[daily-code-metrics] Daily Code Metrics Report - 2026-06-30

[github-actions[bot]]

Key metrics today: LOC: 1,813,353 | Quality score: 76.1/100 (Good) | Test ratio: 1.97 | Active source files (7d): 1,200

The codebase grew +2.8% (7d) and +14.1% (30d) to ~1.81M LOC, driven by parallel growth in Go source (+2.7% 7d) and Go tests (+2.2% 7d). The quality score holds steady at 76.1/100 (⬆️ +0.9% 7d), rated Good. Documentation expanded sharply — doc files +49.7% (30d) and agentic workflow definitions +50% (30d) — reflecting a strong investment in docs/ and .github/workflows/.

Two watch-items emerge from the trend data. First, the test-to-source ratio is drifting down (⬇️ -3.2% over 30d): although still healthy at 1.97×, Go source is growing slightly faster than test code. Second, comment density remains the weakest quality component (4.9/10; ratio 9.84%, ⬇️ -3.3% 30d). Source churn this week was heavy — 398 commits across 1,200 source files (+66,811 / -31,190, net +35,621), concentrated in pkg/workflow/ threat-detection and notification refactors.

📊 Visualizations

YAML (491K, 27%) and Go (693K combined: 459K tests + 234K source, 38%) dominate. The large YAML footprint is mostly the 257 compiled .lock.yml workflow artifacts; JavaScript CJS (276K) reflects the actions/setup/js runtime.

pkg/ (733K LOC) is the engine core, followed by .github/ (602K, mostly compiled workflows) and actions/ (297K). Application code remains well-concentrated; cmd/ stays thin (2.9K) as a CLI entry layer.

76.1/100 (Good). Test Coverage is maxed (30/30). The largest gaps are Code Organization (13.7/25) — driven by 915 files over 500 LOC — and Comment Density (4.9/10).

459K test LOC vs 234K Go source LOC → a 1.97× ratio, well above the recommended 0.5–1.0 band. Coverage breadth is excellent; the slight 30-day downtrend is worth monitoring as new source lands.

Top source movement (7d, excluding generated *.lock.yml / *-lock.json): large net reductions in threat_detection.go (-1,539) and forecast.go (-1,247) — code being extracted into new focused files like compiler_custom_jobs.go (+779), threat_detection_external.go (+500), and threat_detection_steps.go (+446). This is healthy decomposition, not bloat.

30-day LOC growth is steady and roughly linear; the quality score has stayed in the 73–76 band. No single-day swings >10% in the headline metrics.

📈 Detailed Metrics

Size

Language	LOC	Share
YAML	491,040	27.1%
Go Tests	459,414	25.3%
JavaScript (CJS)	276,000	15.2%
Markdown	263,028	14.5%
Go Source	233,646	12.9%
JSON	55,424	3.1%
Shell	15,885	0.9%
TypeScript	5,106	0.3%

Directory	LOC
pkg/	733,355
.github/	602,374
actions/	297,098
docs/	102,269
scratchpad/	35,999

Total files: 5,705 · Go files: 2,360 · Test files: 1,368

Quality

Field	Value	7d	30d
Large files (>500 LOC)	915	⬇️ -3.1%	⬆️ +9.4%
Avg Go source file	235.5 LOC	—	—
Function count	15,178	⬆️ +5.9%	⬆️ +19.2%
Comment lines	68,215	—	—
Comment ratio	9.84%	➡️ -0.9%	⬇️ -3.3%

Tests

Field	Value	7d	30d
Test LOC	459,414	⬆️ +2.2%	⬆️ +9.0%
Source LOC (Go)	233,646	⬆️ +2.7%	⬆️ +12.5%
Test-to-source ratio	1.97	➡️ -0.4%	⬇️ -3.2%

Churn — Source (7d, excl. generated)

Field	Value
Files modified	1,200
Commits	398
Lines added / deleted	+66,811 / -31,190
Net change	+35,621

Most active: threat_detection.go (-1,539), forecast.go (-1,247), compiler_custom_jobs.go (+779), compiler_jobs.go (-764), notify_comment.go (-735).

Churn — Generated (informational, excluded from quality score)

Field	Value
.lock.yml + *-lock.json files modified	258
Lines added / deleted	+63,111 / -53,772
Net change	+9,339

Workflows / Docs

Field	Value	30d
Agentic workflows (.md)	354	⬆️ +50.0%
Compiled (.lock.yml)	257	—
Avg workflow size	233.5 lines	—
Doc files	545	⬆️ +49.7%
Doc LOC	89,212	—
Code-to-docs ratio	2.62 : 1	—

Quality Score: 76.1/100 (Good)

• Test Coverage (30%): 30.0/30 — ratio 1.97× (maxed)
• Code Organization (25%): 13.7/25 — avg Go file 235.5 LOC; 915 large files
• Documentation (20%): 18.4/20 — strong doc-to-code share
• Churn Stability (15%): 9.1/15 — net source change +35,621 (7d)
• Comment Density (10%): 4.9/10 — comment ratio 9.84%

Methodology: churn stability and the churn charts use source-only churn, excluding generated *.lock.yml and *-lock.json files.

💡 Insights & Recommendations

1. Keep test growth ahead of source. The test-to-source ratio slipped -3.2% over 30 days. It's still excellent (1.97×), but new pkg/workflow/ modules (compiler_custom_jobs.go, threat_detection_*.go) landed with less proportional test code — add coverage there to halt the drift.
2. Improve comment density (weakest component, 4.9/10). At 9.84% and trending down, exported Go symbols in the fast-growing pkg/ packages would benefit from doc comments; this is the cheapest quality-score win available.
3. Continue the large-file decomposition. 915 files exceed 500 LOC. This week's threat_detection.go / forecast.go extractions are the right pattern — keep splitting monoliths to lift Code Organization (13.7/25).
4. Sustain the docs momentum. Doc files grew +49.7% over 30 days; the code-to-docs ratio is a healthy 2.62:1. Maintaining this keeps the Documentation component near-maxed.
5. Generated-file churn is noise, not risk. 258 .lock.yml/lock-json files changed (+63K/-54K); correctly excluded from the quality score. No action needed beyond confirming recompiles stay deterministic.

---

Report generated by Daily Code Metrics workflow
Historical data: 47 days retained | Last updated: 2026-06-30 UTC

Generated by 📊 Daily Code Metrics and Trend Tracking Agent · 233.1 AIC · ⌖ 43.5 AIC · ⊞ 9.6K · ◷

• expires on Jul 3, 2026, 11:18 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by Daily Code Metrics and Trend Tracking Agent.

A newer discussion is available at Discussion #42823.

[github-actions[bot]]

Stone smoke test here. Bot touched latest discussion. GitHub page opened. Build done. Some tool checks still failed.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

• accounts.google.com
• android.clients.google.com
• clients2.google.com
• contentautofill.googleapis.com
• safebrowsingohttpgateway.googleapis.com
• www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · 675.6 AIC · ⌖ 16.2 AIC · ⊞ 19.2K · ◷
_{Comment /smoke-copilot to run again
Add label smoke to run again}