Home / TheBoredTeam / boring.notch
AI Slop Code RIsk Monitor

TheBoredTeam/boring.notch

TheBoringNotch: Not so boring notch That Rocks 🎸🎶

4.2 Low pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for TheBoredTeam/boring.notch, a Swift project with 11,000 GitHub stars. SynthScan examined 24,763 lines of code across 176 source files, recording 84 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 4.2 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

4.2
Adjusted Signal
4.2
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
11.0K
Stars
Swift
Language
24.8K
Lines of Code
176
Files
84
Pattern Hits
2026-10-12
Scan Date
0.01
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 12.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 57 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.9/100 · LOW

Are imports declared and package/API names verified? 10 finding(s).

Agent Over-Engineering Ratio 13.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 56 finding(s).

PR Review Velocity Impact 21.0/100 · LOW

Which changes need focused human review? 84 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 14LOW 69

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 84 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers39 hits · 42 pts
SeverityFileLineSnippetContext
LOW.github/scripts/tests/test_extract_build_number.py38 def test_extracts_the_app_target_build(self) -> None:STRING
LOW.github/scripts/tests/test_extract_build_number.py44 def test_rejects_bad_project_state(self) -> None:STRING
LOW.github/scripts/tests/test_stamp_version.py25 def test_stamps_all_project_versions_and_build_numbers(self) -> None:CODE
LOW.github/scripts/tests/test_stamp_version.py51 def test_can_leave_marketing_version_unchanged_for_nightly(self) -> None:CODE
LOW.github/scripts/tests/test_stamp_version.py68 def test_stamps_update_channel_in_info_plist(self) -> None:CODE
LOW.github/scripts/tests/test_stamp_version.py79 def test_rejects_invalid_values(self) -> None:CODE
LOW.github/scripts/tests/test_stamp_version.py85 def test_build_number_validation(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py34 def test_nightly_uses_the_fixed_rolling_tag_and_asset(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py40 def test_nightly_uses_the_rolling_release_title(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py44 def test_nightly_appcast_targets_the_fixed_release_url(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py66 def test_nightly_uploads_the_fixed_asset_with_clobber(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py69 def test_nightly_publishes_a_single_rolling_release(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py77 def test_nightly_moves_the_tag_instead_of_creating_unique_tags(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py83 def test_nightly_commits_go_through_the_signed_git_database_api(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py114 def test_nightly_ref_updates_are_verified_and_non_force_for_branches(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py121 def test_nightly_appcast_commit_rebases_onto_the_current_dev_head(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py131 def test_nightly_generates_from_a_single_clean_appcast_input(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py140 def test_generate_appcast_comes_from_the_official_release_tarball(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py259 def test_nightly_gates_manual_runs_with_the_shared_admin_action(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py269 def test_nightly_does_not_delete_any_releases(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py275 def test_nightly_release_notes_carry_a_caution_warning(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py284 def test_nightly_embedded_notes_do_not_leak_the_commit_message(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py294 def test_nightly_configures_a_dedicated_dev_channel(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py301 def test_nightly_keeps_sparkle_channel_and_embedded_notes_and_key(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py306 def test_immutable_release_checks_are_absent_from_nightly(self) -> None:CODE
LOW⚡.github/scripts/tests/test_workflow_smoke.py310 def test_built_product_is_named_boring_notch(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py55 def test_nightly_attests_the_final_dmg_with_a_pinned_action(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py94 def test_nightly_signed_commits_use_the_trees_then_commits_flow(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py157 def test_nightly_builds_the_live_branch_head(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py171 def test_nightly_build_number_is_derived_not_reserved(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py204 def test_stable_and_beta_derive_build_numbers_like_nightly(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py240 def test_build_number_uses_live_main_beta_and_cannot_reuse_its_build(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py349 def test_stable_and_beta_workflows_are_unchanged(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py364 def test_release_never_probes_releases_by_tag_for_draft_state(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py380 def test_release_resume_reads_the_draft_target_commitish(self) -> None:CODE
LOW.github/scripts/tests/test_workflow_smoke.py388 def test_release_resume_notes_come_from_the_draft_release(self) -> None:CODE
LOW.github/scripts/tests/test_merge_appcast_channel.py69 def test_preserves_stable_items_and_prepends_generated_beta(self) -> None:STRING
LOW.github/scripts/tests/test_merge_appcast_channel.py86 def test_replaces_existing_channel_items(self) -> None:STRING
LOW.github/scripts/tests/test_merge_appcast_channel.py100 def test_fails_when_generated_appcast_has_no_requested_channel_item(self) -> None:STRING
Excessive Try-Catch Wrapping16 hits · 24 pts
SeverityFileLineSnippetContext
MEDIUMboringNotch/MediaControllers/NowPlayingController.swift370 print("Error processing JSON stream: \(error)")STRING
MEDIUMboringNotch/MediaControllers/NowPlayingController.swift423 print("Error closing pipe handler: \(error)")STRING
MEDIUMboringNotch/managers/MusicManager.swift663 print("Error: appBundleIdentifier is nil")STRING
MEDIUMboringNotch/extensions/NSItemProvider+LoadHelpers.swift35 print("Error loading data for type \(UTType.data.identifier): \(error.localizedDescription)")CODE
MEDIUMboringNotch/extensions/NSItemProvider+LoadHelpers.swift64 print("Error: \(error.localizedDescription)")CODE
MEDIUM…nents/Shelf/Services/TemporaryFileStorageService.swift54 print("Error: \(error.localizedDescription)")CODE
MEDIUM…nents/Shelf/Services/TemporaryFileStorageService.swift75 print("Error: \(error)")CODE
MEDIUM…nents/Shelf/Services/TemporaryFileStorageService.swift94 print("Error: \(error)")CODE
MEDIUM…nents/Shelf/Services/TemporaryFileStorageService.swift114 print("Error: \(error)")CODE
LOW.github/scripts/merge_appcast_channel.py76 except Exception as error:CODE
MEDIUM.github/scripts/merge_appcast_channel.py77 print(f"Error merging {channel_name!r} appcast item: {error}", file=sys.stderr)CODE
LOW.github/scripts/remove_beta.py46 except Exception as e:CODE
MEDIUM.github/scripts/remove_beta.py47 print(f'Error processing appcast: {e}')CODE
LOW.github/scripts/stamp_version.py97 except Exception as error:CODE
LOW.github/scripts/extract_build_number.py72 except Exception as error:CODE
LOW.github/scripts/extract_version.py45 except Exception:CODE
Over-Commented Block14 hits · 14 pts
SeverityFileLineSnippetContext
LOWboringNotch/components/Settings/SettingsView.swift381 .navigationTitle("Battery")COMMENT
LOWboringNotch/components/Settings/SettingsView.swift401// Text("Progress bar")COMMENT
LOWboringNotch/components/Settings/SettingsView.swift421// Section {COMMENT
LOWboringNotch/components/Settings/SettingsView.swift441// .foregroundStyle(.secondary)COMMENT
LOWboringNotch/components/Settings/SettingsView.swift1021//struct Extensions: View {COMMENT
LOWboringNotch/components/Settings/SettingsView.swift1041// .foregroundColor(COMMENT
LOWboringNotch/components/Settings/SettingsView.swift1061// Menu(COMMENT
LOWboringNotch/components/Settings/SettingsView.swift1081// Button("Disable") {COMMENT
LOWboringNotch/components/Settings/SettingsView.swift1101// .controlSize(.regular)COMMENT
LOWboringNotch/components/Settings/SettingsView.swift1121// effectTrigger.toggle()COMMENT
LOWboringNotch/components/Settings/SettingsView.swift1141// }COMMENT
LOWboringNotch/private/CGSSpace.swift1//COMMENT
LOW.github/workflows/nightly.yml61 set -euo pipefailCOMMENT
LOW.github/workflows/codeql.yml1# For most projects, this workflow file will not need changing; you simply needCOMMENT
Unused Imports10 hits · 10 pts
SeverityFileLineSnippetContext
LOW.github/scripts/merge_appcast_channel.py3CODE
LOW.github/scripts/stamp_version.py3CODE
LOW.github/scripts/extract_build_number.py3CODE
LOW.github/scripts/extract_version.py3CODE
LOW.github/scripts/extract_version.py5CODE
LOW.github/scripts/extract_version.py8CODE
LOW.github/scripts/tests/test_extract_build_number.py4CODE
LOW.github/scripts/tests/test_stamp_version.py3CODE
LOW.github/scripts/tests/test_workflow_smoke.py10CODE
LOW.github/scripts/tests/test_merge_appcast_channel.py3CODE
Self-Referential Comments2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMmediaremote-adapter/mediaremote-adapter.pl3# This file is licensed under the BSD 3-Clause License.COMMENT
MEDIUM.github/workflows/nightly.yml317 # Create the appcast commit through the Git Database API withoutCOMMENT
Empty Error Handlers1 hit · 5 pts
SeverityFileLineSnippetContext
HIGH.github/scripts/extract_version.py45except Exception:CODE
Slop Phrases1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/codeql.yml58 # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize howCOMMENT
Deep Nesting1 hit · 1 pts
SeverityFileLineSnippetContext
LOW.github/scripts/remove_beta.py13CODE