The ultimate LLM/AI application development framework in Go.
This report summarizes scanner evidence for cloudwego/eino, a Go project with 13,507 GitHub stars. SynthScan examined 159,133 lines of code across 361 source files, recording 404 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 3.6 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 403 finding(s).
Are imports declared and package/API names verified? 0 finding(s).
Are wrappers, guards, and repeated structures necessary? 1 finding(s).
Which changes need focused human review? 404 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 404 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | callbacks/aspect_inject.go | 21 | COMMENT | |
| LOW | callbacks/aspect_inject.go | 41 | // }) | COMMENT |
| LOW | callbacks/aspect_inject.go | 61 | // | COMMENT |
| LOW | callbacks/aspect_inject.go | 81 | // the component produces a successful result. Handlers run in registration | COMMENT |
| LOW | callbacks/aspect_inject.go | 121 | // StreamReader has been returned) are NOT routed through OnError; they surface | COMMENT |
| LOW | callbacks/aspect_inject.go | 141 | } | COMMENT |
| LOW | callbacks/aspect_inject.go | 161 | // completely replacing any RunInfo and handlers already in ctx. | COMMENT |
| LOW | callbacks/handler_builder.go | 21 | COMMENT | |
| LOW | callbacks/handler_builder.go | 41 | // if mi != nil { | COMMENT |
| LOW | callbacks/interface.go | 21 | ) | COMMENT |
| LOW | callbacks/interface.go | 41 | type RunInfo = callbacks.RunInfo | COMMENT |
| LOW | callbacks/interface.go | 61 | COMMENT | |
| LOW | callbacks/interface.go | 81 | // | COMMENT |
| LOW | callbacks/interface.go | 101 | // (e.g. in main or TestMain), before any graph executions begin. | COMMENT |
| LOW | callbacks/interface.go | 121 | // TimingOnError fires when the component returns a non-nil error. | COMMENT |
| LOW | callbacks/interface.go | 141 | // | COMMENT |
| LOW | callbacks/doc.go | 21 | // - [TimingOnStartWithStreamInput] / [TimingOnEndWithStreamOutput]: streaming | COMMENT |
| LOW | callbacks/doc.go | 41 | // handlers (e.g. from a parent graph), those handlers are inherited by the | COMMENT |
| LOW | callbacks/doc.go | 61 | // return ctx | COMMENT |
| LOW | callbacks/doc.go | 81 | // }, | COMMENT |
| LOW | callbacks/doc.go | 101 | // start := ctx.Value(startTimeKey{}).(time.Time) | COMMENT |
| LOW | callbacks/doc.go | 121 | // never concurrently with graph execution. | COMMENT |
| LOW | compose/graph_call_options.go | 61 | // When the returned context is used to invoke a graph or workflow, calling the interrupt function will trigger an inter | COMMENT |
| LOW | compose/graph_call_options.go | 181 | // WithEmbeddingOption is a functional option type for embedding component. | COMMENT |
| LOW | compose/resume.go | 21 | COMMENT | |
| LOW | compose/resume.go | 41 | // | COMMENT |
| LOW | compose/resume.go | 61 | // crucial to differentiate which point is being resumed. This is the primary use case for the `isResumeFlow` flag. | COMMENT |
| LOW | compose/resume.go | 101 | COMMENT | |
| LOW | compose/checkpoint.go | 261 | switch rv.Kind() { | COMMENT |
| LOW | compose/chain_branch.go | 81 | key2BranchNode: make(map[string]nodeOptionsPair), | COMMENT |
| LOW | compose/chain_branch.go | 101 | return NewChainMultiBranch(func(ctx context.Context, in T) (endNode map[string]bool, err error) { | COMMENT |
| LOW | compose/chain_branch.go | 141 | // }) | COMMENT |
| LOW | compose/chain_branch.go | 161 | gNode, options := toAgenticModelNode(node, opts...) | COMMENT |
| LOW | compose/chain_branch.go | 201 | // AddToolsNode adds a ToolsNode to the branch. | COMMENT |
| LOW | compose/chain_branch.go | 241 | // AddEmbedding adds an Embedding node to the branch. | COMMENT |
| LOW | compose/chain_branch.go | 281 | // AddIndexer adds an Indexer node to the branch. | COMMENT |
| LOW | compose/chain_parallel.go | 41 | // Example: | COMMENT |
| LOW | compose/chain_parallel.go | 61 | // | COMMENT |
| LOW | compose/chain_parallel.go | 81 | // Model: "gpt-4o", | COMMENT |
| LOW | compose/chain_parallel.go | 101 | gNode, options := toChatTemplateNode(node, append(opts, WithOutputKey(outputKey))...) | COMMENT |
| LOW | compose/chain_parallel.go | 121 | // }) | COMMENT |
| LOW | compose/chain_parallel.go | 141 | COMMENT | |
| LOW | compose/chain_parallel.go | 181 | // | COMMENT |
| LOW | compose/chain_parallel.go | 201 | } | COMMENT |
| LOW | compose/resume_test.go | 261 | // create a sub graph A, add A to ROOT graph using AddGraphNode. | COMMENT |
| LOW | compose/resume_test.go | 381 | // which is a specific struct type that implements the CompositeInterruptState interface. | COMMENT |
| LOW | compose/resume_test.go | 841 | // - internal graph will naturally append to the Address | COMMENT |
| LOW | compose/resume_test.go | 941 | COMMENT | |
| LOW | compose/graph.go | 321 | // e.g. | COMMENT |
| LOW | compose/graph.go | 341 | COMMENT | |
| LOW | compose/graph.go | 361 | // | COMMENT |
| LOW | compose/graph.go | 381 | COMMENT | |
| LOW | compose/graph.go | 401 | return g.addNode(key, gNode, options) | COMMENT |
| LOW | compose/interrupt.go | 121 | // | COMMENT |
| LOW | compose/interrupt.go | 141 | // interruptible sub-processes. It bundles multiple sub-interrupt errors into a single error | COMMENT |
| LOW | compose/interrupt.go | 161 | // Provided mainly for compatibility purpose as the composite node itself | COMMENT |
| LOW | compose/chain.go | 41 | COMMENT | |
| LOW | compose/chain.go | 61 | // 4.3 `multi input chunk & one output` use `r.Collect(ctx, inputReader)` | COMMENT |
| LOW | compose/chain.go | 141 | func (c *Chain[I, O]) component() component { | COMMENT |
| LOW | compose/chain.go | 181 | // if err != nil {...} | COMMENT |
| 265 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | compose/chain_branch.go | 149 | // AddAgenticModel adds a agentic.Model node to the branch. | COMMENT |
| MEDIUM | compose/chain_parallel.go | 73 | // AddAgenticModel adds a agentic.Model to the parallel. | COMMENT |
| MEDIUM | compose/graph.go | 355 | // AddAgenticModelNode add node that implements agentic.Model. | COMMENT |
| MEDIUM | compose/chain.go | 177 | // AppendAgenticModel add a agentic.Model node to the chain. | COMMENT |
| MEDIUM | compose/workflow.go | 92 | // AddAgenticModelNode adds an agentic model node and returns it. | COMMENT |
| MEDIUM | compose/workflow.go | 104 | // AddAgenticChatTemplateNode adds an agentic chat template node and returns it. | COMMENT |
| MEDIUM | compose/workflow.go | 116 | // AddAgenticToolsNode adds an agentic tools node and returns it. | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 134 | // AgenticPrompt sets the agentic prompt handler for the handler helper, which will be called when the agentic prompt co | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 140 | // AgenticModel sets the agentic chat model handler for the handler helper, which will be called when the agentic chat m | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 146 | // AgenticToolsNode sets the agentic tools node handler for the handler helper, which will be called when the agentic to | COMMENT |
| MEDIUM | utils/callbacks/template.go | 158 | // AgenticAgent sets the agentic agent callback handler for the handler helper, which will be called when an agentic age | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 683 | // AgenticAgentCallbackHandler handles callbacks for agentic agents using *schema.AgenticMessage. | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 684 | // Use ComponentOfAgenticAgent to filter callback events to agentic-agent-related events. | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 686 | // OnStart is called when an agentic agent run begins. Return a modified context to propagate values. | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 688 | // OnEnd is called when an agentic agent run completes. The output's Events iterator should be | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 704 | // AgenticPromptCallbackHandler is the handler for the agentic prompt callback. | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 706 | // OnStart is the callback function for the start of the agentic prompt. | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 708 | // OnEnd is the callback function for the end of the agentic prompt. | COMMENT |
| MEDIUM⚡ | utils/callbacks/template.go | 710 | // OnError is the callback function for the error of the agentic prompt. | COMMENT |
| MEDIUM | utils/callbacks/template.go | 728 | // AgenticModelCallbackHandler is the handler for the agentic chat model callback. | COMMENT |
| MEDIUM | schema/agentic_message.go | 685 | // AgenticMessagesTemplate is the interface for agentic messages template. | COMMENT |
| MEDIUM | schema/agentic_message.go | 686 | // It's used to render a template to a list of agentic messages. | COMMENT |
| MEDIUM | schema/agentic_message.go | 711 | // AgenticMessagesPlaceholder can render a placeholder to a list of agentic messages in params. | COMMENT |
| MEDIUM | schema/agentic_message.go | 754 | // Format returns the agentic messages after rendering by the given formatType. | COMMENT |
| MEDIUM | adk/flow.go | 621 | // Typed wrapper for the agentic path (TypedAgent[*schema.AgenticMessage]). | COMMENT |
| MEDIUM | adk/interface.go | 86 | // AgenticRole indicates the role of the agentic message (assistant, user, system). | COMMENT |
| MEDIUM | adk/wrappers_test.go | 1713 | // collectAgenticToolEvents filters tool result events from the agentic iterator. | COMMENT |
| MEDIUM | adk/wrappers_test.go | 1734 | // collectAgenticToolContent extracts text from agentic tool result events. | COMMENT |
| MEDIUM | adk/chatmodel.go | 422 | // For M = *schema.AgenticMessage, a single-shot chain is used since agentic models | COMMENT |
| MEDIUM | adk/chatmodel.go | 424 | // are not yet supported for agentic models. | COMMENT |
| MEDIUM | adk/chatmodel.go | 1103 | // single-shot: agentic models handle tool calling internally | COMMENT |
| MEDIUM | adk/middlewares/reduction/reduction.go | 1169 | // tool result message (schema.Tool role or agentic user msg carrying FunctionToolResult) | COMMENT |
| MEDIUM | adk/middlewares/reduction/reduction.go | 1302 | // A user-role agentic message that contains any FunctionToolResult block | COMMENT |
| MEDIUM | adk/prebuilt/deep/deep.go | 59 | // For M = *schema.AgenticMessage, only agentic sub-agents are accepted. | COMMENT |
| MEDIUM | components/types.go | 69 | // ComponentOfAgenticPrompt identifies agentic template components. | COMMENT |
| MEDIUM | components/types.go | 73 | // ComponentOfAgenticModel identifies agentic model components. | COMMENT |
| MEDIUM | components/prompt/interface.go | 47 | // AgenticChatTemplate formats variables into a list of agentic messages according to a prompt schema. | COMMENT |
| MEDIUM | components/prompt/agentic_chat_template.go | 76 | // GetType returns the type of the agentic template (DefaultAgentic). | COMMENT |
| MEDIUM⚡ | components/prompt/agentic_callback_extra.go | 28 | // Templates is the agentic templates for the callback. | COMMENT |
| MEDIUM⚡ | components/prompt/agentic_callback_extra.go | 36 | // Result is the agentic result for the callback. | COMMENT |
| MEDIUM⚡ | components/prompt/agentic_callback_extra.go | 38 | // Templates is the agentic templates for the callback. | COMMENT |
| MEDIUM⚡ | components/prompt/agentic_callback_extra.go | 44 | // ConvAgenticCallbackInput converts the callback input to the agentic prompt callback input. | COMMENT |
| MEDIUM | components/prompt/agentic_callback_extra.go | 58 | // ConvAgenticCallbackOutput converts the callback output to the agentic prompt callback output. | COMMENT |
| MEDIUM | components/model/option.go | 54 | // Options only available for agentic model. | COMMENT |
| MEDIUM | components/model/option.go | 56 | // AgenticToolChoice controls how the agentic model calls tools. | COMMENT |
| MEDIUM | components/model/option.go | 166 | // WithAgenticToolChoice is the option to set tool choice for the agentic model. | COMMENT |
| MEDIUM | components/model/interface.go | 106 | // *schema.AgenticMessage. Unlike ToolCallingChatModel, agentic models do NOT | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 24 | // AgenticConfig is the config for the agentic model. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 30 | // Temperature is the temperature, which controls the randomness of the agentic model. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 32 | // TopP is the top p, which controls the diversity of the agentic model. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 36 | // AgenticCallbackInput is the input for the agentic model callback. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 38 | // Messages is the agentic messages to be sent to the agentic model. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 40 | // Tools is the tools to be used in the agentic model. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 42 | // Config is the config for the agentic model. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 48 | // AgenticCallbackOutput is the output for the agentic model callback. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 50 | // Message is the agentic message generated by the agentic model. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 52 | // Config is the config for the agentic model. | COMMENT |
| MEDIUM⚡ | components/model/agentic_callback_extra.go | 60 | // ConvAgenticCallbackInput converts the callback input to the agentic model callback input. | COMMENT |
| MEDIUM | components/model/agentic_callback_extra.go | 78 | // ConvAgenticCallbackOutput converts the callback output to the agentic model callback output. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | adk/runctx.go | 120 | // NOTE: This method parallels agentEventWrapper.consumeStream in utils.go. The two | COMMENT |
| LOW⚡ | adk/turn_loop_test.go | 6171 | // Step 1: Push item A (no preempt). Wait for agent to start. | COMMENT |
| LOW⚡ | adk/turn_loop_test.go | 6175 | // Step 2: Push item B with preempt. This cancels the first turn. | COMMENT |
| LOW⚡ | adk/turn_loop_test.go | 6181 | // Step 3: Push item C with preempt. This is the scenario that triggers | COMMENT |
| LOW | adk/middlewares/reduction/internal/clear_tool_result.go | 118 | // Step 1: Calculate total tool result tokens | COMMENT |
| LOW | adk/middlewares/reduction/internal/clear_tool_result.go | 131 | // Step 2: Calculate the index from which to protect recent messages | COMMENT |
| LOW | adk/middlewares/reduction/internal/clear_tool_result.go | 147 | // Step 3: Clear tool results outside the protected range (before recentStartIdx) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | adk/turn_loop_test.go | 6171 | // Step 1: Push item A (no preempt). Wait for agent to start. | COMMENT |
| LOW⚡ | adk/turn_loop_test.go | 6175 | // Step 2: Push item B with preempt. This cancels the first turn. | COMMENT |
| LOW⚡ | adk/turn_loop_test.go | 6181 | // Step 3: Push item C with preempt. This is the scenario that triggers | COMMENT |
| LOW | adk/middlewares/reduction/internal/clear_tool_result.go | 118 | // Step 1: Calculate total tool result tokens | COMMENT |
| LOW | adk/middlewares/reduction/internal/clear_tool_result.go | 131 | // Step 2: Calculate the index from which to protect recent messages | COMMENT |
| LOW | adk/middlewares/reduction/internal/clear_tool_result.go | 147 | // Step 3: Clear tool results outside the protected range (before recentStartIdx) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | adk/middlewares/dynamictool/toolsearch/toolsearch.go | 111 | // Example usage: | COMMENT |
| LOW | adk/middlewares/skill/skill.go | 250 | // Example usage: | COMMENT |
| LOW | adk/middlewares/filesystem/filesystem.go | 385 | // Example usage: | COMMENT |
| LOW | flow/retriever/parent/parent.go | 57 | // Example usage: | COMMENT |
| LOW | flow/indexer/parent/parent.go | 71 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | compose/interrupt.go | 144 | // This function is robust and can handle several types of errors from sub-processes: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | adk/turn_loop.go | 185 | // └────────abortPlanningTurn─────────────────────────────┘ | COMMENT |