MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license.
This report presents the forensic synthetic code analysis of minio/minio, a Go project with 61,329 GitHub stars. SynthScan v2.0 examined 391,826 lines of code across 1130 source files, recording 1023 pattern matches distributed across 13 syntactic categories. The overall adjusted score of 2.8 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1023 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | main.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/warm-backend.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/background-newdisks-heal-ops.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/xl-storage-errors.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/streaming-signature-v4.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/streaming-signature-v4.go | 241 | func (cr *s3ChunkedReader) Close() (err error) { | COMMENT |
| LOW | cmd/batch-expire_test.go | 1 | // Copyright (c) 2015-2023 MinIO, Inc. | COMMENT |
| LOW | cmd/bucket-policy.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/bucket-lifecycle.go | 1 | // Copyright (c) 2015-2024 MinIO, Inc. | COMMENT |
| LOW | cmd/erasure-metadata.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/admin-heal-ops.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/admin-heal-ops.go | 601 | func (h *healSequence) stop() { | COMMENT |
| LOW | cmd/admin-heal-ops.go | 821 | // according to settings. At each "safe" point it also checks if an | COMMENT |
| LOW | cmd/xl-storage-meta-inline.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/bucket-replication_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/namespace-lock_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/endpoint-ellipses_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/signature-v4.go | 1 | // Copyright (c) 2015-2023 MinIO, Inc. | COMMENT |
| LOW | cmd/signature-v4.go | 161 | } | COMMENT |
| LOW | cmd/metacache-entries_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/bucket-quota.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/data-scanner.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/data-scanner.go | 261 | COMMENT | |
| LOW | cmd/data-scanner.go | 281 | // When selected there is a one in healObjectSelectProb that any object will be chosen for heal scan. | COMMENT |
| LOW | cmd/iam.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/iam.go | 741 | if nerr.Err != nil { | COMMENT |
| LOW | cmd/iam.go | 761 | // where the parent user is the DN of the actual LDAP user. The parent user | COMMENT |
| LOW | cmd/iam.go | 1441 | COMMENT | |
| LOW | cmd/iam.go | 2401 | // includes `null`, `{}` and `{"Statement": null}`. In fact, MinIO Console | COMMENT |
| LOW | cmd/iam.go | 2461 | // must be restricted by it. So, we set `.IsOwner` to false here | COMMENT |
| LOW | cmd/metacache-stream.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/metacache-stream.go | 41 | // | COMMENT |
| LOW | cmd/config.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/site-replication-metrics.go | 1 | // Copyright (c) 2015-2023 MinIO, Inc. | COMMENT |
| LOW | cmd/http-stats.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/metacache-server-pool.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/rebalance-admin.go | 1 | // Copyright (c) 2022 MinIO, Inc. | COMMENT |
| LOW | cmd/erasure-metadata-utils.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/utils_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/os-dirent_ino.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/object-api-multipart_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/object-api-multipart_test.go | 241 | { | COMMENT |
| LOW | cmd/object-api-multipart_test.go | 261 | // But the uploadID is invalid. | COMMENT |
| LOW | cmd/object-api-multipart_test.go | 461 | }, | COMMENT |
| LOW | cmd/object-api-multipart_test.go | 1101 | // {bucketNames[0], "", "min", "", "", -1, listMultipartResults[7], nil, true}, | COMMENT |
| LOW | cmd/object-api-multipart_test.go | 1121 | {bucketNames[1], "", "minio-object-1.txt", uploadIDs[1], "", 100, listMultipartResults[16], nil, true}, | COMMENT |
| LOW | cmd/object-api-multipart_test.go | 1141 | // Objects used: `objectNames[1-5]`. | COMMENT |
| LOW | cmd/metrics-v3-bucket-replication.go | 1 | // Copyright (c) 2015-2024 MinIO, Inc. | COMMENT |
| LOW | cmd/config-migrate.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/object-handlers-common_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/postpolicyform.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/xl-storage_windows_test.go | 1 | //go:build windows | COMMENT |
| LOW | cmd/metrics-v3-ilm.go | 1 | // Copyright (c) 2024 MinIO, Inc. | COMMENT |
| LOW | cmd/erasure-sets_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/bucket-object-lock.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/bucket-object-lock.go | 121 | return ObjectLocked{} | COMMENT |
| LOW | cmd/object-api-listobjects_test.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/lock-rest-server.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/admin-router.go | 1 | // Copyright (c) 2015-2021 MinIO, Inc. | COMMENT |
| LOW | cmd/admin-router.go | 61 | ) | COMMENT |
| 886 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cmd/erasure-object_test.go | 1225 | // Step 1: create a bucket | COMMENT |
| LOW⚡ | cmd/erasure-object_test.go | 1231 | // Step 2: Upload an object with a random content | COMMENT |
| LOW | cmd/erasure-object_test.go | 1242 | // Step 3: Upload the object with some disks offline | COMMENT |
| LOW | cmd/erasure-object_test.go | 1258 | // Step 4: Try to read the object back and check its md5sum | COMMENT |
| LOW | docs/bucket/notifications/README.md | 73 | ### Step 1: Add AMQP endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 143 | ### Step 2: Enable RabbitMQ bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 154 | ### Step 3: Test on RabbitMQ | COMMENT |
| LOW | docs/bucket/notifications/README.md | 210 | ### Step 1: Add MQTT endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 270 | ### Step 2: Enable MQTT bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 281 | ### Step 3: Test on MQTT | COMMENT |
| LOW | docs/bucket/notifications/README.md | 341 | ### Step 1: Ensure Elasticsearch minimum requirements are met | COMMENT |
| LOW | docs/bucket/notifications/README.md | 345 | ### Step 2: Add Elasticsearch endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 403 | ### Step 3: Enable Elastichsearch bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 418 | ### Step 4: Test on Elasticsearch | COMMENT |
| LOW | docs/bucket/notifications/README.md | 512 | ### Step 1: Add Redis endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 563 | ### Step 2: Enable Redis bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 578 | ### Step 3: Test on Redis | COMMENT |
| LOW | docs/bucket/notifications/README.md | 611 | ### Step 1: Add NATS endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 685 | ### Step 2: Enable NATS bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 696 | ### Step 3: Test on NATS | COMMENT |
| LOW | docs/bucket/notifications/README.md | 860 | ### Step 1: Ensure postgresql minimum requirements are met | COMMENT |
| LOW | docs/bucket/notifications/README.md | 864 | ### Step 2: Add PostgreSQL endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 920 | ### Step 3: Enable PostgreSQL bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 939 | ### Step 4: Test on PostgreSQL | COMMENT |
| LOW | docs/bucket/notifications/README.md | 993 | ### Step 1: Ensure MySQL minimum requirements are met | COMMENT |
| LOW | docs/bucket/notifications/README.md | 997 | ### Step 2: Add MySQL server endpoint configuration to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1056 | ### Step 3: Enable MySQL bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1074 | ### Step 4: Test on MySQL | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1100 | ### Step 1: Ensure minimum requirements are met | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1104 | ### Step 2: Add Kafka endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1170 | ### Step 3: Enable Kafka bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1181 | ### Step 4: Test on Kafka | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1258 | ### Step 1: Add Webhook endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1304 | ### Step 2: Enable Webhook bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1326 | ### Step 3: Test with Thumbnailer | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1364 | ### Step 1: Add NSQ endpoint to MinIO | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1414 | ### Step 2: Enable NSQ bucket notification using MinIO client | COMMENT |
| LOW | docs/bucket/notifications/README.md | 1425 | ### Step 3: Test on NSQ | COMMENT |
| LOW⚡ | docs/tuning/README.md | 12 | #### Step 1 - download `tuned.conf` from the referenced link | COMMENT |
| LOW⚡ | docs/tuning/README.md | 17 | #### Step 2 - install tuned.conf as supported performance profile on all nodes | COMMENT |
| LOW⚡ | docs/tuning/README.md | 23 | #### Step 3 - to enable minio performance profile on all the nodes | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/metrics-v3-ilm.go | 3 | // # This file is part of MinIO Object Storage stack | COMMENT |
| MEDIUM | cmd/metrics-v3-system-cpu.go | 3 | // # This file is part of MinIO Object Storage stack | COMMENT |
| MEDIUM | cmd/metrics-v3-system-memory.go | 3 | // # This file is part of MinIO Object Storage stack | COMMENT |
| MEDIUM | cmd/metrics-v3-system-process.go | 3 | // # This file is part of MinIO Object Storage stack | COMMENT |
| MEDIUM | cmd/metrics-v3-cluster-notification.go | 3 | // # This file is part of MinIO Object Storage stack | COMMENT |
| MEDIUM | internal/kms/config_test.go | 3 | // # This file is part of MinIO Object Storage stack | COMMENT |
| MEDIUM | internal/config/browser/help.go | 3 | // # This file is part of MinIO Object Storage stack | COMMENT |
| MEDIUM | docs/bucket/replication/setup_replication.sh | 7 | #### Create a replication admin on source alias | COMMENT |
| MEDIUM | docs/bucket/replication/setup_replication.sh | 48 | # Create a replication user : repluser on dest alias | COMMENT |
| MEDIUM | helm/minio/values.yaml | 130 | ## Create a secret with private.key and public.crt files and pass that here. Ref: https://github.com/minio/minio/tree/ | COMMENT |
| MEDIUM | helm/minio/values.yaml | 529 | ## The following section documents environment variables for enabling external identity management using an OpenID Conne | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | cmd/data-scanner.go | 431 | if !f.oldCache.Info.replication.Empty() && f.oldCache.Info.replication.Config.HasActiveRules(prefix, true) { | CODE |
| CRITICAL | internal/s3select/sql/statement.go | 73 | if selectAST.Expression.Expressions[0].Expression.And[0].Condition[0].Operand.Operand.Left.Left.Primary.JPathExpr.Stri | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/bucket-lifecycle.go | 837 | // Essentially the same as S3Select barring the xml name. | COMMENT |
| MEDIUM | cmd/server_test.go | 1055 | // Run the test with -race flag to utilize this | COMMENT |
| MEDIUM | cmd/veeam-sos-api.go | 81 | // - The object should be present in all buckets accessed by Veeam products that want to leverage the SOSAPI functionali | COMMENT |
| MEDIUM | helm/minio/values.yaml | 518 | ## Please refer for comprehensive list https://docs.min.io/community/minio-object-store/reference/minio-server/minio-s | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cmd/erasure-object_test.go | 1225 | // Step 1: create a bucket | COMMENT |
| LOW⚡ | cmd/erasure-object_test.go | 1231 | // Step 2: Upload an object with a random content | COMMENT |
| LOW | cmd/erasure-object_test.go | 1242 | // Step 3: Upload the object with some disks offline | COMMENT |
| LOW | cmd/erasure-object_test.go | 1258 | // Step 4: Try to read the object back and check its md5sum | COMMENT |
| LOW | cmd/admin-handlers-idp-config.go | 172 | // target, we need to check if a configuration value has been set previously | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | internal/arn/arn.go | 31 | // In this implementation, account-id is empty. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/distributed/iam-import-with-openid.sh | 51 | # Verify if buckets / objects accessible using service account | COMMENT |
| LOW | docs/resiliency/resiliency-verify-script.sh | 41 | # Check if check sums match for source and destination directories | COMMENT |
| LOW | docs/bucket/replication/setup_ilm_expiry_replication.sh | 112 | ## Check if ILM expiry rules replicated | COMMENT |
| LOW | docs/bucket/replication/setup_ilm_expiry_replication.sh | 204 | ## Check if latest updated rules get replicated to all sites post re-enable of ILM expiry rules replication | COMMENT |
| LOW | buildscripts/verify-healing-empty-erasure-set.sh | 57 | # Check if we should retry | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker-buildx.sh | 6 | ## All binaries are static make sure to disable CGO. | COMMENT |
| LOW | buildscripts/cross-compile.sh | 8 | ## All binaries are static make sure to disable CGO. | COMMENT |
| LOW | helm/minio/values.yaml | 374 | ## make sure to disable this if you are using LDAP. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | internal/s3select/sql/analysis.go | 341 | // TODO: implement other functions | COMMENT |
| LOW | internal/s3select/sql/funceval.go | 141 | // TODO: implement | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/test-utils_test.go | 310 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/sts/dex.yaml | 74 | - email: "admin@example.com" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/sts/client_grants/__init__.py | 63 | def _create_credentials_fetcher(self): | CODE |