#1 Open Source Unity Networking Library
This report summarizes scanner evidence for MirrorNetworking/Mirror, a C# project with 6,383 GitHub stars. SynthScan examined 120,421 lines of code across 1009 source files, recording 412 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 4.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 379 finding(s).
Are imports declared and package/API names verified? 5 finding(s).
Are wrappers, guards, and repeated structures necessary? 29 finding(s).
Which changes need focused human review? 412 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 412 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/RunUnityTests.yml | 21 | COMMENT | |
| LOW | …__Network Authenticator-NewNetworkAuthenticator.cs.txt | 21 | COMMENT | |
| LOW | …7-Mirror__Network Transform-NewNetworkTransform.cs.txt | 101 | /// Called by both CmdTeleport and RpcTeleport on server and clients, respectively. | COMMENT |
| LOW | …ror__Network Room Manager-NewNetworkRoomManager.cs.txt | 21 | // Overrides the base singleton so we don't | COMMENT |
| LOW | …ror__Network Room Manager-NewNetworkRoomManager.cs.txt | 41 | COMMENT | |
| LOW | …ror__Network Room Manager-NewNetworkRoomManager.cs.txt | 61 | /// </summary> | COMMENT |
| LOW | …ror__Network Room Manager-NewNetworkRoomManager.cs.txt | 121 | /// This is called on the server when all the players in the room are ready. | COMMENT |
| LOW | …ror__Network Room Manager-NewNetworkRoomManager.cs.txt | 141 | /// </summary> | COMMENT |
| LOW | …irror__Network Room Player-NewNetworkRoomPlayer.cs.txt | 21 | /// <para>This could be triggered by NetworkServer.Listen() for objects in the scene, or by NetworkServer.Spawn() fo | COMMENT |
| LOW | …irror__Network Room Player-NewNetworkRoomPlayer.cs.txt | 41 | /// </summary> | COMMENT |
| LOW | …irror__Network Room Player-NewNetworkRoomPlayer.cs.txt | 61 | public override void OnStopAuthority() { } | COMMENT |
| LOW | …irror__Network Room Player-NewNetworkRoomPlayer.cs.txt | 81 | COMMENT | |
| LOW | …om Interest Management-CustomInterestManagement.cs.txt | 41 | newObservers.Add(conn); | COMMENT |
| LOW | …om Interest Management-CustomInterestManagement.cs.txt | 81 | void Update() | COMMENT |
| LOW | …nager With Actions-NewNetworkManagerWithActions.cs.txt | 161 | } | COMMENT |
| LOW | …nager With Actions-NewNetworkManagerWithActions.cs.txt | 221 | /// <summary> | COMMENT |
| LOW | …2-Mirror__Network Behaviour-NewNetworkBehaviour.cs.txt | 41 | COMMENT | |
| LOW | …2-Mirror__Network Behaviour-NewNetworkBehaviour.cs.txt | 61 | /// Called when the local player object has been set up. | COMMENT |
| LOW | …es/50-Mirror__Network Manager-NewNetworkManager.cs.txt | 81 | #region Scene Management | COMMENT |
| LOW | …es/50-Mirror__Network Manager-NewNetworkManager.cs.txt | 101 | /// Called on the server when a scene is completed loaded, when the scene load was initiated by the server with Serv | COMMENT |
| LOW | …es/50-Mirror__Network Manager-NewNetworkManager.cs.txt | 121 | base.OnClientSceneChanged(); | COMMENT |
| LOW | …es/50-Mirror__Network Manager-NewNetworkManager.cs.txt | 161 | { | COMMENT |
| LOW | …es/50-Mirror__Network Manager-NewNetworkManager.cs.txt | 201 | /// <summary> | COMMENT |
| LOW | …es/50-Mirror__Network Manager-NewNetworkManager.cs.txt | 221 | COMMENT | |
| LOW | …es/50-Mirror__Network Manager-NewNetworkManager.cs.txt | 241 | /// This is invoked when the client is started. | COMMENT |
| LOW | …6-Mirror__Network Discovery-NewNetworkDiscovery.cs.txt | 41 | COMMENT | |
| LOW | …6-Mirror__Network Discovery-NewNetworkDiscovery.cs.txt | 61 | /// such as the name of the host player | COMMENT |
| LOW | …6-Mirror__Network Discovery-NewNetworkDiscovery.cs.txt | 81 | /// <returns>An instance of ServerRequest with data to be broadcasted</returns> | COMMENT |
| LOW | Assets/Mirror/Core/NetworkClient.cs | 21 | public static partial class NetworkClient | COMMENT |
| LOW | Assets/Mirror/Core/NetworkClient.cs | 41 | COMMENT | |
| LOW | Assets/Mirror/Core/NetworkClient.cs | 341 | else | COMMENT |
| LOW | Assets/Mirror/Core/NetworkClient.cs | 421 | // then all batched messages should have been processed now. | COMMENT |
| LOW | Assets/Mirror/Core/NetworkClient.cs | 461 | // Raise the event before changing ConnectState | COMMENT |
| LOW | Assets/Mirror/Core/NetworkClient.cs | 1341 | COMMENT | |
| LOW | Assets/Mirror/Core/NetworkClient.cs | 1601 | if (isSpawnFinished) | COMMENT |
| LOW | Assets/Mirror/Core/NetworkClient.cs | 2021 | spawnableObjects.Clear(); | COMMENT |
| LOW | Assets/Mirror/Core/NetworkMessages.cs | 21 | COMMENT | |
| LOW | Assets/Mirror/Core/NetworkMessages.cs | 61 | // -> Every message in a batch has a varuint size header. | COMMENT |
| LOW | Assets/Mirror/Core/NetworkMessages.cs | 121 | // protect against DOS attacks if attackers try to send invalid | COMMENT |
| LOW | Assets/Mirror/Core/SyncObject.cs | 21 | /// <summary>Used internally to check if we are currently tracking changes.</summary> | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 41 | // tick rate is in Hz. | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 101 | COMMENT | |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 241 | { | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 581 | // both are stored in a single snapshot for interpolation. | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 921 | // processing. otherwise we might apply them to the old scene. | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 981 | catch (Exception e) | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 1061 | // transport errors will happen. logging a warning is enough. | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 1181 | // conn.Disconnect -> Transport.ServerDisconnect calls | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 1201 | // call OnDisconnected unless local player in host mod | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 1221 | // automatically spawned, so you do not need to call NetworkServer.Spawn | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 1441 | COMMENT | |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 1601 | }); | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 1621 | public static bool SpawnObjects() | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 2001 | { | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 2121 | bool hasNull = false; | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 2261 | // has this connection joined the world yet? | COMMENT |
| LOW | Assets/Mirror/Core/NetworkServer.cs | 2321 | // for example, host mode server doesn't set .targetFrameRate. | COMMENT |
| LOW | Assets/Mirror/Core/NetworkBehaviour.cs | 41 | [Tooltip("By default synced data is sent from the server to all Observers of the object.\nChange this to Owner t | COMMENT |
| LOW | Assets/Mirror/Core/NetworkBehaviour.cs | 81 | /// <summary>authority is true if we are allowed to modify this component's state. On server, it's true if SyncD | COMMENT |
| LOW | Assets/Mirror/Core/NetworkBehaviour.cs | 141 | // * run a delta compression algorithm | COMMENT |
| 310 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1468 | // ── RegisterHandler ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1502 | // ── SendToReady ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1539 | // ── SendToAll oversized ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1558 | // ── Transport error / exception events ─────────────────────────────────────── | COMMENT |
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1589 | // ── exceptionsDisconnect = false ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1608 | // ── Destroy ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1644 | // ── AddPlayerForConnection ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1692 | // ── RemovePlayerForConnection options ──────────────────────────────────────── | COMMENT |
| MEDIUM | …Mirror/Tests/Editor/NetworkServer/NetworkServerTest.cs | 1796 | // ── SendCommand from not-ready client ──────────────────────────────────────── | COMMENT |
| MEDIUM | …sts/Editor/NetworkClient/NetworkClientTests_OnSpawn.cs | 575 | // ── OnObjectSpawnStarted / OnObjectSpawnFinished ────────────────────── | COMMENT |
| MEDIUM | …/NetworkClient/NetworkClientTests_ReadyAndAddPlayer.cs | 95 | // ── InternalAddPlayer() ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/NetworkClient/NetworkClientTests_TimeInterpolation.cs | 27 | // ── InitTimeInterpolation (via ConnectHost / Initialize) ────────────── | COMMENT |
| MEDIUM | …/NetworkClient/NetworkClientTests_TimeInterpolation.cs | 61 | // ── Computed properties ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/NetworkClient/NetworkClientTests_TimeInterpolation.cs | 78 | // ── OnTimeSnapshot ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/NetworkClient/NetworkClientTests_TimeInterpolation.cs | 148 | // ── UpdateTimeInterpolation (via NetworkEarlyUpdate) ────────────────── | COMMENT |
| MEDIUM | …/NetworkClient/NetworkClientTests_TimeInterpolation.cs | 167 | // ── Disconnect resets interpolation state ──────────────────────────────────── | COMMENT |
| MEDIUM | …or/NetworkClient/NetworkClientTests_OnTransportData.cs | 66 | // ── Too-short message (1-byte segment, < IdSize = 2) ───────────────── | COMMENT |
| MEDIUM | …or/NetworkClient/NetworkClientTests_OnTransportData.cs | 97 | // ── Unknown message id (no handler registered for the type) ────────── | COMMENT |
| MEDIUM | …or/NetworkClient/NetworkClientTests_OnTransportData.cs | 140 | // ── isLoadingScene halts the processing loop ───────────────────────── | COMMENT |
| MEDIUM | …tor/NetworkClient/NetworkClientTests_DestroyObjects.cs | 16 | // ── OnObjectDestroy ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …tor/NetworkClient/NetworkClientTests_DestroyObjects.cs | 93 | // ── DestroyAllClientObjects ─────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/Editor/NetworkClient/NetworkClientTests_Shutdown.cs | 14 | // ── Bool state fields ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/Editor/NetworkClient/NetworkClientTests_Shutdown.cs | 49 | // ── Reference fields ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ts/Editor/NetworkClient/NetworkClientTests_Shutdown.cs | 66 | // ── Event delegates ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …r/NetworkClient/NetworkClientTests_TransportAndSend.cs | 16 | // ── Send() error paths ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …r/NetworkClient/NetworkClientTests_TransportAndSend.cs | 39 | // ── Disconnect() guard ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …r/NetworkClient/NetworkClientTests_TransportAndSend.cs | 66 | // ── OnTransportData null-connection guard ───────────────────────────────────── | COMMENT |
| MEDIUM | …r/NetworkClient/NetworkClientTests_TransportAndSend.cs | 79 | // ── Transport error / exception event forwarding ────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ports/Edgegap/EdgegapLobby/EdgegapLobbyKcpTransport.cs | 332 | // Absolutely make sure there's time for the network request to hit edgegap servers. | COMMENT |
| MEDIUM | …ports/Edgegap/EdgegapLobby/EdgegapLobbyKcpTransport.cs | 339 | // Absolutely make sure there's time for the network request to hit edgegap servers. | COMMENT |
| MEDIUM | Assets/Mirror/Transports/KCP/kcp2k/highlevel/KcpPeer.cs | 275 | // this is just faster and more robust. | COMMENT |
| MEDIUM | …amples/AdditiveScenes/Scripts/ShootingTankBehaviour.cs | 5 | // This script demonstrates the NetworkAnimator and how to leverage | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | Assets/Mirror/Examples/AdditiveLevels/Scripts/Portal.cs | 67 | // Note that I have created layers called Player(6) and Portal(7) and set them | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rror/Tests/Editor/SyncCollections/SyncListClassTest.cs | 24 | TestObject item1 = new TestObject { id = 1, text = "Lorem ipsum dolor sit, amet consectetur adipisicing elit | CODE |
| LOW | …rror/Tests/Editor/SyncCollections/SyncListClassTest.cs | 26 | TestObject item2 = new TestObject { id = 2, text = "Lorem ipsum dolor sit, amet consectetur adipisicing elit | CODE |
| LOW | …rror/Tests/Editor/SyncCollections/SyncListClassTest.cs | 51 | TestObject item1 = new TestObject { id = 1, text = "Lorem ipsum dolor sit, amet consectetur adipisicing elit | CODE |
| LOW | …rror/Tests/Editor/SyncCollections/SyncListClassTest.cs | 53 | TestObject item2 = new TestObject { id = 2, text = "Lorem ipsum dolor sit, amet consectetur adipisicing elit | CODE |
| LOW | Assets/Mirror/Hosting/Edgegap/Editor/EdgegapWindowV2.cs | 2417 | /// <param name="placeholder">Placeholder value to use.</param> | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .releaserc.yml | 72 | # Create a new release on GitHub | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Assets/Mirror/Hosting/Edgegap/Editor/EdgegapWindowV2.cs | 925 | //OnBuildContainerizeUploadSuccess(_linuxRequirementsResultLabel, "Requirements installed. Don't forget | COMMENT |
| LOW | Assets/Mirror/Hosting/Edgegap/Editor/EdgegapWindowV2.cs | 1921 | "Server deployed successfully. Don't forget to remove the deployment after testing.", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ror/Hosting/Edgegap/Editor/EdgegapServerDataManager.cs | 81 | public static class EdgegapServerDataManager | CODE |