A JSON-like data structure (a CRDT) that can be modified concurrently by different users, and merged again automatically.
This report summarizes scanner evidence for automerge/automerge, a JavaScript project with 6,655 GitHub stars. SynthScan examined 182,970 lines of code across 543 source files, recording 650 pattern matches distributed across 5 syntactic categories. The legacy adjusted pattern signal is 5.7 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 409 finding(s).
Are imports declared and package/API names verified? 1 finding(s).
Are wrappers, guards, and repeated structures necessary? 240 finding(s).
Which changes need focused human review? 650 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 650 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | rust/hexane/benches/column_ops.rs | 269 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | rust/hexane/benches/column_ops.rs | 271 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | rust/hexane/benches/column_ops.rs | 273 | // ── Bool get (random access) ──────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | rust/hexane/benches/column_ops.rs | 458 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | rust/hexane/benches/column_ops.rs | 460 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | rust/hexane/benches/column_ops.rs | 470 | // ── Bulk load: v0 vs v1 vs prefix ──────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 25 | // ── Helpers: build columns ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 50 | // ── Get (random access) ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 77 | // ── Small splice: insert only (no deletes) ────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 129 | // ── String splice ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 193 | // ── Large splice: insert 100k elements into a 1k column ───────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 213 | // ── Large splice: delete only ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 240 | // ── Large splice: replace ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 300 | // ── Bool small splice: replace ────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 352 | // ── Bool large splice: insert 100k ────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 372 | // ── Bool large splice: delete only ────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 389 | // ── Bool large splice: replace ────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 407 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 409 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 536 | // ── PrefixColumn queries: get vs get_prefix vs get_index_for_prefix ────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 688 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 690 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 722 | // ── Delta get (random access) ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 749 | // ── Delta insert ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 776 | // ── Sparse Option<i64> delta mutations at 100k (50% None vs 0% None) ──────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 889 | // ── Delta save ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 924 | // ── Delta save (monotonic data — shows compression advantage) ──────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 945 | // ── Delta load ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 968 | // ── Delta bulk construction ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 1011 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 1013 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 1065 | // ── nth() on alternating 10k-element runs (1M total) ──────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 1130 | // ── Prefix iter: random values ────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 1168 | // ── Prefix iter: alternating runs ─────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 1188 | // ── Prefix nth: alternating runs ──────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 1231 | // ── Prefix nth: random values ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_ops.rs | 1252 | // ── Save benchmarks ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 28 | // ── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 38 | // ── Bulk load u64 100k ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 90 | // ── Get u64 100k ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 142 | // ── Insert-1 u64 10k ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 208 | // ── Splice replace-5 u64 10k ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 302 | // ── Get bool 100k ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 354 | // ── Insert-1 bool 10k ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 420 | // ── Save u64 100k ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/max_segments.rs | 472 | // ── Slab count (informational) ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/btree_b_sweep.rs | 52 | // ── Column<u64> (LenWeight = usize) ──────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/btree_b_sweep.rs | 131 | // ── DeltaColumn<i64> (SlabAgg = 4×i64) ───────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/benches/column_u64_mutations.rs | 53 | // ╔══════════════════════════════════════════════════════════════════════════╗ | COMMENT |
| MEDIUM | rust/hexane/benches/column_u64_mutations.rs | 55 | // ╚══════════════════════════════════════════════════════════════════════════╝ | COMMENT |
| MEDIUM | rust/hexane/benches/column_u64_mutations.rs | 124 | // ╔══════════════════════════════════════════════════════════════════════════╗ | COMMENT |
| MEDIUM | rust/hexane/benches/column_u64_mutations.rs | 126 | // ╚══════════════════════════════════════════════════════════════════════════╝ | COMMENT |
| MEDIUM | rust/hexane/src/edit.rs | 65 | // ── Progressive editing ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/src/edit.rs | 461 | // ── internals ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/src/splice_fuzz.rs | 41 | // ── the target abstraction ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/src/splice_fuzz.rs | 122 | // ── the harness ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/src/splice_fuzz.rs | 342 | // ── targets ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/src/splice_fuzz.rs | 553 | // ── tests ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/src/encoder.rs | 30 | // ── RLE Encoder ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | rust/hexane/src/encoder.rs | 494 | // ── Bool Encoder ──────────────────────────────────────────────────────────── | COMMENT |
| 180 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | rust/deny.toml | 1 | # This template contains all of the possible sections and their default values | COMMENT |
| LOW | rust/deny.toml | 21 | targets = [ | COMMENT |
| LOW | rust/deny.toml | 41 | # A list of advisory IDs to ignore. Note that ignored advisories will still | COMMENT |
| LOW | rust/deny.toml | 61 | # This section is considered when running `cargo deny check licenses` | COMMENT |
| LOW | rust/deny.toml | 101 | # The name of the crate the clarification applies to | COMMENT |
| LOW | rust/deny.toml | 121 | # One or more private registries that you might publish crates to, if a crate | COMMENT |
| LOW | rust/deny.toml | 141 | highlight = "all" | COMMENT |
| LOW | rust/deny.toml | 161 | # benchmark-battery to render benchmark graphs | COMMENT |
| LOW | rust/deny.toml | 181 | # List of URLs for allowed crate registries. Defaults to the crates.io index | COMMENT |
| LOW | rust/benchmark-battery/src/main.rs | 21 | #[derive(Debug, Subcommand)] | COMMENT |
| LOW | rust/benchmark-battery/src/main.rs | 41 | #[arg(long, default_value_t = scenarios::TierFilter::Fast)] | COMMENT |
| LOW | rust/benchmark-battery/src/main.rs | 61 | /// Add measured results to the existing output file, preserving earlier results. | COMMENT |
| LOW | rust/benchmark-battery/src/main.rs | 81 | #[arg(long, default_value_t = 5.0)] | COMMENT |
| LOW | rust/hexane/proptest-regressions/tests.txt | 1 | # Seeds for failure cases proptest has generated in the past. It is | COMMENT |
| LOW | rust/hexane/tests/pending.rs | 1 | //! Known bugs with no fix yet. | COMMENT |
| LOW | rust/hexane/examples/column_splice_profile.rs | 1 | //! Profile target for `Column<u64>` splice performance. | COMMENT |
| LOW | rust/hexane/benches/remap.rs | 1 | //! `Column::remap` benchmark — re-encode every value through a closure. | COMMENT |
| LOW | rust/hexane/src/edit.rs | 81 | /// a byte splice and an index update, and leaves the skipped bytes where | COMMENT |
| LOW | rust/hexane/src/edit.rs | 121 | orig: usize, | COMMENT |
| LOW | rust/hexane/src/edit.rs | 141 | rebuilds: usize, | COMMENT |
| LOW | rust/hexane/src/splice_fuzz.rs | 1 | //! Model-based splice fuzzing with slab-boundary targeting and automatic | COMMENT |
| LOW | rust/hexane/src/splice_fuzz.rs | 21 | //! reloaded column passed. So these fuzzers splice repeatedly into one | COMMENT |
| LOW | rust/hexane/src/encoder.rs | 1 | //! Streaming encoder for building column data from a sequence of values. | COMMENT |
| LOW | rust/hexane/src/encoder.rs | 101 | /// of `value` (or is empty). Both clauses must hold: | COMMENT |
| LOW | rust/hexane/src/encoder.rs | 121 | /// Both output methods consume the encoder. | COMMENT |
| LOW | rust/hexane/src/encoder.rs | 601 | /// Streaming encoder for boolean columns. | COMMENT |
| LOW | rust/hexane/src/btree.rs | 1 | //! Generic B+tree slab index. Generic over an aggregate type `A` | COMMENT |
| LOW | rust/hexane/src/btree.rs | 21 | //! thin ~B× slower than leaves (losing a child only when a whole leaf | COMMENT |
| LOW | rust/hexane/src/btree.rs | 41 | /// | COMMENT |
| LOW | rust/hexane/src/btree.rs | 61 | /// Implemented by [`PrefixSlabWeight<P>`](crate::prefix::PrefixSlabWeight) | COMMENT |
| LOW | rust/hexane/src/btree.rs | 1261 | } | COMMENT |
| LOW | rust/hexane/src/bool.rs | 21 | // No boolean value is stored — the value is implicit from the run's position | COMMENT |
| LOW | rust/hexane/src/bool.rs | 41 | /// unmodified prefix/suffix bytes and the splice region. | COMMENT |
| LOW | rust/hexane/src/bool.rs | 101 | len, | COMMENT |
| LOW | rust/hexane/src/bool.rs | 141 | tail, | COMMENT |
| LOW | rust/hexane/src/bool.rs | 921 | merge_bytes | COMMENT |
| LOW | rust/hexane/src/bool.rs | 1161 | /// | COMMENT |
| LOW | rust/hexane/src/error.rs | 1 | /// Errors returned when decoding or validating column data. | COMMENT |
| LOW | rust/hexane/src/encoding.rs | 141 | COMMENT | |
| LOW | rust/hexane/src/lib.rs | 61 | COMMENT | |
| LOW | rust/hexane/src/lib.rs | 121 | }; | COMMENT |
| LOW | rust/hexane/src/lib.rs | 201 | COMMENT | |
| LOW | rust/hexane/src/lib.rs | 221 | type Encoding<C: Codec>: ColumnEncoding<Value = Self, Codec = C> | COMMENT |
| LOW | rust/hexane/src/lib.rs | 241 | /// a `map` over it). Lets generic code like `RleCow::get` shorten | COMMENT |
| LOW | rust/hexane/src/lib.rs | 261 | /// impl ColumnValue for ValueMeta { | COMMENT |
| LOW | rust/hexane/src/lib.rs | 281 | /// true | COMMENT |
| LOW | rust/hexane/src/lib.rs | 321 | /// to reject null runs in non-nullable columns. | COMMENT |
| LOW | rust/hexane/src/lib.rs | 341 | COMMENT | |
| LOW | rust/hexane/src/lib.rs | 361 | /// The default panics, which is correct for non-nullable types (`NULLABLE = false`). | COMMENT |
| LOW | rust/hexane/src/lib.rs | 461 | fn as_column_ref(&self) -> bool { | COMMENT |
| LOW | rust/hexane/src/lib.rs | 481 | /// let mut bytes = Column::<Vec<u8>>::new(); | COMMENT |
| LOW | rust/hexane/src/raw.rs | 1 | //! Raw-byte arena column. | COMMENT |
| LOW | rust/hexane/src/raw.rs | 21 | use crate::PackError; | COMMENT |
| LOW | rust/hexane/src/raw.rs | 301 | /// likewise ascending. | COMMENT |
| LOW | rust/hexane/src/raw.rs | 481 | total_len: data.len(), | COMMENT |
| LOW | rust/hexane/src/raw.rs | 581 | COMMENT | |
| LOW | rust/hexane/src/index.rs | 1 | //! `ColumnIndex` abstracts the slab-index backing of a `Column`. | COMMENT |
| LOW | rust/hexane/src/index.rs | 41 | /// If `index >= total_items`, returns `(len(), 0)` — past-end sentinel, | COMMENT |
| LOW | rust/hexane/src/prefix.rs | 21 | /// `Copy` is a supertrait — the inverse-prefix search uses scalar | COMMENT |
| LOW | rust/hexane/src/prefix.rs | 41 | /// | `bool` | `u32` | | COMMENT |
| 346 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | rust/hexane/V1_MIGRATION.md | 178 | ## Cross-check scaffolding pattern | COMMENT |
| MEDIUM | rust/hexane/V1_MIGRATION.md | 239 | ### Migrated columns (v0 scaffolding removed — v1 is the source of truth) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | javascript/src/index.ts | 127 | * receiveSyncMessage}. Here's a simple example of a loop which just keeps two | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | rust/automerge/tests/batch_insert.rs | 686 | doc.insert(&list_id, 0, "placeholder").unwrap(); | CODE |