AI Slop Code Risk Monitor

johnkerl/miller

SlopCodeMonitor badge for johnkerl/miller Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Miller is like awk, sed, cut, join, and sort for name-indexed data such as CSV, TSV, and tabular JSON

3.4 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for johnkerl/miller, a Go project with 10,055 GitHub stars. SynthScan examined 200,637 lines of code across 771 source files, recording 425 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 3.4 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

3.4
Adjusted Signal
3.4
Raw Pattern Score
100%
Time Factor
2026-10-27
Last Push
10.1K
Stars
Go
Language
200.6K
Lines of Code
771
Files
425
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.8/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 304 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.3/100 · LOW

Are imports declared and package/API names verified? 10 finding(s).

Agent Over-Engineering Ratio 8.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 112 finding(s).

PR Review Velocity Impact 15.2/100 · LOW

Which changes need focused human review? 425 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 2MEDIUM 112LOW 311

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 425 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators110 hits · 329 pts
SeverityFileLineSnippetContext
MEDIUM⚡man/mkman.rb3# ================================================================COMMENT
MEDIUM⚡man/mkman.rb12# ================================================================COMMENT
MEDIUM⚡man/mkman.rb14# ----------------------------------------------------------------COMMENT
MEDIUMman/mkman.rb126# ================================================================COMMENT
MEDIUM⚡man/mkman.rb162# ----------------------------------------------------------------COMMENT
MEDIUM⚡man/mkman.rb172# ----------------------------------------------------------------COMMENT
MEDIUM⚡man/mkman.rb182# ----------------------------------------------------------------COMMENT
MEDIUMman/mkman.rb193# ----------------------------------------------------------------COMMENT
MEDIUMman/mkman.rb208# ----------------------------------------------------------------COMMENT
MEDIUMman/mkman.rb219# ================================================================COMMENT
MEDIUM⚡tools/release.sh49# ============================================================================COMMENT
MEDIUM⚡tools/release.sh51# ============================================================================COMMENT
MEDIUM⚡tools/release.sh61# ============================================================================COMMENT
MEDIUM⚡tools/release.sh63# ============================================================================COMMENT
MEDIUMtools/release.sh156# ============================================================================COMMENT
MEDIUMtools/release.sh158# ============================================================================COMMENT
MEDIUMtools/release.sh199# ============================================================================COMMENT
MEDIUMtools/release.sh201# ============================================================================COMMENT
MEDIUMtools/release.sh319# ============================================================================COMMENT
MEDIUMtools/release.sh321# ============================================================================COMMENT
MEDIUMtools/release.sh384# ============================================================================COMMENT
MEDIUMtools/release.sh386# ============================================================================COMMENT
MEDIUMtools/release.sh456# ============================================================================COMMENT
MEDIUMtools/release.sh458# ============================================================================COMMENT
MEDIUMtools/release.sh489# ============================================================================COMMENT
MEDIUMtools/release.sh491# ============================================================================COMMENT
MEDIUMtools/release.sh558# ============================================================================COMMENT
MEDIUMtools/release.sh560# ============================================================================COMMENT
MEDIUMtools/release.sh620# ============================================================================COMMENT
MEDIUMtools/release.sh622# ============================================================================COMMENT
MEDIUMtools/release.sh690# ============================================================================COMMENT
MEDIUMtools/release.sh692# ============================================================================COMMENT
MEDIUMtools/release.sh733# ============================================================================COMMENT
MEDIUMtools/release.sh735# ============================================================================COMMENT
MEDIUMtools/release.sh787# ============================================================================COMMENT
MEDIUMtools/release.sh789# ============================================================================COMMENT
MEDIUMpython/sketch.py9# ================================================================COMMENT
MEDIUMpython/sketch.py30# ================================================================COMMENT
MEDIUMpython/sketch.py65# ----------------------------------------------------------------STRING
MEDIUMpython/sketch.py235# ================================================================STRING
MEDIUMpython/sketch.py256# ================================================================STRING
MEDIUMpython/sketch.py293# ================================================================STRING
MEDIUMpython/sketch.py333# ----------------------------------------------------------------STRING
MEDIUMpython/sketch.py358# ----------------------------------------------------------------STRING
MEDIUMpython/sketch.py396# ================================================================STRING
MEDIUMpython/sketch.py419# ----------------------------------------------------------------STRING
MEDIUMpython/sketch.py436# ----------------------------------------------------------------STRING
MEDIUMpython/sketch.py460# ----------------------------------------------------------------STRING
MEDIUMpython/sketch.py472# ================================================================STRING
MEDIUMpython/sketch.py606# ================================================================STRING
MEDIUMpython/sketch.py624# ================================================================STRING
MEDIUMpython/sketch.py641# ================================================================STRING
MEDIUMdocs/build-epub.sh3# ================================================================COMMENT
MEDIUMdocs/build-epub.sh16# ================================================================COMMENT
MEDIUM⚡docs/src/mk-func-info.rb3# ================================================================COMMENT
MEDIUM⚡docs/src/mk-func-info.rb6# ================================================================COMMENT
MEDIUM⚡docs/src/mk-func-info.rb8# ----------------------------------------------------------------COMMENT
MEDIUMdocs/src/mk-func-info.rb65# ----------------------------------------------------------------COMMENT
MEDIUMdocs/src/mk-func-info.rb113# ----------------------------------------------------------------COMMENT
MEDIUMdocs/src/dkvp-examples.md26# ================================================================COMMENT
50 more matches not shown…
Over-Commented Block274 hits · 273 pts
SeverityFileLineSnippetContext
LOWregression_test.go21 // verbosityLevel = 3 for all cases is probably too much output to beCOMMENT
LOWman/mkman.rb1#!/usr/bin/env rubyCOMMENT
LOWcmd/experiments/cli_parser/msys2in.sh1/home/kerlj/git/miller/experiments/cli-parser/cliparse.exe '$c=$a."bbb"'COMMENT
LOWcmd/experiments/line_parser/splitter.go1package mainCOMMENT
LOWcmd/experiments/line_parser/splitter.go21// Otherwise, the Scanner advances the input. If the token is not nil, theCOMMENT
LOWtools/release.sh1#!/usr/bin/env bashCOMMENT
LOWtools/release.sh21#COMMENT
LOWpython/sketch.py1#!/usr/bin/pythonCOMMENT
LOWdocs/build-epub.sh1#!/bin/bashCOMMENT
LOWdocs/src/dkvp-examples.md21Here are the I/O routines:COMMENT
LOWdocs/src/dkvp-examples.md41# >>> mapCOMMENT
LOWdocs/src/dkvp-examples.md161#COMMENT
LOWdocs/src/expo-sample.sh1# Generate 100,000 pairs of independent and identically distributedCOMMENT
LOWdocs/src/polyglot-dkvp-io/dkvp_io.rb1#!/usr/bin/env rubyCOMMENT
LOWdocs/src/polyglot-dkvp-io/dkvp_io.py1#!/usr/bin/env pythonCOMMENT
LOWdocs/src/ngrams/ngrams.sh1#!/bin/bashCOMMENT
LOWscripts/perf/multilanguage-timings/original/tn.rb1#!/usr/bin/rubyCOMMENT
LOWscripts/perf/multilanguage-timings/original/cutgo.go61 // TIME IN SECONDS 0.221 -- cutgo ccode,milex,year,cinc ../c/nmc1.dkvpCOMMENT
LOWscripts/perf/multilanguage-timings/original/cutgo.go81 // $ repeat 10 justtime cutgo ccode,milex,year,cinc ../c/nmc1.dkvp > /dev/nullCOMMENT
LOWscripts/perf/multilanguage-timings/original/cutgo.go101 if present {COMMENT
LOWscripts/perf/multilanguage-timings/original/cutgo.go141 // TIME IN SECONDS 3.821 -- cutgo ccode,milex,year,cinc ../c/nmc1.dkvpCOMMENT
LOWscripts/perf/multilanguage-timings/original/cutgo.go161 // TIME IN SECONDS 3.539 -- cutgo ccode,milex,year,cinc ../c/nmc1.dkvpCOMMENT
LOWscripts/perf/multilanguage-timings/original/cutgo.go181 // TIME IN SECONDS 4.747 -- cutgo ccode,milex,year,cinc ../c/nmc1.dkvpCOMMENT
LOWscripts/perf/multilanguage-timings/optimized/cutcpp.cpp1// CLI: step (1-6) arg1, comma-separated field names arg2, filenames arg3+.COMMENT
LOW.github/workflows/codeql-analysis.yml1# For most projects, this workflow file will not need changing; you simply needCOMMENT
LOW.github/workflows/codeql-analysis.yml41 # Initializes the CodeQL tools for scanning.COMMENT
LOW.github/workflows/codespell.yml41 # WARNING: Trying next encoding "iso-8859-1"COMMENT
LOWdata/generators/abixy.c21// a=pan,b=pan,i=1,x=0.3467901443380824,y=0.7268028627434533COMMENT
LOWdata/generators/randuv-chomped.c1#include <stdio.h>COMMENT
LOWdata/generators/randuv-chomped.c21// oooooooo----------------+COMMENT
LOWpkg/dkvpx/dkvpx_reader.go1// Package dkvpx reads DKVPX records: comma-delimited key=value pairs withCOMMENT
LOWpkg/types/doc.go1// Package types contains the implementation of the Mlrval datatype which isCOMMENT
LOWpkg/auxents/hex.go1package auxentsCOMMENT
LOWpkg/terminals/repl/dsl.go1// This is the handler for taking DSL statements typed in interactively by theCOMMENT
LOWpkg/terminals/repl/session.go1// Top-level handler for a REPL session, including setup/construction, andCOMMENT
LOWpkg/terminals/repl/entry.go1// This is the shell command-line entry point to the Miller REPL command line.COMMENT
LOWpkg/terminals/repl/verbs.go521//COMMENT
LOWpkg/terminals/completion/completion.go1// Package completion implements shell tab-completion for Miller.COMMENT
LOWpkg/terminals/completion/verbflags.go1// Per-verb flag discovery for shell completion.COMMENT
LOWpkg/terminals/completion/shell_smoke_test.go1//go:build !windowsCOMMENT
LOWpkg/terminals/mcp/mcp_main.go1// Entrypoint for `mlr mcp`: a Model Context Protocol server exposing MillerCOMMENT
LOWpkg/terminals/mcp/mcp_main.go41// serverConfig carries the `mlr mcp` command-line options into the toolCOMMENT
LOWpkg/terminals/regtest/regtester.go1// Logic for executing regression tests via 'mlr regtest'.COMMENT
LOWpkg/terminals/regtest/regtester.go21// in test/input/.COMMENT
LOWpkg/terminals/regtest/regtester.go41// NR=1,a=pan,b=panCOMMENT
LOWpkg/terminals/regtest/regtester.go381COMMENT
LOWpkg/terminals/registry/registry.go1// Package registry is the single source of truth for the names of Miller'sCOMMENT
LOWpkg/terminals/help/entry_which.go1// mlr which -- intent-to-capability router for AI agents and interactive users.COMMENT
LOWpkg/terminals/help/entry.go141 // flag-section named "CSV-only flags", etc. Here we can't key in the namesCOMMENT
LOWpkg/terminals/help/entry_json.go1// Machine-readable (JSON) help, for `mlr help --as-json` and friends.COMMENT
LOWpkg/mlrval/mlrval_collections.go1// ABOUT ARRAY/MAP INDEXINGCOMMENT
LOWpkg/mlrval/mlrval_collections.go21//COMMENT
LOWpkg/mlrval/mlrval_collections.go41// o No zero index: AWK uses $0 like Miller uses $*, to referCOMMENT
LOWpkg/mlrval/mlrval_collections.go101 n := int(len(*array))COMMENT
LOWpkg/mlrval/mlrval_collections.go121// -7 -2 falseCOMMENT
LOWpkg/mlrval/mlrval_collections.go201//COMMENT
LOWpkg/mlrval/mlrval_collections.go221// the array by one.COMMENT
LOWpkg/mlrval/mlrval_new.go201 }COMMENT
LOWpkg/mlrval/mlrval_new.go241 return &Mlrval{COMMENT
LOWpkg/mlrval/mlrmap_json.go21 buffer.WriteString(s)COMMENT
214 more matches not shown…
Verbosity Indicators12 hits · 20 pts
SeverityFileLineSnippetContext
LOW⚡scripts/perf/multilanguage-timings/naive/cutcpp.cpp51 // Step 2: line to mapCOMMENT
LOW⚡scripts/perf/multilanguage-timings/naive/cutcpp.cpp60 // Step 3: map-to-map transformCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutcpp.cpp83 // Step 6: write to stdoutCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutgo.go65 // Step 2: line to mapCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutgo.go78 // Step 3: map-to-map transform (keep include order for output)COMMENT
LOWscripts/perf/multilanguage-timings/naive/cutgo.go108 // Step 6: write to stdoutCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutrs.rs70 // Step 2: line to mapCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutrs.rs85 // Step 3: map-to-map transform (newmap for step 4 lookup; order from include_fields)COMMENT
LOWscripts/perf/multilanguage-timings/naive/cutrs.rs113 // Step 6: write to stdoutCOMMENT
LOWscripts/perf/multilanguage-timings/optimized/cutgo.go105 // Step 2: line to mapCOMMENT
LOWscripts/perf/multilanguage-timings/optimized/cutgo.go119 // Step 3: map-to-map transformCOMMENT
LOWscripts/perf/multilanguage-timings/optimized/cutgo.go149 // Step 6: send to writerCOMMENT
Structural Annotation Overuse12 hits · 20 pts
SeverityFileLineSnippetContext
LOW⚡scripts/perf/multilanguage-timings/naive/cutcpp.cpp51 // Step 2: line to mapCOMMENT
LOW⚡scripts/perf/multilanguage-timings/naive/cutcpp.cpp60 // Step 3: map-to-map transformCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutcpp.cpp83 // Step 6: write to stdoutCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutgo.go65 // Step 2: line to mapCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutgo.go78 // Step 3: map-to-map transform (keep include order for output)COMMENT
LOWscripts/perf/multilanguage-timings/naive/cutgo.go108 // Step 6: write to stdoutCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutrs.rs70 // Step 2: line to mapCOMMENT
LOWscripts/perf/multilanguage-timings/naive/cutrs.rs85 // Step 3: map-to-map transform (newmap for step 4 lookup; order from include_fields)COMMENT
LOWscripts/perf/multilanguage-timings/naive/cutrs.rs113 // Step 6: write to stdoutCOMMENT
LOWscripts/perf/multilanguage-timings/optimized/cutgo.go105 // Step 2: line to mapCOMMENT
LOWscripts/perf/multilanguage-timings/optimized/cutgo.go119 // Step 3: map-to-map transformCOMMENT
LOWscripts/perf/multilanguage-timings/optimized/cutgo.go149 // Step 6: send to writerCOMMENT
Fake / Example Data9 hits · 12 pts
SeverityFileLineSnippetContext
LOWdocs/src/file-formats.md1162 "Phone": "555-1234",CODE
LOWdocs/src/file-formats.md1168 "Phone": "555-5678"CODE
LOWpkg/input/record_reader_rec_test.go32 assert.Equal(t, "John Doe", record.Head.Value.String())CODE
LOWpkg/cli/flag_types.go455// * Help string is "Lorem ipsum dolor sit amet, consectetur adipiscing elit,COMMENT
LOWpkg/cli/flag_types.go455// * Help string is "Lorem ipsum dolor sit amet, consectetur adipiscing elit,COMMENT
LOWpkg/cli/flag_types.go469// --foo or -f {bar} Lorem ipsum dolor sit amet, consectetur adipiscingCOMMENT
LOWpkg/cli/flag_types.go469// --foo or -f {bar} Lorem ipsum dolor sit amet, consectetur adipiscingCOMMENT
LOWpkg/cli/flag_types.go482// Lorem ipsum dolor sit amet, consectetur adipiscingCOMMENT
LOWpkg/cli/flag_types.go482// Lorem ipsum dolor sit amet, consectetur adipiscingCOMMENT
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHpkg/transformers/doc.go2// output records as requested by the user (sort, filter, etc.).COMMENT
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMpkg/mlrval/mlrval_collections.go696// CollectionFold multiplexes ArrayFold or MapFold. The panic here is not robust, but is done toCOMMENT
MEDIUMpkg/dsl/cst/udf.go291 // Definitely a Miller internal coding error if the user put 'return x' inCOMMENT
Empty Error Handlers1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHdocs/src/polyglot-dkvp-io/dkvp_io.py45except:CODE
Deep Nesting1 hit · 1 pts
SeverityFileLineSnippetContext
LOWpython/sketch.py66CODE
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippetContext
LOWdocs/src/mk-func-info.rb55def name_to_display_name_and_link_name(name)CODE
Unused Imports1 hit · 1 pts
SeverityFileLineSnippetContext
LOW…ripts/perf/multilanguage-timings/original/mand/mand.py3CODE
Example Usage Blocks1 hit · 1 pts
SeverityFileLineSnippetContext
LOWtools/release.sh5# Usage:COMMENT