Home / openai / gpt-oss
AI Slop Code RIsk Monitor

openai/gpt-oss

gpt-oss-120b and gpt-oss-20b are two open-weight language models by OpenAI

7.7 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for openai/gpt-oss, a Python project with 20,458 GitHub stars. SynthScan examined 25,090 lines of code across 122 source files, recording 158 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 7.7 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

7.7
Adjusted Signal
7.7
Raw Pattern Score
100%
Time Factor
2026-07-24
Last Push
20.5K
Stars
Python
Language
25.1K
Lines of Code
122
Files
158
Pattern Hits
2026-10-12
Scan Date
0.06
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 17.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 89 finding(s).

Hallucinated Dependency & Supply Chain Risk 5.9/100 · LOW

Are imports declared and package/API names verified? 31 finding(s).

Agent Over-Engineering Ratio 20.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 78 finding(s).

PR Review Velocity Impact 33.8/100 · MEDIUM

Which changes need focused human review? 158 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 7MEDIUM 7LOW 144

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 158 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers37 hits · 39 pts
SeverityFileLineSnippetContext
LOWgpt_oss/evals/gpqa_eval.py28def format_multichoice_question(row):STRING
LOWgpt_oss/evals/healthbench_eval.py213def _aggregate_get_clipped_mean(CODE
LOWgpt_oss/evals/healthbench_eval.py535def physician_completions_main(CODE
LOWgpt_oss/tools/tool.py13def _maybe_update_inplace_and_validate_channel(CODE
LOWgpt_oss/tools/tool.py46 def output_channel_should_match_input_channel(self) -> bool:CODE
LOWgpt_oss/tools/python_docker/docker_tool.py82def call_python_script_with_uv(script: str) -> str:CODE
LOWgpt_oss/tools/simple_browser/simple_browser_tool.py60def function_the_model_can_call(CODE
LOWgpt_oss/tools/simple_browser/simple_browser_tool.py78def _tiktoken_vocabulary_lengths(enc_name: str) -> list[int]:CODE
LOWgpt_oss/tools/simple_browser/page_contents.py93def _tiktoken_vocabulary_lengths(enc_name: str) -> list[int]:CODE
LOWgpt_oss/triton/model.py39 def _compute_concentration_and_inv_freq(self) -> torch.Tensor:CODE
LOWgpt_oss/torch/model.py85 def _compute_concentration_and_inv_freq(self) -> torch.Tensor:CODE
LOWgpt_oss/responses_api/api_server.py452 def _resolve_browser_recipient(CODE
LOWgpt_oss/responses_api/api_server.py478 def _ensure_reasoning_item_id(self) -> str:CODE
LOW⚡tests/test_api_endpoints.py10 def test_basic_response_creation(self, api_client, sample_request_data):CODE
LOW⚡tests/test_api_endpoints.py18 def test_response_with_high_reasoning(self, api_client, sample_request_data):CODE
LOW⚡tests/test_api_endpoints.py26 def test_response_with_medium_reasoning(self, api_client, sample_request_data):CODE
LOW⚡tests/test_api_endpoints.py34 def test_response_with_invalid_model(self, api_client, sample_request_data):CODE
LOW⚡tests/test_api_endpoints.py40 def test_response_with_empty_input(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py54 def test_response_with_custom_temperature(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py77 def test_response_with_session_id(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py95 def test_response_continuation(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py114 def test_missing_required_fields(self, api_client):CODE
LOWtests/test_api_endpoints.py119 def test_invalid_reasoning_effort(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py133 def test_extremely_long_input(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py151 def test_function_tool_integration(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py181 def test_response_time_under_threshold(self, api_client, sample_request_data, performance_timer):CODE
LOWtests/test_api_endpoints.py190 def test_multiple_sequential_requests(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py201 def test_usage_object_structure(self, api_client, sample_request_data):CODE
LOWtests/test_api_endpoints.py219 def test_usage_increases_with_longer_input(self, api_client, sample_request_data):CODE
LOWtests/gpt_oss/tools/simple_browser/test_backend.py32def test_youcom_backend_api_key_param():CODE
LOWtests/gpt_oss/tools/simple_browser/test_backend.py39async def test_youcom_backend_search(mock_session_get):CODE
LOWtests/gpt_oss/tools/simple_browser/test_backend.py62async def test_youcom_backend_fetch(mock_session_get):CODE
LOW_build/gpt_oss_build_backend/backend.py73def prepare_metadata_for_build_wheel(CODE
LOW_build/gpt_oss_build_backend/backend.py100def get_requires_for_build_wheel(CODE
LOW_build/gpt_oss_build_backend/backend.py115def get_requires_for_build_sdist(CODE
LOW_build/gpt_oss_build_backend/backend.py126def get_requires_for_build_editable(CODE
LOWgpt-oss-mcp-server/build-system-prompt.py55def post_process_tools_description(CODE
Empty Error Handlers7 hits · 35 pts
SeverityFileLineSnippetContext
HIGHgpt_oss/chat.py368except FileNotFoundError:CODE
HIGHgpt_oss/tools/simple_browser/simple_browser_tool.py202except json.JSONDecodeError:CODE
HIGHgpt_oss/responses_api/api_server.py552except Exception:CODE
HIGHgpt_oss/responses_api/api_server.py842except RuntimeError:CODE
HIGHexamples/streamlit/streamlit_chat.py246except Exception:CODE
HIGHexamples/streamlit/streamlit_chat.py261except Exception:CODE
HIGHexamples/gradio/gradio_chat.py63except json.JSONDecodeError:CODE
Excessive Try-Catch Wrapping27 hits · 29 pts
SeverityFileLineSnippetContext
LOWgpt_oss/chat.py205 except Exception as e:CODE
LOWgpt_oss/chat.py211 except Exception as e:CODE
LOWgpt_oss/evals/responses_sampler.py77 except Exception as e:CODE
LOWgpt_oss/evals/chat_completions_sampler.py85 except Exception as e:CODE
LOWgpt_oss/evals/__main__.py197 except Exception as e:CODE
LOWgpt_oss/tools/simple_browser/simple_browser_tool.py84 except Exception as e:CODE
LOWgpt_oss/tools/simple_browser/simple_browser_tool.py441 except Exception as e:CODE
LOWgpt_oss/tools/simple_browser/simple_browser_tool.py472 except Exception as e:CODE
LOWgpt_oss/tools/simple_browser/simple_browser_tool.py653 except Exception:CODE
MEDIUMgpt_oss/tools/simple_browser/simple_browser_tool.py650def extract_domain(url):CODE
LOWgpt_oss/tools/simple_browser/backend.py40except Exception:CODE
LOWgpt_oss/tools/simple_browser/page_contents.py149 except Exception:CODE
LOWgpt_oss/responses_api/api_server.py113 except Exception as body_exc:CODE
LOWgpt_oss/responses_api/api_server.py145 except Exception as e:CODE
MEDIUMgpt_oss/responses_api/api_server.py146 print(f"Error parsing tokens: {e}")CODE
LOWgpt_oss/responses_api/api_server.py229 except Exception as e:CODE
MEDIUMgpt_oss/responses_api/api_server.py230 print(f"Error processing browser tool arguments: {e}")CODE
LOW⚡gpt_oss/responses_api/api_server.py351 except Exception:CODE
LOW⚡gpt_oss/responses_api/api_server.py355 except Exception:CODE
LOW⚡gpt_oss/responses_api/api_server.py359 except Exception:CODE
LOWgpt_oss/responses_api/api_server.py552 except Exception:CODE
LOWgpt_oss/responses_api/inference/ollama.py111 except Exception as e:CODE
LOWexamples/streamlit/streamlit_chat.py148 except Exception:STRING
LOWexamples/streamlit/streamlit_chat.py246 except Exception:STRING
LOWexamples/streamlit/streamlit_chat.py261 except Exception:STRING
LOWexamples/gradio/gradio_chat.py104 except Exception:STRING
LOWexamples/gradio/gradio_chat.py173 except Exception as e:STRING
Unused Imports29 hits · 28 pts
SeverityFileLineSnippetContext
LOWgpt_oss/evals/types.py2CODE
LOWgpt_oss/evals/types.py2CODE
LOWgpt_oss/tools/apply_patch.py10CODE
LOWgpt_oss/tools/simple_browser/simple_browser_tool.py8CODE
LOWgpt_oss/tools/simple_browser/backend.py5CODE
LOWgpt_oss/tools/simple_browser/backend.py6CODE
LOWgpt_oss/tools/simple_browser/backend.py12CODE
LOWgpt_oss/tools/simple_browser/backend.py15CODE
LOWgpt_oss/tools/simple_browser/backend.py25CODE
LOWgpt_oss/tools/simple_browser/backend.py25CODE
LOWgpt_oss/tools/simple_browser/backend.py25CODE
LOWgpt_oss/tools/simple_browser/__init__.py1CODE
LOWgpt_oss/tools/simple_browser/__init__.py2CODE
LOWgpt_oss/tools/simple_browser/__init__.py2CODE
LOWgpt_oss/tools/simple_browser/page_contents.py5CODE
LOWgpt_oss/metal/scripts/create-local-model.py6CODE
LOWgpt_oss/triton/moe.py12CODE
LOWgpt_oss/responses_api/inference/triton.py1CODE
LOWgpt_oss/responses_api/inference/triton.py7CODE
LOWgpt_oss/responses_api/inference/triton.py9CODE
LOWgpt_oss/responses_api/inference/vllm.py7CODE
LOWtests/conftest.py4CODE
LOWtests/conftest.py5CODE
LOWtests/test_api_endpoints.py1CODE
LOWtests/test_api_endpoints.py3CODE
LOWtests/test_api_endpoints.py5CODE
LOWtests/test_api_endpoints.py5CODE
LOWtests/test_api_endpoints.py5CODE
LOWtests/gpt_oss/tools/simple_browser/test_backend.py2CODE
Deep Nesting26 hits · 26 pts
SeverityFileLineSnippetContext
LOWgpt_oss/chat.py61CODE
LOWgpt_oss/evals/responses_sampler.py37CODE
LOWgpt_oss/evals/aime_eval.py20CODE
LOWgpt_oss/evals/report.py27CODE
LOWgpt_oss/evals/healthbench_eval.py247CODE
LOWgpt_oss/tools/apply_patch.py280CODE
LOWgpt_oss/tools/apply_patch.py389CODE
LOWgpt_oss/tools/apply_patch.py459CODE
LOWgpt_oss/tools/apply_patch.py177CODE
LOWgpt_oss/tools/python_docker/docker_tool.py144CODE
LOWgpt_oss/tools/python_docker/docker_tool.py337CODE
LOWgpt_oss/metal/examples/chat.py38CODE
LOWgpt_oss/triton/model.py422CODE
LOWgpt_oss/vllm/token_generator.py13CODE
LOWgpt_oss/responses_api/api_server.py100CODE
LOWgpt_oss/responses_api/api_server.py118CODE
LOWgpt_oss/responses_api/api_server.py1136CODE
LOWgpt_oss/responses_api/api_server.py493CODE
LOWgpt_oss/responses_api/inference/ollama.py60CODE
LOWgpt_oss/responses_api/inference/ollama.py64CODE
LOWgpt_oss/responses_api/inference/ollama.py119CODE
LOWgpt_oss/responses_api/inference/ollama.py67CODE
LOWtests/test_api_endpoints.py62CODE
LOWexamples/streamlit/streamlit_chat.py105CODE
LOWexamples/gradio/gradio_chat.py18CODE
LOWexamples/agents-sdk-python/example.py24CODE
Over-Commented Block20 hits · 20 pts
SeverityFileLineSnippetContext
LOWgpt_oss/metal/include/gpt-oss.h1#pragma onceCOMMENT
LOWgpt_oss/metal/include/gpt-oss/macros.h1#pragma onceCOMMENT
LOWgpt_oss/metal/source/generate.c1#include <assert.h>COMMENT
LOWgpt_oss/metal/source/model.c1#include <assert.h>COMMENT
LOWgpt_oss/metal/source/context.c1#include <assert.h>COMMENT
LOWgpt_oss/metal/source/tokenizer.c1#include <assert.h>COMMENT
LOWgpt_oss/metal/source/include/internal/macros.h1#pragma onceCOMMENT
LOWgpt_oss/metal/source/include/internal/macros.h21#elseCOMMENT
LOWgpt_oss/metal/source/include/internal/macros.h41 #define GPTOSS_LIKELY(condition) (!!(condition))COMMENT
LOWgpt_oss/metal/source/include/internal/macros.h61 #if defined(__GNUC__) && (__GNUC__ >= 9) && !defined(__INTEL_COMPILER)COMMENT
LOWgpt_oss/metal/source/include/internal/macros.h81 #define GPTOSS_ALIGN(alignment) __declspec(align(alignment))COMMENT
LOWgpt_oss/metal/source/include/internal/macros.h101 #define GPTOSS_INTERNAL_SYMBOL __attribute__((__visibility__("internal")))COMMENT
LOWgpt_oss/metal/source/include/internal/model.h1#pragma onceCOMMENT
LOWgpt_oss/metal/source/include/internal/kernel-args.h1#pragma onceCOMMENT
LOWgpt_oss/metal/source/include/internal/kernel-args.h21#define MLP_GATE_Bn 16COMMENT
LOWgpt_oss/metal/source/include/internal/metal-kernels.h1#pragma onceCOMMENT
LOWgpt_oss/responses_api/utils.py81# fake_tokens = [200005, 35644, 200008, 976, 1825, 31064, 25, 392, 25216, 29400, 290, 11122, 306, 52768, 2117, 16842, 14COMMENT
LOWgpt_oss/responses_api/utils.py101# 32455,COMMENT
LOWgpt_oss/responses_api/inference/stub.py81]COMMENT
LOWgpt_oss/responses_api/inference/stub.py101# 316,COMMENT
Slop Phrases1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMgpt_oss/generate.py2# Note: This script is for demonstration purposes only. It is not designed for production use.COMMENT
AI Structural Patterns3 hits · 3 pts
SeverityFileLineSnippetContext
LOWgpt_oss/tools/simple_browser/simple_browser_tool.py110CODE
LOWgpt_oss/triton/attention.py203CODE
LOWgpt_oss/responses_api/api_server.py118CODE
Modern Structural Boilerplate3 hits · 3 pts
SeverityFileLineSnippetContext
LOWgpt_oss/tools/simple_browser/backend.py33logger = logging.getLogger(__name__)CODE
LOWgpt_oss/tools/simple_browser/__init__.py4__all__ = [CODE
LOWgpt_oss/tools/simple_browser/page_contents.py22logger = logging.getLogger(__name__)CODE
Decorative Section Separators1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMgpt_oss/metal/CMakeLists.txt191# ------------------------------------------------------------------------COMMENT
Modern AI Meta-Vocabulary1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMREADME.md14Welcome to the gpt-oss series, [OpenAI's open-weight models](https://openai.com/open-models/) designed for powerful reasCODE
Fake / Example Data2 hits · 2 pts
SeverityFileLineSnippetContext
LOWcompatibility-test/tools.ts149 '{"rows":[{"id":1,"email":"user@example.com"},{"id":2,"email":"foo@bar.com"}],"row_count":2}',CODE
LOWcompatibility-test/tools.ts149 '{"rows":[{"id":1,"email":"user@example.com"},{"id":2,"email":"foo@bar.com"}],"row_count":2}',CODE
Self-Referential Comments1 hit · 1 pts
SeverityFileLineSnippetContext
MEDIUMexamples/gradio/gradio_chat.py179# Create the Gradio interfaceSTRING