AI Slop Code RIsk Monitor

pallets/click

Python composable command line interface toolkit

16.9 Elevated pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for pallets/click, a Python project with 17,786 GitHub stars. SynthScan examined 39,988 lines of code across 157 source files, recording 619 pattern matches distributed across 16 syntactic categories. The legacy adjusted pattern signal is 16.9 (Elevated pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

16.9
Adjusted Signal
16.9
Raw Pattern Score
100%
Time Factor
2026-10-06
Last Push
17.8K
Stars
Python
Language
40.0K
Lines of Code
157
Files
619
Pattern Hits
2026-10-12
Scan Date
0.13
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 40.3/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 468 finding(s).

Hallucinated Dependency & Supply Chain Risk 9.1/100 · LOW

Are imports declared and package/API names verified? 93 finding(s).

Agent Over-Engineering Ratio 49.9/100 · MEDIUM

Are wrappers, guards, and repeated structures necessary? 489 finding(s).

PR Review Velocity Impact 61.6/100 · HIGH

Which changes need focused human review? 619 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 21MEDIUM 21LOW 577

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 619 distinct pattern matches across 16 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers418 hits · 356 pts
SeverityFileLineSnippetContext
LOWtests/test_parser.py22def test_parser_default_prefixes():CODE
LOWtests/test_parser.py27def test_parser_collects_prefixes():CODE
LOWtests/test_shell_completion.py79def test_group_command_same_option():CODE
LOWtests/test_shell_completion.py153def test_choice_special_characters():CODE
LOWtests/test_shell_completion.py160def test_choice_conflicting_prefix():CODE
LOWtests/test_shell_completion.py227def test_flag_option_with_nargs_option():CODE
LOWtests/test_shell_completion.py336def test_completion_item_data():CODE
LOWtests/test_shell_completion.py357def test_full_source_powershell(runner):CODE
LOWtests/test_shell_completion.py394def test_source_uses_lf_line_endings(monkeypatch):CODE
LOWtests/test_shell_completion.py459def test_zsh_full_complete_with_colons(CODE
LOW⚡tests/test_shell_completion.py497def test_choice_case_sensitive(value, expect):CODE
LOW⚡tests/test_shell_completion.py507def _restore_available_shells(tmpdir):CODE
LOW⚡tests/test_shell_completion.py516def test_add_completion_class():CODE
LOWtests/test_shell_completion.py536def test_add_completion_class_with_name():CODE
LOWtests/test_shell_completion.py562def test_add_completion_class_decorator():CODE
LOWtests/test_shell_completion.py599def test_fish_format_completion_escapes_help():CODE
LOWtests/test_shell_completion.py607def test_powershell_format_completion_escapes_help():CODE
LOWtests/test_basic.py73def test_param_squatting_help_option_name(runner):CODE
LOWtests/test_basic.py90def test_option_reusing_help_flag(runner):CODE
LOWtests/test_basic.py395def test_flag_value_dual_options(runner, default, args, expected):CODE
LOWtests/test_basic.py565def test_choice_argument_enum(runner):CODE
LOWtests/test_basic.py592def test_choice_argument_custom_type(runner):CODE
LOWtests/test_basic.py623def test_choice_argument_none(runner):CODE
LOWtests/test_basic.py651def test_choice_argument_optional_metavar(runner):CODE
LOWtests/test_basic.py678def test_datetime_argument_optional_metavar(runner):CODE
LOWtests/test_basic.py691def test_datetime_option_default(runner):CODE
LOWtests/test_basic.py718def test_datetime_option_custom(runner):CODE
LOWtests/test_basic.py846def test_help_invalid_default(runner):CODE
LOWtests/test_basic.py863def test_version_option_resolves_import_name_to_distribution(runner, monkeypatch):CODE
LOWtests/test_basic.py893def test_version_option_ambiguous_import_name_errors(runner, monkeypatch):CODE
LOWtests/test_basic.py922def test_version_option_unknown_package_errors(runner, monkeypatch):CODE
LOWtests/test_basic.py943def test_custom_version_option(runner, args):CODE
LOWtests/test_basic.py954def test_custom_version_option_receives_context(runner):CODE
LOW⚡tests/test_termui.py230def test_progressbar_init_exceptions(runner):CODE
LOW⚡tests/test_termui.py235def test_progressbar_iter_outside_with_exceptions(runner):CODE
LOW⚡tests/test_termui.py242def test_progressbar_is_iterator(runner, monkeypatch):CODE
LOW⚡tests/test_termui.py597def test_editor_env_passed_through():CODE
LOW⚡tests/test_termui.py607def test_editor_failure_exception():CODE
LOW⚡tests/test_termui.py614def test_editor_nonexistent_exception():CODE
LOWtests/test_termui.py44def test_progressbar_strip_regression(runner, monkeypatch):CODE
LOWtests/test_termui.py60def test_progressbar_length_hint(runner, monkeypatch):CODE
LOWtests/test_termui.py101def test_progressbar_hidden_manual(runner, monkeypatch):CODE
LOWtests/test_termui.py114def test_progressbar_lands_on_final_position(monkeypatch, update_min_steps, drive):CODE
LOWtests/test_termui.py144def test_progressbar_time_per_iteration(runner, avg, expected):CODE
LOWtests/test_termui.py167def test_progressbar_format_eta(runner, eta, expected):CODE
LOWtests/test_termui.py173def test_progressbar_format_pos(runner, pos, length):CODE
LOWtests/test_termui.py186def test_progressbar_format_bar(runner, length, finished, pos, avg, expected):CODE
LOWtests/test_termui.py203def test_progressbar_format_progress_line(CODE
LOWtests/test_termui.py217def test_progressbar_format_progress_line_with_show_func(runner, test_item):CODE
LOWtests/test_termui.py257def test_choices_list_in_prompt(runner, monkeypatch):CODE
LOWtests/test_termui.py285def test_file_prompt_default_format(runner, file_kwargs):CODE
LOWtests/test_termui.py313def test_progressbar_yields_all_items(runner):CODE
LOWtests/test_termui.py341def test_progressbar_item_show_func(runner, monkeypatch):CODE
LOWtests/test_termui.py357def test_progressbar_update_with_item_show_func(runner, monkeypatch):CODE
LOWtests/test_termui.py377def test_progress_bar_update_min_steps(runner):CODE
LOWtests/test_termui.py403def test_getchar_special_key_windows(runner, monkeypatch, special_key_char, key_char):CODE
LOWtests/test_termui.py416def test_getchar_windows_exceptions(runner, monkeypatch, key_char, exc):CODE
LOWtests/test_termui.py558def test_editor_path_normalization(editor_cmd, filenames, expected_args):CODE
LOWtests/test_termui.py585def test_editor_windows_path_normalization(editor_cmd, expected_cmd):CODE
LOWtests/test_termui.py688def _run_get_pager_file_with_real_pager(monkeypatch, capfd, writer, color=False):CODE
358 more matches not shown…
Empty Error Handlers16 hits · 80 pts
SeverityFileLineSnippetContext
HIGHexamples/aliases/aliases.py22except configparser.NoSectionError:CODE
HIGHsrc/click/_winconsole.py204except Exception:CODE
HIGHsrc/click/types.py1393except TypeError:CODE
HIGHsrc/click/termui.py1020except (KeyboardInterrupt, EOFError):CODE
HIGHsrc/click/utils.py45except Exception:CODE
HIGHsrc/click/_compat.py77except Exception:CODE
HIGHsrc/click/_compat.py568except Exception:CODE
HIGHsrc/click/_compat.py170except Exception:CODE
HIGHsrc/click/_termui_impl.py599except BrokenPipeError:CODE
HIGHsrc/click/_termui_impl.py615except BrokenPipeError:CODE
HIGHsrc/click/_termui_impl.py961except termios.error:CODE
HIGHsrc/click/_termui_impl.py629except KeyboardInterrupt:CODE
HIGHsrc/click/testing.py797except OSError:CODE
HIGHsrc/click/testing.py571except Exception:CODE
HIGHsrc/click/testing.py581except Exception:CODE
HIGHsrc/click/decorators.py226except AttributeError:CODE
Unused Imports86 hits · 62 pts
SeverityFileLineSnippetContext
LOWtests/test_basic.py1CODE
LOWtests/test_stream_lifecycle.py40CODE
LOWtests/test_compat.py1CODE
LOWtests/typing/typing_aliased_group.py3CODE
LOWtests/typing/typing_progressbar.py1CODE
LOWsrc/click/_winconsole.py9CODE
LOWsrc/click/_textwrap.py1CODE
LOWsrc/click/globals.py1CODE
LOWsrc/click/__init__.py8CODE
LOWsrc/click/__init__.py10CODE
LOWsrc/click/__init__.py11CODE
LOWsrc/click/__init__.py12CODE
LOWsrc/click/__init__.py13CODE
LOWsrc/click/__init__.py14CODE
LOWsrc/click/__init__.py15CODE
LOWsrc/click/__init__.py16CODE
LOWsrc/click/__init__.py17CODE
LOWsrc/click/__init__.py18CODE
LOWsrc/click/__init__.py19CODE
LOWsrc/click/__init__.py20CODE
LOWsrc/click/__init__.py21CODE
LOWsrc/click/__init__.py22CODE
LOWsrc/click/__init__.py23CODE
LOWsrc/click/__init__.py24CODE
LOWsrc/click/__init__.py25CODE
LOWsrc/click/__init__.py26CODE
LOWsrc/click/__init__.py27CODE
LOWsrc/click/__init__.py28CODE
LOWsrc/click/__init__.py29CODE
LOWsrc/click/__init__.py30CODE
LOWsrc/click/__init__.py31CODE
LOWsrc/click/__init__.py32CODE
LOWsrc/click/__init__.py33CODE
LOWsrc/click/__init__.py34CODE
LOWsrc/click/__init__.py35CODE
LOWsrc/click/__init__.py36CODE
LOWsrc/click/__init__.py37CODE
LOWsrc/click/__init__.py38CODE
LOWsrc/click/__init__.py39CODE
LOWsrc/click/__init__.py40CODE
LOWsrc/click/__init__.py41CODE
LOWsrc/click/__init__.py42CODE
LOWsrc/click/__init__.py43CODE
LOWsrc/click/__init__.py44CODE
LOWsrc/click/__init__.py45CODE
LOWsrc/click/__init__.py46CODE
LOWsrc/click/__init__.py47CODE
LOWsrc/click/__init__.py48CODE
LOWsrc/click/__init__.py49CODE
LOWsrc/click/__init__.py50CODE
LOWsrc/click/__init__.py51CODE
LOWsrc/click/__init__.py52CODE
LOWsrc/click/__init__.py53CODE
LOWsrc/click/__init__.py54CODE
LOWsrc/click/__init__.py55CODE
LOWsrc/click/__init__.py56CODE
LOWsrc/click/__init__.py57CODE
LOWsrc/click/__init__.py58CODE
LOWsrc/click/__init__.py59CODE
LOWsrc/click/__init__.py60CODE
26 more matches not shown…
Decorative Section Separators12 hits · 54 pts
SeverityFileLineSnippetContext
MEDIUM⚡tests/test_stream_lifecycle.py57# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py59# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py108# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py110# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py184# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py186# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py292# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py294# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py369# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py371# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py483# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡tests/test_stream_lifecycle.py490# ---------------------------------------------------------------------------COMMENT
Excessive Try-Catch Wrapping23 hits · 27 pts
SeverityFileLineSnippetContext
LOWtests/test_commands.py160 except Exception as e:CODE
MEDIUMtests/test_commands.py157def parse_args(self, ctx, args):CODE
LOWexamples/imagepipe/imagepipe.py97 except Exception as e:CODE
LOWexamples/imagepipe/imagepipe.py117 except Exception as e:CODE
LOWsrc/click/_winconsole.py204 except Exception:CODE
LOWsrc/click/core.py2978 except Exception:STRING
LOWsrc/click/utils.py45 except Exception:CODE
MEDIUMsrc/click/_compat.py74def __del__(self) -> None:CODE
LOW⚡src/click/_compat.py136 except Exception:CODE
LOW⚡src/click/_compat.py139 except Exception:CODE
LOW⚡src/click/_compat.py149 except Exception:CODE
LOW⚡src/click/_compat.py157 except Exception:CODE
LOW⚡src/click/_compat.py166 except Exception:CODE
LOW⚡src/click/_compat.py170 except Exception:CODE
LOWsrc/click/_compat.py77 except Exception:CODE
LOWsrc/click/_compat.py124 except Exception:CODE
LOWsrc/click/_compat.py543 except Exception:CODE
LOWsrc/click/_compat.py561 except Exception:CODE
LOWsrc/click/_compat.py568 except Exception:CODE
LOWsrc/click/_termui_impl.py602 except Exception as e:CODE
LOWsrc/click/testing.py571 except Exception:CODE
LOWsrc/click/testing.py581 except Exception:CODE
LOWsrc/click/testing.py705 except Exception as e:CODE
Deep Nesting21 hits · 20 pts
SeverityFileLineSnippetContext
LOWtests/test_arguments.py166CODE
LOWexamples/termui/termui.py145CODE
LOWsrc/click/_textwrap.py66CODE
LOWsrc/click/core.py887CODE
LOWsrc/click/core.py1132CODE
LOWsrc/click/core.py1515CODE
LOWsrc/click/core.py3449CODE
LOWsrc/click/core.py3614CODE
LOWsrc/click/types.py307CODE
LOWsrc/click/parser.py51CODE
LOWsrc/click/parser.py169CODE
LOWsrc/click/parser.py327CODE
LOWsrc/click/termui.py168CODE
LOWsrc/click/termui.py289CODE
LOWsrc/click/shell_completion.py696CODE
LOWsrc/click/_termui_impl.py520CODE
LOWsrc/click/_termui_impl.py799CODE
LOWsrc/click/testing.py399CODE
LOWsrc/click/testing.py596CODE
LOWsrc/click/decorators.py421CODE
LOWsrc/click/decorators.py501CODE
Cross-File Repetition4 hits · 20 pts
SeverityFileLineSnippetContext
HIGHREADME.md0simple program that greets name for a total of count times.STRING
HIGHtests/typing/typing_help_option.py0simple program that greets name for a total of count times.STRING
HIGHtests/typing/typing_simple_example.py0simple program that greets name for a total of count times.STRING
HIGHdocs/index.md0simple program that greets name for a total of count times.STRING
Self-Referential Comments5 hits · 13 pts
SeverityFileLineSnippetContext
MEDIUMtests/test_testing.py691 # Create a writer backed by the real fd 2, simulating a handlerCOMMENT
MEDIUMtests/test_utils/test_open_file.py107 # Create a test file to get the expected permissions for new filesCOMMENT
MEDIUMexamples/repo/repo.py51 # Create a repo object and remember it as the context object. FromCOMMENT
MEDIUMsrc/click/_winconsole.py1# This module is based on the excellent work by Adam Bartoš whoCOMMENT
MEDIUMsrc/click/core.py2749 # Define the conversion function based on nargs and type.STRING
AI Structural Patterns13 hits · 13 pts
SeverityFileLineSnippetContext
LOWsrc/click/core.py370CODE
LOWsrc/click/core.py1065CODE
LOWsrc/click/core.py2406CODE
LOWsrc/click/core.py3149CODE
LOWsrc/click/types.py1107CODE
LOWsrc/click/termui.py139CODE
LOWsrc/click/termui.py154CODE
LOWsrc/click/termui.py168CODE
LOWsrc/click/termui.py403CODE
LOWsrc/click/termui.py423CODE
LOWsrc/click/termui.py443CODE
LOWsrc/click/termui.py641CODE
LOWsrc/click/_termui_impl.py44CODE
Fake / Example Data6 hits · 9 pts
SeverityFileLineSnippetContext
LOW⚡tests/test_formatting.py430 text = "Lorem ipsum dolor sit amet, consectetur adipiscing elit"CODE
LOW⚡tests/test_formatting.py430 text = "Lorem ipsum dolor sit amet, consectetur adipiscing elit"CODE
LOW⚡tests/test_formatting.py431 formatter = click.HelpFormatter(width=len(" Lorem ipsum dolor sit amet,"))CODE
LOW⚡tests/test_formatting.py431 formatter = click.HelpFormatter(width=len(" Lorem ipsum dolor sit amet,"))CODE
LOW⚡tests/test_formatting.py435 expected = " Lorem ipsum dolor sit amet,\n consectetur adipiscing elit\n"CODE
LOW⚡tests/test_formatting.py435 expected = " Lorem ipsum dolor sit amet,\n consectetur adipiscing elit\n"CODE
Over-Commented Block9 hits · 9 pts
SeverityFileLineSnippetContext
LOWsrc/click/core.py461 allow_interspersed_args = command.allow_interspersed_argsCOMMENT
LOWsrc/click/core.py1581 # standalone mode is disabled, otherwise collect the message and theCOMMENT
LOWsrc/click/core.py1741 command_class: type[Command] | None = NoneCOMMENT
LOWsrc/click/core.py2841 # Legacy case: provide a temporarily manipulated context to the callbackCOMMENT
LOWsrc/click/types.py1401#: perspective this appears to just be the same as `STRING` butCOMMENT
LOWsrc/click/parser.py341 returnCOMMENT
LOWsrc/click/shell_completion.py461 except IndexError:COMMENT
LOWsrc/click/_termui_impl.py881 import msvcrtCOMMENT
LOWsrc/click/_termui_impl.py901 # resulting Unicode string reads as "a with grave" + "capital H".COMMENT
Cross-Language Confusion1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHsrc/click/_termui_impl.py819 return subprocess.Popen(args, stderr=null).wait()CODE
Modern Structural Boilerplate2 hits · 2 pts
SeverityFileLineSnippetContext
LOWtests/test_context.py462 def set_level(self, ctx: Context, param: Parameter, value: str) -> None:CODE
LOWsrc/click/core.py961 def set_parameter_source(self, name: str, source: ParameterSource) -> None:CODE
Dead Code1 hit · 2 pts
SeverityFileLineSnippetContext
MEDIUMtests/test_utils/test_echo_via_pager.py36CODE
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippetContext
LOWtests/test_options.py1992 # Print the value received by the callback as-is, so we can check for it.COMMENT
AI Slop Vocabulary1 hit · 1 pts
SeverityFileLineSnippetContext
MEDIUMtests/test_types/test_File.py14 """Ensures that the error handling in ``click.File`` is robust.STRING