A YAML parser and emitter in C++
This report summarizes scanner evidence for jbeder/yaml-cpp, a C++ project with 6,148 GitHub stars. SynthScan examined 90,072 lines of code across 260 source files, recording 585 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 6.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 562 finding(s).
Are imports declared and package/API names verified? 6 finding(s).
Are wrappers, guards, and repeated structures necessary? 22 finding(s).
Which changes need focused human review? 585 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 585 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/googletest-1.16.0/ci/macos-presubmit.sh | 1 | #!/bin/bash | COMMENT |
| LOW | test/googletest-1.16.0/ci/macos-presubmit.sh | 21 | # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | COMMENT |
| LOW | test/googletest-1.16.0/ci/linux-presubmit.sh | 1 | #!/bin/bash | COMMENT |
| LOW | test/googletest-1.16.0/docs/advanced.md | 941 | COMMENT | |
| LOW | test/googletest-1.16.0/googletest/CMakeLists.txt | 1 | ######################################################################## | COMMENT |
| LOW | test/googletest-1.16.0/googletest/CMakeLists.txt | 181 | ######################################################################## | COMMENT |
| LOW | …st-1.16.0/googletest/test/gtest_xml_output_unittest.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …st-1.16.0/googletest/test/googletest-param-test-test.h | 1 | // Copyright 2008, Google Inc. | COMMENT |
| LOW | …st-1.16.0/googletest/test/googletest-param-test-test.h | 21 | // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | COMMENT |
| LOW | …etest-1.16.0/googletest/test/googletest-output-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …etest/test/googletest-param-test-invalid-name1-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …t/googletest-1.16.0/googletest/test/gtest_help_test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …t/googletest-1.16.0/googletest/test/gtest_help_test.py | 21 | # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | COMMENT |
| LOW | …gletest/test/googletest-global-environment-unittest.py | 1 | # Copyright 2021 Google Inc. All Rights Reserved. | COMMENT |
| LOW | …/googletest-1.16.0/googletest/test/gtest_test_utils.py | 1 | # Copyright 2006, Google Inc. | COMMENT |
| LOW | …letest-1.16.0/googletest/test/gtest_json_test_utils.py | 1 | # Copyright 2018, Google Inc. | COMMENT |
| LOW | …etest/test/googletest-param-test-invalid-name2-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …6.0/googletest/test/googletest-json-output-unittest.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …oogletest/test/googletest-break-on-failure-unittest.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …16.0/googletest/test/googletest-setuptestsuite-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …16.0/googletest/test/googletest-list-tests-unittest.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …test-1.16.0/googletest/test/googletest-env-var-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …test-1.16.0/googletest/test/gtest_xml_outfiles_test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …gletest-1.16.0/googletest/test/gtest-typed-test_test.h | 1 | // Copyright 2008 Google Inc. | COMMENT |
| LOW | …gletest-1.16.0/googletest/test/gtest-typed-test_test.h | 21 | // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | COMMENT |
| LOW | …t-1.16.0/googletest/test/gtest_list_output_unittest.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …gletest-1.16.0/googletest/test/gtest_xml_test_utils.py | 1 | # Copyright 2006, Google Inc. | COMMENT |
| LOW | test/googletest-1.16.0/googletest/test/production.h | 1 | // Copyright 2006, Google Inc. | COMMENT |
| LOW | test/googletest-1.16.0/googletest/test/production.h | 21 | // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | COMMENT |
| LOW | …letest-1.16.0/googletest/test/googletest-color-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …t-1.16.0/googletest/test/googletest-filter-unittest.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …1.16.0/googletest/test/gtest_skip_check_output_test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …letest-1.16.0/googletest/test/gtest_testbridge_test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | ….0/googletest/test/googletest-throw-on-failure-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …test-1.16.0/googletest/test/googletest-shuffle-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …test-1.16.0/googletest/test/googletest-shuffle-test.py | 21 | # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | COMMENT |
| LOW | ….16.0/googletest/test/googletest-uninitialized-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | ….0/googletest/test/googletest-catch-exceptions-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | ….16.0/googletest/test/googletest-json-outfiles-test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …etest/test/gtest_skip_environment_check_output_test.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …1.16.0/googletest/test/googletest-failfast-unittest.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | …etest-1.16.0/googletest/include/gtest/gtest-matchers.h | 1 | // Copyright 2007, Google Inc. | COMMENT |
| LOW | …etest-1.16.0/googletest/include/gtest/gtest-matchers.h | 21 | // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | COMMENT |
| LOW | …etest-1.16.0/googletest/include/gtest/gtest-matchers.h | 41 | COMMENT | |
| LOW | …etest-1.16.0/googletest/include/gtest/gtest-matchers.h | 61 | 4251 GTEST_MAYBE_5046_ /* class A needs to have dll-interface to be used by | COMMENT |
| LOW | …etest-1.16.0/googletest/include/gtest/gtest-matchers.h | 141 | public: | COMMENT |
| LOW | …etest-1.16.0/googletest/include/gtest/gtest-matchers.h | 161 | // "is empty" matcher probably only needs to explain what the actual | COMMENT |
| LOW | …etest-1.16.0/googletest/include/gtest/gtest-matchers.h | 601 | return os; | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 1 | // Copyright 2005, Google Inc. | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 21 | // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 41 | #define GOOGLETEST_INCLUDE_GTEST_GTEST_DEATH_TEST_H_ | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 61 | // tests. IMPORTANT: This is an internal utility. Using it may break the | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 81 | // | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 101 | // | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 121 | // learn wherever you come from. In the following: 'A' denotes a | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 141 | // A* matches 0 or many occurrences of A | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 161 | // simplicity, the current implementation doesn't search the PATH | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 221 | // since the sideeffects of the call are only visible in opt mode, and not | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 241 | // // opt-mode has sideeffect visible. | COMMENT |
| LOW | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 261 | // | COMMENT |
| 465 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …etest/test/googletest-param-test-invalid-name1-test.py | 0 | verifies that google test warns the user when not initialized properly. | STRING |
| HIGH | …etest/test/googletest-param-test-invalid-name2-test.py | 0 | verifies that google test warns the user when not initialized properly. | STRING |
| HIGH | ….16.0/googletest/test/googletest-uninitialized-test.py | 0 | verifies that google test warns the user when not initialized properly. | STRING |
| HIGH | …etest/test/googletest-param-test-invalid-name1-test.py | 0 | runs the given command and verifies its exit code and output. | STRING |
| HIGH | …etest/test/googletest-param-test-invalid-name2-test.py | 0 | runs the given command and verifies its exit code and output. | STRING |
| HIGH | ….16.0/googletest/test/googletest-uninitialized-test.py | 0 | runs the given command and verifies its exit code and output. | STRING |
| HIGH | …test-1.16.0/googletest/test/googletest-env-var-test.py | 0 | sets the env variable to 'value'; unsets it when 'value' is none. | STRING |
| HIGH | …letest-1.16.0/googletest/test/googletest-color-test.py | 0 | sets the env variable to 'value'; unsets it when 'value' is none. | STRING |
| HIGH | …t-1.16.0/googletest/test/googletest-filter-unittest.py | 0 | sets the env variable to 'value'; unsets it when 'value' is none. | STRING |
| HIGH | …1.16.0/googletest/test/googletest-failfast-unittest.py | 0 | sets the env variable to 'value'; unsets it when 'value' is none. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …test-1.16.0/googletest/test/gtest_xml_outfiles_test.py | 99 | except os.error: | CODE |
| HIGH | …test-1.16.0/googletest/test/gtest_xml_outfiles_test.py | 103 | except os.error: | CODE |
| HIGH | …test-1.16.0/googletest/test/gtest_xml_outfiles_test.py | 107 | except os.error: | CODE |
| HIGH | …t-1.16.0/googletest/test/googletest-filter-unittest.py | 48 | except ImportError: | CODE |
| HIGH | ….16.0/googletest/test/googletest-json-outfiles-test.py | 134 | except os.error: | CODE |
| HIGH | ….16.0/googletest/test/googletest-json-outfiles-test.py | 138 | except os.error: | CODE |
| HIGH | ….16.0/googletest/test/googletest-json-outfiles-test.py | 142 | except os.error: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 152 | // This implementation is *not* meant to be as highly tuned or robust | COMMENT |
| MEDIUM | …est-1.16.0/googletest/include/gtest/gtest-death-test.h | 224 | // In practice, this can be used to test functions that utilize the | COMMENT |
| MEDIUM | src/contrib/dragonbox.h | 1227 | // Without the bound on n_max (which compilers these days never leverage), the | COMMENT |
| MEDIUM | src/contrib/dragonbox.h | 1237 | // Without the bound on n_max (which compilers these days never leverage), the | COMMENT |
| MEDIUM | src/contrib/dragonbox.h | 1250 | // Without the bound on n_max (which compilers these days never leverage), the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/contrib/dragonbox.h | 3390 | // Step 1: Schubfach multiplier calculation. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3426 | // Step 2: Try larger divisor; remove trailing zeros if necessary. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3484 | // Step 3: Find the significand with the smaller divisor. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3587 | // Step 1: Schubfach multiplier calculation. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3626 | // Step 2: Try larger divisor; remove trailing zeros if necessary. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3683 | // Step 3: Find the significand with the smaller divisor. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3731 | // Step 1: Schubfach multiplier calculation. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3757 | // Step 2: Try larger divisor; remove trailing zeros if necessary. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3791 | // Step 3: Find the significand with the small divisor. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/contrib/dragonbox.h | 3390 | // Step 1: Schubfach multiplier calculation. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3426 | // Step 2: Try larger divisor; remove trailing zeros if necessary. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3484 | // Step 3: Find the significand with the smaller divisor. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3587 | // Step 1: Schubfach multiplier calculation. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3626 | // Step 2: Try larger divisor; remove trailing zeros if necessary. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3683 | // Step 3: Find the significand with the smaller divisor. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3731 | // Step 1: Schubfach multiplier calculation. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3757 | // Step 2: Try larger divisor; remove trailing zeros if necessary. | COMMENT |
| LOW | src/contrib/dragonbox.h | 3791 | // Step 3: Find the significand with the small divisor. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/create-emitter-tests.py | 8 | CODE | |
| LOW | test/create-emitter-tests.py | 123 | CODE | |
| LOW | test/create-emitter-tests.py | 174 | CODE | |
| LOW | …letest-1.16.0/googletest/test/gtest_json_test_utils.py | 35 | CODE | |
| LOW | …letest-1.16.0/googletest/test/gtest_json_test_utils.py | 46 | CODE | |
| LOW | …gletest-1.16.0/googletest/test/gtest_xml_test_utils.py | 131 | CODE | |
| LOW | …gletest-1.16.0/googletest/test/gtest_xml_test_utils.py | 186 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/googletest-1.16.0/googletest/test/gtest_test_utils.py | 200 | Changes into a specified directory, if provided, and executes a command. Restores the old directory afterwards. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/integration/emitter_test.cpp | 1290 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed eiusmod " | CODE |
| LOW | test/integration/emitter_test.cpp | 1290 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed eiusmod " | CODE |
| LOW | test/googletest-1.16.0/docs/reference/mocking.md | 278 | .WillRepeatedly(Return("John Doe")); // Return "John Doe" on all calls | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …t/googletest-1.16.0/googletest/test/gtest_help_test.py | 130 | def test_prints_help_with_full_flag(self): | CODE |
| LOW | …t/googletest-1.16.0/googletest/test/gtest_help_test.py | 157 | def test_runs_tests_without_help_flag(self): | CODE |
| LOW | …t/googletest-1.16.0/googletest/test/gtest_help_test.py | 168 | def test_runs_tests_with_gtest_internal_flag(self): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …test-1.16.0/googletest/test/gtest_xml_outfiles_test.py | 35 | CODE | |
| LOW | …gletest-1.16.0/googletest/test/gtest_xml_test_utils.py | 33 | CODE | |
| LOW | util/check-whitespace.py | 4 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …etest-1.16.0/googletest/test/googletest-output-test.py | 215 | CODE | |
| LOW | …googletest-1.16.0/googlemock/test/gmock_output_test.py | 72 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …t-1.16.0/googletest/test/googletest-filter-unittest.py | 69 | # Check if this platform can unset environment variables in child processes. | COMMENT |