AI Slop Code Risk Monitor

JuliaLang/julia

SlopCodeMonitor badge for JuliaLang/julia Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

The Julia Programming Language

3.2 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for JuliaLang/julia, a Julia project with 49,230 GitHub stars. SynthScan examined 264,467 lines of code across 690 source files, recording 723 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 3.2 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

3.2
Adjusted Signal
3.2
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
49.2K
Stars
Julia
Language
264.5K
Lines of Code
690
Files
723
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 14.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 719 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 4 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 10 finding(s).

PR Review Velocity Impact 14.6/100 · LOW

Which changes need focused human review? 723 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 53LOW 669

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 723 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block621 hits · 611 pts
SeverityFileLineSnippetContext
LOWtest/gcext/gcext.c1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWtest/embedding/asan-embedding.c1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWtest/trim/LibSimple/capplication.c1#include <stdio.h>COMMENT
LOWtest/clangsa/StaticOrDeclaredTest.c1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWtest/clangsa/StaticOrDeclaredTest.c21// FIXYAML-NOT: ReplacementTextCOMMENT
LOWtest/clangsa/FirstDeclAnnotationsTest.c1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWtest/clangsa/FirstDeclAnnotationsTest.c161# 1 "FirstDeclAnnotationsTest.c" 2COMMENT
LOWcli/loader_exe.c1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWcli/loader_symbol_probe.c101#define JL_ELF_MACHINE EM_X86_64COMMENT
LOWcli/loader_lib.c261// On Linux, it can happen that the system has a newer libstdc++ than the one we ship,COMMENT
LOWcli/jl_exports.h1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWcli/list_strip_symbols.h1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWcli/loader.h1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWcli/loader.h21#endifCOMMENT
LOWcli/loader.h41# define JL_DLLIMPORT __declspec(dllimport) __attribute__ ((visibility("default")))COMMENT
LOWcli/dl-cache.h21#define FLAG_ANY -1COMMENT
LOWcli/dl-cache.h41#define FLAG_MIPS64_LIBN64_NAN2008 0x0e00COMMENT
LOWcli/dl-cache.h101COMMENT
LOWcli/loader_library_probe.c1#include "../src/support/platform.h"COMMENT
LOWcontrib/bump_stdlib.sh1#!/bin/bashCOMMENT
LOWcontrib/github_source_release.sh1#!/usr/bin/env bashCOMMENT
LOWcontrib/tsan/build.sh1#!/bin/bashCOMMENT
LOWcontrib/mac/framework/Julia.h1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWcontrib/asan/build.sh1#!/bin/bashCOMMENT
LOWdeps/valgrind/valgrind.h121#undef PLAT_arm64_linuxCOMMENT
LOWdeps/valgrind/valgrind.h141# define PLAT_amd64_linux 1COMMENT
LOWdeps/valgrind/valgrind.h6581#undef PLAT_ppc64le_linuxCOMMENT
LOWdoc/src/manual/methods.md781COMMENT
LOWsrc/runtime_intrinsics.c1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWsrc/runtime_intrinsics.c261 #define FLOAT16_ARG_TYPE _Float16COMMENT
LOWsrc/runtime_intrinsics.c281 // before _Float16COMMENT
LOWsrc/runtime_intrinsics.c401#if ((defined(__GNUC__) && __GNUC__ > 12) || \COMMENT
LOWsrc/runtime_intrinsics.c781}COMMENT
LOWsrc/runtime_intrinsics.c901// OP::Function macro(inputa, inputb)COMMENT
LOWsrc/ircode.c1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWsrc/ircode.c21#define TAG_DATATYPE 4COMMENT
LOWsrc/ircode.c41#define TAG_SINGLETON 24COMMENT
LOWsrc/ircode.c61#define TAG_LONG_EDGE 44COMMENT
LOWsrc/signal-handling.c1// This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
LOWsrc/signal-handling.c101// Any function that acquires this lock must be either an unmanaged threadCOMMENT
LOWsrc/signal-handling.c501 // every press.)COMMENT
LOWsrc/signal-handling.c561}COMMENT
LOWsrc/signal-handling.c621 arraylist_free(&worklist);COMMENT
LOWsrc/signal-handling.c661 break;COMMENT
LOWsrc/signal-handling.c721{COMMENT
LOWsrc/signal-handling.c741#if defined(SIGABRT_COMPAT) && (!defined(SIGABRT) || SIGABRT_COMPAT != SIGABRT)COMMENT
LOWsrc/signal-handling.c761#endifCOMMENT
LOWsrc/signal-handling.c781 SIGNAL_CASE(SIGCONT, "Continued");COMMENT
LOWsrc/signal-handling.c801#ifdef SIGXFSZCOMMENT
LOWsrc/gc-interface.h21struct JL_GC_TRACKED_TYPE _jl_datatype_t;COMMENT
LOWsrc/gc-interface.h41 // used to gather some statistics within the collection itself and reset at the end of a GC cycle.COMMENT
LOWsrc/gc-interface.h61 // NOTE: This field is no longer used by the heuristics in the stock GCCOMMENT
LOWsrc/gc-interface.h81 uint64_t mark_time;COMMENT
LOWsrc/gc-interface.h101 // Timestamp of the last incremental GC sweep in nanosecondsCOMMENT
LOWsrc/gc-interface.h121// Initializes thread-local data structures such as thread-local object pools,COMMENT
LOWsrc/gc-interface.h141// Enables or disables (depending on the value of the argument) the collector. ReturnsCOMMENT
LOWsrc/gc-interface.h161// When disabled (on == 0), automatic collections will only be incrementalCOMMENT
LOWsrc/gc-interface.h181COMMENT
LOWsrc/gc-interface.h201JL_DLLEXPORT void jl_gc_get_total_bytes(int64_t *bytes) JL_NOTSAFEPOINT;COMMENT
LOWsrc/gc-interface.h221// function should allocate in the thread-local allocator of the thread referenced by theCOMMENT
561 more matches not shown…
Self-Referential Comments45 hits · 135 pts
SeverityFileLineSnippetContext
MEDIUMtest/gcext/ForeignObjSerialization/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/gcext/Foreign/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/gcext/DependsOnForeign/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/manifest/v2.0/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/manifest/v1.0/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/Workspaces/PrecompileExt/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/ProjectPath/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUM…/project/Extensions/EnvWithHasExtensions/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/Extensions/EnvWithDeps/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUM…oject/Extensions/HasDepWithExtensions.jl/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUM…xtensions/CrossPackageExtToExtDependency/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/Extensions/CyclicExtensions/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/Extensions/Parent.jl/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUM…roject/Extensions/EnvWithHasExtensionsv2/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/Extensions/HasExtensions.jl/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUM…st/project/Extensions/ExtToExtDependency/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/deps/BadStdlibDeps/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/deps/BadStdlibDeps4/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/deps/BadStdlibDeps3/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/deps/BadStdlibDeps2/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/SyntaxVersioning/explicit/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMtest/project/SubProject/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMcontrib/delete-all-rpaths.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/fixup-rpath.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/install.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/new-stdlib.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/bump_stdlib.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/fixup-libgfortran.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/commit-name.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/download_cmake.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/github_source_release.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/fixup-libstdc++.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/tsan/build.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/mac/app/renotarize_dmg.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/mac/app/notarize_check.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMcontrib/asan/build.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
MEDIUMdeps/jlutilities/juliac/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMdeps/jlutilities/documenter/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMdeps/jlutilities/revise/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMdeps/jlutilities/objectfile/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMstdlib/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMstdlib/TOML/benchmark/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMstdlib/TOML/docs/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMCompiler/test/CompilerLoadingTest/Manifest.toml1# This file is machine-generated - editing it directly is not advisedCOMMENT
MEDIUMbase/version_git.sh2# This file is a part of Julia. License is MIT: https://julialang.org/licenseCOMMENT
AI Slop Vocabulary7 hits · 24 pts
SeverityFileLineSnippetContext
LOWcontrib/fixup-libgfortran.sh122# don't care about full paths, we just set the rpath to `$ORIGIN`.COMMENT
MEDIUMsrc/codegen.cpp6785 // This shouldn't happen in well-formed input, but let's be robust,COMMENT
MEDIUMsrc/llvm-cancellation-lowering.cpp321 // establishment - so this is robust against any CFG shape theCOMMENT
MEDIUM⚡src/objcache.cpp76// Linux LMDB uses robust process-shared mutexes to recover locks after anCOMMENT
MEDIUM⚡src/objcache.cpp77// owner dies. QEMU user mode returns ENOSYS for both robust-list syscalls,COMMENT
MEDIUM⚡src/objcache.cpp79// unrecoverable. Query the current thread without changing libc's robust list.COMMENT
MEDIUMsrc/julia_internal.h1719//TODO: utilize https://github.com/openssl/openssl/blob/master/crypto/rand/rand_uniform.c#L13-L99COMMENT
Structural Annotation Overuse13 hits · 20 pts
SeverityFileLineSnippetContext
LOWdoc/src/devdocs/sanitizers.md73#### Step 1: Install toolchainCOMMENT
LOWdoc/src/devdocs/sanitizers.md93#### Step 2: Build Julia with ASANCOMMENT
LOWsrc/gf.c5352 // NOTE: This function is a huge performance hot spot!!COMMENT
LOWsrc/typemap.c231 // NOTE: This function is a huge performance hot spot!!COMMENT
LOWsrc/typemap.c252 // NOTE: This function is a performance hot spot!!COMMENT
LOWsrc/julia_internal.h1964 // NOTE: This function is a huge performance hot spot!!COMMENT
LOWsrc/datatype.c2853 // Step 1: Create empty DataTypes for each type in the typegroupCOMMENT
LOWsrc/datatype.c2889 // Step 2: Resolve type parameters and set up wrapper UnionAllsCOMMENT
LOWsrc/datatype.c2951 // Step 3: Resolve supertypes (after wrapper UnionAlls are set up)COMMENT
LOWsrc/datatype.c2977 // Step 4: Resolve field typesCOMMENT
LOWsrc/datatype.c3085 // Step 6: Reinstantiate inner typesCOMMENT
LOWsrc/datatype.c3107 // Step 7: Check for equivalent type redefinitions.COMMENT
LOWsrc/datatype.c3164 // Step 8: Publish the deferred types to the global type caches. TypesCOMMENT
Verbosity Indicators9 hits · 14 pts
SeverityFileLineSnippetContext
LOWsrc/datatype.c2853 // Step 1: Create empty DataTypes for each type in the typegroupCOMMENT
LOWsrc/datatype.c2889 // Step 2: Resolve type parameters and set up wrapper UnionAllsCOMMENT
LOWsrc/datatype.c2951 // Step 3: Resolve supertypes (after wrapper UnionAlls are set up)COMMENT
LOWsrc/datatype.c2977 // Step 4: Resolve field typesCOMMENT
LOWsrc/datatype.c3085 // Step 6: Reinstantiate inner typesCOMMENT
LOWsrc/datatype.c3107 // Step 7: Check for equivalent type redefinitions.COMMENT
LOWsrc/datatype.c3164 // Step 8: Publish the deferred types to the global type caches. TypesCOMMENT
LOWsrc/method.c1391// This section handles method roots. Roots are GC-preserved items needed toCOMMENT
LOWsrc/gc-mmtk/mmtk_julia/src/collection.rs117 // For concurrent Immix, we need to check if SATB is activeCOMMENT
AI Response Leakage1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHdoc/src/base/scopedvalues.md246# it, unshare the values explicitly. In this example we use `merge`COMMENT
Hyper-Verbose Identifiers10 hits · 6 pts
SeverityFileLineSnippetContext
LOWcontrib/optimized/test_makefile.py149 def test_override_and_dry_run(self):STRING
LOWcontrib/optimized/test_makefile.py245 def test_bolt_flags_per_architecture(self):STRING
LOWcontrib/optimized/test_makefile.py255 def test_host_compiler_runtime(self):STRING
LOWcontrib/optimized/test_makefile.py313 def test_custom_bolt_profiles(self):STRING
LOWcontrib/optimized/test_makefile.py331 def check_compress_after_bolt(self, value, compressed):STRING
LOW⚡contrib/optimized/test_makefile.py342 def test_no_compress_after_bolt(self):STRING
LOW⚡contrib/optimized/test_makefile.py345 def test_missing_library_fails(self):STRING
LOW⚡contrib/optimized/test_makefile.py351 def test_instrument_failure_stops_chain(self):STRING
LOW⚡contrib/optimized/test_makefile.py356 def test_restore_preserves_mtime_and_all_rewrites_again(self):STRING
LOWcontrib/optimized/test_makefile.py376 def test_clean_does_not_reconfigure_existing_directories(self):STRING
Deep Nesting6 hits · 6 pts
SeverityFileLineSnippetContext
LOWcontrib/optimized/test_makefile.py117CODE
LOWcontrib/optimized/test_makefile.py193CODE
LOWcontrib/optimized/test_makefile.py255CODE
LOWcontrib/windows/test_exports.py19CODE
LOWcontrib/windows/link_with_exports.py12CODE
LOWcontrib/windows/link_with_exports.py35CODE
Modern AI Meta-Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMsrc/gc-stock.c3670 // compute some guardrails valuesCOMMENT
MEDIUMsrc/gc-stock.c3690 // then add the guardrails for transient issuesCOMMENT
Unused Imports4 hits · 4 pts
SeverityFileLineSnippetContext
LOWtest/clangsa/lit.cfg.py2CODE
LOWtest/clangsa/lit.cfg.py3CODE
LOWtest/llvmpasses/lit.cfg.py2CODE
LOWtest/llvmpasses/lit.cfg.py3CODE
Example Usage Blocks2 hits · 3 pts
SeverityFileLineSnippetContext
LOWcontrib/tsan/build.sh5# Usage:COMMENT
LOWcontrib/asan/build.sh5# Usage:COMMENT
Slop Phrases2 hits · 3 pts
SeverityFileLineSnippetContext
LOWstdlib/CompilerSupportLibraries_jll/Project.toml4# NOTE: When updating this, also make sure to update the valueCOMMENT
LOWsrc/gc-stock.c3169 // Don't forget to clear the remsetCOMMENT
TODO Padding1 hit · 2 pts
SeverityFileLineSnippetContext
LOWsrc/cgutils.cpp575 // TODO: implement this filter operationCOMMENT