CodeQual

Evolution Advisory

Project: stripe/stripe-node

Period: May 09, 2018 at 11:25 PM to Mar 13, 2026 at 06:54 PM

Advisory ID: d99ab9b547bcd116

Generated: Mar 15, 2026 at 02:02 AM

Executive Summary

7
Significant Changes
4
Areas Affected
29
Patterns Matched
0
New Observations

Affected areas: ⚙️ CI / Build 📦 Dependencies 🚀 Deployment 📝 Version Control

Based on 20 prior commits

What EE Can See

6 connected

⚙️
CI / Build
via GitHub Actions
Active
📦
Dependencies
via npm
Active
📝
Version Control
via Git
Active
🚀
Deployment
via GitHub Releases
Active
🔒
Security
via GitHub Security
Platform Mismatch
GITLAB_TOKEN is set but remote points to github. Setup guide →
🧪
Testing
via Jest
Connected
Token set. This data is analyzed automatically when running via GitHub Action or GitLab CI. Setup guide →

Key Findings

What Changed in Your Codebase

We've detected 7 changes that differ from your project's normal patterns. Each change shows what typically happens versus what we observed this time.

0 of 7 resolved
⚙️
Build Duration
CI / Build
What this means: Build completed faster than usual.
Typical:
34,607,081.0
This Time:
171.0
1361.0x below typical range
Trigger: 84f92d22
↘ Returned to baseline
Supporting Evidence
⚠️ Action Required

when CI builds and code changes happen together, change focus and build time tend to move together.

What this means: Changes span files that don't normally change together, suggesting cross-cutting concerns that may be harder to test. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
Recommendation: Review whether these cross-cutting changes have adequate test coverage.
⚠️ Action Required

when CI builds and code changes happen together, file count and build time tend to move together.

What this means: Builds are running faster than usual. Verify this isn't due to skipped tests or simplified steps. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
Recommendation: Confirm test coverage hasn't decreased alongside faster builds.
⚠️ Action Required

when CI builds and code changes happen together, novelty of file pairings and build time tend to move together.

What this means: File co-change novelty is unusually low. While familiar patterns reduce risk, this could indicate repetitive or mechanical changes rather than normal development. Escalated from Needs Attention — multiple correlated patterns converge on the same signal families.
Recommendation: Review whether recent commits are routine maintenance or a sign of narrow, repetitive modifications that lack expected variety.
Show 1 more supporting evidence
ℹ️ Informational

when CI builds and dependency changes happen together, dependency count and build time tend to move in opposite directions.

What this means: Builds are running faster than usual. Verify this isn't due to skipped tests or simplified steps.
Recommendation: Confirm test coverage hasn't decreased alongside faster builds.
Drift Investigation Prompt
Development pattern shift detected in CI / Build.\n\nSIGNAL: Build Duration is 1361.0x below the typical baseline (observed: 171.0, typical: 34,607,081.0).\nTRIGGER COMMIT: 84f92d22 — \n\nRECENT COMMITS (20 total, showing top 5):\n  03a7f0d0 — Merge pull request #1526 from stripe/anniel-coveralls

Add t (3 files)\n  51ff04e1 — API Updates (#1534)

Codegen for openapi v186 (16 files)\n  0115ee2b — Add tsconfig, update package.json, rename lib to src, add bu (223 files)\n  1d27e63c — Update configuration and dependencies, update imports in tes (19 files)\n  58ef5c68 — API Updates (#1540)

Codegen for openapi v188 (7 files)\n  ... and 15 more commits\n\nCORRELATED PATTERNS:\n  [CRITICAL] when CI builds and code changes happen together, change focus and build time tend to move together.\n    → Profile the build pipeline to identify bottlenecks. Check for newly added expensive tests or build steps.\n    → Review whether these cross-cutting changes have adequate test coverage.\n  [CRITICAL] when CI builds and code changes happen together, file count and build time tend to move together.\n    → Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.\n  [CRITICAL] when CI builds and code changes happen together, novelty of file pairings and build time tend to move together.\n    → Investigate which files are being combined unexpectedly. Prioritize testing these changes.\n  [INFO] when CI builds and dependency changes happen together, dependency count and build time tend to move in opposite directions.\n    → Confirm test coverage hasn't decreased alongside faster builds.\n\nINVESTIGATE:\n1. Was this change intentional or did the AI drift from goals?\n2. Review commit 84f92d22 — what specifically caused the deviation?\n3. Suggest a course correction (not a bug fix — a realignment).\n\nAFTER FIX:\nRun `evo analyze . --verify` to re-analyze and compare against this run.\nIf the change was intentional, no fix needed — accept it in the report.
Use with: Cursor — paste in chat Claude Code — paste in terminal Copilot — paste in chat panel
After investigation:
  1. AI suggests fixes → apply the changes to your code
  2. Run evo analyze . --verify to re-analyze and compare against this run
  3. If the change was intentional, click Accept above to dismiss it
Show technical details

The run duration for this change was 171.0. Historically, similar changes had a value of 34,607,081.0 ± 17,151.0.

📝
Files Changed
Version Control
What this means: More files changed than usual in this commit.
Typical:
3.00
This Time:
448
150.1x above typical range
Trigger: 3e801431 Next major release changes (#1608)
↘ Returned to baseline
Supporting Evidence
⚠️ Action Required

when CI builds and code changes happen together, file count and build time tend to move together.

What this means: Commits are touching more files than usual, increasing review burden and risk of regressions. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
Recommendation: Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.
⚠️ Action Required

when deployments and code changes happen together, file count and release frequency tend to move together.

What this means: Commits are touching more files than usual, increasing review burden and risk of regressions. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
Recommendation: Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.
👁️ Worth Monitoring

when code changes occur, file count tends to increase.

What this means: Commits are touching more files than usual, increasing review burden and risk of regressions.
Recommendation: Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.
Drift Investigation Prompt
Development pattern shift detected in Version Control.\n\nSIGNAL: Files Changed is 150.1x above the typical baseline (observed: 448, typical: 3.00).\nTRIGGER COMMIT: 3e801431 — Next major release changes (#1608)\n\nFILES CHANGED IN TRIGGER (448):\n  - .github/workflows/main.yml\n  - API_VERSION\n  - README.md\n  - examples/webhook-signing/typescript-node-express/express-ts.ts\n  - lib/Error.js\n  - lib/StripeMethod.basic.js\n  - lib/StripeResource.js\n  - lib/Webhooks.js\n  - lib/apiVersion.js\n  - lib/resources.js\n  - lib/resources/AccountLinks.js\n  - lib/resources/Accounts.js\n  - lib/resources/ApplePayDomains.js\n  - lib/resources/ApplicationFees.js\n  - lib/resources/Apps/Secrets.js\n  ... and 433 more\n\nRECENT COMMITS (20 total, showing top 5):\n  03a7f0d0 — Merge pull request #1526 from stripe/anniel-coveralls

Add t (3 files)\n  51ff04e1 — API Updates (#1534)

Codegen for openapi v186 (16 files)\n  0115ee2b — Add tsconfig, update package.json, rename lib to src, add bu (223 files)\n  1d27e63c — Update configuration and dependencies, update imports in tes (19 files)\n  58ef5c68 — API Updates (#1540)

Codegen for openapi v188 (7 files)\n  ... and 15 more commits\n\nCORRELATED PATTERNS:\n  [CRITICAL] when CI builds and code changes happen together, file count and build time tend to move together.\n    → Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.\n  [CRITICAL] when deployments and code changes happen together, file count and release frequency tend to move together.\n    → Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.\n  [WATCH] when code changes occur, file count tends to increase.\n    → Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.\n\nINVESTIGATE:\n1. Was this change intentional or did the AI drift from goals?\n2. Review commit 3e801431 — what specifically caused the deviation?\n3. Suggest a course correction (not a bug fix — a realignment).\n\nAFTER FIX:\nRun `evo analyze . --verify` to re-analyze and compare against this run.\nIf the change was intentional, no fix needed — accept it in the report.
Use with: Cursor — paste in chat Claude Code — paste in terminal Copilot — paste in chat panel
After investigation:
  1. AI suggests fixes → apply the changes to your code
  2. Run evo analyze . --verify to re-analyze and compare against this run
  3. If the change was intentional, click Accept above to dismiss it
Show technical details

The files touched for this change was 448. Historically, similar changes had a value of 3.00 ± 2.00.

📝
Change Locality
Version Control
What this means: The changed files don't usually change together, suggesting a cross-cutting modification.
Typical:
0.9722
This Time:
0.0000
23.6x below typical range
Trigger: 54d423e5 Add Next.js App Router webhook example that leverages Route
↘ Returned to baseline
Supporting Evidence
⚠️ Action Required

when CI builds and code changes happen together, change focus and build time tend to move together.

What this means: Changes span files that don't normally change together, suggesting cross-cutting concerns that may be harder to test. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
Recommendation: Review whether these cross-cutting changes have adequate test coverage.
Drift Investigation Prompt
Development pattern shift detected in Version Control.\n\nSIGNAL: Change Locality is 23.6x below the typical baseline (observed: 0.0000, typical: 0.9722).\nTRIGGER COMMIT: 54d423e5 — Add Next.js App Router webhook example that leverages Route Handlers (#2259)\n\nFILES CHANGED IN TRIGGER (1):\n  - examples/webhook-signing/nextjs/app/api/webhooks/route.ts\n\nRECENT COMMITS (20 total, showing top 5):\n  03a7f0d0 — Merge pull request #1526 from stripe/anniel-coveralls

Add t (3 files)\n  51ff04e1 — API Updates (#1534)

Codegen for openapi v186 (16 files)\n  0115ee2b — Add tsconfig, update package.json, rename lib to src, add bu (223 files)\n  1d27e63c — Update configuration and dependencies, update imports in tes (19 files)\n  58ef5c68 — API Updates (#1540)

Codegen for openapi v188 (7 files)\n  ... and 15 more commits\n\nCORRELATED PATTERNS:\n  [CRITICAL] when CI builds and code changes happen together, change focus and build time tend to move together.\n    → Profile the build pipeline to identify bottlenecks. Check for newly added expensive tests or build steps.\n    → Review whether these cross-cutting changes have adequate test coverage.\n\nINVESTIGATE:\n1. Was this change intentional or did the AI drift from goals?\n2. Review commit 54d423e5 — what specifically caused the deviation?\n3. Suggest a course correction (not a bug fix — a realignment).\n\nAFTER FIX:\nRun `evo analyze . --verify` to re-analyze and compare against this run.\nIf the change was intentional, no fix needed — accept it in the report.
Use with: Cursor — paste in chat Claude Code — paste in terminal Copilot — paste in chat panel
After investigation:
  1. AI suggests fixes → apply the changes to your code
  2. Run evo analyze . --verify to re-analyze and compare against this run
  3. If the change was intentional, click Accept above to dismiss it
Show technical details

The change locality for this change was 0.0000. Historically, similar changes had a value of 0.9722 ± 0.0278.

📝
Co-change Novelty
Version Control
What this means: Many file pairings in this change haven't been seen together before.
Typical:
0.0449
This Time:
1.00
14.4x above typical range
Trigger: 07a8d2a6 stripe-node v13 release (#1808)
→ Still elevated (latest deviation: 1.8σ)
Supporting Evidence
⚠️ Action Required

when CI builds and code changes happen together, novelty of file pairings and build time tend to move together.

What this means: Files that don't normally change together are being modified in the same commits. This indicates novel, untested interactions that may introduce bugs. Escalated from Needs Attention — multiple correlated patterns converge on the same signal families.
Recommendation: Investigate which files are being combined unexpectedly. Prioritize testing these changes.
🔍 Needs Attention

when deployments and code changes happen together, novelty of file pairings tends to move in opposite directions.

What this means: Files that don't normally change together are being modified in the same commits. This indicates novel, untested interactions that may introduce bugs.
Recommendation: Investigate which files are being combined unexpectedly. Prioritize testing these changes.
🔍 Needs Attention

when dependency changes and code changes happen together, novelty of file pairings tends to move in opposite directions.

What this means: Files that don't normally change together are being modified in the same commits. This indicates novel, untested interactions that may introduce bugs.
Recommendation: Investigate which files are being combined unexpectedly. Prioritize testing these changes.
Drift Investigation Prompt
Development pattern shift detected in Version Control.\n\nSIGNAL: Co-change Novelty is 14.4x above the typical baseline (observed: 1.00, typical: 0.0449).\nTRIGGER COMMIT: 07a8d2a6 — stripe-node v13 release (#1808)\n\nFILES CHANGED IN TRIGGER (9):\n  - README.md\n  - src/RequestSender.ts\n  - src/stripe.core.ts\n  - test/RequestSender.spec.ts\n  - test/StripeResource.spec.ts\n  - test/resources/Quotes.spec.js\n  - test/resources/Subscriptions.spec.js\n  - test/stripe.spec.ts\n  - test/testUtils.ts\n\nRECENT COMMITS (20 total, showing top 5):\n  03a7f0d0 — Merge pull request #1526 from stripe/anniel-coveralls

Add t (3 files)\n  51ff04e1 — API Updates (#1534)

Codegen for openapi v186 (16 files)\n  0115ee2b — Add tsconfig, update package.json, rename lib to src, add bu (223 files)\n  1d27e63c — Update configuration and dependencies, update imports in tes (19 files)\n  58ef5c68 — API Updates (#1540)

Codegen for openapi v188 (7 files)\n  ... and 15 more commits\n\nCORRELATED PATTERNS:\n  [CRITICAL] when CI builds and code changes happen together, novelty of file pairings and build time tend to move together.\n    → Investigate which files are being combined unexpectedly. Prioritize testing these changes.\n  [INFO] when deployments and code changes happen together, novelty of file pairings tends to move in opposite directions.\n    → Review whether recent commits are routine maintenance or a sign of narrow, repetitive modifications that lack expected variety.\n  [INFO] when dependency changes and code changes happen together, novelty of file pairings tends to move in opposite directions.\n    → Review whether recent commits are routine maintenance or a sign of narrow, repetitive modifications that lack expected variety.\n\nINVESTIGATE:\n1. Was this change intentional or did the AI drift from goals?\n2. Review commit 07a8d2a6 — what specifically caused the deviation?\n3. Suggest a course correction (not a bug fix — a realignment).\n\nAFTER FIX:\nRun `evo analyze . --verify` to re-analyze and compare against this run.\nIf the change was intentional, no fix needed — accept it in the report.
Use with: Cursor — paste in chat Claude Code — paste in terminal Copilot — paste in chat panel
After investigation:
  1. AI suggests fixes → apply the changes to your code
  2. Run evo analyze . --verify to re-analyze and compare against this run
  3. If the change was intentional, click Accept above to dismiss it
Show technical details

The cochange novelty ratio for this change was 1.00. Historically, similar changes had a value of 0.0449 ± 0.0449.

🚀
Release Cadence
Deployment
What this means: Longer time between releases than usual.
Typical:
19.10
This Time:
315.2
10.6x above typical range
Trigger: master
→ Still elevated (latest deviation: 1.6σ)
Supporting Evidence
⚠️ Action Required

when deployments and code changes happen together, code spread and release frequency tend to move together.

What this means: Changes are spreading across unrelated parts of the codebase. This makes reviews harder and increases the chance of unexpected side effects. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
Recommendation: Review recent PRs for scope creep. Consider breaking large changes into focused commits.
⚠️ Action Required

when deployments and code changes happen together, file count and release frequency tend to move together.

What this means: Commits are touching more files than usual, increasing review burden and risk of regressions. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
Recommendation: Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.
👁️ Worth Monitoring

when dependency changes and deployments happen together, dependency count and release frequency tend to move together.

What this means: The dependency count is growing, expanding the supply-chain attack surface and potential for version conflicts.
Recommendation: Audit new dependencies for necessity, maintenance status, and known vulnerabilities.
Drift Investigation Prompt
Development pattern shift detected in Deployment.\n\nSIGNAL: Release Cadence is 10.6x above the typical baseline (observed: 315.2, typical: 19.10).\nTRIGGER COMMIT: master — \n\nRECENT COMMITS (20 total, showing top 5):\n  03a7f0d0 — Merge pull request #1526 from stripe/anniel-coveralls

Add t (3 files)\n  51ff04e1 — API Updates (#1534)

Codegen for openapi v186 (16 files)\n  0115ee2b — Add tsconfig, update package.json, rename lib to src, add bu (223 files)\n  1d27e63c — Update configuration and dependencies, update imports in tes (19 files)\n  58ef5c68 — API Updates (#1540)

Codegen for openapi v188 (7 files)\n  ... and 15 more commits\n\nCORRELATED PATTERNS:\n  [CRITICAL] when deployments and code changes happen together, code spread and release frequency tend to move together.\n    → Review recent PRs for scope creep. Consider breaking large changes into focused commits.\n  [CRITICAL] when deployments and code changes happen together, file count and release frequency tend to move together.\n    → Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.\n  [WATCH] when dependency changes and deployments happen together, dependency count and release frequency tend to move together.\n    → Audit new dependencies for necessity, maintenance status, and known vulnerabilities.\n\nINVESTIGATE:\n1. Was this change intentional or did the AI drift from goals?\n2. Review commit master — what specifically caused the deviation?\n3. Suggest a course correction (not a bug fix — a realignment).\n\nAFTER FIX:\nRun `evo analyze . --verify` to re-analyze and compare against this run.\nIf the change was intentional, no fix needed — accept it in the report.
Use with: Cursor — paste in chat Claude Code — paste in terminal Copilot — paste in chat panel
After investigation:
  1. AI suggests fixes → apply the changes to your code
  2. Run evo analyze . --verify to re-analyze and compare against this run
  3. If the change was intentional, click Accept above to dismiss it
Show technical details

The release cadence hours for this change was 315.2. Historically, similar changes had a value of 19.10 ± 18.80.

📦
Total Dependencies
Dependencies
What this means: Dependency count increased.
Typical:
375.0
This Time:
382
9.4x above typical range
Trigger: 539ef4b3
↘ Returned to baseline
Supporting Evidence
👁️ Worth Monitoring

when dependency changes and deployments happen together, dependency count and release frequency tend to move together.

What this means: The dependency count is growing, expanding the supply-chain attack surface and potential for version conflicts.
Recommendation: Audit new dependencies for necessity, maintenance status, and known vulnerabilities.
👁️ Worth Monitoring

when CI builds and dependency changes happen together, dependency count and build time tend to move in opposite directions.

What this means: The dependency count is growing, expanding the supply-chain attack surface and potential for version conflicts.
Recommendation: Audit new dependencies for necessity, maintenance status, and known vulnerabilities.
Drift Investigation Prompt
Development pattern shift detected in Dependencies.\n\nSIGNAL: Total Dependencies is 9.4x above the typical baseline (observed: 382, typical: 375.0).\nTRIGGER COMMIT: 539ef4b3 — \n\nRECENT COMMITS (20 total, showing top 5):\n  03a7f0d0 — Merge pull request #1526 from stripe/anniel-coveralls

Add t (3 files)\n  51ff04e1 — API Updates (#1534)

Codegen for openapi v186 (16 files)\n  0115ee2b — Add tsconfig, update package.json, rename lib to src, add bu (223 files)\n  1d27e63c — Update configuration and dependencies, update imports in tes (19 files)\n  58ef5c68 — API Updates (#1540)

Codegen for openapi v188 (7 files)\n  ... and 15 more commits\n\nCORRELATED PATTERNS:\n  [WATCH] when dependency changes and deployments happen together, dependency count and release frequency tend to move together.\n    → Audit new dependencies for necessity, maintenance status, and known vulnerabilities.\n  [INFO] when CI builds and dependency changes happen together, dependency count and build time tend to move in opposite directions.\n    → Confirm test coverage hasn't decreased alongside faster builds.\n\nINVESTIGATE:\n1. Was this change intentional or did the AI drift from goals?\n2. Review commit 539ef4b3 — what specifically caused the deviation?\n3. Suggest a course correction (not a bug fix — a realignment).\n\nAFTER FIX:\nRun `evo analyze . --verify` to re-analyze and compare against this run.\nIf the change was intentional, no fix needed — accept it in the report.
Use with: Cursor — paste in chat Claude Code — paste in terminal Copilot — paste in chat panel
After investigation:
  1. AI suggests fixes → apply the changes to your code
  2. Run evo analyze . --verify to re-analyze and compare against this run
  3. If the change was intentional, click Accept above to dismiss it
📝
Change Dispersion
Version Control
What this means: Changes spread across unrelated areas of the codebase.
Typical:
0.1758
This Time:
2.00
7.0x above typical range
Trigger: e044276b Bump version to 18.2.0
↘ Returned to baseline
Supporting Evidence
⚠️ Action Required

when deployments and code changes happen together, code spread and release frequency tend to move together.

What this means: Changes are spreading across unrelated parts of the codebase. This makes reviews harder and increases the chance of unexpected side effects. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
Recommendation: Review recent PRs for scope creep. Consider breaking large changes into focused commits.
👁️ Worth Monitoring

when dependency changes and code changes happen together, code spread tends to move together.

What this means: Changes are spreading across unrelated parts of the codebase. This makes reviews harder and increases the chance of unexpected side effects.
Recommendation: Review recent PRs for scope creep. Consider breaking large changes into focused commits.
Drift Investigation Prompt
Development pattern shift detected in Version Control.\n\nSIGNAL: Change Dispersion is 7.0x above the typical baseline (observed: 2.00, typical: 0.1758).\nTRIGGER COMMIT: e044276b — Bump version to 18.2.0\n\nFILES CHANGED IN TRIGGER (4):\n  - CHANGELOG.md\n  - VERSION\n  - package.json\n  - src/stripe.core.ts\n\nRECENT COMMITS (20 total, showing top 5):\n  03a7f0d0 — Merge pull request #1526 from stripe/anniel-coveralls

Add t (3 files)\n  51ff04e1 — API Updates (#1534)

Codegen for openapi v186 (16 files)\n  0115ee2b — Add tsconfig, update package.json, rename lib to src, add bu (223 files)\n  1d27e63c — Update configuration and dependencies, update imports in tes (19 files)\n  58ef5c68 — API Updates (#1540)

Codegen for openapi v188 (7 files)\n  ... and 15 more commits\n\nCORRELATED PATTERNS:\n  [CRITICAL] when deployments and code changes happen together, code spread and release frequency tend to move together.\n    → Review recent PRs for scope creep. Consider breaking large changes into focused commits.\n  [WATCH] when dependency changes and code changes happen together, code spread tends to move together.\n    → Review recent PRs for scope creep. Consider breaking large changes into focused commits.\n\nINVESTIGATE:\n1. Was this change intentional or did the AI drift from goals?\n2. Review commit e044276b — what specifically caused the deviation?\n3. Suggest a course correction (not a bug fix — a realignment).\n\nAFTER FIX:\nRun `evo analyze . --verify` to re-analyze and compare against this run.\nIf the change was intentional, no fix needed — accept it in the report.
Use with: Cursor — paste in chat Claude Code — paste in terminal Copilot — paste in chat panel
After investigation:
  1. AI suggests fixes → apply the changes to your code
  2. Run evo analyze . --verify to re-analyze and compare against this run
  3. If the change was intentional, click Accept above to dismiss it
Show technical details

The dispersion for this change was 2.00. Historically, similar changes had a value of 0.1758 ± 0.1758.

Next Steps

1
Investigate

Copy the prompt below and paste it into your AI assistant (Claude Code, Cursor, Copilot, ChatGPT). It will identify root causes and suggest fixes.

2
Fix

Apply the suggested changes. If a deviation was intentional, click Accept on its card above instead.

3
Verify

Run evo analyze . --verify to re-analyze and compare. A verification banner will show which deviations resolved, improved, or persist.

Investigation Prompt

Development drift analysis for stripe/stripe-node (May 09, 2018 at 11:25 PM to Mar 13, 2026 at 06:54 PM). DEVIATIONS FROM BASELINE: - CI / Build: Build Duration — 34,607,081.0 -> 171.0 - Version Control: Files Changed — 3.00 -> 448 - Version Control: Change Locality — 0.9722 -> 0.0000 - Version Control: Co-change Novelty — 0.0449 -> 1.00 - Deployment: Release Cadence — 19.10 -> 315.2 - Dependencies: Total Dependencies — 375.0 -> 382 - Version Control: Change Dispersion — 0.1758 -> 2.00 Click "Show Full Prompt" to see the complete investigation prompt with evidence...
Development drift analysis for stripe/stripe-node (May 09, 2018 at 11:25 PM to Mar 13, 2026 at 06:54 PM).

DEVIATIONS FROM BASELINE:

- CI / Build / Build Duration: 171.0 (typical: 34,607,081.0, 1361.0x below)
- Version Control / Files Changed: 448 (typical: 3.00, 150.1x above)
- Version Control / Change Locality: 0.0000 (typical: 0.9722, 23.6x below)
- Version Control / Co-change Novelty: 1.00 (typical: 0.0449, 14.4x above)
- Deployment / Release Cadence: 315.2 (typical: 19.10, 10.6x above)
- Dependencies / Total Dependencies: 382 (typical: 375.0, 9.4x above)
- Version Control / Change Dispersion: 2.00 (typical: 0.1758, 7.0x above)

RISK PATTERNS (actionable only):

- [Action Required] 3 patterns:
    * when CI builds and code changes happen together, novelty of file pairings and build time tend to move together.
    * when deployments and code changes happen together, novelty of file pairings tends to move together.
    * when CI builds and code changes happen together, novelty of file pairings tends to move together.
  Impact: Files that don't normally change together are being modified in the same commits. This indicates novel, untested interactions that may introduce bugs. Escalated from Needs Attention — multiple correlated patterns converge on the same signal families.
  Action: Investigate which files are being combined unexpectedly. Prioritize testing these changes.

- [Action Required] when deployments and code changes happen together, change focus and release frequency tend to move together.
  Impact: Time between releases is increasing. This could indicate a bottleneck in the release process or accumulating risk in larger releases. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
  Action: Check if process changes or staffing issues are delaying releases.

- [Action Required] when CI builds and code changes happen together, change focus and build time tend to move together.
  (3 independent confirmations)
  Impact: Builds are taking longer. Slower CI feedback loops reduce developer productivity and delay catching issues. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
  Action: Profile the build pipeline to identify bottlenecks. Check for newly added expensive tests or build steps.

- [Action Required] 4 patterns:
    * when deployments and code changes happen together, code spread and release frequency tend to move together.
    * when CI builds and code changes happen together, code spread and build time tend to move together.
    * when deployments and code changes happen together, code spread tends to move together.
    * when CI builds and code changes happen together, code spread tends to move together.
  Impact: Changes are spreading across unrelated parts of the codebase. This makes reviews harder and increases the chance of unexpected side effects. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
  Action: Review recent PRs for scope creep. Consider breaking large changes into focused commits.

- [Action Required] 4 patterns:
    * when deployments and code changes happen together, file count tends to move together.
    * when CI builds and code changes happen together, file count and build time tend to move together.
    * when deployments and code changes happen together, file count and release frequency tend to move together.
    * when CI builds and code changes happen together, file count tends to move together.
  Impact: Commits are touching more files than usual, increasing review burden and risk of regressions. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
  Action: Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.

- [Action Required] when CI builds and code changes happen together, change focus tends to move in opposite directions.
  Impact: Changes span files that don't normally change together, suggesting cross-cutting concerns that may be harder to test. Escalated from Worth Monitoring — multiple correlated patterns converge on the same signal families.
  Action: Review whether these cross-cutting changes have adequate test coverage.

- [Worth Monitoring] when dependency changes and deployments happen together, dependency count and release frequency tend to move together.
  (2 independent confirmations)
  Impact: The dependency count is growing, expanding the supply-chain attack surface and potential for version conflicts.
  Action: Audit new dependencies for necessity, maintenance status, and known vulnerabilities.

- [Worth Monitoring] when dependency changes and code changes happen together, change focus tends to move in opposite directions.
  Impact: Changes span files that don't normally change together, suggesting cross-cutting concerns that may be harder to test.
  Action: Review whether these cross-cutting changes have adequate test coverage.

- [Worth Monitoring] when dependency changes and code changes happen together, code spread tends to move together.
  Impact: Changes are spreading across unrelated parts of the codebase. This makes reviews harder and increases the chance of unexpected side effects.
  Action: Review recent PRs for scope creep. Consider breaking large changes into focused commits.

- [Worth Monitoring] when code changes occur, file count tends to increase.
  Impact: Commits are touching more files than usual, increasing review burden and risk of regressions.
  Action: Monitor PR sizes. If this persists, investigate whether large refactors need better decomposition.


COMMITS (20):

  03a7f0d0 — Merge pull request #1526 from stripe/anniel-coveralls (3 files)
  51ff04e1 — API Updates (#1534) (16 files)
  0115ee2b — Add tsconfig, update package.json, rename lib to src, add build CI step (223 files)
  1d27e63c — Update configuration and dependencies, update imports in tests (19 files)
  58ef5c68 — API Updates (#1540) (7 files)
  18f88e48 — Bump version to 10.7.0 (3 files)
  2a567fe7 — Rename build to lib, add more eslint rules, add prepack script, update npmignore (130 files)
  999dae45 — Ignore lib/ (110 files)
  6daeda78 — Remove prepack script, instead add build step to publish CI (2 files)
  f2cd99d8 — Add back prepack script (2 files)
  ... and 10 more

SOURCE FILES CHANGED (35):

  - .github/workflows/main.yml (modified)
  - README.md (modified)
  - package.json (modified)
  - OPENAPI_VERSION (modified)
  - .eslintignore (modified)
  - .gitignore (modified)
  - lib/Error.js (modified)
  - lib/ResourceNamespace.js (modified)
  - lib/StripeMethod.basic.js (modified)
  - lib/StripeMethod.js (modified)
  - lib/StripeResource.js (modified)
  - lib/Webhooks.js (modified)
  - lib/apiVersion.js (modified)
  - lib/autoPagination.js (modified)
  - lib/crypto/CryptoProvider.js (modified)
  - lib/crypto/NodeCryptoProvider.js (modified)
  - lib/crypto/SubtleCryptoProvider.js (modified)
  - lib/makeRequest.js (modified)
  - lib/multipart.js (modified)
  - lib/net/FetchHttpClient.js (modified)
  ... and 15 more

TASKS:

1. ROOT CAUSE: For each deviation, identify the commit(s) that caused it.
   Focus on [Action Required] and [Needs Attention] items first.

2. FIXES: Provide concrete fixes with file paths and code changes.
   Goal: bring metrics back toward baseline without disrupting velocity.

3. PRIORITY: Rank fixes by urgency (immediate vs. next sprint).

4. AFTER FIXING: Run `evo analyze . --verify` to confirm deviations decreased.
   If a change was intentional, accept it: `evo accept . <N>`.

5. FINDING SUMMARIES: At the end, include a section like this:
   ## Finding Summaries
   - [family/metric]: One plain-English sentence for a non-technical reader.
   (This lets the user run `evo enrich . --from response.txt` to store friendly descriptions.)

Expand Your Coverage

Evolution Engine has 44 universal patterns learned from 200+ open-source repositories. The more signal families you connect, the more cross-family patterns can be detected.

Available Adapters

Enable these adapters to unlock additional signal families and cross-family pattern detection.

📊
cobertura
Code Coverage
Code coverage from Cobertura XML reports — line rate, branch rate
Auto-detected from files Setup guide →
🚨
sentry
Error Tracking
Error tracking and release health from Sentry — event count, user impact, unhandled errors
Set SENTRY_AUTH_TOKEN Setup guide →

How to Connect an Adapter

  1. Set the environment variable shown on the adapter card. For example: export GITHUB_TOKEN=$(gh auth token)
  2. For file-based adapters (Testing, Coverage): generate reports in your project first. For example, pytest --junitxml=junit.xml or pytest --cov --cov-report=xml
  3. Run analysis: evo analyze . — new adapters are detected automatically
  4. Verify: evo sources to confirm which adapters are active
Coming soon: CI / Build, Deployment, Feature Flags, Incidents, Monitoring, Quality Gate, Security Scan, Work Items