AI Slop Code RIsk Monitor

macports/macports-ports

The MacPorts ports tree

4.4 Low pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for macports/macports-ports, a Tcl project with 1,848 GitHub stars. SynthScan examined 68,085 lines of code across 627 source files, recording 295 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 4.4 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

4.4
Adjusted Signal
4.4
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
1.8K
Stars
Tcl
Language
68.1K
Lines of Code
627
Files
295
Pattern Hits
2026-10-12
Scan Date
0.00
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 18.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 281 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 13 finding(s).

Agent Over-Engineering Ratio 0.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 1 finding(s).

PR Review Velocity Impact 20.1/100 · LOW

Which changes need focused human review? 295 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 5LOW 290

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 295 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block264 hits · 254 pts
SeverityFileLineSnippetContext
LOWdevel/libsockets/files/create-dylib.sh1#!/bin/bashCOMMENT
LOW…bazel/files/xcode_locator_fixes/Xcode6-xcode_locator.m1// Copyright 2015 Google Inc. All rights reserved.COMMENT
LOW…bazel/files/xcode_locator_fixes/Xcode7-xcode_locator.m1// Copyright 2015 Google Inc. All rights reserved.COMMENT
LOW…bazel/files/xcode_locator_fixes/Xcode8-xcode_locator.m1// Copyright 2015 Google Inc. All rights reserved.COMMENT
LOWdevel/libgit2-devel/files/copyfile.h61COMMENT
LOWdevel/libgit2-devel/files/copyfile.h81#define COPYFILE_PACK (1<<22)COMMENT
LOWdevel/libgit2/files/copyfile.h61COMMENT
LOWdevel/libgit2/files/copyfile.h81#define COPYFILE_PACK (1<<22)COMMENT
LOWdevel/libpdel/files/Darwin/hacks.h1#include <sys/param.h>COMMENT
LOW…es/mysql55-connector-cpp/files/examples-CMakeLists.txt1# MacPorts MySQL Connector/C++ examples CMake buildCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h21#ifndef DEFAULT_TEXMFLOCALCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h41#ifndef DEFAULT_TEXMFCONFIGCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h61#ifndef DEFAULT_WEB2CCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h81#ifndef DEFAULT_TEXFORMATSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h101#ifndef DEFAULT_MPPOOLCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h121#ifndef DEFAULT_GLYPHFONTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h141#ifndef DEFAULT_MLBIBINPUTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h161#ifndef DEFAULT_TEXPSHEADERSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h181#ifndef DEFAULT_OPENTYPEFONTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h201#ifndef DEFAULT_ENCFONTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h221#ifndef DEFAULT_PDFTEXCONFIGCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h241#ifndef DEFAULT_FONTCONFIG_FILECOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h261#ifndef DEFAULT_WEBINPUTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h281#ifndef DEFAULT_OVPFONTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h301#ifndef DEFAULT_TEX4HTINPUTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h321#ifndef DEFAULT_CLUAINPUTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h341#ifndef DEFAULT_RUBYINPUTSCOMMENT
LOWtex/texlive-bin/files/texk_kpathsea_paths.h361#ifndef DEFAULT_TEXCOMMENT
LOWnet/junkbuster/files/patch-junkbstr.ini21 # the logfile is where all logging and error messages are writtenCOMMENT
LOWnet/junkbuster/files/patch-junkbstr.ini41 # files specify locations of "for information about trusted referers, see.."COMMENT
LOWnet/libdnsres/files/patch-gethostnamadr.c1--- gethostnamadr.c.org 2005-07-13 17:14:28.000000000 -0700COMMENT
LOWnet/libdnsres/files/patch-getaddrinfo.c1--- getaddrinfo.c.org 2005-07-13 17:14:28.000000000 -0700COMMENT
LOWnet/dnsa/files/patch-sniffid.c1--- sniffid.c.orig Fri Oct 15 13:47:13 2004COMMENT
LOWnet/clash/files/options.yaml1# Port of HTTP(S) proxy server on the local endCOMMENT
LOWnet/clash/files/options.yaml21# Set to true to allow connections to the local-end server fromCOMMENT
LOWnet/clash/files/options.yaml41# When set to false, resolver won't translate hostnames to IPv6 addressesCOMMENT
LOWnet/clash/files/options.yaml61routing-mark: 6666COMMENT
LOWnet/clash/files/options.yaml101 # real IP addressesCOMMENT
LOWnet/clash/files/options.yaml121 # - tcp://1.1.1.1COMMENT
LOWnet/clash/files/options.yaml141 # - '+.facebook.com'COMMENT
LOWnet/clash/files/options.yaml201 cipher: autoCOMMENT
LOWnet/clash/files/options.yaml261 # socks5COMMENT
LOWnet/clash/files/options.yaml321 server: serverCOMMENT
LOWnet/pidgin/files/autogen.sh1#! /bin/shCOMMENT
LOWnet/pidgin/files/autogen.sh21###############################################################################COMMENT
LOWnet/tuic/files/client.toml61# [relay.proxy]COMMENT
LOWnet/tuic/files/server.toml81COMMENT
LOWnet/tuic/files/server.toml101# bind_ipv6 = ["::"]COMMENT
LOWnet/tuic/files/server.toml121# addr = "example.com"COMMENT
LOWnet/rsync-lart/files/copyfile.h61COMMENT
LOWnet/rsync-lart/files/copyfile.h81#define COPYFILE_PACK (1<<22)COMMENT
LOWpython/py-meson/files/rosetta-exe-wrapper.sh1#!/bin/shCOMMENT
LOWsecurity/arti/files/arti.toml1# Configuration for arti, as installed by MacPorts.COMMENT
LOWsecurity/arti/files/arti.toml21# Note that storage.state_dir and storage.cache_dir are deliberately not setCOMMENT
LOWsecurity/arti/files/arti.toml41# See @PREFIX@/share/doc/arti/bridges.mdCOMMENT
LOWsecurity/lastpass-cli/files/version.h1#define LASTPASS_CLI_VERSION "1.5.0.GIT"COMMENT
LOW…-server/files/prefix/etc/dovecot/imap.keytab.README.sh81# kadmin> ext_keytab -k @PREFIX@/etc/dovecot/imap.keytab imap/@host@.@domain@.@tld@COMMENT
LOW…-server/files/prefix/etc/dovecot/imap.keytab.README.sh101# c list "" *COMMENT
LOW…-server/files/prefix/etc/postfix/smtp.keytab.README.sh81# kadmin> ext_keytab -k @PREFIX@/etc/postfix/smtp.keytab smtp/@host@.@domain@.@tld@COMMENT
LOW…-server/files/prefix/etc/postfix/smtp.keytab.README.sh121# (After postfix configured and loaded)COMMENT
204 more matches not shown…
Unused Imports13 hits · 13 pts
SeverityFileLineSnippetContext
LOWpython/py-pyobjc/files/multiinstall.py8CODE
LOWpython/py-pyobjc/files/multiinstall.py9CODE
LOWpython/py-pyobjc/files/multiinstall.py16CODE
LOWpython/py-testfixtures/files/conftest.py4CODE
LOWpython/py-tkinter/files/setup.py1CODE
LOWpython/py-tkinter/files/setup.py1CODE
LOWpython/py-tkinter/files/setup.py4CODE
LOWpython/py-tkinter/files/setup.py5CODE
LOWpython/py-tkinter/files/setup.py6CODE
LOWpython/py-gdbm/files/setup-py3k.py2CODE
LOWpython/py-gdbm/files/setup-py3k.py3CODE
LOWpython/py-gdbm/files/setup-py3k.py4CODE
LOWgis/orfeotoolbox/files/__init__.py5CODE
Self-Referential Comments3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMscience/chemical-mime-data/files/autogen.sh9# This file is free software. The copyright owner gives unlimitedCOMMENT
MEDIUMx11/xinit/files/font_cache.sh6# This file contains Original Code and/or Modifications of Original CodeCOMMENT
MEDIUMx11/xinit/files/font_cache.sh50 # Create a list of all files in the dirCOMMENT
Example Usage Blocks6 hits · 9 pts
SeverityFileLineSnippetContext
LOWaudio/gmpc/files/autogen.sh50# Usage:COMMENT
LOWaudio/gmpc/files/autogen.sh70# Usage:COMMENT
LOWaudio/gmpc/files/autogen.sh123# Usage:COMMENT
LOWaudio/gmpc/files/autogen.sh140# Usage:COMMENT
LOWaudio/gmpc/files/autogen.sh150# Usage:COMMENT
LOWaudio/gmpc/files/autogen.sh161# Usage:COMMENT
Redundant / Tautological Comments4 hits · 6 pts
SeverityFileLineSnippetContext
LOWgnome/grisbi/files/autogen.sh9# Check if autoconf and automake are installedCOMMENT
LOWgnome/grisbi/files/autogen.sh84# Check if the configure script is createdCOMMENT
LOWsysutils/backuppc/files/backuppc_config_template.rb123 # Check if the generated user['uid'] is valid, if not raise an errorCOMMENT
LOWx11/xinit/files/font_cache.sh39# Check if the data in the given directory is newer than its cacheCOMMENT
Slop Phrases1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMnet/clash/files/options.yaml399 # you can use RESTful API to switch proxy is recommended for use in GUI.COMMENT
Decorative Section Separators1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMgraphics/field3d/files/patch-BuildSupport.py4 # ------------------------------------------------------------------------------COMMENT
Structural Annotation Overuse2 hits · 2 pts
SeverityFileLineSnippetContext
LOWsysutils/collectd/files/dep-gen.sh9# ( awk '/^# WARNING: This list is generated/ { exit } { print }' < Portfile | sed '$d' ; ./files/dep-gen.sh ) > PortfilCOMMENT
LOWsysutils/collectd/files/dep-gen.sh362echo "# WARNING: This list is generated by files/dep-gen.sh #"CODE
AI Slop Vocabulary1 hit · 2 pts
SeverityFileLineSnippetContext
LOWnet/pidgin/files/autogen.sh42# variable in 'autogen.args'. For example, say you're using distcc, just addCOMMENT