AI Slop Code Risk Monitor

knex/knex

SlopCodeMonitor badge for knex/knex Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

A query builder for PostgreSQL, MySQL, CockroachDB, SQL Server, SQLite3 and Oracle, designed to be flexible, portable, and fun to use.

3.8 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for knex/knex, a JavaScript project with 20,343 GitHub stars. SynthScan examined 122,779 lines of code across 477 source files, recording 412 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 3.8 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

3.8
Adjusted Signal
3.8
Raw Pattern Score
100%
Time Factor
2026-06-26
Last Push
20.3K
Stars
JavaScript
Language
122.8K
Lines of Code
477
Files
412
Pattern Hits
2026-10-31
Scan Date
0.02
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 34 finding(s).

Hallucinated Dependency & Supply Chain Risk 14.9/100 · LOW

Are imports declared and package/API names verified? 367 finding(s).

Agent Over-Engineering Ratio 1.9/100 · LOW

Are wrappers, guards, and repeated structures necessary? 26 finding(s).

PR Review Velocity Impact 19.4/100 · LOW

Which changes need focused human review? 412 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 10HIGH 0MEDIUM 13LOW 389

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 412 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Fake / Example Data357 hits · 298 pts
SeverityFileLineSnippetContext
LOWtest/integration2/schema/misc.spec.js882 table.text('paragraph').defaultTo('Lorem ipsum Qui quis qui in.');CODE
LOW⚡test/integration2/schema/misc.spec.js895 'create table "test_table_three" ("main" integer not null, "paragraph" text default \'Lorem ipsum Qui CODE
LOW⚡test/integration2/schema/misc.spec.js899 'create table "test_table_three" ("main" integer not null, "paragraph" varchar(max) default \'Lorem ipsuCODE
LOW⚡test/integration2/schema/misc.spec.js903 "create table `test_table_three` (`main` integer not null, `paragraph` text default 'Lorem ipsum Qui quiCODE
LOW⚡test/integration2/schema/misc.spec.js906 'create table "test_table_three" ("main" integer not null, "paragraph" clob default \'Lorem ipsum Qui quCODE
LOW⚡test/integration2/schema/misc.spec.js910 "CREATE TABLE [test_table_three] ([main] int not null, [paragraph] nvarchar(max) CONSTRAINT [test_table_CODE
LOWtest/integration2/schema/misc.spec.js925 expect(result.paragraph).to.eql('Lorem ipsum Qui quis qui in.');CODE
LOWtest/integration2/query/misc/additional.spec.js363 .insert({ balance_foo: 123, email_foo: 'foo@bar.com' })CODE
LOWtest/integration2/query/misc/additional.spec.js366 expect(res).to.eql([{ balance_foo: 123, email_foo: 'foo@bar.com' }]);CODE
LOW⚡test/integration2/query/insert/inserts.spec.js1044 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1054 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1061 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum CODE
LOW⚡test/integration2/query/insert/inserts.spec.js1070 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1080 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1087 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum CODE
LOW⚡test/integration2/query/insert/inserts.spec.js1096 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1109 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum CODE
LOW⚡test/integration2/query/insert/inserts.spec.js1118 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1125 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum CODE
LOW⚡test/integration2/query/insert/inserts.spec.js1162 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1170 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum CODE
LOW⚡test/integration2/query/insert/inserts.spec.js1180 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1191 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum CODE
LOW⚡test/integration2/query/insert/inserts.spec.js1201 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOW⚡test/integration2/query/insert/inserts.spec.js1209 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum CODE
LOWtest/integration2/query/insert/inserts.spec.js72 about: 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js83 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js97 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js111 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js125 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js139 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js156 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js222 about: 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js230 about: 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js243 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js250 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js264 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js271 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js285 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js292 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js306 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js313 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js327 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js337 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js354 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js361 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js381 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suCODE
LOWtest/integration2/query/insert/inserts.spec.js387 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suCODE
LOWtest/integration2/query/insert/inserts.spec.js404 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOWtest/integration2/query/insert/inserts.spec.js410 'Lorem ipsum Minim nostrud Excepteur consectetur enim ut qui sint in veniam in nulla anim do cillum suntCODE
LOWtest/integration2/query/insert/inserts.spec.js439 about: 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js446 about: 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js461 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js468 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js482 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js489 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js503 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js510 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js524 'Lorem ipsum Dolore labore incididunt enim.',CODE
LOWtest/integration2/query/insert/inserts.spec.js531 'Lorem ipsum Dolore labore incididunt enim.',CODE
297 more matches not shown…
Hallucination Indicators10 hits · 100 pts
SeverityFileLineSnippetContext
CRITICALtest/integration2/dialects/sqlite.spec.js50 ).to.eventually.be.fulfilled.and.deep.equal([{ 1: 1 }]);CODE
CRITICALtest/integration2/dialects/sqlite.spec.js65 ).to.eventually.be.fulfilled.and.deep.equal([CODE
CRITICALtest/integration2/dialects/sqlite.spec.js259 ).to.eventually.be.fulfilled.and.deep.equal([{ 1: 1 }]);CODE
CRITICALtest/integration2/query/misc/additional.spec.js1240 await expect(promise).to.eventually.be.rejected.and.to.deep.include(CODE
CRITICALtest/integration2/query/misc/additional.spec.js1329 ).to.be.eventually.rejected.and.deep.include({CODE
CRITICALtest/integration2/query/misc/additional.spec.js1351 ).to.be.eventually.rejected.and.deep.include({CODE
CRITICALtest/integration2/query/select/selects.spec.js268 ).to.eventually.be.fulfilled.and.to.have.lengthOf(2);CODE
CRITICALtest/integration2/query/select/selects.spec.js271 ).to.eventually.be.rejected.and.to.deep.include(CODE
CRITICALtest/cli/migrate-disable-transactions.spec.js57 ).to.eventually.be.fulfilled.and.deep.equal([{ id: 1 }]);CODE
CRITICALtest/cli/migrate-disable-transactions.spec.js106 ).to.eventually.be.fulfilled.and.deep.equal([{ id: 1 }]);CODE
Decorative Section Separators11 hits · 33 pts
SeverityFileLineSnippetContext
MEDIUMtest/integration2/pool/connection-pool.spec.js18 // ── PostgreSQL with native pg.Pool ──────────────────────────────COMMENT
MEDIUMtest/integration2/pool/connection-pool.spec.js117 // ── PostgreSQL with shared KnexPool ─────────────────────────────COMMENT
MEDIUMtest/integration2/pool/connection-pool.spec.js191 // ── MySQL with native pool ──────────────────────────────────────COMMENT
MEDIUMtest/integration2/pool/connection-pool.spec.js263 // ── MySQL2 with native pool ─────────────────────────────────────COMMENT
MEDIUMtest/unit/client/connection-pool.js26 // ── Config validation ──────────────────────────────────────────────COMMENT
MEDIUMtest/unit/client/connection-pool.js63 // ── KnexPool class ────────────────────────────────────────────────COMMENT
MEDIUMtest/unit/client/connection-pool.js75 // ── isTarnPool detection ──────────────────────────────────────────COMMENT
MEDIUMtest/unit/client/connection-pool.js121 // ── Base Client ───────────────────────────────────────────────────COMMENT
MEDIUMtest/unit/client/connection-pool.js170 // ── Destroy behavior ──────────────────────────────────────────────COMMENT
MEDIUMtest/unit/client/connection-pool.js209 // ── PostgreSQL adapter ────────────────────────────────────────────COMMENT
MEDIUMtest/unit/client/connection-pool.js283 // ── MySQL adapter ─────────────────────────────────────────────────COMMENT
Over-Commented Block16 hits · 16 pts
SeverityFileLineSnippetContext
LOWtypes/result.d.ts1// This empty interface serves as a placeholder which userland code can augment toCOMMENT
LOWtypes/result.d.ts21 // But the effective defaults are documented below:COMMENT
LOWtypes/tables.d.ts1// Placeholder interface for Table -> Record mappingCOMMENT
LOWtypes/index.d.ts101 // The base of selection. In intermediate stages this may be unknown.COMMENT
LOWtypes/index.d.ts2141 }COMMENT
LOWtest/integration2/migrate/migration-integration.spec.js341 }COMMENT
LOWtest/tape/pool.js141 Array.from(Array(30)).map(() => {COMMENT
LOWtest-tsd/types.test-d.ts41const knexInstance = knexDefault(clientConfig);COMMENT
LOWdocs/src/guide/index.md741 // So, this is like specifyingCOMMENT
LOWdocs/src/guide/index.md761 // when specifying separate update interface, user will beCOMMENT
LOWscripts/build-for-release.sh1#!/bin/bash -eCOMMENT
LOWscripts/revert-release-to-draft.sh1#!/bin/bashCOMMENT
LOW.github/workflows/release.yml261 # bytes attested are exactly the bytes uploaded. provenance bindsCOMMENT
LOW.github/workflows/release-drafter.yml81 fiCOMMENT
LOWlib/knex-builder/make-knex.js241 // Allow chaining methods from the root object, beforeCOMMENT
LOWlib/query/querycompiler.js81 // For example, if a "having" clause is defined but we're executing a "delete" query, thatCOMMENT
Hyper-Verbose Identifiers15 hits · 15 pts
SeverityFileLineSnippetContext
LOWtest/unit/knex.js411 before(function skipSuiteIfSqliteConfigAbsent() {CODE
LOWtest/unit/knex.js685 before(function skipSuiteIfSqliteConfigAbsent() {CODE
LOWtest/util/tableCreatorHelper.js88async function createParentAndChildTables(knex) {CODE
LOWtest/integration/connection-config-provider.js87 async function runTwoConcurrentTransactions(expectedInvocationCount) {CODE
LOWtest/integration/execution/transaction.js478 function expectQueryEventToHaveBeenTriggered() {CODE
LOWtest/integration/execution/transaction.js598 function captureAndRethrowOriginalError(err) {CODE
LOWbin/utils/cli-config-utils.js107function checkConfigurationOptions(env, opts) {CODE
LOWdocs/.vitepress/knexDialects.ts342function renderMissingSnippetGroup(CODE
LOWdocs/scripts/snippet-utils.d.ts11export function instrumentMarkedStatements(CODE
LOWlib/builder-interface-augmenter.js7function augmentWithBuilderInterface(Target) {CODE
LOWlib/util/helpers.js78function resolveClientNameWithAliases(clientName) {CODE
LOWlib/execution/internal/ensure-connection-callback.js16function ensureConnectionStreamCallback(runner, params) {CODE
LOWlib/dialects/oracle/schema/internal/incrementUtils.js4function createAutoIncrementTriggerAndSequence(columnCompiler) {CODE
LOWlib/dialects/sqlite3/schema/internal/compiler.js120function referencesColumnConstraint(ast, wrap) {CODE
LOWlib/dialects/sqlite3/schema/internal/parser.js244function referencesColumnConstraint(ctx) {CODE
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMdocs/.vitepress/theme/AlgoliaSearchBox.vue129 // behavior to leverage the Router loading featureCOMMENT
MEDIUMlib/knex-builder/make-knex.js14// into it. In other words: you can't leverage Prototype InheritanceCOMMENT
TODO Padding1 hit · 2 pts
SeverityFileLineSnippetContext
LOWdocs/src/guide/migrations.md187 // TODO: implement meCOMMENT