AI Slop Code Risk Monitor

LongSoft/UEFITool

SlopCodeMonitor badge for LongSoft/UEFITool Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

UEFI firmware image viewer and editor

2.6 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for LongSoft/UEFITool, a C project with 5,782 GitHub stars. SynthScan examined 117,328 lines of code across 292 source files, recording 298 pattern matches distributed across 3 syntactic categories. The legacy adjusted pattern signal is 2.6 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.6
Adjusted Signal
2.6
Raw Pattern Score
100%
Time Factor
2026-10-27
Last Push
5.8K
Stars
C
Language
117.3K
Lines of Code
292
Files
298
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 12.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 298 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 11.9/100 · LOW

Which changes need focused human review? 298 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 0LOW 298

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 298 distinct pattern matches across 3 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block292 hits · 290 pts
SeverityFileLineSnippetContext
LOWfuzzing/afl_driver.cpp41If 1, close stdout at startup. If 2 close stderr; if 3 close both.COMMENT
LOWfuzzing/afl_driver.cpp61#define LIBFUZZER_NETBSD 0COMMENT
LOWfuzzing/afl_driver.cpp81#define LIBFUZZER_OPENBSD 0COMMENT
LOWUEFITool/uefitool.h21#include <QDropEvent>COMMENT
LOWUEFITool/uefitool.h41COMMENT
LOWUEFITool/QHexView/include/QHexView/qhexview.h1#pragma onceCOMMENT
LOWUEFITool/QHexView/src/qhexview.cpp1#include <QApplication>COMMENT
LOWUEFITool/QHexView/src/model/qhexutils.cpp1#include "QHexView/model/qhexdocument.h"COMMENT
LOWUEFITool/QHexView/src/dialogs/hexfinddialog.cpp1#include <QCheckBox>COMMENT
LOWcommon/treemodel.h21COMMENT
LOWcommon/treemodel.h41#include "basetypes.h"COMMENT
LOWcommon/intel_fit.h21COMMENT
LOWcommon/intel_fit.h41//#define INTEL_FIT_TYPE_INTEL_RESERVED_0E 0x0ECOMMENT
LOWcommon/intel_fit.h81// Version must be 0x0100COMMENT
LOWcommon/intel_fit.h101// One MTRR base/limit pair is used to map Startup ACM, soCOMMENT
LOWcommon/intel_fit.h141//COMMENT
LOWcommon/ustring.h21#elseCOMMENT
LOWcommon/nvram.h41 UINT16 Size; // Size of the entry including headerCOMMENT
LOWcommon/nvram.h61#define NVRAM_NVAR_ENTRY_EXT_AUTH_WRITE 0x10COMMENT
LOWcommon/nvram.h141COMMENT
LOWcommon/nvram.h221// Apple System Flags storeCOMMENT
LOWcommon/nvram.h241//COMMENT
LOWcommon/nvram.h281COMMENT
LOWcommon/ffs.h141COMMENT
LOWcommon/ffs.h161#define EFI_FVB_ALIGNMENT_4 0x00020000COMMENT
LOWcommon/ffs.h181#define EFI_FVB2_WRITE_ENABLED_CAP 0x00000010COMMENT
LOWcommon/ffs.h201#define EFI_FVB2_ALIGNMENT_256 0x00080000COMMENT
LOWcommon/ffs.h301// Standard data checksum, used if FFS_ATTRIB_CHECKSUM is clearCOMMENT
LOWcommon/ffs.h321#define EFI_FV_FILETYPE_MM_CORE_STANDALONE 0x0FCOMMENT
LOWcommon/ffs.h341COMMENT
LOWcommon/ffs.h401// File section typesCOMMENT
LOWcommon/ffs.h521#define EFI_DEP_OPCODE_SIZE 1COMMENT
LOWcommon/ffs.h541#define EFI_DEP_END 0x08COMMENT
LOWcommon/ffs.h601 UINT32 UmaCacheable : 1;COMMENT
LOWcommon/ffs.h621#define BPDT_ENTRY_TYPE_UFS_GPP_LUN 13COMMENT
LOWcommon/ffs.h641#define BPDT_ENTRY_TYPE_ISIF 33COMMENT
LOWcommon/ffs.h721#define CPD_EXT_TYPE_INIT_SCRIPT 1COMMENT
LOWcommon/ffs.h741#define CPD_EXT_TYPE_SECURE_TOKEN 21COMMENT
LOWcommon/ffs.h981 UINT8 NamespaceIdC;COMMENT
LOWcommon/descriptor.h21#pragma pack(push,1)COMMENT
LOWcommon/descriptor.h341 // PLATFORM_STONEYRIDGE 15h (60-6fh) 10220B00hCOMMENT
LOWcommon/basetypes.h21// TODO: improveCOMMENT
LOWcommon/basetypes.h41#define U_UNKNOWN_FFS 18COMMENT
LOWcommon/basetypes.h61#define U_INVALID_CAPSULE 38COMMENT
LOWcommon/basetypes.h101typedef size_t UINTN;COMMENT
LOWcommon/basetypes.h121#define OUTCOMMENT
LOWcommon/basetypes.h141#define COMPRESSION_ALGORITHM_BROTLI 10COMMENT
LOWcommon/basetypes.h161COMMENT
LOWcommon/basetypes.h201#define ALIGN4(Value) (((Value)+3) & ~3)COMMENT
LOWcommon/basetypes.h221#define TCG_HASH_ALGORITHM_ID_SHA384 0x000CCOMMENT
LOWcommon/peimage.h21COMMENT
LOWcommon/peimage.h41#define EFI_IMAGE_FILE_MACHINE_ARMNT 0x01c4 // ARMv7 (or higher) Thumb mode onlyCOMMENT
LOWcommon/peimage.h101// Size of EFI_IMAGE_FILE_HEADER.COMMENT
LOWcommon/peimage.h121//COMMENT
LOWcommon/peimage.h141COMMENT
LOWcommon/peimage.h261#define EFI_IMAGE_SUBSYSTEM_WINDOWS_GUI 2COMMENT
LOWcommon/peimage.h301#define EFI_IMAGE_SCN_CNT_UNINITIALIZED_DATA 0x00000080COMMENT
LOWcommon/peimage.h321#define EFI_IMAGE_SCN_MEM_READ 0x40000000COMMENT
LOWcommon/peimage.h341#define EFI_IMAGE_SYM_TYPE_VOID 1 // no valid typeCOMMENT
LOWcommon/peimage.h361#define EFI_IMAGE_SYM_DTYPE_POINTER 1COMMENT
232 more matches not shown…
Verbosity Indicators3 hits · 4 pts
SeverityFileLineSnippetContext
LOWcommon/kaitai/kaitaistream.cpp1124 // Step 1: convert encoding name to codepage numberCOMMENT
LOWcommon/kaitai/kaitaistream.cpp1144 // Step 2: convert bytes to UTF-16 ("wide char") stringCOMMENT
LOWcommon/kaitai/kaitaistream.cpp1198 // Step 3: convert UTF-16 string to UTF-8 stringCOMMENT
Structural Annotation Overuse3 hits · 4 pts
SeverityFileLineSnippetContext
LOWcommon/kaitai/kaitaistream.cpp1124 // Step 1: convert encoding name to codepage numberCOMMENT
LOWcommon/kaitai/kaitaistream.cpp1144 // Step 2: convert bytes to UTF-16 ("wide char") stringCOMMENT
LOWcommon/kaitai/kaitaistream.cpp1198 // Step 3: convert UTF-16 string to UTF-8 stringCOMMENT