AI Slop Code Risk Monitor

M66B/FairEmail

SlopCodeMonitor badge for M66B/FairEmail Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Fully featured, open source, privacy friendly email app for Android

2.5 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for M66B/FairEmail, a Java project with 4,743 GitHub stars. SynthScan examined 912,324 lines of code across 2295 source files, recording 331 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 2.5 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.5
Adjusted Signal
2.5
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
4.7K
Stars
Java
Language
912.3K
Lines of Code
2.3K
Files
331
Pattern Hits
2026-10-31
Scan Date
0.07
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 159 finding(s).

Hallucinated Dependency & Supply Chain Risk 11.0/100 · LOW

Are imports declared and package/API names verified? 172 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 2 finding(s).

PR Review Velocity Impact 9.7/100 · LOW

Which changes need focused human review? 331 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 170HIGH 1MEDIUM 2LOW 158

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 331 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators170 hits · 2120 pts
SeverityFileLineSnippetContext
CRITICAL⚡index.html185 at io.requery.android.database.sqlite.SQLiteConnection.nativeExecute(SourceFile:-2)CODE
CRITICAL⚡index.html186 at io.requery.android.database.sqlite.SQLiteConnection.execute(SQLiteConnection:595)CODE
CRITICAL⚡index.html187 at io.requery.android.database.sqlite.SQLiteSession.endTransactionUnchecked(SQLiteSession:447)CODE
CRITICAL⚡index.html188 at io.requery.android.database.sqlite.SQLiteSession.endTransaction(SQLiteSession:411)CODE
CRITICAL⚡index.html189 at io.requery.android.database.sqlite.SQLiteDatabase.endTransaction(SQLiteDatabase:551)CODE
CRITICAL⚡FAQ.md192 at io.requery.android.database.sqlite.SQLiteConnection.nativeExecute(SourceFile:-2)CODE
CRITICAL⚡FAQ.md193 at io.requery.android.database.sqlite.SQLiteConnection.execute(SQLiteConnection:595)CODE
CRITICAL⚡FAQ.md194 at io.requery.android.database.sqlite.SQLiteSession.endTransactionUnchecked(SQLiteSession:447)CODE
CRITICAL⚡FAQ.md195 at io.requery.android.database.sqlite.SQLiteSession.endTransaction(SQLiteSession:411)CODE
CRITICAL⚡FAQ.md196 at io.requery.android.database.sqlite.SQLiteDatabase.endTransaction(SQLiteDatabase:551)CODE
CRITICALapp/src/main/java/androidx/room/TableInfo.java694 ? Collections.nCopies(columns.size(), androidx.room.Index.Order.ASC.name())CODE
CRITICAL…java/androidx/emoji2/text/flatbuffer/MetadataList.java34 public androidx.emoji2.text.flatbuffer.MetadataItem.Vector listVector() { return listVector(new androidx.emoji2.text.fCODE
CRITICALapp/src/main/java/javax/mail/EventQueue.java165 at java.util.concurrent.locks.AbstractQueuedSynchronizer.acquireInterruptibly(AbstractQueuedSynchronizer.java:1248)CODE
CRITICALapp/src/main/java/javax/mail/EventQueue.java166 at java.util.concurrent.locks.ReentrantLock.lockInterruptibly(ReentrantLock.java:344)CODE
CRITICALapp/src/main/java/javax/mail/internet/MimeUtility.java1340 javax.mail.internet.MimeUtility.class.getResourceAsStream(CODE
CRITICALapp/src/main/java/eu/faircode/email/MessageHelper.java4965 if (!org.apache.poi.hsmf.datatypes.MAPIProperty.RTF_COMPRESSED.equals(attr.getProperty()) &&CODE
CRITICALapp/src/main/java/eu/faircode/email/MessageHelper.java4966 !org.apache.poi.hsmf.datatypes.MAPIProperty.BODY_HTML.equals(attr.getProperty()))CODE
CRITICALapp/src/main/java/eu/faircode/email/MessageHelper.java5329 at com.sun.mail.util.ASCIIUtility.getBytes(ASCIIUtility:279)CODE
CRITICAL…p/src/main/java/eu/faircode/email/EditTextCompose.java833 // at com.android.internal.inputmethod.EditableInputConnection.commitText(EditableInputConnectionCOMMENT
CRITICAL…/src/main/java/eu/faircode/email/EncryptionHelper.java34 at org.apache.harmony.security.utils.JarUtils.verifySignature(JarUtils.java:223)CODE
CRITICALapp/src/main/java/eu/faircode/email/FragmentOAuth.java440 at net.openid.appauth.browser.CustomTabManager.bind(SourceFile:27)CODE
CRITICALapp/src/main/java/eu/faircode/email/EditTextPlain.java88 at com.android.internal.widget.EditableInputConnection.commitText(EditableInputConnection.jaCODE
CRITICALapp/src/main/java/eu/faircode/email/EditTextPlain.java91 at com.android.internal.view.IInputConnectionWrapper.executeMessage(IInputConnectionWrapper.CODE
CRITICALapp/src/main/java/eu/faircode/email/EditTextPlain.java113 at com.android.internal.view.IInputConnectionWrapper.executeMessage(IInputConnectionWrapper.jaCODE
CRITICALapp/src/main/java/eu/faircode/email/ActivityMain.java424 java.lang.NullPointerException: Attempt to invoke virtual method 'int com.android.seCODE
CRITICAL⚡app/src/main/java/eu/faircode/email/ActivityMain.java439 at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:858)CODE
CRITICAL⚡app/src/main/java/eu/faircode/email/ActivityMain.java444 at com.android.server.am.TaskChangeNotificationController.forAllLocalListeners(TCODE
CRITICAL⚡app/src/main/java/eu/faircode/email/ActivityMain.java445 at com.android.server.am.TaskChangeNotificationController.notifyTaskStackChangedCODE
CRITICALapp/src/main/java/eu/faircode/email/Helper.java1371 E AndroidRuntime: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:971)CODE
CRITICAL⚡app/src/main/java/eu/faircode/email/Helper.java2783 at com.android.internal.view.menu.MenuBuilder.dispatchMenuItemSelected(MenuBCODE
CRITICAL⚡app/src/main/java/eu/faircode/email/Helper.java2784 at com.android.internal.view.menu.MenuItemImpl.invoke(MenuItemImpl.java:157)CODE
CRITICAL⚡app/src/main/java/eu/faircode/email/Helper.java2785 at com.android.internal.view.menu.MenuBuilder.performItemAction(MenuBuilder.CODE
CRITICAL⚡app/src/main/java/eu/faircode/email/Helper.java2786 at com.android.internal.view.menu.MenuBuilder.performItemAction(MenuBuilder.CODE
CRITICALapp/src/main/java/eu/faircode/email/Helper.java3370 at androidx.core.hardware.fingerprint.FingerprintManagerCompat.isHardwareDetected(SourceFile:3)CODE
CRITICALapp/src/main/java/eu/faircode/email/Helper.java3627 at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:941)CODE
CRITICAL…rc/main/java/eu/faircode/email/ServiceSynchronize.java1115 at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:858)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java1986 at com.sun.mail.imap.IMAPFolder.open(SourceFile:61)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java1987 at com.sun.mail.imap.IMAPFolder.open(SourceFile:1)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java1993 at com.sun.mail.iap.Protocol.handleResult(SourceFile:8)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java1994 at com.sun.mail.imap.protocol.IMAPProtocol.select(SourceFile:19)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java1995 at com.sun.mail.imap.IMAPFolder.open(SourceFile:16)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2004 at com.sun.mail.imap.IMAPFolder.open(SourceFile:61)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2005 at com.sun.mail.imap.IMAPFolder.open(SourceFile:1)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2016 at com.sun.mail.iap.Protocol.handleResult(SourceFile:8)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2017 at com.sun.mail.imap.protocol.IMAPProtocol.select(SourceFile:19)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2018 at com.sun.mail.imap.IMAPFolder.open(SourceFile:16)CODE
CRITICAL…rc/main/java/eu/faircode/email/ServiceSynchronize.java2117 at com.sun.mail.imap.IMAPFolder.handleIdle(SourceFile:252)CODE
CRITICAL…rc/main/java/eu/faircode/email/ServiceSynchronize.java2118 at com.sun.mail.imap.IMAPFolder.idle(SourceFile:7)CODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2383 at com.sun.mail.imap.IMAPFolder.open(SourceFCODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2384 at com.sun.mail.imap.IMAPFolder.open(SourceFCODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2393 at com.sun.mail.iap.Protocol.handleResult(SoCODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2394 at com.sun.mail.imap.protocol.IMAPProtocol.sCODE
CRITICAL⚡…rc/main/java/eu/faircode/email/ServiceSynchronize.java2395 at com.sun.mail.imap.IMAPFolder.open(SourceFCODE
CRITICAL⚡app/src/main/java/eu/faircode/email/StyleHelper.java1933 at androidx.core.content.res.ResourcesCompat.loadFont(SourceFile:17)CODE
CRITICAL⚡app/src/main/java/eu/faircode/email/StyleHelper.java1934 at androidx.core.content.res.ResourcesCompat.loadFont(SourceFile:3)CODE
CRITICAL⚡app/src/main/java/eu/faircode/email/StyleHelper.java1935 at androidx.core.content.res.ResourcesCompat.getFont(SourceFile:2)CODE
CRITICAL…p/src/main/java/eu/faircode/email/FixedScrollView.java94 at com.android.internal.policy.DecorView.onLayout(DecorView.java:889)CODE
CRITICALapp/src/main/java/eu/faircode/email/Core.java2837 06-21 10:02:38.035 9927 10024 E fairemail: at com.sun.mail.imap.IMAPStore.newIMAPFolder(SourceCODE
CRITICALapp/src/main/java/eu/faircode/email/Core.java2838 06-21 10:02:38.035 9927 10024 E fairemail: at com.sun.mail.imap.DefaultFolder.listSubscribed(SCODE
CRITICALapp/src/main/java/eu/faircode/email/Core.java3816 at com.sun.mail.pop3.POP3Message.loadHeaders(SourceFile:15)CODE
110 more matches not shown…
Over-Commented Block153 hits · 152 pts
SeverityFileLineSnippetContext
LOWapp/src/extra/java/eu/faircode/email/Bimi.java241 // https://datatracker.ietf.org/doc/html/rfc3709#page-6COMMENT
LOWapp/src/main/java/androidx/emoji2/text/EmojiCompat.java561 @SuppressWarnings("GuardedBy") // same rationale as double-check lockCOMMENT
LOW…/androidx/recyclerview/selection/SelectionTracker.java781 ResetManager<K> resetMgr = new ResetManager<>();COMMENT
LOWapp/src/main/java/eu/faircode/email/MessageHelper.java381 // FlagsCOMMENT
LOWapp/src/main/java/eu/faircode/email/MessageHelper.java3221 // Stamp = From-domain By-domain Opt-info ";" FWS date-timeCOMMENT
LOW…/main/java/eu/faircode/email/AlarmManagerCompatEx.java41 try {COMMENT
LOW…p/src/main/java/eu/faircode/email/EditTextCompose.java821COMMENT
LOWapp/src/main/java/eu/faircode/email/EmailProvider.java781 Log.i("Name=" + display);COMMENT
LOWapp/src/main/java/eu/faircode/email/Core.java641 // com.sun.mail.iap.BadCommandException: BAD [TOOBIG] Message too largeCOMMENT
LOWapp/src/main/java/eu/faircode/email/Core.java661 // Fetch: BAD Error in IMAP command FETCH: Invalid messageset (n.nnn + n .nnn secs).COMMENT
LOWapp/src/main/java/eu/faircode/email/Core.java681 // Move: NO mailbox selected READ-ONLYCOMMENT
LOWapp/src/main/java/eu/faircode/email/Core.java701 // Add: NO [OVERQUOTA] Quota exceeded (mailbox for user is full) (n.nnn + n.nnn secs).COMMENT
LOW…/src/main/java/eu/faircode/email/ConnectionHelper.java761COMMENT
LOWapp/src/main/java/eu/faircode/email/Log.java381 }COMMENT
LOWapp/src/main/java/eu/faircode/email/Log.java401 // at android.os.BaseBundle.initializeFromParcelLocked(BaseBundle.java:273)COMMENT
LOWapp/src/main/java/eu/faircode/email/Log.java1601COMMENT
LOWapp/src/main/java/eu/faircode/email/EmailService.java181 // org.bouncycastle.jsse.client.dh.minimumPrimeBits: Integer property, default 2048,COMMENT
LOWapp/src/main/java/eu/faircode/email/ApplicationEx.java341 WorkerSync.init(this);COMMENT
LOW…c/main/java/eu/faircode/email/FragmentDialogPrint.java481 PrintDocumentAdapter adapter = printWebView.createPrintDocumentAdapter(jobName);COMMENT
LOWapp/src/main/jni/cld_3/protos/task_spec.pb.h1// Generated by the protocol buffer compiler. DO NOT EDIT!COMMENT
LOWapp/src/main/jni/cld_3/protos/task_spec.pb.h21COMMENT
LOWapp/src/main/jni/cld_3/protos/sentence.pb.h1// Generated by the protocol buffer compiler. DO NOT EDIT!COMMENT
LOWapp/src/main/jni/cld_3/protos/sentence.pb.h21COMMENT
LOWapp/src/main/jni/cld_3/protos/feature_extractor.pb.h1// Generated by the protocol buffer compiler. DO NOT EDIT!COMMENT
LOWapp/src/main/jni/cld_3/protos/feature_extractor.pb.h21COMMENT
LOWapp/src/main/jni/cld_3/src/feature_types.h21#include <algorithm>COMMENT
LOWapp/src/main/jni/cld_3/src/feature_types.h61COMMENT
LOWapp/src/main/jni/cld_3/src/feature_types.h121};COMMENT
LOW…/src/main/jni/cld_3/src/language_identifier_features.h21#include "feature_extractor.h"COMMENT
LOW…/src/main/jni/cld_3/src/language_identifier_features.h41 FeatureValue GetDomainSize() const override;COMMENT
LOW…/src/main/jni/cld_3/src/language_identifier_features.h81 // in the input). Otherwise, weighs each unique ngram by (ngram count) /COMMENT
LOWapp/src/main/jni/cld_3/src/casts.h21#ifndef CASTS_H_COMMENT
LOWapp/src/main/jni/cld_3/src/casts.h41// int i = * reinterpret_cast<int*>(&f); // WRONGCOMMENT
LOWapp/src/main/jni/cld_3/src/casts.h61//COMMENT
LOWapp/src/main/jni/cld_3/src/unicodetext.h1// Copyright (C) 2006 Google Inc.COMMENT
LOWapp/src/main/jni/cld_3/src/unicodetext.h21#include <utility>COMMENT
LOWapp/src/main/jni/cld_3/src/unicodetext.h41// 0x10FFFF], but UnicodeText has the additional restriction that itCOMMENT
LOWapp/src/main/jni/cld_3/src/fml_parser.h21//COMMENT
LOWapp/src/main/jni/cld_3/src/registry.h21//COMMENT
LOWapp/src/main/jni/cld_3/src/registry.h41//COMMENT
LOWapp/src/main/jni/cld_3/src/workspace.h21#define WORKSPACE_H_COMMENT
LOWapp/src/main/jni/cld_3/src/float16.h21#include "base.h"COMMENT
LOWapp/src/main/jni/cld_3/src/feature_extractor.h21// A feature extractor consists of a hierarchy of feature functions. EachCOMMENT
LOWapp/src/main/jni/cld_3/src/feature_extractor.h41#include <string>COMMENT
LOWapp/src/main/jni/cld_3/src/feature_extractor.h121// The generic feature extractor is the type-independent part of a featureCOMMENT
LOWapp/src/main/jni/cld_3/src/feature_extractor.h201COMMENT
LOWapp/src/main/jni/cld_3/src/feature_extractor.h321// OBJ: The "object" from which features are extracted; e.g., a sentence. ThisCOMMENT
LOWapp/src/main/jni/cld_3/src/feature_extractor.h381// are of type NES, which may be different from the type of the parent function.COMMENT
LOW…p/src/main/jni/cld_3/src/embedding_feature_extractor.h21#include <vector>COMMENT
LOWapp/src/main/jni/cld_3/src/nnet_language_identifier.h21#include "base.h"COMMENT
LOWapp/src/main/jni/cld_3/src/nnet_language_identifier.h81 // bytes and max_num_bytes_. If N is less than min_num_bytes_ long, then thisCOMMENT
LOWapp/src/main/jni/cld_3/src/nnet_language_identifier.h161 ContinuousBagOfNgramsFunction ngram_function_;COMMENT
LOWapp/src/main/jni/cld_3/src/relevant_script_feature.h21#include "sentence_features.h"COMMENT
LOWapp/src/main/jni/cld_3/src/embedding_network_params.h141 // are treated as repeated fields with 0 or 1 instances. As such, we haveCOMMENT
LOWapp/src/main/jni/cld_3/src/embedding_network.h21#include "embedding_network_params.h"COMMENT
LOWapp/src/main/jni/cld_3/src/base.h41#define CLD3_DISALLOW_COPY_AND_ASSIGN(TypeName) \COMMENT
LOWapp/src/main/jni/cld_3/src/base.h81 (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ >= 1))COMMENT
LOWapp/src/main/jni/cld_3/src/script_span/stringpiece.h1// Copyright 2013 Google Inc. All Rights Reserved.COMMENT
LOWapp/src/main/jni/cld_3/src/script_span/port.h1// Copyright 2013 Google Inc. All Rights Reserved.COMMENT
LOWapp/src/main/jni/cld_3/src/script_span/port.h21COMMENT
93 more matches not shown…
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUM…dx/recyclerview/selection/DefaultSelectionTracker.java363 // representation of it. But there are some nuanced areas cases whereCOMMENT
MEDIUM…idx/recyclerview/selection/GestureSelectionHelper.java152 // Essentially, since this means all gesture movement is over, reset everything and applyCOMMENT
AI Response Leakage1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHFAQ.md1505If you can't solve the problem, [please contact me](#get-support), and I'll explain how to send the debug info for a proCODE
Fake / Example Data2 hits · 2 pts
SeverityFileLineSnippetContext
LOWapp/src/main/res/layout/include_message_addresses.xml364 android:text="user@example.org"CODE
LOWdecrypt/purify.min.js2!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&defineCODE
Hyper-Verbose Identifiers2 hits · 2 pts
SeverityFileLineSnippetContext
LOWapp/src/main/java/javax/mail/internet/MimeBodyPart.java1690 static class MimePartDataHandler extends DataHandler {CODE
LOWapp/src/main/java/javax/activation/DataHandler.java69public class DataHandler /*implements Transferable*/ {CODE
Slop Phrases1 hit · 1 pts
SeverityFileLineSnippetContext
LOWapp/src/main/java/javax/mail/package.html67Don't forget to see theCODE