AI Slop Code Risk Monitor

dexie/Dexie.js

SlopCodeMonitor badge for dexie/Dexie.js Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

A Minimalistic Wrapper for IndexedDB

1.0 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for dexie/Dexie.js, a TypeScript project with 14,673 GitHub stars. SynthScan examined 121,851 lines of code across 752 source files, recording 98 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 1.0 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.0
Adjusted Signal
1.0
Raw Pattern Score
100%
Time Factor
2026-10-30
Last Push
14.7K
Stars
TypeScript
Language
121.9K
Lines of Code
752
Files
98
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 93 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.4/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 2.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 59 finding(s).

PR Review Velocity Impact 4.7/100 · LOW

Which changes need focused human review? 98 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 0MEDIUM 5LOW 92

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 98 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers55 hits · 55 pts
SeverityFileLineSnippetContext
LOWtest/is-idb-and-promise-compatible.js14export async function isIdbAndPromiseCompatible() {CODE
LOWtest/tests-upgrading.js64 function checkTransactionObjectStores(t, expected) {CODE
LOWtest/tests-open.js579async function withSafariLikeBrowserWithoutGlobalIndexedDB(fn) {CODE
LOWtest/tests-promise.js9function createDirectlyResolvedPromise() {CODE
LOWtest/babel-polyfill/polyfill.min.js3}})},{32:32}],208:[function(t,n,r){var e=t(32),i=t(7),o=Object.isExtensible;e(e.S,"Reflect",{isExtensible:function isExtCODE
LOWaddons/y-dexie/src/getOrCreateDocument.ts7export function getOrCreateDocument(CODE
LOWaddons/Dexie.Observable/src/Dexie.Observable.js334 function onLatestRevisionIncremented(dbname, latestRevision) {CODE
LOW…ns/Dexie.Observable/src/override-create-transaction.js1export default function initOverrideCreateTransaction(db, wakeupObservers) {CODE
LOW…ns/Dexie.Observable/src/override-create-transaction.js2 return function overrideCreateTransaction(origFunc) {CODE
LOWaddons/Dexie.Syncable/src/finally-commit-all-changes.js4export default function initFinallyCommitAllChanges(db, node) {CODE
LOWaddons/Dexie.Syncable/src/connect-protocol.js256 function continueUsingReactPattern(continuation) {CODE
LOWaddons/Dexie.Syncable/src/get-or-create-sync-node.js6 return function getOrCreateSyncNode(options) {CODE
LOW…dons/Dexie.Syncable/src/save-to-uncommitted-changes.js1export default function initSaveToUncommittedChanges(db, node) {CODE
LOW…t-local-changes-for-node/get-local-changes-for-node.js7export default function initGetLocalChangesForNode(CODE
LOW…-for-node/get-base-revision-and-max-client-revision.js1export default function getBaseRevisionAndMaxClientRevision(node) {CODE
LOW…t-local-changes-for-node/get-changes-since-revision.js4export default function initGetChangesSinceRevision(db, node, hasMoreToGive) {CODE
LOW…local-changes-for-node/get-table-objects-as-changes.js4export default function initGetTableObjectsAsChanges(CODE
LOW…s/dexie-cloud/src/yjs/createYClientUpdateObservable.ts10export function createYClientUpdateObservable(CODE
LOW…xie-cloud/src/yjs/listYClientMessagesAndStateVector.ts26export async function listYClientMessagesAndStateVector(CODE
LOW…s/dexie-cloud/src/middlewares/blobResolveMiddleware.ts41export function createBlobResolveMiddleware(CODE
LOW…s/dexie-cloud/src/middlewares/blobResolveMiddleware.ts185function createBlobResolvingCursor(CODE
LOW…/src/middlewares/createImplicitPropSetterMiddleware.ts6export function createImplicitPropSetterMiddleware(CODE
LOW…-cloud/src/middlewares/createIdGenerationMiddleware.ts18export function createIdGenerationMiddleware(CODE
LOW…ud/src/middlewares/createMutationTrackingMiddleware.ts39export function createMutationTrackingMiddleware({CODE
LOW…ons/dexie-cloud/src/sync/getLatestRevisionsPerTable.ts3export function getLatestRevisionsPerTable(CODE
LOWaddons/dexie-cloud/src/sync/blobOffloading.ts436export function hasLargeBlobsInOperations(CODE
LOWaddons/dexie-cloud/src/sync/connectWebSocket.ts44async function waitAndReconnectWhenUserDoesSomething(error: Error) {CODE
LOWaddons/dexie-cloud/src/sync/numUnsyncedMutations.ts8export function getNumUnsyncedMutationsObservable(db: DexieCloudDB) {CODE
LOWaddons/dexie-cloud/src/sync/ratelimit.ts20export function updateSyncRateLimitDelays(db: DexieCloudDB, res: Response) {CODE
LOWaddons/dexie-cloud/src/sync/messagesFromServerQueue.ts26export function MessagesFromServerConsumer(db: DexieCloudDB) {CODE
LOW…exie-cloud/src/sync/modifyLocalObjectsWithNewUserId.ts8export async function modifyLocalObjectsWithNewUserId(CODE
LOWaddons/dexie-cloud/src/sync/registerSyncEvent.ts39export async function registerPeriodicSyncEvent(db: DexieCloudDB) {CODE
LOWaddons/dexie-cloud/src/sync/sync.ts430async function deleteObjectsFromRemovedRealms(CODE
LOWaddons/dexie-cloud/src/sync/sync.ts496export function filterServerChangesThroughAddedClientChanges(CODE
LOWaddons/dexie-cloud/src/helpers/visibilityState.ts4export function createVisibilityStateObservable() {CODE
LOW…dexie-cloud/src/helpers/throwVersionIncrementNeeded.ts3export function throwVersionIncrementNeeded() {CODE
LOW…s/dexie-cloud/src/helpers/getTableFromMutationTable.ts1export function getTableFromMutationTable(mutationTable: string) {CODE
LOW…/src/async-generators/getFetchResponseBodyGenerator.ts1export function getFetchResponseBodyGenerator(res: Response) {CODE
LOWsamples/remote-sync/websocket/websocketserver-shim.js15 function EmulatedWebSocketServerFactory() {CODE
LOWsamples/remote-sync/ajax/jquery-2.1.0.js5562 function computePixelPositionAndBoxSizingReliable() {CODE
LOWsamples/remote-sync/ajax/jquery-2.1.0.js7505function addToPrefiltersOrTransports( structure ) {CODE
LOWsamples/remote-sync/ajax/jquery-2.1.0.js7537function inspectPrefiltersOrTransports( structure, options, originalOptions, jqXHR ) {CODE
LOW…query/cache/adjust-optimistic-request-from-failures.ts8export function adjustOptimisticFromFailures(CODE
LOWsrc/classes/transaction/transaction-constructor.ts25export function createTransactionConstructor(db: Dexie) {CODE
LOWsrc/classes/collection/collection-constructor.ts24export function createCollectionConstructor(db: Dexie) {CODE
LOWsrc/classes/where-clause/where-clause-constructor.ts20export function createWhereClauseConstructor(db: Dexie) {CODE
LOWsrc/classes/version/schema-helpers.ts557export function adjustToExistingIndexNames(CODE
LOWsrc/functions/chaining-functions.js87export function reverseStoppableEventChain(f1, f2) {CODE
LOWsrc/functions/workaround-undefined-primkey.ts6export function workaroundForUndefinedPrimKey(CODE
LOWsrc/functions/quirks.ts7export function getNativeGetDatabaseNamesFn(indexedDB) {CODE
LOWsrc/functions/event-wrappers.ts32export function hookedEventSuccessHandler(resolve) {CODE
LOWsrc/helpers/promise.js575function addPossiblyUnhandledError(promise) {CODE
LOWsrc/helpers/promise.js804function nativeAwaitCompatibleWrap(fn, zone, possibleAwait, cleanup) {CODE
LOWsrc/dbcore/get-key-extractor.ts15export function getSinglePathKeyExtractor(keyPath: string) {CODE
LOWsrc/dbcore/virtual-index-middleware.ts43export function createVirtualIndexMiddleware(down: DBCore): DBCore {CODE
Over-Commented Block35 hits · 35 pts
SeverityFileLineSnippetContext
LOWtest/tests-2330.js1// Regression guard for issue #2330 (minified bundle corrupts updating-hook chain).COMMENT
LOWtest/tests-upgrading.js21 // V Remove indexesCOMMENT
LOWtest/tests-crud-hooks.js341COMMENT
LOWaddons/Dexie.Syncable/src/syncable-connect.js81 // Returning here will resume db.on('ready') and resume all queries thatCOMMENT
LOWaddons/Dexie.Syncable/src/Dexie.Syncable.js121 // connection so that it will continue syncing as long as the database is open.COMMENT
LOW…/src/middlewares/createImplicitPropSetterMiddleware.ts61 const key = table.schema.primaryKey.extractKey?.(obj);COMMENT
LOWaddons/dexie-cloud/src/sync/messagesFromServerQueue.ts161 // Verify again in ACID tx that we're on same server revision.COMMENT
LOWaddons/dexie-cloud/src/sync/sync.ts321 // We should not clear out anything now.COMMENT
LOWaddons/dexie-cloud/src/authentication/login.ts21 ) {COMMENT
LOW…ons/dexie-cloud/src/authentication/interactWithUser.ts101 let firstPrompt = true;COMMENT
LOWsamples/open-existing-db/dump-databases.html41 // there is no native API to list existing databases, but Dexie is still capable of dumping the version and scheCOMMENT
LOWsamples/vue/src/database.js1import Dexie from 'dexie';COMMENT
LOWsamples/vue/src/database.js21 todos: '++id,done',COMMENT
LOWsamples/dexie-cloud-todo-app/src/setupTests.ts1// jest-dom adds custom vitest matchers for asserting on DOM nodes.COMMENT
LOW…dexie-cloud-todo-app/src/helpers/simplify-debugging.ts1import Dexie from "dexie";COMMENT
LOWsamples/remote-sync/websocket/WebSocketSyncProtocol.js21 // The following vars are needed because we must know which callback to ack when server sends it's ack to usCOMMENT
LOWsamples/remote-sync/websocket/WebSocketSyncProtocol.js81 onError("Socket closed: " + event.reason, RECONNECT_DELAY);COMMENT
LOWsamples/remote-sync/websocket/WebSocketSyncServer.js221 // ----------------------------------------------COMMENT
LOWsamples/remote-sync/ajax/AjaxSyncProtocol.js1/// <reference path="../../dist/dexie.js" />COMMENT
LOWsamples/remote-sync/ajax/AjaxSyncProtocol.js41 dataType: 'json',COMMENT
LOWsamples/remote-sync/ajax/jquery-2.1.0.js3561 get: function( owner, key ) {COMMENT
LOW.github/workflows/publish.yml1name: PublishCOMMENT
LOWsrc/globals/global-events.ts1import Events from '../helpers/Events';COMMENT
LOWsrc/live-query/observability-middleware.ts141 // Merge the mutated parts from the request into the transaction's mutatedPartsCOMMENT
LOWsrc/live-query/observability-middleware.ts241 ) {COMMENT
LOWsrc/live-query/observability-middleware.ts301 pkRangeSet.addKeys(pKeys);COMMENT
LOWsrc/live-query/live-query.ts141 currentValue = result;COMMENT
LOWsrc/live-query/cache/cache-middleware.ts261 const { requery, signal } = PSD as LiveQueryContext;COMMENT
LOWsrc/classes/dexie/dexie-static-props.ts101 }COMMENT
LOWsrc/classes/dexie/dexie-static-props.ts221COMMENT
LOWsrc/classes/dexie/dexie-static-props.ts241 .reduce((p, c, i) => p + c / Math.pow(10, i * 2)),COMMENT
LOWsrc/classes/table/table.ts81 // still as of 2018-10-10 has problems keeping a transactionCOMMENT
LOWsrc/errors/errors.js101COMMENT
LOWsrc/helpers/rangeset.ts241 //COMMENT
LOWsrc/helpers/promise.js21//COMMENT
Decorative Section Separators4 hits · 12 pts
SeverityFileLineSnippetContext
MEDIUM…exie-cloud/src/authentication/otpFetchTokenCallback.ts52 // ── Non-interactive paths ──────────────────────────────────────────────COMMENT
MEDIUM…exie-cloud/src/authentication/otpFetchTokenCallback.ts112 // ── Interactive paths ──────────────────────────────────────────────────COMMENT
MEDIUM…exie-cloud/src/authentication/otpFetchTokenCallback.ts219 // ── POST /token (step 1) ───────────────────────────────────────────────COMMENT
MEDIUM…exie-cloud/src/authentication/otpFetchTokenCallback.ts258 // ── POST /token (step 2: OTP verification) ─────────────────────────COMMENT
Hallucination Indicators1 hit · 10 pts
SeverityFileLineSnippetContext
CRITICALsamples/remote-sync/ajax/jquery-2.1.0.js6968jQuery.each( jQuery.expr.match.bool.source.match( /\w+/g ), function( i, name ) {CODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMsamples/remote-sync/ajax/jquery-2.1.0.js9066// understands anonymous AMD modules. A named AMD is safest and most robustCOMMENT
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOW.github/workflows/publish.yml149 # Check if this package should be publishedCOMMENT
Overly Generic Function Names1 hit · 1 pts
SeverityFileLineSnippetContext
LOWtest/tests-asyncawait.js531 `async function doSomething() {CODE