MSVC's implementation of the C++ Standard Library.
This report summarizes scanner evidence for microsoft/STL, a C++ project with 11,177 GitHub stars. SynthScan examined 423,691 lines of code across 1395 source files, recording 1124 pattern matches distributed across 10 syntactic categories. The legacy adjusted pattern signal is 2.5 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1119 finding(s).
Are imports declared and package/API names verified? 3 finding(s).
Are wrappers, guards, and repeated structures necessary? 4 finding(s).
Which changes need focused human review? 1124 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1124 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | NOTICE.txt | 41 | // Copyright (c) Microsoft Corporation. All rights reserved. | COMMENT |
| LOW | NOTICE.txt | 81 | * about the suitability of this software for any purpose. | COMMENT |
| LOW | NOTICE.txt | 101 | // days of receipt. | COMMENT |
| LOW | NOTICE.txt | 121 | // warranties of any kind are expressed or implied. The recipient | COMMENT |
| LOW | NOTICE.txt | 141 | ---------------------- | COMMENT |
| LOW | NOTICE.txt | 161 | // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION | COMMENT |
| LOW | NOTICE.txt | 181 | // YOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE | COMMENT |
| LOW | NOTICE.txt | 201 | // (b) this copyright and permission notice appear in associated | COMMENT |
| LOW | tools/validate/validate.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tools/scripts/charconv_tables_generate.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | …nicode_properties_parse/unicode_properties_data_gen.py | 101 | // | COMMENT |
| LOW | …nicode_properties_parse/unicode_properties_data_gen.py | 121 | // (the "Software") to deal in the Data Files or Software | COMMENT |
| LOW | …nicode_properties_parse/unicode_properties_data_gen.py | 141 | // | COMMENT |
| LOW | …nicode_properties_parse/unicode_properties_data_gen.py | 201 | // | COMMENT |
| LOW | tests/libcxx/expected_results.txt | 881 | std/containers/sequences/vector/vector.capacity/resize_size_value_exceptions.pass.cpp:0 SKIPPED | COMMENT |
| LOW | tests/libcxx/expected_results.txt | 1361 | COMMENT | |
| LOW | tests/libcxx/magic_comments.txt | 1 | // REQUIRES: c++03 | COMMENT |
| LOW | tests/tr1/expected_results.txt | 1 | # Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/include/tdefs.h | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/include/tdefs.h | 21 | // Define the following macros on the command line: | COMMENT |
| LOW | tests/tr1/include/tdefs.h | 41 | #define CSTD :: | COMMENT |
| LOW | tests/tr1/include/tdefs.h | 61 | #define CHECK_STR(left, right) check_str(#left " == " #right, __FILE__, __LINE__, left, right) | COMMENT |
| LOW | tests/tr1/include/tdefs.h | 321 | typedef double _Complex Dbl_complex; | COMMENT |
| LOW | tests/tr1/include/tdefs.h | 341 | #endif // EPS_ULPF | COMMENT |
| LOW | tests/tr1/include/tcvt.h | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/include/tcvt.h | 21 | int leave_chk(const char* fname) { // display message and quit | COMMENT |
| LOW | tests/tr1/include/tspec_random.h | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/string1/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/cstdint/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/cstdint/test.cpp | 21 | #define INT_LEAST32_MAX 0x7fffffff | COMMENT |
| LOW | tests/tr1/tests/complex1/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/memory/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/regex2/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/regex2/test.cpp | 21 | #define ALL (ECMA | BASIC | EXTENDED | AWK | GREP | EGREP) | COMMENT |
| LOW | tests/tr1/tests/locale1/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/cctype/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/cctype/test.cpp | 21 | CHECK(STDx isalpha((int) 'a') != 0); | COMMENT |
| LOW | tests/tr1/tests/cctype/test.cpp | 41 | CHECK(STDx isalnum((int) 'a') != 0); | COMMENT |
| LOW | tests/tr1/tests/cctype/test.cpp | 61 | CHECK(STDx isdigit((int) 'a') == 0); | COMMENT |
| LOW | tests/tr1/tests/cctype/test.cpp | 81 | CHECK(STDx islower((int) 'a') != 0); | COMMENT |
| LOW | tests/tr1/tests/cctype/test.cpp | 101 | CHECK(STDx ispunct((int) 'a') == 0); | COMMENT |
| LOW | tests/tr1/tests/cstdbool/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/cstdbool/test.cpp | 21 | #undef OK | COMMENT |
| LOW | tests/tr1/tests/regex4/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/locale7/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/regex3/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/cerrno/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/functional9/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/functional7/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/algorithm/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/type_traits5/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/functional1/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/functional6/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/cwchar2/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/atomic/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/ios/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/memory1/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/iterator/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/cstdio/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| LOW | tests/tr1/tests/regex1/test.cpp | 1 | // Copyright (c) Microsoft Corporation. | COMMENT |
| 1022 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | stl/inc/xcharconv_ryu.h | 1023 | // Step 2: Determine the interval of valid decimal representations. | COMMENT |
| LOW⚡ | stl/inc/xcharconv_ryu.h | 1030 | // Step 3: Convert to a decimal power base using 64-bit arithmetic. | COMMENT |
| LOW⚡ | stl/inc/xcharconv_ryu.h | 1723 | // Step 2: Determine the interval of valid decimal representations. | COMMENT |
| LOW⚡ | stl/inc/xcharconv_ryu.h | 1731 | // Step 3: Convert to a decimal power base using 128-bit arithmetic. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1092 | // Step 4: Find the shortest decimal representation in the interval of valid representations. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1276 | // Step 5: Print the decimal representation. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1526 | // Step 1: Decode the floating-point number, and unify normalized and subnormal cases. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1790 | // Step 4: Find the shortest decimal representation in the interval of valid representations. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1884 | // Step 5: Print the decimal representation. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 2234 | // Step 1: Decode the floating-point number, and unify normalized and subnormal cases. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | stl/inc/xcharconv_ryu.h | 1023 | // Step 2: Determine the interval of valid decimal representations. | COMMENT |
| LOW⚡ | stl/inc/xcharconv_ryu.h | 1030 | // Step 3: Convert to a decimal power base using 64-bit arithmetic. | COMMENT |
| LOW⚡ | stl/inc/xcharconv_ryu.h | 1723 | // Step 2: Determine the interval of valid decimal representations. | COMMENT |
| LOW⚡ | stl/inc/xcharconv_ryu.h | 1731 | // Step 3: Convert to a decimal power base using 128-bit arithmetic. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1092 | // Step 4: Find the shortest decimal representation in the interval of valid representations. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1276 | // Step 5: Print the decimal representation. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1526 | // Step 1: Decode the floating-point number, and unify normalized and subnormal cases. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1790 | // Step 4: Find the shortest decimal representation in the interval of valid representations. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 1884 | // Step 5: Print the decimal representation. | COMMENT |
| LOW | stl/inc/xcharconv_ryu.h | 2234 | // Step 1: Decode the floating-point number, and unify normalized and subnormal cases. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …icode_properties_parse/grapheme_break_test_data_gen.py | 24 | CODE | |
| LOW | tests/utils/stl/test/file_parsing.py | 107 | CODE | |
| LOW | tests/utils/stl/test/format.py | 48 | CODE | |
| LOW | tests/utils/stl/test/format.py | 75 | CODE | |
| LOW | tests/utils/stl/test/format.py | 187 | CODE | |
| LOW | tests/utils/stl/test/features.py | 23 | CODE | |
| LOW | tests/utils/stl/test/tests.py | 124 | CODE | |
| LOW | tests/utils/stl/test/tests.py | 171 | CODE | |
| LOW | tests/utils/stl/test/tests.py | 195 | CODE | |
| LOW | tests/utils/stl/test/tests.py | 274 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/tr1/run.pl | 7 | # This file is part of a Microsoft-internal legacy test harness, which we hope to replace in the future. | COMMENT |
| MEDIUM | tests/std/run.pl | 7 | # This file is part of a Microsoft-internal legacy test harness, which we hope to replace in the future. | COMMENT |
| MEDIUM | …ts/std/tests/P0896R4_ranges_alg_inplace_merge/test.cpp | 61 | // Test GH-4863: <algorithm>: ranges::inplace_merge doesn't seem to be able to utilize ranges::upper_bound | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/tr1/run.pl | 7 | # This file is part of a Microsoft-internal legacy test harness, which we hope to replace in the future. | COMMENT |
| MEDIUM | tests/std/run.pl | 7 | # This file is part of a Microsoft-internal legacy test harness, which we hope to replace in the future. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/utils/stl/test/format.py | 221 | except Exception as e: | CODE |
| MEDIUM | tests/utils/stl/test/format.py | 187 | def execute(self, test, litConfig): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | benchmarks/inc/lorem.hpp | 9 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam mollis imperdiet massa, at dapibus elit interdum " | CODE |
| LOW | benchmarks/inc/lorem.hpp | 9 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam mollis imperdiet massa, at dapibus elit interdum " | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …nicode_properties_parse/download_unicode_data_files.py | 32 | def download_unicode_data_files(): | CODE |
| LOW | …nicode_properties_parse/unicode_properties_data_gen.py | 280 | def generate_width_estimate_intervals(filename: str, timestamp: str, width_2_ranges: list[PropertyRange]): | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/utils/stl/test/params.py | 9 | CODE |