[MIRROR] Official Gentoo ebuild repository
This report summarizes scanner evidence for gentoo/gentoo, a Shell project with 2,479 GitHub stars. SynthScan examined 318,425 lines of code across 19979 source files, recording 76 pattern matches distributed across 11 syntactic categories. The legacy adjusted pattern signal is 0.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 69 finding(s).
Are imports declared and package/API names verified? 0 finding(s).
Are wrappers, guards, and repeated structures necessary? 10 finding(s).
Which changes need focused human review? 76 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 76 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | header.txt | 1 | # Copyright 2026 Gentoo Authors | COMMENT |
| LOW | x11-libs/fox-wrapper/files/fox-wrapper-3.sh | 1 | #!/bin/bash | COMMENT |
| LOW | kde-plasma/plasma-workspace/files/10-agent-startup.sh | 1 | # Agents startup file | COMMENT |
| LOW | kde-plasma/plasma-workspace/files/10-agent-shutdown.sh | 1 | #!/bin/sh | COMMENT |
| LOW | sys-apps/less/files/lesspipe-r4.sh | 261 | # [[ $1 == *hd* ]] && hdparm -I "${1:0:8}" | COMMENT |
| LOW | sys-apps/less/files/lesspipe-r5.sh | 261 | # [[ $1 == *hd* ]] && hdparm -I "${1:0:8}" | COMMENT |
| LOW | sys-apps/attr/files/xattr-shim.h | 1 | /* Small shim until we update all packages. */ | COMMENT |
| LOW | …ps/rkflashtool/files/rkflashtool-6.1-missing-version.h | 1 | #ifndef RKFLASHTOOL_VERSION_H | COMMENT |
| LOW | net-vpn/openvpn/files/up.sh | 1 | #!/bin/sh | COMMENT |
| LOW | sys-fs/quota/files/ldap-scripts/applySystemQuotas.pl | 1 | #!/usr/bin/perl -w | COMMENT |
| LOW | sys-fs/quota/files/ldap-scripts/setSystemQuotas.pl | 1 | #!/usr/bin/perl -w | COMMENT |
| LOW | app-text/jabref/files/jabref.sh | 1 | #!/bin/bash | COMMENT |
| LOW | net-dialup/pptpclient/files/xpptp_fe.pl | 1 | #!/usr/bin/perl -w | COMMENT |
| LOW | net-dialup/pptpclient/files/pptp_fe.pl | 1 | #!/usr/bin/perl | COMMENT |
| LOW | media-plugins/vdr-mplayer/files/confd-0.9.15.sh | 1 | # Global config file for vdr mplayer plugin | COMMENT |
| LOW | media-plugins/vdr-systeminfo/files/systeminfo.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …gp-keys-gentoo-infrastructure/files/keyring-mangler.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …penpgp-keys-gentoo-developers/files/keyring-mangler.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | app-antivirus/fangfrisch/files/fangfrisch-has-news.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | sys-power/acpid/files/acpid-1.0.6-default.sh | 41 | # for each core! | COMMENT |
| LOW | …mware/files/raspberrypi-firmware-1.20201022-config.txt | 1 | # For more options and information see | COMMENT |
| LOW | …mware/files/raspberrypi-firmware-1.20201022-config.txt | 21 | #framebuffer_width=1280 | COMMENT |
| LOW | …mware/files/raspberrypi-firmware-1.20201022-config.txt | 41 | COMMENT | |
| LOW | sys-boot/milo/files/objstrip.c | 21 | #include <sys/fcntl.h> | COMMENT |
| LOW | scripts/bootstrap.sh | 1 | #!/bin/bash | COMMENT |
| LOW | app-emulation/xen-tools/files/stubs-32.h | 1 | /* This file is automatically generated. | COMMENT |
| LOW | app-shells/bash/files/bashrc.d/10-gentoo-title-r3.bash | 1 | # /etc/bash/bashrc.d/10-gentoo-title.bash | COMMENT |
| LOW | app-shells/bash/files/bashrc.d/10-gentoo-title-r3.bash | 41 | alacritty*|contour|foot*|tmux*|xterm-ghostty) | COMMENT |
| LOW | dev-util/nvidia-cuda-toolkit/files/parse_manifest.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | dev-util/nvidia-cuda-toolkit/files/parse_manifest.py | 101 | # <type>compiler</type> | COMMENT |
| LOW | dev-util/nvidia-cuda-toolkit/files/parse_manifest.py | 121 | # unused | COMMENT |
| LOW | eclass/tests/version-funcs.sh | 1 | #!/bin/bash | COMMENT |
| LOW | eclass/tests/version-funcs.sh | 21 | # A version component can either consist purely of digits ([0-9]+) | COMMENT |
| LOW | eclass/tests/version-funcs.sh | 41 | # | COMMENT |
| LOW | eclass/tests/version-funcs.sh | 121 | # Work around a bug in bash-3.2, where "${comp[*]:start:end*2-start}" | COMMENT |
| LOW | eclass/tests/dot-a.sh | 21 | COMMENT | |
| LOW | eclass/tests/dot-a.sh | 141 | # focus of this test is more basic, not checking all possible option | COMMENT |
| LOW | media-video/aegisub/files/9999/git_version.h | 1 | #define BUILD_GIT_VERSION_NUMBER 9999 | COMMENT |
| LOW | media-video/aegisub/files/3.4.2/git_version.h | 1 | #define BUILD_GIT_VERSION_NUMBER 342 | COMMENT |
| LOW | …rint/kyocera-1x2x-mfp-driver/files/rastertokpsl-fix.sh | 1 | #!/bin/bash | COMMENT |
| LOW | net-dns/avahi/files/autoipd.sh | 1 | # Copyright (c) 2004-2006 Gentoo Foundation | COMMENT |
| LOW | …libs/pjproject/files/pjproject-2.13.1-r1-config_site.h | 21 | #define PJ_IOQUEUE_MAX_HANDLES (5000) | COMMENT |
| LOW | …libs/pjproject/files/pjproject-2.13.1-r1-config_site.h | 81 | #define PJSIP_TSX_UAS_CONTINUE_ON_TP_ERROR 0 | COMMENT |
| LOW | net-libs/pjproject/files/pjproject-config_site-v2.h | 41 | #define PJ_LOG_MAX_LEVEL 6 | COMMENT |
| LOW | net-libs/ppp-defs/files/ppp_defs.h | 1 | #ifndef _NET_PPP_DEFS_H | COMMENT |
| LOW | app-admin/analog/files/analog.cfg | 1 | # Configuration file for analog 5.1 | COMMENT |
| LOW | …in/gentoo-rsync-mirror/files/rsynclogparse-extended.pl | 1 | #!/usr/bin/env perl | COMMENT |
| LOW | www-servers/pound/files/pound-2.2.cfg | 1 | ## Minimal sample pound.cfg | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | dev-ruby/rubygems/files/auto_gem.rb | 1 | # This file is installed by Gentoo's rubygems package. | COMMENT |
| MEDIUM | kde-plasma/plasma-workspace/files/10-agent-startup.sh | 3 | # This file is sourced at Plasma startup, so that | COMMENT |
| MEDIUM | kde-plasma/plasma-workspace/files/10-agent-shutdown.sh | 3 | # This file is executed at Plasma shutdown. | COMMENT |
| MEDIUM | app-shells/bash/files/bashrc.d/10-gentoo-color-r2.bash | 38 | # Define a prompt without color. | COMMENT |
| MEDIUM | …rint/kyocera-1x2x-mfp-driver/files/rastertokpsl-fix.sh | 2 | # This file is a slightly modified version of 'rastertokpsl_wrapper' script | COMMENT |
| MEDIUM | app-admin/logstash-bin/files/pipelines.yml | 1 | # This file is where you define your pipelines. You can define multiple. | COMMENT |
| MEDIUM | …-firmware/files/linux-firmware-make-amd-ucode-img.bash | 65 | # Create the cpio archive | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | app-emulation/virtualbox/files/test_python.py | 14 | except: | CODE |
| HIGH | app-emulation/virtualbox-kvm/files/test_python.py | 14 | except: | CODE |
| HIGH | www-client/chromium/files/bin-finder.py | 171 | except (PermissionError, OSError): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | dev-embedded/arduino-builder/files/platform.txt | 2 | # -------------------- | COMMENT |
| MEDIUM | dev-embedded/arduino-builder/files/platform.txt | 9 | # ------------------------------ | COMMENT |
| MEDIUM | eclass/tests/version-funcs.sh | 16 | # --------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | mail-client/thunderbird-bin/files/thunderbird-bin-r1.sh | 4 | ## Usage: | COMMENT |
| LOW | mail-client/thunderbird/files/thunderbird-r1.sh | 4 | ## Usage: | COMMENT |
| LOW | www-client/firefox/files/firefox-r1.sh | 4 | ## Usage: | COMMENT |
| LOW | www-client/firefox-bin/files/firefox-bin-r1.sh | 4 | ## Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | media-plugins/vdr-skinsoppalusikka/files/rc-addon.sh | 6 | # Check if dxr3 plugin in /etc/conf.d/vdr Plugins="" | COMMENT |
| LOW | x11-misc/virtualgl/files/vgl-helper.sh | 9 | # Check if XAUTHORITY was set successfully, if not wait up to | COMMENT |
| LOW | eclass/tests/version-funcs.sh | 257 | # Check if the relation <v1> <op> <v2> is true. If <v1> is not specified, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sci-chemistry/mdtraj/files/mdtraj-1.10.3-tests.py | 33 | -def test_compare_rdf_t_master(get_fn): | CODE |
| LOW | sci-chemistry/mdtraj/files/mdtraj-1.10.3-tests.py | 47 | +#def test_compare_rdf_t_master(get_fn): | CODE |
| LOW | sci-chemistry/mdtraj/files/mdtraj-1.10.3-tests.py | 62 | def test_compare_n_concurrent_pairs(get_fn): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sys-power/acpid/files/acpid-1.0.6-default.sh | 40 | # multicore systems, make sure you set powersave mode | COMMENT |
| LOW | sys-power/acpid/files/acpid-1.0.6-default.sh | 48 | # multicore systems, make sure you set performance mode | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …openafs/files/systemd/openafs-client-systemd-helper.sh | 17 | # just return success, to let the unit activate, so stopping the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | dev-python/grep-ast/files/tsl.py | 40 | __all__ = [get_parser, get_language, USING_TSL_PACK] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | www-client/chromium/files/bin-finder.py | 131 | CODE |