AI Slop Code Risk Monitor

WalletWasabi/WalletWasabi

SlopCodeMonitor badge for WalletWasabi/WalletWasabi Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Open-source, non-custodial, privacy preserving Bitcoin wallet for Windows, Linux, and Mac.

2.0 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for WalletWasabi/WalletWasabi, a C# project with 2,636 GitHub stars. SynthScan examined 141,525 lines of code across 1407 source files, recording 154 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.0
Adjusted Signal
2.0
Raw Pattern Score
100%
Time Factor
2026-10-30
Last Push
2.6K
Stars
C#
Language
141.5K
Lines of Code
1.4K
Files
154
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 104 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 2 finding(s).

Agent Over-Engineering Ratio 5.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 51 finding(s).

PR Review Velocity Impact 9.0/100 · LOW

Which changes need focused human review? 154 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 56LOW 98

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 154 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators48 hits · 144 pts
SeverityFileLineSnippetContext
MEDIUMContrib/BundledApps/upgrade-tor.sh15# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh17# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh76# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh78# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh92# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh94# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh117# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh119# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh135# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh137# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh155# ─── Download ────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh197# ─── Extract browser archives ────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh231# ─── Extract only Tor folder ─────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh259# ─── Replace binaries in repository ──────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh274# ─── Replace GeoIP files ─────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-tor.sh289# ─── Make executables +x (git friendly) ──────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh15# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh17# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh74# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh76# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh90# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh92# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh115# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh117# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh149# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh151# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh167# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh169# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh187# ─── Download ────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh215# ─── Extract Bitcoin Core archives ────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh250# ─── Replace binaries in repository ─────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-bitcoin.sh273# ─── Make executables +x (git friendly) ──────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh15# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh17# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh75# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh77# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh94# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh96# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh119# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh121# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh150# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh152# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh166# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh168# ──────────────────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh186# ─── Download ────────────────────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh221# ─── Extract only HWI archives ────────────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh265# ─── Replace binaries in repository ──────────────────────────────────────────COMMENT
MEDIUMContrib/BundledApps/upgrade-hwi.sh280# ─── Make executables +x (git friendly) ──────────────────────────────────────COMMENT
Over-Commented Block84 hits · 84 pts
SeverityFileLineSnippetContext
LOW…nitTests/Fluent.Generators/AutoNotifyGeneratorTests.cs1//using Microsoft.CodeAnalysis;COMMENT
LOW…nitTests/Fluent.Generators/AutoNotifyGeneratorTests.cs21//namespace WalletWasabi.Fluent.ViewModelsCOMMENT
LOW…nitTests/Fluent.Generators/AutoNotifyGeneratorTests.cs41// Assert.True(diagnostics.IsEmpty);COMMENT
LOW…nitTests/Fluent.Generators/AutoNotifyGeneratorTests.cs61// public partial class TestViewModel2 : ReactiveUI.ReactiveObjectCOMMENT
LOW…nitTests/Fluent.Generators/AutoNotifyGeneratorTests.cs81// }COMMENT
LOW…nitTests/Fluent.Generators/AutoNotifyGeneratorTests.cs101// CSharpCompilationOptions options = new(OutputKind.ConsoleApplication);COMMENT
LOW…ts/UnitTests/Transactions/TransactionProcessorTests.cs681 // --tx0---> (A) --+COMMENT
LOWWalletWasabi.Tests/AcceptanceTests/HwiKatas.cs381 // displayaddress request(derivation path): approveCOMMENT
LOWWalletWasabi.Tests/AcceptanceTests/HwiKatas.cs461 // Connect and initialize your Nano X with the following seed phrase:COMMENT
LOWWalletWasabi.Tests/AcceptanceTests/HwiKatas.cs541 [Fact]COMMENT
LOWWalletWasabi.Tests/AcceptanceTests/HwiKatas.cs621 }COMMENT
LOWContrib/release.sh1#!/usr/bin/env bashCOMMENT
LOWContrib/BundledApps/upgrade-tor.sh1#!/usr/bin/env bashCOMMENT
LOWContrib/BundledApps/upgrade-bitcoin.sh1#!/usr/bin/env bashCOMMENT
LOWContrib/BundledApps/upgrade-hwi.sh1#!/usr/bin/env bashCOMMENT
LOW.github/stale.yml41COMMENT
LOW.github/stale.yml61# exemptLabels:COMMENT
LOWWalletWasabi/Nito/Disposables/SingleDisposable.cs41 /// <summary>COMMENT
LOWWalletWasabi/Nito/Collections/Deque.cs141 }COMMENT
LOWWalletWasabi/Nito/Collections/Deque.cs161 DoInsert(index, item);COMMENT
LOWWalletWasabi/Nito/Collections/Deque.cs201COMMENT
LOWWalletWasabi/Nito/Collections/Deque.cs241 /// </exception>COMMENT
LOWWalletWasabi/Nito/Collections/Deque.cs301 /// Returns an enumerator that iterates through the collection.COMMENT
LOWWalletWasabi/Nito/Collections/Deque.cs401 #region GenericListHelpersCOMMENT
LOWWalletWasabi/Nito/AsyncEx/IAsyncWaitQueue.cs1using System.Threading;COMMENT
LOWWalletWasabi/Nito/AsyncEx/IAsyncWaitQueue.cs21 Task<T> Enqueue();COMMENT
LOWWalletWasabi/Nito/AsyncEx/AsyncLock.cs1using Nito.AsyncEx.Synchronous;COMMENT
LOWWalletWasabi/Nito/AsyncEx/AsyncLock.cs21/// <example>COMMENT
LOWWalletWasabi/Nito/AsyncEx/AsyncLock.cs41/// await Task.Delay(TimeSpan.FromSeconds(1));COMMENT
LOWWalletWasabi/Nito/AsyncEx/AsyncLock.cs61 /// Whether the lock is taken by a task.COMMENT
LOWWalletWasabi/Nito/AsyncEx/AwaitableDisposable.cs1using System.Runtime.CompilerServices;COMMENT
LOWWalletWasabi/Nito/AsyncEx/IdManager.cs1using System.Threading;COMMENT
LOWWalletWasabi/Bases/PeriodicRunner.cs21 /// Action successfully executed. Returns how long it took.COMMENT
LOWWalletWasabi/Extensions/RPCClientExtensions.cs181 // Example: imagine we have only 4 fee rate groups in the form (size, from, to)COMMENT
LOW…CodeNet/Encoding/DataEncodation/EightBitByteEncoder.cs1namespace Gma.QrCodeNet.Encoding.DataEncodation;COMMENT
LOW…i/Gma/QrCodeNet/Encoding/DataEncodation/EncoderBase.cs41 /// <returns>Number of bits in Character Count Indicator.</returns>COMMENT
LOW…ing/DataEncodation/InputRecognition/ModeEncodeCheck.cs1namespace Gma.QrCodeNet.Encoding.DataEncodation.InputRecognition;COMMENT
LOW…tWasabi/Gma/QrCodeNet/Encoding/Terminate/Terminator.cs1namespace Gma.QrCodeNet.Encoding.Terminate;COMMENT
LOW…QrCodeNet/Encoding/EncodingRegion/FormatInformation.cs1using Gma.QrCodeNet.Encoding.Masking;COMMENT
LOW…Gma/QrCodeNet/Encoding/EncodingRegion/BCHCalculator.cs1namespace Gma.QrCodeNet.Encoding.EncodingRegion;COMMENT
LOWWalletWasabi/BitcoinP2p/RequestTracker.cs21 /// Number of pages currently being fetched.COMMENT
LOW…lockchain/TransactionBuilding/BnB/SelectionStrategy.cs41COMMENT
LOW…ockchain/TransactionProcessing/TransactionProcessor.cs261 TransactionStore.AddOrUpdate(tx);COMMENT
LOWWalletWasabi/Hwi/Models/HwiCommands.cs1namespace WalletWasabi.Hwi.Models;COMMENT
LOWWalletWasabi/Hwi/Models/HwiCommands.cs21 /// Return <code>{"xpub": &lt;xpub string&gt;"}</code>.COMMENT
LOWWalletWasabi/Hwi/Models/HwiCommands.cs41COMMENT
LOWWalletWasabi/Hwi/Models/HwiCommands.cs61 /// <item><c>end</c> - The index to end at.</item>COMMENT
LOWWalletWasabi/Hwi/Models/HwiCommands.cs81 /// </summary>COMMENT
LOWWalletWasabi/Hwi/Models/HwiCommands.cs101 /// </summary>COMMENT
LOWWalletWasabi/Hwi/Models/HwiCommands.cs121 /// </summary>COMMENT
LOWWalletWasabi/Tor/TorManager.cs41 /// <remarks>COMMENT
LOWWalletWasabi/Tor/Control/TorControlClient.cs61 /// <remarks>COMMENT
LOW…letWasabi/Tor/Control/PipeReaderLineReaderExtension.cs21 /// <remarks>COMMENT
LOWWalletWasabi/Tor/Control/Messages/TorControlReply.cs1using System.Collections.Generic;COMMENT
LOW…Wasabi/Tor/Control/Messages/StreamStatus/StreamInfo.cs21 IsoFields = Array.Empty<IsoFieldFlag>();COMMENT
LOW…Wasabi/Tor/Control/Messages/StreamStatus/StreamInfo.cs61 /// <summary>Field indicates the nym epoch that was active when a client initiated this stream.</summary>COMMENT
LOW…bi/Tor/Control/Messages/StreamStatus/ClientProtocol.cs1namespace WalletWasabi.Tor.Control.Messages.StreamStatus;COMMENT
LOW…sabi/Tor/Control/Messages/CircuitStatus/CircuitInfo.cs21 /// <summary>Unique circuit identifier.</summary>COMMENT
LOW…or/Control/Messages/Events/StatusEvents/StatusEvent.cs21COMMENT
LOW…or/Control/Messages/Events/StatusEvents/StatusEvent.cs41 public const string EventNameStatusGeneral = "STATUS_GENERAL";COMMENT
24 more matches not shown…
Self-Referential Comments5 hits · 15 pts
SeverityFileLineSnippetContext
MEDIUMContrib/release.sh285# Create the control file contentCOMMENT
MEDIUMContrib/release.sh312# Create the desktop file contentCOMMENT
MEDIUMContrib/release.sh455# Create the desktop fileCOMMENT
MEDIUMContrib/release.sh474# Create the AppRun scriptCOMMENT
MEDIUMContrib/release.sh743# Create the dmgCOMMENT
AI Slop Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUM…ts/UnitTests/Userfacing/Bip321/Bip321UriParserTests.cs155 // From BIP321: "Many QR codes utilize all-uppercase URIs, which should be handled fine"COMMENT
MEDIUM…abi/Client/CredentialDependencies/CredentialEdgeSet.cs72 // For reissuance we can utilize all out edges.COMMENT
MEDIUMWalletWasabi.Fluent/MathNet/CubicSpline.cs77 /// Akima splines are robust to outliers.COMMENT
Verbosity Indicators4 hits · 9 pts
SeverityFileLineSnippetContext
LOW⚡…i.Tests/UnitTests/WabiSabi/Client/PaymentBatchTests.cs410 // Step 1: Queue the paymentCOMMENT
LOW⚡…i.Tests/UnitTests/WabiSabi/Client/PaymentBatchTests.cs414 // Step 2: First coinjoin startsCOMMENT
LOW⚡…i.Tests/UnitTests/WabiSabi/Client/PaymentBatchTests.cs420 // Step 3: Transaction signed - payments move to signed state immediatelyCOMMENT
LOW⚡…i.Tests/UnitTests/WabiSabi/Client/PaymentBatchTests.cs425 // Step 4: Round ending is UNKNOWN - payments stay in signed stateCOMMENT
Structural Annotation Overuse4 hits · 9 pts
SeverityFileLineSnippetContext
LOW⚡…i.Tests/UnitTests/WabiSabi/Client/PaymentBatchTests.cs410 // Step 1: Queue the paymentCOMMENT
LOW⚡…i.Tests/UnitTests/WabiSabi/Client/PaymentBatchTests.cs414 // Step 2: First coinjoin startsCOMMENT
LOW⚡…i.Tests/UnitTests/WabiSabi/Client/PaymentBatchTests.cs420 // Step 3: Transaction signed - payments move to signed state immediatelyCOMMENT
LOW⚡…i.Tests/UnitTests/WabiSabi/Client/PaymentBatchTests.cs425 // Step 4: Round ending is UNKNOWN - payments stay in signed stateCOMMENT
Hyper-Verbose Identifiers3 hits · 3 pts
SeverityFileLineSnippetContext
LOW…Tests/UnitTests/WabiSabi/Client/CoinJoinClientTests.cs303file sealed class InputRegistrationFailingRequestHandler(RoundState roundState, Exception? registrationError) : IWabiSabCODE
LOW…Tests/UnitTests/WabiSabi/Client/CoinJoinClientTests.cs343file sealed class SigningCaptureRequestHandler(RoundState roundState) : IWabiSabiApiRequestHandlerCODE
LOWWalletWasabi/Rpc/JsonRpcRequestHandler.cs19public class JsonRpcRequestHandler<TService>CODE
Fake / Example Data2 hits · 2 pts
SeverityFileLineSnippetContext
LOWWalletWasabi.Tests/UnitTests/SafeFileTests.cs66 lines.Add("Lorem ipsum dolor sit amet, consectetur adipiscing elit.");CODE
LOWWalletWasabi.Tests/UnitTests/SafeFileTests.cs66 lines.Add("Lorem ipsum dolor sit amet, consectetur adipiscing elit.");CODE
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOWContrib/release.sh662 # Check if the file is a Mach-O executableCOMMENT