This report summarizes scanner evidence for fw876/helloworld, a C project with 4,240 GitHub stars. SynthScan examined 145,507 lines of code across 635 source files, recording 367 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 3.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 331 finding(s).
Are imports declared and package/API names verified? 3 finding(s).
Are wrappers, guards, and repeated structures necessary? 34 finding(s).
Which changes need focused human review? 367 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 367 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tcping/src/tcp.h | 1 | #include <sys/types.h> | COMMENT |
| LOW | tcping/src/tcp.c | 1 | #include <errno.h> | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 1 | COMMENT | |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 21 | # WITHOUT ANY WARRANTY; without even the implied warranty of | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 41 | # --quiet, --silent don't print informational messages | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 61 | # MODE-ARGS vary depending on the MODE. When passed as first option, | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 181 | } # func_basename may be replaced by extended shell implementation | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 401 | COMMENT | |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 1461 | # Name of the non-PIC object | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 1501 | } | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 1541 | # Wrapper around calling the cygpath program via LT_CYGPATH. This is used when | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 1641 | esac | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 1781 | ############################################# | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 3601 | # | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 3641 | # Remove the marker | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 3681 | func_cygming_ms_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $GREP '_NULL_IMPORT_DESCRIP | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 3821 | COMMENT | |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 3841 | #! $SHELL | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 4161 | # include <io.h> | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 4181 | int _putenv (const char *); | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 4201 | # define _INTPTR_T_DEFINED | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 4221 | # define LT_PATHMAX 1024 | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 4241 | # ifndef DIR_SEPARATOR_2 | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 4261 | COMMENT | |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 5841 | # Flags to be passed through unchanged, with rationale: | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 7141 | # broken: | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 9641 | # them. This is particularly important on AIX, because we don't | COMMENT |
| LOW | shadowsocksr-libev/src/server/utils.h | 21 | */ | COMMENT |
| LOW | shadowsocksr-libev/src/server/utils.h | 41 | #include <stddef.h> | COMMENT |
| LOW | shadowsocksr-libev/src/server/resolv.h | 21 | * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN | COMMENT |
| LOW | shadowsocksr-libev/src/server/list.c | 1 | #include "list.h" | COMMENT |
| LOW | shadowsocksr-libev/src/server/netutils.h | 21 | */ | COMMENT |
| LOW | shadowsocksr-libev/src/server/netutils.h | 41 | #define MSG_FASTOPEN 0x20000000 | COMMENT |
| LOW | shadowsocksr-libev/src/server/check.c | 1 | #include <stdlib.h> | COMMENT |
| LOW | shadowsocksr-libev/src/server/encrypt.c | 21 | */ | COMMENT |
| LOW | shadowsocksr-libev/src/server/encrypt.c | 41 | #include <polarssl/entropy.h> | COMMENT |
| LOW | shadowsocksr-libev/src/server/encrypt.c | 61 | #define CIPHER_UNSUPPORTED "unsupported" | COMMENT |
| LOW | shadowsocksr-libev/src/server/uthash.h | 41 | #define NO_DECLTYPE | COMMENT |
| LOW | shadowsocksr-libev/src/server/uthash.h | 61 | } while (0) | COMMENT |
| LOW | shadowsocksr-libev/src/server/uthash.h | 81 | #ifndef uthash_fatal | COMMENT |
| LOW | shadowsocksr-libev/src/server/uthash.h | 641 | * cc -## a.c (where a.c is a simple test file) (Sun Studio) | COMMENT |
| LOW | shadowsocksr-libev/src/server/server.c | 21 | */ | COMMENT |
| LOW | shadowsocksr-libev/src/server/server.c | 41 | #include <errno.h> | COMMENT |
| LOW | shadowsocksr-libev/src/server/server.c | 61 | #include "netutils.h" | COMMENT |
| LOW | shadowsocksr-libev/src/server/jconf.h | 21 | COMMENT | |
| LOW | shadowsocksr-libev/src/server/udprelay.c | 21 | */ | COMMENT |
| LOW | shadowsocksr-libev/src/server/udprelay.c | 41 | #ifdef HAVE_CONFIG_H | COMMENT |
| LOW | shadowsocksr-libev/src/server/udprelay.c | 61 | #include "udprelay.h" | COMMENT |
| LOW | shadowsocksr-libev/src/server/resolv.c | 21 | * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN | COMMENT |
| LOW | shadowsocksr-libev/src/server/utils.c | 21 | */ | COMMENT |
| LOW | shadowsocksr-libev/src/server/common.h | 21 | COMMENT | |
| LOW | shadowsocksr-libev/src/server/common.h | 41 | #endif | COMMENT |
| LOW | shadowsocksr-libev/src/server/netutils.c | 21 | */ | COMMENT |
| LOW | shadowsocksr-libev/src/server/netutils.c | 41 | COMMENT | |
| LOW | shadowsocksr-libev/src/server/http.c | 21 | * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN | COMMENT |
| LOW | shadowsocksr-libev/src/server/tls.c | 41 | #include <sys/socket.h> | COMMENT |
| LOW | shadowsocksr-libev/src/server/obfs.c | 1 | #include <string.h> | COMMENT |
| LOW | shadowsocksr-libev/src/server/encrypt.h | 21 | */ | COMMENT |
| LOW | shadowsocksr-libev/src/server/encrypt.h | 41 | #include <stdlib.h> | COMMENT |
| LOW | shadowsocksr-libev/src/server/jconf.c | 21 | COMMENT | |
| 241 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | naiveproxy/src/init_env.sh | 5 | # -------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/CMakeLists.txt | 2 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/CMakeLists.txt | 7 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | shadowsocksr-libev/src/libipset/CMakeLists.txt | 2 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | shadowsocksr-libev/src/libipset/CMakeLists.txt | 8 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | shadowsocksr-libev/src/libipset/CMakeLists.txt | 18 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | shadowsocksr-libev/src/libipset/CMakeLists.txt | 21 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libipset/CMakeLists.txt | 45 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libipset/CMakeLists.txt | 50 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libipset/CMakeLists.txt | 73 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 10 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 12 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 31 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 33 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 56 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 58 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 246 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 248 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 413 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 415 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 639 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 641 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 690 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 692 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 721 | #---------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/CMakeLists.txt | 723 | #---------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | shadowsocksr-libev/src/libcork/CMakeLists.txt | 2 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | shadowsocksr-libev/src/libcork/CMakeLists.txt | 7 | # ---------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | shadowsocksr-libev/src/libcork/CMakeLists.txt | 17 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | shadowsocksr-libev/src/libcork/CMakeLists.txt | 26 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libcork/CMakeLists.txt | 50 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libcork/CMakeLists.txt | 75 | #----------------------------------------------------------------------- | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libcork/CMakeLists.txt | 92 | #----------------------------------------------------------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 1229 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 1240 | # This function implements the same check as func_lalib_p without | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 1263 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 1272 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 1297 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 1433 | # Create a libtool object file (analogous to a ".la" file), | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 6028 | # Create the object directory. | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 8656 | # Create the old-style object. | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 8676 | # Create an invalid libtool object if no PIC, so that we don't | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 1229 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 1240 | # This function implements the same check as func_lalib_p without | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 1263 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 1272 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 1297 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 1433 | # Create a libtool object file (analogous to a ".la" file), | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 6028 | # Create the object directory. | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 8656 | # Create the old-style object. | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 8676 | # Create an invalid libtool object if no PIC, so that we don't | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 397 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 3852 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | shadowsocksr-libev/src/auto/ltmain.sh | 7681 | # This code stresses the "libraries are programs" paradigm to its | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 397 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 3852 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 7681 | # This code stresses the "libraries are programs" paradigm to its | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 2593 | # Check if any of the arguments is a wrapper script. | COMMENT |
| LOW | shadowsocksr-libev/src/auto/ltmain.sh | 8382 | # Loop over the list of objects to be linked. | COMMENT |
| LOW | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 2593 | # Check if any of the arguments is a wrapper script. | COMMENT |
| LOW | shadowsocksr-libev/src/libsodium/build-aux/ltmain.sh | 8382 | # Loop over the list of objects to be linked. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | shadowsocksr-libev/src/src/ssrlink.py | 4 | CODE | |
| LOW | shadowsocksr-libev/src/src/ssrlink.py | 5 | CODE | |
| LOW | shadowsocksr-libev/src/src/ssrlink.py | 6 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …app-ssr-plus/root/usr/share/shadowsocksr/subscribe.lua | 927 | local function processLocalClashSubscription(path, alias) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | shadowsocksr-libev/src/src/ssrlink.py | 32 | CODE |