AI Slop Code Risk Monitor

darklang/dark

SlopCodeMonitor badge for darklang/dark Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Darklang main repo, including language, backend, and infra

4.0 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for darklang/dark, a F# project with 2,175 GitHub stars. SynthScan examined 25,621 lines of code across 144 source files, recording 89 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 4.0 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

4.0
Adjusted Signal
4.0
Raw Pattern Score
100%
Time Factor
2026-10-30
Last Push
2.2K
Stars
F#
Language
25.6K
Lines of Code
144
Files
89
Pattern Hits
2026-10-31
Scan Date
0.01
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 15.7/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 82 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 13.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 59 finding(s).

PR Review Velocity Impact 18.2/100 · LOW

Which changes need focused human review? 89 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 2MEDIUM 2LOW 85

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 89 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers53 hits · 56 pts
SeverityFileLineSnippetContext
LOW⚡scripts/testing/test-build-planning.py104 def test_fsharp_source_takes_a_quick_build_in_dev_and_a_full_one_in_ci(self):CODE
LOW⚡scripts/testing/test-build-planning.py114 def test_fsproj_takes_a_full_build(self):CODE
LOW⚡scripts/testing/test-build-planning.py117 def test_dark_package_reloads_packages(self):CODE
LOW⚡scripts/testing/test-build-planning.py121 def test_migration_runs_migrations(self):CODE
LOW⚡scripts/testing/test-build-planning.py124 def test_unrecognised_file_routes_nowhere(self):CODE
LOW⚡scripts/testing/test-build-planning.py138 def test_fsharp_change_reaches_the_package_reload(self):CODE
LOW⚡scripts/testing/test-build-planning.py148 def test_full_build_replaces_the_quick_one(self):CODE
LOW⚡scripts/testing/test-build-planning.py153 def test_tests_are_not_planned_unless_asked_for(self):CODE
LOW⚡scripts/testing/test-build-planning.py161 def test_a_full_build_satisfies_a_file_wanting_a_quick_one(self):CODE
LOW⚡scripts/testing/test-build-planning.py167 def test_a_quick_build_does_not_satisfy_a_file_wanting_a_full_one(self):CODE
LOW⚡scripts/testing/test-build-planning.py174 def test_editor_temp_files_are_ignored(self):CODE
LOW⚡scripts/testing/test-build-planning.py183 def test_gitignored_paths_are_ignored(self):CODE
LOW⚡scripts/testing/test-build-planning.py191 def test_no_index_means_build_everything(self):CODE
LOW⚡scripts/testing/test-build-planning.py195 def test_a_touched_file_with_the_same_contents_is_not_changed(self):CODE
LOW⚡scripts/testing/test-build-planning.py204 def test_an_edited_file_is_changed(self):CODE
LOW⚡scripts/testing/test-build-planning.py211 def test_a_deleted_file_is_changed(self):CODE
LOW⚡scripts/testing/test-build-planning.py218 def test_roots_narrow_the_comparison(self):CODE
LOW⚡scripts/testing/test-build-planning.py227 def test_a_file_needing_no_action_stops_being_offered(self):CODE
LOW⚡scripts/testing/test-build-planning.py399 def test_a_lint_only_build_does_not_claim_the_tree_is_built(self):CODE
LOW⚡scripts/testing/test-build-planning.py405 def test_a_skipped_build_step_does_not_count_as_built(self):CODE
LOW⚡scripts/testing/test-build-planning.py411 def test_an_interrupted_build_is_reported_rather_than_believed(self):CODE
LOWscripts/testing/test-build-planning.py240 def test_recording_one_file_does_not_claim_the_others(self):CODE
LOWscripts/testing/test-build-planning.py251 def test_recording_with_no_baseline_is_a_no_op(self):CODE
LOWscripts/testing/test-build-planning.py259 def test_merge_refreshes_by_content_not_timestamp(self):CODE
LOWscripts/testing/test-build-planning.py283 def test_merge_leaves_uncovered_files_looking_changed(self):CODE
LOWscripts/testing/test-build-planning.py303 def test_a_finished_build_is_ok_and_the_tree_is_clean(self):CODE
LOWscripts/testing/test-build-planning.py315 def test_a_failed_build_is_fatal_for_anything_downstream(self):CODE
LOWscripts/testing/test-build-planning.py329 def test_reverting_a_change_that_broke_the_build_unsticks_you(self):CODE
LOWscripts/testing/test-build-planning.py354 def test_an_edit_after_a_build_warns_but_is_not_fatal(self):CODE
LOWscripts/testing/test-build-planning.py369 def test_either_configuration_counts_as_built(self):CODE
LOWscripts/testing/test-build-planning.py377 def test_a_wiped_build_directory_beats_a_clean_index(self):CODE
LOWscripts/testing/test-build-planning.py437 def test_release_dockerfile_sdk_matches_global_json(self):CODE
LOW.circleci/test_collect_diagnostics.py40 def test_success_keeps_diagnostics_but_not_databases_or_linked_files(self):CODE
LOW.circleci/test_collect_diagnostics.py64 def test_large_logs_keep_middle_errors_and_all_bytes_beyond_old_budget(self):CODE
LOW.circleci/test_collect_diagnostics.py77 def test_every_report_is_kept_even_beyond_old_file_count_limit(self):CODE
LOW.circleci/test_collect_diagnostics.py88 def test_empty_rundir_still_produces_a_manifest(self):CODE
LOW.circleci/test_collect_diagnostics.py93 def test_recollection_replaces_old_logs_without_archiving_its_own_output(self):CODE
LOW.circleci/test_collect_diagnostics.py115 def test_successful_checks_and_unrelated_databases_are_not_saved(self):CODE
LOW⚡.circleci/test_collect_diagnostics.py127 def test_failed_split_run_saves_both_halves_stores(self):CODE
LOW⚡.circleci/test_collect_diagnostics.py136 def test_successful_run_has_no_database_artifacts(self):CODE
LOW⚡.circleci/test_collect_diagnostics.py144 def test_failure_snapshot_includes_committed_wal_and_survives_collection(self):CODE
LOW.circleci/test_collect_diagnostics.py164 def test_missing_corrupt_and_outside_databases_are_reported(self):CODE
LOW.circleci/test_collect_diagnostics.py179 def test_backup_timeout_is_reported_instead_of_a_partial_snapshot(self):CODE
LOW.circleci/test_collect_diagnostics.py188 def test_interrupted_check_is_saved_and_timeout_exit_is_preserved(self):CODE
LOW.circleci/test_collect_diagnostics.py199 def test_real_gate_runner_records_only_failed_gate_stores(self):CODE
LOW.circleci/test_collect_diagnostics.py227 def test_every_registered_gate_has_an_explicit_database_mapping(self):STRING
LOW.circleci/test_collect_diagnostics.py233 def test_first_day_keeps_failed_stores_and_removes_successful_stores(self):STRING
LOW⚡.circleci/test_artifact_validation.py107 def test_success_returns_without_waiting_for_watchdog_and_stops_timers(self):STRING
LOW⚡.circleci/test_artifact_validation.py117 def test_command_failure_keeps_exit_code_and_output(self):STRING
LOW⚡.circleci/test_artifact_validation.py124 def test_sigkill_is_not_misreported_as_a_timeout(self):STRING
LOW⚡.circleci/test_artifact_validation.py130 def test_timeout_stops_command_and_child_holding_output_pipe(self):STRING
LOW⚡.circleci/test_artifact_validation.py136 def test_output_comparison_still_works_without_waiting_for_each_timer(self):STRING
LOW⚡.circleci/test_artifact_validation.py142 def test_success_cleans_up_background_child_holding_output_pipe(self):STRING
Over-Commented Block20 hits · 20 pts
SeverityFileLineSnippetContext
LOWinstall.sh1#!/bin/shCOMMENT
LOWbackend/testfiles/data/naughty-strings.txt101# Special CharactersCOMMENT
LOWbackend/testfiles/data/naughty-strings.txt121€‚ƒ„†‡ˆ‰Š‹ŒŽ‘’“”•–—˜™š›œžŸCOMMENT
LOWbackend/testfiles/data/naughty-strings.txt201COMMENT
LOW.devcontainer/devcontainer.json81 "workspaceMount": "source=${localWorkspaceFolder},target=/home/dark/app,type=bind,consistency=delegated", // for localCOMMENT
LOWlater/experiments/armv7-aot/time64-shim.c1// Supplies the glibc __*_time64 symbols for 32-bit ARM builds against anCOMMENT
LOWlater/experiments/armv7-aot/time64-shim.c21//COMMENT
LOWlater/backend/src/Wasm/build.sh1#!/usr/bin/env bashCOMMENT
LOWlater/backend/src/Wasm/make-store.sh1#!/usr/bin/env bashCOMMENT
LOWlater/backend/src/Wasm/make-store.sh61while read -r t; doCOMMENT
LOWlater/backend/src/Wasm/wwwroot/site.js1// Shared by the pages: how to call into the runtime, how to boot it and load the store,COMMENT
LOWlater/backend/src/Wasm/wwwroot/site.js41 });COMMENT
LOWlater/.vscode/launch-extension.json1// RESTORE: .vscode/launch.jsonCOMMENT
LOW.circleci/config.yml1version: 2.1COMMENT
LOW.circleci/config.yml41 # - dark-base is ubuntu:24.04, and an AOT binary built there requiresCOMMENT
LOW.circleci/config.yml341 # nothing consumed.COMMENT
LOW.circleci/config.yml401 rm -rf clis && mkdir clisCOMMENT
LOW.circleci/config.yml541 objdump -T "$(ls clis/darklang-*-linux-x64)" \COMMENT
LOW.circleci/config.yml721 # When switched on, this tags every green merge to main with the next v0.0.N,COMMENT
LOW.circleci/config.yml741 requires:COMMENT
Empty Error Handlers2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHscripts/perf/view-telemetry.py81except:CODE
HIGH.circleci/test_artifact_validation.py89except ProcessLookupError:CODE
Deep Nesting7 hits · 7 pts
SeverityFileLineSnippetContext
LOWscripts/perf/view-telemetry.py46CODE
LOWscripts/perf/_bench.py314CODE
LOWscripts/perf/_bench.py412CODE
LOWscripts/perf/_bench.py582CODE
LOW.circleci/collect_diagnostics.py69CODE
LOW.circleci/collect_diagnostics.py145CODE
LOW.circleci/collect_diagnostics.py176CODE
Excessive Try-Catch Wrapping4 hits · 5 pts
SeverityFileLineSnippetContext
LOWscripts/perf/_bench.py161 except Exception:CODE
LOWscripts/perf/_bench.py327 except Exception:CODE
LOWscripts/perf/_bench.py362 except Exception:CODE
MEDIUMscripts/perf/_bench.py356def commit():CODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMscripts/perf/_bench.py92# `packages/` would be loaded as package items, and a loose file elsewhere drifts from the harness thatCOMMENT
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWlater/scripts/launch-extension.sh5# Usage:COMMENT
Unused Imports1 hit · 1 pts
SeverityFileLineSnippetContext
LOWlater/scripts/testing/test-interactive.py6CODE