AI Slop Code Risk Monitor

oapi-codegen/oapi-codegen

SlopCodeMonitor badge for oapi-codegen/oapi-codegen Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Generate Go client and server boilerplate from OpenAPI 3 specifications

1.8 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for oapi-codegen/oapi-codegen, a Go project with 8,635 GitHub stars. SynthScan examined 760,372 lines of code across 2067 source files, recording 1186 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 1.8 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.8
Adjusted Signal
1.8
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
8.6K
Stars
Go
Language
760.4K
Lines of Code
2.1K
Files
1.2K
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.1/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 1105 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 5 finding(s).

Agent Over-Engineering Ratio 1.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 76 finding(s).

PR Review Velocity Impact 8.6/100 · LOW

Which changes need focused human review? 1186 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 0MEDIUM 79LOW 1105

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1186 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block1096 hits · 1094 pts
SeverityFileLineSnippetContext
LOWREADME.md661 // The endpoint of the server conforming to this interface, with scheme,COMMENT
LOWcmd/oapi-codegen/oapi-codegen.go1// Copyright 2019 DeepMap, Inc.COMMENT
LOWinternal/test/clients/clients.gen.go601 // with any type of body and a specified content type.COMMENT
LOWinternal/test/clients/clients.gen.go621 // PostJsonWithResponse performs a POST /with_json_body (the `PostJson` operationId) request.COMMENT
LOWinternal/test/clients/responseheaders/doc.go1// Package responseheaders verifies that response headers declared in theCOMMENT
LOWinternal/test/options/compatibility/doc.go1// Package optionscompatibility exercises the compatibility output options.COMMENT
LOW…ternal/test/options/compatibility/compatibility.gen.go101}COMMENT
LOWinternal/test/options/skip_prune/skip_prune_test.go1package optionsskippruneCOMMENT
LOWinternal/test/options/skip_prune/doc.go1// Package optionsskipprune exercises the output-options skip-prune flag:COMMENT
LOW…rnal/test/options/skip_prune/config_default_prune.yaml1# yaml-language-server: $schema=../../../../configuration-schema.jsonCOMMENT
LOWinternal/test/options/type_aliases/doc.go1// Package optionstypealiases exercises output-options.disable-type-aliases-for-type:COMMENT
LOWinternal/test/options/name_normalizer/spec.yaml1# ==========================================================================COMMENT
LOWinternal/test/options/name_normalizer/unset/doc.go1// Package optionsnamenormalizerunset checks that, with name-normalizer unset,COMMENT
LOW…rnal/test/options/name_normalizer/to_camel_case/doc.go1// Package optionsnamenormalizertocamelcase checks that name-normalizer:COMMENT
LOW…lizer/to_camel_case_with_additional_initialisms/doc.go1// Package optionsnamenormalizertocamelcasewithadditionalinitialisms checksCOMMENT
LOW…tions/name_normalizer/to_camel_case_with_digits/doc.go1// Package optionsnamenormalizertocamelcasewithdigits checks thatCOMMENT
LOW…/name_normalizer/to_camel_case_with_initialisms/doc.go1// Package optionsnamenormalizertocamelcasewithinitialisms checks thatCOMMENT
LOWinternal/test/options/struct_tags/doc.go1// Package optionsstructtags exercises the struct-tags output option: structCOMMENT
LOWinternal/test/options/struct_tags_unions/doc.go1// Package optionsstructtagsunions exercises the struct-tags output optionCOMMENT
LOWinternal/test/options/response_getters/spec.yaml1# ==========================================================================COMMENT
LOWinternal/test/options/response_getters/skipped/doc.go1// Package optionsresponsegettersskipped checks that, with skip-response-body-gettersCOMMENT
LOWinternal/test/options/response_getters/enabled/doc.go1// Package optionsresponsegettersenabled checks that, with skip-response-body-gettersCOMMENT
LOWinternal/test/options/content_types/doc.go1// Package optionscontenttypes exercises the content-types output option: aCOMMENT
LOWinternal/test/options/filter/server.yaml1# ==========================================================================COMMENT
LOWinternal/test/options/filter/doc.go1// Package optionsfilter drives generation of the operations/ and tags/ sub-packages,COMMENT
LOWinternal/test/options/yaml_tags/doc.go1// Package optionsyamltags exercises the yaml-tags output option: when enabled,COMMENT
LOWinternal/test/bodies/responses/headerformats/doc.go1// Package responseheaderformats verifies that strict-server response headersCOMMENT
LOW…al/test/bodies/responses/component_inline_union/doc.go1// Package responsescomponentinlineunion verifies that a components/responsesCOMMENT
LOWinternal/test/bodies/responses/content/content_test.go1package responsescontentCOMMENT
LOWinternal/test/bodies/responses/content/doc.go1// Package responsescontent verifies that a components/responses entryCOMMENT
LOWinternal/test/bodies/responses/headers/doc.go1// Package responseheaders verifies that response headers declared on anCOMMENT
LOWinternal/test/bodies/requests/requests.gen.go101type ClientInterface interface {COMMENT
LOWinternal/test/bodies/requests/doc.go1// Package bodiesrequests exercises request bodies combined with parameters in the generatedCOMMENT
LOWinternal/test/bodies/content_types/spec.yaml1# ==========================================================================COMMENT
LOWinternal/test/bodies/content_types/doc.go1// Package bodiescontenttypes exercises request/response content-type handling.COMMENT
LOWinternal/test/bodies/content_types/content_types.gen.go381 // with any type of body and a specified content type.COMMENT
LOWinternal/test/bodies/content_types/content_types.gen.go901 //COMMENT
LOWinternal/test/bodies/content_types/content_types.gen.go921 //COMMENT
LOWinternal/test/bodies/content_types/content_types.gen.go941 //COMMENT
LOWinternal/test/bodies/content_types/text_and_json/doc.go1// Package textandjson verifies strict-server codegen for an operationCOMMENT
LOW…ernal/test/bodies/content_types/text_non_string/doc.go1// Package textnonstring verifies strict-server codegen for text/plainCOMMENT
LOW…test/bodies/content_types/multi_json/multi_json.gen.go881// are not resolved here; the bytes are the spec exactly as embedded byCOMMENT
LOWinternal/test/bodies/content_types/multi_json/doc.go1// Package multijson verifies that an operation declaring multipleCOMMENT
LOWinternal/test/aggregates/anyof/spec.yaml1# ==========================================================================COMMENT
LOWinternal/test/aggregates/anyof/anyof.gen.go1041 // Response body array items are an inline anyOf — no separate named schema.COMMENT
LOWinternal/test/aggregates/anyof/doc.go1// Package aggregatesanyof exercises anyOf/oneOf/allOf union types in multiple forms:COMMENT
LOWinternal/test/aggregates/hoisting/spec_implicit.yaml1# ==========================================================================COMMENT
LOWinternal/test/aggregates/hoisting/doc.go1// Package aggregateshoisting exercises anonymous inner schema hoisting into namedCOMMENT
LOWinternal/test/aggregates/params/doc.go1// Package aggregatesparams covers oneOf/anyOf parameters (issue #2560). AnCOMMENT
LOWinternal/test/aggregates/allof/spec.yaml1# ==========================================================================COMMENT
LOWinternal/test/aggregates/allof/allof_test.go81 // When both schemas have additionalProperties: false,COMMENT
LOWinternal/test/aggregates/allof/doc.go1// Package aggregatesallof exercises allOf composition and additionalProperties mergeCOMMENT
LOWinternal/test/aggregates/allof/config_old_merge.yaml1# yaml-language-server: $schema=../../../../configuration-schema.jsonCOMMENT
LOWinternal/test/aggregates/allof/config_new_merge.yaml1# yaml-language-server: $schema=../../../../configuration-schema.jsonCOMMENT
LOWinternal/test/aggregates/oneof/doc.go1// Package aggregatesoneof exercises oneOf code generation: discriminator-driven unionsCOMMENT
LOWinternal/test/aggregates/matrix/doc.go1// Package matrix is the aggregate-schema (allOf / anyOf / oneOf) test matrix.COMMENT
LOWinternal/test/aggregates/matrix/doc.go21//COMMENT
LOW…est/aggregates/matrix/v1/allof_constraint_oneof/doc.go1// Code generated by specgen from ../../shapes/allof_constraint_oneof.yaml. DO NOT EDIT.COMMENT
LOW…1/allof_constraint_oneof/allof_constraint_oneof.gen.go841 BodyComponentWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFCOMMENT
LOW…1/allof_constraint_oneof/allof_constraint_oneof.gen.go861 BodyDefaultWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn)COMMENT
1036 more matches not shown…
Decorative Section Separators76 hits · 234 pts
SeverityFileLineSnippetContext
MEDIUMinternal/test/options/compatibility/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/compatibility/spec.yaml8# ==========================================================================COMMENT
MEDIUMinternal/test/options/skip_prune/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/skip_prune/spec.yaml7# ==========================================================================COMMENT
MEDIUM…ternal/test/options/skip_prune/spec_default_prune.yaml1# ==========================================================================COMMENT
MEDIUM…ternal/test/options/skip_prune/spec_default_prune.yaml7# ==========================================================================COMMENT
MEDIUMinternal/test/options/type_aliases/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/type_aliases/spec.yaml7# ==========================================================================COMMENT
MEDIUMinternal/test/options/name_normalizer/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/name_normalizer/spec.yaml24# ==========================================================================COMMENT
MEDIUMinternal/test/options/struct_tags/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/struct_tags/spec.yaml8# ==========================================================================COMMENT
MEDIUMinternal/test/options/struct_tags_unions/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/struct_tags_unions/spec.yaml8# ==========================================================================COMMENT
MEDIUMinternal/test/options/response_getters/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/response_getters/spec.yaml14# ==========================================================================COMMENT
MEDIUMinternal/test/options/content_types/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/content_types/spec.yaml9# ==========================================================================COMMENT
MEDIUMinternal/test/options/filter/server.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/filter/server.yaml12# ==========================================================================COMMENT
MEDIUMinternal/test/options/yaml_tags/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/options/yaml_tags/spec.yaml7# ==========================================================================COMMENT
MEDIUMinternal/test/bodies/content_types/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/bodies/content_types/spec.yaml19# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/anyof/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/anyof/spec.yaml11# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/hoisting/spec_explicit.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/hoisting/spec_explicit.yaml9# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/hoisting/spec_implicit.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/hoisting/spec_implicit.yaml11# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/allof/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/allof/spec.yaml12# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/allof/spec_new_merge.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/allof/spec_new_merge.yaml8# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/allof/spec_old_merge.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/aggregates/allof/spec_old_merge.yaml8# ==========================================================================COMMENT
MEDIUMinternal/test/schemas/security/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/schemas/security/spec.yaml8# ==========================================================================COMMENT
MEDIUMinternal/test/schemas/recursive/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/schemas/recursive/spec.yaml9# ==========================================================================COMMENT
MEDIUMinternal/test/schemas/primitives/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/schemas/primitives/spec.yaml11# ==========================================================================COMMENT
MEDIUM⚡internal/test/schemas/deprecated/spec.yaml1# ==========================================================================COMMENT
MEDIUM⚡internal/test/schemas/deprecated/spec.yaml14# ==========================================================================COMMENT
MEDIUM…ternal/test/extensions/skip_optional_pointer/spec.yaml1# ==========================================================================COMMENT
MEDIUM…ternal/test/extensions/skip_optional_pointer/spec.yaml11# ==========================================================================COMMENT
MEDIUMinternal/test/extensions/struct_tags/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/extensions/struct_tags/spec.yaml11# ==========================================================================COMMENT
MEDIUM…est/extensions/struct_tags/spec_extra_tags_params.yaml1# ==========================================================================COMMENT
MEDIUM…est/extensions/struct_tags/spec_extra_tags_params.yaml9# ==========================================================================COMMENT
MEDIUMinternal/test/extensions/x_order/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/extensions/x_order/spec.yaml7# ==========================================================================COMMENT
MEDIUMinternal/test/extensions/x_go_type/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/extensions/x_go_type/spec.yaml12# ==========================================================================COMMENT
MEDIUMinternal/test/openapi31params/spec.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/openapi31params/spec.yaml10# ==========================================================================COMMENT
MEDIUM⚡internal/test/naming/conflicts/spec.yaml1# ==========================================================================COMMENT
MEDIUM⚡internal/test/naming/conflicts/spec.yaml10# ==========================================================================COMMENT
MEDIUMinternal/test/naming/conflicts/spec_importnames.yaml1# ==========================================================================COMMENT
MEDIUMinternal/test/naming/conflicts/spec_importnames.yaml8# ==========================================================================COMMENT
16 more matches not shown…
Hallucination Indicators2 hits · 20 pts
SeverityFileLineSnippetContext
CRITICALpkg/codegen/merge_schemas_v3_test.go368 assert.True(t, result.AdditionalProperties.Schema.Value.Type.Is("string"))CODE
CRITICALpkg/codegen/merge_schemas_v2_test.go339 assert.True(t, result.AdditionalProperties.Schema.Value.Type.Is("string"))CODE
AI Slop Vocabulary3 hits · 12 pts
SeverityFileLineSnippetContext
MEDIUMinternal/test/aggregates/oneof/config_components.yaml4# components.yaml fold: comprehensive oneOf + anyOf marshaling / discriminator cases.COMMENT
MEDIUM⚡internal/test/schemas/deprecated/spec.yaml9# - deprecation/ (comprehensive) (deprecated operations/params/bodies/headers/objects)COMMENT
MEDIUM⚡internal/test/naming/conflicts/spec.yaml9# - name_conflict_resolution (comprehensive conflict resolution patterns A-M)COMMENT
Verbosity Indicators3 hits · 6 pts
SeverityFileLineSnippetContext
LOWpkg/codegen/resolve_names.go21 // Step 1: Generate candidate names for all schemasCOMMENT
LOW⚡pkg/codegen/resolve_names.go33 // Step 2: Resolve collisions iterativelyCOMMENT
LOW⚡pkg/codegen/resolve_names.go36 // Step 3: Build the result mapCOMMENT
Structural Annotation Overuse3 hits · 6 pts
SeverityFileLineSnippetContext
LOWpkg/codegen/resolve_names.go21 // Step 1: Generate candidate names for all schemasCOMMENT
LOW⚡pkg/codegen/resolve_names.go33 // Step 2: Resolve collisions iterativelyCOMMENT
LOW⚡pkg/codegen/resolve_names.go36 // Step 3: Build the result mapCOMMENT
Fake / Example Data3 hits · 3 pts
SeverityFileLineSnippetContext
LOW…test/aggregates/matrix/shapes/anyof_closed_inline.yaml19 - '{"phone": "555-0100"}'CODE
LOWexamples/authenticated-api/echo/server/fake_jws.go28const KeyID = `fake-key-id`CODE
LOWexamples/authenticated-api/stdhttp/server/fake_jws.go28const KeyID = `fake-key-id`CODE