AI Slop Code Risk Monitor

github/gh-stack

SlopCodeMonitor badge for github/gh-stack Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

GitHub Stacked PRs

1.4 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for github/gh-stack, a Go project with 1,734 GitHub stars. SynthScan examined 87,825 lines of code across 179 source files, recording 62 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 1.4 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.4
Adjusted Signal
1.4
Raw Pattern Score
100%
Time Factor
2026-11-01
Last Push
1.7K
Stars
Go
Language
87.8K
Lines of Code
179
Files
62
Pattern Hits
2026-10-31
Scan Date
0.01
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 35 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 3 finding(s).

Agent Over-Engineering Ratio 3.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 24 finding(s).

PR Review Velocity Impact 6.9/100 · LOW

Which changes need focused human review? 62 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 29LOW 32

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 62 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators24 hits · 66 pts
SeverityFileLineSnippetContext
MEDIUMinternal/modify/apply_test.go431// ─── BuildSnapshot ───────────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go477// ─── BuildPlan ───────────────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go555// ─── ApplyPlan: Drop ─────────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go623// ─── ApplyPlan: FoldDown ─────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go693// ─── ApplyPlan: FoldUp ───────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go766// ─── ApplyPlan: Rename ───────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go823// ─── ApplyPlan: Reorder ──────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go901// ─── ApplyPlan: Mixed Drop and Fold ─────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go990// ─── ApplyPlan: Conflict During Rebase ───────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1047// ─── ApplyPlan: Conflict During CherryPick ───────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1107// ─── ContinueApply: Multi-Stack Finds Correct Stack ─────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1179// ─── Unwind ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1274// ─── ApplyPlan: No-op (empty plan) ──────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1331// ─── ApplyPlan: Drop with no PR ─────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1376// ─── ContinueApply ──────────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1504// ─── Unwind with active rebase ──────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1558// ─── Unwind with active cherry-pick ─────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1615// ─── ContinueApply: subsequent conflict after fold-down is a rebase ─────────COMMENT
MEDIUMinternal/modify/apply_test.go1862// ─── Unwind restores renamed branch ─────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go1915// ─── ApplyPlan: State file transitions for remote stack ─────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go2113// ─── resolveCheckoutBranch ──────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go2445// ─── ApplyPlan: Checkout behavior after drop ────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go2583// ─── BuildPlan: Insert ──────────────────────────────────────────────────────COMMENT
MEDIUMinternal/modify/apply_test.go2632// ─── ApplyPlan: Insert ──────────────────────────────────────────────────────COMMENT
Over-Commented Block20 hits · 20 pts
SeverityFileLineSnippetContext
LOWcmd/submit.go581func humanize(s string) string {COMMENT
LOWcmd/link.go161 // Create/update mode: create a new stack or additively update the stackCOMMENT
LOWcmd/checkout.go361 return nil, "", ErrAPIFailureCOMMENT
LOWcmd/utils.go301 }COMMENT
LOWcmd/utils.go521// When the stack has a remote ID, the stack API is the source of truth: theCOMMENT
LOWcmd/utils.go2041COMMENT
LOWinternal/tui/submitview/mousefilter.go21// run of real keystrokes. Real SGR mouse bodies are far shorter than this.COMMENT
LOWinternal/tui/submitview/types.go1// Package submitview implements the interactive single-screen TUI used byCOMMENT
LOWinternal/tui/shared/header.go41 IconStyle *lipgloss.Style // optional override; nil uses default HeaderInfoStyle (accent)COMMENT
LOWinternal/tui/shared/logo.go101// graphics live in a layer the text renderer cannot clear, so callers must emitCOMMENT
LOWinternal/tui/mergeview/types.go1// Package mergeview implements the interactive wizard used by `gh stack merge`.COMMENT
LOWinternal/tui/mergeview/types.go81 // StackNumber is the repo-scoped stack number, shown in the header.COMMENT
LOWinternal/github/merge_async.go21COMMENT
LOWinternal/github/merge_async.go201 }COMMENT
LOWinternal/theme/theme.go1// Package theme defines gh-stack's GitHub-branded, background-aware colorCOMMENT
LOWinternal/theme/theme.go41 // keys, the description scrollbar thumb. The full-screen TUIs paint it asCOMMENT
LOWinternal/theme/theme.go141 }COMMENT
LOWinternal/theme/canvas.go61// (tea.WithOutput) that paints the GitHub canvas while the program is on theCOMMENT
LOWinternal/git/git.go361// ClearRemote removes the gh-stack.remote git config entry.COMMENT
LOWdocs/src/content/docs/guides/workflows.md421COMMENT
Structural Annotation Overuse6 hits · 11 pts
SeverityFileLineSnippetContext
LOWcmd/checkout.go326 // Step 1: Find the stack containing the target PR via the list endpoint'sCOMMENT
LOWcmd/checkout.go342 // Step 2: Fetch PR details for every PR in the remote stackCOMMENT
LOWinternal/modify/apply.go226 // Step 6: Replay each active branch's original commit range onto its new parent.COMMENT
LOW⚡docs/src/content/docs/guides/ui.md26### Step 1: Create the first PR normallyCOMMENT
LOW⚡docs/src/content/docs/guides/ui.md32### Step 2: Create subsequent PRs and add them to the stackCOMMENT
LOW⚡docs/src/content/docs/guides/ui.md38### Step 3: Confirm the stackCOMMENT
Self-Referential Comments4 hits · 10 pts
SeverityFileLineSnippetContext
MEDIUMcmd/alias.go35 Example: ` # Create the default 'gs' aliasCODE
MEDIUMcmd/alias.go38 # Create a custom aliasCOMMENT
MEDIUMcmd/init.go36 Example: ` # Create a stack with a new branchCODE
MEDIUMcmd/init.go39 # Create a multi-layer stack at onceCOMMENT
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHinternal/tui/submitview/screen.go565// batch submit as requested and exits. If any included branch has an emptyCOMMENT
Verbosity Indicators3 hits · 4 pts
SeverityFileLineSnippetContext
LOWcmd/checkout.go326 // Step 1: Find the stack containing the target PR via the list endpoint'sCOMMENT
LOWcmd/checkout.go342 // Step 2: Fetch PR details for every PR in the remote stackCOMMENT
LOWinternal/modify/apply.go226 // Step 6: Replay each active branch's original commit range onto its new parent.COMMENT
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMinternal/tui/mergeview/view.go139 // seamless segmented bar without any Powerline glyph.COMMENT
Fake / Example Data3 hits · 3 pts
SeverityFileLineSnippetContext
LOWinternal/git/gitops_test.go720 gitExec(t, cloneDir, "config", "user.email", "test@test.com")CODE
LOWinternal/git/gitops_test.go767 gitExec(t, cloneDir, "config", "user.email", "test@test.com")CODE
LOWinternal/git/gitops_test.go800 gitExec(t, dir, "config", "user.email", "test@test.com")CODE