3.5

Adjusted Signal

3.5

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

5.2K

Stars

PHP

Language

44.3K

Lines of Code

244

Files

120

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 15.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 113 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 7 finding(s).

Agent Over-Engineering Ratio 9.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 85 finding(s).

PR Review Velocity Impact 14.0/100 · LOW

Which changes need focused human review? 120 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 7LOW 113

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 120 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers85 hits · 86 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/SynopsisValidatorTest.php	8	public function testHasGenericIsFalseWithoutGenericToken(): void {	CODE
LOW⚡	tests/SynopsisValidatorTest.php	14	public function testHasGenericIsTrueWithGenericToken(): void {	CODE
LOW⚡	tests/SynopsisValidatorTest.php	20	public function testUnknownAssocWithoutGenericToken(): void {	CODE
LOW	tests/SynopsisValidatorTest.php	38	public function testUnknownAssocIsEmptyWithGenericToken(): void {	CODE
LOW	tests/SynopsisValidatorTest.php	51	public function testUnknownAssocReportsWithIgnoreGeneric(): void {	CODE
LOW	tests/SynopsisValidatorTest.php	67	public function testUnknownAssocIgnoreGenericStillExcludesFlags(): void {	CODE
LOW	tests/SynopsisParserTest.php	110	public function testParseThenRenderMixedCase(): void {	CODE
LOW	tests/SynopsisParserTest.php	153	public function testAllowedValueCharacters(): void {	CODE
LOW	tests/SynopsisParserTest.php	221	public function testParseThenRenderNumeric(): void {	CODE
LOW	tests/PathTest.php	31	public function testPathIsRecognizedAsAbsolute( string $path, bool $expected ): void {	CODE
LOW	tests/PathTest.php	178	public function testReplacePathConstsSources( $source, $expected ): void {	CODE
LOW	tests/PathTest.php	185	public static function dataReplacePathConstsSources(): array {	CODE
LOW	tests/PathTest.php	240	public function testReplacePathConstsWithTokenizer( $source, $expected ): void {	CODE
LOW	tests/PathTest.php	252	public static function dataReplacePathConstsTokenizerSources(): array {	CODE
LOW	tests/PathTest.php	312	public function testReplacePathConstsWithRegex( $source, $expected ): void {	CODE
LOW	tests/PathTest.php	321	public function testReplacePathConstsWithRegexThrowsOnPcreFailure(): void {	CODE
LOW⚡	tests/UtilsTest.php	1243	public function testWriteCsvWithFieldPicking(): void {	CODE
LOW	tests/UtilsTest.php	321	public static function parseStrToArgvStripsQuotesFromAssocValuesData() {	CODE
LOW	tests/UtilsTest.php	347	public function testParseStrToArgvStripsQuotesFromAssocValues( $input, $expected ): void {	CODE
LOW	tests/UtilsTest.php	381	public function testAssocArgsToStringWithSensitiveArgs(): void {	CODE
LOW	tests/UtilsTest.php	422	public function testAssocArgsToStringWithInvalidKeys(): void {	CODE
LOW	tests/UtilsTest.php	501	public function testMakeTempFileInvalidPrefixOrSuffix(): void {	CODE
LOW	tests/UtilsTest.php	550	public function testMakeTempDirInvalidPrefix(): void {	CODE
LOW	tests/UtilsTest.php	584	public function testHttpRequestBadAddress(): void {	CODE
LOW	tests/UtilsTest.php	830	public function testReportBatchOperationResults( $stdout, $stderr, $noun, $verb, $total, $successes, $failures, $skips	CODE
LOW	tests/UtilsTest.php	861	public static function dataReportBatchOperationResults(): array {	CODE
LOW	tests/UtilsTest.php	1190	public function testWriteCsvWithHeadersThatNeedEscaping(): void {	CODE
LOW	tests/UtilsTest.php	1212	public function testWriteCsvWithoutHeaders(): void {	CODE
LOW	tests/UtilsTest.php	1298	public function testValidClassAndMethodPair( $pair, $is_valid ): void {	CODE
LOW	tests/UtilsTest.php	1302	public static function dataValidClassAndMethodPair(): array {	CODE
LOW	tests/UtilsTest.php	1353	public function testEscapeshellargPreserveTilde(): void {	CODE
LOW	tests/UtilsTest.php	1373	public function testHasStdinReturnsFalseForDevNull(): void {	CODE
LOW	tests/UtilsTest.php	1385	public function testHasStdinReturnsTrueForPipedData(): void {	CODE
LOW	tests/UtilsTest.php	1396	public function testGetSuggestionUsesDistance(): void {	CODE
LOW	tests/UtilsTest.php	1407	public function testGetSuggestionAliasMapCanBeDisabled(): void {	CODE
LOW	tests/UtilsTest.php	1416	public function testGetSuggestionAliasMapDisabledKeepsCloseMatches(): void {	CODE
LOW	tests/UtilsTest.php	1467	public function testGetBinaryVersionOutputRunsBinaryOnce(): void {	CODE
LOW	tests/LoggingTest.php	37	public function testLogDebugRegularLogger(): void {	CODE
LOW	tests/LoggingTest.php	63	public function testLogInfoWithoutNewline(): void {	CODE
LOW	tests/ConfiguratorTest.php	39	public function testExtractAssocGlobalLocal(): void {	CODE
LOW	tests/ConfiguratorTest.php	53	public function testExtractAssocDoubleDashInValue(): void {	CODE
LOW	tests/ConfiguratorTest.php	63	public function testExtractAssocDoubleDashDelimiter(): void {	CODE
LOW	tests/ConfiguratorTest.php	77	public function testExtractAssocDoubleDashDelimiterWithGlobalAssoc(): void {	CODE
LOW	tests/ConfiguratorTest.php	93	public function testExtractAssocDoubleDashDelimiterAtStart(): void {	CODE
LOW	tests/ConfiguratorTest.php	106	public function testExtractAssocDoubleDashDelimiterMultipleArgs(): void {	CODE
LOW	tests/ConfiguratorTest.php	145	public function testExtractAssocMultipleValues(): void {	CODE
LOW	tests/ConfiguratorTest.php	160	public function testParseArgsAggregatesMultipleValues(): void {	CODE
LOW	tests/ConfiguratorTest.php	178	public function testParseArgsBooleanFlagsUseLastWins(): void {	CODE
LOW	tests/ConfiguratorTest.php	200	public function testParseArgsStrictModeKeepsUnknownGlobalFlags(): void {	CODE
LOW	tests/ConfiguratorTest.php	238	public function testMergeYmlSelfInheritRecursionGuard(): void {	CODE
LOW	tests/ConfiguratorTest.php	253	public function testMergeYmlCircularInheritRecursionGuard(): void {	CODE
LOW	tests/ConfiguratorTest.php	290	public function testEnvRequireFilesAreMergedIntoConfig(): void {	CODE
LOW	tests/SchemaValidationTest.php	10	public function testExampleYamlFilesValidateAgainstSchema(): void {	CODE
LOW	tests/LoadRequiredCommandTest.php	61	public function testLoadsAllRequiredFilesForRegularCommands(): void {	CODE
LOW	tests/LoadRequiredCommandTest.php	73	public function testLoadsOnlyEnvRequiredFilesForProtectedCommands(): void {	CODE
LOW	tests/LoadRequiredCommandTest.php	88	public function testLoadsNothingForProtectedCommandsWithoutEnvRequiredFiles(): void {	CODE
LOW	tests/ArgValidationTest.php	65	public function testAssocWithOptionalValue(): void {	CODE
LOW	tests/WindowsArgsTest.php	21	public function testWindowsArgumentSplitting( $is_windows, $input_args, $expected_count, $expected_values ): void {	CODE
LOW⚡	tests/CommandHintsTest.php	35	public function testItCollectsHintsFromInstalledPackages(): void {	CODE
LOW⚡	tests/CommandHintsTest.php	42	public function testItCollectsHintsFromTheRootPackage(): void {	CODE
25 more matches not shown…

Verbosity Indicators8 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	86	// Step 1: Check if the text is already ASCII	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	96	// Step 2: nameprep	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	99	// Step 3: UseSTD3ASCIIRules is false, continue	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	100	// Step 4: Check if it's ASCII now	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	116	// Step 5: Check ACE prefix	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	121	// Step 6: Encode with Punycode	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	124	// Step 7: Prepend ACE prefix	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	127	// Step 8: Check size	COMMENT

Structural Annotation Overuse8 hits · 18 pts

Severity	File	Line	Snippet	Context
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	86	// Step 1: Check if the text is already ASCII	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	96	// Step 2: nameprep	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	99	// Step 3: UseSTD3ASCIIRules is false, continue	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	100	// Step 4: Check if it's ASCII now	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	116	// Step 5: Check ACE prefix	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	121	// Step 6: Encode with Punycode	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	124	// Step 7: Prepend ACE prefix	COMMENT
LOW⚡	bundle/rmccue/requests/src/IdnaEncoder.php	127	// Step 8: Check size	COMMENT

Modern AI Meta-Vocabulary6 hits · 16 pts

Severity	File	Line	Snippet	Context
MEDIUM	README.md	209	* [wordpress-plugin-tests](https://github.com/benbalter/wordpress-plugin-tests/) for `wp scaffold plugin-tests`	COMMENT
MEDIUM	AGENTS.md	60	The `README.md` file might be generated dynamically from the project's codebase using `wp scaffold package-readme` ([doc	CODE
MEDIUM	AGENTS.md	60	The `README.md` file might be generated dynamically from the project's codebase using `wp scaffold package-readme` ([doc	CODE
MEDIUM	php/WP_CLI/Runner.php	1538	// plugin scaffold -> scaffold plugin	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/2-FEATURE_REQUEST.md	39	* `wp scaffold *` https://github.com/wp-cli/scaffold-command	COMMENT
MEDIUM	.github/ISSUE_TEMPLATE/1-BUG_REPORT.md	39	* `wp scaffold *` https://github.com/wp-cli/scaffold-command	COMMENT

Fake / Example Data7 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/UtilsTest.php	1235	$this->assertStringContainsString( '"John Doe"', $csv_content );	CODE
LOW⚡	tests/UtilsTest.php	1251	'name' => 'John Doe',	CODE
LOW⚡	tests/UtilsTest.php	1259	'email' => 'user@example.com',	CODE
LOW	tests/UtilsTest.php	1151	'name' => 'John Doe',	CODE
LOW	tests/UtilsTest.php	1180	$this->assertStringContainsString( '"John Doe"', $csv_content );	CODE
LOW	tests/UtilsTest.php	1218	[ 'John Doe', '=SUM(A1:A2)', 'Contains "quotes"' ],	CODE
LOW	tests/UtilsTest.php	1282	$this->assertStringContainsString( '1,"John Doe",john@example.com', $csv_content );	CODE

Over-Commented Block3 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	codecov.yml	1	# Coverage for this repository is reported from two separate CI uploads:	COMMENT
LOW	php/utils.php	2521	*/	COMMENT
LOW	.github/actionlint.yml	1	# Configuration for actionlint, run by the `actionlint` job in	COMMENT

Self-Referential Comments1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	utils/auto-composer-update.sh	35	# Create a dated branch and commit the changes	COMMENT

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	utils/install-requests.sh	14	# Check if the version is correct.	COMMENT

Example Usage Blocks1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	php/WP_CLI/Inflector.php	421	* ### Usage:	COMMENT

wp-cli/wp-cli

Open-Source Code Quality, Security and Technical Debt Review