	7161	(name) => /** @type {[string, string[]]} */ ([name, ["-webkit-", "-moz-"]])	COMMENT
LOW	tooling/generate-css-data.js	7801	// could shadow it. Not every shorthand prefixes its longhands: \`inset\` sets \`top\`.	COMMENT
LOW	tooling/generate-css-data.js	7861	// Functions that take a \`<color>\` directly, so a hash among their arguments is a	COMMENT
LOW	tooling/generate-css-data.js	8361	.join(",\n")}	COMMENT
LOW	tooling/precompile-schemas.js	1	/*	COMMENT
LOW	tooling/generate-schemas.js	1	/*	COMMENT
LOW	tooling/measure-color-agreement.js	1	/*	COMMENT
LOW	tooling/measure-color-agreement.js	21	// carries that into every term of the product, so this is what a conversion	COMMENT
LOW	tooling/compare-html-tools.js	1241	const wantedStage = filterFrom("STAGE");	COMMENT
LOW	tooling/compare-xml-tools.js	1	/*	COMMENT
LOW	tooling/generate-html-data.js	1621	// absence, so `removeEmptyAttributes` may drop them. Deliberately short:	COMMENT
LOW	test/statsCases/split-chunks-max-size/very-big.js	1	// content content content content content content content content	COMMENT
LOW	test/statsCases/split-chunks-max-size/very-big.js	21	// content content content content content content content content	COMMENT
LOW	test/statsCases/split-chunks-max-size/big.js	1	// content content content content content content content content	COMMENT
LOW	…statsCases/split-chunks-max-size/subfolder/very-big.js	1	// content content content content content content content content	COMMENT
LOW	…statsCases/split-chunks-max-size/subfolder/very-big.js	21	// content content content content content content content content	COMMENT
LOW	test/statsCases/split-chunks-max-size/subfolder/big.js	1	// content content content content content content content content	COMMENT
LOW	…tsCases/split-chunks-max-size/inner-module/very-big.js	1	// content content content content content content content content	COMMENT
LOW	…tsCases/split-chunks-max-size/inner-module/very-big.js	21	// content content content content content content content content	COMMENT
LOW	…t/statsCases/split-chunks-max-size/inner-module/big.js	1	// content content content content content content content content	COMMENT
LOW	…es/split-chunks-max-size/in-some-directory/very-big.js	1	// content content content content content content content content	COMMENT
LOW	…es/split-chunks-max-size/in-some-directory/very-big.js	21	// content content content content content content content content	COMMENT
LOW	…tsCases/split-chunks-max-size/in-some-directory/big.js	1	// content content content content content content content content	COMMENT
LOW	test/statsCases/module-reasons/c.js	1	// empty	COMMENT
LOW	…/statsCases/analyzable-esm-fallbacks/webpack.config.js	61	// chunk's prefetch/preload children are still injected by `.f.prefetch`.	COMMENT
LOW	test/unitCases/globUtils.unittest.js	1	"use strict";	COMMENT
LOW	test/unitCases/css/printer.unittest.js	861	// An unterminated string only exists at EOF (a newline makes it a bad-string	COMMENT
LOW	test/harness/runtimes/bun-preload.js	1	"use strict";	COMMENT
LOW	test/specCases/test262.spectest.js	1961		COMMENT
LOW	test/specCases/xmlconf.spectest.js	1	"use strict";	COMMENT
LOW	test/specCases/html5lib.spectest.js	1	"use strict";	COMMENT
LOW	…gCases/contenthash/hash-placeholders/webpack.config.js	1	"use strict";	COMMENT
LOW	test/configCases/records/issue-295/file.js	1	// just a file	COMMENT
LOW	test/configCases/css/parsing/cases/selectors.css	241	a[href='place']::before {}	COMMENT
LOW	test/configCases/css/parsing/cases/selectors.css	261	#\31 23 {}	COMMENT
LOW	test/configCases/css/parsing/cases/selectors.css	281	#f\~o\~o {}	COMMENT
LOW	test/configCases/css/parsing/cases/selectors.css	301	#\<p\> {}	COMMENT
LOW	…wasm/analyzable-relative-public-path/webpack.config.js	61	// The public path reaches this one, and one rooted at the origin names the same	COMMENT
LOW	test/configCases/require/esm-module-exports/index.js	1	// Verify webpack's `require(esm)` "module.exports" unwrapping matches Node's	COMMENT
LOW	test/configCases/defer-import/css-export-types/index.js	1	// `import defer` coverage for every CSS module exportType webpack supports	COMMENT
LOW	test/configCases/defer-import/asset-modules/index.js	1	// `import defer` coverage for every asset module type webpack supports.	COMMENT
LOW	test/configCases/html/asset-url-hints-split/vendor.js	1	// This module lives in a split vendor chunk (see webpack.config.js).	COMMENT
LOW	…es/html/css-mixed-link-and-js-import/webpack.config.js	1	"use strict";	COMMENT
64 more matches not shown…

Hyper-Verbose Identifiers45 hits · 45 pts

Severity	File	Line	Snippet	Context
LOW	declarations.d.ts	184	export function moduleContextFromModuleAST(module: Module): {	CODE
LOW	test/statsCases/cause-error/webpack.config.js	30	function createWebpackErrorWithCause(message, options) {	CODE
LOW	test/unitCases/Compiler.unittest.js	210	function emitAssetWithFileAttributes(info) {	CODE
LOW	…assigned-import-binding-destructuring-pattern/index.js	14	function writeNamespaceMemberElement() {	CODE
LOW	…/entry-merge-exports-module-commonjs/webpack.config.js	13	function expectOneDefaultExportPlugin() {	CODE
LOW	…igCases/rule-set/simple-use-fn-array/webpack.config.js	7	function createFunctionArrayFromUseArray(useArray) {	CODE
LOW	test/configCases/inner-graph/issue-11678/module.js	181	function showSortManualButtonState() {	CODE
LOW	test/configCases/inner-graph/issue-11678/module.js	217	async function onInsertFromTemplateDialog() {	CODE
LOW	test/configCases/inner-graph/issue-11678/module.js	1073	async function doCreateAndShowTableWidget(	CODE
LOW	test/configCases/inner-graph/issue-11678/module.js	2486	async function showAssignResourcesDialog(appendTo) {	CODE
LOW	test/configCases/inner-graph/altaskitButton/module.js	104	value: function componentWillReceiveProps(nextProps) {	CODE
LOW	…configCases/parsing/custom-parser-hoisting/hoisting.js	121	function fromNestedFunctionDeclaration() {	CODE
LOW	…configCases/parsing/custom-parser-hoisting/hoisting.js	128	function fromBlockFunctionDeclaration() {	CODE
LOW	…mangle-with-destructuring-assignment/webpack.config.js	23	function getJsonCodeGeneratedSource(compiler) {	CODE
LOW	test/helpers/supportsLogicalAssignment.js	3	module.exports = function supportsLogicalAssignment() {	CODE
LOW	test/helpers/assertCircularModules.js	19	function assertCircularModulesPlugin(compiler) {	CODE
LOW	test/helpers/supportsOptionalCatchBinding.js	3	module.exports = function supportsOptionalCatchBinding() {	CODE
LOW	test/helpers/supportsArbitraryModuleNamespaceNames.js	5	module.exports = function supportsArbitraryModuleNamespaceNames() {	CODE
LOW	test/helpers/assertIncludedExternals.js	20	function assertIncludedExternalsPlugin(compiler) {	CODE
LOW	test/helpers/supportsProcessGetBuiltinModule.js	3	module.exports = function supportsProcessGetBuiltinModule() {	CODE
LOW	test/helpers/infrastructureLogErrors.js	27	module.exports = function filterInfraStructureErrors(logs, config) {	CODE
LOW	test/helpers/supportsNullishCoalescing.js	3	module.exports = function supportsNullishCoalescing() {	CODE
LOW	examples/externals/README.md	57	(function webpackUniversalModuleDefinition(root, factory) {	CODE
LOW	examples/wasm-complex/memory.js	1	async function getMemoryFromParentInWorker() {	CODE
LOW	examples/wasm-complex/README.md	61	async function getMemoryFromParentInWorker() {	CODE
LOW	examples/wasm-complex/README.md	195	async function getMemoryFromParentInWorker() {	CODE
LOW	examples/multi-part-library/README.md	43	(function webpackUniversalModuleDefinition(root, factory) {	CODE
LOW	examples/multi-part-library/README.md	119	(function webpackUniversalModuleDefinition(root, factory) {	CODE
LOW	examples/harmony-library/README.md	26	(function webpackUniversalModuleDefinition(root, factory) {	CODE
LOW	lib/context/ContextModule.js	1013	function webpackAsyncContextResolve(req) {	CODE
LOW	lib/context/ContextModule.js	1067	function webpackAsyncContextResolve(req) {	CODE
LOW	lib/context/ContextModule.js	1136	function webpackAsyncContextResolve(req) {	CODE
LOW	lib/optimize/InnerGraph.js	118	function isDependencyUsedByExports(	CODE
LOW	lib/runtime/MakeDeferredNamespaceObjectRuntime.js	65	function assignStronglyConnectedComponents(moduleGraph, seed, sccOf) {	CODE
LOW	lib/runtime/MakeDeferredNamespaceObjectRuntime.js	171	function getDeferredCycleModuleIds(closure, resolveId) {	CODE
LOW	lib/runtime/MakeDeferredNamespaceObjectRuntime.js	186	function getMakeDeferredNamespaceModeFromExportsType(exportsType) {	CODE
LOW	lib/runtime/MakeDeferredNamespaceObjectRuntime.js	203	function getOptimizedDeferredModule(	CODE
LOW	lib/dependencies/esm/ESMImportDependencyParserPlugin.js	286	function getNonOptionalMemberChain(node, count) {	CODE
LOW	lib/dependencies/import/ImportParserPlugin.js	86	function tagDynamicImportReferenced(parser, importCall, variableName) {	CODE
LOW	lib/dependencies/import/ImportParserPlugin.js	106	function getFulfilledCallbackNamespaceObj(importThen) {	CODE
LOW	lib/dependencies/import/ImportParserPlugin.js	127	function walkImportThenFulfilledCallback(	CODE
LOW	…s/helpers/traverseDestructuringAssignmentProperties.js	23	function traverseDestructuringAssignmentProperties(	CODE
LOW	lib/library/UmdLibraryPlugin.js	264	expr = `(function webpackLoadOptionalExternalModule() { try { return ${expr}; } catch(e) {} }())`;	CODE
LOW	lib/library/UmdLibraryPlugin.js	310	`function webpackLoadOptionalExternalModuleAmd(${wrapperArguments}) {\n` +	CODE
LOW	lib/library/UmdLibraryPlugin.js	353	`(function webpackUniversalModuleDefinition(root, factory) {\n${getAuxiliaryComment(	CODE

AI Slop Vocabulary5 hits · 14 pts

Severity	File	Line	Snippet	Context
MEDIUM	tooling/comparison/js-tool-comparison/package-lock.json	3927	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE
MEDIUM	test/configCases/defer-import/asset-modules/index.js	46	// robust if a user has a stricter `core.autocrlf` override.	COMMENT
MEDIUM	.github/workflows/dependency-review.yml	25	# robust-predicates is the comparison corpus's, reached through d3,	COMMENT
MEDIUM	.github/workflows/benchmarks.yml	46	# The harness has no deadline of its own and a watch bench waits on a	COMMENT
MEDIUM	.github/workflows/benchmarks.yml	113	# the harness still supports it:	COMMENT

Overly Generic Function Names10 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	…t/cases/inner-graph/inner-graph-cases/switch/module.js	21	function doSomething(obj) {	CODE
LOW	test/configCases/chunks-order/module/nested-shared.js	1	function doSomething() {}	CODE
LOW	test/configCases/chunks-order/module/shared.js	3	function doSomething() {}	CODE
LOW	test/configCases/chunks-order/module/dependency.js	1	function doSomething() {}	CODE
LOW	test/configCases/chunks-order/cjs/nested-shared.js	1	function doSomething() {}	CODE
LOW	test/configCases/chunks-order/cjs/shared.js	3	function doSomething() {}	CODE
LOW	test/configCases/chunks-order/cjs/dependency.js	1	function doSomething() {}	CODE
LOW	…t/configCases/plugins/manifest-plugin/nested-shared.js	1	function doSomething() {}	CODE
LOW	test/configCases/plugins/manifest-plugin/shared.js	3	function doSomething() {}	CODE
LOW	test/configCases/plugins/manifest-plugin/dependency.js	1	function doSomething() {}	CODE

Synthetic Comment Markers1 hit · 8 pts

Severity	File	Line	Snippet	Context
HIGH	lib/module/NormalModuleFactory.js	285	// The entry exists as requested, so the request failed for another reason.	COMMENT

Verbosity Indicators4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	…chCases/plugins/hmr-dispose-leaving-runtime/0/index.js	12	// Step 1: `b` stops importing `shared`, so its chunk leaves runtime `b`.	COMMENT
LOW	lib/optimize/FlagDependencyExportsPlugin.js	106	// Step 1: Try to restore cached provided export info from cache	COMMENT
LOW	…b/dependencies/commonjs/CommonJsExportsParserPlugin.js	178	* The purpose of this function is to check whether an expression is a truthy literal or not. This is	COMMENT
LOW	…b/dependencies/commonjs/CommonJsExportsParserPlugin.js	195	* The purpose of this function is to check whether an expression is a falsy literal or not. This is	COMMENT

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	codecov.yml	7	# Create the comment only once coverage drops, so a pull request that never	COMMENT

Slop Phrases2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	lib/dependencies/worker/WorkletDependency.js	47	// If options are updated, don't forget to update the hash and serialization functions	COMMENT
LOW	lib/dependencies/worker/WorkerDependency.js	54	// If options are updated, don't forget to update the hash and serialization functions	COMMENT

Fake / Example Data2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…sset-modules/resource-hints-manifest/webpack.config.js	54	new webpack.sources.RawSource("placeholder")	CODE
LOW	lib/css/data.js	8157	"placeholder",	CODE

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	lib/optimize/FlagDependencyExportsPlugin.js	106	// Step 1: Try to restore cached provided export info from cache	COMMENT

webpack/webpack

Open-Source Code Quality, Security and Technical Debt Review