AI Slop Code Risk Monitor

jishenghua/jshERP

SlopCodeMonitor badge for jishenghua/jshERP Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

管伊佳ERP(原名华夏ERP)基于SpringBoot框架和SaaS模式,立志为中小企业提供开源好用的ERP软件,目前专注进销存+财务功能。主要模块有零售管理、采购管理、销售管理、仓库管理、财务管理、报表查询、系统管理等。支持预付款、收入支出、仓库调拨、组装拆卸、订单等特色功能。拥有库存状况、出入库统计等报表。同时对角色和权限进行了细致全面控制,精确到每个按钮和菜单。

0.4 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for jishenghua/jshERP, a Java project with 4,684 GitHub stars. SynthScan examined 186,051 lines of code across 672 source files, recording 47 pattern matches distributed across 4 syntactic categories. The legacy adjusted pattern signal is 0.4 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

0.4
Adjusted Signal
0.4
Raw Pattern Score
100%
Time Factor
2026-10-21
Last Push
4.7K
Stars
Java
Language
186.1K
Lines of Code
672
Files
47
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 0.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 13 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.9/100 · LOW

Are imports declared and package/API names verified? 34 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 3 finding(s).

PR Review Velocity Impact 2.0/100 · LOW

Which changes need focused human review? 47 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 3HIGH 0MEDIUM 0LOW 44

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 47 distinct pattern matches across 4 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Fake / Example Data31 hits · 42 pts
SeverityFileLineSnippetContext
LOW⚡jshERP-web/public/static/translate.js5247 //return node.attributes['placeholder'].nodeValue;COMMENT
LOW⚡jshERP-web/public/static/translate.js5797 //console.log(node.attributes['placeholder'].nodeValue);COMMENT
LOW⚡jshERP-web/public/static/translate.js5799 //translate.nodeQueue[translate.hash(node.nodeValue)] = node.attributes['placeholder'];COMMENT
LOW⚡jshERP-web/public/static/translate.js5801 //translate.addNodeToQueue(translate.hash(node.attributes['placeholder'].nodeValue), node.attributes['placeholder']COMMENT
LOW⚡jshERP-web/public/static/translate.js5805 //console.log(node.getAttribute("placeholder"));COMMENT
LOW⚡jshERP-web/public/static/translate.js4975 if(typeof(node.attributes['placeholder']) !== 'undefined' && typeof(node.attributes['placeholder'].nodeValue) === 'CODE
LOW⚡jshERP-web/public/static/translate.js4977 text: node.attributes['placeholder'].nodeValue,CODE
LOW⚡jshERP-web/public/static/translate.js4978 attribute: 'placeholder',CODE
LOW⚡jshERP-web/public/static/translate.js4979 node: node.attributes['placeholder']CODE
LOW⚡jshERP-web/public/static/translate.js4985 if(typeof(node.attributes['placeholder']) !== 'undefined' && typeof(node.attributes['placeholder'].nodeValue) === 'CODE
LOW⚡jshERP-web/public/static/translate.js4987 text: node.attributes['placeholder'].nodeValue,CODE
LOW⚡jshERP-web/public/static/translate.js4988 attribute: 'placeholder',CODE
LOW⚡jshERP-web/public/static/translate.js4989 node: node.attributes['placeholder']CODE
LOW⚡jshERP-web/public/static/translate.js5229 if(typeof(node.attributes['placeholder']) != 'undefined'){CODE
LOW⚡jshERP-web/public/static/translate.js5233 var resultShowText = translate.util.textReplace(node.attributes['placeholder'].nodeValue, originalText, resultTexCODE
LOW⚡jshERP-web/public/static/translate.js5236 node.attributes['placeholder'].nodeValue = resultShowText; //2025.4.26 变更为此方式CODE
LOW⚡jshERP-web/public/static/translate.js5244 result['text'] = node.attributes['placeholder'].nodeValue;CODE
LOW⚡jshERP-web/public/static/translate.js5245 result['node'] = node.attributes['placeholder'];CODE
LOW⚡jshERP-web/public/static/translate.js5796 if(typeof(node.attributes['placeholder']) != 'undefined'){CODE
LOW⚡jshERP-web/public/static/translate.js5802 translate.addNodeToQueue(uuid, node.attributes['placeholder'], node.attributes['placeholder'].nodeValue);CODE
LOWjshERP-web/public/static/translate.js1501 它的值如: ''、 'title'、'alt'、'placeholder' ... 这种CODE
LOWjshERP-web/public/static/translate.js2620 if(mutation.attributeName === 'placeholder' || mutation.attributeName === 'alt' || mutation.attributeName === 'titCODE
LOWjshERP-web/src/components/jeecg/JTreeDict.vue8 :placeholder="placeholder"CODE
LOWjshERP-web/src/components/jeecg/JDate.vue4 :placeholder="placeholder"CODE
LOWjshERP-web/src/components/jeecg/JSelectMultiple.vue2 <a-select :value="arrayValue" @change="onChange" mode="multiple" :placeholder="placeholder">CODE
LOWjshERP-web/src/components/jeecg/JTreeSelect.vue9 :placeholder="placeholder"CODE
LOWjshERP-web/src/components/jeecg/JInput.vue2 <a-input :placeholder="placeholder" :value="inputVal" @input="backValue"></a-input>CODE
LOWjshERP-web/src/components/jeecg/JCategorySelect.vue8 :placeholder="placeholder"CODE
LOWjshERP-web/src/components/jeecg/minipop/JInputPop.vue10 <a-input :value="inputContent" @change="handleInputChange" :placeholder="placeholder">CODE
LOWjshERP-web/src/components/jeecg/minipop/JInputPop.vue14 <textarea :value="inputContent" @input="handleInputChange" :placeholder="placeholder" :style="{ height: height + 'CODE
LOW…/src/components/jeecgbiz/JSelectBizComponent/index.vue7 :placeholder="placeholder"CODE
Hallucination Indicators3 hits · 30 pts
SeverityFileLineSnippetContext
CRITICAL…P-boot/src/main/java/com/jsh/erp/utils/ExcelUtils.java78 if(com.jsh.erp.utils.StringUtil.isNotEmpty(tip) && tip.contains("*")) {CODE
CRITICALjshERP-web/public/static/translate.js2385 translate.listener.input.originalValueDescriptor.set.call(this, newValue);CODE
CRITICALjshERP-web/public/static/translate.js9674 var transUrl = translate.service.edge.api.translate.replace('{from}',from).replace('{to}',to);CODE
Over-Commented Block10 hits · 7 pts
SeverityFileLineSnippetContext
LOW…boot/src/main/resources/mapper_xml/DepotHeadMapper.xml141 total_price, pay_type, bill_type, COMMENT
LOWjshERP-web/public/static/translate.js3761 var nodeid = nodeuuid.uuid(analyse.node);COMMENT
LOWjshERP-web/public/static/translate.js4861 有几个要翻译的属性,就写上几个。COMMENT
LOWjshERP-web/public/static/translate.js5981 //var nodeAttribute = translate.node.getAttribute(attribute);COMMENT
LOWjshERP-web/public/static/translate.js8721 // var maxWhileNumber = 30;COMMENT
LOWjshERP-web/public/static/translate.js8741 // // 因为 newTranslateTexts 是通过筛选包含 findText 而出的,所以它肯定是包含的,有下标的COMMENT
LOWjshERP-web/public/static/translate.js8761 // }COMMENT
LOWjshERP-web/public/static/color.less401 return tinycolor(color, opts);COMMENT
LOWjshERP-web/public/static/color.less1801COMMENT
LOWjshERP-web/public/static/color.less7701// end -------- JAreaLinkage 三级联动样式 --------------COMMENT
Hyper-Verbose Identifiers3 hits · 3 pts
SeverityFileLineSnippetContext
LOWjshERP-web/src/utils/authFilter.js138export function colAuthFilterJEditableTable(columns,pre) {CODE
LOWjshERP-web/src/utils/authFilter.js215function getAllShowAndDisabledAuthCols(pre){CODE
LOWjshERP-web/src/utils/encryption/aesEncrypt.js4185 function generateKeystreamAndEncrypt(words, offset, blockSize, cipher) {CODE