Home / ohmybash / oh-my-bash
AI Slop Code RIsk Monitor

ohmybash/oh-my-bash

A delightful community-driven framework for managing your bash configuration, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

17.8 Elevated pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for ohmybash/oh-my-bash, a Shell project with 7,742 GitHub stars. SynthScan examined 35,107 lines of code across 303 source files, recording 303 pattern matches distributed across 10 syntactic categories. The legacy adjusted pattern signal is 17.8 (Elevated pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

17.8
Adjusted Signal
17.8
Raw Pattern Score
100%
Time Factor
2026-09-02
Last Push
7.7K
Stars
Shell
Language
35.1K
Lines of Code
303
Files
303
Pattern Hits
2026-10-12
Scan Date
0.00
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 27.2/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 180 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 43.5/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 123 finding(s).

PR Review Velocity Impact 56.4/100 · HIGH

Which changes need focused human review? 303 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 1MEDIUM 137LOW 165

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 303 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators123 hits · 400 pts
SeverityFileLineSnippetContext
MEDIUMtools/autossh.sh2# ------------------------------------------------------------------------------COMMENT
MEDIUMtools/autossh.sh9# ------------------------------------------------------------------------------COMMENT
MEDIUMplugins/bashmarks/bashmarks.plugin.sh12#------------------------------------------------------------------------------COMMENT
MEDIUMplugins/bashmarks/bashmarks.plugin.sh36#------------------------------------------------------------------------------COMMENT
MEDIUMplugins/nvm/nvm.plugin.sh16#------------------------------------------------------------------------------COMMENT
MEDIUMplugins/nvm/nvm.plugin.sh101#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/svn.completion.sh10# ------------------------------------------------------------COMMENT
MEDIUMcompletions/svn.completion.sh27# ------------------------------------------------------------COMMENT
MEDIUMcompletions/sdkman.completion.sh4#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/gradle.completion.sh3#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/salt.completion.sh5#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/vagrant.completion.sh5#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/defaults.completion.sh14#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/gh.completion.sh5#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/go.completion.sh5#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/git_flow.completion.sh4# ===================COMMENT
MEDIUMcompletions/git_flow.completion.sh16# ------------COMMENT
MEDIUMcompletions/git_flow.completion.sh42# --------------COMMENT
MEDIUMcompletions/virtualbox.completion.sh17#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/grunt.completion.sh9#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/maven.completion.sh10#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/vault.completion.sh9# ---------------------------------------------------------------------------COMMENT
MEDIUMcompletions/vault.completion.sh15# ---------------------------------------------------------------------------COMMENT
MEDIUMcompletions/django.completion.sh8# =================================COMMENT
MEDIUMcompletions/django.completion.sh21# ==========COMMENT
MEDIUMcompletions/django.completion.sh32# ============COMMENT
MEDIUMcompletions/hub.completion.sh5#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/git_flow_avh.completion.sh5#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/git_flow_avh.completion.sh7# ===================COMMENT
MEDIUMcompletions/git_flow_avh.completion.sh19# ------------COMMENT
MEDIUMcompletions/git_flow_avh.completion.sh45# --------------COMMENT
MEDIUMcompletions/fallback/docker.bash3#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/fallback/docker.bash10#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/fallback/docker-compose.bash2#------------------------------------------------------------------------------COMMENT
MEDIUMcompletions/fallback/docker-compose.bash10#------------------------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh29#------------------------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh31# -----------------------------COMMENT
MEDIUM⚡lib/base.sh33# -----------------------------COMMENT
MEDIUM⚡lib/base.sh36# --------------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh42# --------------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh46# ------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh50# ------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh56# ------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh61# ------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh69# ------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh80# -------------------------------COMMENT
MEDIUM⚡lib/base.sh82# -------------------------------COMMENT
MEDIUM⚡lib/base.sh87# ---------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh110# ---------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh119# ---------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh125# ---------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh176# ---------------------------COMMENT
MEDIUM⚡lib/base.sh178# ---------------------------COMMENT
MEDIUM⚡lib/base.sh181# -----------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh185# -----------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh189# ------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh193# ---------------------------COMMENT
MEDIUM⚡lib/base.sh195# ---------------------------COMMENT
MEDIUM⚡lib/base.sh198# -------------------------------------------------------------------COMMENT
MEDIUM⚡lib/base.sh212# -------------------------------------------------------------------COMMENT
63 more matches not shown…
Over-Commented Block141 hits · 138 pts
SeverityFileLineSnippetContext
LOWtools/git-prompt.sh1# bash/zsh git prompt supportCOMMENT
LOWtools/git-prompt.sh21# you would put in $PS1 before and after the status stringCOMMENT
LOWtools/git-prompt.sh41# bash.showDirtyState variable, which defaults to true onceCOMMENT
LOWtools/git-prompt.sh61#COMMENT
LOWtools/git-prompt.sh81#COMMENT
LOWtools/git-prompt.sh281__git_eread ()COMMENT
LOWtools/git-prompt.sh321 *) return $exitCOMMENT
LOWtools/git-prompt.sh341 # with the user's environment) and that variable should beCOMMENT
LOWtools/bash-preexec.sh1# bash-preexec.sh -- Bash support for ZSH-like 'preexec' and 'precmd' functions.COMMENT
LOWtools/bash-preexec.sh21# e.g.COMMENT
LOWtools/git-completion.bash1# bash/zsh completion support for core Git.COMMENT
LOWtools/git-completion.bash21# 2) Add the following line to your .bashrc/.zshrc:COMMENT
LOWtools/git-completion.bash41# Compatible with bash 3.2.57.COMMENT
LOWtools/git-completion.bash181# © 2009-2010, Bash Completion MaintainersCOMMENT
LOWtools/git-completion.bash201# RELEASE: 2.xCOMMENT
LOWtools/git-completion.bash401# the completion script.COMMENT
LOWtools/git-completion.bash681 # employ the heuristic used by git checkout and git switchCOMMENT
LOWtools/git-completion.bash801 doneCOMMENT
LOWtools/git-completion.bash1241# $1: short option nameCOMMENT
LOWtools/git-completion.bash1501# git-switch and git-checkout.COMMENT
LOWtools/git-completion.bash3281 add,*) # usage: git worktree add [<options>] <path> [<commit-ish>]COMMENT
LOWtools/update-wiki-themes.sh1#!/usr/bin/env bashCOMMENT
LOWplugins/bashmarks/bashmarks.plugin.sh1#! bash oh-my-bash.moduleCOMMENT
LOWplugins/bashmarks/bashmarks.plugin.sh21# * Neither the name of Huy Nguyen nor the names of contributors may beCOMMENT
LOWplugins/progress/progress.plugin.sh1#! bash oh-my-bash.moduleCOMMENT
LOWplugins/nvm/nvm.plugin.sh1#! bash oh-my-bash.moduleCOMMENT
LOWplugins/nvm/nvm.plugin.sh21#COMMENT
LOWplugins/tmux-autoattach/tmux-autoattach.plugin.sh1#! bash oh-my-bash.moduleCOMMENT
LOWplugins/tmux/tmux.plugin.bash1#! bash oh-my-bash.moduleCOMMENT
LOWplugins/npm/npm.plugin.sh1#! bash oh-my-bash.moduleCOMMENT
LOWplugins/git/git.plugin.sh561alias gke='\gitk --all $(git log --walk-reflogs --pretty=%h)'COMMENT
LOWcompletions/fabric-completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/fabric-completion.sh21# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHERCOMMENT
LOWcompletions/svn.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/svn.completion.sh21# Unless required by applicable law or agreed to in writing,COMMENT
LOWcompletions/svn.completion.sh121# 2. svn+ssh:// lists servers from .ssh/known_hostsCOMMENT
LOWcompletions/svn.completion.sh201# - there is a "real" parser to check for what is available and deduce whatCOMMENT
LOWcompletions/svn.completion.sh221# SVN_BASH_USERNAME: usernames suggested for --usernameCOMMENT
LOWcompletions/svn.completion.sh301 # Parse arguments and set various variables about what was found.COMMENT
LOWcompletions/svn.completion.sh621 # property names...COMMENT
LOWcompletions/gulp.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/makefile.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/sdkman.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/salt.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/vagrant.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/defaults.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/defaults.completion.sh161# This file is licensed under the BSD license, as follows:COMMENT
LOWcompletions/defaults.completion.sh181# disclaimed. In no event shall the copyright owner or contributors be liableCOMMENT
LOWcompletions/git_flow.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/git_flow.completion.sh21#COMMENT
LOWcompletions/virtualbox.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/packer.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/packer.completion.sh21# team in general.COMMENT
LOWcompletions/grunt.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/kubectl.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/vault.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/django.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/django.completion.sh21# ==========COMMENT
LOWcompletions/hub.completion.sh1#! bash oh-my-bash.moduleCOMMENT
LOWcompletions/docker-machine.completion.sh1#! bash oh-my-bash.moduleCOMMENT
81 more matches not shown…
Self-Referential Comments12 hits · 36 pts
SeverityFileLineSnippetContext
MEDIUMtools/bash-preexec.sh135# This function is installed as part of the PROMPT_COMMAND;COMMENT
MEDIUMtools/bash-preexec.sh143# This function is installed as part of the PROMPT_COMMAND.COMMENT
MEDIUMtools/bash-preexec.sh203# This function is installed as the DEBUG trap. It is invoked before eachCOMMENT
MEDIUMtools/git-completion.bash176# The following function is based on code from:COMMENT
MEDIUMtools/git-completion.bash408# This function is equivalent toCOMMENT
MEDIUMplugins/dotnet/dotnet.plugin.sh28#Create a new .NET project or file.COMMENT
MEDIUMplugins/dotnet/dotnet.plugin.sh44#Create a NuGet package.COMMENT
MEDIUMcompletions/defaults.completion.sh161# This file is licensed under the BSD license, as follows:COMMENT
MEDIUMcompletions/fallback/docker.bash672# This function is needed for key-specific completions.COMMENT
MEDIUMcompletions/fallback/docker-compose.bash64# This function is needed for key-specific completions.COMMENT
MEDIUMlib/shopt.sh97# Define a variable containing a path and you will be able to cd into it regardless of the directory you're inCOMMENT
MEDIUMlib/readlink.sh3## This module provides the following function which can be used as "readlinkCOMMENT
Redundant / Tautological Comments15 hits · 22 pts
SeverityFileLineSnippetContext
LOWoh-my-bash.sh35# Set OSH_CUSTOM to the path where your custom config filesCOMMENT
LOWoh-my-bash.sh43# Set OSH_CACHE_DIR to the path where cache files should be createdCOMMENT
LOWplugins/starship/starship.plugin.sh3# Check if starship is installedCOMMENT
LOWplugins/cargo/cargo.plugin.sh4# Set CARGO_HOME to default if not already setCOMMENT
LOWplugins/cargo/cargo.plugin.sh7# Check if the directory existsCOMMENT
LOWplugins/zoxide/zoxide.plugin.sh3# Check if zoxide is installedCOMMENT
LOWplugins/jump/jump.plugin.sh3# Check if jump is installedCOMMENT
LOWplugins/virtualenvwrapper/virtualenvwrapper.plugin.sh3# Check if virtualenvwrapper is installedCOMMENT
LOWplugins/fzf/fzf.plugin.sh3# Check if fzf is installedCOMMENT
LOWplugins/git/git.plugin.sh42# Check if main exists and use instead of masterCOMMENT
LOWcompletions/fabric-completion.sh43# Set command to get time of last file modification as seconds since EpochCOMMENT
LOWcompletions/drush.completion.sh27 # Set IFS to newline (locally), since we only use newline separators, andCOMMENT
LOWthemes/binaryanomaly/binaryanomaly.theme.sh3# Set term to 256color mode, if 256color is not supported, colors won't work properlyCOMMENT
LOWthemes/rana/rana.theme.sh118 # Check if the current directory is in a Git repository.COMMENT
LOWthemes/pzq/pzq.theme.sh73 # Check if the current directory is in a Git repository.COMMENT
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHtools/git-completion.bash1510# logic, as requested by the user.COMMENT
Slop Phrases2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMtools/git-completion.bash26# If you use complex aliases of form '!f() { ... }; f', you can use the nullCOMMENT
MEDIUMtools/git-completion.bash33# like completion, you can use __git_complete:COMMENT
Example Usage Blocks4 hits · 6 pts
SeverityFileLineSnippetContext
LOWcompletions/gulp.completion.sh8# Usage:COMMENT
LOWcompletions/grunt.completion.sh17# Usage:COMMENT
LOWlib/utils.sh89# Usage:COMMENT
LOWcustom/aliases/example.aliases.sh4# Usage:COMMENT
AI Slop Vocabulary3 hits · 4 pts
SeverityFileLineSnippetContext
LOWtools/git-prompt.sh315 # simply return early if the prompt should notCOMMENT
LOWcompletions/fallback/docker.bash1179 # if result empty, just use filename completion as fallbackCOMMENT
LOWthemes/hawaii50/hawaii50.theme.sh107 # If no virtual info, just returnCOMMENT
Structural Annotation Overuse1 hit · 2 pts
SeverityFileLineSnippetContext
LOWtools/bash-preexec.sh56# WARNING: This variable is no longer used and should not be relied upon.COMMENT
TODO Padding1 hit · 2 pts
SeverityFileLineSnippetContext
LOWlib/omb-prompt-base.sh177 # TODO: consider adding minimal status information for hg and svnCOMMENT