AI Slop Code Risk Monitor

acidanthera/OpenCorePkg

SlopCodeMonitor badge for acidanthera/OpenCorePkg Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

OpenCore bootloader

2.6 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for acidanthera/OpenCorePkg, a C project with 15,608 GitHub stars. SynthScan examined 415,926 lines of code across 1125 source files, recording 1129 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 2.6 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.6
Adjusted Signal
2.6
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
15.6K
Stars
C
Language
415.9K
Lines of Code
1.1K
Files
1.1K
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 11.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1115 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 3 finding(s).

Agent Over-Engineering Ratio 0.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 12 finding(s).

PR Review Velocity Impact 12.9/100 · LOW

Which changes need focused human review? 1129 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 2MEDIUM 6LOW 1121

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1129 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1090 hits · 1021 pts
SeverityFileLineSnippetContext
LOWStaging/EnableGop/EnableGop.c121 gDS->Hdr.CRC32 = 0;COMMENT
LOWStaging/AudioDxe/AudioDxe.h21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THECOMMENT
LOWStaging/AudioDxe/AudioDxe.h41#include <Library/UefiLib.h>COMMENT
LOWStaging/AudioDxe/HdaCodec/HdaCodecAudioIo.c641 continue;COMMENT
LOWStaging/AudioDxe/HdaCodec/HdaCodecAudioIo.c661 //COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.c1321 // Gather open mode.COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THECOMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h41//COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h61#define PCI_HDA_TCSEL_OFFSET 0x44COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h81//COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h101#define HDA_STREAM_BUF_SIZE_HALF (HDA_STREAM_BUF_SIZE / 2)COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h121} HDA_DMA_POS_ENTRY;COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h141 // TRUE once Index is valid. Required for tearing down streams safely if there isCOMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h161 //COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h181 //COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h221//COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h241 //COMMENT
LOWStaging/AudioDxe/HdaController/HdaController.h281// commented out, but worked somewhat) of setting RINTCNT to 0xFF, in order to makeCOMMENT
LOWStaging/OpenHfsPlus/fsw_efi_edk2_base.h41 */COMMENT
LOWStaging/OpenHfsPlus/fsw_efi_edk2_base.h61# include <Protocol/DiskIo.h>COMMENT
LOWStaging/OpenHfsPlus/fsw_base.h61#if FSW_DEBUG_LEVEL >= 1COMMENT
LOWStaging/OpenHfsPlus/fsw_efi_lib.c41//COMMENT
LOWStaging/OpenHfsPlus/fsw_core.h101#define fsw_u16_le_sip(var)COMMENT
LOWStaging/OpenHfsPlus/fsw_core.h121#define fsw_u32_be_sip(var)COMMENT
LOWStaging/OpenHfsPlus/fsw_core.h481 * Posix-style modes.COMMENT
LOWStaging/OpenHfsPlus/fsw_core.h501COMMENT
LOWStaging/OpenHfsPlus/fsw_core.h521#define S_ISREG(m) (((m) & 0170000) == 0100000) /* regular file */COMMENT
LOWStaging/OpenHfsPlus/fsw_efi_base.h61#define fsw_alloc(size, ptrptr) (((*(ptrptr) = AllocatePool(size)) == NULL) ? FSW_OUT_OF_MEMORY : FSW_SUCCESS)COMMENT
LOWStaging/OpenHfsPlus/fsw_hfsplus.h41#define kHFSPlusResourceFork 0xFF // resource fork typeCOMMENT
LOWInclude/Apple/AppleMacEfi/AppleMacEfiSpec.h21//COMMENT
LOWInclude/Apple/IndustryStandard/AppleProvisioning.h21// D1A26C1F-ABF5-4806-BB24-68D317E071D5COMMENT
LOWInclude/Apple/IndustryStandard/AppleIcon.h21///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h21//COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h41COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h301/// union. The strings are stored just after the load command structure andCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h321 UINT32 HeaderAddress; ///< library's header addressCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h341 ///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h361/// command constant. If the dynamic linker sees such a load command it itCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h381///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h401///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h421///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h441///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h461/// (all symbols are weak imported).COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h481/// local of code signatureCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h501/// compressed dyld informationCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h521/// compressed table of function start addressesCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h541/// Code signing DRs copied from linked dylibsCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h561/// build for Watch min OS versionCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h601//COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h621/// segment are protected.COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h641 ///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h661COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h681 /// section with only lazy symbol pointersCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h701 /// zero fill on demand section (that can be larger than 4 gigabytes)COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h721 //COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h741 ///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h761/// User setable attributesCOMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h781// than one attribute).COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h801///COMMENT
LOWInclude/Apple/IndustryStandard/AppleMachoImage.h821///COMMENT
1030 more matches not shown…
Deep Nesting14 hits · 14 pts
SeverityFileLineSnippetContext
LOWAppleModels/update_generated.py24CODE
LOWAppleModels/update_generated.py57CODE
LOWAppleModels/update_generated.py86CODE
LOWAppleModels/update_products.py98CODE
LOWAppleModels/update_products.py203CODE
LOWAppleModels/update_products.py232CODE
LOWUtilities/macrecovery/macrecovery.py194CODE
LOWUtilities/macrecovery/macrecovery.py267CODE
LOWUtilities/macrecovery/macrecovery.py418CODE
LOWDebug/Scripts/common_uefi.py15CODE
LOWDebug/Scripts/common_uefi.py62CODE
LOWDebug/Scripts/lldb_uefi.py363CODE
LOWDebug/Scripts/lldb_uefi.py473CODE
LOWDebug/Scripts/gdb_uefi.py127CODE
Empty Error Handlers2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHDebug/Scripts/common_uefi.py41except IndexError:CODE
HIGHDebug/Scripts/gdb_uefi.py141except gdb.MemoryError:CODE
Excessive Try-Catch Wrapping7 hits · 8 pts
SeverityFileLineSnippetContext
LOWAppleModels/update_products.py122 except Exception as e:CODE
LOWAppleModels/update_products.py184 except Exception as e:CODE
MEDIUMAppleModels/update_products.py98def load_products(path='Products.zjson'):CODE
LOWUtilities/MacEfiUnpack/MacEfiUnpack.py104 except Exception as e:CODE
LOWUtilities/macrecovery/macrecovery.py307 except Exception as err:CODE
LOWUtilities/macrecovery/macrecovery.py314 except Exception:CODE
LOWUtilities/macrecovery/macrecovery.py459 except Exception as e:CODE
Verbosity Indicators4 hits · 6 pts
SeverityFileLineSnippetContext
LOWPlatform/OpenVariableRuntimeDxe/Variable.c2180 // Step 1:COMMENT
LOWPlatform/OpenVariableRuntimeDxe/Variable.c2197 // Step 2:COMMENT
LOWPlatform/OpenVariableRuntimeDxe/Variable.c2215 // Step 3:COMMENT
LOWPlatform/OpenVariableRuntimeDxe/Variable.c2232 // Step 4:COMMENT
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMLibrary/OcConsoleLib/GopUtils.c241 // Definitely no need to set again if set in MTRR.COMMENT
MEDIUMApplication/BootKicker/BootKicker.c58 // firmware such as APTIO IV with less robust Stall implementations.COMMENT
Decorative Section Separators2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMDebug/Scripts/x86_64_target_definition.py11# ----------------------------------------------------------------------COMMENT
MEDIUMDebug/Scripts/x86_64_target_definition.py39# ----------------------------------------------------------------------COMMENT
TODO Padding2 hits · 3 pts
SeverityFileLineSnippetContext
LOWLibrary/OcAppleKernelLib/KernelReader.c258 // TODO: implement adler32 hash verification.COMMENT
LOWDebug/Scripts/gdb_uefi.py267 # TODO: implement .elf handling.COMMENT
Unused Imports3 hits · 3 pts
SeverityFileLineSnippetContext
LOWDebug/Scripts/lldb_uefi.py16CODE
LOWDebug/Scripts/x86_64_target_definition.py44CODE
LOWDebug/Scripts/gdb_uefi.py33CODE
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMDebug/Scripts/x86_64_target_definition.py28# This file implements the x86_64 registers for the darwin version ofCOMMENT
Slop Phrases1 hit · 1 pts
SeverityFileLineSnippetContext
LOWLibrary/OcPngLib/lodepng.c70lodepng source code. Don't forget to remove "static" if you copypaste themCODE
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippetContext
LOWDebug/Scripts/lldb_uefi.py91 def get_child_member_with_name(self, value, field_name):CODE