AI Slop Code Risk Monitor

ardatan/graphql-tools

SlopCodeMonitor badge for ardatan/graphql-tools Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

:wrench: Utility library for GraphQL to build, stitch and mock GraphQL schemas in the SDL-first approach

2.0 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for ardatan/graphql-tools, a TypeScript project with 5,434 GitHub stars. SynthScan examined 136,364 lines of code across 648 source files, recording 203 pattern matches distributed across 5 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.0
Adjusted Signal
2.0
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
5.4K
Stars
TypeScript
Language
136.4K
Lines of Code
648
Files
203
Pattern Hits
2026-10-31
Scan Date
0.02
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 189 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.5/100 · LOW

Are imports declared and package/API names verified? 14 finding(s).

Agent Over-Engineering Ratio 6.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 176 finding(s).

PR Review Velocity Impact 9.7/100 · LOW

Which changes need focused human review? 203 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 14MEDIUM 2LOW 187

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 203 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers176 hits · 182 pts
SeverityFileLineSnippetContext
LOWpackages/webpack-loader/src/index.ts25function isNamedExecutableDefinition(CODE
LOWpackages/webpack-loader/src/index.ts289async function collectImportedNamedDefinitions(CODE
LOWpackages/webpack-loader/src/index.ts319function collectImportedNamedDefinitionsSync(CODE
LOWpackages/load-files/src/matchFiles.ts202async function findDirectorySymlinkRoots(cwd: string, scanRoots: string[]): Promise<string[]> {CODE
LOWpackages/load-files/src/matchFiles.ts240function findDirectorySymlinkRootsSync(cwd: string, scanRoots: string[]): string[] {CODE
LOWpackages/optimize/tests/remove-empty-nodes.spec.ts106function normalizeAcrossGraphQLVersions(doc: DocumentNode) {CODE
LOW…/relay-compiler/lib/core/GraphQLDerivedFromMetadata.js19function getReaderSourceDefinitionName(node) {CODE
LOW…elay-compiler/lib/core/inferRootArgumentDefinitions.js41function inferRootArgumentDefinitions(context) {CODE
LOW…elay-compiler/lib/core/inferRootArgumentDefinitions.js158function transformFragmentArguments(context, transformed, fragment) {CODE
LOWpackages/relay-compiler/lib/core/IRPrinter.js324function printFragmentArgumentDefinitions(schema, argumentDefinitions) {CODE
LOW…s/relay-compiler/lib/core/getIdentifierForSelection.js24function getIdentifierForSelection(schema, node) {CODE
LOWpackages/relay-compiler/lib/core/ASTConvert.js40function convertASTDocumentsWithBase(schema, baseDocuments, documents, transform) {CODE
LOWpackages/relay-compiler/lib/core/SchemaUtils.js23function isExecutableDefinitionAST(ast) {CODE
LOWpackages/relay-compiler/lib/core/Schema.js213function hasConcreteTypeThatImplements(schema, type, interfaceType) {CODE
LOWpackages/relay-compiler/lib/core/Schema.js2062function parseInputArgumentDefinitions(schema, args) {CODE
LOWpackages/relay-compiler/lib/core/Schema.js2102function parseInputArgumentDefinitionsMap(schema, args) {CODE
LOW…lay-compiler/lib/core/getIdentifierForArgumentValue.js19function getIdentifierForArgumentValue(value) {CODE
LOWpackages/relay-compiler/lib/core/CompilerError.js46function createNonRecoverableUserError(message, locations, nodes) {CODE
LOWpackages/relay-compiler/lib/core/CompilerError.js208function highlightSourceAtLocation(source, location) {CODE
LOWpackages/relay-compiler/lib/core/getFieldDefinition.js80function getFieldDefinitionLegacyImpl(schema, type, fieldName, fieldAST) {CODE
LOW…lay-compiler/lib/core/getNormalizationOperationName.js13function getNormalizationOperationName(name) {CODE
LOWpackages/relay-compiler/lib/core/RelayParser.js1746function checkFragmentSpreadTypeCompatibility(CODE
LOW…compiler/lib/util/generateAbstractTypeRefinementKey.js16function generateAbstractTypeRefinementKey(schema, type) {CODE
LOW…s/relay-compiler/lib/util/argumentContainsVariables.js13function argumentContainsVariables(arg) {CODE
LOWpackages/relay-compiler/lib/util/RelayCompilerCache.js73 _proto.getOrCompute = function getOrCompute(key, compute) {CODE
LOW…ler/lib/language/javascript/RelayFlowBabelFactories.js29function exactObjectTypeAnnotation(props) {CODE
LOW…ler/lib/language/javascript/RelayFlowBabelFactories.js41function inexactObjectTypeAnnotation(props) {CODE
LOW…ler/lib/language/javascript/RelayFlowBabelFactories.js101function intersectionTypeAnnotation(types) {CODE
LOW…ler/lib/language/javascript/RelayFlowBabelFactories.js136function readOnlyObjectTypeProperty(key, value) {CODE
LOW…ler/lib/language/javascript/RelayFlowBabelFactories.js142function stringLiteralTypeAnnotation(value) {CODE
LOW…piler/lib/language/javascript/formatGeneratedModule.js36var formatGeneratedCommonjsModule = function formatGeneratedCommonjsModule(options) {CODE
LOW…r/lib/language/javascript/RelayFlowTypeTransformers.js19function getInputObjectTypeIdentifier(schema, typeID) {CODE
LOW…r/lib/language/javascript/RelayFlowTypeTransformers.js33function transformNonNullableScalarType(schema, type, state, objectProps) {CODE
LOW…r/lib/language/javascript/RelayFlowTypeTransformers.js49function transformGraphQLScalarType(typeName, state) {CODE
LOW…r/lib/language/javascript/RelayFlowTypeTransformers.js88function transformNonNullableInputType(schema, type, state) {CODE
LOW…iler/lib/codegen/createPrintRequireModuleDependency.js13function createPrintRequireModuleDependency() {CODE
LOW…compiler/lib/transforms/InlineDataFragmentTransform.js29function inlineDataFragmentTransform(context) {CODE
LOW…compiler/lib/transforms/SkipSplitOperationTransform.js23function skipSplitOperationTransform(context) {CODE
LOW…er/lib/transforms/FilterCompilerDirectivesTransform.js19function filterDirectivesTransform(context) {CODE
LOW…y-compiler/lib/transforms/FilterDirectivesTransform.js19function filterDirectivesTransform(context) {CODE
LOW…piler/lib/transforms/ApplyFragmentArgumentTransform.js62function applyFragmentArgumentTransform(context) {CODE
LOW…ler/lib/transforms/ValidateUnusedVariablesTransform.js32function validateUnusedVariablesTransform(context) {CODE
LOW…ler/lib/transforms/ValidateGlobalVariablesTransform.js30function validateGlobalVariablesTransform(context) {CODE
LOW…mpiler/lib/transforms/SkipClientExtensionsTransform.js15function skipClientExtensionTransform(context) {CODE
LOW…ages/relay-compiler/lib/transforms/FlattenTransform.js376function shouldFlattenInlineFragment(schema, fragment, state, type) {CODE
LOW…compiler/lib/transforms/SkipRedundantNodesTransform.js122function skipRedundantNodesTransform(context) {CODE
LOW…r/lib/transforms/ValidateRequiredArgumentsTransform.js30function validateRequiredArguments(context) {CODE
LOW…r/lib/transforms/ValidateRequiredArgumentsTransform.js101function validateRequiredArgumentsOnNode(schema, node, definitionArgs, rootNode) {CODE
LOW…ompiler/lib/transforms/RefetchableFragmentTransform.js49function refetchableFragmentTransform(context) {CODE
LOW…ompiler/lib/transforms/RefetchableFragmentTransform.js159function extractConnectionMetadata(schema, fragment) {CODE
LOW…ompiler/lib/transforms/SkipUnreachableNodeTransform.js36function skipUnreachableNodeTransform(context) {CODE
LOW…ib/transforms/ValidateServerOnlyDirectivesTransform.js32function validateServerOnlyDirectives(context) {CODE
LOW…ib/transforms/ValidateServerOnlyDirectivesTransform.js90function visitTransformedDirective(node, state) {CODE
LOW…y-compiler/lib/transforms/GenerateTypeNameTransform.js35function generateTypeNameTransform(context) {CODE
LOW…ompiler/lib/transforms/SkipUnusedVariablesTransform.js28function skipUnusedVariablesTransform(context) {CODE
LOW…elay-compiler/lib/transforms/query-generators/utils.js71function buildOperationArgumentDefinitions(argumentDefinitions) {CODE
LOWpackages/merge/src/typedefs-mergers/directives.ts12function collectMultiInstanceDirectiveNames(CODE
LOW…ges/resolvers-composition/src/resolvers-composition.ts26function isScalarTypeConfiguration(config: any): config is GraphQLScalarTypeConfig<any, any> {CODE
LOWpackages/utils/tests/mapSchema.test.ts208 function addObjectTypeToSetDirective(CODE
LOWpackages/utils/tests/mapSchema.test.ts240 function recordSchemaDirectiveUses(CODE
116 more matches not shown…
Cross-Language Confusion (JS/TS)14 hits · 70 pts
SeverityFileLineSnippetContext
HIGHpackages/webpack-loader/tests/loader.test.ts61 print(parse(docStr)),CODE
HIGHpackages/webpack-loader/tests/loader.test.ts124 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts133 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts163 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts178 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts189 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts228 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts243 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts254 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts288 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts504 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts513 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts583 print(CODE
HIGHpackages/webpack-loader/tests/loader.test.ts592 print(CODE
Over-Commented Block11 hits · 10 pts
SeverityFileLineSnippetContext
LOWwebsite/next-env.d.ts1/// <reference types="next" />COMMENT
LOW…elay-compiler/lib/core/inferRootArgumentDefinitions.js41function inferRootArgumentDefinitions(context) {COMMENT
LOWpackages/utils/src/addTypes.ts1// addTypes uses toConfig to create a new schema with a new or replacedCOMMENT
LOWpackages/utils/src/heal.ts21 isUnionType,COMMENT
LOWpackages/utils/src/heal.ts41//COMMENT
LOWpackages/load/tests/loaders/schema/test-files/13.tsx21// query IndexQuery {COMMENT
LOWpackages/load/tests/loaders/schema/test-files/12.tsx21// query IndexQuery {COMMENT
LOWpackages/executor/src/execution/execute.ts541}COMMENT
LOWpackages/import/tests/schema/import-schema.spec.ts481 `;COMMENT
LOWpackages/import/src/index.ts381// ```COMMENT
LOW.github/workflows/codeql-analysis.yml1# For most projects, this workflow file will not need changing; you simply needCOMMENT
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMpackages/relay-compiler/lib/bin/RelayCompilerBin.js147 // Apply externally loaded config through the yargs API so that we can leverage yargs' defaults and have them show upCOMMENT
Slop Phrases1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/codeql-analysis.yml60 # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize howCOMMENT