2.5

Adjusted Signal

2.5

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

15.8K

Stars

JavaScript

Language

395.7K

Lines of Code

1.0K

Files

317

Pattern Hits

2026-10-31

Scan Date

0.07

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 195 finding(s).

Hallucinated Dependency & Supply Chain Risk 9.2/100 · LOW

Are imports declared and package/API names verified? 113 finding(s).

Agent Over-Engineering Ratio 1.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 57 finding(s).

PR Review Velocity Impact 11.9/100 · LOW

Which changes need focused human review? 317 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 71HIGH 2MEDIUM 20LOW 224

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 317 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators71 hits · 715 pts

Severity	File	Line	Snippet	Context
CRITICAL	test/tests/recognizeDocumentTest.js	47	&& Zotero.Translate.Search.prototype.translate.restore();	CODE
CRITICAL	test/tests/itemPaneTest.js	1090	= preview._reader._internalReader._annotationManager._annotations.find(	CODE
CRITICAL	test/tests/itemPaneTest.js	1106	= preview._reader._internalReader._annotationManager._annotations.find(	CODE
CRITICAL	test/tests/itemPaneTest.js	1212	= preview._reader._internalReader._annotationManager._annotations.find(	CODE
CRITICAL	test/tests/itemPaneTest.js	1239	= preview._reader._internalReader._annotationManager._annotations.find(	CODE
CRITICAL	test/tests/itemPaneTest.js	1267	= preview._reader._internalReader._annotationManager._annotations.find(	CODE
CRITICAL	test/tests/itemPaneTest.js	2302	return Zotero.Prefs.get('sidenav.order') \|\| ZoteroPane.itemPane._itemDetails.sidenav._builtInPanes.join(',');	CODE
CRITICAL	test/tests/integrationTest.js	405	Zotero.Integration.Progress.prototype.show.restore();	CODE
CRITICAL	test/tests/zfsTest.js	1016	Zotero.Sync.Storage.Local.storageRemainingForLibrary.delete(items[0].libraryID);	CODE
CRITICAL	test/tests/zfsTest.js	1036	Zotero.Sync.Storage.Local.storageRemainingForLibrary.set(items[0].libraryID, 0);	CODE
CRITICAL	test/tests/zfsTest.js	1044	Zotero.Sync.Storage.Local.storageRemainingForLibrary.delete(items[0].libraryID);	CODE
CRITICAL	chrome/content/zotero/zoteroPane.js	5235	var text = event.currentTarget.ownerDocument.popupNode.ownerDocument.defaultView.getSelection().toString();	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	13253	//this.state.registry.registry[this.Item.id].disambig.givens = this.state.tmp.disambig_settings.givens.slice();	COMMENT
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	10551	done_vars: state.tmp.group_context.tip.done_vars.slice()	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	12240	this.state.tmp.name_node.top.blobs.pop();	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	12241	this.state.tmp.name_node.top.blobs.push(blob);	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	12339	myqueue = this.state.tmp.name_node.top.blobs.slice(-1)[0].blobs;	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	12352	myqueue = this.state.tmp.name_node.top.blobs.slice(-1)[0].blobs;	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	12360	this.state.tmp.name_node.top.blobs.pop();	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	12377	this.state.tmp.name_node.top.blobs.pop();	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	13555	this.state.tmp.name_node.children.push(blob);	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	13986	this.state.tmp.name_node.children.push(blob);	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	15260	state.tmp.group_context.tip.done_vars.push(this.variables_real[0]);	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	15459	state.tmp.group_context.tip.done_vars.push("citation-number");	CODE
CRITICAL	chrome/content/zotero/xpcom/citeproc.js	24553	this.state.registry.registry[Item.id].disambig.givens = this.state.tmp.disambig_settings.givens.slice();	CODE
CRITICAL	chrome/content/zotero/xpcom/integration.js	3450	serializeCitationItem.itemData = Zotero.Integration.currentSession.style.sys.retrieveItem(citationItem.id);	CODE
CRITICAL	…/content/zotero/xpcom/translation/translate_firefox.js	758	Zotero.Translate.IO.Read.prototype.__defineGetter__("contentLength",	CODE
CRITICAL	chrome/content/zotero/xpcom/storage/storageRequest.js	108	Zotero.Sync.Storage.Request.prototype.__defineGetter__('percentage', function () {	CODE
CRITICAL	chrome/content/zotero/xpcom/storage/storageRequest.js	140	Zotero.Sync.Storage.Request.prototype.__defineGetter__('remaining', function () {	CODE
CRITICAL	chrome/content/zotero/xpcom/storage/storageEngine.js	139	if (!this.background && Zotero.Sync.Storage.Local.storageRemainingForLibrary.has(libraryID)) {	CODE
CRITICAL	chrome/content/zotero/xpcom/storage/storageEngine.js	141	Zotero.Sync.Storage.Local.storageRemainingForLibrary.delete(libraryID)	CODE
CRITICAL	chrome/content/zotero/xpcom/storage/zfs.js	233	var remaining = Zotero.Sync.Storage.Local.storageRemainingForLibrary.get(item.libraryID);	CODE
CRITICAL	chrome/content/zotero/xpcom/storage/zfs.js	278	let remaining = Zotero.Sync.Storage.Local.storageRemainingForLibrary.get(item.libraryID);	CODE
CRITICAL	chrome/content/zotero/xpcom/storage/zfs.js	603	Zotero.Sync.Storage.Local.storageRemainingForLibrary.set(item.libraryID, quota - usage);	CODE
CRITICAL	chrome/content/zotero/xpcom/sync/syncEventListeners.js	338	Zotero.Sync.Storage.Local.uploadCheckFiles.push({	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	119	value: Object.freeze(Zotero.Feed._super.prototype.libraryTypes.concat(['feed']))	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	168	\|\| Zotero.Feed._super.prototype._isValidProp.call(this, prop);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	217	return Zotero.Feed._super.prototype._set.call(this, prop, val);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	221	Zotero.Feed._super.prototype._loadDataFromRow.call(this, row);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	245	let proceed = await Zotero.Feed._super.prototype._initSave.call(this, env);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	265	await Zotero.Feed._super.prototype._saveData.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	313	await Zotero.Feed._super.prototype._finalizeSave.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	349	return Zotero.Feed._super.prototype._finalizeErase.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feed.js	356	await Zotero.Feed._super.prototype.erase.call(this, options);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feedItem.js	95	await Zotero.FeedItem._super.prototype.loadPrimaryData.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feedItem.js	106	return Zotero.FeedItem._super.prototype.setField.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feedItem.js	133	Zotero.FeedItem._super.prototype.fromJSON.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feedItem.js	141	let proceed = await Zotero.FeedItem._super.prototype._initSave.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feedItem.js	164	await Zotero.FeedItem._super.prototype._saveData.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/feedItem.js	186	return Zotero.FeedItem._super.prototype._finalizeErase.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/item.js	104	Zotero.Item.prototype._dataTypes = Zotero.Item._super.prototype._dataTypes.concat([	CODE
CRITICAL	chrome/content/zotero/xpcom/data/item.js	214	Zotero.Item._super.prototype._setParentKey.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/item.js	1574	var editable = Zotero.Item._super.prototype.isEditable.call(this, op);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/item.js	1613	return Zotero.Item._super.prototype._initSave.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/item.js	6155	var json = this.constructor._super.prototype.toResponseJSON.call(this, options);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/search.js	45	Zotero.Search.prototype._dataTypes = Zotero.Search._super.prototype._dataTypes.concat([	CODE
CRITICAL	chrome/content/zotero/xpcom/data/search.js	172	return Zotero.Search._super.prototype._initSave.apply(this, arguments);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/search.js	294	await Zotero.Search._super.prototype._finalizeErase.call(this, env);	CODE
CRITICAL	chrome/content/zotero/xpcom/data/collection.js	40	Zotero.Collection.prototype._dataTypes = Zotero.Collection._super.prototype._dataTypes.concat([	CODE
CRITICAL	chrome/content/zotero/xpcom/data/collection.js	260	var proceed = await Zotero.Collection._super.prototype._initSave.apply(this, arguments);	CODE
11 more matches not shown…

Over-Commented Block121 hits · 100 pts

Severity	File	Line	Snippet	Context
LOW	types/gecko/index.d.ts	1	/* This Source Code Form is subject to the terms of the Mozilla Public	COMMENT
LOW	app/build.sh	1	#!/bin/bash -e	COMMENT
LOW	app/build.sh	1001	# Copy app files	COMMENT
LOW	app/win/installer/7zstub/src/Common/MyWindows.h	1	// MyWindows.h	COMMENT
LOW	app/win/installer/7zstub/src/Common/MyWindows.h	81	#define E_ABORT ((HRESULT)0x80004004L)	COMMENT
LOW	app/win/installer/7zstub/src/Common/MyUnknown.h	1	// MyUnknown.h	COMMENT
LOW	app/win/installer/7zstub/src/Common/MyUnknown.h	21	#include "MyWindows.h"	COMMENT
LOW	app/win/installer/7zstub/src/Common/Alloc.cpp	1	// Common/Alloc.cpp	COMMENT
LOW	app/win/installer/7zstub/src/Common/ComTry.h	1	// ComTry.h	COMMENT
LOW	app/win/installer/7zstub/src/Common/Alloc.h	21		COMMENT
LOW	app/win/installer/7zstub/src/7zip/MyVersion.h	1	#define MY_VER_MAJOR 4	COMMENT
LOW	…in/installer/7zstub/src/7zip/UI/Common/OpenArchive.cpp	1	// OpenArchive.cpp	COMMENT
LOW	…in/installer/7zstub/src/7zip/UI/Common/OpenArchive.cpp	21	#endif	COMMENT
LOW	…n/installer/7zstub/src/7zip/UI/Common/ArchiverInfo.cpp	1	// ArchiverInfo.cpp	COMMENT
LOW	…/win/installer/7zstub/src/7zip/UI/Common/OpenArchive.h	1	// OpenArchive.h	COMMENT
LOW	…taller/7zstub/src/7zip/UI/Common/ArchiveOpenCallback.h	1	// ArchiveOpenCallback.h	COMMENT
LOW	…staller/7zstub/src/7zip/Archive/Common/CoderMixer2MT.h	1	// CoderMixer2MT.h	COMMENT
LOW	…staller/7zstub/src/7zip/Archive/Common/CoderMixer2MT.h	41	};	COMMENT
LOW	…win/installer/7zstub/src/7zip/Archive/7z/7zExtract.cpp	1	// 7zExtract.cpp	COMMENT
LOW	…win/installer/7zstub/src/7zip/Archive/7z/7zHandler.cpp	1	// 7zHandler.cpp	COMMENT
LOW	…p/win/installer/7zstub/src/7zip/Archive/7z/7zHandler.h	1	// 7z/Handler.h	COMMENT
LOW	…p/win/installer/7zstub/src/7zip/Archive/7z/7zHandler.h	61	#ifndef __7Z_SET_PROPERTIES	COMMENT
LOW	app/win/installer/7zstub/src/7zip/Archive/7z/7zDecode.h	1	// 7zDecode.h	COMMENT
LOW	…/win/installer/7zstub/src/7zip/Archive/7z/7zDecode.cpp	1	// 7zDecode.cpp	COMMENT
LOW	…/win/installer/7zstub/src/7zip/Archive/7z/7zDecode.cpp	21	#ifdef COMPRESS_PPMD	COMMENT
LOW	…/win/installer/7zstub/src/7zip/Archive/7z/7zDecode.cpp	41		COMMENT
LOW	app/win/installer/7zstub/src/7zip/Common/StdAfx.h	1	// StdAfx.h	COMMENT
LOW	…p/win/installer/7zstub/src/7zip/Common/FileStreams.cpp	1	// FileStreams.cpp	COMMENT
LOW	…/src/7zip/FileManager/Resource/ProgressDialog/StdAfx.h	1	// stdafx.h	COMMENT
LOW	…nstaller/7zstub/src/7zip/Bundles/SFXSetup-moz/StdAfx.h	1	// StdAfx.h	COMMENT
LOW	…stub/src/7zip/Bundles/SFXSetup-moz/ExtractCallback.cpp	1	// ExtractCallback.h	COMMENT
LOW	…taller/7zstub/src/7zip/Bundles/SFXSetup-moz/resource.h	1	#define IDI_ICON3 159	COMMENT
LOW	…7zstub/src/7zip/Bundles/SFXSetup-moz/ExtractCallback.h	1	// ExtractCallback.h	COMMENT
LOW	…nstaller/7zstub/src/7zip/Bundles/SFXSetup-moz/Main.cpp	1	// Main.cpp	COMMENT
LOW	…7zstub/src/7zip/Bundles/SFXSetup-moz/ExtractEngine.cpp	1	// ExtractEngine.cpp	COMMENT
LOW	app/win/installer/7zstub/src/Windows/COM.h	41	#define GUIDToString GUIDToStringW	COMMENT
LOW	app/win/installer/7zstub/src/Windows/FileDir.cpp	1	// Windows/FileDir.cpp	COMMENT
LOW	…win/installer/7zstub/src/Windows/Control/ProgressBar.h	41	#endif	COMMENT
LOW	app/win/installer/7zstub/src/Windows/Control/Dialog.h	141	#endif	COMMENT
LOW	app/update-packaging/common.sh	1	#!/bin/bash	COMMENT
LOW	app/update-packaging/common.sh	241	# Building updates repeats the same expensive work: the same file contents get	COMMENT
LOW	app/scripts/optimizejars.py	1	# *** BEGIN LICENSE BLOCK ***	COMMENT
LOW	app/scripts/optimizejars.py	21	# Contributor(s):	COMMENT
LOW	app/assets/prefs.js	61		COMMENT
LOW	app/assets/prefs.js	121	// supplied in the "An update is available" page of the update wizard.	COMMENT
LOW	app/assets/win/skin/preferences/preferences.css	1	/*	COMMENT
LOW	app/assets/win/skin/preferences/preferences.css	21	# the Initial Developer. All Rights Reserved.	COMMENT
LOW	app/assets/mac/chrome/skin/preferences/preferences.css	1	/*	COMMENT
LOW	app/assets/mac/chrome/skin/preferences/preferences.css	21	# the Initial Developer. All Rights Reserved.	COMMENT
LOW	app/assets/unix/skin/preferences/preferences.css	1	%if 0	COMMENT
LOW	app/assets/unix/skin/preferences/preferences.css	21	# Portions created by the Initial Developer are Copyright (C) 2005	COMMENT
LOW	test/tests/supportTest.js	121	});	COMMENT
LOW	test/resource/pako_inflate.js	641	if (op > whave) {	COMMENT
LOW	test/resource/pako_inflate.js	2081	strm.msg = 'invalid distance too far back';	COMMENT
LOW	scss/elements/_zoteroSearch.scss	41	// A nested group has no box of its own. Each nesting level sets an indent that the	COMMENT
LOW	scss/elements/_quickSearchTextbox.scss	21	// window and crops just enough on a narrow one, keeping the buttons to its right (collapse/	COMMENT
LOW	scss/abstracts/_placeholders.scss	1	//	COMMENT
LOW	chrome/content/zotero/collectionTree.jsx	1721		COMMENT
LOW	chrome/content/zotero/libraryTree.js	301		COMMENT
LOW	chrome/content/zotero/customElements.js	121	// in newCollection dialog on macOS won't go away when you click away,	COMMENT
61 more matches not shown…

Hyper-Verbose Identifiers48 hits · 50 pts

Severity	File	Line	Snippet	Context
LOW	test/tests/schemaTest.js	384	function createResponseWithMessage(message) {	CODE
LOW	test/tests/translateTest.js	11	function saveItemsThroughTranslator(translatorType, items, translateOptions = {}) {	CODE
LOW	test/tests/dbTest.js	383	async function createDatabaseWithCorruptTable() {	CODE
LOW	test/tests/zoteroPaneTest.js	2331	async function selectMultipleCollections(collections) {	CODE
LOW	test/tests/integrationTest.js	320	function setDefaultIntegrationDocPrefs() {	CODE
LOW	test/tests/retractionsTest.js	66	async function createRetractedItemWithExtraDOI(options = {}) {	CODE
LOW	test/tests/collectionViewItemTreeTest.js	3050	async function selectMultipleCollections(collections) {	CODE
LOW	test/tests/sdtTest.js	375	function stubStructuredDocumentTextWorker() {	CODE
LOW⚡	test/tests/sdtTest.js	389	function getStaleProcessorVersionSDTPackBytes() {	CODE
LOW⚡	test/tests/sdtTest.js	393	function getWrongProcessorTypeSDTPackBytes() {	CODE
LOW⚡	test/tests/sdtTest.js	397	function getIncompatibleSchemaMajorSDTPackBytes() {	CODE
LOW	test/tests/undoHistoryTest.js	1255	function setNoRemoteChangesResponses(lastLibraryVersion) {	CODE
LOW	test/content/support.js	679	async function executeTransactionWithForcedRollback(fn, options) {	CODE
LOW	test/content/support.js	904	function generateAllTypesAndFieldsData() {	CODE
LOW	test/content/support.js	1039	var generateCiteProcJSExportData = async function generateCiteProcJSExportData(currentData) {	CODE
LOW	test/content/support.js	1060	var generateTranslatorExportData = async function generateTranslatorExportData(legacy, currentData) {	CODE
LOW	chrome/content/zotero/locateManager.jsx	148	async function restoreDefaultLocateEngines() {	CODE
LOW	chrome/content/zotero/itemTreeColumns.jsx	410	function getColumnDefinitionsByDataKey(dataKeys) {	CODE
LOW	chrome/content/zotero/zoteroPane.js	5057	function attachmentsWithExtractableAnnotations(item) {	CODE
LOW	chrome/content/zotero/zoteroPane.js	5064	function isAttachmentWithExtractableAnnotations(item) {	CODE
LOW	chrome/content/zotero/editMenuOverlay.js	11	function goUpdateGlobalEditMenuItems(force) {	CODE
LOW	chrome/content/zotero/editMenuOverlay.js	32	function goUpdateUndoEditMenuItems() {	CODE
LOW	chrome/content/zotero/xpcom/cite.js	161	"getBibliographyFormatParameters":function getBibliographyFormatParameters(bib) {	CODE
LOW	chrome/content/zotero/xpcom/cite.js	254	"makeFormattedBibliography":function makeFormattedBibliography(cslEngine, format) {	CODE
LOW	chrome/content/zotero/xpcom/plugins.js	665	function rebuildUnifiedPluginSource(zoteroLocales) {	CODE
LOW	chrome/content/zotero/xpcom/intl.js	236	function setOrClearIntlPref(name, type) {	CODE
LOW	chrome/content/zotero/xpcom/citeproc.js	5961	function blobHasDescendantMergingPunctuation(parentChar,blob) {	CODE
LOW	chrome/content/zotero/xpcom/http.js	589	function wrapNotificationCallbacks(callbacks) {	CODE
LOW	…/content/zotero/xpcom/translation/translate_firefox.js	163	function ExposedPropsWaiverHandler() {	CODE
LOW	chrome/content/zotero/xpcom/server/server_localAPI.js	1840	function buildSearchFromSearchSyntax(parentSearch, searchStrings, condition) {	CODE
LOW	chrome/content/zotero/xpcom/data/itemFields.js	278	function getFieldIDFromTypeAndBase(itemType, baseField) {	CODE
LOW	chrome/content/zotero/xpcom/data/itemFields.js	311	function getBaseIDFromTypeAndField(itemType, typeField) {	CODE
LOW	chrome/content/zotero/integration/citationDialog.js	198	function cleanupBeforeDialogClosing() {	CODE
LOW	chrome/content/scaffold/scaffold.js	2293	function eslintOutputToModelMarkers(output, modelVersionId) {	CODE
LOW	scripts/migrate-fx140/bluebird-to-async.js	95	function isStaticPromiseMethodCall(path, methodFilter) {	CODE
LOW	scripts/migrate-fx140/static-import.js	41	function tryReplacingWithStaticImport(	CODE
LOW	scripts/migrate-fx140/static-import.js	107	function replaceImportESModuleCall(	CODE
LOW	scripts/migrate-fx140/use-import-export-declarations.js	69	function collectAndRemoveExportedSymbols(inputFile, root) {	CODE
LOW	scripts/migrate-fx140/import-to-import_esmodule.js	105	function isMemberExpressionMatchingPatterns(node, patterns) {	CODE
LOW	scripts/migrate-fx140/import-to-import_esmodule.js	153	function findDefineESModuleGettersStmt(path, expectedIDs) {	CODE
LOW	scripts/migrate-fx140/import-to-import_esmodule.js	421	function tryReplaceActorDefinition(inputFile, path, name) {	CODE
LOW	scripts/migrate-fx140/utils.js	84	function memberExpressionsToIdentifiers(memberExpr) {	CODE
LOW	scripts/migrate-fx140/utils.js	114	function isMemberExpressionWithIdentifiers(node, expectedIDs) {	CODE
LOW	scripts/migrate-fx140/utils.js	132	function rewriteMemberExpressionWithIdentifiers(node, toIDs) {	CODE
LOW	scripts/migrate-fx140/utils.js	140	function createMemberExpressionWithIdentifiers(jscodeshift, ids) {	CODE
LOW	scripts/migrate-fx140/migrate.py	507	def asyncify_rewrite_bluebird_methods(jss, summary):	CODE
LOW	scripts/migrate-fx140/migrate.py	631	def try_rename_components_conf(command_context, path, jsm_name, esm_name):	CODE
LOW	js-build/utils.js	60	async function recursivelyRemoveEmptyDirsUp(dirsSeen, invalidDirsCount = 0, removedDirsCount = 0) {	CODE

Fake / Example Data38 hits · 38 pts

Severity	File	Line	Snippet	Context
LOW	test/tests/fileTest.js	550	const text1KB = Array.from({ length: 64 }, _ => "lorem ipsum foo\n").join('');	CODE
LOW	test/tests/httpTest.js	758	let username = "user@example.com";	CODE
LOW	test/tests/itemPaneTest.js	1933	let item = await createDataObject('item', { title: 'Lorem Ipsum' });	CODE
LOW	test/tests/itemPaneTest.js	1938	fileBaseName: "Lorem Ipsum", // Simulate auto-renaming, normally code would call getRenamedFileBaseNameIfAllowedType	CODE
LOW	test/tests/itemPaneTest.js	1955	assert.equal(label.value, "Lorem Ipsum.pdf");	CODE
LOW	test/tests/itemPaneTest.js	1962	let item = await createDataObject('item', { title: 'Lorem Ipsum' });	CODE
LOW	test/tests/itemPaneTest.js	1984	assert.equal(label.value, "Lorem Ipsum.txt");	CODE
LOW	test/tests/itemPaneTest.js	2015	let item = await createDataObject('item', { title: 'Lorem Ipsum' });	CODE
LOW	test/tests/itemPaneTest.js	2020	fileBaseName: "Lorem Ipsum",	CODE
LOW	test/tests/rtfScanTest.js	20	testItem2.setField('title', 'Lorem Ipsum');	CODE
LOW	test/tests/attachmentsTest.js	1789	item = createUnsavedDataObject('item', { title: 'Lorem Ipsum', itemType: 'journalArticle', libraryID: 1 });	CODE
LOW	test/tests/attachmentsTest.js	1859	'Barius and Pixelus - 1975 - Lorem Ipsum'	CODE
LOW	test/tests/attachmentsTest.js	1895	' Lorem Ipsum '	CODE
LOW	test/tests/attachmentsTest.js	2161	'Lorem Ipsum-1975'	CODE
LOW	test/tests/attachmentsTest.js	2203	'Barius and Pixelus - 1975 - Lorem Ipsum'	CODE
LOW	test/tests/attachmentsTest.js	2297	'Lorem Ipsum'	CODE
LOW	test/tests/undoHistoryTest.js	720	lastName: 'John Doe',	CODE
LOW	test/tests/undoHistoryTest.js	725	assert.equal(item.getCreator(0).lastName, 'John Doe');	CODE
LOW	test/tests/mendeleyImportTest.js	547	/^<h1>TEST<\/h1>\n<p><span class="highlight" data-annotation="((?:(?:%[0-9A-F]{2}\|[^<>'" %])+))">“Highlight text”<\/	CODE
LOW	test/tests/mendeleyImportTest.js	591	/^<h1>TEST<\/h1>\n<p><span class="highlight" data-annotation="((?:(?:%[0-9A-F]{2}\|[^<>'" %])+))">“A purely peer-to-p	CODE
LOW	test/tests/data/mendeleyMock/items-updated.json	17	"source": "lorem ipsum",	CODE
LOW	test/tests/data/mendeleyMock/items-updated.json	35	"source": "lorem ipsum",	CODE
LOW	test/tests/data/mendeleyMock/items-simple.json	14	"source": "lorem ipsum",	CODE
LOW	test/tests/data/mendeleyMock/items-simple.json	77	"abstract": "Lorem Ipsum. Nostrud elit ullamco laborum cillum.",	CODE
LOW	test/tests/data/mendeleyMock/notebook.json	72	"text": "Lorem Ipsum"	CODE
LOW	…ests/data/mendeleyMock/items-simple-no-desktop-id.json	13	"source": "lorem ipsum",	CODE
LOW	…ests/data/mendeleyMock/items-simple-no-desktop-id.json	74	"abstract": "Lorem Ipsum. Nostrud elit ullamco laborum cillum.",	CODE
LOW	chrome/content/zotero/components/form/input.jsx	182	'maxLength', 'min', 'minLength', 'name', 'placeholder', 'type', 'spellCheck',	CODE
LOW	chrome/content/zotero/components/editable/content.jsx	67	'placeholder': !this.hasValue	CODE
LOW	chrome/content/zotero/elements/abstractBox.js	41	<editable-text multiline="true" data-l10n-id="abstract-field" data-l10n-attrs="placeholder" />	CODE
LOW	chrome/content/zotero/elements/notesContext.js	34	<search-textbox data-l10n-id="context-notes-search" data-l10n-attrs="placeholder"	CODE
LOW	chrome/content/zotero/elements/styleConfigurator.js	39	<div class="placeholder">	CODE
LOW	chrome/content/zotero/elements/editableText.js	49	'placeholder',	CODE
LOW	chrome/content/zotero/elements/editableText.js	134	return this.getAttribute('placeholder') \|\| '';	CODE
LOW	chrome/content/zotero/elements/editableText.js	138	this.setAttribute('placeholder', placeholder \|\| '');	CODE
LOW	chrome/content/zotero/elements/searchTextbox.js	34	"placeholder",	CODE
LOW⚡	resource/tinymce/tinymce.min.js	2	!function(H){"use strict";var o=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t]},j=function(n,r){re	CODE
LOW	resource/tinymce/themes/modern/theme.min.js	1	!function(_){"use strict";var e,t,n,i,r,o=tinymce.util.Tools.resolve("tinymce.ThemeManager"),h=tinymce.util.Tools.resolv	CODE

Decorative Section Separators8 hits · 24 pts

Severity	File	Line	Snippet	Context
MEDIUM	app/update-packaging/common.sh	11	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	app/update-packaging/common.sh	45	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	app/update-packaging/common.sh	238	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	app/update-packaging/common.sh	264	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	app/update-packaging/make_incremental_update.sh	22	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	app/update-packaging/make_incremental_update.sh	106	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	app/update-packaging/make_full_update.sh	22	# -----------------------------------------------------------------------------	COMMENT
MEDIUM	app/update-packaging/make_full_update.sh	51	# -----------------------------------------------------------------------------	COMMENT

Modern AI Meta-Vocabulary8 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	scss/scaffold.scss	36	#scaffold, #zotero-select-item-dialog {	COMMENT
MEDIUM	scss/scaffold.scss	41	#scaffold {	COMMENT
MEDIUM	chrome/content/zotero/standalone/standalone.js	1148	'chrome://scaffold/content/scaffold.xhtml',	CODE
MEDIUM	chrome/content/scaffold/scaffold.js	33	var { ZoteroWebTranslationEnvironment } = ChromeUtils.importESModule('chrome://scaffold/content/zoteroWebTranslationEnvi	CODE
MEDIUM	chrome/content/scaffold/scaffold.js	93	window.messageManager.loadFrameScript('chrome://scaffold/content/content.js', true);	CODE
MEDIUM	chrome/content/scaffold/scaffold.js	735	window.openDialog("chrome://scaffold/content/load.xhtml",	CODE
MEDIUM	chrome/content/scaffold/scaffold.js	1080	let value = Zotero.File.getContentsFromURL(`chrome://scaffold/content/templates/${template}.js`);	CODE
MEDIUM	chrome/content/scaffold/scaffold.js	1322	window.openDialog("chrome://scaffold/content/select.xhtml",	CODE

AI Slop Vocabulary4 hits · 12 pts

Severity	File	Line	Snippet	Context
MEDIUM	chrome/content/zotero/zoteroPane.js	5124	// but it is not as robust as XUL. Unfortunately we cannot use the original XUL	COMMENT
MEDIUM	chrome/content/zotero/xpcom/citeproc.js	13889	// XXX Needs a more robust solution than this	COMMENT
MEDIUM⚡	resource/tinymce/tinymce.min.js	2	!function(H){"use strict";var o=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t]},j=function(n,r){re	CODE
MEDIUM⚡	resource/tinymce/tinymce.min.js	2	!function(H){"use strict";var o=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t]},j=function(n,r){re	CODE

TODO Padding7 hits · 10 pts

Severity	File	Line	Snippet	Context
LOW	chrome/content/zotero/xpcom/editorInstance.js	421	// TODO: implement navigating to note editor location	COMMENT
LOW	chrome/content/zotero/xpcom/collectionTreeRow.js	549	// TODO: implement?	COMMENT
LOW	chrome/content/zotero/xpcom/reader.js	2405	// TODO: implement these inside reader after redesign is done there	COMMENT
LOW	chrome/content/zotero/xpcom/sync/syncLocal.js	1519	// TODO: Fix tests so this doesn't happen	COMMENT
LOW	chrome/content/zotero/xpcom/data/notes.js	109	// TODO: implement this	COMMENT
LOW	chrome/content/zotero/elements/noteEditor.js	319	// TODO: implement this	COMMENT
LOW	chrome/content/scaffold/templates/newWeb.js	68	// TODO: implement or add a scrape function template	COMMENT

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	app/scripts/optimizejars.py	118	except:	CODE

Cross-Language Confusion (JS/TS)1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	chrome/content/zotero/xpcom/citeproc.js	6300	print(JSON.stringify(parent, function(key, val) {	CODE

Unused Imports3 hits · 3 pts

Severity	File	Line	Context
LOW	app/scripts/optimizejars.py	38	CODE
LOW	scripts/generate-isbn-ranges.py	3	CODE
LOW	scripts/migrate-fx140/migrate.py	13	CODE

Redundant / Tautological Comments2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	app/scripts/createprecomplete.py	62	# Open the file so it exists before building the list of files and open it	COMMENT
LOW	test/runtests.sh	184	# Check if build watch process is running	COMMENT

Verbosity Indicators2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	chrome/content/zotero/xpcom/storage/zfs.js	86	// Step 1: Request file metadata from the API	COMMENT
LOW	chrome/content/zotero/xpcom/storage/zfs.js	164	// Step 2: Download the file from storage	COMMENT

Structural Annotation Overuse2 hits · 3 pts

Severity	File	Line	Snippet	Context
LOW	chrome/content/zotero/xpcom/storage/zfs.js	86	// Step 1: Request file metadata from the API	COMMENT
LOW	chrome/content/zotero/xpcom/storage/zfs.js	164	// Step 2: Download the file from storage	COMMENT

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	app/scripts/optimizejars.py	188		CODE

zotero/zotero

Open-Source Code Quality, Security and Technical Debt Review