AI Slop Code Risk Monitor

bytedance/sonic

SlopCodeMonitor badge for bytedance/sonic Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

A blazingly fast JSON serializing & deserializing library

0.8 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for bytedance/sonic, a Go project with 9,645 GitHub stars. SynthScan examined 219,433 lines of code across 630 source files, recording 138 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 0.8 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

0.8
Adjusted Signal
0.8
Raw Pattern Score
100%
Time Factor
2026-10-27
Last Push
9.6K
Stars
Go
Language
219.4K
Lines of Code
630
Files
138
Pattern Hits
2026-10-31
Scan Date
0.01
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 127 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 5 finding(s).

Agent Over-Engineering Ratio 0.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 6 finding(s).

PR Review Velocity Impact 4.3/100 · LOW

Which changes need focused human review? 138 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 9MEDIUM 6LOW 123

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 138 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block105 hits · 105 pts
SeverityFileLineSnippetContext
LOWapi.go121COMMENT
LOWapi.go201}COMMENT
LOWnative/scanning.h1681 return sp == end && kp == ke;COMMENT
LOWnative/f32toa.c21 * KIND, either express or implied.COMMENT
LOWnative/f32toa.c441COMMENT
LOWnative/f64toa.c21 * KIND, either express or implied.COMMENT
LOWnative/f64toa.c401#undef F64_EXP_MASK COMMENT
LOWnative/native.h21#define SIMDE_ENABLE_NATIVE_ALIASESCOMMENT
LOWnative/native.h41#include <sys/types.h>COMMENT
LOWnative/types.h1COMMENT
LOWnative/types.h21COMMENT
LOWnative/types.h41#define ERR_NOT_FOUND 33COMMENT
LOWnative/utf8.h261 const uint8_t SURROGATE = 1<<4; // 11101101 101_____COMMENT
LOWnative/test/xprintf.h21COMMENT
LOWnative/test/xassert.h21 static always_inline void xpanic() {}COMMENT
LOWencoder/encoder_compat.go61COMMENT
LOWencoder/encoder_native.go81 // Encode returns the JSON encoding of val, encoded with opts.COMMENT
LOWencoder/encoder_native.go101 // order to reduce the first-hit latency.COMMENT
LOWinternal/native/dispatch_arm64.go61COMMENT
LOWinternal/native/dispatch_arm64.go81COMMENT
LOWinternal/native/dispatch_arm64.go101COMMENT
LOWinternal/native/avx2/get_by_path_text_amd64.go6101 // // .set L0_2_set_726, LBB0_726-LJTI0_2COMMENT
LOWinternal/native/avx2/value_text_amd64.go3561 // // .set L0_0_set_118, LBB0_118-LJTI0_0COMMENT
LOWinternal/native/sse/get_by_path_text_amd64.go6061 0x0d, 0xb7, 0xff, 0xff, //0x00005c10 .long L0_1_set_208COMMENT
LOWinternal/native/sse/skip_one_text_amd64.go4121 0x27, 0xf4, 0xff, 0xff, //0x00003e50 .long L0_0_set_576COMMENT
LOWinternal/native/sse/skip_array_text_amd64.go4461 // // .set L0_0_set_35, LBB0_35-LJTI0_0COMMENT
LOWinternal/native/sse/skip_array_text_amd64.go4641 0x5b, 0xfe, 0xff, 0xff, //0x000045b8 .long L0_2_set_737COMMENT
LOWinternal/native/sse/validate_one_text_amd64.go4461 // // .set L0_0_set_35, LBB0_35-LJTI0_0COMMENT
LOWinternal/native/sse/validate_one_text_amd64.go4641 0x5b, 0xfe, 0xff, 0xff, //0x000045b8 .long L0_2_set_737COMMENT
LOWinternal/native/sse/skip_object_text_amd64.go4461 // // .set L0_0_set_35, LBB0_35-LJTI0_0COMMENT
LOWinternal/native/sse/skip_object_text_amd64.go4641 0x5b, 0xfe, 0xff, 0xff, //0x000045b8 .long L0_2_set_737COMMENT
LOWinternal/native/sse/value_text_amd64.go3321 0x48, 0x0f, 0x45, 0xca, //0x00003018 cmovneq %rdx, %rcxCOMMENT
LOWinternal/encoder/encoder.go41COMMENT
LOWinternal/encoder/vm/vm.go1// Copyright 2024 CloudWeGo AuthorsCOMMENT
LOWinternal/encoder/vm/vm_test.go1// Copyright 2024 CloudWeGo AuthorsCOMMENT
LOWinternal/encoder/x86/asm_stubs_amd64_go121.go1//go:build go1.21 && !go1.28COMMENT
LOWinternal/encoder/x86/asm_stubs_amd64_go117.go1//go:build go1.17 && !go1.21COMMENT
LOWinternal/decoder/jitdec/asm_stubs_amd64_go121.go1//go:build go1.21 && !go1.28COMMENT
LOWinternal/decoder/jitdec/asm_stubs_amd64_go117.go1//go:build go1.17 && !go1.21COMMENT
LOWinternal/rt/table.go1// Copyright 2024 CloudWeGo AuthorsCOMMENT
LOWdecoder/decoder_native.go61 // Pretouch compiles vt ahead-of-time to avoid JIT compilation on-the-fly, inCOMMENT
LOWdecoder/decoder_native_test.go161 }COMMENT
LOWdecoder/decoder_native_test.go181 // Pass2 int `json:"pass2"`COMMENT
LOWdecoder/decoder_native_test.go201 // // assert.Equal(t, len(data), d.i)COMMENT
LOWissue_test/issue747_test.go1// Copyright 2025 CloudWeGo AuthorsCOMMENT
LOWissue_test/issue923_test.go1// Copyright 2025 CloudWeGo AuthorsCOMMENT
LOWissue_test/issue670_test.go1// Copyright 2024 CloudWeGo AuthorsCOMMENT
LOWissue_test/issue539_test.go1// Copyright 2023 CloudWeGo AuthorsCOMMENT
LOWissue_test/common_test.go1// Copyright 2025 CloudWeGo AuthorsCOMMENT
LOWissue_test/sonic_snapshot_test.go1// Copyright 2026 ByteDance Inc.COMMENT
LOWissue_test/issue777_test.go61 // return &aCOMMENT
LOWissue_test/issue750_test.go1// Copyright 2025 CloudWeGo AuthorsCOMMENT
LOWissue_test/jsonv1_compat_test.go21COMMENT
LOWissue_test/issue739_test.go1// Copyright 2025 CloudWeGo AuthorsCOMMENT
LOWissue_test/issue716_test.go1// Copyright 2024 CloudWeGo AuthorsCOMMENT
LOWissue_test/issue692_test.go1// Copyright 2024 CloudWeGo AuthorsCOMMENT
LOWissue_test/jsonv2_compat_test.go21COMMENT
LOWloader/funcdata_compat.go101 cuOffset uint32 // runtime.cutab offset of this function's CUCOMMENT
LOWloader/funcdata_go120.go101 //COMMENT
LOWloader/funcdata_go121.go101COMMENT
45 more matches not shown…
Cross-File Repetition6 hits · 30 pts
SeverityFileLineSnippetContext
HIGHinternal/native/avx2/get_by_path_text_amd64.go0"' 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, //0x00000090 quad $0xSTRING
HIGHinternal/native/avx2/skip_one_fast_text_amd64.go0"' 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, //0x00000090 quad $0xSTRING
HIGHinternal/native/avx2/skip_one_text_amd64.go0"' 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, //0x00000090 quad $0xSTRING
HIGHinternal/native/avx2/skip_array_text_amd64.go0"' 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, //0x000000f0 quad $0xSTRING
HIGHinternal/native/avx2/validate_one_text_amd64.go0"' 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, //0x000000f0 quad $0xSTRING
HIGHinternal/native/avx2/skip_object_text_amd64.go0"' 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, 0x22, //0x000000f0 quad $0xSTRING
Self-Referential Comments6 hits · 18 pts
SeverityFileLineSnippetContext
MEDIUMloader/internal/iasm/trim.py18# This file is used by sync.sh for trimming x86_64/instructions.go and x86_64/instructions_table.goCOMMENT
MEDIUMscripts/build-x86.sh5# Define the directoriesCOMMENT
MEDIUMscripts/build-x86.sh32 # Create the output directory if it doesn't existCOMMENT
MEDIUMscripts/build-arm.sh3# Define the directoriesCOMMENT
MEDIUMscripts/build-arm.sh14# Create the output directory if it doesn't existCOMMENT
MEDIUMscripts/build-arm.sh23 # Define the output file pathCOMMENT
Deep Nesting15 hits · 15 pts
SeverityFileLineSnippetContext
LOWtools/asm2arm/arm.py2212CODE
LOWtools/asm2arm/arm.py74CODE
LOWtools/asm2arm/arm.py655CODE
LOWtools/asm2arm/arm.py668CODE
LOWtools/asm2arm/arm.py701CODE
LOWtools/asm2arm/arm.py861CODE
LOWtools/asm2arm/arm.py997CODE
LOWtools/asm2arm/arm.py1066CODE
LOWtools/asm2arm/arm.py1516CODE
LOWtools/asm2arm/arm.py1573CODE
LOWtools/asm2arm/arm.py1619CODE
LOWtools/asm2arm/arm.py1883CODE
LOWtools/asm2arm/arm.py1904CODE
LOWtools/asm2arm/arm.py2049CODE
LOWscripts/bench.py103CODE
Cross-Language Confusion3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHscripts/test_pcsp.py91 run_cmd("grep -q \"runtime: \" test.log && exit 1 || exit 0")CODE
HIGHscripts/test_pcsp.py91 run_cmd("grep -q \"runtime: \" test.log && exit 1 || exit 0")CODE
HIGHscripts/bench.py104 run("go get golang.org/x/perf/cmd/benchstat && go install golang.org/x/perf/cmd/benchstat")CODE
Unused Imports2 hits · 2 pts
SeverityFileLineSnippetContext
LOWtools/asm2arm/arm.py11CODE
LOWtools/asm2arm/arm.py14CODE
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOWscripts/bench.py153 # Check if the decline is significantCOMMENT