AI Slop Code Risk Monitor

finamp-app/finamp

SlopCodeMonitor badge for finamp-app/finamp Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).
0.8 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for finamp-app/finamp. SynthScan examined 101,796 lines of code across 487 source files, recording 56 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 0.8 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

0.8
Adjusted Signal
0.8
Raw Pattern Score
100%
Time Factor
—
Last Push
—
Stars
—
Language
101.8K
Lines of Code
487
Files
56
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 48 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 3 finding(s).

Agent Over-Engineering Ratio 0.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 6 finding(s).

PR Review Velocity Impact 3.8/100 · LOW

Which changes need focused human review? 56 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 11LOW 45

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 56 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block34 hits · 34 pts
SeverityFileLineSnippetContext
LOWpubspec.yaml1name: finampCOMMENT
LOWpubspec.yaml261 # in this "flutter" section. Each entry in this list should have aCOMMENT
LOWlinux/flutter/generated_plugin_registrant.h1//COMMENT
LOW.github/workflows/build.yml421 set +eCOMMENT
LOW.github/workflows/build.yml441 # - run: flutter pub getCOMMENT
LOWlib/models/jellyfin_models.dart661 int? width;COMMENT
LOWlib/models/jellyfin_models.dart821 @HiveField(0)COMMENT
LOWlib/models/jellyfin_models.dart841 // String? manufacturer;COMMENT
LOWlib/models/jellyfin_models.dart861 // String? modelNumber;COMMENT
LOWlib/models/jellyfin_models.dart881 // bool enableSingleAlbumArtLimit;COMMENT
LOWlib/models/jellyfin_models.dart901 // String? albumArtPn;COMMENT
LOWlib/models/jellyfin_models.dart941 // @Deprecated("removed from API")COMMENT
LOWlib/models/jellyfin_models.dart961 // @Deprecated("removed from API")COMMENT
LOWlib/extensions/string.dart21COMMENT
LOW…/PlaybackHistoryScreen/playback_history_list_tile.dart81 ),COMMENT
LOWlib/components/MusicScreen/item_wrapper.dart61COMMENT
LOWlib/services/playon_service.dart61 }COMMENT
LOWlib/services/client_certificate_installer.dart21 static const _writeFailureCodes = {32, 54, 104, 10053, 10054};COMMENT
LOWlib/services/radio_service_helper.dart401 // find all unique genre, shuffleall sourcesCOMMENT
LOWlib/services/jellyfin_api.dart121 /// will be recursive. true/false.COMMENT
LOWlib/services/jellyfin_api.dart141 /// "SeriesPrimaryImage" "SeriesStudio" "SortName" "SpecialEpisodeNumbers"COMMENT
LOWlib/services/jellyfin_api.dart201COMMENT
LOWlib/services/jellyfin_api.dart381 /// Specify this to localize the search to a specific item or folder. OmitCOMMENT
LOWlib/services/jellyfin_api.dart401 /// "RecursiveItemCount" "Settings" "ScreenshotImageTags"COMMENT
LOWlib/services/jellyfin_api.dart501 /// Specify this to localize the search to a specific item or folder. OmitCOMMENT
LOWlib/services/downloads_service.dart61 // Flags for controlling sync/downloadsCOMMENT
LOWlib/services/music_player_background_task.dart1361COMMENT
LOWlib/services/queue_service.dart1681COMMENT
LOWlib/services/discord_rpc.dart141 }COMMENT
LOWlib/services/carplay_helper.dart41/// Fallback section cap, same reasoning as [_fallbackMaxListItems]. Covers theCOMMENT
LOWlib/services/carplay_helper.dart801 emptyViewTitleVariants: [GlobalSnackbar.requireL10n.emptyFilteredListTitle],COMMENT
LOWwindows/runner/utils.h1#ifndef RUNNER_UTILS_H_COMMENT
LOWwindows/runner/win32_window.cpp1#include "win32_window.h"COMMENT
LOWwindows/runner/resource.h1//{{NO_DEPENDENCIES}}COMMENT
Modern AI Meta-Vocabulary4 hits · 12 pts
SeverityFileLineSnippetContext
MEDIUMlib/screens/music_screen.dart226 // If this setting changes, the appbar will change its preferred height, so we need to rebuild the scaffold.COMMENT
MEDIUMlib/components/now_playing_bar.dart523 // The now playing bar must be enclosed in a SafeArea at all times so that the enclosing scaffold properly addsCOMMENT
MEDIUMlib/components/global_snackbar.dart67 // has all global context present. The scaffold context is missing most global state.COMMENT
MEDIUM…/components/HomeScreen/finamp_music_screen_header.dart72 // We cannot make this reactive ourselves because it is the surrounding scaffold that needs to rebuild, notCOMMENT
Excessive Try-Catch Wrapping5 hits · 9 pts
SeverityFileLineSnippetContext
LOWtools/code_recap/extract_history.py63 except Exception as e:CODE
MEDIUMtools/code_recap/extract_history.py64 print(f"Error fetching API: {e}")CODE
MEDIUMtools/code_recap/extract_history.py80 print(f"Error running git command: {result.stderr}", file=sys.stderr)CODE
MEDIUMtools/code_recap/extract_history.py84 print("Error: 'git' command not found. Please ensure Git is installed.", file=sys.stderr)CODE
MEDIUMtools/code_recap/extract_history.py125 print(f"Error: No git repository found at {PATH}")CODE
Structural Annotation Overuse6 hits · 9 pts
SeverityFileLineSnippetContext
LOWlib/services/downloads_service.dart553 // Step 1 - Remove invalid links and restore node hierarchy.COMMENT
LOWlib/services/downloads_service.dart694 // Step 2 - Get all items into correct state matching filesystem and downloader.COMMENT
LOWlib/services/downloads_service.dart763 // Step 3 - Resync all nodes from anchor to connect up all needed nodesCOMMENT
LOWlib/services/downloads_service.dart769 // Step 4 - Fetch all missing lyricsCOMMENT
LOWlib/services/downloads_service.dart808 // Step 5 - Make sure there are no unanchored nodes in metadata.COMMENT
LOWlib/services/downloads_service.dart817 // Step 6 - Make sure there are no orphan files in track directory.COMMENT
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMpubspec.yaml230# The following section is specific to Flutter.COMMENT
Slop Phrases1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMpubspec.yaml233 # included with your application, so that you can use the icons inCOMMENT
Unused Imports3 hits · 3 pts
SeverityFileLineSnippetContext
LOWtools/code_recap/extract_history.py4CODE
LOWtools/code_recap/extract_history.py8CODE
LOWtools/code_recap/recap.py2CODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUM…components/PlayerScreen/player_screen_album_image.dart96 // Load player cover at max size to allow more seamless scalingCOMMENT
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippetContext
LOWtools/code_recap/extract_history.py30def get_github_username_from_commit(repo_path, commit_hash, displayname):CODE