Repository Analysis

apache/apisix

The Cloud-Native API Gateway and AI Gateway

4.6 Likely human-written View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of apache/apisix, a Lua project with 16,865 GitHub stars. SynthScan v2.0 examined 275,171 lines of code across 986 source files, recording 451 pattern matches distributed across 9 syntactic categories. The overall adjusted score of 4.6 places this repository in the Likely human-written band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

4.6
Adjusted Score
4.6
Raw Score
100%
Time Factor
2026-07-14
Last Push
16.9K
Stars
Lua
Language
275.2K
Lines of Code
986
Files
451
Pattern Hits
2026-07-14
Scan Date
0.21
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 204MEDIUM 12LOW 235

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 451 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Magic Placeholder Names204 hits · 1000 pts
SeverityFileLineSnippetContext
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md71export OPENAI_API_KEY=<your-api-key>CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md187 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md255 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md402 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md470 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md622 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md690 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md751 "Authorization": "Bearer <your-api-key>"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md791 Authorization: "Bearer <your-api-key>"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md841 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-request-rewrite.md910 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-prompt-guard.md183 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-prompt-guard.md243 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-prompt-guard.md480 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-prompt-guard.md542 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-prompt-template.md196 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-prompt-template.md261 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-prompt-template.md455 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-prompt-template.md526 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rag.md246 api_key: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rag.md250 api_key: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rag.md256 api-key: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rag.md310 api_key: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rag.md314 api_key: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rag.md321 api-key: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md286 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md294 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md349 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md357 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md565 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md574 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md639 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md648 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1152 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1160 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1219 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1227 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1569 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1578 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1634 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1643 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md1998 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2008 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2065 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2075 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2289 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2297 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2363 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2371 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2558 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2566 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2632 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-proxy-multi.md2640 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/datadog.md109 -e DD_API_KEY=<your-api-key> \CODE
HIGHdocs/zh/latest/plugins/ai-rate-limiting.md170 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rate-limiting.md228 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rate-limiting.md417 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rate-limiting.md425 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rate-limiting.md486 Authorization: "Bearer your-api-key"CODE
HIGHdocs/zh/latest/plugins/ai-rate-limiting.md494 Authorization: "Bearer your-api-key"CODE
144 more matches not shown…
Over-Commented Block223 hits · 223 pts
SeverityFileLineSnippetContext
LOW.asf.yaml1#COMMENT
LOWCODE_OF_CONDUCT.md1<!--COMMENT
LOWpowered-by.md1---COMMENT
LOWCHANGELOG.md1---COMMENT
LOWVision-and-Milestones.md1<!--COMMENT
LOWREADME.md1<!--COMMENT
LOWCODE_STYLE.md1---COMMENT
LOWCONTRIBUTING.md1<!--COMMENT
LOW.licenserc.yaml1#COMMENT
LOWTHREAT_MODEL.md1<!--COMMENT
LOW.markdownlint.yml1#COMMENT
LOWMAINTAIN.md1<!--COMMENT
LOWbenchmark/run.sh1#! /bin/bash -xCOMMENT
LOWdocker/compose/docker-compose-master.yaml1#COMMENT
LOWdocker/compose/apisix_conf/master/config.yaml1#COMMENT
LOWdocker/debian-dev/docker-entrypoint.sh1#!/usr/bin/env bashCOMMENT
LOWdocker/debian-dev/install-brotli.sh1#!/usr/bin/env bashCOMMENT
LOWautodocs/generate.sh1#!/usr/bin/env bashCOMMENT
LOWapisix/plugins/grpc-transcode/proto.lua181 // server that maps type URLs to message definitions as follows:COMMENT
LOWapisix/plugins/grpc-transcode/proto.lua201 // Must be a valid serialized protocol buffer of the above specified type.COMMENT
LOWci/linux-install-etcd-client.sh1#!/usr/bin/env bashCOMMENT
LOWci/linux-install-openresty.sh1#!/usr/bin/env bashCOMMENT
LOW…ux_apisix_current_luarocks_in_customed_nginx_runner.sh1#!/usr/bin/env bashCOMMENT
LOWci/common.sh1#COMMENT
LOWci/init-common-test-service.sh1#!/usr/bin/env bashCOMMENT
LOWci/free_disk_space.sh1#!/usr/bin/env bashCOMMENT
LOWci/init-last-test-service.sh1#!/usr/bin/env bashCOMMENT
LOWci/init-plugin-test-service.sh1#!/usr/bin/env bashCOMMENT
LOWci/prepare_filesystem_mcp.sh1#!/usr/bin/env bashCOMMENT
LOWci/linux_openresty_tongsuo_runner.sh1#!/usr/bin/env bashCOMMENT
LOWci/tars-ci.sh1#!/usr/bin/env bashCOMMENT
LOWci/backup-docker-images.sh1#!/usr/bin/env bashCOMMENT
LOWci/kubernetes-ci.sh1#!/usr/bin/env bashCOMMENT
LOWci/linux_openresty_runner.sh1#!/usr/bin/env bashCOMMENT
LOWci/linux_apisix_current_luarocks_runner.sh1#!/usr/bin/env bashCOMMENT
LOWci/linux_openresty_common_runner.sh1#!/usr/bin/env bashCOMMENT
LOWci/install-lua-rapidjson.sh1#!/usr/bin/env bashCOMMENT
LOWci/redhat-ci.sh1#!/usr/bin/env bashCOMMENT
LOWci/pod/docker-compose.common.yml1#COMMENT
LOWci/pod/docker-compose.first.yml1#COMMENT
LOWci/pod/docker-compose.plugin.yml1#COMMENT
LOWci/pod/docker-compose.last.yml1#COMMENT
LOWci/pod/nacos/healthcheck/nacos-server-healthcheck.sh1#!/usr/bin/env bashCOMMENT
LOWci/pod/nacos/healthcheck/nacos-service-healthcheck.sh1#!/usr/bin/env bashCOMMENT
LOWci/pod/openfunction/build-function-image.sh1#!/usr/bin/env bashCOMMENT
LOWci/pod/otelcol-contrib/config.yaml1#COMMENT
LOWci/pod/keycloak/kcadm_configure_cas.sh1#!/usr/bin/env bashCOMMENT
LOWci/pod/keycloak/kcadm_configure_saml.sh1#!/usr/bin/env bashCOMMENT
LOWci/pod/keycloak/kcadm_configure_basic.sh1#!/usr/bin/env bashCOMMENT
LOWci/pod/keycloak/kcadm_configure_university.sh1#!/usr/bin/env bashCOMMENT
LOWci/pod/vector/vector.toml1#COMMENT
LOWutils/check-test-code-style.sh1#!/usr/bin/env bashCOMMENT
LOWutils/gen-vote-contents.sh1#!/bin/shCOMMENT
LOWutils/check-version.sh1#!/bin/shCOMMENT
LOWutils/fix-zh-doc-segment.py1#!/usr/bin/env python3COMMENT
LOWutils/check-plugins-code.sh1#!/bin/bashCOMMENT
LOWutils/check-lua-code-style.sh1#!/bin/shCOMMENT
LOWutils/linux-install-luarocks.sh1#!/usr/bin/env bashCOMMENT
LOWutils/install-dependencies.sh1#!/usr/bin/env bashCOMMENT
LOWutils/check-category.py1#!/usr/bin/env pythonCOMMENT
163 more matches not shown…
Self-Referential Comments7 hits · 21 pts
SeverityFileLineSnippetContext
MEDIUMt/fuzzing/simple_http.py20# This file provides a fuzzing test with most common plugins via plain HTTP requestCOMMENT
MEDIUMt/fuzzing/http_upstream.py20# This file provides a fuzzing test with different upstreamsCOMMENT
MEDIUMt/cli/test_stream_port_range.sh417# Create a stream route targeting the inline upstreamCOMMENT
MEDIUMt/cli/test_standalone.sh148## Create a symlink to change the link count and as a result `st_ctime`COMMENT
MEDIUMt/cli/test_limit_conn_redis_ttl.sh50# Create a route with limit-conn and redis policyCOMMENT
MEDIUMt/cli/test_limit_req_redis_ttl.sh50# Create a route with limit-req and redis policyCOMMENT
MEDIUMt/cli/test_ci_only.sh20# This file is like other test_*.sh, but requires extra dependencies whichCOMMENT
Modern AI Meta-Vocabulary3 hits · 8 pts
SeverityFileLineSnippetContext
MEDIUMdocs/zh/latest/plugins/ai-rag.md140### 与 Azure 集成以获得 RAG 增强响应COMMENT
MEDIUMdocs/en/latest/plugins/ai-lakera-guard.md42The `ai-lakera-guard` Plugin integrates with the [Lakera Guard API (v2)](https://docs.lakera.ai/docs/api) to perform ML-CODE
MEDIUMdocs/en/latest/plugins/ai-rag.md140### Integrate with Azure for RAG-Enhanced ResponsesCOMMENT
Fake / Example Data6 hits · 6 pts
SeverityFileLineSnippetContext
LOWdocs/zh/latest/plugins/body-transformer.md871 "user_name": "John Doe",CODE
LOWdocs/zh/latest/plugins/body-transformer.md895 "name": "John Doe",CODE
LOWdocs/zh/latest/plugins/body-transformer.md917 "name": "John Doe",CODE
LOWdocs/en/latest/plugins/body-transformer.md871 "user_name": "John Doe",CODE
LOWdocs/en/latest/plugins/body-transformer.md895 "name": "John Doe",CODE
LOWdocs/en/latest/plugins/body-transformer.md917 "name": "John Doe",CODE
Hyper-Verbose Identifiers3 hits · 3 pts
SeverityFileLineSnippetContext
LOWci/check_changelog_prs.ts79function extractVersionsFromChangelog(): Version[] {CODE
LOWci/check_changelog_prs.ts123function shouldIgnoreCommitMessage(message: string): boolean {CODE
LOWt/fuzzing/public.py79def get_linear_regression_sloped(samples):CODE
Deep Nesting3 hits · 3 pts
SeverityFileLineSnippetContext
LOWutils/fix-zh-doc-segment.py39CODE
LOWutils/check-category.py31CODE
LOWt/cli/test_sse.py58CODE
Slop Phrases1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMconf/config.yaml28# To configure via environment variables, you can use `${{VAR}}` syntax. For instance:COMMENT
Excessive Try-Catch Wrapping1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMt/fuzzing/public.py48 print("Error in log: ", err)CODE