AI Slop Code Risk Monitor

lupinemachines/lupine

SlopCodeMonitor badge for lupinemachines/lupine Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

LUPINE is a GPU over IP bridge allowing GPUs on remote machines to be attached to CPU-only machines.

3.9 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for lupinemachines/lupine, a C++ project with 2,456 GitHub stars. SynthScan examined 153,878 lines of code across 352 source files, recording 495 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 3.9 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

3.9
Adjusted Signal
3.9
Raw Pattern Score
100%
Time Factor
2026-10-30
Last Push
2.5K
Stars
C++
Language
153.9K
Lines of Code
352
Files
495
Pattern Hits
2026-10-31
Scan Date
0.09
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 13.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 441 finding(s).

Hallucinated Dependency & Supply Chain Risk 4.2/100 · LOW

Are imports declared and package/API names verified? 44 finding(s).

Agent Over-Engineering Ratio 5.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 146 finding(s).

PR Review Velocity Impact 19.0/100 · LOW

Which changes need focused human review? 495 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 31MEDIUM 0LOW 464

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 495 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block265 hits · 245 pts
SeverityFileLineSnippetContext
LOWrpc.cpp1#include "rpc.h"COMMENT
LOWipc.cpp21extern "C" int lupine_ipc_broker_parent_handle(int) { return -1; }COMMENT
LOWdispatch_test.cpp1// Covers the single-port protocol dispatch: an HTTP/2 preface must reach theCOMMENT
LOWcuda_client_memcpy.cpp1#include "lupine_platform.h"COMMENT
LOWcuda_client_memcpy.cpp21#include <sys/uio.h>COMMENT
LOWcuda_client_memcpy.cpp4101// buffer is free to reuse and that later CUDA work sees the bytes. It does notCOMMENT
LOWnccl_client.cpp1// NCCL (libnccl) on the LUPINE client.COMMENT
LOWcuda_client.cpp1#include "device_stdout.h"COMMENT
LOWcuda_client.cpp21#include <sstream>COMMENT
LOWcuda_client.cpp41#include <strings.h>COMMENT
LOWcuda_client.cpp61#include "codegen/gen_cuda_client.h"COMMENT
LOWcuda_client.cpp5121// cuSPARSELt 0.6 offers 2494 fat binaries at init, of which 2220 and 149 MBCOMMENT
LOWnvml_server.h1#ifndef LUPINE_NVML_SERVER_HCOMMENT
LOWmonitor_server.cpp1#include "monitoring.h"COMMENT
LOWmonitor_server.cpp21#include <vector>COMMENT
LOWcuda_server_memcpy.h1#ifndef LUPINE_CUDA_SERVER_MEMCPY_HCOMMENT
LOWtransport.cpp1#include "transport.h"COMMENT
LOWlupine_platform.h81COMMENT
LOWlupine_platform.h101#include <algorithm>COMMENT
LOWlupine_platform.h241}COMMENT
LOWlupine_platform.h421COMMENT
LOWlupine_platform.h621 }COMMENT
LOWlupine_platform.h701// blip then surfaces as a fatal RPC error. Keepalive probes are emittedCOMMENT
LOWhost_defines_stub.h21 "This stub is for host-only builds; use the real toolkit headers with nvcc."COMMENT
LOWhost_defines_stub.h41#if defined(_MSC_VER)COMMENT
LOWrouting.cpp1#include <algorithm>COMMENT
LOWevents.h1#pragma onceCOMMENT
LOWcheckpoint_test.cpp1#include "checkpoint.h"COMMENT
LOWnvshmem_client.cpp1// nvSHMEM's host library (libnvshmem_host.so.3) on the LUPINE client.COMMENT
LOWnvshmem_client.cpp21// So this shim forwards nothing and has no server side. Every entry pointCOMMENT
LOWnvshmem_client.cpp81 signature { return refuse_status(LUPINE_NVSHMEM_NAME(name)); }COMMENT
LOWlupine_log.h1#ifndef LUPINE_LOG_HCOMMENT
LOWmacos_library_profile.h1#ifndef LUPINE_MACOS_LIBRARY_PROFILE_HCOMMENT
LOWmacos_library_profile.h161#endifCOMMENT
LOWvisible_devices.h1#pragma onceCOMMENT
LOWclient_routing.h1#pragma onceCOMMENT
LOWh2.cpp1#include "client_bundle.h"COMMENT
LOWh2.cpp21#include <openssl/ssl.h>COMMENT
LOWhip_server.cpp1#include <hip/hip_runtime_api.h>COMMENT
LOWdevice_ioctl_client.cpp1#include "client_routing.h"COMMENT
LOWnvml_server.cpp1#include "nvml_server.h"COMMENT
LOWserver_checkpoint.cpp1#include "server_checkpoint.h"COMMENT
LOWserver_checkpoint.h1#pragma onceCOMMENT
LOWh2_test.cpp1#include "client_bundle.h"COMMENT
LOWh2_test.cpp21#include <nghttp2/nghttp2.h>COMMENT
LOWcuda_profiler_compat.h1#ifndef LUPINE_CUDA_PROFILER_COMPAT_HCOMMENT
LOWhip_client.cpp1#include <atomic>COMMENT
LOWdevice_ioctl_rpc_test.cpp1#include "client_routing.h"COMMENT
LOWdevice_ioctl_server.cpp1#include "device_ioctl.h"COMMENT
LOWnvml_client.cpp1#include "lupine_platform.h"COMMENT
LOWnvml_client.cpp361#endifCOMMENT
LOWdispatch.h1#ifndef LUPINE_DISPATCH_HCOMMENT
LOWrpc.h1#ifndef RPC_HCOMMENT
LOWrpc.h81static constexpr intptr_t LUPINE_HOST_ALLOCATION_W_OFFSET =COMMENT
LOWrpc.h261// Owners use this before joining workers that may be blocked on the transport.COMMENT
LOWrpc.h321// into the session named by the token it handed out in its handshake response.COMMENT
LOWcuda_compat.h1#ifndef LUPINE_CUDA_COMPAT_HCOMMENT
LOWcuda_compat.h281COMMENT
LOWcuda_compat.h301 LUPINE_FORWARD_DRIVER(cuKernelGetLibrary, library, kernel);COMMENT
LOWtest_platform.h1#ifndef LUPINE_TEST_PLATFORM_HCOMMENT
205 more matches not shown…
Hyper-Verbose Identifiers136 hits · 147 pts
SeverityFileLineSnippetContext
LOW⚡test/test_rocm_runner.py28 def test_native_environment_drops_client_settings(self):CODE
LOW⚡test/test_rocm_runner.py36 def test_empty_test_selection_is_not_a_pass(self):CODE
LOW⚡test/test_rocm_runner.py40 def test_timeout_reaps_child_processes(self):CODE
LOW⚡test/test_rocm_runner.py47 def test_existing_listener_is_not_accepted_as_our_server(self):CODE
LOWtest/test_rocm_runner.py59 def test_remote_shell_stops_its_server_process_group(self):CODE
LOWtest/test_rocm_runner.py90 def test_missing_hip_symbols_cannot_fall_back_to_native_runtime(self):CODE
LOWtest/test_rocm_runner.py126 def test_failed_rebuild_does_not_run_a_stale_executable(self):CODE
LOWpython/auto/tests/test_auto.py9def test_activate_uses_explicit_gateway_for_existing_session(monkeypatch):CODE
LOWpython/auto/tests/test_auto.py26def test_activate_requires_gateway_for_existing_session(monkeypatch):CODE
LOWpython/auto/tests/test_auto.py35def test_activate_acquires_cloud_session_when_unbound(monkeypatch):CODE
LOWpython/auto/tests/test_auto.py60def test_startup_shows_login_hint_without_aborting(monkeypatch):CODE
LOWpython/auto/tests/test_auto.py75def test_install_defers_activation_until_cuda_import(monkeypatch):CODE
LOWpython/auto/tests/test_auto.py90def test_activate_respects_explicit_server(monkeypatch):CODE
LOWpython/auto/tests/test_auto.py104def test_activate_can_be_disabled(monkeypatch):CODE
LOWpython/tests/test_bundles.py117def test_resolve_downloads_verifies_and_revalidates(monkeypatch, tmp_path):CODE
LOWpython/tests/test_bundles.py141def test_resolve_repairs_a_corrupt_cache(monkeypatch, tmp_path):CODE
LOWpython/tests/test_bundles.py153def test_resolve_follows_redirect_and_preserves_session(monkeypatch, tmp_path):CODE
LOWpython/tests/test_bundles.py168def test_resolve_rejects_mixed_server_bundles(monkeypatch, tmp_path):CODE
LOWpython/tests/test_bundles.py183def test_resolve_rejects_unsafe_archive_paths(monkeypatch, tmp_path):CODE
LOWpython/tests/test_bundles.py193def test_resolve_rejects_a_bundle_missing_a_required_shim(monkeypatch, tmp_path):CODE
LOWpython/tests/test_bundles.py204def test_resolve_rejects_a_file_the_manifest_does_not_declare(monkeypatch, tmp_path):CODE
LOWpython/tests/test_bundles.py246def test_unix_platform_keys_follow_the_machine(monkeypatch):CODE
LOWpython/tests/test_operator_preparation.py20def test_torch_wheel_hash_mismatch_prevents_extraction(tmp_path, monkeypatch):CODE
LOWpython/tests/test_operator_preparation.py29def test_only_operator_libraries_and_headers_are_extracted(tmp_path, monkeypatch):CODE
LOWpython/tests/test_operator_preparation.py49def test_sdk_provider_keeps_versions_and_only_bridges_adapted_exports(tmp_path):CODE
LOWpython/tests/test_native_torch.py40def test_arange_and_scalar_arithmetic(backend):CODE
LOWpython/tests/test_native_torch.py50def test_strided_broadcast_and_inplace(backend):CODE
LOWpython/tests/test_native_torch.py91def test_reductions_over_strided_views(backend):CODE
LOWpython/tests/test_native_torch.py102def test_unsupported_operator_is_explicit(backend):CODE
LOWpython/tests/test_native_torch.py109def test_storage_lifetime_tracks_views(backend):CODE
LOWpython/tests/test_native_torch.py126def test_overlapping_writes_are_rejected(backend):CODE
LOWpython/tests/test_native_torch.py135def test_empty_and_nonfinite_fill(backend):CODE
LOWpython/tests/test_native_torch.py148def test_unary_functions_and_activation_gradients(backend):CODE
LOWpython/tests/test_native_torch.py164def test_seeded_random_values_are_generated_on_gpu(backend):CODE
LOWpython/tests/test_native_torch.py183def test_softmax_forward_and_backward(backend, logarithmic, dim):CODE
LOWpython/tests/test_native_torch.py204def test_linear_training_step_and_batched_matmul(backend):CODE
LOWpython/tests/test_native_torch.py233def test_layer_norm_forward_and_backward(backend, shape):CODE
LOWpython/tests/test_native_torch.py258def test_convolution_forward_and_backward(backend, groups, stride, dilation):CODE
LOWpython/tests/test_native_torch.py301def test_convolution_selective_gradients(backend, gradient):CODE
LOWpython/tests/test_native_torch.py318def test_convolution_empty_batch_gradients(backend):CODE
LOWpython/tests/test_native_torch.py331def test_matmul_transposed_views_and_empty_inner_dimension(backend):CODE
LOWpython/tests/test_native_torch.py340def test_math_attention_and_fully_masked_rows(backend):CODE
LOWpython/tests/test_native_torch.py368def test_cpu_scalar_left_operand(backend):CODE
LOWpython/tests/test_native_torch.py380def test_dtype_converting_transfers(backend):CODE
LOWpython/tests/test_native_torch.py398def test_non_scalar_cpu_left_operand_is_rejected(backend):CODE
LOW⚡python/tests/test_native_abi.py21def test_narrow_spills_use_linux_slots_after_eight_general_registers():CODE
LOW⚡python/tests/test_native_abi.py29def test_float_arguments_have_a_separate_register_bank():CODE
LOW⚡python/tests/test_native_abi.py35def test_promoted_parameters_accept_existing_ctypes_values():CODE
LOW⚡python/tests/test_native_abi.py42def test_spilled_floats_preserve_bits_in_eight_byte_slots():CODE
LOWpython/tests/test_native_abi.py56def test_spilled_bool_values_are_canonical():CODE
LOWpython/tests/test_native_abi.py64def test_native_driver_functions_keep_their_original_abi():CODE
LOWpython/tests/test_native_abi.py77def test_temporary_allocation_is_freed_when_body_fails(cached):CODE
LOWpython/tests/test_native_abi.py97def test_failed_temporary_allocation_does_not_free_a_pointer():CODE
LOWpython/tests/test_native_abi.py120def test_converted_mixed_register_and_stack_arguments(converted_fixture):CODE
LOW⚡python/tests/test_lupine_adapter.py35def test_normalize_server_urls():CODE
LOW⚡python/tests/test_lupine_adapter.py42def test_normalize_server_rejects_empty():CODE
LOW⚡python/tests/test_lupine_adapter.py48def test_normalize_hosts_sequence():CODE
LOW⚡python/tests/test_lupine_adapter.py53def test_servers_from_env_splits():CODE
LOW⚡python/tests/test_lupine_adapter.py63def test_session_requires_host_or_env(monkeypatch):CODE
LOW⚡python/tests/test_lupine_adapter.py69def test_session_configures_env_and_restores(monkeypatch):CODE
76 more matches not shown…
Cross-Language Confusion26 hits · 115 pts
SeverityFileLineSnippetContext
HIGHtest/rocm_runner.py328 self.remote(f"kill -TERM -{remote_pid} 2>/dev/null || true; "CODE
HIGHtest/rocm_runner.py329 f"sleep 0.2; kill -KILL -{remote_pid} 2>/dev/null || true")CODE
HIGHcodegen/ops.py96 # A SEND_ONLY NULLABLE LENGTH array the caller may leave null; a presenceCOMMENT
HIGH⚡codegen/ops.py274 f" ({self.length} != 0 && rpc_read(conn, {self.parameter.name}, {self.length}) < 0) ||\n"CODE
HIGH⚡codegen/ops.py278 f" ({self.transfer_size_expr()} != 0 && rpc_read(conn, {self.parameter.name}, {self.transfer_sizeCODE
HIGHcodegen/ops.py43 f" ({name}_present && rpc_write(conn, {name}, sizeof({self.base_type})) < 0) ||\n"CODE
HIGHcodegen/ops.py62 f" ({name}_present && rpc_read(conn, &{name}, sizeof({self.base_type})) < 0) ||\n"CODE
HIGHcodegen/ops.py73 f" ({self.parameter.name}_present && rpc_write(conn, &{self.parameter.name}, sizeof({self.ptr.ptr_to.CODE
HIGHcodegen/ops.py80 f" ({self.parameter.name}_present && rpc_read(conn, {self.parameter.name}, sizeof({self.ptr.ptr_to.foCODE
HIGHcodegen/ops.py239 " ({size} != 0 && rpc_read(conn, {param_name}, {size}) < 0) ||\n".format(CODE
HIGH⚡codegen/ops.py288 the requested capacity (0 when the anchor array is null, which is aSTRING
HIGH⚡codegen/ops.py911 f" ({name}_width == 0 && rpc_write(conn, &{name}, sizeof({name})) < 0) ||\n"STRING
HIGH⚡codegen/ops.py915 f" ({name}_width != 0 && rpc_write(conn, {name}, {name}_width) < 0) ||\n"STRING
HIGH⚡codegen/ops.py923 f" ({name}_width != 0 && rpc_read(conn, {name}, {name}_width) < 0) ||\n"STRING
HIGHcodegen/ops.py16 A pointer to one value that may be null; a presence byte leads it on theSTRING
HIGHcodegen/ops.py710 f" ({name}_len != 0 && rpc_write(conn, {name}, {name}_len) < 0) ||\n"STRING
HIGHcodegen/ops.py951 f" ({name}_width == 0 && rpc_read(conn, &{name}, sizeof({name})) < 0) ||\n"STRING
HIGHcodegen/ops.py955 f" ({name}_width != 0 && rpc_read(conn, {self.server_slot()}, {name}_width) < 0) ||\n"STRING
HIGHcodegen/ops.py970 f" ({name}_width != 0 && rpc_write(conn, {self.server_slot()}, {name}_width) < 0) ||\n"STRING
HIGHcodegen/ops.py1026 f" ({name}_size != 0 && rpc_write(conn, {name}, {name}_size) < 0) ||\n"STRING
HIGHcodegen/ops.py1063 f" {name}_size != 0 && rpc_read(conn, {name}_bytes.data(), {name}_size) < 0) ||\n"STRING
HIGHcodegen/emit.py579 " std::memcpy(bytes.data() + offset, &null, sizeof(void *));\n"CODE
HIGHthird_party/machso/aot/lower.py70 ' if (result<0 && result>=-4095) {*g___errno_location()=(int)-result;return -1;}\n'CODE
HIGHthird_party/machso/aot/modules.py98 if (version ? (!symbol->version || strcmp(version,symbol->version)) : symbol->hidden) continue;CODE
HIGHthird_party/machso/aot/modules.py110 if (symbol->is_tls && address && !error) {CODE
HIGHthird_party/machso/aot/native_abi.py153 ' if (aot_export_entries[i].target && address==aot_export_entries[i].target)\n'CODE
Deep Nesting40 hits · 40 pts
SeverityFileLineSnippetContext
LOWtest/benchmark_native_torch.py13CODE
LOWtest/rocm_runner.py381CODE
LOWtest/rocm_runner.py173CODE
LOWtest/rocm_runner.py291CODE
LOWcmake/split_release_asset.py8CODE
LOWcmake/cuda_wheels.py41CODE
LOWpython/verify_release.py40CODE
LOWpython/verify_release.py139CODE
LOWpython/tests/test_macos_cuda_host_memory.py18CODE
LOWpython/lupine/_native.py148CODE
LOWpython/lupine/_backend/native/__init__.py87CODE
LOWpython/lupine/_backend/native/runtime.py48CODE
LOWcodegen/annotationgen.py22CODE
LOWcodegen/emit.py104CODE
LOWcodegen/emit.py231CODE
LOWcodegen/codegen.py362CODE
LOWcodegen/codegen.py533CODE
LOWcodegen/codegen.py1004CODE
LOWcodegen/codegen.py1111CODE
LOWcodegen/codegen.py1210CODE
LOWcodegen/codegen.py1266CODE
LOWcodegen/codegen.py1724CODE
LOWcodegen/codegen.py2140CODE
LOWthird_party/machso/link_bundle.py13CODE
LOWthird_party/machso/machso.py193CODE
LOWthird_party/machso/machso.py349CODE
LOWthird_party/machso/aot/bundle.py83CODE
LOWthird_party/machso/aot/macho.py122CODE
LOWthird_party/machso/aot/ifunc.py32CODE
LOWthird_party/machso/aot/tunables.py8CODE
LOWthird_party/machso/aot/graph.py205CODE
LOWthird_party/machso/aot/modules.py7CODE
LOWthird_party/machso/aot/headers.py28CODE
LOWthird_party/machso/aot/emit.py25CODE
LOWthird_party/machso/aot/emit.py189CODE
LOWthird_party/machso/aot/emit.py36CODE
LOWthird_party/machso/aot/emit.py280CODE
LOWthird_party/machso/aot/ubuntu.py23CODE
LOWthird_party/machso/aot/ubuntu.py86CODE
LOWthird_party/machso/aot/ubuntu.py103CODE
Empty Error Handlers5 hits · 25 pts
SeverityFileLineSnippetContext
HIGHtest/rocm_runner.py254except subprocess.TimeoutExpired:CODE
HIGHtest/rocm_runner.py295except OSError:CODE
HIGHpython/lupine/_bundles.py139except FileNotFoundError:CODE
HIGHpython/lupine/_credentials.py62except FileNotFoundError:CODE
HIGHpython/lupine/_cloud.py245except LupineError:CODE
Unused Imports15 hits · 15 pts
SeverityFileLineSnippetContext
LOWpython/verify_release.py4CODE
LOWpython/auto/lupine_auto/__init__.py3CODE
LOWpython/lupine/_bundles.py3CODE
LOWpython/lupine/_credentials.py3CODE
LOWpython/lupine/_cloud.py3CODE
LOWpython/lupine/__init__.py25CODE
LOWpython/lupine/_native.py37CODE
LOWpython/lupine/_login.py3CODE
LOWpython/lupine/__main__.py3CODE
LOWpython/lupine/_backend/device.py3CODE
LOWpython/lupine/_backend/__init__.py7CODE
LOWpython/lupine/_backend/setup.py16CODE
LOWpython/lupine/_backend/ext.py25CODE
LOWpython/lupine/_backend/native/__init__.py9CODE
LOWpython/lupine/_backend/native/runtime.py3CODE
Fake / Example Data3 hits · 3 pts
SeverityFileLineSnippetContext
LOWpython/tests/test_login.py45 "user": {"email": "user@example.com", "name": "Example User"},CODE
LOWpython/tests/test_login.py57 assert result.email == "user@example.com"CODE
LOWpython/tests/test_cli.py12 or SimpleNamespace(email="user@example.com", name="Example User"),CODE
Excessive Try-Catch Wrapping3 hits · 2 pts
SeverityFileLineSnippetContext
LOWpython/lupine/_cloud.py190 except Exception:CODE
LOWpython/lupine/_native.py89 except Exception as exc:CODE
LOWcodegen/codegen.py1808 except Exception as e:STRING
Modern Structural Boilerplate2 hits · 2 pts
SeverityFileLineSnippetContext
LOWpython/auto/lupine_auto/__init__.py108__all__ = ["DEFAULT_SERVER", "activate", "enabled", "install", "startup"]CODE
LOWpython/lupine/__init__.py294__all__ = [CODE