AI Slop Code RIsk Monitor

certimate-go/certimate

An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工具,申请、部署、续期、监控全流程自动化可视化,支持各大主流云厂商。

7.0 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for certimate-go/certimate, a Go project with 9,363 GitHub stars. SynthScan examined 196,224 lines of code across 2225 source files, recording 1634 pattern matches distributed across 6 syntactic categories. The legacy adjusted pattern signal is 7.0 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

7.0
Adjusted Signal
7.0
Raw Pattern Score
100%
Time Factor
2026-10-10
Last Push
9.4K
Stars
Go
Language
196.2K
Lines of Code
2.2K
Files
1.6K
Pattern Hits
2026-10-12
Scan Date
0.01
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 0.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 31 finding(s).

Hallucinated Dependency & Supply Chain Risk 29.0/100 · MEDIUM

Are imports declared and package/API names verified? 1600 finding(s).

Agent Over-Engineering Ratio 0.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 9 finding(s).

PR Review Velocity Impact 35.6/100 · MEDIUM

Which changes need focused human review? 1634 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 18MEDIUM 1LOW 1615

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1634 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Fake / Example Data1580 hits · 1253 pts
SeverityFileLineSnippetContext
LOWui/src/i18n/resources/zh/nls.login.json7 "placeholder": "请输入用户名/邮箱"CODE
LOWui/src/i18n/resources/zh/nls.login.json11 "placeholder": "请输入密码"CODE
LOWui/src/i18n/resources/zh/nls.certificate.json17 "placeholder": "按证书名称或序列号搜索……"CODE
LOWui/src/i18n/resources/zh/nls.certificate.json56 "placeholder": "请输入 PFX 导出密码"CODE
LOWui/src/i18n/resources/zh/nls.certificate.json60 "placeholder": "请选择 PFX 编码器",CODE
LOW⚡ui/src/i18n/resources/zh/nls.certificate.json78 "placeholder": "请输入 JKS 别名"CODE
LOW⚡ui/src/i18n/resources/zh/nls.certificate.json82 "placeholder": "请输入 JKS 私钥访问口令"CODE
LOW⚡ui/src/i18n/resources/zh/nls.certificate.json86 "placeholder": "请输入 JKS 密钥库存储口令"CODE
LOW⚡ui/src/i18n/resources/zh/nls.preset.json46 "placeholder": "请输入模板名称",CODE
LOW⚡ui/src/i18n/resources/zh/nls.preset.json53 "placeholder": "请输入通知主题"CODE
LOW⚡ui/src/i18n/resources/zh/nls.preset.json57 "placeholder": "请输入通知内容"CODE
LOW⚡ui/src/i18n/resources/zh/nls.preset.json61 "placeholder": "请输入脚本命令"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json71 "placeholder": "请输入授权名称"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json75 "placeholder": "请选择提供商",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json78 "placeholder": "搜索提供商……"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json84 "placeholder": "请输入 ACME EAB KID"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json88 "placeholder": "请输入 ACME EAB HMAC Key"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json102 "placeholder": "请输入 1Panel 服务地址",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json107 "placeholder": "请选择 1Panel 版本"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json111 "placeholder": "请输入 1Panel 接口密钥",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json116 "placeholder": "请输入三五互联代理商用户名"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json120 "placeholder": "请输入三五互联代理商 API 密码"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json127 "placeholder": "请输入帝恩思 API Key",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json132 "placeholder": "请输入帝恩思 API Secret",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json137 "placeholder": "请输入服务端点",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json142 "placeholder": "请输入 ACME EAB KID"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json146 "placeholder": "请输入 ACME EAB HMAC Key"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json150 "placeholder": "请输入 ACME-DNS 服务地址"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json154 "placeholder": "请输入 ACME-DNS 凭证文件\r\n\r\n{\r\n \"allowfrom\": [\r\n \"192.168.100.1/24\",\r\n \"1.2.3.4/32\CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json159 "placeholder": "请输入服务端点",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json164 "placeholder": "请选择模式",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json169 "placeholder": "请输入 HTTP 基本认证用户名",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json174 "placeholder": "请输入 HTTP 基本认证密码",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json182 "placeholder": "请输入 Akamai API Host",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json187 "placeholder": "请输入 Akamai ClientToken",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json192 "placeholder": "请输入 Akamai ClientSecret",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json197 "placeholder": "请输入 Akamai AccessToken",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json202 "placeholder": "请输入阿里云 AccessKeyID",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json207 "placeholder": "请输入阿里云 AccessKeySecret",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json212 "placeholder": "请输入阿里云资源组 ID",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json217 "placeholder": "请输入 APISIX 服务地址"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json221 "placeholder": "请输入 APISIX Admin API Key",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json226 "placeholder": "请输入 ArvanCloud API 密钥",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json231 "placeholder": "请输入橙域网络网迹 CDN AccessKeyID"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json235 "placeholder": "请输入橙域网络网迹 CDN AccessKeySecret"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json239 "placeholder": "请选择 AWS API 认证方式",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json252 "placeholder": "请输入 AWS AccessKeyID",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json257 "placeholder": "请输入 AWS SecretAccessKey",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json262 "placeholder": "请输入 AxisNow API 令牌",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json267 "placeholder": "请输入 Azure 租户 ID",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json272 "placeholder": "请输入 Azure 客户端 ID",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json277 "placeholder": "请输入 Azure 客户端密码",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json282 "placeholder": "请输入 Azure 订阅 ID",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json287 "placeholder": "请输入 Azure 资源组名称",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json292 "placeholder": "请输入 Azure 主权云环境(例如:public)",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json297 "placeholder": "请输入百度智能云 AccessKeyID",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json302 "placeholder": "请输入百度智能云 SecretAccessKey",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json307 "placeholder": "请输入白山云 API Token"CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json311 "placeholder": "请输入宝塔面板服务地址",CODE
LOW⚡ui/src/i18n/resources/zh/nls.access.json316 "placeholder": "请输入宝塔面板接口密钥",CODE
1520 more matches not shown…
Magic Placeholder Names18 hits · 90 pts
SeverityFileLineSnippetContext
HIGH…g/core/deployer/providers-tester/samwaf/samwaf_test.go38 --SAMWAF_APIKEY="your-api-key" \CODE
HIGH…s-tester/baotapanel-console/baotapanel_console_test.go36 --BAOTAPANELCONSOLE_APIKEY="your-api-key"CODE
HIGH…g/core/deployer/providers-tester/apisix/apisix_test.go38 --APISIX_APIKEY="your-api-key" \CODE
HIGH…providers-tester/1panel-console/1panel_console_test.go39 --1PANELCONSOLE_APIKEY="your-api-key"CODE
HIGH…ers-tester/rainyun-sslcenter/rainyun_sslcenter_test.go33 --RAINYUNRCDN_APIKEY="your-api-key"CODE
HIGH…ster/baotapanelgo-console/baotapanelgo_console_test.go36 --BAOTAPANELGOCONSOLE_APIKEY="your-api-key"CODE
HIGH…r/providers-tester/wangsu-cdnpro/wangsu_cdnpro_test.go47 --WANGSUCDNPRO_APIKEY="your-api-key" \CODE
HIGH…yer/providers-tester/baotapanelgo/baotapanelgo_test.go40 --BAOTAPANELGO_APIKEY="your-api-key" \CODE
HIGH…yer/providers-tester/rainyun-rcdn/rainyun_rcdn_test.go37 --RAINYUNRCDN_APIKEY="your-api-key" \CODE
HIGH…g/core/deployer/providers-tester/1panel/1panel_test.go43 --1PANEL_APIKEY="your-api-key" \CODE
HIGH…eployer/providers-tester/baotapanel/baotapanel_test.go40 --BAOTAPANEL_APIKEY="your-api-key" \CODE
HIGH…providers-tester/samwaf-console/samwaf_console_test.go36 --SAMWAFCONSOLE_APIKEY="your-api-key" \CODE
HIGH…g/core/deployer/providers-tester/cdnfly/cdnfly_test.go40 --CDNFLY_APIKEY="your-api-key" \CODE
HIGH…re/deployer/providers-tester/baotawaf/baotawaf_test.go40 --BAOTAWAF_APIKEY="your-api-key" \CODE
HIGH…iders-tester/baotawaf-console/baotawaf_console_test.go38 --BAOTAWAFCONSOLE_APIKEY="your-api-key"CODE
HIGH…/core/certmgr/providers-tester/dokploy/dokploy_test.go36 --DOKPLOY_APIKEY="your-api-key"CODE
HIGH…ers-tester/rainyun-sslcenter/rainyun_sslcenter_test.go33 --RAINYUNSSLCENTER_APIKEY="your-api-key"CODE
HIGHpkg/core/certmgr/providers-tester/1panel/1panel_test.go39 --1PANEL_APIKEY="your-api-key"CODE
Over-Commented Block25 hits · 25 pts
SeverityFileLineSnippetContext
LOWui/src/components/workflow/designer/_util.ts21 */COMMENT
LOWpkg/core/deployer.go1package coreCOMMENT
LOWpkg/core/certmgr.go1package coreCOMMENT
LOWpkg/core/certmgr.go21 // - err: 错误。COMMENT
LOWpkg/core/notifier.go1package coreCOMMENT
LOWpkg/core/deployer/providers/ftp/ftp.go21 // FTP 主机。COMMENT
LOWpkg/core/deployer/providers/s3/s3.go21 Endpoint string `json:"endpoint"`COMMENT
LOWpkg/core/deployer/providers/s3/s3.go41 ObjectKeyForKey string `json:"objectKeyForKey,omitempty"`COMMENT
LOW…eployer/providers/tencentcloud-tse/tencentcloud_tse.go21 SecretKey string `json:"secretKey"`COMMENT
LOWpkg/core/deployer/providers/local/local.go41 // 选填。COMMENT
LOWpkg/core/deployer/providers/ssh/ssh.go21type ServerConfig struct {COMMENT
LOWpkg/core/deployer/providers/ssh/ssh.go61 FilePathForCrt string `json:"filePathForCrt,omitempty"`COMMENT
LOWpkg/core/deployer/providers/lecdn/lecdn.go21)COMMENT
LOWpkg/core/notifier/providers/email/email.go21 SmtpHost string `json:"smtpHost"`COMMENT
LOWpkg/utils/maps/get.go41COMMENT
LOWpkg/utils/maps/get.go61// - key: 键。COMMENT
LOWpkg/utils/maps/get.go81// 出参:COMMENT
LOWpkg/utils/maps/get.go141 return defaultValueCOMMENT
LOWpkg/utils/maps/get.go281COMMENT
LOWpkg/utils/wait/until.go61// 出参:COMMENT
LOWpkg/utils/file/io.go41// 与 [Write] 类似,但写入的是字符串内容。COMMENT
LOWpkg/utils/ssh/io.go21// - sshCli: SSH 客户端。COMMENT
LOWpkg/utils/ssh/io.go41// - data: 文件数据字节数组。COMMENT
LOWpkg/utils/cert/transformer.go61// 将 PEM 编码的证书字符串转换为 JKS 格式。COMMENT
LOWpkg/utils/cert/parser.go21}COMMENT
Hyper-Verbose Identifiers6 hits · 8 pts
SeverityFileLineSnippetContext
LOW.github/workflows/release_sync_gitee.py53def get_github_stable_release():CODE
LOW.github/scripts/issue_quality/check_test.py14 def test_latest_version_fails(self):CODE
LOW⚡.github/scripts/issue_quality/check_test.py28 def test_short_description_fails(self):CODE
LOW⚡.github/scripts/issue_quality/check_test.py34 def test_placeholder_steps_fails(self):CODE
LOW⚡.github/scripts/issue_quality/check_test.py40 def test_short_motivation_fails(self):CODE
LOW⚡.github/scripts/issue_quality/check_test.py46 def test_non_template_skipped(self):CODE
Excessive Try-Catch Wrapping3 hits · 4 pts
SeverityFileLineSnippetContext
LOW.github/workflows/release_sync_gitee.py49 except Exception as e:CODE
LOW.github/workflows/release_sync_gitee.py266 except Exception as e:CODE
MEDIUM.github/workflows/release_sync_gitee.py224def main():CODE
Unused Imports2 hits · 2 pts
SeverityFileLineSnippetContext
LOW.github/scripts/issue_quality/check.py2CODE
LOW.github/scripts/issue_quality/rules.py1CODE