AI Slop Code Risk Monitor

nxtrace/NTrace-core

SlopCodeMonitor badge for nxtrace/NTrace-core Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

NextTrace, an open source visual route tracking CLI tool

1.4 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for nxtrace/NTrace-core, a Go project with 8,262 GitHub stars. SynthScan examined 113,090 lines of code across 503 source files, recording 86 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 1.4 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.4
Adjusted Signal
1.4
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
8.3K
Stars
Go
Language
113.1K
Lines of Code
503
Files
86
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 60 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 5.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 54 finding(s).

PR Review Velocity Impact 6.3/100 · LOW

Which changes need focused human review? 86 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 2MEDIUM 26LOW 58

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 86 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators24 hits · 72 pts
SeverityFileLineSnippetContext
MEDIUMutil/trace_test.go11// ──────── GetIPHeaderLength ────────COMMENT
MEDIUMutil/trace_test.go56// ──────── GetICMPID / GetICMPSeq ────────COMMENT
MEDIUMutil/trace_test.go87// ──────── GetTCPPorts / GetTCPSeq ────────COMMENT
MEDIUMutil/trace_test.go119// ──────── GetUDPPorts / GetUDPSeq / GetUDPSeqv6 ────────COMMENT
MEDIUMutil/trace_test.go166// ──────── GetICMPResponsePayload ────────COMMENT
MEDIUMutil/util_test.go17// ──────── IsIPv6 ────────COMMENT
MEDIUMutil/util_test.go31// ──────── AddrIP ────────COMMENT
MEDIUMutil/util_test.go67// ──────── StringInSlice ────────COMMENT
MEDIUMutil/util_test.go81// ──────── HideIPPart ────────COMMENT
MEDIUMutil/util_test.go96// ──────── UDPBaseSum ────────COMMENT
MEDIUMutil/util_test.go117// ──────── FudgeWordForSeq ────────COMMENT
MEDIUMutil/util_test.go134// ──────── MakePayloadWithTargetChecksum ────────COMMENT
MEDIUMutil/util_test.go537// ──────── GetPowProvider ────────COMMENT
MEDIUMutil/dns_resolver.go11// ──────────────────────────────────────────────────COMMENT
MEDIUMutil/dns_resolver.go17// ──────────────────────────────────────────────────COMMENT
MEDIUMutil/dns_resolver_test.go17// ── ResolverForDot 映射 ─────────────────────────────COMMENT
MEDIUMutil/dns_resolver_test.go54// ── IP 字面量短路 ────────────────────────────────────COMMENT
MEDIUMutil/dns_resolver_test.go74// ── DoT 成功时不走 fallback ──────────────────────────COMMENT
MEDIUMutil/dns_resolver_test.go97// ── 未配置 DoT 时直接走系统 DNS ──────────────────────COMMENT
MEDIUMutil/dns_resolver_test.go120// ── DoT 失败后回退系统 DNS ───────────────────────────COMMENT
MEDIUMutil/dns_resolver_test.go153// ── DoT 失败且 fallback=false 时返回错误 ─────────────COMMENT
MEDIUMipgeo/ipfilter_test.go10// ──────── cidrRangeContains ────────COMMENT
MEDIUMipgeo/ipfilter_test.go29// ──────── Filter: IPv4 RFC ranges ────────COMMENT
MEDIUMipgeo/ipfilter_test.go107// ──────── Filter: IPv6 ranges ────────COMMENT
Hyper-Verbose Identifiers28 hits · 35 pts
SeverityFileLineSnippetContext
LOWserver/web/assets/mtr_agg.js108 function mergeUnknownIntoSingleKnown(rows) {CODE
LOWserver/web/assets/mtr_agg.js151 function normalizeRenderableMTRStats(stats) {CODE
LOWscripts/test_mtr_snapshot_pty.py244def check_incomplete_recording(binary, directory, records, final, log):CODE
LOW⚡scripts/ci/test_select_checks.py20 def test_docs_do_not_trigger_checks(self):CODE
LOW⚡scripts/ci/test_select_checks.py29 def test_printer_selects_go_and_pty_without_packet_acceptance(self):CODE
LOW⚡scripts/ci/test_select_checks.py35 def test_probe_backend_selects_packet_and_integration_checks(self):CODE
LOW⚡scripts/ci/test_select_checks.py41 def test_acceptance_runtime_dependencies_are_not_skipped(self):CODE
LOW⚡scripts/ci/test_select_checks.py68 def test_shared_inputs_and_test_workflow_enable_complete_test_suite(self):CODE
LOW⚡scripts/ci/test_select_checks.py75 def test_cli_changes_trigger_binary_performance_evidence(self):CODE
LOW⚡scripts/ci/test_select_checks.py81 def test_native_filters_are_synchronized(self):CODE
LOW⚡scripts/ci/test_select_checks.py84 def test_own_workflow_does_not_trigger_other_workflows(self):CODE
LOW⚡scripts/ci/test_select_checks.py91 def test_manual_and_failure_enable_all_checks(self):CODE
LOW⚡scripts/ci/test_select_checks.py99 def test_git_error_fails_open(self):CODE
LOW⚡scripts/ci/test_select_checks.py105 def test_zero_and_invalid_refs_fail_open(self):CODE
LOW⚡scripts/ci/test_select_checks.py109 def test_globs_match_root_and_nested_files_without_crossing_single_star(self):CODE
LOW⚡scripts/ci/test_select_checks.py117 def test_only_needed_platforms_start(self):CODE
LOW⚡scripts/ci/test_select_checks.py127 def test_cli_writes_flags_and_fallback_reason(self):CODE
LOWscripts/ci/test_select_checks.py140 def test_shared_rules_trigger_every_native_workflow(self):CODE
LOWscripts/ci/test_select_checks.py172 def test_complete_pr_diff_includes_earlier_commits_not_base_only_changes(self):CODE
LOWscripts/ci/test_select_checks.py186 def test_push_includes_added_deleted_and_both_rename_paths(self):CODE
LOWscripts/regression/test_tos_capture.py44 def test_repeated_tcp_rounds_in_distinct_port_sessions(self):CODE
LOWscripts/regression/test_tos_capture.py52 def test_each_report_session_must_be_captured(self):CODE
LOWscripts/regression/test_tos_capture.py72 def test_rebuild_requires_both_generations_on_wire(self):CODE
LOWscripts/regression/test_tos_capture.py87 def test_udp_session_excludes_unrelated_loopback_traffic(self):CODE
LOWscripts/regression/test_tos_capture.py100 def test_all_eight_bits_checked(self):CODE
LOWscripts/regression/test_tos_capture.py105 def test_loopback_duplicates_are_not_multiple_probes(self):CODE
LOWscripts/regression/test_tos_capture.py116 def test_each_udp_fragment_is_checked(self):CODE
LOWscripts/regression/test_tos_capture.py138 def test_incomplete_capture_fails(self):CODE
Over-Commented Block19 hits · 19 pts
SeverityFileLineSnippetContext
LOWREADME_zh_CN.md401COMMENT
LOWREADME_zh_CN.md581nexttrace --no-rdns www.bbix.netCOMMENT
LOWREADME_zh_CN.md801`LeoMoeAPI` 是本项目官方 API 已停止使用的旧名称,现统一称为 **NextTrace API**,其机器可读的 `data_provider` 规范值为 `NextTrace-API`。为兼容现有脚本,旧值 `LeoMoeACOMMENT
LOWcmd/cmd.go261 usage = usage[:idx] + "TARGET" + usage[end:]COMMENT
LOWcmd/mtr_ui.go461//COMMENT
LOWtrace/mtr_scheduler_test.go3121 // Old provisional final (TTL 8) should have NO data (cleared, not migrated)COMMENT
LOWtrace/mtr_runner.go21// MTR 长驻运行器COMMENT
LOWtrace/mtr_runner.go41 // ProgressThrottle 流式预览最小刷新间隔(默认 200ms)。COMMENT
LOWtrace/mtr_raw.go21 // Legacy round-based mode only.COMMENT
LOWprinter/printer_test.go161}COMMENT
LOWprinter/printer_test.go181// Success: true,COMMENT
LOWprinter/printer_test.go201// Success: false,COMMENT
LOWprinter/printer_test.go221// Success: true,COMMENT
LOWprinter/printer_test.go241COMMENT
LOWprinter/mtr_tui.go121}COMMENT
LOWprinter/mtr_table.go221 }COMMENT
LOWprinter/mtr_table.go441// MTRReportPrint 以 mtr -rzw 风格将最终统计一次性输出到 stdout。COMMENT
LOWfast_trace/fast_trace_test.go21)COMMENT
LOWfast_trace/fast_trace_test.go41 //}()COMMENT
Deep Nesting11 hits · 11 pts
SeverityFileLineSnippetContext
LOWscripts/test_mtr_session_pty.py152CODE
LOWscripts/test_mtr_session_pty.py46CODE
LOWscripts/test_mtr_columns_pty.py27CODE
LOWscripts/test_mtr_columns_pty.py42CODE
LOWscripts/test_mtr_snapshot_pty.py268CODE
LOWscripts/test_mtr_snapshot_pty.py296CODE
LOWscripts/mtr_pty_screen.py27CODE
LOWscripts/mtr_pty_screen.py73CODE
LOWscripts/regression/tos_capture.py19CODE
LOWscripts/regression/tos_capture.py84CODE
LOWscripts/regression/tos_capture.py199CODE
Empty Error Handlers2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHscripts/test_mtr_session_pty.py169except FileNotFoundError:CODE
HIGHscripts/test_mtr_snapshot_pty.py61except UnicodeDecodeError:CODE
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMnt_install.sh3# This file is also served at https://nxtrace.org/nt .COMMENT
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUM.cross_compile.sh43# -------- Build metadata (robust) --------COMMENT