Usability-first dotfiles
This report summarizes scanner evidence for end-4/dots-hyprland, a QML project with 16,322 GitHub stars. SynthScan examined 25,509 lines of code across 173 source files, recording 132 pattern matches distributed across 16 syntactic categories. The legacy adjusted pattern signal is 13.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 69 finding(s).
Are imports declared and package/API names verified? 43 finding(s).
Are wrappers, guards, and repeated structures necessary? 24 finding(s).
Which changes need focused human review? 132 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 132 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | dots/.config/quickshell/ii/translations/id_ID.json | 57 | "No API key\nSet it with /key YOUR_API_KEY": "Tidak ada kunci API\nAtur dengan /key KUNCI_API_ANDA", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/id_ID.json | 171 | "API key is set\nChange with /key YOUR_API_KEY": "Kunci API sudah diatur\nUbah dengan /key KUNCI_API_ANDA", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/tr_TR.json | 57 | "No API key\nSet it with /key YOUR_API_KEY": "API anahtarı yok\n/key API_ANAHTARINIZ ile ayarlayın", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/tr_TR.json | 171 | "API key is set\nChange with /key YOUR_API_KEY": "API anahtarı ayarlandı\n/key API_ANAHTARINIZ ile değiştirin", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/tr_TR.json | 503 | "Language not listed or incomplete translations?\nYou can choose to generate translations for it with Gemini.\n1. Open | CODE |
| HIGH | dots/.config/quickshell/ii/translations/ja_JP.json | 331 | "No API key\nSet it with /key YOUR_API_KEY": "APIキーがありません\n/key YOUR_API_KEYで設定してください", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/ja_JP.json | 422 | "API key is set\nChange with /key YOUR_API_KEY": "APIキーが設定済み\n/key YOUR_API_KEYで変更できます", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/zh_CN.json | 307 | "No API key\nSet it with /key YOUR_API_KEY": "无 API 密钥\n使用 /key YOUR_API_KEY 设置", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/zh_CN.json | 310 | "API key is set\nChange with /key YOUR_API_KEY": "API 密钥已设置\n使用 /key YOUR_API_KEY 更改", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/zh_CN.json | 449 | "Language not listed or incomplete translations?\nYou can choose to generate translations for it with Gemini.\n1. Open | CODE |
| HIGH | dots/.config/quickshell/ii/translations/it_IT.json | 226 | "No API key\nSet it with /key YOUR_API_KEY": "Nessuna chiave API\nUsa /key per impostarla", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/it_IT.json | 238 | "API key is set\nChange with /key YOUR_API_KEY": "Chiave API impostata\nUsa /key per cambiarla", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/he_HE.json | 245 | "API key is set\nChange with /key YOUR_API_KEY": "מפתח API מוגדר\nשנה עם /key YOUR_API_KEY", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/he_HE.json | 321 | "No API key\nSet it with /key YOUR_API_KEY": "אין מפתח API\nהגדר אותו עם /key YOUR_API_KEY", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/en_US.json | 57 | "No API key\nSet it with /key YOUR_API_KEY": "No API key\nSet it with /key YOUR_API_KEY", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/en_US.json | 172 | "API key is set\nChange with /key YOUR_API_KEY": "API key is set\nChange with /key YOUR_API_KEY", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/en_US.json | 508 | "Language not listed or incomplete translations?\nYou can choose to generate translations for it with Gemini.\n1. Open | CODE |
| HIGH | dots/.config/quickshell/ii/translations/es_MX.json | 297 | "Language not listed or incomplete translations?\nYou can choose to generate translations for it with Gemini.\n1. Open | CODE |
| HIGH | dots/.config/quickshell/ii/translations/es_MX.json | 450 | "API key is set\nChange with /key YOUR_API_KEY": "Clave API establecida\nCámbiala con /key TU_CLAVE_API", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/es_MX.json | 653 | "No API key\nSet it with /key YOUR_API_KEY": "Sin clave API\nEstablécela con /key TU_CLAVE_API", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/vi_VN.json | 319 | "No API key\nSet it with /key YOUR_API_KEY": "Không có API key\nĐặt bằng /key API_KEY", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/vi_VN.json | 328 | "API key is set\nChange with /key YOUR_API_KEY": "API key đã đặt\nThay đổi bằng /key API_KEY", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/ru_RU.json | 52 | "No API key\nSet it with /key YOUR_API_KEY": "Нет API-ключа\nУстановите: /key ВАШ_КЛЮЧ", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/ru_RU.json | 159 | "API key is set\nChange with /key YOUR_API_KEY": "API-ключ установлен\nИзменить: /key ВАШ_КЛЮЧ", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/ru_RU.json | 469 | "Language not listed or incomplete translations?\nYou can choose to generate translations for it with Gemini.\n1. Open | CODE |
| HIGH | dots/.config/quickshell/ii/translations/de_DE.json | 57 | "No API key\nSet it with /key YOUR_API_KEY": "Kein API-Schlüssel\nSetze ihn mit /key DEIN_API_SCHLUESSEL", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/de_DE.json | 171 | "API key is set\nChange with /key YOUR_API_KEY": "API-Schlüssel ist gesetzt\nÄndern mit /key DEIN_API_SCHLUESSEL", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/de_DE.json | 503 | "Language not listed or incomplete translations?\nYou can choose to generate translations for it with Gemini.\n1. Open | CODE |
| HIGH | dots/.config/quickshell/ii/translations/pt_BR.json | 36 | "Language not listed or incomplete translations?\nYou can choose to generate translations for it with Gemini.\n1. Open | CODE |
| HIGH | dots/.config/quickshell/ii/translations/pt_BR.json | 39 | "API key is set\nChange with /key YOUR_API_KEY": "Chave API definida\nAltere com /key SUA_CHAVE_API", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/pt_BR.json | 486 | "No API key\nSet it with /key YOUR_API_KEY": "Sem chave API\nDefina com /key SUA_CHAVE_API", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/fr_FR.json | 57 | "No API key\nSet it with /key YOUR_API_KEY": "Aucune clé API\nDéfinissez-la avec /key VOTRE_CLÉ_API", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/fr_FR.json | 172 | "API key is set\nChange with /key YOUR_API_KEY": "Clé API définie\nModifiez avec /key VOTRE_CLÉ_API", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/fr_FR.json | 508 | "Language not listed or incomplete translations?\nYou can choose to generate translations for it with Gemini.\n1. Open | CODE |
| HIGH | dots/.config/quickshell/ii/translations/uk_UA.json | 307 | "No API key\nSet it with /key YOUR_API_KEY": "Немає API ключа\nВстановіть його можна командою /key YOUR_API_KEY", | CODE |
| HIGH | dots/.config/quickshell/ii/translations/uk_UA.json | 318 | "API key is set\nChange with /key YOUR_API_KEY": "API ключ встановлено\nЗмінити можна командою /key YOUR_API_KEY", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdata/lib/functions.sh | 89 | # Check if sudo is available | COMMENT |
| LOW | sdata/lib/functions.sh | 198 | # Check if both files exist | COMMENT |
| LOW | sdata/lib/functions.sh | 254 | # Check if file path starts with allowed directory | COMMENT |
| LOW | sdata/subcmd-install/3.files-exp.sh | 93 | # Check if pattern should be processed based on user preferences | COMMENT |
| LOW | sdata/subcmd-install/3.files-exp.sh | 116 | # Check if paths exist | COMMENT |
| LOW | sdata/subcmd-install/3.files-exp.sh | 178 | # Check if pattern should be processed | COMMENT |
| LOW | sdata/subcmd-install/3.files-exp.sh | 205 | # Check if source exists | COMMENT |
| LOW | sdata/subcmd-exp-update/exp-update-tester.sh | 664 | # Check if CREATED_DIRS has the entry | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 267 | # Check if already created in this run | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 526 | # Check if HEAD@{1} exists before trying to use it | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 764 | # Check if the process is still running | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 794 | # Check if we're in a git repository | COMMENT |
| LOW⚡ | sdata/subcmd-exp-update/0.run.sh | 898 | # Check if required Arch Linux tools are available | COMMENT |
| LOW | …s/.config/hypr/hyprland/scripts/start_geoclue_agent.sh | 3 | # Check if GeoClue agent is already running | COMMENT |
| LOW | …/hypr/hyprland/scripts/ai/show-loaded-ollama-models.sh | 54 | for ((i=0; i<${#model_name_paths[@]}; i++)); do # Iterate over the array of modelname,blob-path | CODE |
| LOW | …/hypr/hyprland/scripts/ai/show-loaded-ollama-models.sh | 57 | if [ "${fields[1]}" == "$blob" ]; then # Check if current 'field' matches a blob | CODE |
| LOW | …onfig/hypr/hyprland/scripts/ai/primary-buffer-query.sh | 36 | # Check if content is a single line and no longer than 30 characters | COMMENT |
| LOW | …fig/quickshell/ii/scripts/hyprland/hyprconfigurator.py | 58 | # Check if line matches a key to be reset | COMMENT |
| LOW | …fig/quickshell/ii/scripts/hyprland/hyprconfigurator.py | 67 | # Check if line matches a key to be set | COMMENT |
| LOW | dots/.config/quickshell/ii/scripts/colors/applycolor.sh | 12 | term_alpha=100 #Set this to < 100 make all your terminals transparent | CODE |
| LOW | dots/.config/quickshell/ii/scripts/colors/applycolor.sh | 31 | # Check if terminal escape sequence template exists | COMMENT |
| LOW | dots/.config/quickshell/ii/scripts/colors/applycolor.sh | 52 | # Check if terminal escape sequence template exists | COMMENT |
| LOW | dots/.config/quickshell/ii/scripts/colors/applycolor.sh | 81 | # Check if terminal theming is enabled in config | COMMENT |
| LOW | dots/.config/quickshell/ii/scripts/colors/switchwall.sh | 16 | # Check if Qt app theming is enabled in config | COMMENT |
| LOW | dots/.config/quickshell/ii/scripts/colors/switchwall.sh | 287 | # Check if app and shell theming is enabled in config | COMMENT |
| LOW | …uickshell/ii/translations/tools/translation-manager.py | 239 | # Check if directories exist | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | sdata/dist-fedora/install-deps.sh | 3 | # ------------------------- | COMMENT |
| MEDIUM⚡ | sdata/dist-fedora/install-deps.sh | 5 | # ------------------------- | COMMENT |
| MEDIUM⚡ | sdata/dist-fedora/install-deps.sh | 11 | # ------------------------- | COMMENT |
| MEDIUM⚡ | sdata/dist-fedora/install-deps.sh | 13 | # ------------------------- | COMMENT |
| MEDIUM | sdata/dist-fedora/install-deps.sh | 42 | # ------------------------- | COMMENT |
| MEDIUM | sdata/dist-fedora/install-deps.sh | 44 | # ------------------------- | COMMENT |
| MEDIUM | sdata/subcmd-install/3.files-exp.sh | 26 | # ============================================================================= | COMMENT |
| MEDIUM | sdata/subcmd-install/3.files-exp.sh | 151 | # ============================================================================= | COMMENT |
| MEDIUM | sdata/subcmd-install/3.files-exp.sh | 153 | # ============================================================================= | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | sdata/subcmd-install/3.files.sh | 47 | # NOTE: This function is only for using in other functions | COMMENT |
| LOW⚡ | sdata/subcmd-install/3.files.sh | 54 | # NOTE: This function is only for using in other functions | COMMENT |
| LOW⚡ | sdata/subcmd-install/3.files.sh | 61 | # NOTE: This function is only for using in other functions | COMMENT |
| LOW⚡ | sdata/subcmd-install/3.files.sh | 68 | # NOTE: This function is only for using in other functions | COMMENT |
| LOW⚡ | sdata/subcmd-install/3.files.sh | 78 | # NOTE: This function is only for using in other functions | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 823 | # Step 1: Pull latest commits | COMMENT |
| LOW⚡ | sdata/subcmd-exp-update/0.run.sh | 892 | # Step 2: Handle package building | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 1002 | # Step 3: Update configuration files | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 1128 | # Step 4: Update script permissions | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …fig/quickshell/ii/scripts/hyprland/hyprconfigurator.py | 102 | except Exception as e: | CODE |
| MEDIUM | …fig/quickshell/ii/scripts/hyprland/hyprconfigurator.py | 105 | print(f"Error saving file: {e}") | CODE |
| MEDIUM | …fig/quickshell/ii/scripts/hyprland/hyprconfigurator.py | 135 | print("Error: Must specify at least one key to set or reset.") | CODE |
| MEDIUM | …s/.config/quickshell/ii/scripts/images/find_regions.py | 38 | print(f'Error: Could not load image {image_path}', file=sys.stderr) | CODE |
| MEDIUM | …uickshell/ii/translations/tools/translation-cleaner.py | 109 | print(f"Error: Source language file does not exist: {source_file}") | CODE |
| LOW | …uickshell/ii/translations/tools/translation-manager.py | 75 | except Exception: | CODE |
| MEDIUM | …uickshell/ii/translations/tools/translation-manager.py | 121 | print(f"Error: Cannot save translation file {file_path}: {e}") | CODE |
| MEDIUM | …uickshell/ii/translations/tools/translation-manager.py | 241 | print(f"Error: Source code directory does not exist: {source_dir}") | CODE |
| LOW | …config/quickshell/ii/services/gCloud/token_from_key.py | 29 | except Exception as e: | CODE |
| MEDIUM | …config/quickshell/ii/services/gCloud/token_from_key.py | 8 | def get_token(json_str): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | sdata/subcmd-exp-update/0.run.sh | 11 | # I don't really care if it's AI-generated or not, it's just an extra option in addition to ./setup install, so as long | COMMENT |
| HIGH | sdata/subcmd-exp-update/0.run.sh | 15 | # This also applies for exp-update.tester.sh, TBH I don't think that file is really needed, and it also looks like AI-ge | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | sdata/lib/package-installers.sh | 6 | # This file is provided for any distros, mainly non-Arch(based) distros. | COMMENT |
| MEDIUM | sdata/subcmd-exp-update/exp-update-tester.sh | 402 | # Create a test config file in repo | COMMENT |
| MEDIUM | sdata/subcmd-exp-update/exp-update-tester.sh | 500 | # Create a fake lock file | COMMENT |
| MEDIUM | …hell/ii/scripts/colors/code/material-code-set-color.sh | 4 | # Define an array of possible VSCode settings file paths for various forks | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …fig/quickshell/ii/scripts/hyprland/hyprconfigurator.py | 30 | CODE | |
| LOW | …nfig/quickshell/ii/scripts/images/least_busy_region.py | 113 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-cleaner.py | 24 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-cleaner.py | 100 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-manager.py | 213 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-manager.py | 28 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-manager.py | 141 | CODE | |
| LOW | dots/.config/kitty/search.py | 311 | CODE | |
| LOW | dots/.config/kitty/search.py | 119 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdata/uv/requirements.txt | 1 | # This file was autogenerated by uv via the following command: | COMMENT |
| LOW | sdata/uv/requirements.txt | 21 | idna==3.11 | COMMENT |
| LOW | sdata/uv/requirements.txt | 41 | opencv-contrib-python==4.12.0.88 | COMMENT |
| LOW | sdata/subcmd-install/3.files-exp.sh | 1 | # This script is meant to be sourced. | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 1 | # This script is meant to be sourced. | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 21 | # - Auto-detect repository structure (dots/ prefix or direct config) | COMMENT |
| LOW | …onfig/hypr/custom/scripts/__restore_video_wallpaper.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …g/quickshell/ii/modules/ii/onScreenKeyboard/layouts.js | 1 | // We're going to use ydotool | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/.config/quickshell/ii/scripts/images/find_regions.py | 6 | CODE | |
| LOW | …ickshell/ii/scripts/colors/generate_colors_material.py | 10 | CODE | |
| LOW | …s/.config/quickshell/ii/scripts/thumbnails/thumbgen.py | 11 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-cleaner.py | 9 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-cleaner.py | 14 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-cleaner.py | 14 | CODE | |
| LOW | …uickshell/ii/translations/tools/translation-manager.py | 16 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdata/subcmd-exp-update/0.run.sh | 823 | # Step 1: Pull latest commits | COMMENT |
| LOW⚡ | sdata/subcmd-exp-update/0.run.sh | 892 | # Step 2: Handle package building | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 1002 | # Step 3: Update configuration files | COMMENT |
| LOW | sdata/subcmd-exp-update/0.run.sh | 1128 | # Step 4: Update script permissions | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | sdata/subcmd-install/2.setups.sh | 32 | # For Fedora, uinput is required for the virtual keyboard to function, and udev rules enable input group users to ut | COMMENT |
| LOW | …s/.config/quickshell/ii/scripts/thumbnails/thumbgen.py | 5 | # When it gets merged and the python package gets updated we can just use it | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …nfig/quickshell/ii/scripts/images/least_busy_region.py | 21 | CODE | |
| LOW | …nfig/quickshell/ii/scripts/images/least_busy_region.py | 113 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …uickshell/ii/translations/tools/translation-manager.py | 28 | def extract_translatable_texts(self) -> Set[str]: | CODE |
| LOW | …uickshell/ii/translations/tools/translation-manager.py | 88 | def create_temp_translation_file(self, texts: Set[str]) -> str: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ll/ii/scripts/thumbnails/generate-thumbnails-magick.sh | 4 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dots/.config/kitty/search.py | 75 | def update_prompt(self) -> None: | CODE |